@smartledger/keys 1.1.0 → 1.2.1

package/dist/lumen-keys.js

@@ -83,76 +83,6 @@ var LumenKeys = (() => {
     }
   });
 
-  // ../crypto/dist/types.js
-  var require_types = __commonJS({
-    "../crypto/dist/types.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-    }
-  });
-
-  // ../crypto/dist/registry.js
-  var require_registry = __commonJS({
-    "../crypto/dist/registry.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.globalRegistry = exports2.SignatureSuiteRegistry = void 0;
-      var SignatureSuiteRegistry3 = class {
-        constructor() {
-          __publicField(this, "suites", /* @__PURE__ */ new Map());
-        }
-        /**
-         * Register a signature suite implementation
-         */
-        register(suite) {
-          if (this.suites.has(suite.suiteId)) {
-            throw new Error(`Signature suite already registered: ${suite.suiteId}`);
-          }
-          this.suites.set(suite.suiteId, suite);
-        }
-        /**
-         * Get a signature suite by ID
-         * @throws Error if suite is not registered
-         */
-        getSuite(suiteId) {
-          const suite = this.suites.get(suiteId);
-          if (!suite) {
-            throw new Error(`Unknown signature suite: ${suiteId}. Available: ${this.listSuites().join(", ")}`);
-          }
-          return suite;
-        }
-        /**
-         * Check if a suite is registered
-         */
-        hasSuite(suiteId) {
-          return this.suites.has(suiteId);
-        }
-        /**
-         * List all registered suite IDs
-         */
-        listSuites() {
-          return [...this.suites.keys()];
-        }
-        /**
-         * Unregister a suite (primarily for testing)
-         */
-        unregister(suiteId) {
-          return this.suites.delete(suiteId);
-        }
-        /**
-         * Clear all registered suites (primarily for testing)
-         */
-        clear() {
-          this.suites.clear();
-        }
-      };
-      exports2.SignatureSuiteRegistry = SignatureSuiteRegistry3;
-      exports2.globalRegistry = new SignatureSuiteRegistry3();
-    }
-  });
-
   // node_modules/@noble/hashes/utils.js
   function isBytes(a2) {
     return a2 instanceof Uint8Array || ArrayBuffer.isView(a2) && a2.constructor.name === "Uint8Array";
@@ -1027,2599 +957,119 @@ var LumenKeys = (() => {
     }
   });
 
-  // ../crypto/dist/utils.js
-  var require_utils = __commonJS({
-    "../crypto/dist/utils.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o2, m2, k2, k22) {
-        if (k22 === void 0) k22 = k2;
-        var desc = Object.getOwnPropertyDescriptor(m2, k2);
-        if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
-          desc = { enumerable: true, get: function() {
-            return m2[k2];
-          } };
-        }
-        Object.defineProperty(o2, k22, desc);
-      }) : (function(o2, m2, k2, k22) {
-        if (k22 === void 0) k22 = k2;
-        o2[k22] = m2[k2];
-      }));
-      var __setModuleDefault = exports2 && exports2.__setModuleDefault || (Object.create ? (function(o2, v2) {
-        Object.defineProperty(o2, "default", { enumerable: true, value: v2 });
-      }) : function(o2, v2) {
-        o2["default"] = v2;
-      });
-      var __importStar = exports2 && exports2.__importStar || /* @__PURE__ */ (function() {
-        var ownKeys = function(o2) {
-          ownKeys = Object.getOwnPropertyNames || function(o3) {
-            var ar = [];
-            for (var k2 in o3) if (Object.prototype.hasOwnProperty.call(o3, k2)) ar[ar.length] = k2;
-            return ar;
-          };
-          return ownKeys(o2);
-        };
-        return function(mod) {
-          if (mod && mod.__esModule) return mod;
-          var result = {};
-          if (mod != null) {
-            for (var k2 = ownKeys(mod), i2 = 0; i2 < k2.length; i2++) if (k2[i2] !== "default") __createBinding(result, mod, k2[i2]);
-          }
-          __setModuleDefault(result, mod);
-          return result;
-        };
-      })();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.canonicalizeJson = canonicalizeJson;
-      exports2.stringToBytes = stringToBytes;
-      exports2.bytesToString = bytesToString;
-      exports2.bytesToHex = bytesToHex2;
-      exports2.hexToBytes = hexToBytes2;
-      exports2.bytesToBase64Url = bytesToBase64Url;
-      exports2.base64UrlToBytes = base64UrlToBytes;
-      exports2.constantTimeEqual = constantTimeEqual;
-      exports2.zeroBytes = zeroBytes;
-      exports2.hashBytes = hashBytes2;
-      function canonicalizeJson(obj) {
-        if (obj === null)
-          return "null";
-        if (typeof obj !== "object")
-          return JSON.stringify(obj);
-        if (Array.isArray(obj)) {
-          return "[" + obj.map(canonicalizeJson).join(",") + "]";
-        }
-        const keys = Object.keys(obj).sort();
-        const pairs = keys.map((key) => `"${key}":${canonicalizeJson(obj[key])}`);
-        return "{" + pairs.join(",") + "}";
-      }
-      function stringToBytes(str) {
-        return new TextEncoder().encode(str);
-      }
-      function bytesToString(bytes) {
-        return new TextDecoder().decode(bytes);
-      }
-      function bytesToHex2(bytes) {
-        return Array.from(bytes).map((b2) => b2.toString(16).padStart(2, "0")).join("");
-      }
-      function hexToBytes2(hex) {
-        if (hex.length % 2 !== 0) {
-          throw new Error("Hex string must have even length");
-        }
-        const bytes = new Uint8Array(hex.length / 2);
-        for (let i2 = 0; i2 < hex.length; i2 += 2) {
-          bytes[i2 / 2] = parseInt(hex.slice(i2, i2 + 2), 16);
-        }
-        return bytes;
-      }
-      function bytesToBase64Url(bytes) {
-        const base64 = Buffer.from(bytes).toString("base64");
-        return base64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
-      }
-      function base64UrlToBytes(base64url) {
-        let base64 = base64url.replace(/-/g, "+").replace(/_/g, "/");
-        const padding = base64.length % 4;
-        if (padding) {
-          base64 += "=".repeat(4 - padding);
-        }
-        return new Uint8Array(Buffer.from(base64, "base64"));
-      }
-      function constantTimeEqual(a2, b2) {
-        if (a2.length !== b2.length)
-          return false;
-        let result = 0;
-        for (let i2 = 0; i2 < a2.length; i2++) {
-          result |= a2[i2] ^ b2[i2];
-        }
-        return result === 0;
-      }
-      function zeroBytes(bytes) {
-        bytes.fill(0);
-      }
-      async function hashBytes2(bytes, algorithm) {
-        if (algorithm === "sha256") {
-          const crypto = await Promise.resolve().then(() => __importStar((init_crypto_browser_shim(), __toCommonJS(crypto_browser_shim_exports))));
-          return new Uint8Array(crypto.createHash("sha256").update(bytes).digest());
-        } else if (algorithm === "sha512") {
-          const crypto = await Promise.resolve().then(() => __importStar((init_crypto_browser_shim(), __toCommonJS(crypto_browser_shim_exports))));
-          return new Uint8Array(crypto.createHash("sha512").update(bytes).digest());
-        } else if (algorithm === "sha3-256") {
-          const crypto = await Promise.resolve().then(() => __importStar((init_crypto_browser_shim(), __toCommonJS(crypto_browser_shim_exports))));
-          return new Uint8Array(crypto.createHash("sha3-256").update(bytes).digest());
-        }
-        throw new Error(`Unsupported hash algorithm: ${algorithm}`);
-      }
-    }
-  });
-
-  // ../crypto/dist/signing.js
-  var require_signing = __commonJS({
-    "../crypto/dist/signing.js"(exports2) {
-      "use strict";
+  // ../../node_modules/dilithium-crystals/dist/index.js
+  var require_dist = __commonJS({
+    "../../node_modules/dilithium-crystals/dist/index.js"(exports, module) {
       init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.signAgentResponse = signAgentResponse;
-      exports2.verifySignedEnvelope = verifySignedEnvelope;
-      var utils_1 = require_utils();
-      async function signAgentResponse(agentMeta, payload, primaryKey, primaryKeyBytes, registry, secondaryKey, secondaryKeyBytes) {
-        const canonicalPayload = (0, utils_1.canonicalizeJson)(payload);
-        const payloadBytes = (0, utils_1.stringToBytes)(canonicalPayload);
-        const signatures = [];
-        const primarySuite = registry.getSuite(primaryKey.suiteId);
-        const primaryHashAlg = getHashAlgorithm(primaryKey.suiteId);
-        const primaryHash = await (0, utils_1.hashBytes)(payloadBytes, primaryHashAlg);
-        const primarySig = await primarySuite.sign(primaryKeyBytes, primaryHash);
-        signatures.push({
-          suiteId: primaryKey.suiteId,
-          keyId: primaryKey.keyId,
-          hashAlgorithm: primaryHashAlg,
-          payloadHash: (0, utils_1.bytesToBase64Url)(primaryHash),
-          signature: (0, utils_1.bytesToBase64Url)(primarySig)
-        });
-        if (secondaryKey && secondaryKeyBytes) {
-          const secondarySuite = registry.getSuite(secondaryKey.suiteId);
-          const secondaryHashAlg = getHashAlgorithm(secondaryKey.suiteId);
-          const secondaryHash = await (0, utils_1.hashBytes)(payloadBytes, secondaryHashAlg);
-          const secondarySig = await secondarySuite.sign(secondaryKeyBytes, secondaryHash);
-          signatures.push({
-            suiteId: secondaryKey.suiteId,
-            keyId: secondaryKey.keyId,
-            hashAlgorithm: secondaryHashAlg,
-            payloadHash: (0, utils_1.bytesToBase64Url)(secondaryHash),
-            signature: (0, utils_1.bytesToBase64Url)(secondarySig)
-          });
+      var dilithium = (function() {
+        var A, I, g, C = {};
+        function B(A2, I3) {
+          if (0 === A2) return I3;
+          throw new Error("Dilithium error: " + A2);
         }
-        const signatureMetadata = {
-          format: "lumen.signature.v1",
-          mode: signatures.length > 1 ? "hybrid" : "single",
-          signatures
-        };
-        if (signatures.length > 1 && agentMeta.cryptoProfile.primarySignatureSuite) {
-          signatureMetadata.policy = {
-            threshold: "all",
-            requiredSuites: [agentMeta.cryptoProfile.primarySignatureSuite]
-          };
+        function Q(A2, I3) {
+          return new Uint8Array(new Uint8Array(C.HEAPU8.buffer, A2, I3));
         }
-        return {
-          agent: agentMeta.agentId,
-          version: agentMeta.version,
-          timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-          payload,
-          _signature: signatureMetadata
-        };
-      }
-      async function verifySignedEnvelope(envelope, registry, publicKeys) {
-        const results = [];
-        const canonicalPayload = (0, utils_1.canonicalizeJson)(envelope.payload);
-        const payloadBytes = (0, utils_1.stringToBytes)(canonicalPayload);
-        for (const sigEntry of envelope._signature.signatures) {
+        function i(A2) {
           try {
-            const suite = registry.getSuite(sigEntry.suiteId);
-            const publicKey = publicKeys.get(sigEntry.keyId);
-            if (!publicKey) {
-              results.push({
-                suiteId: sigEntry.suiteId,
-                keyId: sigEntry.keyId,
-                valid: false,
-                error: "Public key not found"
-              });
-              continue;
-            }
-            const computedHash = await (0, utils_1.hashBytes)(payloadBytes, sigEntry.hashAlgorithm);
-            const expectedHash = (0, utils_1.base64UrlToBytes)(sigEntry.payloadHash);
-            if (!arraysEqual(computedHash, expectedHash)) {
-              results.push({
-                suiteId: sigEntry.suiteId,
-                keyId: sigEntry.keyId,
-                valid: false,
-                error: "Payload hash mismatch"
-              });
-              continue;
-            }
-            const signature = (0, utils_1.base64UrlToBytes)(sigEntry.signature);
-            const valid = await suite.verify(publicKey, computedHash, signature);
-            results.push({
-              suiteId: sigEntry.suiteId,
-              keyId: sigEntry.keyId,
-              valid,
-              error: valid ? void 0 : "Signature verification failed"
-            });
-          } catch (error) {
-            results.push({
-              suiteId: sigEntry.suiteId,
-              keyId: sigEntry.keyId,
-              valid: false,
-              error: error instanceof Error ? error.message : String(error)
-            });
-          }
-        }
-        const policyMet = checkPolicy(envelope._signature, results);
-        return {
-          valid: policyMet && results.every((r2) => r2.valid),
-          details: {
-            signatureResults: results,
-            policyMet,
-            timestamp: (/* @__PURE__ */ new Date()).toISOString()
-          }
-        };
-      }
-      function checkPolicy(signature, results) {
-        const policy = signature.policy;
-        if (!policy) {
-          return results.every((r2) => r2.valid);
-        }
-        const validResults = results.filter((r2) => r2.valid);
-        if (policy.requiredSuites) {
-          const requiredValid = policy.requiredSuites.every((suiteId) => validResults.some((r2) => r2.suiteId === suiteId));
-          if (!requiredValid)
-            return false;
-        }
-        switch (policy.threshold) {
-          case "any":
-            return validResults.length > 0;
-          case "all":
-            return validResults.length === results.length;
-          case "quorum":
-            return validResults.length >= (policy.quorumCount || 0);
-          default:
-            return validResults.length === results.length;
-        }
-      }
-      function getHashAlgorithm(suiteId) {
-        if (suiteId.startsWith("bsv-ecdsa"))
-          return "sha256";
-        if (suiteId.startsWith("ml-dsa"))
-          return "sha3-256";
-        if (suiteId.startsWith("fn-dsa"))
-          return "sha3-256";
-        if (suiteId.startsWith("slh-dsa"))
-          return "sha256";
-        return "sha256";
-      }
-      function arraysEqual(a2, b2) {
-        if (a2.length !== b2.length)
-          return false;
-        for (let i2 = 0; i2 < a2.length; i2++) {
-          if (a2[i2] !== b2[i2])
-            return false;
-        }
-        return true;
-      }
-    }
-  });
-
-  // ../crypto/dist/key-registry.js
-  var require_key_registry = __commonJS({
-    "../crypto/dist/key-registry.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.KeyRegistry = exports2.InMemoryKeyStorage = void 0;
-      var InMemoryKeyStorage3 = class {
-        constructor() {
-          __publicField(this, "keys", /* @__PURE__ */ new Map());
-        }
-        async store(keyId, keypair, meta) {
-          this.keys.set(keyId, { keypair, meta });
-        }
-        async load(keyId) {
-          return this.keys.get(keyId) || null;
-        }
-        async list(filter) {
-          const allMeta = Array.from(this.keys.values()).map((k2) => k2.meta);
-          if (!filter) {
-            return allMeta;
+            C._free(A2);
+          } catch (A3) {
+            setTimeout((function() {
+              throw A3;
+            }), 0);
           }
-          return allMeta.filter((meta) => {
-            return Object.entries(filter).every(([key, value]) => {
-              if (key === "usage" && Array.isArray(value)) {
-                return value.some((u2) => meta.usage.includes(u2));
-              }
-              return meta[key] === value;
-            });
-          });
         }
-        async delete(keyId) {
-          this.keys.delete(keyId);
-        }
-        async updateMeta(keyId, updates) {
-          const existing = this.keys.get(keyId);
-          if (!existing) {
-            throw new Error(`Key not found: ${keyId}`);
+        C.ready = new Promise((function(A, I) {
+          function g(A2) {
+            return g = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(A3) {
+              return typeof A3;
+            } : function(A3) {
+              return A3 && "function" == typeof Symbol && A3.constructor === Symbol && A3 !== Symbol.prototype ? "symbol" : typeof A3;
+            }, g(A2);
           }
-          this.keys.set(keyId, {
-            keypair: existing.keypair,
-            meta: { ...existing.meta, ...updates }
-          });
-        }
-        /**
-         * Clear all keys (testing only).
-         */
-        clear() {
-          this.keys.clear();
-        }
-      };
-      exports2.InMemoryKeyStorage = InMemoryKeyStorage3;
-      var KeyRegistry3 = class {
-        constructor(storage = new InMemoryKeyStorage3()) {
-          __publicField(this, "storage");
-          this.storage = storage;
-        }
-        /**
-         * Register a new keypair with metadata.
-         */
-        async registerKey(keyId, keypair, suiteId, options = {}) {
-          const meta = {
-            keyId,
-            suiteId,
-            createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-            expiresAt: options.expiresAt,
-            usage: options.usage || ["signing"],
-            cryptoProfileVersion: options.cryptoProfileVersion || "1.0.0",
-            status: options.status || "active"
-          };
-          await this.storage.store(keyId, keypair, meta);
-          return meta;
-        }
-        /**
-         * Get a keypair and its metadata.
-         */
-        async getKey(keyId) {
-          return await this.storage.load(keyId);
-        }
-        /**
-         * Get only the public key (no private key).
-         */
-        async getPublicKey(keyId) {
-          const result = await this.storage.load(keyId);
-          if (!result)
-            return null;
-          return {
-            publicKey: result.keypair.publicKey,
-            meta: result.meta
+          (Q = {}).onAbort = I, Q.onRuntimeInitialized = function() {
+            try {
+              Q._dilithiumjs_public_key_bytes(), A(Q);
+            } catch (A2) {
+              I(A2);
+            }
           };
-        }
-        /**
-         * List all keys matching optional filter.
-         */
-        async listKeys(filter) {
-          return await this.storage.list(filter);
-        }
-        /**
-         * List only active, non-expired keys.
-         */
-        async listActiveKeys(filter) {
-          const allKeys = await this.storage.list(filter);
-          const now = /* @__PURE__ */ new Date();
-          return allKeys.filter((meta) => {
-            if (meta.status && meta.status !== "active") {
-              return false;
+          var C, B, Q = void 0 !== Q ? Q : {}, i = Object.assign({}, Q), E = function(A2, I3) {
+            throw I3;
+          }, o = "object" == ("undefined" == typeof window ? "undefined" : g(window)), n = "function" == typeof importScripts, r = "object" == ("undefined" == typeof process ? "undefined" : g(process)) && "object" == g(process.versions) && "string" == typeof process.versions.node, t = "";
+          if (r) {
+            var a = eval("require")("fs"), e = eval("require")("path");
+            t = n ? e.dirname(t) + "/" : __dirname + "/", C = function(A2, I3) {
+              var g2 = x(A2);
+              return g2 ? I3 ? g2 : g2.toString() : (A2 = q(A2) ? new URL(A2) : e.normalize(A2), a.readFileSync(A2, I3 ? void 0 : "utf8"));
+            }, B = function(A2) {
+              var I3 = C(A2, true);
+              return I3.buffer || (I3 = new Uint8Array(I3)), I3;
+            }, function(A2, I3, g2) {
+              var C3 = !(arguments.length > 3 && void 0 !== arguments[3]) || arguments[3], B2 = x(A2);
+              B2 && I3(B2), A2 = q(A2) ? new URL(A2) : e.normalize(A2), a.readFile(A2, C3 ? void 0 : "utf8", (function(A3, B3) {
+                A3 ? g2(A3) : I3(C3 ? B3.buffer : B3);
+              }));
+            }, !Q.thisProgram && process.argv.length > 1 && process.argv[1].replace(/\\/g, "/"), process.argv.slice(2), "undefined" != typeof module && (module.exports = Q), process.on("uncaughtException", (function(A2) {
+              if (!("unwind" === A2 || A2 instanceof p || A2.context instanceof p)) throw A2;
+            })), E = function(A2, I3) {
+              throw process.exitCode = A2, I3;
+            }, Q.inspect = function() {
+              return "[Emscripten Module object]";
+            };
+          } else (o || n) && (n ? t = self.location.href : "undefined" != typeof document && document.currentScript && (t = document.currentScript.src), t = 0 !== t.indexOf("blob:") ? t.substr(0, t.replace(/[?#].*/, "").lastIndexOf("/") + 1) : "", C = function(A2) {
+            try {
+              var I3 = new XMLHttpRequest();
+              return I3.open("GET", A2, false), I3.send(null), I3.responseText;
+            } catch (I4) {
+              var g2 = x(A2);
+              if (g2) return (function(A3) {
+                for (var I5 = [], g3 = 0; g3 < A3.length; g3++) {
+                  var C3 = A3[g3];
+                  C3 > 255 && (C3 &= 255), I5.push(String.fromCharCode(C3));
+                }
+                return I5.join("");
+              })(g2);
+              throw I4;
             }
-            if (meta.expiresAt && new Date(meta.expiresAt) < now) {
-              return false;
+          }, n && (B = function(A2) {
+            try {
+              var I3 = new XMLHttpRequest();
+              return I3.open("GET", A2, false), I3.responseType = "arraybuffer", I3.send(null), new Uint8Array(I3.response);
+            } catch (I4) {
+              var g2 = x(A2);
+              if (g2) return g2;
+              throw I4;
             }
-            return true;
+          }), function(A2, I3, g2) {
+            var C3 = new XMLHttpRequest();
+            C3.open("GET", A2, true), C3.responseType = "arraybuffer", C3.onload = function() {
+              if (200 == C3.status || 0 == C3.status && C3.response) I3(C3.response);
+              else {
+                var B2 = x(A2);
+                B2 ? I3(B2.buffer) : g2();
+              }
+            }, C3.onerror = g2, C3.send(null);
+          }, function(A2) {
+            return document.title = A2;
           });
-        }
-        /**
-         * Rotate a key: generate new keypair, mark old as 'rotated'.
-         *
-         * Returns the new key's metadata.
