signet-login 0.9.13 → 0.9.15

package/dist/modal.js

@@ -37,7 +37,7 @@ function buildModalShell(theme) {
     const fg = dark ? '#e0e0e0' : '#1a1a2e';
     const dialog = document.createElement('dialog');
     dialog.id = 'signet-login-dialog';
-    dialog.style.cssText = `border:none;border-radius:16px;padding:32px;max-width:380px;width:90%;text-align:center;box-shadow:0 20px 60px rgba(0,0,0,0.3);background:${bg};color:${fg};font-family:system-ui,-apple-system,sans-serif;`;
+    dialog.style.cssText = `border:none;border-radius:16px;padding:32px;max-width:460px;width:90%;text-align:center;box-shadow:0 20px 60px rgba(0,0,0,0.3);background:${bg};color:${fg};font-family:system-ui,-apple-system,sans-serif;`;
     document.body.appendChild(dialog);
     dialog.showModal();
     // Gamepad navigation. A booth/kiosk drives this modal with a gamepad, whose
@@ -277,7 +277,7 @@ async function runRedirectFlow(refs, opts, flowOpts = {}) {
     <h2 style="margin:0 0 8px;font-size:1.2rem;">${sameDevice ? 'Open My Signet' : 'Sign in with Signet'}</h2>
     <p style="margin:0 0 16px;color:${muted};font-size:0.85rem;">${sameDevice ? 'Approve in My Signet and keep that tab open so it can sign for this app.' : 'Open the link on your phone, or scan the QR if rendered.'}</p>
     <div style="background:${dark ? '#0f0f1f' : '#f5f5f8'};border-radius:8px;padding:16px;margin-bottom:16px;">
-      <canvas id="signet-login-qr" width="200" height="200" style="display:block;width:200px;height:200px;margin:0 auto 12px;background:#ffffff;border-radius:6px;box-sizing:border-box;"></canvas>
+      <canvas id="signet-login-qr" width="360" height="360" style="display:block;width:360px;height:360px;max-width:100%;margin:0 auto 12px;background:#ffffff;border-radius:6px;box-sizing:border-box;"></canvas>
       <a id="signet-login-open-signet" href="${escapeHtml(authUrl)}" target="_blank" rel="noopener" style="${sameDevice ? buttonStyle(dark, true) + 'justify-content:center;text-align:center;text-decoration:none;' : 'display:block;color:#5b6dff;font-size:0.75rem;word-break:break-all;text-decoration:none;'}">${sameDevice ? 'Open My Signet' : `${escapeHtml(authUrl.slice(0, 80))}…`}</a>
     </div>
     <p id="signet-login-status" style="margin:0 0 12px;color:${muted};font-size:0.85rem;">${sameDevice ? 'Waiting for My Signet approval…' : 'Waiting for approval…'}</p>
@@ -288,13 +288,16 @@ async function runRedirectFlow(refs, opts, flowOpts = {}) {
   `;
     // Render the auth URL into the QR canvas. Async, but the dialog has already
     // surfaced the visible link as a fallback so a slow encode doesn't block UX.
-    // M error correction tolerates ~15% damage — comfortable for camera scans.
+    // 360px + H error correction (~30% damage tolerance) so a phone can lock on
+    // from across a booth, at an angle, through screen glare. The auth URL is
+    // short (origin + relay + session pubkey), so H's denser modules stay large
+    // enough to scan at this size.
     const qrCanvas = refs.dialog.querySelector('#signet-login-qr');
     if (qrCanvas) {
         void QRCode.toCanvas(qrCanvas, authUrl, {
-            width: 200,
+            width: 360,
             margin: 1,
-            errorCorrectionLevel: 'M',
+            errorCorrectionLevel: 'H',
             color: { dark: '#0a0418', light: '#ffffff' },
         }).catch(() => {
             // Encoding failure (URL too long for QR L-Q levels, canvas inaccessible)
@@ -356,7 +359,7 @@ async function runRedirectFlow(refs, opts, flowOpts = {}) {
         });
     });
 }
-async function buildSessionFromRedirectFlowResult(refs, result, aborted) {
+async function buildSessionFromRedirectFlowResult(refs, result, _aborted) {
     // Default: auth-only ephemeral signer (identity proof, no live signing).
     let signer = new EphemeralSigner(result.pubkey, result.authEvent);
     let method = 'redirect';
@@ -379,28 +382,28 @@ async function buildSessionFromRedirectFlowResult(refs, result, aborted) {
                 timeoutMs: QR_BUNKER_CONNECT_TIMEOUT_MS,
             });
             if (bunkerSigner.pubkey.toLowerCase() !== expected.toLowerCase()) {
-                console.warn('[signet-login] Signet relay upgrade: bunker pubkey mismatch — cannot sign', { connected: bunkerSigner.pubkey, expected });
+                // Bunker came back as a different key than the identity we proved.
+                // Discard it and keep the auth-only identity (result.pubkey) rather than
+                // signing as the wrong key — the consumer can prompt for a proper signer
+                // if it needs one.
+                console.warn('[signet-login] Signet relay upgrade: bunker pubkey mismatch — continuing identity-only', { connected: bunkerSigner.pubkey, expected });
                 void bunkerSigner.close().catch(() => { });
-                if (status) {
-                    status.textContent = 'Signer connected with the wrong public key.';
-                    status.style.color = '#d04848';
-                }
-                await Promise.race([new Promise(resolve => setTimeout(resolve, 2500)), aborted]);
-                return null;
             }
-            signer = bunkerSigner;
+            else {
+                signer = bunkerSigner;
+                method = 'bunker';
+            }
         }
         catch (err) {
-            console.warn('[signet-login] Signet relay upgrade: createBunkerSigner failed — signer did not become live.', err);
-            const status = refs.dialog.querySelector('#signet-login-status');
-            if (status) {
-                status.textContent = `Signer connection failed: ${err instanceof Error ? err.message : String(err)}`;
-                status.style.color = '#d04848';
-            }
-            await Promise.race([new Promise(resolve => setTimeout(resolve, 2500)), aborted]);
-            return null;
+            // Bunker connect failed or timed out — signer offline, or a stale handoff
+            // URI (the common cross-device failure: the producer re-handed a dead
+            // connect string). Do NOT fail the whole sign-in: fall back to the
+            // auth-only identity we already hold (the kind-21236 authEvent proves
+            // result.pubkey). The consumer decides whether identity-only is enough —
+            // one that needs a live signer can prompt for an upgrade rather than being
+            // handed null and stranding the user at "couldn't sign in".