-         */
-        async rotateKey(oldKeyId, newKeyId, newKeypair) {
-          const oldKey = await this.storage.load(oldKeyId);
-          if (!oldKey) {
-            throw new Error(`Cannot rotate: key not found: ${oldKeyId}`);
+          Q.print || console.log.bind(console);
+          var f, D = Q.printErr || console.error.bind(console);
+          Object.assign(Q, i), i = null, Q.arguments && Q.arguments, Q.thisProgram && Q.thisProgram, Q.quit && (E = Q.quit), Q.wasmBinary && (f = Q.wasmBinary);
+          var c, G = Q.noExitRuntime || true;
+          "object" != ("undefined" == typeof WebAssembly ? "undefined" : g(WebAssembly)) && U("no native wasm support detected");
+          var h, y, u, s, F = false;
+          var Y = [], N = [], w = [];
+          var S = 0, k = null, H = null;
+          function U(A2) {
+            throw Q.onAbort && Q.onAbort(A2), D(A2 = "Aborted(" + A2 + ")"), F = true, 1, A2 += ". Build with -sASSERTIONS for more info.", new WebAssembly.RuntimeError(A2);
           }
-          await this.storage.updateMeta(oldKeyId, {
-            status: "rotated"
-          });
-          await this.registerKey(newKeyId, newKeypair, oldKey.meta.suiteId, {
-            usage: oldKey.meta.usage,
-            cryptoProfileVersion: oldKey.meta.cryptoProfileVersion,
-            expiresAt: oldKey.meta.expiresAt,
-            status: "active"
-          });
-          await this.storage.updateMeta(newKeyId, {
-            rotatedFrom: oldKeyId
-          });
-          const result = await this.storage.load(newKeyId);
-          return result.meta;
-        }
-        /**
-         * Revoke a key (marks as unusable, but doesn't delete).
-         */
-        async revokeKey(keyId, reason) {
-          await this.storage.updateMeta(keyId, {
-            status: "revoked",
-            revokedAt: (/* @__PURE__ */ new Date()).toISOString()
-          });
-        }
-        /**
-         * Delete a key permanently (use with caution).
-         */
-        async deleteKey(keyId) {
-          await this.storage.delete(keyId);
-        }
-        /**
-         * Mark expired keys as 'expired' status.
-         * Returns count of keys marked expired.
-         */
-        async markExpiredKeys() {
-          const allKeys = await this.storage.list();
-          const now = /* @__PURE__ */ new Date();
-          let count = 0;
-          for (const meta of allKeys) {
-            if (meta.expiresAt && new Date(meta.expiresAt) < now && meta.status === "active") {
-              await this.storage.updateMeta(meta.keyId, {
-                status: "expired"
-              });
-              count++;
-            }
+          var R, d, M = "data:application/octet-stream;base64,";
+          function J(A2) {
+            return A2.startsWith(M);
           }
-          return count;
-        }
-        /**
-         * Cleanup: delete keys that have been revoked/expired for longer than retention period.
-         *
-         * @param retentionDays How many days to keep revoked/expired keys (default: 90)
-         */
-        async pruneOldKeys(retentionDays = 90) {
-          const allKeys = await this.storage.list();
-          const cutoffDate = /* @__PURE__ */ new Date();
-          cutoffDate.setDate(cutoffDate.getDate() - retentionDays);
-          let count = 0;
-          for (const meta of allKeys) {
-            const shouldPrune = meta.status === "revoked" && meta.revokedAt && new Date(meta.revokedAt) < cutoffDate || meta.status === "expired" && meta.expiresAt && new Date(meta.expiresAt) < cutoffDate;
-            if (shouldPrune) {
-              await this.storage.delete(meta.keyId);
-              count++;
-            }
-          }
-          return count;
-        }
-      };
-      exports2.KeyRegistry = KeyRegistry3;
-    }
-  });
-
-  // ../crypto/dist/errors.js
-  var require_errors = __commonJS({
-    "../crypto/dist/errors.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.ComplianceViolationError = exports2.InvalidKeyParametersError = exports2.CryptoOperationError = exports2.InvalidSignatureError = exports2.SuiteNotFoundError = exports2.SuiteNotAllowedError = exports2.KeyInvalidStateError = exports2.KeyExpiredError = exports2.KeyNotFoundError = exports2.SmartLedgerCryptoError = void 0;
-      var SmartLedgerCryptoError = class extends Error {
-        constructor(message, code) {
-          super(message);
-          __publicField(this, "code");
-          this.code = code;
-          this.name = this.constructor.name;
-          Error.captureStackTrace(this, this.constructor);
-        }
-      };
-      exports2.SmartLedgerCryptoError = SmartLedgerCryptoError;
-      var KeyNotFoundError = class extends SmartLedgerCryptoError {
-        constructor(keyId) {
-          super(`Key not found: ${keyId}`, "KEY_NOT_FOUND");
-          __publicField(this, "keyId");
-          this.keyId = keyId;
-        }
-      };
-      exports2.KeyNotFoundError = KeyNotFoundError;
-      var KeyExpiredError = class extends SmartLedgerCryptoError {
-        constructor(keyId, expiresAt) {
-          super(`Key expired: ${keyId} (expired at ${expiresAt})`, "KEY_EXPIRED");
-          __publicField(this, "keyId");
-          __publicField(this, "expiresAt");
-          this.keyId = keyId;
-          this.expiresAt = expiresAt;
-        }
-      };
-      exports2.KeyExpiredError = KeyExpiredError;
-      var KeyInvalidStateError = class extends SmartLedgerCryptoError {
-        constructor(keyId, currentState, requiredState) {
-          super(`Key in invalid state: ${keyId} (current: ${currentState}, required: ${requiredState})`, "KEY_INVALID_STATE");
-          __publicField(this, "keyId");
-          __publicField(this, "currentState");
-          __publicField(this, "requiredState");
-          this.keyId = keyId;
-          this.currentState = currentState;
-          this.requiredState = requiredState;
-        }
-      };
-      exports2.KeyInvalidStateError = KeyInvalidStateError;
-      var SuiteNotAllowedError = class extends SmartLedgerCryptoError {
-        constructor(suiteId, profileName) {
-          const profileMsg = profileName ? ` in profile ${profileName}` : "";
-          super(`Suite not allowed: ${suiteId}${profileMsg}`, "SUITE_NOT_ALLOWED");
-          __publicField(this, "suiteId");
-          __publicField(this, "profileName");
-          this.suiteId = suiteId;
-          this.profileName = profileName;
-        }
-      };
-      exports2.SuiteNotAllowedError = SuiteNotAllowedError;
-      var SuiteNotFoundError = class extends SmartLedgerCryptoError {
-        constructor(suiteId) {
-          super(`Suite not found: ${suiteId}`, "SUITE_NOT_FOUND");
-          __publicField(this, "suiteId");
-          this.suiteId = suiteId;
-        }
-      };
-      exports2.SuiteNotFoundError = SuiteNotFoundError;
-      var InvalidSignatureError = class extends SmartLedgerCryptoError {
-        constructor(keyId, message = "Signature verification failed") {
-          super(message, "INVALID_SIGNATURE");
-          __publicField(this, "keyId");
-          this.keyId = keyId;
-        }
-      };
-      exports2.InvalidSignatureError = InvalidSignatureError;
-      var CryptoOperationError = class extends SmartLedgerCryptoError {
-        constructor(operation, message, cause) {
-          super(`Cryptographic operation failed (${operation}): ${message}`, "CRYPTO_OPERATION_FAILED");
-          __publicField(this, "operation");
-          __publicField(this, "cause");
-          this.operation = operation;
-          this.cause = cause;
-        }
-      };
-      exports2.CryptoOperationError = CryptoOperationError;
-      var InvalidKeyParametersError = class extends SmartLedgerCryptoError {
-        constructor(message) {
-          super(`Invalid key parameters: ${message}`, "INVALID_KEY_PARAMETERS");
-        }
-      };
-      exports2.InvalidKeyParametersError = InvalidKeyParametersError;
-      var ComplianceViolationError = class extends SmartLedgerCryptoError {
-        constructor(profileName, violation) {
-          super(`Compliance violation in profile ${profileName}: ${violation}`, "COMPLIANCE_VIOLATION");
-          __publicField(this, "profileName");
-          __publicField(this, "violation");
-          this.profileName = profileName;
-          this.violation = violation;
-        }
-      };
-      exports2.ComplianceViolationError = ComplianceViolationError;
-    }
-  });
-
-  // ../crypto/dist/stateless.js
-  var require_stateless = __commonJS({
-    "../crypto/dist/stateless.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.setGlobalRegistry = setGlobalRegistry;
-      exports2.signUsingSuite = signUsingSuite;
-      exports2.verifyUsingSuite = verifyUsingSuite;
-      exports2.generateKeypairUsingSuite = generateKeypairUsingSuite;
-      exports2.listAvailableSuites = listAvailableSuites;
-      var registry_js_1 = require_registry();
-      var errors_js_1 = require_errors();
-      var globalRegistry = null;
-      function setGlobalRegistry(registry) {
-        globalRegistry = registry;
-      }
-      function getRegistry() {
-        if (!globalRegistry) {
-          globalRegistry = new registry_js_1.SignatureSuiteRegistry();
-        }
-        return globalRegistry;
-      }
-      async function signUsingSuite(suiteId, privateKey, message) {
-        const registry = getRegistry();
-        if (!registry.hasSuite(suiteId)) {
-          throw new errors_js_1.SuiteNotFoundError(suiteId);
-        }
-        try {
-          const suite = registry.getSuite(suiteId);
-          return await suite.sign(privateKey, message);
-        } catch (error) {
-          throw new errors_js_1.CryptoOperationError("sign", error instanceof Error ? error.message : "Unknown error", error instanceof Error ? error : void 0);
-        }
-      }
-      async function verifyUsingSuite(suiteId, publicKey, message, signature) {
-        const registry = getRegistry();
-        if (!registry.hasSuite(suiteId)) {
-          throw new errors_js_1.SuiteNotFoundError(suiteId);
-        }
-        try {
-          const suite = registry.getSuite(suiteId);
-          return await suite.verify(publicKey, message, signature);
-        } catch (error) {
-          throw new errors_js_1.CryptoOperationError("verify", error instanceof Error ? error.message : "Unknown error", error instanceof Error ? error : void 0);
-        }
-      }
-      async function generateKeypairUsingSuite(suiteId) {
-        const registry = getRegistry();
-        if (!registry.hasSuite(suiteId)) {
-          throw new errors_js_1.SuiteNotFoundError(suiteId);
-        }
-        try {
-          const suite = registry.getSuite(suiteId);
-          return await suite.generateKeypair();
-        } catch (error) {
-          throw new errors_js_1.CryptoOperationError("generateKeypair", error instanceof Error ? error.message : "Unknown error", error instanceof Error ? error : void 0);
-        }
-      }
-      function listAvailableSuites() {
-        const registry = getRegistry();
-        return registry.listSuites();
-      }
-    }
-  });
-
-  // ../../node_modules/@noble/secp256k1/index.js
-  var secp256k1_exports = {};
-  __export(secp256k1_exports, {
-    CURVE: () => secp256k1_CURVE,
-    Point: () => Point,
-    ProjectivePoint: () => Point,
-    Signature: () => Signature,
-    etc: () => etc,
-    getPublicKey: () => getPublicKey,
-    getSharedSecret: () => getSharedSecret,
-    sign: () => sign,
-    signAsync: () => signAsync,
-    utils: () => utils,
-    verify: () => verify
-  });
-  var secp256k1_CURVE, P2, N2, Gx, Gy, _b, L2, L22, err, isBig, isStr, isBytes2, abytes2, u8n, u8fr, padh, bytesToHex, C2, _ch, hexToBytes, toU8, cr, subtle, concatBytes, randomBytes, big, arange, M2, modN, invert, callHash, apoint, koblitz, afield0, afield, agroup, isEven, u8of, getPrefix, lift_x, _Point, Point, G2, I2, doubleScalarMulUns, bytesToNumBE, sliceBytesNumBE, B256, numTo32b, toPrivScalar, highS, getPublicKey, Signature, bits2int, bits2int_modN, signOpts, veriOpts, prepSig, hmacDrbg, signAsync, sign, verify, recoverPublicKey, getSharedSecret, hashToPrivateKey, randomPrivateKey, _sha, etc, utils, W2, scalarBits, pwindows, pwindowSize, precompute, Gpows, ctneg, wNAF;
-  var init_secp256k1 = __esm({
-    "../../node_modules/@noble/secp256k1/index.js"() {
-      init_esbuild_shims();
-      secp256k1_CURVE = {
-        p: 0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2fn,
-        n: 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141n,
-        h: 1n,
-        a: 0n,
-        b: 7n,
-        Gx: 0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798n,
-        Gy: 0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8n
-      };
-      ({ p: P2, n: N2, Gx, Gy, b: _b } = secp256k1_CURVE);
-      L2 = 32;
-      L22 = 64;
-      err = (m2 = "") => {
-        throw new Error(m2);
-      };
-      isBig = (n2) => typeof n2 === "bigint";
-      isStr = (s2) => typeof s2 === "string";
-      isBytes2 = (a2) => a2 instanceof Uint8Array || ArrayBuffer.isView(a2) && a2.constructor.name === "Uint8Array";
-      abytes2 = (a2, l2) => !isBytes2(a2) || typeof l2 === "number" && l2 > 0 && a2.length !== l2 ? err("Uint8Array expected") : a2;
-      u8n = (len) => new Uint8Array(len);
-      u8fr = (buf) => Uint8Array.from(buf);
-      padh = (n2, pad) => n2.toString(16).padStart(pad, "0");
-      bytesToHex = (b2) => Array.from(abytes2(b2)).map((e2) => padh(e2, 2)).join("");
-      C2 = { _0: 48, _9: 57, A: 65, F: 70, a: 97, f: 102 };
-      _ch = (ch) => {
-        if (ch >= C2._0 && ch <= C2._9)
-          return ch - C2._0;
-        if (ch >= C2.A && ch <= C2.F)
-          return ch - (C2.A - 10);
-        if (ch >= C2.a && ch <= C2.f)
-          return ch - (C2.a - 10);
-        return;
-      };
-      hexToBytes = (hex) => {
-        const e2 = "hex invalid";
-        if (!isStr(hex))
-          return err(e2);
-        const hl = hex.length;
-        const al = hl / 2;
-        if (hl % 2)
-          return err(e2);
-        const array = u8n(al);
-        for (let ai = 0, hi = 0; ai < al; ai++, hi += 2) {
-          const n1 = _ch(hex.charCodeAt(hi));
-          const n2 = _ch(hex.charCodeAt(hi + 1));
-          if (n1 === void 0 || n2 === void 0)
-            return err(e2);
-          array[ai] = n1 * 16 + n2;
-        }
-        return array;
-      };
-      toU8 = (a2, len) => abytes2(isStr(a2) ? hexToBytes(a2) : u8fr(abytes2(a2)), len);
-      cr = () => globalThis?.crypto;
-      subtle = () => cr()?.subtle ?? err("crypto.subtle must be defined");
-      concatBytes = (...arrs) => {
-        const r2 = u8n(arrs.reduce((sum, a2) => sum + abytes2(a2).length, 0));
-        let pad = 0;
-        arrs.forEach((a2) => {
-          r2.set(a2, pad);
-          pad += a2.length;
-        });
-        return r2;
-      };
-      randomBytes = (len = L2) => {
-        const c2 = cr();
-        return c2.getRandomValues(u8n(len));
-      };
-      big = BigInt;
-      arange = (n2, min, max, msg = "bad number: out of range") => isBig(n2) && min <= n2 && n2 < max ? n2 : err(msg);
-      M2 = (a2, b2 = P2) => {
-        const r2 = a2 % b2;
-        return r2 >= 0n ? r2 : b2 + r2;
-      };
-      modN = (a2) => M2(a2, N2);
-      invert = (num, md) => {
-        if (num === 0n || md <= 0n)
-          err("no inverse n=" + num + " mod=" + md);
-        let a2 = M2(num, md), b2 = md, x2 = 0n, y2 = 1n, u2 = 1n, v2 = 0n;
-        while (a2 !== 0n) {
-          const q2 = b2 / a2, r2 = b2 % a2;
-          const m2 = x2 - u2 * q2, n2 = y2 - v2 * q2;
-          b2 = a2, a2 = r2, x2 = u2, y2 = v2, u2 = m2, v2 = n2;
-        }
-        return b2 === 1n ? M2(x2, md) : err("no inverse");
-      };
-      callHash = (name) => {
-        const fn = etc[name];
-        if (typeof fn !== "function")
-          err("hashes." + name + " not set");
-        return fn;
-      };
-      apoint = (p2) => p2 instanceof Point ? p2 : err("Point expected");
-      koblitz = (x2) => M2(M2(x2 * x2) * x2 + _b);
-      afield0 = (n2) => arange(n2, 0n, P2);
-      afield = (n2) => arange(n2, 1n, P2);
-      agroup = (n2) => arange(n2, 1n, N2);
-      isEven = (y2) => (y2 & 1n) === 0n;
-      u8of = (n2) => Uint8Array.of(n2);
-      getPrefix = (y2) => u8of(isEven(y2) ? 2 : 3);
-      lift_x = (x2) => {
-        const c2 = koblitz(afield(x2));
-        let r2 = 1n;
-        for (let num = c2, e2 = (P2 + 1n) / 4n; e2 > 0n; e2 >>= 1n) {
-          if (e2 & 1n)
-            r2 = r2 * num % P2;
-          num = num * num % P2;
-        }
-        return M2(r2 * r2) === c2 ? r2 : err("sqrt invalid");
-      };
-      _Point = class _Point {
-        constructor(px, py, pz) {
-          __publicField(this, "px");
-          __publicField(this, "py");
-          __publicField(this, "pz");
-          this.px = afield0(px);
-          this.py = afield(py);
-          this.pz = afield0(pz);
-          Object.freeze(this);
-        }
-        /** Convert Uint8Array or hex string to Point. */
-        static fromBytes(bytes) {
-          abytes2(bytes);
-          let p2 = void 0;
-          const head = bytes[0];
-          const tail = bytes.subarray(1);
-          const x2 = sliceBytesNumBE(tail, 0, L2);
-          const len = bytes.length;
-          if (len === L2 + 1 && [2, 3].includes(head)) {
-            let y2 = lift_x(x2);
-            const evenY = isEven(y2);
-            const evenH = isEven(big(head));
-            if (evenH !== evenY)
-              y2 = M2(-y2);
-            p2 = new _Point(x2, y2, 1n);
-          }
-          if (len === L22 + 1 && head === 4)
-            p2 = new _Point(x2, sliceBytesNumBE(tail, L2, L22), 1n);
-          return p2 ? p2.assertValidity() : err("bad point: not on curve");
-        }
-        /** Equality check: compare points P&Q. */
-        equals(other) {
-          const { px: X1, py: Y1, pz: Z1 } = this;
-          const { px: X2, py: Y2, pz: Z2 } = apoint(other);
-          const X1Z2 = M2(X1 * Z2);
-          const X2Z1 = M2(X2 * Z1);
-          const Y1Z2 = M2(Y1 * Z2);
-          const Y2Z1 = M2(Y2 * Z1);
-          return X1Z2 === X2Z1 && Y1Z2 === Y2Z1;
-        }
-        is0() {
-          return this.equals(I2);
-        }
-        /** Flip point over y coordinate. */
-        negate() {
-          return new _Point(this.px, M2(-this.py), this.pz);
-        }
-        /** Point doubling: P+P, complete formula. */
-        double() {
-          return this.add(this);
-        }
-        /**
-         * Point addition: P+Q, complete, exception-free formula
-         * (Renes-Costello-Batina, algo 1 of [2015/1060](https://eprint.iacr.org/2015/1060)).
-         * Cost: `12M + 0S + 3*a + 3*b3 + 23add`.
-         */
-        // prettier-ignore
-        add(other) {
-          const { px: X1, py: Y1, pz: Z1 } = this;
-          const { px: X2, py: Y2, pz: Z2 } = apoint(other);
-          const a2 = 0n;
-          const b2 = _b;
-          let X3 = 0n, Y3 = 0n, Z3 = 0n;
-          const b3 = M2(b2 * 3n);
-          let t0 = M2(X1 * X2), t1 = M2(Y1 * Y2), t2 = M2(Z1 * Z2), t3 = M2(X1 + Y1);
-          let t4 = M2(X2 + Y2);
-          t3 = M2(t3 * t4);
-          t4 = M2(t0 + t1);
-          t3 = M2(t3 - t4);
-          t4 = M2(X1 + Z1);
-          let t5 = M2(X2 + Z2);
-          t4 = M2(t4 * t5);
-          t5 = M2(t0 + t2);
-          t4 = M2(t4 - t5);
-          t5 = M2(Y1 + Z1);
-          X3 = M2(Y2 + Z2);
-          t5 = M2(t5 * X3);
-          X3 = M2(t1 + t2);
-          t5 = M2(t5 - X3);
-          Z3 = M2(a2 * t4);
-          X3 = M2(b3 * t2);
-          Z3 = M2(X3 + Z3);
-          X3 = M2(t1 - Z3);
-          Z3 = M2(t1 + Z3);
-          Y3 = M2(X3 * Z3);
-          t1 = M2(t0 + t0);
-          t1 = M2(t1 + t0);
-          t2 = M2(a2 * t2);
-          t4 = M2(b3 * t4);
-          t1 = M2(t1 + t2);
-          t2 = M2(t0 - t2);
-          t2 = M2(a2 * t2);
-          t4 = M2(t4 + t2);
-          t0 = M2(t1 * t4);
-          Y3 = M2(Y3 + t0);
-          t0 = M2(t5 * t4);
-          X3 = M2(t3 * X3);
-          X3 = M2(X3 - t0);
-          t0 = M2(t3 * t1);
-          Z3 = M2(t5 * Z3);
-          Z3 = M2(Z3 + t0);
-          return new _Point(X3, Y3, Z3);
-        }
-        /**
-         * Point-by-scalar multiplication. Scalar must be in range 1 <= n < CURVE.n.
-         * Uses {@link wNAF} for base point.
-         * Uses fake point to mitigate side-channel leakage.
-         * @param n scalar by which point is multiplied
-         * @param safe safe mode guards against timing attacks; unsafe mode is faster
-         */
-        multiply(n2, safe = true) {
-          if (!safe && n2 === 0n)
-            return I2;
-          agroup(n2);
-          if (n2 === 1n)
-            return this;
-          if (this.equals(G2))
-            return wNAF(n2).p;
-          let p2 = I2;
-          let f2 = G2;
-          for (let d2 = this; n2 > 0n; d2 = d2.double(), n2 >>= 1n) {
-            if (n2 & 1n)
-              p2 = p2.add(d2);
-            else if (safe)
-              f2 = f2.add(d2);
-          }
-          return p2;
-        }
-        /** Convert point to 2d xy affine point. (X, Y, Z) ∋ (x=X/Z, y=Y/Z) */
-        toAffine() {
-          const { px: x2, py: y2, pz: z } = this;
-          if (this.equals(I2))
-            return { x: 0n, y: 0n };
-          if (z === 1n)
-            return { x: x2, y: y2 };
-          const iz = invert(z, P2);
-          if (M2(z * iz) !== 1n)
-            err("inverse invalid");
-          return { x: M2(x2 * iz), y: M2(y2 * iz) };
-        }
-        /** Checks if the point is valid and on-curve. */
-        assertValidity() {
-          const { x: x2, y: y2 } = this.toAffine();
-          afield(x2);
-          afield(y2);
-          return M2(y2 * y2) === koblitz(x2) ? this : err("bad point: not on curve");
-        }
-        /** Converts point to 33/65-byte Uint8Array. */
-        toBytes(isCompressed = true) {
-          const { x: x2, y: y2 } = this.assertValidity().toAffine();
-          const x32b = numTo32b(x2);
-          if (isCompressed)
-            return concatBytes(getPrefix(y2), x32b);
-          return concatBytes(u8of(4), x32b, numTo32b(y2));
-        }
-        /** Create 3d xyz point from 2d xy. (0, 0) => (0, 1, 0), not (0, 0, 1) */
-        static fromAffine(ap) {
-          const { x: x2, y: y2 } = ap;
-          return x2 === 0n && y2 === 0n ? I2 : new _Point(x2, y2, 1n);
-        }
-        toHex(isCompressed) {
-          return bytesToHex(this.toBytes(isCompressed));
-        }
-        static fromPrivateKey(k2) {
-          return G2.multiply(toPrivScalar(k2));
-        }
-        static fromHex(hex) {
-          return _Point.fromBytes(toU8(hex));
-        }
-        get x() {
-          return this.toAffine().x;
-        }
-        get y() {
-          return this.toAffine().y;
-        }
-        toRawBytes(isCompressed) {
-          return this.toBytes(isCompressed);
-        }
-      };
-      __publicField(_Point, "BASE");
-      __publicField(_Point, "ZERO");
-      Point = _Point;
-      G2 = new Point(Gx, Gy, 1n);
-      I2 = new Point(0n, 1n, 0n);
-      Point.BASE = G2;
-      Point.ZERO = I2;
-      doubleScalarMulUns = (R2, u1, u2) => {
-        return G2.multiply(u1, false).add(R2.multiply(u2, false)).assertValidity();
-      };
-      bytesToNumBE = (b2) => big("0x" + (bytesToHex(b2) || "0"));
-      sliceBytesNumBE = (b2, from, to) => bytesToNumBE(b2.subarray(from, to));
-      B256 = 2n ** 256n;
-      numTo32b = (num) => hexToBytes(padh(arange(num, 0n, B256), L22));
-      toPrivScalar = (pr) => {
-        const num = isBig(pr) ? pr : bytesToNumBE(toU8(pr, L2));
-        return arange(num, 1n, N2, "private key invalid 3");
-      };
-      highS = (n2) => n2 > N2 >> 1n;
-      getPublicKey = (privKey, isCompressed = true) => {
-        return G2.multiply(toPrivScalar(privKey)).toBytes(isCompressed);
-      };
-      Signature = class _Signature {
-        constructor(r2, s2, recovery) {
-          __publicField(this, "r");
-          __publicField(this, "s");
-          __publicField(this, "recovery");
-          this.r = agroup(r2);
-          this.s = agroup(s2);
-          if (recovery != null)
-            this.recovery = recovery;
-          Object.freeze(this);
-        }
-        /** Create signature from 64b compact (r || s) representation. */
-        static fromBytes(b2) {
-          abytes2(b2, L22);
-          const r2 = sliceBytesNumBE(b2, 0, L2);
-          const s2 = sliceBytesNumBE(b2, L2, L22);
-          return new _Signature(r2, s2);
-        }
-        toBytes() {
-          const { r: r2, s: s2 } = this;
-          return concatBytes(numTo32b(r2), numTo32b(s2));
-        }
-        /** Copy signature, with newly added recovery bit. */
-        addRecoveryBit(bit) {
-          return new _Signature(this.r, this.s, bit);
-        }
-        hasHighS() {
-          return highS(this.s);
-        }
-        toCompactRawBytes() {
-          return this.toBytes();
-        }
-        toCompactHex() {
-          return bytesToHex(this.toBytes());
-        }
-        recoverPublicKey(msg) {
-          return recoverPublicKey(this, msg);
-        }
-        static fromCompact(hex) {
-          return _Signature.fromBytes(toU8(hex, L22));
-        }
-        assertValidity() {
-          return this;
-        }
-        normalizeS() {
-          const { r: r2, s: s2, recovery } = this;
-          return highS(s2) ? new _Signature(r2, modN(-s2), recovery) : this;
-        }
-      };
-      bits2int = (bytes) => {
-        const delta = bytes.length * 8 - 256;
-        if (delta > 1024)
-          err("msg invalid");
-        const num = bytesToNumBE(bytes);
-        return delta > 0 ? num >> big(delta) : num;
-      };
-      bits2int_modN = (bytes) => modN(bits2int(abytes2(bytes)));
-      signOpts = { lowS: true };
-      veriOpts = { lowS: true };
-      prepSig = (msgh, priv, opts = signOpts) => {
-        if (["der", "recovered", "canonical"].some((k2) => k2 in opts))
-          err("option not supported");
-        let { lowS, extraEntropy } = opts;
-        if (lowS == null)
-          lowS = true;
-        const i2o = numTo32b;
-        const h1i = bits2int_modN(toU8(msgh));
-        const h1o = i2o(h1i);
-        const d2 = toPrivScalar(priv);
-        const seed = [i2o(d2), h1o];
-        if (extraEntropy)
-          seed.push(extraEntropy === true ? randomBytes(L2) : toU8(extraEntropy));
-        const m2 = h1i;
-        const k2sig = (kBytes) => {
-          const k2 = bits2int(kBytes);
-          if (!(1n <= k2 && k2 < N2))
-            return;
-          const q2 = G2.multiply(k2).toAffine();
-          const r2 = modN(q2.x);
-          if (r2 === 0n)
-            return;
-          const ik = invert(k2, N2);
-          const s2 = modN(ik * modN(m2 + modN(d2 * r2)));
-          if (s2 === 0n)
-            return;
-          let normS = s2;
-          let recovery = (q2.x === r2 ? 0 : 2) | Number(q2.y & 1n);
-          if (lowS && highS(s2)) {
-            normS = modN(-s2);
-            recovery ^= 1;
-          }
-          return new Signature(r2, normS, recovery);
-        };
-        return { seed: concatBytes(...seed), k2sig };
-      };
-      hmacDrbg = (asynchronous) => {
-        let v2 = u8n(L2);
-        let k2 = u8n(L2);
-        let i2 = 0;
-        const NULL = u8n(0);
-        const reset = () => {
-          v2.fill(1);
-          k2.fill(0);
-          i2 = 0;
-        };
-        const max = 1e3;
-        const _e = "drbg: tried 1000 values";
-        if (asynchronous) {
-          const h2 = (...b2) => etc.hmacSha256Async(k2, v2, ...b2);
-          const reseed = async (seed = NULL) => {
-            k2 = await h2(u8of(0), seed);
-            v2 = await h2();
-            if (seed.length === 0)
-              return;
-            k2 = await h2(u8of(1), seed);
-            v2 = await h2();
-          };
-          const gen = async () => {
-            if (i2++ >= max)
-              err(_e);
-            v2 = await h2();
-            return v2;
-          };
-          return async (seed, pred) => {
-            reset();
-            await reseed(seed);
-            let res = void 0;
-            while (!(res = pred(await gen())))
-              await reseed();
-            reset();
-            return res;
-          };
-        } else {
-          const h2 = (...b2) => callHash("hmacSha256Sync")(k2, v2, ...b2);
-          const reseed = (seed = NULL) => {
-            k2 = h2(u8of(0), seed);
-            v2 = h2();
-            if (seed.length === 0)
-              return;
-            k2 = h2(u8of(1), seed);
-            v2 = h2();
-          };
-          const gen = () => {
-            if (i2++ >= max)
-              err(_e);
-            v2 = h2();
-            return v2;
-          };
-          return (seed, pred) => {
-            reset();
-            reseed(seed);
-            let res = void 0;
-            while (!(res = pred(gen())))
-              reseed();
-            reset();
-            return res;
-          };
-        }
-      };
-      signAsync = async (msgh, priv, opts = signOpts) => {
-        const { seed, k2sig } = prepSig(msgh, priv, opts);
-        const sig = await hmacDrbg(true)(seed, k2sig);
-        return sig;
-      };
-      sign = (msgh, priv, opts = signOpts) => {
-        const { seed, k2sig } = prepSig(msgh, priv, opts);
-        const sig = hmacDrbg(false)(seed, k2sig);
-        return sig;
-      };
-      verify = (sig, msgh, pub, opts = veriOpts) => {
-        let { lowS } = opts;
-        if (lowS == null)
-          lowS = true;
-        if ("strict" in opts)
-          err("option not supported");
-        let sigg;
-        const rs = sig && typeof sig === "object" && "r" in sig;
-        if (!rs && toU8(sig).length !== L22)
-          err("signature must be 64 bytes");
-        try {
-          sigg = rs ? new Signature(sig.r, sig.s) : Signature.fromCompact(sig);
-          const h2 = bits2int_modN(toU8(msgh));
-          const P3 = Point.fromBytes(toU8(pub));
-          const { r: r2, s: s2 } = sigg;
-          if (lowS && highS(s2))
-            return false;
-          const is = invert(s2, N2);
-          const u1 = modN(h2 * is);
-          const u2 = modN(r2 * is);
-          const R2 = doubleScalarMulUns(P3, u1, u2).toAffine();
-          const v2 = modN(R2.x);
-          return v2 === r2;
-        } catch (error) {
-          return false;
-        }
-      };
-      recoverPublicKey = (sig, msgh) => {
-        const { r: r2, s: s2, recovery } = sig;
-        if (![0, 1, 2, 3].includes(recovery))
-          err("recovery id invalid");
-        const h2 = bits2int_modN(toU8(msgh, L2));
-        const radj = recovery === 2 || recovery === 3 ? r2 + N2 : r2;
-        afield(radj);
-        const head = getPrefix(big(recovery));
-        const Rb = concatBytes(head, numTo32b(radj));
-        const R2 = Point.fromBytes(Rb);
-        const ir = invert(radj, N2);
-        const u1 = modN(-h2 * ir);
-        const u2 = modN(s2 * ir);
-        return doubleScalarMulUns(R2, u1, u2);
-      };
-      getSharedSecret = (privA, pubB, isCompressed = true) => {
-        return Point.fromBytes(toU8(pubB)).multiply(toPrivScalar(privA)).toBytes(isCompressed);
-      };
-      hashToPrivateKey = (hash) => {
-        hash = toU8(hash);
-        if (hash.length < L2 + 8 || hash.length > 1024)
-          err("expected 40-1024b");
-        const num = M2(bytesToNumBE(hash), N2 - 1n);
-        return numTo32b(num + 1n);
-      };
-      randomPrivateKey = () => hashToPrivateKey(randomBytes(L2 + 16));
-      _sha = "SHA-256";
-      etc = {
-        hexToBytes,
-        bytesToHex,
-        concatBytes,
-        bytesToNumberBE: bytesToNumBE,
-        numberToBytesBE: numTo32b,
-        mod: M2,
-        invert,
-        // math utilities
-        hmacSha256Async: async (key, ...msgs) => {
-          const s2 = subtle();
-          const name = "HMAC";
-          const k2 = await s2.importKey("raw", key, { name, hash: { name: _sha } }, false, ["sign"]);
-          return u8n(await s2.sign(name, k2, concatBytes(...msgs)));
-        },
-        hmacSha256Sync: void 0,
-        // For TypeScript. Actual logic is below
-        hashToPrivateKey,
-        randomBytes
-      };
-      utils = {
-        normPrivateKeyToScalar: toPrivScalar,
-        isValidPrivateKey: (key) => {
-          try {
-            return !!toPrivScalar(key);
-          } catch (e2) {
-            return false;
-          }
-        },
-        randomPrivateKey,
-        precompute: (w2 = 8, p2 = G2) => {
-          p2.multiply(3n);
-          w2;
-          return p2;
-        }
-      };
-      W2 = 8;
-      scalarBits = 256;
-      pwindows = Math.ceil(scalarBits / W2) + 1;
-      pwindowSize = 2 ** (W2 - 1);
-      precompute = () => {
-        const points = [];
-        let p2 = G2;
-        let b2 = p2;
-        for (let w2 = 0; w2 < pwindows; w2++) {
-          b2 = p2;
-          points.push(b2);
-          for (let i2 = 1; i2 < pwindowSize; i2++) {
-            b2 = b2.add(p2);
-            points.push(b2);
-          }
-          p2 = b2.double();
-        }
-        return points;
-      };
-      Gpows = void 0;
-      ctneg = (cnd, p2) => {
-        const n2 = p2.negate();
-        return cnd ? n2 : p2;
-      };
-      wNAF = (n2) => {
-        const comp = Gpows || (Gpows = precompute());
-        let p2 = I2;
-        let f2 = G2;
-        const pow_2_w = 2 ** W2;
-        const maxNum = pow_2_w;
-        const mask = big(pow_2_w - 1);
-        const shiftBy = big(W2);
-        for (let w2 = 0; w2 < pwindows; w2++) {
-          let wbits = Number(n2 & mask);
-          n2 >>= shiftBy;
-          if (wbits > pwindowSize) {
-            wbits -= maxNum;
-            n2 += 1n;
-          }
-          const off = w2 * pwindowSize;
-          const offF = off;
-          const offP = off + Math.abs(wbits) - 1;
-          const isEven2 = w2 % 2 !== 0;
-          const isNeg = wbits < 0;
-          if (wbits === 0) {
-            f2 = f2.add(ctneg(isEven2, comp[offF]));
-          } else {
-            p2 = p2.add(ctneg(isNeg, comp[offP]));
-          }
-        }
-        return { p: p2, f: f2 };
-      };
-    }
-  });
-
-  // ../../node_modules/@noble/hashes/crypto.js
-  var require_crypto = __commonJS({
-    "../../node_modules/@noble/hashes/crypto.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.crypto = void 0;
-      exports2.crypto = typeof globalThis === "object" && "crypto" in globalThis ? globalThis.crypto : void 0;
-    }
-  });
-
-  // ../../node_modules/@noble/hashes/utils.js
-  var require_utils2 = __commonJS({
-    "../../node_modules/@noble/hashes/utils.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.wrapXOFConstructorWithOpts = exports2.wrapConstructorWithOpts = exports2.wrapConstructor = exports2.Hash = exports2.nextTick = exports2.swap32IfBE = exports2.byteSwapIfBE = exports2.swap8IfBE = exports2.isLE = void 0;
-      exports2.isBytes = isBytes3;
-      exports2.anumber = anumber2;
-      exports2.abytes = abytes3;
-      exports2.ahash = ahash;
-      exports2.aexists = aexists2;
-      exports2.aoutput = aoutput2;
-      exports2.u8 = u8;
-      exports2.u32 = u322;
-      exports2.clean = clean2;
-      exports2.createView = createView2;
-      exports2.rotr = rotr2;
-      exports2.rotl = rotl;
-      exports2.byteSwap = byteSwap2;
-      exports2.byteSwap32 = byteSwap322;
-      exports2.bytesToHex = bytesToHex2;
-      exports2.hexToBytes = hexToBytes2;
-      exports2.asyncLoop = asyncLoop;
-      exports2.utf8ToBytes = utf8ToBytes;
-      exports2.bytesToUtf8 = bytesToUtf8;
-      exports2.toBytes = toBytes;
-      exports2.kdfInputToBytes = kdfInputToBytes;
-      exports2.concatBytes = concatBytes2;
-      exports2.checkOpts = checkOpts;
-      exports2.createHasher = createHasher2;
-      exports2.createOptHasher = createOptHasher;
-      exports2.createXOFer = createXOFer;
-      exports2.randomBytes = randomBytes2;
-      var crypto_1 = require_crypto();
-      function isBytes3(a2) {
-        return a2 instanceof Uint8Array || ArrayBuffer.isView(a2) && a2.constructor.name === "Uint8Array";
-      }
-      function anumber2(n2) {
-        if (!Number.isSafeInteger(n2) || n2 < 0)
-          throw new Error("positive integer expected, got " + n2);
-      }
-      function abytes3(b2, ...lengths) {
-        if (!isBytes3(b2))
-          throw new Error("Uint8Array expected");
-        if (lengths.length > 0 && !lengths.includes(b2.length))
-          throw new Error("Uint8Array expected of length " + lengths + ", got length=" + b2.length);
-      }
-      function ahash(h2) {
-        if (typeof h2 !== "function" || typeof h2.create !== "function")
-          throw new Error("Hash should be wrapped by utils.createHasher");
-        anumber2(h2.outputLen);
-        anumber2(h2.blockLen);
-      }
-      function aexists2(instance, checkFinished = true) {
-        if (instance.destroyed)
-          throw new Error("Hash instance has been destroyed");
-        if (checkFinished && instance.finished)
-          throw new Error("Hash#digest() has already been called");
-      }
-      function aoutput2(out, instance) {
-        abytes3(out);
-        const min = instance.outputLen;
-        if (out.length < min) {
-          throw new Error("digestInto() expects output buffer of length at least " + min);
-        }
-      }
-      function u8(arr) {
-        return new Uint8Array(arr.buffer, arr.byteOffset, arr.byteLength);
-      }
-      function u322(arr) {
-        return new Uint32Array(arr.buffer, arr.byteOffset, Math.floor(arr.byteLength / 4));
-      }
-      function clean2(...arrays) {
-        for (let i2 = 0; i2 < arrays.length; i2++) {
-          arrays[i2].fill(0);
-        }
-      }
-      function createView2(arr) {
-        return new DataView(arr.buffer, arr.byteOffset, arr.byteLength);
-      }
-      function rotr2(word, shift) {
-        return word << 32 - shift | word >>> shift;
-      }
-      function rotl(word, shift) {
-        return word << shift | word >>> 32 - shift >>> 0;
-      }
-      exports2.isLE = (() => new Uint8Array(new Uint32Array([287454020]).buffer)[0] === 68)();
-      function byteSwap2(word) {
-        return word << 24 & 4278190080 | word << 8 & 16711680 | word >>> 8 & 65280 | word >>> 24 & 255;
-      }
-      exports2.swap8IfBE = exports2.isLE ? (n2) => n2 : (n2) => byteSwap2(n2);
-      exports2.byteSwapIfBE = exports2.swap8IfBE;
-      function byteSwap322(arr) {
-        for (let i2 = 0; i2 < arr.length; i2++) {
-          arr[i2] = byteSwap2(arr[i2]);
-        }
-        return arr;
-      }
-      exports2.swap32IfBE = exports2.isLE ? (u2) => u2 : byteSwap322;
-      var hasHexBuiltin = /* @__PURE__ */ (() => (
-        // @ts-ignore
-        typeof Uint8Array.from([]).toHex === "function" && typeof Uint8Array.fromHex === "function"
-      ))();
-      var hexes = /* @__PURE__ */ Array.from({ length: 256 }, (_, i2) => i2.toString(16).padStart(2, "0"));
-      function bytesToHex2(bytes) {
-        abytes3(bytes);
-        if (hasHexBuiltin)
-          return bytes.toHex();
-        let hex = "";
-        for (let i2 = 0; i2 < bytes.length; i2++) {
-          hex += hexes[bytes[i2]];
-        }
-        return hex;
-      }
-      var asciis = { _0: 48, _9: 57, A: 65, F: 70, a: 97, f: 102 };
-      function asciiToBase16(ch) {
-        if (ch >= asciis._0 && ch <= asciis._9)
-          return ch - asciis._0;
-        if (ch >= asciis.A && ch <= asciis.F)
-          return ch - (asciis.A - 10);
-        if (ch >= asciis.a && ch <= asciis.f)
-          return ch - (asciis.a - 10);
-        return;
-      }
-      function hexToBytes2(hex) {
-        if (typeof hex !== "string")
-          throw new Error("hex string expected, got " + typeof hex);
-        if (hasHexBuiltin)
-          return Uint8Array.fromHex(hex);
-        const hl = hex.length;
-        const al = hl / 2;
-        if (hl % 2)
-          throw new Error("hex string expected, got unpadded hex of length " + hl);
-        const array = new Uint8Array(al);
-        for (let ai = 0, hi = 0; ai < al; ai++, hi += 2) {
-          const n1 = asciiToBase16(hex.charCodeAt(hi));
-          const n2 = asciiToBase16(hex.charCodeAt(hi + 1));
-          if (n1 === void 0 || n2 === void 0) {
-            const char = hex[hi] + hex[hi + 1];
-            throw new Error('hex string expected, got non-hex character "' + char + '" at index ' + hi);
-          }
-          array[ai] = n1 * 16 + n2;
-        }
-        return array;
-      }
-      var nextTick = async () => {
-      };
-      exports2.nextTick = nextTick;
-      async function asyncLoop(iters, tick, cb) {
-        let ts = Date.now();
-        for (let i2 = 0; i2 < iters; i2++) {
-          cb(i2);
-          const diff = Date.now() - ts;
-          if (diff >= 0 && diff < tick)
-            continue;
-          await (0, exports2.nextTick)();
-          ts += diff;
-        }
-      }
-      function utf8ToBytes(str) {
-        if (typeof str !== "string")
-          throw new Error("string expected");
-        return new Uint8Array(new TextEncoder().encode(str));
-      }
-      function bytesToUtf8(bytes) {
-        return new TextDecoder().decode(bytes);
-      }
-      function toBytes(data) {
-        if (typeof data === "string")
-          data = utf8ToBytes(data);
-        abytes3(data);