+            console.warn('[signet-login] Signet relay upgrade: createBunkerSigner failed — continuing identity-only (auth-only).', err);
         }
-        method = 'bunker';
     }
     else {
         console.warn('[signet-login] Signet relay login carried no bunkerUri — auth-only ephemeral (cannot sign). The signer device must have its NIP-46 server enabled to hand back a bunker:// URI.');
@@ -631,12 +634,25 @@ function resolveOptions(opts) {
         result.redirectCallback = opts.redirectCallback;
     return result;
 }
+let modalQueue = Promise.resolve();
 /**
  * Entry point — show the modal, route to the chosen method, return a session.
  *
  * Returns null when the user cancels or the flow times out.
  */
 export async function showLoginModal(opts) {
+    const previous = modalQueue;
+    let release;
+    modalQueue = new Promise(resolve => { release = resolve; });
+    await previous;
+    try {
+        return await runLoginModal(opts);
+    }
+    finally {
+        release();
+    }
+}
+async function runLoginModal(opts) {
     if (!opts.appName || opts.appName.length === 0)
         throw new Error('appName-required');
     if (opts.appName.length > 64)

package/dist/signet-login.iife.js

@@ -1,17 +1,17 @@
-"use strict";var __SignetLoginIIFE=(()=>{var sl=Object.create;var Qt=Object.defineProperty;var al=Object.getOwnPropertyDescriptor;var cl=Object.getOwnPropertyNames;var ll=Object.getPrototypeOf,ul=Object.prototype.hasOwnProperty;var fl=(t,e,n)=>e in t?Qt(t,e,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[e]=n;var X=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports),dl=(t,e)=>{for(var n in e)Qt(t,n,{get:e[n],enumerable:!0})},Ri=(t,e,n,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of cl(e))!ul.call(t,o)&&o!==n&&Qt(t,o,{get:()=>e[o],enumerable:!(r=al(e,o))||r.enumerable});return t};var hl=(t,e,n)=>(n=t!=null?sl(ll(t)):{},Ri(e||!t||!t.__esModule?Qt(n,"default",{value:t,enumerable:!0}):n,t)),gl=t=>Ri(Qt({},"__esModule",{value:!0}),t);var S=(t,e,n)=>fl(t,typeof e!="symbol"?e+"":e,n);var Ya=X((Mg,Wa)=>{Wa.exports=function(){return typeof Promise=="function"&&Promise.prototype&&Promise.prototype.then}});var nt=X(Et=>{var ni,Af=[0,26,44,70,100,134,172,196,242,292,346,404,466,532,581,655,733,815,901,991,1085,1156,1258,1364,1474,1588,1706,1828,1921,2051,2185,2323,2465,2611,2761,2876,3034,3196,3362,3532,3706];Et.getSymbolSize=function(e){if(!e)throw new Error('"version" cannot be null or undefined');if(e<1||e>40)throw new Error('"version" should be in range from 1 to 40');return e*4+17};Et.getSymbolTotalCodewords=function(e){return Af[e]};Et.getBCHDigit=function(t){let e=0;for(;t!==0;)e++,t>>>=1;return e};Et.setToSJISFunction=function(e){if(typeof e!="function")throw new Error('"toSJISFunc" is not a valid function.');ni=e};Et.isKanjiModeEnabled=function(){return typeof ni<"u"};Et.toSJIS=function(e){return ni(e)}});var Sr=X(ve=>{ve.L={bit:1};ve.M={bit:0};ve.Q={bit:3};ve.H={bit:2};function Rf(t){if(typeof t!="string")throw new Error("Param is not a string");switch(t.toLowerCase()){case"l":case"low":return ve.L;case"m":case"medium":return ve.M;case"q":case"quartile":return ve.Q;case"h":case"high":return ve.H;default:throw new Error("Unknown EC Level: "+t)}}ve.isValid=function(e){return e&&typeof e.bit<"u"&&e.bit>=0&&e.bit<4};ve.from=function(e,n){if(ve.isValid(e))return e;try{return Rf(e)}catch{return n}}});var Fa=X(($g,Xa)=>{function Ja(){this.buffer=[],this.length=0}Ja.prototype={get:function(t){let e=Math.floor(t/8);return(this.buffer[e]>>>7-t%8&1)===1},put:function(t,e){for(let n=0;n<e;n++)this.putBit((t>>>e-n-1&1)===1)},getLengthInBits:function(){return this.length},putBit:function(t){let e=Math.floor(this.length/8);this.buffer.length<=e&&this.buffer.push(0),t&&(this.buffer[e]|=128>>>this.length%8),this.length++}};Xa.exports=Ja});var ec=X((Vg,Qa)=>{function En(t){if(!t||t<1)throw new Error("BitMatrix size must be defined and greater than 0");this.size=t,this.data=new