-        return data;
-      }
-      function kdfInputToBytes(data) {
-        if (typeof data === "string")
-          data = utf8ToBytes(data);
-        abytes3(data);
-        return data;
-      }
-      function concatBytes2(...arrays) {
-        let sum = 0;
-        for (let i2 = 0; i2 < arrays.length; i2++) {
-          const a2 = arrays[i2];
-          abytes3(a2);
-          sum += a2.length;
-        }
-        const res = new Uint8Array(sum);
-        for (let i2 = 0, pad = 0; i2 < arrays.length; i2++) {
-          const a2 = arrays[i2];
-          res.set(a2, pad);
-          pad += a2.length;
-        }
-        return res;
-      }
-      function checkOpts(defaults, opts) {
-        if (opts !== void 0 && {}.toString.call(opts) !== "[object Object]")
-          throw new Error("options should be object or undefined");
-        const merged = Object.assign(defaults, opts);
-        return merged;
-      }
-      var Hash = class {
-      };
-      exports2.Hash = Hash;
-      function createHasher2(hashCons) {
-        const hashC = (msg) => hashCons().update(toBytes(msg)).digest();
-        const tmp = hashCons();
-        hashC.outputLen = tmp.outputLen;
-        hashC.blockLen = tmp.blockLen;
-        hashC.create = () => hashCons();
-        return hashC;
-      }
-      function createOptHasher(hashCons) {
-        const hashC = (msg, opts) => hashCons(opts).update(toBytes(msg)).digest();
-        const tmp = hashCons({});
-        hashC.outputLen = tmp.outputLen;
-        hashC.blockLen = tmp.blockLen;
-        hashC.create = (opts) => hashCons(opts);
-        return hashC;
-      }
-      function createXOFer(hashCons) {
-        const hashC = (msg, opts) => hashCons(opts).update(toBytes(msg)).digest();
-        const tmp = hashCons({});
-        hashC.outputLen = tmp.outputLen;
-        hashC.blockLen = tmp.blockLen;
-        hashC.create = (opts) => hashCons(opts);
-        return hashC;
-      }
-      exports2.wrapConstructor = createHasher2;
-      exports2.wrapConstructorWithOpts = createOptHasher;
-      exports2.wrapXOFConstructorWithOpts = createXOFer;
-      function randomBytes2(bytesLength = 32) {
-        if (crypto_1.crypto && typeof crypto_1.crypto.getRandomValues === "function") {
-          return crypto_1.crypto.getRandomValues(new Uint8Array(bytesLength));
-        }
-        if (crypto_1.crypto && typeof crypto_1.crypto.randomBytes === "function") {
-          return Uint8Array.from(crypto_1.crypto.randomBytes(bytesLength));
-        }
-        throw new Error("crypto.getRandomValues must be defined");
-      }
-    }
-  });
-
-  // ../../node_modules/@noble/hashes/hmac.js
-  var require_hmac = __commonJS({
-    "../../node_modules/@noble/hashes/hmac.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.hmac = exports2.HMAC = void 0;
-      var utils_ts_1 = require_utils2();
-      var HMAC = class extends utils_ts_1.Hash {
-        constructor(hash, _key) {
-          super();
-          this.finished = false;
-          this.destroyed = false;
-          (0, utils_ts_1.ahash)(hash);
-          const key = (0, utils_ts_1.toBytes)(_key);
-          this.iHash = hash.create();
-          if (typeof this.iHash.update !== "function")
-            throw new Error("Expected instance of class which extends utils.Hash");
-          this.blockLen = this.iHash.blockLen;
-          this.outputLen = this.iHash.outputLen;
-          const blockLen = this.blockLen;
-          const pad = new Uint8Array(blockLen);
-          pad.set(key.length > blockLen ? hash.create().update(key).digest() : key);
-          for (let i2 = 0; i2 < pad.length; i2++)
-            pad[i2] ^= 54;
-          this.iHash.update(pad);
-          this.oHash = hash.create();
-          for (let i2 = 0; i2 < pad.length; i2++)
-            pad[i2] ^= 54 ^ 92;
-          this.oHash.update(pad);
-          (0, utils_ts_1.clean)(pad);
-        }
-        update(buf) {
-          (0, utils_ts_1.aexists)(this);
-          this.iHash.update(buf);
-          return this;
-        }
-        digestInto(out) {
-          (0, utils_ts_1.aexists)(this);
-          (0, utils_ts_1.abytes)(out, this.outputLen);
-          this.finished = true;
-          this.iHash.digestInto(out);
-          this.oHash.update(out);
-          this.oHash.digestInto(out);
-          this.destroy();
-        }
-        digest() {
-          const out = new Uint8Array(this.oHash.outputLen);
-          this.digestInto(out);
-          return out;
-        }
-        _cloneInto(to) {
-          to || (to = Object.create(Object.getPrototypeOf(this), {}));
-          const { oHash, iHash, finished, destroyed, blockLen, outputLen } = this;
-          to = to;
-          to.finished = finished;
-          to.destroyed = destroyed;
-          to.blockLen = blockLen;
-          to.outputLen = outputLen;
-          to.oHash = oHash._cloneInto(to.oHash);
-          to.iHash = iHash._cloneInto(to.iHash);
-          return to;
-        }
-        clone() {
-          return this._cloneInto();
-        }
-        destroy() {
-          this.destroyed = true;
-          this.oHash.destroy();
-          this.iHash.destroy();
-        }
-      };
-      exports2.HMAC = HMAC;
-      var hmac = (hash, key, message) => new HMAC(hash, key).update(message).digest();
-      exports2.hmac = hmac;
-      exports2.hmac.create = (hash, key) => new HMAC(hash, key);
-    }
-  });
-
-  // ../../node_modules/@noble/hashes/_md.js
-  var require_md = __commonJS({
-    "../../node_modules/@noble/hashes/_md.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.SHA512_IV = exports2.SHA384_IV = exports2.SHA224_IV = exports2.SHA256_IV = exports2.HashMD = void 0;
-      exports2.setBigUint64 = setBigUint64;
-      exports2.Chi = Chi2;
-      exports2.Maj = Maj2;
-      var utils_ts_1 = require_utils2();
-      function setBigUint64(view, byteOffset, value, isLE2) {
-        if (typeof view.setBigUint64 === "function")
-          return view.setBigUint64(byteOffset, value, isLE2);
-        const _32n2 = BigInt(32);
-        const _u32_max = BigInt(4294967295);
-        const wh = Number(value >> _32n2 & _u32_max);
-        const wl = Number(value & _u32_max);
-        const h2 = isLE2 ? 4 : 0;
-        const l2 = isLE2 ? 0 : 4;
-        view.setUint32(byteOffset + h2, wh, isLE2);
-        view.setUint32(byteOffset + l2, wl, isLE2);
-      }
-      function Chi2(a2, b2, c2) {
-        return a2 & b2 ^ ~a2 & c2;
-      }
-      function Maj2(a2, b2, c2) {
-        return a2 & b2 ^ a2 & c2 ^ b2 & c2;
-      }
-      var HashMD2 = class extends utils_ts_1.Hash {
-        constructor(blockLen, outputLen, padOffset, isLE2) {
-          super();
-          this.finished = false;
-          this.length = 0;
-          this.pos = 0;
-          this.destroyed = false;
-          this.blockLen = blockLen;
-          this.outputLen = outputLen;
-          this.padOffset = padOffset;
-          this.isLE = isLE2;
-          this.buffer = new Uint8Array(blockLen);
-          this.view = (0, utils_ts_1.createView)(this.buffer);
-        }
-        update(data) {
-          (0, utils_ts_1.aexists)(this);
-          data = (0, utils_ts_1.toBytes)(data);
-          (0, utils_ts_1.abytes)(data);
-          const { view, buffer, blockLen } = this;
-          const len = data.length;
-          for (let pos = 0; pos < len; ) {
-            const take = Math.min(blockLen - this.pos, len - pos);
-            if (take === blockLen) {
-              const dataView = (0, utils_ts_1.createView)(data);
-              for (; blockLen <= len - pos; pos += blockLen)
-                this.process(dataView, pos);
-              continue;
-            }
-            buffer.set(data.subarray(pos, pos + take), this.pos);
-            this.pos += take;
-            pos += take;
-            if (this.pos === blockLen) {
-              this.process(view, 0);
-              this.pos = 0;
-            }
-          }
-          this.length += data.length;
-          this.roundClean();
-          return this;
-        }
-        digestInto(out) {
-          (0, utils_ts_1.aexists)(this);
-          (0, utils_ts_1.aoutput)(out, this);
-          this.finished = true;
-          const { buffer, view, blockLen, isLE: isLE2 } = this;
-          let { pos } = this;
-          buffer[pos++] = 128;
-          (0, utils_ts_1.clean)(this.buffer.subarray(pos));
-          if (this.padOffset > blockLen - pos) {
-            this.process(view, 0);
-            pos = 0;
-          }
-          for (let i2 = pos; i2 < blockLen; i2++)
-            buffer[i2] = 0;
-          setBigUint64(view, blockLen - 8, BigInt(this.length * 8), isLE2);
-          this.process(view, 0);
-          const oview = (0, utils_ts_1.createView)(out);
-          const len = this.outputLen;
-          if (len % 4)
-            throw new Error("_sha2: outputLen should be aligned to 32bit");
-          const outLen = len / 4;
-          const state = this.get();
-          if (outLen > state.length)
-            throw new Error("_sha2: outputLen bigger than state");
-          for (let i2 = 0; i2 < outLen; i2++)
-            oview.setUint32(4 * i2, state[i2], isLE2);
-        }
-        digest() {
-          const { buffer, outputLen } = this;
-          this.digestInto(buffer);
-          const res = buffer.slice(0, outputLen);
-          this.destroy();
-          return res;
-        }
-        _cloneInto(to) {
-          to || (to = new this.constructor());
-          to.set(...this.get());
-          const { blockLen, buffer, length, finished, destroyed, pos } = this;
-          to.destroyed = destroyed;
-          to.finished = finished;
-          to.length = length;
-          to.pos = pos;
-          if (length % blockLen)
-            to.buffer.set(buffer);
-          return to;
-        }
-        clone() {
-          return this._cloneInto();
-        }
-      };
-      exports2.HashMD = HashMD2;
-      exports2.SHA256_IV = Uint32Array.from([
-        1779033703,
-        3144134277,
-        1013904242,
-        2773480762,
-        1359893119,
-        2600822924,
-        528734635,
-        1541459225
-      ]);
-      exports2.SHA224_IV = Uint32Array.from([
-        3238371032,
-        914150663,
-        812702999,
-        4144912697,
-        4290775857,
-        1750603025,
-        1694076839,
-        3204075428
-      ]);
-      exports2.SHA384_IV = Uint32Array.from([
-        3418070365,
-        3238371032,
-        1654270250,
-        914150663,
-        2438529370,
-        812702999,
-        355462360,
-        4144912697,
-        1731405415,
-        4290775857,
-        2394180231,
-        1750603025,
-        3675008525,
-        1694076839,
-        1203062813,
-        3204075428
-      ]);
-      exports2.SHA512_IV = Uint32Array.from([
-        1779033703,
-        4089235720,
-        3144134277,
-        2227873595,
-        1013904242,
-        4271175723,
-        2773480762,
-        1595750129,
-        1359893119,
-        2917565137,
-        2600822924,
-        725511199,
-        528734635,
-        4215389547,
-        1541459225,
-        327033209
-      ]);
-    }
-  });
-
-  // ../../node_modules/@noble/hashes/_u64.js
-  var require_u64 = __commonJS({
-    "../../node_modules/@noble/hashes/_u64.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.toBig = exports2.shrSL = exports2.shrSH = exports2.rotrSL = exports2.rotrSH = exports2.rotrBL = exports2.rotrBH = exports2.rotr32L = exports2.rotr32H = exports2.rotlSL = exports2.rotlSH = exports2.rotlBL = exports2.rotlBH = exports2.add5L = exports2.add5H = exports2.add4L = exports2.add4H = exports2.add3L = exports2.add3H = void 0;
-      exports2.add = add2;
-      exports2.fromBig = fromBig2;
-      exports2.split = split2;
-      var U32_MASK642 = /* @__PURE__ */ BigInt(2 ** 32 - 1);
-      var _32n2 = /* @__PURE__ */ BigInt(32);
-      function fromBig2(n2, le = false) {
-        if (le)
-          return { h: Number(n2 & U32_MASK642), l: Number(n2 >> _32n2 & U32_MASK642) };
-        return { h: Number(n2 >> _32n2 & U32_MASK642) | 0, l: Number(n2 & U32_MASK642) | 0 };
-      }
-      function split2(lst, le = false) {
-        const len = lst.length;
-        let Ah = new Uint32Array(len);
-        let Al = new Uint32Array(len);
-        for (let i2 = 0; i2 < len; i2++) {
-          const { h: h2, l: l2 } = fromBig2(lst[i2], le);
-          [Ah[i2], Al[i2]] = [h2, l2];
-        }
-        return [Ah, Al];
-      }
-      var toBig = (h2, l2) => BigInt(h2 >>> 0) << _32n2 | BigInt(l2 >>> 0);
-      exports2.toBig = toBig;
-      var shrSH2 = (h2, _l, s2) => h2 >>> s2;
-      exports2.shrSH = shrSH2;
-      var shrSL2 = (h2, l2, s2) => h2 << 32 - s2 | l2 >>> s2;
-      exports2.shrSL = shrSL2;
-      var rotrSH2 = (h2, l2, s2) => h2 >>> s2 | l2 << 32 - s2;
-      exports2.rotrSH = rotrSH2;
-      var rotrSL2 = (h2, l2, s2) => h2 << 32 - s2 | l2 >>> s2;
-      exports2.rotrSL = rotrSL2;
-      var rotrBH2 = (h2, l2, s2) => h2 << 64 - s2 | l2 >>> s2 - 32;
-      exports2.rotrBH = rotrBH2;
-      var rotrBL2 = (h2, l2, s2) => h2 >>> s2 - 32 | l2 << 64 - s2;
-      exports2.rotrBL = rotrBL2;
-      var rotr32H = (_h, l2) => l2;
-      exports2.rotr32H = rotr32H;
-      var rotr32L = (h2, _l) => h2;
-      exports2.rotr32L = rotr32L;
-      var rotlSH2 = (h2, l2, s2) => h2 << s2 | l2 >>> 32 - s2;
-      exports2.rotlSH = rotlSH2;
-      var rotlSL2 = (h2, l2, s2) => l2 << s2 | h2 >>> 32 - s2;
-      exports2.rotlSL = rotlSL2;
-      var rotlBH2 = (h2, l2, s2) => l2 << s2 - 32 | h2 >>> 64 - s2;
-      exports2.rotlBH = rotlBH2;
-      var rotlBL2 = (h2, l2, s2) => h2 << s2 - 32 | l2 >>> 64 - s2;
-      exports2.rotlBL = rotlBL2;
-      function add2(Ah, Al, Bh, Bl) {
-        const l2 = (Al >>> 0) + (Bl >>> 0);
-        return { h: Ah + Bh + (l2 / 2 ** 32 | 0) | 0, l: l2 | 0 };
-      }
-      var add3L2 = (Al, Bl, Cl) => (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0);
-      exports2.add3L = add3L2;
-      var add3H2 = (low, Ah, Bh, Ch) => Ah + Bh + Ch + (low / 2 ** 32 | 0) | 0;
-      exports2.add3H = add3H2;
-      var add4L2 = (Al, Bl, Cl, Dl) => (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0) + (Dl >>> 0);
-      exports2.add4L = add4L2;
-      var add4H2 = (low, Ah, Bh, Ch, Dh) => Ah + Bh + Ch + Dh + (low / 2 ** 32 | 0) | 0;
-      exports2.add4H = add4H2;
-      var add5L2 = (Al, Bl, Cl, Dl, El) => (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0) + (Dl >>> 0) + (El >>> 0);
-      exports2.add5L = add5L2;
-      var add5H2 = (low, Ah, Bh, Ch, Dh, Eh) => Ah + Bh + Ch + Dh + Eh + (low / 2 ** 32 | 0) | 0;
-      exports2.add5H = add5H2;
-      var u64 = {
-        fromBig: fromBig2,
-        split: split2,
-        toBig,
-        shrSH: shrSH2,
-        shrSL: shrSL2,
-        rotrSH: rotrSH2,
-        rotrSL: rotrSL2,
-        rotrBH: rotrBH2,
-        rotrBL: rotrBL2,
-        rotr32H,
-        rotr32L,
-        rotlSH: rotlSH2,
-        rotlSL: rotlSL2,
-        rotlBH: rotlBH2,
-        rotlBL: rotlBL2,
-        add: add2,
-        add3L: add3L2,
-        add3H: add3H2,
-        add4L: add4L2,
-        add4H: add4H2,
-        add5H: add5H2,
-        add5L: add5L2
-      };
-      exports2.default = u64;
-    }
-  });
-
-  // ../../node_modules/@noble/hashes/sha2.js
-  var require_sha2 = __commonJS({
-    "../../node_modules/@noble/hashes/sha2.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.sha512_224 = exports2.sha512_256 = exports2.sha384 = exports2.sha512 = exports2.sha224 = exports2.sha256 = exports2.SHA512_256 = exports2.SHA512_224 = exports2.SHA384 = exports2.SHA512 = exports2.SHA224 = exports2.SHA256 = void 0;
-      var _md_ts_1 = require_md();
-      var u64 = require_u64();
-      var utils_ts_1 = require_utils2();
-      var SHA256_K2 = /* @__PURE__ */ Uint32Array.from([
-        1116352408,
-        1899447441,
-        3049323471,
-        3921009573,
-        961987163,
-        1508970993,
-        2453635748,
-        2870763221,
-        3624381080,
-        310598401,
-        607225278,
-        1426881987,
-        1925078388,
-        2162078206,
-        2614888103,
-        3248222580,
-        3835390401,
-        4022224774,
-        264347078,
-        604807628,
-        770255983,
-        1249150122,
-        1555081692,
-        1996064986,
-        2554220882,
-        2821834349,
-        2952996808,
-        3210313671,
-        3336571891,
-        3584528711,
-        113926993,
-        338241895,
-        666307205,
-        773529912,
-        1294757372,
-        1396182291,
-        1695183700,
-        1986661051,
-        2177026350,
-        2456956037,
-        2730485921,
-        2820302411,
-        3259730800,
-        3345764771,
-        3516065817,
-        3600352804,
-        4094571909,
-        275423344,
-        430227734,
-        506948616,
-        659060556,
-        883997877,
-        958139571,
-        1322822218,
-        1537002063,
-        1747873779,
-        1955562222,
-        2024104815,
-        2227730452,
-        2361852424,
-        2428436474,
-        2756734187,
-        3204031479,
-        3329325298
-      ]);
-      var SHA256_W2 = /* @__PURE__ */ new Uint32Array(64);
-      var SHA256 = class extends _md_ts_1.HashMD {
-        constructor(outputLen = 32) {
-          super(64, outputLen, 8, false);
-          this.A = _md_ts_1.SHA256_IV[0] | 0;
-          this.B = _md_ts_1.SHA256_IV[1] | 0;
-          this.C = _md_ts_1.SHA256_IV[2] | 0;
-          this.D = _md_ts_1.SHA256_IV[3] | 0;
-          this.E = _md_ts_1.SHA256_IV[4] | 0;
-          this.F = _md_ts_1.SHA256_IV[5] | 0;
-          this.G = _md_ts_1.SHA256_IV[6] | 0;
-          this.H = _md_ts_1.SHA256_IV[7] | 0;
-        }
-        get() {
-          const { A: A2, B: B2, C: C3, D: D2, E: E2, F: F2, G: G3, H: H2 } = this;
-          return [A2, B2, C3, D2, E2, F2, G3, H2];
-        }
-        // prettier-ignore
-        set(A2, B2, C3, D2, E2, F2, G3, H2) {
-          this.A = A2 | 0;
-          this.B = B2 | 0;
-          this.C = C3 | 0;
-          this.D = D2 | 0;
-          this.E = E2 | 0;
-          this.F = F2 | 0;
-          this.G = G3 | 0;
-          this.H = H2 | 0;
-        }
-        process(view, offset) {
-          for (let i2 = 0; i2 < 16; i2++, offset += 4)
-            SHA256_W2[i2] = view.getUint32(offset, false);
-          for (let i2 = 16; i2 < 64; i2++) {
-            const W15 = SHA256_W2[i2 - 15];
-            const W22 = SHA256_W2[i2 - 2];
-            const s0 = (0, utils_ts_1.rotr)(W15, 7) ^ (0, utils_ts_1.rotr)(W15, 18) ^ W15 >>> 3;
-            const s1 = (0, utils_ts_1.rotr)(W22, 17) ^ (0, utils_ts_1.rotr)(W22, 19) ^ W22 >>> 10;
-            SHA256_W2[i2] = s1 + SHA256_W2[i2 - 7] + s0 + SHA256_W2[i2 - 16] | 0;
-          }
-          let { A: A2, B: B2, C: C3, D: D2, E: E2, F: F2, G: G3, H: H2 } = this;
-          for (let i2 = 0; i2 < 64; i2++) {
-            const sigma1 = (0, utils_ts_1.rotr)(E2, 6) ^ (0, utils_ts_1.rotr)(E2, 11) ^ (0, utils_ts_1.rotr)(E2, 25);
-            const T1 = H2 + sigma1 + (0, _md_ts_1.Chi)(E2, F2, G3) + SHA256_K2[i2] + SHA256_W2[i2] | 0;
-            const sigma0 = (0, utils_ts_1.rotr)(A2, 2) ^ (0, utils_ts_1.rotr)(A2, 13) ^ (0, utils_ts_1.rotr)(A2, 22);
-            const T2 = sigma0 + (0, _md_ts_1.Maj)(A2, B2, C3) | 0;
-            H2 = G3;
-            G3 = F2;
-            F2 = E2;
-            E2 = D2 + T1 | 0;
-            D2 = C3;
-            C3 = B2;
-            B2 = A2;
-            A2 = T1 + T2 | 0;
-          }
-          A2 = A2 + this.A | 0;
-          B2 = B2 + this.B | 0;
-          C3 = C3 + this.C | 0;
-          D2 = D2 + this.D | 0;
-          E2 = E2 + this.E | 0;
-          F2 = F2 + this.F | 0;
-          G3 = G3 + this.G | 0;
-          H2 = H2 + this.H | 0;
-          this.set(A2, B2, C3, D2, E2, F2, G3, H2);
-        }
-        roundClean() {
-          (0, utils_ts_1.clean)(SHA256_W2);
-        }
-        destroy() {
-          this.set(0, 0, 0, 0, 0, 0, 0, 0);
-          (0, utils_ts_1.clean)(this.buffer);
-        }
-      };
-      exports2.SHA256 = SHA256;
-      var SHA224 = class extends SHA256 {
-        constructor() {
-          super(28);
-          this.A = _md_ts_1.SHA224_IV[0] | 0;
-          this.B = _md_ts_1.SHA224_IV[1] | 0;
-          this.C = _md_ts_1.SHA224_IV[2] | 0;
-          this.D = _md_ts_1.SHA224_IV[3] | 0;
-          this.E = _md_ts_1.SHA224_IV[4] | 0;
-          this.F = _md_ts_1.SHA224_IV[5] | 0;
-          this.G = _md_ts_1.SHA224_IV[6] | 0;
-          this.H = _md_ts_1.SHA224_IV[7] | 0;
-        }
-      };
-      exports2.SHA224 = SHA224;
-      var K5122 = /* @__PURE__ */ (() => u64.split([
-        "0x428a2f98d728ae22",
-        "0x7137449123ef65cd",
-        "0xb5c0fbcfec4d3b2f",
-        "0xe9b5dba58189dbbc",
-        "0x3956c25bf348b538",
-        "0x59f111f1b605d019",
-        "0x923f82a4af194f9b",
-        "0xab1c5ed5da6d8118",
-        "0xd807aa98a3030242",
-        "0x12835b0145706fbe",
-        "0x243185be4ee4b28c",