Uint8Array(t*t),this.reservedBit=new Uint8Array(t*t)}En.prototype.set=function(t,e,n,r){let o=t*this.size+e;this.data[o]=n,r&&(this.reservedBit[o]=!0)};En.prototype.get=function(t,e){return this.data[t*this.size+e]};En.prototype.xor=function(t,e,n){this.data[t*this.size+e]^=n};En.prototype.isReserved=function(t,e){return this.reservedBit[t*this.size+e]};Qa.exports=En});var tc=X(kr=>{var Cf=nt().getSymbolSize;kr.getRowColCoords=function(e){if(e===1)return[];let n=Math.floor(e/7)+2,r=Cf(e),o=r===145?26:Math.ceil((r-13)/(2*n-2))*2,i=[r-7];for(let s=1;s<n-1;s++)i[s]=i[s-1]-o;return i.push(6),i.reverse()};kr.getPositions=function(e){let n=[],r=kr.getRowColCoords(e),o=r.length;for(let i=0;i<o;i++)for(let s=0;s<o;s++)i===0&&s===0||i===0&&s===o-1||i===o-1&&s===0||n.push([r[i],r[s]]);return n}});var oc=X(rc=>{var Tf=nt().getSymbolSize,nc=7;rc.getPositions=function(e){let n=Tf(e);return[[0,0],[n-nc,0],[0,n-nc]]}});var ic=X(Q=>{Q.Patterns={PATTERN000:0,PATTERN001:1,PATTERN010:2,PATTERN011:3,PATTERN100:4,PATTERN101:5,PATTERN110:6,PATTERN111:7};var vt={N1:3,N2:3,N3:40,N4:10};Q.isValid=function(e){return e!=null&&e!==""&&!isNaN(e)&&e>=0&&e<=7};Q.from=function(e){return Q.isValid(e)?parseInt(e,10):void 0};Q.getPenaltyN1=function(e){let n=e.size,r=0,o=0,i=0,s=null,a=null;for(let c=0;c<n;c++){o=i=0,s=a=null;for(let l=0;l<n;l++){let d=e.get(c,l);d===s?o++:(o>=5&&(r+=vt.N1+(o-5)),s=d,o=1),d=e.get(l,c),d===a?i++:(i>=5&&(r+=vt.N1+(i-5)),a=d,i=1)}o>=5&&(r+=vt.N1+(o-5)),i>=5&&(r+=vt.N1+(i-5))}return r};Q.getPenaltyN2=function(e){let n=e.size,r=0;for(let o=0;o<n-1;o++)for(let i=0;i<n-1;i++){let s=e.get(o,i)+e.get(o,i+1)+e.get(o+1,i)+e.get(o+1,i+1);(s===4||s===0)&&r++}return r*vt.N2};Q.getPenaltyN3=function(e){let n=e.size,r=0,o=0,i=0;for(let s=0;s<n;s++){o=i=0;for(let a=0;a<n;a++)o=o<<1&2047|e.get(s,a),a>=10&&(o===1488||o===93)&&r++,i=i<<1&2047|e.get(a,s),a>=10&&(i===1488||i===93)&&r++}return r*vt.N3};Q.getPenaltyN4=function(e){let n=0,r=e.data.length;for(let i=0;i<r;i++)n+=e.data[i];return Math.abs(Math.ceil(n*100/r/5)-10)*vt.N4};function Lf(t,e,n){switch(t){case Q.Patterns.PATTERN000:return(e+n)%2===0;case Q.Patterns.PATTERN001:return e%2===0;case Q.Patterns.PATTERN010:return n%3===0;case Q.Patterns.PATTERN011:return(e+n)%3===0;case Q.Patterns.PATTERN100:return(Math.floor(e/2)+Math.floor(n/3))%2===0;case Q.Patterns.PATTERN101:return e*n%2+e*n%3===0;case Q.Patterns.PATTERN110:return(e*n%2+e*n%3)%2===0;case Q.Patterns.PATTERN111:return(e*n%3+(e+n)%2)%2===0;default:throw new Error("bad maskPattern:"+t)}}Q.applyMask=function(e,n){let r=n.size;for(let o=0;o<r;o++)for(let i=0;i<r;i++)n.isReserved(i,o)||n.xor(i,o,Lf(e,i,o))};Q.getBestMask=function(e,n){let r=Object.keys(Q.Patterns).length,o=0,i=1/0;for(let s=0;s<r;s++){n(s),Q.applyMask(s,e);let a=Q.getPenaltyN1(e)+Q.getPenaltyN2(e)+Q.getPenaltyN3(e)+Q.getPenaltyN4(e);Q.applyMask(s,e),a<i&&(i=a,o=s)}return o}});var oi=X(ri=>{var rt=Sr(),Br=[1,1,1,1,1,1,1,1,1,1,2,2,1,2,2,4,1,2,4,4,2,4,4,4,2,4,6,5,2,4,6,6,2,5,8,8,4,5,8,8,4,5,8,11,4,8,10,11,4,9,12,16,4,9,16,16,6,10,12,18,6,10,17,16,6,11,16,19,6,13,18,21,7,14,21,25,8,16,20,25,8,17,23,25,9,17,23,34,9,18,25,30,10,20,27,32,12,21,29,35,12,23,34,37,12,25,34,40,13,26,35,42,14,28,38,45,15,29,40,48,16,31,43,51,17,33,45,54,18,35,48,57,19,37,51,60,19,38,53,63,20,40,56,66,21,43,59,70,22,45,62,74,24,47,65,77,25,49,68,81],Ar=[7,10,13,17,10,16,22,28,15,26,36,44,20,36,52,64,26,48,72,88,36,64,96,112,40,72,108,130,48,88,132,156,60,110,160,192,72,130,192,224,80,150,224,264,96,176,260,308,104,198,288,352,120,216,320,384,132,240,360,432,144,280,408,480,168,308,448,532,180,338,504,588,196,364,546,650,224,416,600,700,224,442,644,750,252,476,690,816,270,504,750,900,300,560,810,960,312,588,870,1050,336,644,952,1110,360,700,1020,1200,390,728,1050,1260,420,784,1140,1350,450,812,1200,1440,480,868,1290,1530,510,924,1350,1620,540,980,1440,1710,570,1036,1530,1800,570,1064,1590,1890,600,1120,1680,1980,630,1204,1770,2100,660,1260,1860,2220,720,1316,1950,2310,750,1372,2040,2430];ri.getBlocksCount=function(e,n){switch(n){case rt.L:return Br[(e-1)*4+0];case rt.M:return Br[(e-1)*4+1];case rt.Q:return Br[(e-1)*4+2];case rt.H:return Br[(e-1)*4+3];default:return}};ri.getTotalCodewordsCount=function(e,n){switch(n){case rt.L:return Ar[(e-1)*4+0];case rt.M:return Ar[(e-1)*4+1];case rt.Q:return Ar[(e-1)*4+2];case rt.H:return Ar[(e-1)*4+3];default:return}}});var sc=X(Cr=>{var vn=new Uint8Array(512),Rr=new Uint8Array(256);(function(){let e=1;for(let n=0;n<255;n++)vn[n]=e,Rr[e]=n,e<<=1,e&256&&(e^=285);for(let n=255;n<512;n++)vn[n]=vn[n-255]})();Cr.log=function(e){if(e<1)throw new Error("log("+e+")");return Rr[e]};Cr.exp=function(e){return vn[e]};Cr.mul=function(e,n){return e===0||n===0?0:vn[Rr[e]+Rr[n]]}});var ac=X(Sn=>{var ii=sc();Sn.mul=function(e,n){let r=new Uint8Array(e.length+n.length-1);for(let o=0;o<e.length;o++)for(let i=0;i<n.length;i++)r[o+i]^=ii.mul(e[o],n[i]);return r};Sn.mod=function(e,n){let r=new Uint8Array(e);for(;r.length-n.length>=0;){let o=r[0];for(let s=0;s<n.length;s++)r[s]^=ii.mul(n[s],o);let i=0;for(;i<r.length&&r[i]===0;)i++;r=r.slice(i)}return r};Sn.generateECPolynomial=function(e){let n=new Uint8Array([1]);for(let r=0;r<e;r++)n=Sn.mul(n,new Uint8Array([1,ii.exp(r)]));return n}});var uc=X((Yg,lc)=>{var cc=ac();function si(t){this.genPoly=void 0,this.degree=t,this.degree&&this.initialize(this.degree)}si.prototype.initialize=function(e){this.degree=e,this.genPoly=cc.generateECPolynomial(this.degree)};si.prototype.encode=function(e){if(!this.genPoly)throw new Error("Encoder not initialized");let n=new Uint8Array(e.length+this.degree);n.set(e);let r=cc.mod(n,this.genPoly),o=this.degree-r.length;if(o>0){let i=new Uint8Array(this.degree);return i.set(r,o),i}return r};lc.exports=si});var ai=X(fc=>{fc.isValid=function(e){return!isNaN(e)&&e>=1&&e<=40}});var ci=X(ze=>{var dc="[0-9]+",Nf="[A-Z $%*+\\-./:]+",kn="(?:[u3000-u303F]|[u3040-u309F]|[u30A0-u30FF]|[uFF00-uFFEF]|[u4E00-u9FAF]|[u2605-u2606]|[u2190-u2195]|u203B|[u2010u2015u2018u2019u2025u2026u201Cu201Du2225u2260]|[u0391-u0451]|[u00A7u00A8u00B1u00B4u00D7u00F7])+";kn=kn.replace(/u/g,"\\u");var If="(?:(?![A-Z0-9 $%*+\\-./:]|"+kn+`)(?:.|[\r
-]))+`;ze.KANJI=new RegExp(kn,"g");ze.BYTE_KANJI=new RegExp("[^A-Z0-9 $%*+\\-./:]+","g");ze.BYTE=new RegExp(If,"g");ze.NUMERIC=new RegExp(dc,"g");ze.ALPHANUMERIC=new RegExp(Nf,"g");var _f=new RegExp("^"+kn+"$"),Uf=new RegExp("^"+dc+"$"),Of=new RegExp("^[A-Z0-9 $%*+\\-./:]+$");ze.testKanji=function(e){return _f.test(e)};ze.testNumeric=function(e){return Uf.test(e)};ze.testAlphanumeric=function(e){return Of.test(e)}});var ot=X(ie=>{var Pf=ai(),li=ci();ie.NUMERIC={id:"Numeric",bit:1,ccBits:[10,12,14]};ie.ALPHANUMERIC={id:"Alphanumeric",bit:2,ccBits:[9,11,13]};ie.BYTE={id:"Byte",bit:4,ccBits:[8,16,16]};ie.KANJI={id:"Kanji",bit:8,ccBits:[8,10,12]};ie.MIXED={bit:-1};ie.getCharCountIndicator=function(e,n){if(!e.ccBits)throw new Error("Invalid mode: "+e);if(!Pf.isValid(n))throw new Error("Invalid version: "+n);return n>=1&&n<10?e.ccBits[0]:n<27?e.ccBits[1]:e.ccBits[2]};ie.getBestModeForData=function(e){return li.testNumeric(e)?ie.NUMERIC:li.testAlphanumeric(e)?ie.ALPHANUMERIC:li.testKanji(e)?ie.KANJI:ie.BYTE};ie.toString=function(e){if(e&&e.id)return e.id;throw new Error("Invalid mode")};ie.isValid=function(e){return e&&e.bit&&e.ccBits};function Hf(t){if(typeof t!="string")throw new Error("Param is not a string");switch(t.toLowerCase()){case"numeric":return ie.NUMERIC;case"alphanumeric":return ie.ALPHANUMERIC;case"kanji":return ie.KANJI;case"byte":return ie.BYTE;default:throw new Error("Unknown mode: "+t)}}ie.from=function(e,n){if(ie.isValid(e))return e;try{return Hf(e)}catch{return n}}});var bc=X(St=>{var Tr=nt(),Mf=oi(),hc=Sr(),it=ot(),ui=ai(),pc=7973,gc=Tr.getBCHDigit(pc);function qf(t,e,n){for(let r=1;r<=40;r++)if(e<=St.getCapacity(r,n,t))return r}function yc(t,e){return it.getCharCountIndicator(t,e)+4}function Df(t,e){let n=0;return t.forEach(function(r){let o=yc(r.mode,e);n+=o+r.getBitsLength()}),n}function $f(t,e){for(let n=1;n<=40;n++)if(Df(t,n)<=St.getCapacity(n,e,it.MIXED))return n}St.from=function(e,n){return ui.isValid(e)?parseInt(e,10):n};St.getCapacity=function(e,n,r){if(!ui.isValid(e))throw new Error("Invalid QR Code version");typeof r>"u"&&(r=it.BYTE);let o=Tr.getSymbolTotalCodewords(e),i=Mf.getTotalCodewordsCount(e,n),s=(o-i)*8;if(r===it.MIXED)return s;let a=s-yc(r,e);switch(r){case it.NUMERIC:return Math.floor(a/10*3);case it.ALPHANUMERIC:return Math.floor(a/11*2);case it.KANJI:return Math.floor(a/13);case it.BYTE:default:return Math.floor(a/8)}};St.getBestVersionForData=function(e,n){let r,o=hc.from(n,hc.M);if(Array.isArray(e)){if(e.length>1)return $f(e,o);if(e.length===0)return 1;r=e[0]}else r=e;return qf(r.mode,r.getLength(),o)};St.getEncodedBits=function(e){if(!ui.isValid(e)||e<7)throw new Error("Invalid QR Code version");let n=e<<12;for(;Tr.getBCHDigit(n)-gc>=0;)n^=pc<<Tr.getBCHDigit(n)-gc;return e<<12|n}});var Ec=X(xc=>{var fi=nt(),wc=1335,Vf=21522,mc=fi.getBCHDigit(wc);xc.getEncodedBits=function(e,n){let r=e.bit<<3|n,o=r<<10;for(;fi.getBCHDigit(o)-mc>=0;)o^=wc<<fi.getBCHDigit(o)-mc;return(r<<10|o)^Vf}});var Sc=X((tp,vc)=>{var Kf=ot();function jt(t){this.mode=Kf.NUMERIC,this.data=t.toString()}jt.getBitsLength=function(e){return 10*Math.floor(e/3)+(e%3?e%3*3+1:0)};jt.prototype.getLength=function(){return this.data.length};jt.prototype.getBitsLength=function(){return jt.getBitsLength(this.data.length)};jt.prototype.write=function(e){let n,r,o;for(n=0;n+3<=this.data.length;n+=3)r=this.data.substr(n,3),o=parseInt(r,10),e.put(o,10);let i=this.data.length-n;i>0&&(r=this.data.substr(n),o=parseInt(r,10),e.put(o,i*3+1))};vc.exports=jt});var Bc=X((np,kc)=>{var zf=ot(),di=["0","1","2","3","4","5","6","7","8","9","A","B","C","D","E","F","G","H","I","J","K","L","M","N","O","P","Q","R","S","T","U","V","W","X","Y","Z"," ","$","%","*","+","-",".","/",":"];function Zt(t){this.mode=zf.ALPHANUMERIC,this.data=t}Zt.getBitsLength=function(e){return 11*Math.floor(e/2)+6*(e%2)};Zt.prototype.getLength=function(){return this.data.length};Zt.prototype.getBitsLength=function(){return Zt.getBitsLength(this.data.length)};Zt.prototype.write=function(e){let n;for(n=0;n+2<=this.data.length;n+=2){let r=di.indexOf(this.data[n])*45;r+=di.indexOf(this.data[n+1]),e.put(r,11)}this.data.length%2&&e.put(di.indexOf(this.data[n]),6)};kc.exports=Zt});var Rc=X((rp,Ac)=>{var jf=ot();function Gt(t){this.mode=jf.BYTE,typeof t=="string"?this.data=new TextEncoder().encode(t):this.data=new Uint8Array(t)}Gt.getBitsLength=function(e){return e*8};Gt.prototype.getLength=function(){return this.data.length};Gt.prototype.getBitsLength=function(){return Gt.getBitsLength(this.data.length)};Gt.prototype.write=function(t){for(let e=0,n=this.data.length;e<n;e++)t.put(this.data[e],8)};Ac.exports=Gt});var Tc=X((op,Cc)=>{var Zf=ot(),Gf=nt();function Wt(t){this.mode=Zf.KANJI,this.data=t}Wt.getBitsLength=function(e){return e*13};Wt.prototype.getLength=function(){return this.data.length};Wt.prototype.getBitsLength=function(){return Wt.getBitsLength(this.data.length)};Wt.prototype.write=function(t){let e;for(e=0;e<this.data.length;e++){let n=Gf.toSJIS(this.data[e]);if(n>=33088&&n<=40956)n-=33088;else if(n>=57408&&n<=60351)n-=49472;else throw new Error("Invalid SJIS character: "+this.data[e]+`
-Make sure your charset is UTF-8`);n=(n>>>8&255)*192+(n&255),t.put(n,13)}};Cc.exports=Wt});var Lc=X((ip,hi)=>{"use strict";var Bn={single_source_shortest_paths:function(t,e,n){var r={},o={};o[e]=0;var i=Bn.PriorityQueue.make();i.push(e,0);for(var s,a,c,l,d,g,u,f,y;!i.empty();){s=i.pop(),a=s.value,l=s.cost,d=t[a]||{};for(c in d)d.hasOwnProperty(c)&&(g=d[c],u=l+g,f=o[c],y=typeof o[c]>"u",(y||f>u)&&(o[c]=u,i.push(c,u),r[c]=a))}if(typeof n<"u"&&typeof o[n]>"u"){var b=["Could not find a path from ",e," to ",n,"."].join("");throw new Error(b)}return r},extract_shortest_path_from_predecessor_list:function(t,e){for(var n=[],r=e,o;r;)n.push(r),o=t[r],r=t[r];return n.reverse(),n},find_path:function(t,e,n){var