-        "0x550c7dc3d5ffb4e2",
-        "0x72be5d74f27b896f",
-        "0x80deb1fe3b1696b1",
-        "0x9bdc06a725c71235",
-        "0xc19bf174cf692694",
-        "0xe49b69c19ef14ad2",
-        "0xefbe4786384f25e3",
-        "0x0fc19dc68b8cd5b5",
-        "0x240ca1cc77ac9c65",
-        "0x2de92c6f592b0275",
-        "0x4a7484aa6ea6e483",
-        "0x5cb0a9dcbd41fbd4",
-        "0x76f988da831153b5",
-        "0x983e5152ee66dfab",
-        "0xa831c66d2db43210",
-        "0xb00327c898fb213f",
-        "0xbf597fc7beef0ee4",
-        "0xc6e00bf33da88fc2",
-        "0xd5a79147930aa725",
-        "0x06ca6351e003826f",
-        "0x142929670a0e6e70",
-        "0x27b70a8546d22ffc",
-        "0x2e1b21385c26c926",
-        "0x4d2c6dfc5ac42aed",
-        "0x53380d139d95b3df",
-        "0x650a73548baf63de",
-        "0x766a0abb3c77b2a8",
-        "0x81c2c92e47edaee6",
-        "0x92722c851482353b",
-        "0xa2bfe8a14cf10364",
-        "0xa81a664bbc423001",
-        "0xc24b8b70d0f89791",
-        "0xc76c51a30654be30",
-        "0xd192e819d6ef5218",
-        "0xd69906245565a910",
-        "0xf40e35855771202a",
-        "0x106aa07032bbd1b8",
-        "0x19a4c116b8d2d0c8",
-        "0x1e376c085141ab53",
-        "0x2748774cdf8eeb99",
-        "0x34b0bcb5e19b48a8",
-        "0x391c0cb3c5c95a63",
-        "0x4ed8aa4ae3418acb",
-        "0x5b9cca4f7763e373",
-        "0x682e6ff3d6b2b8a3",
-        "0x748f82ee5defb2fc",
-        "0x78a5636f43172f60",
-        "0x84c87814a1f0ab72",
-        "0x8cc702081a6439ec",
-        "0x90befffa23631e28",
-        "0xa4506cebde82bde9",
-        "0xbef9a3f7b2c67915",
-        "0xc67178f2e372532b",
-        "0xca273eceea26619c",
-        "0xd186b8c721c0c207",
-        "0xeada7dd6cde0eb1e",
-        "0xf57d4f7fee6ed178",
-        "0x06f067aa72176fba",
-        "0x0a637dc5a2c898a6",
-        "0x113f9804bef90dae",
-        "0x1b710b35131c471b",
-        "0x28db77f523047d84",
-        "0x32caab7b40c72493",
-        "0x3c9ebe0a15c9bebc",
-        "0x431d67c49c100d4c",
-        "0x4cc5d4becb3e42b6",
-        "0x597f299cfc657e2a",
-        "0x5fcb6fab3ad6faec",
-        "0x6c44198c4a475817"
-      ].map((n2) => BigInt(n2))))();
-      var SHA512_Kh2 = /* @__PURE__ */ (() => K5122[0])();
-      var SHA512_Kl2 = /* @__PURE__ */ (() => K5122[1])();
-      var SHA512_W_H2 = /* @__PURE__ */ new Uint32Array(80);
-      var SHA512_W_L2 = /* @__PURE__ */ new Uint32Array(80);
-      var SHA512 = class extends _md_ts_1.HashMD {
-        constructor(outputLen = 64) {
-          super(128, outputLen, 16, false);
-          this.Ah = _md_ts_1.SHA512_IV[0] | 0;
-          this.Al = _md_ts_1.SHA512_IV[1] | 0;
-          this.Bh = _md_ts_1.SHA512_IV[2] | 0;
-          this.Bl = _md_ts_1.SHA512_IV[3] | 0;
-          this.Ch = _md_ts_1.SHA512_IV[4] | 0;
-          this.Cl = _md_ts_1.SHA512_IV[5] | 0;
-          this.Dh = _md_ts_1.SHA512_IV[6] | 0;
-          this.Dl = _md_ts_1.SHA512_IV[7] | 0;
-          this.Eh = _md_ts_1.SHA512_IV[8] | 0;
-          this.El = _md_ts_1.SHA512_IV[9] | 0;
-          this.Fh = _md_ts_1.SHA512_IV[10] | 0;
-          this.Fl = _md_ts_1.SHA512_IV[11] | 0;
-          this.Gh = _md_ts_1.SHA512_IV[12] | 0;
-          this.Gl = _md_ts_1.SHA512_IV[13] | 0;
-          this.Hh = _md_ts_1.SHA512_IV[14] | 0;
-          this.Hl = _md_ts_1.SHA512_IV[15] | 0;
-        }
-        // prettier-ignore
-        get() {
-          const { Ah, Al, Bh, Bl, Ch, Cl, Dh, Dl, Eh, El, Fh, Fl, Gh, Gl, Hh, Hl } = this;
-          return [Ah, Al, Bh, Bl, Ch, Cl, Dh, Dl, Eh, El, Fh, Fl, Gh, Gl, Hh, Hl];
-        }
-        // prettier-ignore
-        set(Ah, Al, Bh, Bl, Ch, Cl, Dh, Dl, Eh, El, Fh, Fl, Gh, Gl, Hh, Hl) {
-          this.Ah = Ah | 0;
-          this.Al = Al | 0;
-          this.Bh = Bh | 0;
-          this.Bl = Bl | 0;
-          this.Ch = Ch | 0;
-          this.Cl = Cl | 0;
-          this.Dh = Dh | 0;
-          this.Dl = Dl | 0;
-          this.Eh = Eh | 0;
-          this.El = El | 0;
-          this.Fh = Fh | 0;
-          this.Fl = Fl | 0;
-          this.Gh = Gh | 0;
-          this.Gl = Gl | 0;
-          this.Hh = Hh | 0;
-          this.Hl = Hl | 0;
-        }
-        process(view, offset) {
-          for (let i2 = 0; i2 < 16; i2++, offset += 4) {
-            SHA512_W_H2[i2] = view.getUint32(offset);
-            SHA512_W_L2[i2] = view.getUint32(offset += 4);
-          }
-          for (let i2 = 16; i2 < 80; i2++) {
-            const W15h = SHA512_W_H2[i2 - 15] | 0;
-            const W15l = SHA512_W_L2[i2 - 15] | 0;
-            const s0h = u64.rotrSH(W15h, W15l, 1) ^ u64.rotrSH(W15h, W15l, 8) ^ u64.shrSH(W15h, W15l, 7);
-            const s0l = u64.rotrSL(W15h, W15l, 1) ^ u64.rotrSL(W15h, W15l, 8) ^ u64.shrSL(W15h, W15l, 7);
-            const W2h = SHA512_W_H2[i2 - 2] | 0;
-            const W2l = SHA512_W_L2[i2 - 2] | 0;
-            const s1h = u64.rotrSH(W2h, W2l, 19) ^ u64.rotrBH(W2h, W2l, 61) ^ u64.shrSH(W2h, W2l, 6);
-            const s1l = u64.rotrSL(W2h, W2l, 19) ^ u64.rotrBL(W2h, W2l, 61) ^ u64.shrSL(W2h, W2l, 6);
-            const SUMl = u64.add4L(s0l, s1l, SHA512_W_L2[i2 - 7], SHA512_W_L2[i2 - 16]);
-            const SUMh = u64.add4H(SUMl, s0h, s1h, SHA512_W_H2[i2 - 7], SHA512_W_H2[i2 - 16]);
-            SHA512_W_H2[i2] = SUMh | 0;
-            SHA512_W_L2[i2] = SUMl | 0;
-          }
-          let { Ah, Al, Bh, Bl, Ch, Cl, Dh, Dl, Eh, El, Fh, Fl, Gh, Gl, Hh, Hl } = this;
-          for (let i2 = 0; i2 < 80; i2++) {
-            const sigma1h = u64.rotrSH(Eh, El, 14) ^ u64.rotrSH(Eh, El, 18) ^ u64.rotrBH(Eh, El, 41);
-            const sigma1l = u64.rotrSL(Eh, El, 14) ^ u64.rotrSL(Eh, El, 18) ^ u64.rotrBL(Eh, El, 41);
-            const CHIh = Eh & Fh ^ ~Eh & Gh;
-            const CHIl = El & Fl ^ ~El & Gl;
-            const T1ll = u64.add5L(Hl, sigma1l, CHIl, SHA512_Kl2[i2], SHA512_W_L2[i2]);
-            const T1h = u64.add5H(T1ll, Hh, sigma1h, CHIh, SHA512_Kh2[i2], SHA512_W_H2[i2]);
-            const T1l = T1ll | 0;
-            const sigma0h = u64.rotrSH(Ah, Al, 28) ^ u64.rotrBH(Ah, Al, 34) ^ u64.rotrBH(Ah, Al, 39);
-            const sigma0l = u64.rotrSL(Ah, Al, 28) ^ u64.rotrBL(Ah, Al, 34) ^ u64.rotrBL(Ah, Al, 39);
-            const MAJh = Ah & Bh ^ Ah & Ch ^ Bh & Ch;
-            const MAJl = Al & Bl ^ Al & Cl ^ Bl & Cl;
-            Hh = Gh | 0;
-            Hl = Gl | 0;
-            Gh = Fh | 0;
-            Gl = Fl | 0;
-            Fh = Eh | 0;
-            Fl = El | 0;
-            ({ h: Eh, l: El } = u64.add(Dh | 0, Dl | 0, T1h | 0, T1l | 0));
-            Dh = Ch | 0;
-            Dl = Cl | 0;
-            Ch = Bh | 0;
-            Cl = Bl | 0;
-            Bh = Ah | 0;
-            Bl = Al | 0;
-            const All = u64.add3L(T1l, sigma0l, MAJl);
-            Ah = u64.add3H(All, T1h, sigma0h, MAJh);
-            Al = All | 0;
-          }
-          ({ h: Ah, l: Al } = u64.add(this.Ah | 0, this.Al | 0, Ah | 0, Al | 0));
-          ({ h: Bh, l: Bl } = u64.add(this.Bh | 0, this.Bl | 0, Bh | 0, Bl | 0));
-          ({ h: Ch, l: Cl } = u64.add(this.Ch | 0, this.Cl | 0, Ch | 0, Cl | 0));
-          ({ h: Dh, l: Dl } = u64.add(this.Dh | 0, this.Dl | 0, Dh | 0, Dl | 0));
-          ({ h: Eh, l: El } = u64.add(this.Eh | 0, this.El | 0, Eh | 0, El | 0));
-          ({ h: Fh, l: Fl } = u64.add(this.Fh | 0, this.Fl | 0, Fh | 0, Fl | 0));
-          ({ h: Gh, l: Gl } = u64.add(this.Gh | 0, this.Gl | 0, Gh | 0, Gl | 0));
-          ({ h: Hh, l: Hl } = u64.add(this.Hh | 0, this.Hl | 0, Hh | 0, Hl | 0));
-          this.set(Ah, Al, Bh, Bl, Ch, Cl, Dh, Dl, Eh, El, Fh, Fl, Gh, Gl, Hh, Hl);
-        }
-        roundClean() {
-          (0, utils_ts_1.clean)(SHA512_W_H2, SHA512_W_L2);
-        }
-        destroy() {
-          (0, utils_ts_1.clean)(this.buffer);
-          this.set(0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0);
-        }
-      };
-      exports2.SHA512 = SHA512;
-      var SHA384 = class extends SHA512 {
-        constructor() {
-          super(48);
-          this.Ah = _md_ts_1.SHA384_IV[0] | 0;
-          this.Al = _md_ts_1.SHA384_IV[1] | 0;
-          this.Bh = _md_ts_1.SHA384_IV[2] | 0;
-          this.Bl = _md_ts_1.SHA384_IV[3] | 0;
-          this.Ch = _md_ts_1.SHA384_IV[4] | 0;
-          this.Cl = _md_ts_1.SHA384_IV[5] | 0;
-          this.Dh = _md_ts_1.SHA384_IV[6] | 0;
-          this.Dl = _md_ts_1.SHA384_IV[7] | 0;
-          this.Eh = _md_ts_1.SHA384_IV[8] | 0;
-          this.El = _md_ts_1.SHA384_IV[9] | 0;
-          this.Fh = _md_ts_1.SHA384_IV[10] | 0;
-          this.Fl = _md_ts_1.SHA384_IV[11] | 0;
-          this.Gh = _md_ts_1.SHA384_IV[12] | 0;
-          this.Gl = _md_ts_1.SHA384_IV[13] | 0;
-          this.Hh = _md_ts_1.SHA384_IV[14] | 0;
-          this.Hl = _md_ts_1.SHA384_IV[15] | 0;
-        }
-      };
-      exports2.SHA384 = SHA384;
-      var T224_IV = /* @__PURE__ */ Uint32Array.from([
-        2352822216,
-        424955298,
-        1944164710,
-        2312950998,
-        502970286,
-        855612546,
-        1738396948,
-        1479516111,
-        258812777,
-        2077511080,
-        2011393907,
-        79989058,
-        1067287976,
-        1780299464,
-        286451373,
-        2446758561
-      ]);
-      var T256_IV = /* @__PURE__ */ Uint32Array.from([
-        573645204,
-        4230739756,
-        2673172387,
-        3360449730,
-        596883563,
-        1867755857,
-        2520282905,
-        1497426621,
-        2519219938,
-        2827943907,
-        3193839141,
-        1401305490,
-        721525244,
-        746961066,
-        246885852,
-        2177182882
-      ]);
-      var SHA512_224 = class extends SHA512 {
-        constructor() {
-          super(28);
-          this.Ah = T224_IV[0] | 0;
-          this.Al = T224_IV[1] | 0;
-          this.Bh = T224_IV[2] | 0;
-          this.Bl = T224_IV[3] | 0;
-          this.Ch = T224_IV[4] | 0;
-          this.Cl = T224_IV[5] | 0;
-          this.Dh = T224_IV[6] | 0;
-          this.Dl = T224_IV[7] | 0;
-          this.Eh = T224_IV[8] | 0;
-          this.El = T224_IV[9] | 0;
-          this.Fh = T224_IV[10] | 0;
-          this.Fl = T224_IV[11] | 0;
-          this.Gh = T224_IV[12] | 0;
-          this.Gl = T224_IV[13] | 0;
-          this.Hh = T224_IV[14] | 0;
-          this.Hl = T224_IV[15] | 0;
-        }
-      };
-      exports2.SHA512_224 = SHA512_224;
-      var SHA512_256 = class extends SHA512 {
-        constructor() {
-          super(32);
-          this.Ah = T256_IV[0] | 0;
-          this.Al = T256_IV[1] | 0;
-          this.Bh = T256_IV[2] | 0;
-          this.Bl = T256_IV[3] | 0;
-          this.Ch = T256_IV[4] | 0;
-          this.Cl = T256_IV[5] | 0;
-          this.Dh = T256_IV[6] | 0;
-          this.Dl = T256_IV[7] | 0;
-          this.Eh = T256_IV[8] | 0;
-          this.El = T256_IV[9] | 0;
-          this.Fh = T256_IV[10] | 0;
-          this.Fl = T256_IV[11] | 0;
-          this.Gh = T256_IV[12] | 0;
-          this.Gl = T256_IV[13] | 0;
-          this.Hh = T256_IV[14] | 0;
-          this.Hl = T256_IV[15] | 0;
-        }
-      };
-      exports2.SHA512_256 = SHA512_256;
-      exports2.sha256 = (0, utils_ts_1.createHasher)(() => new SHA256());
-      exports2.sha224 = (0, utils_ts_1.createHasher)(() => new SHA224());
-      exports2.sha512 = (0, utils_ts_1.createHasher)(() => new SHA512());
-      exports2.sha384 = (0, utils_ts_1.createHasher)(() => new SHA384());
-      exports2.sha512_256 = (0, utils_ts_1.createHasher)(() => new SHA512_256());
-      exports2.sha512_224 = (0, utils_ts_1.createHasher)(() => new SHA512_224());
-    }
-  });
-
-  // ../../node_modules/@noble/hashes/sha256.js
-  var require_sha256 = __commonJS({
-    "../../node_modules/@noble/hashes/sha256.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.sha224 = exports2.SHA224 = exports2.sha256 = exports2.SHA256 = void 0;
-      var sha2_ts_1 = require_sha2();
-      exports2.SHA256 = sha2_ts_1.SHA256;
-      exports2.sha256 = sha2_ts_1.sha256;
-      exports2.SHA224 = sha2_ts_1.SHA224;
-      exports2.sha224 = sha2_ts_1.sha224;
-    }
-  });
-
-  // ../crypto/dist/suites/bsv-ecdsa.js
-  var require_bsv_ecdsa = __commonJS({
-    "../crypto/dist/suites/bsv-ecdsa.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o2, m2, k2, k22) {
-        if (k22 === void 0) k22 = k2;
-        var desc = Object.getOwnPropertyDescriptor(m2, k2);
-        if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
-          desc = { enumerable: true, get: function() {
-            return m2[k2];
-          } };
-        }
-        Object.defineProperty(o2, k22, desc);
-      }) : (function(o2, m2, k2, k22) {
-        if (k22 === void 0) k22 = k2;
-        o2[k22] = m2[k2];
-      }));
-      var __setModuleDefault = exports2 && exports2.__setModuleDefault || (Object.create ? (function(o2, v2) {
-        Object.defineProperty(o2, "default", { enumerable: true, value: v2 });
-      }) : function(o2, v2) {
-        o2["default"] = v2;
-      });
-      var __importStar = exports2 && exports2.__importStar || /* @__PURE__ */ (function() {
-        var ownKeys = function(o2) {
-          ownKeys = Object.getOwnPropertyNames || function(o3) {
-            var ar = [];
-            for (var k2 in o3) if (Object.prototype.hasOwnProperty.call(o3, k2)) ar[ar.length] = k2;
-            return ar;
-          };
-          return ownKeys(o2);
-        };
-        return function(mod) {
-          if (mod && mod.__esModule) return mod;
-          var result = {};
-          if (mod != null) {
-            for (var k2 = ownKeys(mod), i2 = 0; i2 < k2.length; i2++) if (k2[i2] !== "default") __createBinding(result, mod, k2[i2]);
-          }
-          __setModuleDefault(result, mod);
-          return result;
-        };
-      })();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.BsvEcdsaSuite = void 0;
-      var secp256k1 = __importStar((init_secp256k1(), __toCommonJS(secp256k1_exports)));
-      var hmac_1 = require_hmac();
-      var sha256_1 = require_sha256();
-      var utils_1 = require_utils();
-      secp256k1.etc.hmacSha256Sync = (key, ...msgs) => (0, hmac_1.hmac)(sha256_1.sha256, key, secp256k1.etc.concatBytes(...msgs));
-      var BsvEcdsaSuite2 = class {
-        constructor() {
-          __publicField(this, "suiteId", "bsv-ecdsa-secp256k1");
-          __publicField(this, "version", "1.0.0");
-        }
-        async generateKeypair() {
-          const privateKey = secp256k1.utils.randomPrivateKey();
-          const publicKey = secp256k1.getPublicKey(privateKey, true);
-          return {
-            privateKey,
-            publicKey
-          };
-        }
-        async sign(privateKey, message) {
-          try {
-            const signature = await secp256k1.sign(message, privateKey);
-            return signature.toCompactRawBytes();
-          } catch (error) {
-            throw new Error(`BsvEcdsaSuite signing failed: ${error instanceof Error ? error.message : String(error)}`);
-          }
-        }
-        async verify(publicKey, message, signature) {
-          try {
-            return secp256k1.verify(signature, message, publicKey);
-          } catch (error) {
-            return false;
-          }
-        }
-        exportPublicKey(pub) {
-          return (0, utils_1.bytesToHex)(pub);
-        }
-        importPublicKey(encoded) {
-          return (0, utils_1.hexToBytes)(encoded);
-        }
-        exportPrivateKey(priv) {
-          return (0, utils_1.bytesToHex)(priv);
-        }
-        importPrivateKey(encoded) {
-          const bytes = (0, utils_1.hexToBytes)(encoded);
-          if (bytes.length !== 32) {
-            throw new Error("Private key must be 32 bytes");
-          }
-          return bytes;
-        }
-      };
-      exports2.BsvEcdsaSuite = BsvEcdsaSuite2;
-    }
-  });
-
-  // ../../node_modules/dilithium-crystals/dist/index.js
-  var require_dist = __commonJS({
-    "../../node_modules/dilithium-crystals/dist/index.js"(exports, module) {
-      init_esbuild_shims();
-      var dilithium = (function() {
-        var A, I, g, C = {};
-        function B(A2, I3) {
-          if (0 === A2) return I3;
-          throw new Error("Dilithium error: " + A2);
-        }
-        function Q(A2, I3) {
-          return new Uint8Array(new Uint8Array(C.HEAPU8.buffer, A2, I3));
-        }
-        function i(A2) {
-          try {
-            C._free(A2);
-          } catch (A3) {
-            setTimeout((function() {
-              throw A3;
-            }), 0);
-          }
-        }
-        C.ready = new Promise((function(A, I) {
-          function g(A2) {
-            return g = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(A3) {
-              return typeof A3;
-            } : function(A3) {
-              return A3 && "function" == typeof Symbol && A3.constructor === Symbol && A3 !== Symbol.prototype ? "symbol" : typeof A3;
-            }, g(A2);
-          }
-          (Q = {}).onAbort = I, Q.onRuntimeInitialized = function() {
-            try {
-              Q._dilithiumjs_public_key_bytes(), A(Q);
-            } catch (A2) {
-              I(A2);
-            }
-          };
-          var C, B, Q = void 0 !== Q ? Q : {}, i = Object.assign({}, Q), E = function(A2, I3) {
-            throw I3;
-          }, o = "object" == ("undefined" == typeof window ? "undefined" : g(window)), n = "function" == typeof importScripts, r = "object" == ("undefined" == typeof process ? "undefined" : g(process)) && "object" == g(process.versions) && "string" == typeof process.versions.node, t = "";
-          if (r) {
-            var a = eval("require")("fs"), e = eval("require")("path");
-            t = n ? e.dirname(t) + "/" : __dirname + "/", C = function(A2, I3) {
-              var g2 = x(A2);
-              return g2 ? I3 ? g2 : g2.toString() : (A2 = q(A2) ? new URL(A2) : e.normalize(A2), a.readFileSync(A2, I3 ? void 0 : "utf8"));
-            }, B = function(A2) {
-              var I3 = C(A2, true);
-              return I3.buffer || (I3 = new Uint8Array(I3)), I3;
-            }, function(A2, I3, g2) {
-              var C3 = !(arguments.length > 3 && void 0 !== arguments[3]) || arguments[3], B2 = x(A2);
-              B2 && I3(B2), A2 = q(A2) ? new URL(A2) : e.normalize(A2), a.readFile(A2, C3 ? void 0 : "utf8", (function(A3, B3) {
-                A3 ? g2(A3) : I3(C3 ? B3.buffer : B3);
-              }));
-            }, !Q.thisProgram && process.argv.length > 1 && process.argv[1].replace(/\\/g, "/"), process.argv.slice(2), "undefined" != typeof module && (module.exports = Q), process.on("uncaughtException", (function(A2) {
-              if (!("unwind" === A2 || A2 instanceof p || A2.context instanceof p)) throw A2;
-            })), E = function(A2, I3) {
-              throw process.exitCode = A2, I3;
-            }, Q.inspect = function() {
-              return "[Emscripten Module object]";
-            };
-          } else (o || n) && (n ? t = self.location.href : "undefined" != typeof document && document.currentScript && (t = document.currentScript.src), t = 0 !== t.indexOf("blob:") ? t.substr(0, t.replace(/[?#].*/, "").lastIndexOf("/") + 1) : "", C = function(A2) {
-            try {
-              var I3 = new XMLHttpRequest();
-              return I3.open("GET", A2, false), I3.send(null), I3.responseText;
-            } catch (I4) {
-              var g2 = x(A2);
-              if (g2) return (function(A3) {
-                for (var I5 = [], g3 = 0; g3 < A3.length; g3++) {
-                  var C3 = A3[g3];
-                  C3 > 255 && (C3 &= 255), I5.push(String.fromCharCode(C3));
-                }
-                return I5.join("");
-              })(g2);
-              throw I4;
-            }
-          }, n && (B = function(A2) {
-            try {
-              var I3 = new XMLHttpRequest();
-              return I3.open("GET", A2, false), I3.responseType = "arraybuffer", I3.send(null), new Uint8Array(I3.response);
-            } catch (I4) {
-              var g2 = x(A2);
-              if (g2) return g2;
-              throw I4;
-            }
-          }), function(A2, I3, g2) {
-            var C3 = new XMLHttpRequest();
-            C3.open("GET", A2, true), C3.responseType = "arraybuffer", C3.onload = function() {
-              if (200 == C3.status || 0 == C3.status && C3.response) I3(C3.response);
-              else {
-                var B2 = x(A2);
-                B2 ? I3(B2.buffer) : g2();
-              }
-            }, C3.onerror = g2, C3.send(null);
-          }, function(A2) {
-            return document.title = A2;
-          });
-          Q.print || console.log.bind(console);
-          var f, D = Q.printErr || console.error.bind(console);
-          Object.assign(Q, i), i = null, Q.arguments && Q.arguments, Q.thisProgram && Q.thisProgram, Q.quit && (E = Q.quit), Q.wasmBinary && (f = Q.wasmBinary);
-          var c, G = Q.noExitRuntime || true;
-          "object" != ("undefined" == typeof WebAssembly ? "undefined" : g(WebAssembly)) && U("no native wasm support detected");