r=Bn.single_source_shortest_paths(t,e,n);return Bn.extract_shortest_path_from_predecessor_list(r,n)},PriorityQueue:{make:function(t){var e=Bn.PriorityQueue,n={},r;t=t||{};for(r in e)e.hasOwnProperty(r)&&(n[r]=e[r]);return n.queue=[],n.sorter=t.sorter||e.default_sorter,n},default_sorter:function(t,e){return t.cost-e.cost},push:function(t,e){var n={value:t,cost:e};this.queue.push(n),this.queue.sort(this.sorter)},pop:function(){return this.queue.shift()},empty:function(){return this.queue.length===0}}};typeof hi<"u"&&(hi.exports=Bn)});var Mc=X(Yt=>{var J=ot(),_c=Sc(),Uc=Bc(),Oc=Rc(),Pc=Tc(),An=ci(),Lr=nt(),Wf=Lc();function Nc(t){return unescape(encodeURIComponent(t)).length}function Rn(t,e,n){let r=[],o;for(;(o=t.exec(n))!==null;)r.push({data:o[0],index:o.index,mode:e,length:o[0].length});return r}function Hc(t){let e=Rn(An.NUMERIC,J.NUMERIC,t),n=Rn(An.ALPHANUMERIC,J.ALPHANUMERIC,t),r,o;return Lr.isKanjiModeEnabled()?(r=Rn(An.BYTE,J.BYTE,t),o=Rn(An.KANJI,J.KANJI,t)):(r=Rn(An.BYTE_KANJI,J.BYTE,t),o=[]),e.concat(n,r,o).sort(function(s,a){return s.index-a.index}).map(function(s){return{data:s.data,mode:s.mode,length:s.length}})}function gi(t,e){switch(e){case J.NUMERIC:return _c.getBitsLength(t);case J.ALPHANUMERIC:return Uc.getBitsLength(t);case J.KANJI:return Pc.getBitsLength(t);case J.BYTE:return Oc.getBitsLength(t)}}function Yf(t){return t.reduce(function(e,n){let r=e.length-1>=0?e[e.length-1]:null;return r&&r.mode===n.mode?(e[e.length-1].data+=n.data,e):(e.push(n),e)},[])}function Jf(t){let e=[];for(let n=0;n<t.length;n++){let r=t[n];switch(r.mode){case J.NUMERIC:e.push([r,{data:r.data,mode:J.ALPHANUMERIC,length:r.length},{data:r.data,mode:J.BYTE,length:r.length}]);break;case J.ALPHANUMERIC:e.push([r,{data:r.data,mode:J.BYTE,length:r.length}]);break;case J.KANJI:e.push([r,{data:r.data,mode:J.BYTE,length:Nc(r.data)}]);break;case J.BYTE:e.push([{data:r.data,mode:J.BYTE,length:Nc(r.data)}])}}return e}function Xf(t,e){let n={},r={start:{}},o=["start"];for(let i=0;i<t.length;i++){let s=t[i],a=[];for(let c=0;c<s.length;c++){let l=s[c],d=""+i+c;a.push(d),n[d]={node:l,lastCount:0},r[d]={};for(let g=0;g<o.length;g++){let u=o[g];n[u]&&n[u].node.mode===l.mode?(r[u][d]=gi(n[u].lastCount+l.length,l.mode)-gi(n[u].lastCount,l.mode),n[u].lastCount+=l.length):(n[u]&&(n[u].lastCount=l.length),r[u][d]=gi(l.length,l.mode)+4+J.getCharCountIndicator(l.mode,e))}}o=a}for(let i=0;i<o.length;i++)r[o[i]].end=0;return{map:r,table:n}}function Ic(t,e){let n,r=J.getBestModeForData(t);if(n=J.from(e,r),n!==J.BYTE&&n.bit<r.bit)throw new Error('"'+t+'" cannot be encoded with mode '+J.toString(n)+`.
- Suggested mode is: `+J.toString(r));switch(n===J.KANJI&&!Lr.isKanjiModeEnabled()&&(n=J.BYTE),n){case J.NUMERIC:return new _c(t);case J.ALPHANUMERIC:return new Uc(t);case J.KANJI:return new Pc(t);case J.BYTE:return new Oc(t)}}Yt.fromArray=function(e){return e.reduce(function(n,r){return typeof r=="string"?n.push(Ic(r,null)):r.data&&n.push(Ic(r.data,r.mode)),n},[])};Yt.fromString=function(e,n){let r=Hc(e,Lr.isKanjiModeEnabled()),o=Jf(r),i=Xf(o,n),s=Wf.find_path(i.map,"start","end"),a=[];for(let c=1;c<s.length-1;c++)a.push(i.table[s[c]].node);return Yt.fromArray(Yf(a))};Yt.rawSplit=function(e){return Yt.fromArray(Hc(e,Lr.isKanjiModeEnabled()))}});var Dc=X(qc=>{var Ir=nt(),pi=Sr(),Ff=Fa(),Qf=ec(),ed=tc(),td=oc(),mi=ic(),wi=oi(),nd=uc(),Nr=bc(),rd=Ec(),od=ot(),yi=Mc();function id(t,e){let n=t.size,r=td.getPositions(e);for(let o=0;o<r.length;o++){let i=r[o][0],s=r[o][1];for(let a=-1;a<=7;a++)if(!