-          var h, y, u, s, F = false;
-          var Y = [], N = [], w = [];
-          var S = 0, k = null, H = null;
-          function U(A2) {
-            throw Q.onAbort && Q.onAbort(A2), D(A2 = "Aborted(" + A2 + ")"), F = true, 1, A2 += ". Build with -sASSERTIONS for more info.", new WebAssembly.RuntimeError(A2);
-          }
-          var R, d, M = "data:application/octet-stream;base64,";
-          function J(A2) {
-            return A2.startsWith(M);
-          }
-          function q(A2) {
-            return A2.startsWith("file://");
+          function q(A2) {
+            return A2.startsWith("file://");
           }
           function l(A2) {
             return Promise.resolve().then((function() {
@@ -4965,206 +2415,1470 @@ var LumenKeys = (() => {
     }
   });
 
-  // ../crypto/dist/suites/ml-dsa.js
-  var require_ml_dsa = __commonJS({
-    "../crypto/dist/suites/ml-dsa.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o2, m2, k2, k22) {
-        if (k22 === void 0) k22 = k2;
-        var desc = Object.getOwnPropertyDescriptor(m2, k2);
-        if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
-          desc = { enumerable: true, get: function() {
-            return m2[k2];
-          } };
-        }
-        Object.defineProperty(o2, k22, desc);
-      }) : (function(o2, m2, k2, k22) {
-        if (k22 === void 0) k22 = k2;
-        o2[k22] = m2[k2];
-      }));
-      var __setModuleDefault = exports2 && exports2.__setModuleDefault || (Object.create ? (function(o2, v2) {
-        Object.defineProperty(o2, "default", { enumerable: true, value: v2 });
-      }) : function(o2, v2) {
-        o2["default"] = v2;
-      });
-      var __importStar = exports2 && exports2.__importStar || /* @__PURE__ */ (function() {
-        var ownKeys = function(o2) {
-          ownKeys = Object.getOwnPropertyNames || function(o3) {
-            var ar = [];
-            for (var k2 in o3) if (Object.prototype.hasOwnProperty.call(o3, k2)) ar[ar.length] = k2;
-            return ar;
-          };
-          return ownKeys(o2);
-        };
-        return function(mod) {
-          if (mod && mod.__esModule) return mod;
-          var result = {};
-          if (mod != null) {
-            for (var k2 = ownKeys(mod), i2 = 0; i2 < k2.length; i2++) if (k2[i2] !== "default") __createBinding(result, mod, k2[i2]);
-          }
-          __setModuleDefault(result, mod);
-          return result;
-        };
-      })();
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.MlDsaSuite = exports2.MlDsa87Suite = void 0;
-      var utils_1 = require_utils();
-      var dilithiumLib = null;
-      async function getDilithium() {
-        if (!dilithiumLib) {
-          dilithiumLib = await Promise.resolve().then(() => __importStar(require_dist()));
-        }
-        return dilithiumLib;
+  // src/browser.ts
+  var browser_exports = {};
+  __export(browser_exports, {
+    InMemoryKeyStorage: () => InMemoryKeyStorage,
+    createKeySDK: () => createKeySDK,
+    default: () => browser_default
+  });
+  init_esbuild_shims();
+
+  // src/sdk.ts
+  init_esbuild_shims();
+
+  // ../crypto/dist/esm/index.js
+  init_esbuild_shims();
+
+  // ../crypto/dist/esm/types.js
+  init_esbuild_shims();
+
+  // ../crypto/dist/esm/registry.js
+  init_esbuild_shims();
+  var SignatureSuiteRegistry = class {
+    constructor() {
+      __publicField(this, "suites", /* @__PURE__ */ new Map());
+    }
+    /**
+     * Register a signature suite implementation
+     */
+    register(suite) {
+      if (this.suites.has(suite.suiteId)) {
+        throw new Error(`Signature suite already registered: ${suite.suiteId}`);
       }
-      var MlDsa87Suite = class {
-        constructor() {
-          __publicField(this, "suiteId", "ml-dsa-87");
-          __publicField(this, "version", "1.0.0");
-        }
-        async generateKeypair() {
-          try {
-            const dilithium2 = await getDilithium();
-            const keypair = await dilithium2.keyPair();
-            return {
-              publicKey: new Uint8Array(keypair.publicKey),
-              privateKey: new Uint8Array(keypair.privateKey)
-            };
-          } catch (error) {
-            throw new Error(`ML-DSA-87 key generation failed: ${error instanceof Error ? error.message : String(error)}`);
-          }
-        }
-        async sign(privateKey, message) {
-          try {
-            const dilithium2 = await getDilithium();
-            const signature = await dilithium2.signDetached(Buffer.from(message), Buffer.from(privateKey));
-            return new Uint8Array(signature);
-          } catch (error) {
-            throw new Error(`ML-DSA-87 signing failed: ${error instanceof Error ? error.message : String(error)}`);
-          }
-        }
-        async verify(publicKey, message, signature) {
-          try {
-            const dilithium2 = await getDilithium();
-            return await dilithium2.verifyDetached(Buffer.from(signature), Buffer.from(message), Buffer.from(publicKey));
-          } catch (error) {
-            return false;
-          }
-        }
-        exportPublicKey(pub) {
-          return (0, utils_1.bytesToHex)(pub);
-        }
-        importPublicKey(encoded) {
-          const bytes = (0, utils_1.hexToBytes)(encoded);
-          if (bytes.length !== 2592) {
-            throw new Error(`ML-DSA-87 public key must be 2592 bytes, got ${bytes.length}`);
-          }
-          return bytes;
-        }
-        exportPrivateKey(priv) {
-          return (0, utils_1.bytesToHex)(priv);
-        }
-        importPrivateKey(encoded) {
-          const bytes = (0, utils_1.hexToBytes)(encoded);
-          if (bytes.length !== 4864) {
-            throw new Error(`ML-DSA-87 private key must be 4864 bytes, got ${bytes.length}`);
+      this.suites.set(suite.suiteId, suite);
+    }
+    /**
+     * Get a signature suite by ID
+     * @throws Error if suite is not registered
+     */
+    getSuite(suiteId) {
+      const suite = this.suites.get(suiteId);
+      if (!suite) {
+        throw new Error(`Unknown signature suite: ${suiteId}. Available: ${this.listSuites().join(", ")}`);
+      }
+      return suite;
+    }
+    /**
+     * Check if a suite is registered
+     */
+    hasSuite(suiteId) {
+      return this.suites.has(suiteId);
+    }
+    /**
+     * List all registered suite IDs
+     */
+    listSuites() {
+      return [...this.suites.keys()];
+    }
+    /**
+     * Unregister a suite (primarily for testing)
+     */
+    unregister(suiteId) {
+      return this.suites.delete(suiteId);
+    }
+    /**
+     * Clear all registered suites (primarily for testing)
+     */
+    clear() {
+      this.suites.clear();
+    }
+  };
+  var globalRegistry = new SignatureSuiteRegistry();
+
+  // ../crypto/dist/esm/utils.js
+  init_esbuild_shims();
+  function bytesToHex(bytes) {
+    return Array.from(bytes).map((b2) => b2.toString(16).padStart(2, "0")).join("");
+  }
+  function hexToBytes(hex) {
+    if (hex.length % 2 !== 0) {
+      throw new Error("Hex string must have even length");
+    }
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let i2 = 0; i2 < hex.length; i2 += 2) {
+      bytes[i2 / 2] = parseInt(hex.slice(i2, i2 + 2), 16);
+    }
+    return bytes;
+  }
+  async function hashBytes(bytes, algorithm) {
+    if (algorithm === "sha256") {
+      const crypto = await Promise.resolve().then(() => (init_crypto_browser_shim(), crypto_browser_shim_exports));
+      return new Uint8Array(crypto.createHash("sha256").update(bytes).digest());
+    } else if (algorithm === "sha512") {
+      const crypto = await Promise.resolve().then(() => (init_crypto_browser_shim(), crypto_browser_shim_exports));
+      return new Uint8Array(crypto.createHash("sha512").update(bytes).digest());
+    } else if (algorithm === "sha3-256") {
+      const crypto = await Promise.resolve().then(() => (init_crypto_browser_shim(), crypto_browser_shim_exports));
+      return new Uint8Array(crypto.createHash("sha3-256").update(bytes).digest());
+    }
+    throw new Error(`Unsupported hash algorithm: ${algorithm}`);
+  }
+
+  // ../crypto/dist/esm/signing.js
+  init_esbuild_shims();
+
+  // ../crypto/dist/esm/key-registry.js
+  init_esbuild_shims();
+  var InMemoryKeyStorage = class {
+    constructor() {
+      __publicField(this, "keys", /* @__PURE__ */ new Map());
+    }
+    async store(keyId, keypair, meta) {
+      this.keys.set(keyId, { keypair, meta });
+    }
+    async load(keyId) {
+      return this.keys.get(keyId) || null;
+    }
+    async list(filter) {
+      const allMeta = Array.from(this.keys.values()).map((k2) => k2.meta);
+      if (!filter) {
+        return allMeta;
+      }
+      return allMeta.filter((meta) => {
+        return Object.entries(filter).every(([key, value]) => {
+          if (key === "usage" && Array.isArray(value)) {
+            return value.some((u2) => meta.usage.includes(u2));
           }
-          return bytes;
-        }
+          return meta[key] === value;
+        });
+      });
+    }
+    async delete(keyId) {
+      this.keys.delete(keyId);
+    }
+    async updateMeta(keyId, updates) {
+      const existing = this.keys.get(keyId);
+      if (!existing) {
+        throw new Error(`Key not found: ${keyId}`);
+      }
+      this.keys.set(keyId, {
+        keypair: existing.keypair,
+        meta: { ...existing.meta, ...updates }
+      });
+    }
+    /**
+     * Clear all keys (testing only).
+     */
+    clear() {
+      this.keys.clear();
+    }
+  };
+  var KeyRegistry = class {
+    constructor(storage = new InMemoryKeyStorage()) {
+      __publicField(this, "storage");
+      this.storage = storage;
+    }
+    /**
+     * Register a new keypair with metadata.
+     */
+    async registerKey(keyId, keypair, suiteId, options = {}) {
+      const meta = {
+        keyId,
+        suiteId,
+        createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+        expiresAt: options.expiresAt,
+        usage: options.usage || ["signing"],
+        cryptoProfileVersion: options.cryptoProfileVersion || "1.0.0",
+        status: options.status || "active"
+      };
+      await this.storage.store(keyId, keypair, meta);
+      return meta;
+    }
+    /**
+     * Get a keypair and its metadata.
+     */
+    async getKey(keyId) {
+      return await this.storage.load(keyId);
+    }
+    /**
+     * Get only the public key (no private key).
+     */
+    async getPublicKey(keyId) {
+      const result = await this.storage.load(keyId);
+      if (!result)
+        return null;
+      return {
+        publicKey: result.keypair.publicKey,
+        meta: result.meta
       };
-      exports2.MlDsa87Suite = MlDsa87Suite;
-      var MlDsaSuite2 = class {
-        constructor() {
-          __publicField(this, "suiteId", "ml-dsa-65");
-          __publicField(this, "version", "1.0.0");
-          __publicField(this, "impl", new MlDsa87Suite());
-        }
-        async generateKeypair() {
-          return this.impl.generateKeypair();
-        }
-        async sign(privateKey, message) {
-          return this.impl.sign(privateKey, message);
-        }
-        async verify(publicKey, message, signature) {
-          return this.impl.verify(publicKey, message, signature);
-        }
-        exportPublicKey(pub) {
-          return this.impl.exportPublicKey(pub);
-        }
-        importPublicKey(encoded) {
-          return this.impl.importPublicKey(encoded);
+    }
+    /**
+     * List all keys matching optional filter.
+     */
+    async listKeys(filter) {
+      return await this.storage.list(filter);
+    }
+    /**
+     * List only active, non-expired keys.
+     */
+    async listActiveKeys(filter) {
+      const allKeys = await this.storage.list(filter);
+      const now = /* @__PURE__ */ new Date();
+      return allKeys.filter((meta) => {
+        if (meta.status && meta.status !== "active") {
+          return false;
         }
-        exportPrivateKey(priv) {
-          return this.impl.exportPrivateKey(priv);
+        if (meta.expiresAt && new Date(meta.expiresAt) < now) {
+          return false;
         }
-        importPrivateKey(encoded) {
-          return this.impl.importPrivateKey(encoded);
+        return true;
+      });
+    }
+    /**
+     * Rotate a key: generate new keypair, mark old as 'rotated'.
+     *
+     * Returns the new key's metadata.
+     */
+    async rotateKey(oldKeyId, newKeyId, newKeypair) {
+      const oldKey = await this.storage.load(oldKeyId);
+      if (!oldKey) {
+        throw new Error(`Cannot rotate: key not found: ${oldKeyId}`);
+      }
+      await this.storage.updateMeta(oldKeyId, {
+        status: "rotated"
+      });
+      await this.registerKey(newKeyId, newKeypair, oldKey.meta.suiteId, {
+        usage: oldKey.meta.usage,
+        cryptoProfileVersion: oldKey.meta.cryptoProfileVersion,
+        expiresAt: oldKey.meta.expiresAt,
+        status: "active"
+      });
+      await this.storage.updateMeta(newKeyId, {
+        rotatedFrom: oldKeyId
+      });
+      const result = await this.storage.load(newKeyId);
+      return result.meta;
+    }
+    /**
+     * Revoke a key (marks as unusable, but doesn't delete).
+     */
+    async revokeKey(keyId, reason) {
+      await this.storage.updateMeta(keyId, {
+        status: "revoked",
+        revokedAt: (/* @__PURE__ */ new Date()).toISOString()
+      });
+    }
+    /**
+     * Delete a key permanently (use with caution).
+     */
+    async deleteKey(keyId) {
+      await this.storage.delete(keyId);
+    }
+    /**
+     * Mark expired keys as 'expired' status.
+     * Returns count of keys marked expired.
+     */
+    async markExpiredKeys() {
+      const allKeys = await this.storage.list();
+      const now = /* @__PURE__ */ new Date();
+      let count = 0;
+      for (const meta of allKeys) {
+        if (meta.expiresAt && new Date(meta.expiresAt) < now && meta.status === "active") {
+          await this.storage.updateMeta(meta.keyId, {
+            status: "expired"
+          });
+          count++;
         }
+      }
+      return count;
+    }
+    /**
+     * Cleanup: delete keys that have been revoked/expired for longer than retention period.
+     *
+     * @param retentionDays How many days to keep revoked/expired keys (default: 90)
+     */
+    async pruneOldKeys(retentionDays = 90) {
+      const allKeys = await this.storage.list();
+      const cutoffDate = /* @__PURE__ */ new Date();
+      cutoffDate.setDate(cutoffDate.getDate() - retentionDays);
+      let count = 0;
+      for (const meta of allKeys) {
+        const shouldPrune = meta.status === "revoked" && meta.revokedAt && new Date(meta.revokedAt) < cutoffDate || meta.status === "expired" && meta.expiresAt && new Date(meta.expiresAt) < cutoffDate;
+        if (shouldPrune) {
+          await this.storage.delete(meta.keyId);
+          count++;
+        }
+      }
+      return count;
+    }
+  };
+
+  // ../crypto/dist/esm/errors.js
+  init_esbuild_shims();
+
+  // ../crypto/dist/esm/stateless.js
+  init_esbuild_shims();
+
+  // ../crypto/dist/esm/suites/bsv-ecdsa.js
+  init_esbuild_shims();
+
+  // ../../node_modules/@noble/secp256k1/index.js
+  init_esbuild_shims();
+  var secp256k1_CURVE = {
+    p: 0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2fn,
+    n: 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141n,
+    h: 1n,
+    a: 0n,
+    b: 7n,
+    Gx: 0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798n,
+    Gy: 0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8n
+  };
+  var { p: P2, n: N2, Gx, Gy, b: _b } = secp256k1_CURVE;
+  var L2 = 32;
+  var L22 = 64;
+  var err = (m2 = "") => {
+    throw new Error(m2);
+  };
+  var isBig = (n2) => typeof n2 === "bigint";
+  var isStr = (s2) => typeof s2 === "string";
+  var isBytes2 = (a2) => a2 instanceof Uint8Array || ArrayBuffer.isView(a2) && a2.constructor.name === "Uint8Array";
+  var abytes2 = (a2, l2) => !isBytes2(a2) || typeof l2 === "number" && l2 > 0 && a2.length !== l2 ? err("Uint8Array expected") : a2;
+  var u8n = (len) => new Uint8Array(len);
+  var u8fr = (buf) => Uint8Array.from(buf);
+  var padh = (n2, pad) => n2.toString(16).padStart(pad, "0");
+  var bytesToHex2 = (b2) => Array.from(abytes2(b2)).map((e2) => padh(e2, 2)).join("");
+  var C2 = { _0: 48, _9: 57, A: 65, F: 70, a: 97, f: 102 };
+  var _ch = (ch) => {
+    if (ch >= C2._0 && ch <= C2._9)
+      return ch - C2._0;
+    if (ch >= C2.A && ch <= C2.F)
+      return ch - (C2.A - 10);
+    if (ch >= C2.a && ch <= C2.f)
+      return ch - (C2.a - 10);
+    return;
+  };
+  var hexToBytes2 = (hex) => {
+    const e2 = "hex invalid";
+    if (!isStr(hex))
+      return err(e2);
+    const hl = hex.length;
+    const al = hl / 2;
+    if (hl % 2)
+      return err(e2);
+    const array = u8n(al);
+    for (let ai = 0, hi = 0; ai < al; ai++, hi += 2) {
+      const n1 = _ch(hex.charCodeAt(hi));
+      const n2 = _ch(hex.charCodeAt(hi + 1));
+      if (n1 === void 0 || n2 === void 0)
+        return err(e2);
+      array[ai] = n1 * 16 + n2;
+    }
+    return array;
+  };
+  var toU8 = (a2, len) => abytes2(isStr(a2) ? hexToBytes2(a2) : u8fr(abytes2(a2)), len);
+  var cr = () => globalThis?.crypto;
+  var subtle = () => cr()?.subtle ?? err("crypto.subtle must be defined");
+  var concatBytes = (...arrs) => {
+    const r2 = u8n(arrs.reduce((sum, a2) => sum + abytes2(a2).length, 0));
+    let pad = 0;
+    arrs.forEach((a2) => {
+      r2.set(a2, pad);
+      pad += a2.length;
+    });
+    return r2;
+  };
+  var randomBytes = (len = L2) => {
+    const c2 = cr();
+    return c2.getRandomValues(u8n(len));
+  };
+  var big = BigInt;
+  var arange = (n2, min, max, msg = "bad number: out of range") => isBig(n2) && min <= n2 && n2 < max ? n2 : err(msg);
+  var M2 = (a2, b2 = P2) => {
+    const r2 = a2 % b2;
+    return r2 >= 0n ? r2 : b2 + r2;
+  };
+  var modN = (a2) => M2(a2, N2);
+  var invert = (num, md) => {
+    if (num === 0n || md <= 0n)
+      err("no inverse n=" + num + " mod=" + md);
+    let a2 = M2(num, md), b2 = md, x2 = 0n, y2 = 1n, u2 = 1n, v2 = 0n;
+    while (a2 !== 0n) {
+      const q2 = b2 / a2, r2 = b2 % a2;
+      const m2 = x2 - u2 * q2, n2 = y2 - v2 * q2;
+      b2 = a2, a2 = r2, x2 = u2, y2 = v2, u2 = m2, v2 = n2;
+    }
+    return b2 === 1n ? M2(x2, md) : err("no inverse");
+  };
+  var callHash = (name) => {
+    const fn = etc[name];
+    if (typeof fn !== "function")
+      err("hashes." + name + " not set");
+    return fn;
+  };
+  var apoint = (p2) => p2 instanceof Point ? p2 : err("Point expected");
+  var koblitz = (x2) => M2(M2(x2 * x2) * x2 + _b);
+  var afield0 = (n2) => arange(n2, 0n, P2);
+  var afield = (n2) => arange(n2, 1n, P2);
+  var agroup = (n2) => arange(n2, 1n, N2);
+  var isEven = (y2) => (y2 & 1n) === 0n;
+  var u8of = (n2) => Uint8Array.of(n2);
+  var getPrefix = (y2) => u8of(isEven(y2) ? 2 : 3);
+  var lift_x = (x2) => {
+    const c2 = koblitz(afield(x2));
+    let r2 = 1n;
+    for (let num = c2, e2 = (P2 + 1n) / 4n; e2 > 0n; e2 >>= 1n) {
+      if (e2 & 1n)
+        r2 = r2 * num % P2;
+      num = num * num % P2;
+    }
+    return M2(r2 * r2) === c2 ? r2 : err("sqrt invalid");
+  };
+  var _Point = class _Point {
+    constructor(px, py, pz) {
+      __publicField(this, "px");
+      __publicField(this, "py");
+      __publicField(this, "pz");
+      this.px = afield0(px);
+      this.py = afield(py);
+      this.pz = afield0(pz);
+      Object.freeze(this);
+    }
+    /** Convert Uint8Array or hex string to Point. */
+    static fromBytes(bytes) {
+      abytes2(bytes);
+      let p2 = void 0;
+      const head = bytes[0];
+      const tail = bytes.subarray(1);
+      const x2 = sliceBytesNumBE(tail, 0, L2);
+      const len = bytes.length;
+      if (len === L2 + 1 && [2, 3].includes(head)) {
+        let y2 = lift_x(x2);
+        const evenY = isEven(y2);
+        const evenH = isEven(big(head));
+        if (evenH !== evenY)
+          y2 = M2(-y2);
+        p2 = new _Point(x2, y2, 1n);
+      }
+      if (len === L22 + 1 && head === 4)
+        p2 = new _Point(x2, sliceBytesNumBE(tail, L2, L22), 1n);
+      return p2 ? p2.assertValidity() : err("bad point: not on curve");
+    }
+    /** Equality check: compare points P&Q. */
+    equals(other) {
+      const { px: X1, py: Y1, pz: Z1 } = this;
+      const { px: X2, py: Y2, pz: Z2 } = apoint(other);
+      const X1Z2 = M2(X1 * Z2);
+      const X2Z1 = M2(X2 * Z1);
+      const Y1Z2 = M2(Y1 * Z2);
+      const Y2Z1 = M2(Y2 * Z1);
+      return X1Z2 === X2Z1 && Y1Z2 === Y2Z1;
+    }
+    is0() {
+      return this.equals(I2);
+    }
+    /** Flip point over y coordinate. */
+    negate() {
+      return new _Point(this.px, M2(-this.py), this.pz);
+    }
+    /** Point doubling: P+P, complete formula. */
+    double() {
+      return this.add(this);
+    }
+    /**
+     * Point addition: P+Q, complete, exception-free formula
+     * (Renes-Costello-Batina, algo 1 of [2015/1060](https://eprint.iacr.org/2015/1060)).