(i+a<=-1||n<=i+a))for(let c=-1;c<=7;c++)s+c<=-1||n<=s+c||(a>=0&&a<=6&&(c===0||c===6)||c>=0&&c<=6&&(a===0||a===6)||a>=2&&a<=4&&c>=2&&c<=4?t.set(i+a,s+c,!0,!0):t.set(i+a,s+c,!1,!0))}}function sd(t){let e=t.size;for(let n=8;n<e-8;n++){let r=n%2===0;t.set(n,6,r,!0),t.set(6,n,r,!0)}}function ad(t,e){let n=ed.getPositions(e);for(let r=0;r<n.length;r++){let o=n[r][0],i=n[r][1];for(let s=-2;s<=2;s++)for(let a=-2;a<=2;a++)s===-2||s===2||a===-2||a===2||s===0&&a===0?t.set(o+s,i+a,!0,!0):t.set(o+s,i+a,!1,!0)}}function cd(t,e){let n=t.size,r=Nr.getEncodedBits(e),o,i,s;for(let a=0;a<18;a++)o=Math.floor(a/3),i=a%3+n-8-3,s=(r>>a&1)===1,t.set(o,i,s,!0),t.set(i,o,s,!0)}function bi(t,e,n){let r=t.size,o=rd.getEncodedBits(e,n),i,s;for(i=0;i<15;i++)s=(o>>i&1)===1,i<6?t.set(i,8,s,!0):i<8?t.set(i+1,8,s,!0):t.set(r-15+i,8,s,!0),i<8?t.set(8,r-i-1,s,!0):i<9?t.set(8,15-i-1+1,s,!0):t.set(8,15-i-1,s,!0);t.set(r-8,8,1,!0)}function ld(t,e){let n=t.size,r=-1,o=n-1,i=7,s=0;for(let a=n-1;a>0;a-=2)for(a===6&&a--;;){for(let c=0;c<2;c++)if(!t.isReserved(o,a-c)){let l=!1;s<e.length&&(l=(e[s]>>>i&1)===1),t.set(o,a-c,l),i--,i===-1&&(s++,i=7)}if(o+=r,o<0||n<=o){o-=r,r=-r;break}}}function ud(t,e,n){let r=new Ff;n.forEach(function(c){r.put(c.mode.bit,4),r.put(c.getLength(),od.getCharCountIndicator(c.mode,t)),c.write(r)});let o=Ir.getSymbolTotalCodewords(t),i=wi.getTotalCodewordsCount(t,e),s=(o-i)*8;for(r.getLengthInBits()+4<=s&&r.put(0,4);r.getLengthInBits()%8!==0;)r.putBit(0);let a=(s-r.getLengthInBits())/8;for(let c=0;c<a;c++)r.put(c%2?17:236,8);return fd(r,t,e)}function fd(t,e,n){let r=Ir.getSymbolTotalCodewords(e),o=wi.getTotalCodewordsCount(e,n),i=r-o,s=wi.getBlocksCount(e,n),a=r%s,c=s-a,l=Math.floor(r/s),d=Math.floor(i/s),g=d+1,u=l-d,f=new nd(u),y=0,b=new Array(s),v=new Array(s),R=0,O=new Uint8Array(t.buffer);for(let j=0;j<s;j++){let Z=j<c?d:g;b[j]=O.slice(y,y+Z),v[j]=f.encode(b[j]),y+=Z,R=Math.max(R,Z)}let N=new Uint8Array(r),I=0,_,q;for(_=0;_<R;_++)for(q=0;q<s;q++)_<b[q].length&&(N[I++]=b[q][_]);for(_=0;_<u;_++)for(q=0;q<s;q++)N[I++]=v[q][_];return N}function dd(t,e,n,r){let o;if(Array.isArray(t))o=yi.fromArray(t);else if(typeof t=="string"){let l=e;if(!l){let d=yi.rawSplit(t);l=Nr.getBestVersionForData(d,n)}o=yi.fromString(t,l||40)}else throw new Error("Invalid data");let i=Nr.getBestVersionForData(o,n);if(!i)throw new Error("The amount of data is too big to be stored in a QR Code");if(!e)e=i;else if(e<i)throw new Error(`
+"use strict";var __SignetLoginIIFE=(()=>{var al=Object.create;var Qt=Object.defineProperty;var cl=Object.getOwnPropertyDescriptor;var ll=Object.getOwnPropertyNames;var ul=Object.getPrototypeOf,fl=Object.prototype.hasOwnProperty;var dl=(t,e,n)=>e in t?Qt(t,e,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[e]=n;var X=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports),hl=(t,e)=>{for(var n in e)Qt(t,n,{get:e[n],enumerable:!0})},Ri=(t,e,n,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of ll(e))!fl.call(t,o)&&o!==n&&Qt(t,o,{get:()=>e[o],enumerable:!(r=cl(e,o))||r.enumerable});return t};var gl=(t,e,n)=>(n=t!=null?al(ul(t)):{},Ri(e||!t||!t.__esModule?Qt(n,"default",{value:t,enumerable:!0}):n,t)),pl=t=>Ri(Qt({},"__esModule",{value:!0}),t);var S=(t,e,n)=>dl(t,typeof e!="symbol"?e+"":e,n);var Ya=X((Dg,Wa)=>{Wa.exports=function(){return typeof Promise=="function"&&Promise.prototype&&Promise.prototype.then}});var nt=X(Et=>{var ni,Rf=[0,26,44,70,100,134,172,196,242,292,346,404,466,532,581,655,733,815,901,991,1085,1156,1258,1364,1474,1588,1706,1828,1921,2051,2185,2323,2465,2611,2761,2876,3034,3196,3362,3532,3706];Et.getSymbolSize=function(e){if(!e)throw new Error('"version" cannot be null or undefined');if(e<1||e>40)throw new Error('"version" should be in range from 1 to 40');return e*4+17};Et.getSymbolTotalCodewords=function(e){return Rf[e]};Et.getBCHDigit=function(t){let e=0;for(;t!==0;)e++,t>>>=1;return e};Et.setToSJISFunction=function(e){if(typeof e!="function")throw new Error('"toSJISFunc" is not a valid function.');ni=e};Et.isKanjiModeEnabled=function(){return typeof ni<"u"};Et.toSJIS=function(e){return ni(e)}});var Sr=X(ve=>{ve.L={bit:1};ve.M={bit:0};ve.Q={bit:3};ve.H={bit:2};function Cf(t){if(typeof t!="string")throw new Error("Param is not a string");switch(t.toLowerCase()){case"l":case"low":return ve.L;case"m":case"medium":return ve.M;case"q":case"quartile":return ve.Q;case"h":case"high":return ve.H;default:throw new Error("Unknown EC Level: "+t)}}ve.isValid=function(e){return e&&typeof e.bit<"u"&&e.bit>=0&&e.bit<4};ve.from=function(e,n){if(ve.isValid(e))return e;try{return Cf(e)}catch{return n}}});var Fa=X((Kg,Xa)=>{function Ja(){this.buffer=[],this.length=0}Ja.prototype={get:function(t){let e=Math.floor(t/8);return(this.buffer[e]>>>7-t%8&1)===1},put:function(t,e){for(let n=0;n<e;n++)this.putBit((t>>>e-n-1&1)===1)},getLengthInBits:function(){return this.length},putBit:function(t){let e=Math.floor(this.length/8);this.buffer.length<=e&&this.buffer.push(0),t&&(this.buffer[e]|=128>>>this.length%8),this.length++}};Xa.exports=Ja});var ec=X((zg,Qa)=>{function En(t){if(!t||t<1)throw new Error("BitMatrix size must be defined and greater than 0");this.size=t,this.data=new Uint8Array(t*t),this.reservedBit=new Uint8Array(t*t)}En.prototype.set=function(t,e,n,r){let o=t*this.size+e;this.data[o]=n,r&&(this.reservedBit[o]=!0)};En.prototype.get=function(t,e){return this.data[t*this.size+e]};En.prototype.xor=function(t,e,n){this.data[t*this.size+e]^=n};En.prototype.isReserved=function(t,e){return this.reservedBit[t*this.size+e]};Qa.exports=En});var tc=X(kr=>{var Tf=nt().getSymbolSize;kr.getRowColCoords=function(e){if(e===1)return[];let n=Math.floor(e/7)+2,r=Tf(e),o=r===145?26:Math.ceil((r-13)/(2*n-2))*2,i=[r-7];for(let s=1;s<n-1;s++)i[s]=i[s-1]-o;return i.push(6),i.reverse()};kr.getPositions=function(e){let n=[],r=kr.getRowColCoords(e),o=r.length;for(let i=0;i<o;i++)for(let s=0;s<o;s++)i===0&&s===0||i===0&&s===o-1||i===o-1&&s===0||n.push([r[i],r[s]]);return n}});var oc=X(rc=>{var Lf=nt().getSymbolSize,nc=7;rc.getPositions=function(e){let n=Lf(e);return[[0,0],[n-nc,0],[0,n-nc]]}});var ic=X(Q=>{Q.Patterns={PATTERN000:0,PATTERN001:1,PATTERN010:2,PATTERN011:3,PATTERN100:4,PATTERN101:5,PATTERN110:6,PATTERN111:7};var vt={N1:3,N2:3,N3:40,N4:10};Q.isValid=function(e){return e!=null&&e!==""&&!isNaN(e)&&e>=0&&e<=7};Q.from=function(e){return Q.isValid(e)?parseInt(e,10):void 0};Q.getPenaltyN1=function(e){let n=e.size,r=0,o=0,i=0,s=null,a=null;for(let c=0;c<n;c++){o=i=0,s=a=null;for(let l=0;l<n;l++){let d=e.get(c,l);d===s?o++:(o>=5&&(r+=vt.N1+(o-5)),s=d,o=1),d=e.get(l,c),d===a?i++:(i>=5&&(r+=vt.N1+(i-5)),a=d,i=1)}o>=5&&(r+=vt.N1+(o-5)),i>=5&&(r+=vt.N1+(i-5))}return r};Q.getPenaltyN2=function(e){let n=e.size,r=0;for(let o=0;o<n-1;o++)for(let i=0;i<n-1;i++){let s=e.get(o,i)+e.get(o,i+1)+e.get(o+1,i)+e.get(o+1,i+1);(s===4||s===0)&&r++}return r*vt.N2};Q.getPenaltyN3=function(e){let n=e.size,r=0,o=0,i=0;for(let s=0;s<n;s++){o=i=0;for(let a=0;a<n;a++)o=o<<1&2047|e.get(s,a),a>=10&&(o===1488||o===93)&&r++,i=i<<1&2047|e.get(a,s),a>=10&&(i===1488||i===93)&&r++}return r*vt.N3};Q.getPenaltyN4=function(e){let n=0,r=e.data.length;for(let i=0;i<r;i++)n+=e.data[i];return Math.abs(Math.ceil(n*100/r/5)-10)*vt.N4};function Nf(t,e,n){switch(t){case Q.Patterns.PATTERN000:return(e+n)%2===0;case Q.Patterns.PATTERN001:return e%2===0;case Q.Patterns.PATTERN010:return n%3===0;case Q.Patterns.PATTERN011:return(e+n)%3===0;case Q.Patterns.PATTERN100:return(Math.floor(e/2)+Math.floor(n/3))%2===0;case Q.Patterns.PATTERN101:return e*n%2+e*n%3===0;case Q.Patterns.PATTERN110:return(e*n%2+e*n%3)%2===0;case Q.Patterns.PATTERN111:return(e*n%3+(e+n)%2)%2===0;default:throw new Error("bad maskPattern:"+t)}}Q.applyMask=function(e,n){let r=n.size;for(let o=0;o<r;o++)for(let i=0;i<r;i++)n.isReserved(i,o)||n.xor(i,o,Nf(e,i,o))};Q.getBestMask=function(e,n){let r=Object.keys(Q.Patterns).length,o=0,i=1/0;for(let s=0;s<r;s++){n(s),Q.applyMask(s,e);let a=Q.getPenaltyN1(e)+Q.getPenaltyN2(e)+Q.getPenaltyN3(e)+Q.getPenaltyN4(e);Q.applyMask(s,e),a<i&&(i=a,o=s)}return o}});var oi=X(ri=>{var rt=Sr(),Br=[1,1,1,1,1,1,1,1,1,1,2,2,1,2,2,4,1,2,4,4,2,4,4,4,2,4,6,5,2,4,6,6,2,5,8,8,4,5,8,8,4,5,8,11,4,8,10,11,4,9,12,16,4,9,16,16,6,10,12,18,6,10,17,16,6,11,16,19,6,13,18,21,7,14,21,25,8,16,20,25,8,17,23,25,9,17,23,34,9,18,25,30,10,20,27,32,12,21,29,35,12,23,34,37,12,25,34,40,13,26,35,42,14,28,38,45,15,29,40,48,16,31,43,51,17,33,45,54,18,35,48,57,19,37,51,60,