+     * Cost: `12M + 0S + 3*a + 3*b3 + 23add`.
+     */
+    // prettier-ignore
+    add(other) {
+      const { px: X1, py: Y1, pz: Z1 } = this;
+      const { px: X2, py: Y2, pz: Z2 } = apoint(other);
+      const a2 = 0n;
+      const b2 = _b;
+      let X3 = 0n, Y3 = 0n, Z3 = 0n;
+      const b3 = M2(b2 * 3n);
+      let t0 = M2(X1 * X2), t1 = M2(Y1 * Y2), t2 = M2(Z1 * Z2), t3 = M2(X1 + Y1);
+      let t4 = M2(X2 + Y2);
+      t3 = M2(t3 * t4);
+      t4 = M2(t0 + t1);
+      t3 = M2(t3 - t4);
+      t4 = M2(X1 + Z1);
+      let t5 = M2(X2 + Z2);
+      t4 = M2(t4 * t5);
+      t5 = M2(t0 + t2);
+      t4 = M2(t4 - t5);
+      t5 = M2(Y1 + Z1);
+      X3 = M2(Y2 + Z2);
+      t5 = M2(t5 * X3);
+      X3 = M2(t1 + t2);
+      t5 = M2(t5 - X3);
+      Z3 = M2(a2 * t4);
+      X3 = M2(b3 * t2);
+      Z3 = M2(X3 + Z3);
+      X3 = M2(t1 - Z3);
+      Z3 = M2(t1 + Z3);
+      Y3 = M2(X3 * Z3);
+      t1 = M2(t0 + t0);
+      t1 = M2(t1 + t0);
+      t2 = M2(a2 * t2);
+      t4 = M2(b3 * t4);
+      t1 = M2(t1 + t2);
+      t2 = M2(t0 - t2);
+      t2 = M2(a2 * t2);
+      t4 = M2(t4 + t2);
+      t0 = M2(t1 * t4);
+      Y3 = M2(Y3 + t0);
+      t0 = M2(t5 * t4);
+      X3 = M2(t3 * X3);
+      X3 = M2(X3 - t0);
+      t0 = M2(t3 * t1);
+      Z3 = M2(t5 * Z3);
+      Z3 = M2(Z3 + t0);
+      return new _Point(X3, Y3, Z3);
+    }
+    /**
+     * Point-by-scalar multiplication. Scalar must be in range 1 <= n < CURVE.n.
+     * Uses {@link wNAF} for base point.
+     * Uses fake point to mitigate side-channel leakage.
+     * @param n scalar by which point is multiplied
+     * @param safe safe mode guards against timing attacks; unsafe mode is faster
+     */
+    multiply(n2, safe = true) {
+      if (!safe && n2 === 0n)
+        return I2;
+      agroup(n2);
+      if (n2 === 1n)
+        return this;
+      if (this.equals(G2))
+        return wNAF(n2).p;
+      let p2 = I2;
+      let f2 = G2;
+      for (let d2 = this; n2 > 0n; d2 = d2.double(), n2 >>= 1n) {
+        if (n2 & 1n)
+          p2 = p2.add(d2);
+        else if (safe)
+          f2 = f2.add(d2);
+      }
+      return p2;
+    }
+    /** Convert point to 2d xy affine point. (X, Y, Z) ∋ (x=X/Z, y=Y/Z) */
+    toAffine() {
+      const { px: x2, py: y2, pz: z } = this;
+      if (this.equals(I2))
+        return { x: 0n, y: 0n };
+      if (z === 1n)
+        return { x: x2, y: y2 };
+      const iz = invert(z, P2);
+      if (M2(z * iz) !== 1n)
+        err("inverse invalid");
+      return { x: M2(x2 * iz), y: M2(y2 * iz) };
+    }
+    /** Checks if the point is valid and on-curve. */
+    assertValidity() {
+      const { x: x2, y: y2 } = this.toAffine();
+      afield(x2);
+      afield(y2);
+      return M2(y2 * y2) === koblitz(x2) ? this : err("bad point: not on curve");
+    }
+    /** Converts point to 33/65-byte Uint8Array. */
+    toBytes(isCompressed = true) {
+      const { x: x2, y: y2 } = this.assertValidity().toAffine();
+      const x32b = numTo32b(x2);
+      if (isCompressed)
+        return concatBytes(getPrefix(y2), x32b);
+      return concatBytes(u8of(4), x32b, numTo32b(y2));
+    }
+    /** Create 3d xyz point from 2d xy. (0, 0) => (0, 1, 0), not (0, 0, 1) */
+    static fromAffine(ap) {
+      const { x: x2, y: y2 } = ap;
+      return x2 === 0n && y2 === 0n ? I2 : new _Point(x2, y2, 1n);
+    }
+    toHex(isCompressed) {
+      return bytesToHex2(this.toBytes(isCompressed));
+    }
+    static fromPrivateKey(k2) {
+      return G2.multiply(toPrivScalar(k2));
+    }
+    static fromHex(hex) {
+      return _Point.fromBytes(toU8(hex));
+    }
+    get x() {
+      return this.toAffine().x;
+    }
+    get y() {
+      return this.toAffine().y;
+    }
+    toRawBytes(isCompressed) {
+      return this.toBytes(isCompressed);
+    }
+  };
+  __publicField(_Point, "BASE");
+  __publicField(_Point, "ZERO");
+  var Point = _Point;
+  var G2 = new Point(Gx, Gy, 1n);
+  var I2 = new Point(0n, 1n, 0n);
+  Point.BASE = G2;
+  Point.ZERO = I2;
+  var doubleScalarMulUns = (R2, u1, u2) => {
+    return G2.multiply(u1, false).add(R2.multiply(u2, false)).assertValidity();
+  };
+  var bytesToNumBE = (b2) => big("0x" + (bytesToHex2(b2) || "0"));
+  var sliceBytesNumBE = (b2, from, to) => bytesToNumBE(b2.subarray(from, to));
+  var B256 = 2n ** 256n;
+  var numTo32b = (num) => hexToBytes2(padh(arange(num, 0n, B256), L22));
+  var toPrivScalar = (pr) => {
+    const num = isBig(pr) ? pr : bytesToNumBE(toU8(pr, L2));
+    return arange(num, 1n, N2, "private key invalid 3");
+  };
+  var highS = (n2) => n2 > N2 >> 1n;
+  var getPublicKey = (privKey, isCompressed = true) => {
+    return G2.multiply(toPrivScalar(privKey)).toBytes(isCompressed);
+  };
+  var Signature = class _Signature {
+    constructor(r2, s2, recovery) {
+      __publicField(this, "r");
+      __publicField(this, "s");
+      __publicField(this, "recovery");
+      this.r = agroup(r2);
+      this.s = agroup(s2);
+      if (recovery != null)
+        this.recovery = recovery;
+      Object.freeze(this);
+    }
+    /** Create signature from 64b compact (r || s) representation. */
+    static fromBytes(b2) {
+      abytes2(b2, L22);
+      const r2 = sliceBytesNumBE(b2, 0, L2);
+      const s2 = sliceBytesNumBE(b2, L2, L22);
+      return new _Signature(r2, s2);
+    }
+    toBytes() {
+      const { r: r2, s: s2 } = this;
+      return concatBytes(numTo32b(r2), numTo32b(s2));
+    }
+    /** Copy signature, with newly added recovery bit. */
+    addRecoveryBit(bit) {
+      return new _Signature(this.r, this.s, bit);
+    }
+    hasHighS() {
+      return highS(this.s);
+    }
+    toCompactRawBytes() {
+      return this.toBytes();
+    }
+    toCompactHex() {
+      return bytesToHex2(this.toBytes());
+    }
+    recoverPublicKey(msg) {
+      return recoverPublicKey(this, msg);
+    }
+    static fromCompact(hex) {
+      return _Signature.fromBytes(toU8(hex, L22));
+    }
+    assertValidity() {
+      return this;
+    }
+    normalizeS() {
+      const { r: r2, s: s2, recovery } = this;
+      return highS(s2) ? new _Signature(r2, modN(-s2), recovery) : this;
+    }
+  };
+  var bits2int = (bytes) => {
+    const delta = bytes.length * 8 - 256;
+    if (delta > 1024)
+      err("msg invalid");
+    const num = bytesToNumBE(bytes);
+    return delta > 0 ? num >> big(delta) : num;
+  };
+  var bits2int_modN = (bytes) => modN(bits2int(abytes2(bytes)));
+  var signOpts = { lowS: true };
+  var veriOpts = { lowS: true };
+  var prepSig = (msgh, priv, opts = signOpts) => {
+    if (["der", "recovered", "canonical"].some((k2) => k2 in opts))
+      err("option not supported");
+    let { lowS, extraEntropy } = opts;
+    if (lowS == null)
+      lowS = true;
+    const i2o = numTo32b;
+    const h1i = bits2int_modN(toU8(msgh));
+    const h1o = i2o(h1i);
+    const d2 = toPrivScalar(priv);
+    const seed = [i2o(d2), h1o];
+    if (extraEntropy)
+      seed.push(extraEntropy === true ? randomBytes(L2) : toU8(extraEntropy));
+    const m2 = h1i;
+    const k2sig = (kBytes) => {
+      const k2 = bits2int(kBytes);
+      if (!(1n <= k2 && k2 < N2))
+        return;
+      const q2 = G2.multiply(k2).toAffine();
+      const r2 = modN(q2.x);
+      if (r2 === 0n)
+        return;
+      const ik = invert(k2, N2);
+      const s2 = modN(ik * modN(m2 + modN(d2 * r2)));
+      if (s2 === 0n)
+        return;
+      let normS = s2;
+      let recovery = (q2.x === r2 ? 0 : 2) | Number(q2.y & 1n);
+      if (lowS && highS(s2)) {
+        normS = modN(-s2);
+        recovery ^= 1;
+      }
+      return new Signature(r2, normS, recovery);
+    };
+    return { seed: concatBytes(...seed), k2sig };
+  };
+  var hmacDrbg = (asynchronous) => {
+    let v2 = u8n(L2);
+    let k2 = u8n(L2);
+    let i2 = 0;
+    const NULL = u8n(0);
+    const reset = () => {
+      v2.fill(1);
+      k2.fill(0);
+      i2 = 0;
+    };
+    const max = 1e3;
+    const _e = "drbg: tried 1000 values";
+    if (asynchronous) {
+      const h2 = (...b2) => etc.hmacSha256Async(k2, v2, ...b2);
+      const reseed = async (seed = NULL) => {
+        k2 = await h2(u8of(0), seed);
+        v2 = await h2();
+        if (seed.length === 0)
+          return;
+        k2 = await h2(u8of(1), seed);
+        v2 = await h2();
+      };
+      const gen = async () => {
+        if (i2++ >= max)
+          err(_e);
+        v2 = await h2();
+        return v2;
+      };
+      return async (seed, pred) => {
+        reset();
+        await reseed(seed);
+        let res = void 0;
+        while (!(res = pred(await gen())))
+          await reseed();
+        reset();
+        return res;
+      };
+    } else {
+      const h2 = (...b2) => callHash("hmacSha256Sync")(k2, v2, ...b2);
+      const reseed = (seed = NULL) => {
+        k2 = h2(u8of(0), seed);
+        v2 = h2();
+        if (seed.length === 0)
+          return;
+        k2 = h2(u8of(1), seed);
+        v2 = h2();
+      };
+      const gen = () => {
+        if (i2++ >= max)
+          err(_e);
+        v2 = h2();
+        return v2;
+      };
+      return (seed, pred) => {
+        reset();
+        reseed(seed);
+        let res = void 0;
+        while (!(res = pred(gen())))
+          reseed();
+        reset();
+        return res;
       };
-      exports2.MlDsaSuite = MlDsaSuite2;
     }
-  });
+  };
+  var sign = (msgh, priv, opts = signOpts) => {
+    const { seed, k2sig } = prepSig(msgh, priv, opts);
+    const sig = hmacDrbg(false)(seed, k2sig);
+    return sig;
+  };
+  var verify = (sig, msgh, pub, opts = veriOpts) => {
+    let { lowS } = opts;
+    if (lowS == null)
+      lowS = true;
+    if ("strict" in opts)
+      err("option not supported");
+    let sigg;
+    const rs = sig && typeof sig === "object" && "r" in sig;
+    if (!rs && toU8(sig).length !== L22)
+      err("signature must be 64 bytes");
+    try {
+      sigg = rs ? new Signature(sig.r, sig.s) : Signature.fromCompact(sig);
+      const h2 = bits2int_modN(toU8(msgh));
+      const P3 = Point.fromBytes(toU8(pub));
+      const { r: r2, s: s2 } = sigg;
+      if (lowS && highS(s2))
+        return false;
+      const is = invert(s2, N2);
+      const u1 = modN(h2 * is);
+      const u2 = modN(r2 * is);
+      const R2 = doubleScalarMulUns(P3, u1, u2).toAffine();
+      const v2 = modN(R2.x);
+      return v2 === r2;
+    } catch (error) {
+      return false;
+    }
+  };
+  var recoverPublicKey = (sig, msgh) => {
+    const { r: r2, s: s2, recovery } = sig;
+    if (![0, 1, 2, 3].includes(recovery))
+      err("recovery id invalid");
+    const h2 = bits2int_modN(toU8(msgh, L2));
+    const radj = recovery === 2 || recovery === 3 ? r2 + N2 : r2;
+    afield(radj);
+    const head = getPrefix(big(recovery));
+    const Rb = concatBytes(head, numTo32b(radj));
+    const R2 = Point.fromBytes(Rb);
+    const ir = invert(radj, N2);
+    const u1 = modN(-h2 * ir);
+    const u2 = modN(s2 * ir);
+    return doubleScalarMulUns(R2, u1, u2);
+  };
+  var hashToPrivateKey = (hash) => {
+    hash = toU8(hash);
+    if (hash.length < L2 + 8 || hash.length > 1024)
+      err("expected 40-1024b");
+    const num = M2(bytesToNumBE(hash), N2 - 1n);
+    return numTo32b(num + 1n);
+  };
+  var randomPrivateKey = () => hashToPrivateKey(randomBytes(L2 + 16));
+  var _sha = "SHA-256";
+  var etc = {
+    hexToBytes: hexToBytes2,
+    bytesToHex: bytesToHex2,
+    concatBytes,
+    bytesToNumberBE: bytesToNumBE,
+    numberToBytesBE: numTo32b,
+    mod: M2,
+    invert,
+    // math utilities
+    hmacSha256Async: async (key, ...msgs) => {
+      const s2 = subtle();
+      const name = "HMAC";
+      const k2 = await s2.importKey("raw", key, { name, hash: { name: _sha } }, false, ["sign"]);
+      return u8n(await s2.sign(name, k2, concatBytes(...msgs)));
+    },
+    hmacSha256Sync: void 0,
+    // For TypeScript. Actual logic is below
+    hashToPrivateKey,
+    randomBytes
+  };
+  var utils = {
+    normPrivateKeyToScalar: toPrivScalar,
+    isValidPrivateKey: (key) => {
+      try {
+        return !!toPrivScalar(key);
+      } catch (e2) {
+        return false;
+      }
+    },
+    randomPrivateKey,
+    precompute: (w2 = 8, p2 = G2) => {
+      p2.multiply(3n);
+      w2;
+      return p2;
+    }
+  };
+  var W2 = 8;
+  var scalarBits = 256;
+  var pwindows = Math.ceil(scalarBits / W2) + 1;
+  var pwindowSize = 2 ** (W2 - 1);
+  var precompute = () => {
+    const points = [];
+    let p2 = G2;
+    let b2 = p2;
+    for (let w2 = 0; w2 < pwindows; w2++) {
+      b2 = p2;
+      points.push(b2);
+      for (let i2 = 1; i2 < pwindowSize; i2++) {
+        b2 = b2.add(p2);
+        points.push(b2);
+      }
+      p2 = b2.double();
+    }
+    return points;
+  };
+  var Gpows = void 0;
+  var ctneg = (cnd, p2) => {
+    const n2 = p2.negate();
+    return cnd ? n2 : p2;
+  };
+  var wNAF = (n2) => {
+    const comp = Gpows || (Gpows = precompute());
+    let p2 = I2;
+    let f2 = G2;
+    const pow_2_w = 2 ** W2;
+    const maxNum = pow_2_w;
+    const mask = big(pow_2_w - 1);
+    const shiftBy = big(W2);
+    for (let w2 = 0; w2 < pwindows; w2++) {
+      let wbits = Number(n2 & mask);
+      n2 >>= shiftBy;
+      if (wbits > pwindowSize) {
+        wbits -= maxNum;
+        n2 += 1n;
+      }
+      const off = w2 * pwindowSize;
+      const offF = off;
+      const offP = off + Math.abs(wbits) - 1;
+      const isEven2 = w2 % 2 !== 0;
+      const isNeg = wbits < 0;
+      if (wbits === 0) {
+        f2 = f2.add(ctneg(isEven2, comp[offF]));
+      } else {
+        p2 = p2.add(ctneg(isNeg, comp[offP]));
+      }
+    }
+    return { p: p2, f: f2 };
+  };
 
-  // ../crypto/dist/index.js
-  var require_dist2 = __commonJS({
-    "../crypto/dist/index.js"(exports2) {
-      "use strict";
-      init_esbuild_shims();
-      var __createBinding = exports2 && exports2.__createBinding || (Object.create ? (function(o2, m2, k2, k22) {
-        if (k22 === void 0) k22 = k2;
-        var desc = Object.getOwnPropertyDescriptor(m2, k2);
-        if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
-          desc = { enumerable: true, get: function() {
-            return m2[k2];
-          } };
+  // ../../node_modules/@noble/hashes/esm/hmac.js
+  init_esbuild_shims();
+
+  // ../../node_modules/@noble/hashes/esm/utils.js
+  init_esbuild_shims();
+  function isBytes3(a2) {
+    return a2 instanceof Uint8Array || ArrayBuffer.isView(a2) && a2.constructor.name === "Uint8Array";
+  }
+  function anumber2(n2) {
+    if (!Number.isSafeInteger(n2) || n2 < 0)
+      throw new Error("positive integer expected, got " + n2);
+  }
+  function abytes3(b2, ...lengths) {
+    if (!isBytes3(b2))
+      throw new Error("Uint8Array expected");
+    if (lengths.length > 0 && !lengths.includes(b2.length))
+      throw new Error("Uint8Array expected of length " + lengths + ", got length=" + b2.length);
+  }
+  function ahash(h2) {
+    if (typeof h2 !== "function" || typeof h2.create !== "function")
+      throw new Error("Hash should be wrapped by utils.createHasher");
+    anumber2(h2.outputLen);
+    anumber2(h2.blockLen);
+  }
+  function aexists2(instance, checkFinished = true) {
+    if (instance.destroyed)
+      throw new Error("Hash instance has been destroyed");
+    if (checkFinished && instance.finished)
+      throw new Error("Hash#digest() has already been called");
+  }
+  function aoutput2(out, instance) {
+    abytes3(out);
+    const min = instance.outputLen;
+    if (out.length < min) {
+      throw new Error("digestInto() expects output buffer of length at least " + min);
+    }
+  }
+  function clean2(...arrays) {
+    for (let i2 = 0; i2 < arrays.length; i2++) {
+      arrays[i2].fill(0);
+    }
+  }
+  function createView2(arr) {
+    return new DataView(arr.buffer, arr.byteOffset, arr.byteLength);
+  }
+  function rotr2(word, shift) {
+    return word << 32 - shift | word >>> shift;
+  }
+  function utf8ToBytes(str) {
+    if (typeof str !== "string")
+      throw new Error("string expected");
+    return new Uint8Array(new TextEncoder().encode(str));
+  }
+  function toBytes(data) {
+    if (typeof data === "string")
+      data = utf8ToBytes(data);
+    abytes3(data);
+    return data;
+  }
+  var Hash = class {
+  };
+  function createHasher2(hashCons) {
+    const hashC = (msg) => hashCons().update(toBytes(msg)).digest();
+    const tmp = hashCons();
+    hashC.outputLen = tmp.outputLen;
+    hashC.blockLen = tmp.blockLen;
+    hashC.create = () => hashCons();
+    return hashC;
+  }
+
+  // ../../node_modules/@noble/hashes/esm/hmac.js
+  var HMAC = class extends Hash {
+    constructor(hash, _key) {
+      super();
+      this.finished = false;
+      this.destroyed = false;
+      ahash(hash);
+      const key = toBytes(_key);
+      this.iHash = hash.create();
+      if (typeof this.iHash.update !== "function")
+        throw new Error("Expected instance of class which extends utils.Hash");
+      this.blockLen = this.iHash.blockLen;
+      this.outputLen = this.iHash.outputLen;
+      const blockLen = this.blockLen;
+      const pad = new Uint8Array(blockLen);
+      pad.set(key.length > blockLen ? hash.create().update(key).digest() : key);
+      for (let i2 = 0; i2 < pad.length; i2++)
+        pad[i2] ^= 54;
+      this.iHash.update(pad);
+      this.oHash = hash.create();
+      for (let i2 = 0; i2 < pad.length; i2++)
+        pad[i2] ^= 54 ^ 92;
+      this.oHash.update(pad);
+      clean2(pad);
+    }
+    update(buf) {
+      aexists2(this);
+      this.iHash.update(buf);
+      return this;
+    }
+    digestInto(out) {
+      aexists2(this);
+      abytes3(out, this.outputLen);
+      this.finished = true;
+      this.iHash.digestInto(out);
+      this.oHash.update(out);
+      this.oHash.digestInto(out);
+      this.destroy();
+    }
+    digest() {
+      const out = new Uint8Array(this.oHash.outputLen);
+      this.digestInto(out);
+      return out;
+    }
+    _cloneInto(to) {
+      to || (to = Object.create(Object.getPrototypeOf(this), {}));
+      const { oHash, iHash, finished, destroyed, blockLen, outputLen } = this;
+      to = to;
+      to.finished = finished;
+      to.destroyed = destroyed;
+      to.blockLen = blockLen;
+      to.outputLen = outputLen;
+      to.oHash = oHash._cloneInto(to.oHash);
+      to.iHash = iHash._cloneInto(to.iHash);
+      return to;
+    }
+    clone() {
+      return this._cloneInto();
+    }
+    destroy() {
+      this.destroyed = true;
+      this.oHash.destroy();
+      this.iHash.destroy();
+    }
+  };
+  var hmac = (hash, key, message) => new HMAC(hash, key).update(message).digest();
+  hmac.create = (hash, key) => new HMAC(hash, key);
+
+  // ../../node_modules/@noble/hashes/esm/sha256.js
+  init_esbuild_shims();
+
+  // ../../node_modules/@noble/hashes/esm/sha2.js
+  init_esbuild_shims();
+
+  // ../../node_modules/@noble/hashes/esm/_md.js
+  init_esbuild_shims();
+  function setBigUint64(view, byteOffset, value, isLE2) {
+    if (typeof view.setBigUint64 === "function")
+      return view.setBigUint64(byteOffset, value, isLE2);
+    const _32n2 = BigInt(32);
+    const _u32_max = BigInt(4294967295);
+    const wh = Number(value >> _32n2 & _u32_max);
+    const wl = Number(value & _u32_max);
+    const h2 = isLE2 ? 4 : 0;
+    const l2 = isLE2 ? 0 : 4;
+    view.setUint32(byteOffset + h2, wh, isLE2);
+    view.setUint32(byteOffset + l2, wl, isLE2);
+  }
+  function Chi2(a2, b2, c2) {
+    return a2 & b2 ^ ~a2 & c2;
+  }
+  function Maj2(a2, b2, c2) {
+    return a2 & b2 ^ a2 & c2 ^ b2 & c2;
+  }
+  var HashMD2 = class extends Hash {
+    constructor(blockLen, outputLen, padOffset, isLE2) {
+      super();
+      this.finished = false;
+      this.length = 0;
+      this.pos = 0;
+      this.destroyed = false;
+      this.blockLen = blockLen;
+      this.outputLen = outputLen;
+      this.padOffset = padOffset;
+      this.isLE = isLE2;
+      this.buffer = new Uint8Array(blockLen);
+      this.view = createView2(this.buffer);
+    }
+    update(data) {
+      aexists2(this);
+      data = toBytes(data);
+      abytes3(data);
+      const { view, buffer, blockLen } = this;
+      const len = data.length;
+      for (let pos = 0; pos < len; ) {
+        const take = Math.min(blockLen - this.pos, len - pos);
+        if (take === blockLen) {
+          const dataView = createView2(data);
+          for (; blockLen <= len - pos; pos += blockLen)
+            this.process(dataView, pos);
+          continue;
+        }
+        buffer.set(data.subarray(pos, pos + take), this.pos);
+        this.pos += take;
+        pos += take;
+        if (this.pos === blockLen) {
+          this.process(view, 0);
+          this.pos = 0;
         }
-        Object.defineProperty(o2, k22, desc);
-      }) : (function(o2, m2, k2, k22) {
-        if (k22 === void 0) k22 = k2;
-        o2[k22] = m2[k2];
-      }));
-      var __exportStar = exports2 && exports2.__exportStar || function(m2, exports3) {
-        for (var p2 in m2) if (p2 !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p2)) __createBinding(exports3, m2, p2);
+      }
+      this.length += data.length;
+      this.roundClean();
+      return this;
+    }
+    digestInto(out) {
+      aexists2(this);
+      aoutput2(out, this);
+      this.finished = true;
+      const { buffer, view, blockLen, isLE: isLE2 } = this;
+      let { pos } = this;
+      buffer[pos++] = 128;
+      clean2(this.buffer.subarray(pos));
+      if (this.padOffset > blockLen - pos) {
+        this.process(view, 0);
+        pos = 0;
+      }
+      for (let i2 = pos; i2 < blockLen; i2++)
+        buffer[i2] = 0;
+      setBigUint64(view, blockLen - 8, BigInt(this.length * 8), isLE2);
+      this.process(view, 0);
+      const oview = createView2(out);
+      const len = this.outputLen;
+      if (len % 4)
+        throw new Error("_sha2: outputLen should be aligned to 32bit");
+      const outLen = len / 4;
+      const state = this.get();
+      if (outLen > state.length)
+        throw new Error("_sha2: outputLen bigger than state");
+      for (let i2 = 0; i2 < outLen; i2++)
+        oview.setUint32(4 * i2, state[i2], isLE2);
+    }
+    digest() {
+      const { buffer, outputLen } = this;
+      this.digestInto(buffer);
+      const res = buffer.slice(0, outputLen);
+      this.destroy();
+      return res;
+    }
+    _cloneInto(to) {
+      to || (to = new this.constructor());
+      to.set(...this.get());
+      const { blockLen, buffer, length, finished, destroyed, pos } = this;
+      to.destroyed = destroyed;
+      to.finished = finished;
+      to.length = length;
+      to.pos = pos;
+      if (length % blockLen)
+        to.buffer.set(buffer);
+      return to;
+    }
+    clone() {
+      return this._cloneInto();
+    }
+  };
+  var SHA256_IV2 = /* @__PURE__ */ Uint32Array.from([
+    1779033703,
+    3144134277,
+    1013904242,
+    2773480762,
+    1359893119,
+    2600822924,
+    528734635,
+    1541459225
+  ]);
+
+  // ../../node_modules/@noble/hashes/esm/sha2.js
+  var SHA256_K2 = /* @__PURE__ */ Uint32Array.from([
+    1116352408,
+    1899447441,
+    3049323471,
+    3921009573,
+    961987163,
+    1508970993,
+    2453635748,
+    2870763221,
+    3624381080,
+    310598401,
+    607225278,
+    1426881987,
+    1925078388,
+    2162078206,
+    2614888103,
+    3248222580,
+    3835390401,
+    4022224774,
+    264347078,
+    604807628,
+    770255983,
+    1249150122,
+    1555081692,
+    1996064986,
+    2554220882,
+    2821834349,
+    2952996808,
+    3210313671,
+    3336571891,
+    3584528711,
+    113926993,
+    338241895,
+    666307205,
+    773529912,
+    1294757372,
+    1396182291,
+    1695183700,
+    1986661051,
+    2177026350,
+    2456956037,
+    2730485921,
+    2820302411,
+    3259730800,
+    3345764771,
+    3516065817,
+    3600352804,
+    4094571909,
+    275423344,
+    430227734,
+    506948616,
+    659060556,
+    883997877,
+    958139571,
+    1322822218,
+    1537002063,
+    1747873779,
+    1955562222,
+    2024104815,
+    2227730452,
+    2361852424,
+    2428436474,
+    2756734187,
+    3204031479,
+    3329325298
+  ]);
+  var SHA256_W2 = /* @__PURE__ */ new Uint32Array(64);
+  var SHA256 = class extends HashMD2 {
+    constructor(outputLen = 32) {
+      super(64, outputLen, 8, false);
+      this.A = SHA256_IV2[0] | 0;
+      this.B = SHA256_IV2[1] | 0;
+      this.C = SHA256_IV2[2] | 0;
+      this.D = SHA256_IV2[3] | 0;
+      this.E = SHA256_IV2[4] | 0;
+      this.F = SHA256_IV2[5] | 0;
+      this.G = SHA256_IV2[6] | 0;
+      this.H = SHA256_IV2[7] | 0;
+    }
+    get() {
+      const { A: A2, B: B2, C: C3, D: D2, E: E2, F: F2, G: G3, H: H2 } = this;
+      return [A2, B2, C3, D2, E2, F2, G3, H2];
+    }
+    // prettier-ignore
+    set(A2, B2, C3, D2, E2, F2, G3, H2) {
+      this.A = A2 | 0;
+      this.B = B2 | 0;
+      this.C = C3 | 0;
+      this.D = D2 | 0;
+      this.E = E2 | 0;
+      this.F = F2 | 0;
+      this.G = G3 | 0;
+      this.H = H2 | 0;
+    }
+    process(view, offset) {
+      for (let i2 = 0; i2 < 16; i2++, offset += 4)
+        SHA256_W2[i2] = view.getUint32(offset, false);
+      for (let i2 = 16; i2 < 64; i2++) {
+        const W15 = SHA256_W2[i2 - 15];
+        const W22 = SHA256_W2[i2 - 2];
+        const s0 = rotr2(W15, 7) ^ rotr2(W15, 18) ^ W15 >>> 3;
+        const s1 = rotr2(W22, 17) ^ rotr2(W22, 19) ^ W22 >>> 10;
+        SHA256_W2[i2] = s1 + SHA256_W2[i2 - 7] + s0 + SHA256_W2[i2 - 16] | 0;
+      }
+      let { A: A2, B: B2, C: C3, D: D2, E: E2, F: F2, G: G3, H: H2 } = this;
+      for (let i2 = 0; i2 < 64; i2++) {
+        const sigma1 = rotr2(E2, 6) ^ rotr2(E2, 11) ^ rotr2(E2, 25);
+        const T1 = H2 + sigma1 + Chi2(E2, F2, G3) + SHA256_K2[i2] + SHA256_W2[i2] | 0;
+        const sigma0 = rotr2(A2, 2) ^ rotr2(A2, 13) ^ rotr2(A2, 22);
+        const T2 = sigma0 + Maj2(A2, B2, C3) | 0;
+        H2 = G3;
+        G3 = F2;
+        F2 = E2;
+        E2 = D2 + T1 | 0;
+        D2 = C3;
+        C3 = B2;
+        B2 = A2;
+        A2 = T1 + T2 | 0;
+      }
+      A2 = A2 + this.A | 0;
+      B2 = B2 + this.B | 0;
+      C3 = C3 + this.C | 0;
+      D2 = D2 + this.D | 0;
+      E2 = E2 + this.E | 0;
+      F2 = F2 + this.F | 0;
+      G3 = G3 + this.G | 0;
+      H2 = H2 + this.H | 0;
+      this.set(A2, B2, C3, D2, E2, F2, G3, H2);
+    }
+    roundClean() {
+      clean2(SHA256_W2);
+    }
+    destroy() {
+      this.set(0, 0, 0, 0, 0, 0, 0, 0);
+      clean2(this.buffer);
+    }
+  };
+  var sha2562 = /* @__PURE__ */ createHasher2(() => new SHA256());
+
+  // ../../node_modules/@noble/hashes/esm/sha256.js
+  var sha2563 = sha2562;
+
+  // ../crypto/dist/esm/suites/bsv-ecdsa.js
+  etc.hmacSha256Sync = (key, ...msgs) => hmac(sha2563, key, etc.concatBytes(...msgs));
+  var BsvEcdsaSuite = class {
+    constructor() {
+      __publicField(this, "suiteId", "bsv-ecdsa-secp256k1");
+      __publicField(this, "version", "1.0.0");
+    }
+    async generateKeypair() {
+      const privateKey = utils.randomPrivateKey();
+      const publicKey = getPublicKey(privateKey, true);
+      return {
+        privateKey,
+        publicKey
       };
-      Object.defineProperty(exports2, "__esModule", { value: true });
-      exports2.globalRegistry = exports2.MlDsa87Suite = exports2.MlDsaSuite = exports2.BsvEcdsaSuite = void 0;
-      __exportStar(require_types(), exports2);
-      __exportStar(require_registry(), exports2);
-      __exportStar(require_utils(), exports2);
-      __exportStar(require_signing(), exports2);
-      __exportStar(require_key_registry(), exports2);
-      __exportStar(require_errors(), exports2);
-      __exportStar(require_stateless(), exports2);
-      var bsv_ecdsa_1 = require_bsv_ecdsa();
-      Object.defineProperty(exports2, "BsvEcdsaSuite", { enumerable: true, get: function() {
-        return bsv_ecdsa_1.BsvEcdsaSuite;
-      } });
-      var ml_dsa_1 = require_ml_dsa();
-      Object.defineProperty(exports2, "MlDsaSuite", { enumerable: true, get: function() {
-        return ml_dsa_1.MlDsaSuite;
-      } });
-      Object.defineProperty(exports2, "MlDsa87Suite", { enumerable: true, get: function() {
-        return ml_dsa_1.MlDsa87Suite;
-      } });
-      var registry_1 = require_registry();
-      Object.defineProperty(exports2, "globalRegistry", { enumerable: true, get: function() {
-        return registry_1.globalRegistry;
-      } });
     }
-  });
+    async sign(privateKey, message) {
+      try {
+        const signature = await sign(message, privateKey);
+        return signature.toCompactRawBytes();
+      } catch (error) {
+        throw new Error(`BsvEcdsaSuite signing failed: ${error instanceof Error ? error.message : String(error)}`);
+      }
+    }
+    async verify(publicKey, message, signature) {
+      try {
+        return verify(signature, message, publicKey);
+      } catch (error) {
+        return false;
+      }
+    }
+    exportPublicKey(pub) {
+      return bytesToHex(pub);
+    }
+    importPublicKey(encoded) {
+      return hexToBytes(encoded);
+    }
+    exportPrivateKey(priv) {
+      return bytesToHex(priv);
+    }
+    importPrivateKey(encoded) {
+      const bytes = hexToBytes(encoded);
+      if (bytes.length !== 32) {
+        throw new Error("Private key must be 32 bytes");
+      }
+      return bytes;
+    }
+  };
 
-  // src/browser.ts
-  var browser_exports = {};
-  __export(browser_exports, {
-    InMemoryKeyStorage: () => import_crypto3.InMemoryKeyStorage,
-    createKeySDK: () => createKeySDK,
-    default: () => browser_default
-  });
+  // ../crypto/dist/esm/suites/ml-dsa.js
   init_esbuild_shims();
+  var dilithiumLib = null;
+  async function getDilithium() {
+    if (!dilithiumLib) {
+      dilithiumLib = await Promise.resolve().then(() => __toESM(require_dist(), 1));
+    }
+    return dilithiumLib;
+  }
+  var MlDsa87Suite = class {
+    constructor() {
+      __publicField(this, "suiteId", "ml-dsa-87");
+      __publicField(this, "version", "1.0.0");
+    }
+    async generateKeypair() {
+      try {
+        const dilithium2 = await getDilithium();
+        const keypair = await dilithium2.keyPair();
+        return {
+          publicKey: new Uint8Array(keypair.publicKey),
+          privateKey: new Uint8Array(keypair.privateKey)
+        };
+      } catch (error) {
+        throw new Error(`ML-DSA-87 key generation failed: ${error instanceof Error ? error.message : String(error)}`);
+      }
+    }
+    async sign(privateKey, message) {
+      try {
+        const dilithium2 = await getDilithium();
+        const signature = await dilithium2.signDetached(Buffer.from(message), Buffer.from(privateKey));
+        return new Uint8Array(signature);
+      } catch (error) {
+        throw new Error(`ML-DSA-87 signing failed: ${error instanceof Error ? error.message : String(error)}`);
+      }
+    }
+    async verify(publicKey, message, signature) {
+      try {
+        const dilithium2 = await getDilithium();
+        return await dilithium2.verifyDetached(Buffer.from(signature), Buffer.from(message), Buffer.from(publicKey));
+      } catch (error) {
+        return false;
+      }
+    }
+    exportPublicKey(pub) {
+      return bytesToHex(pub);
+    }
+    importPublicKey(encoded) {
+      const bytes = hexToBytes(encoded);
+      if (bytes.length !== 2592) {
+        throw new Error(`ML-DSA-87 public key must be 2592 bytes, got ${bytes.length}`);
+      }
+      return bytes;
+    }
+    exportPrivateKey(priv) {
+      return bytesToHex(priv);
+    }
+    importPrivateKey(encoded) {
+      const bytes = hexToBytes(encoded);
+      if (bytes.length !== 4864) {
+        throw new Error(`ML-DSA-87 private key must be 4864 bytes, got ${bytes.length}`);
+      }
+      return bytes;
+    }
+  };
+  var MlDsaSuite = class {
+    constructor() {
+      __publicField(this, "suiteId", "ml-dsa-65");
+      __publicField(this, "version", "1.0.0");
+      __publicField(this, "impl", new MlDsa87Suite());
+    }
+    async generateKeypair() {
+      return this.impl.generateKeypair();
+    }
+    async sign(privateKey, message) {
+      return this.impl.sign(privateKey, message);
+    }
+    async verify(publicKey, message, signature) {
+      return this.impl.verify(publicKey, message, signature);
+    }
+    exportPublicKey(pub) {
+      return this.impl.exportPublicKey(pub);
+    }
+    importPublicKey(encoded) {
+      return this.impl.importPublicKey(encoded);
+    }
+    exportPrivateKey(priv) {
+      return this.impl.exportPrivateKey(priv);
+    }
+    importPrivateKey(encoded) {
+      return this.impl.importPrivateKey(encoded);
+    }
+  };
 
   // src/sdk.ts
-  init_esbuild_shims();
-  var import_crypto = __toESM(require_dist2());
   var DefaultKeySDK = class {
     // agentId -> counter
     constructor(config) {
@@ -5222,7 +3936,7 @@ var LumenKeys = (() => {
       }
       const suite = this.suiteRegistry.getSuite(result.meta.suiteId);
       const hashAlg = this.getHashAlgorithm(result.meta.suiteId);
-      const messageHash = await (0, import_crypto.hashBytes)(message, hashAlg);
+      const messageHash = await hashBytes(message, hashAlg);
       return await suite.sign(result.keypair.privateKey, messageHash);
     }
     /**
@@ -5235,7 +3949,7 @@ var LumenKeys = (() => {
       }
       const suite = this.suiteRegistry.getSuite(result.meta.suiteId);
       const hashAlg = this.getHashAlgorithm(result.meta.suiteId);
-      const messageHash = await (0, import_crypto.hashBytes)(message, hashAlg);
+      const messageHash = await hashBytes(message, hashAlg);
       try {
         return await suite.verify(result.publicKey, messageHash, signature);
       } catch {
@@ -5332,20 +4046,16 @@ var LumenKeys = (() => {
     }
   };
 
-  // src/browser.ts
-  var import_crypto2 = __toESM(require_dist2());
-
   // src/types.ts
   init_esbuild_shims();
 
   // src/browser.ts
-  var import_crypto3 = __toESM(require_dist2());
   async function createKeySDK() {
-    const storage = new import_crypto2.InMemoryKeyStorage();
-    const keyRegistry = new import_crypto2.KeyRegistry(storage);
-    const suiteRegistry = new import_crypto2.SignatureSuiteRegistry();
-    suiteRegistry.register(new import_crypto2.BsvEcdsaSuite());
-    suiteRegistry.register(new import_crypto2.MlDsaSuite());
+    const storage = new InMemoryKeyStorage();
+    const keyRegistry = new KeyRegistry(storage);
+    const suiteRegistry = new SignatureSuiteRegistry();
+    suiteRegistry.register(new BsvEcdsaSuite());
+    suiteRegistry.register(new MlDsaSuite());
     const sdk = new DefaultKeySDK({
       keyRegistry,
       suiteRegistry
@@ -5365,7 +4075,7 @@ var LumenKeys = (() => {
 /*! Bundled license information:
 
 @noble/hashes/utils.js:
-@noble/hashes/utils.js:
+@noble/hashes/esm/utils.js:
   (*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) *)
 
 @noble/secp256k1/index.js: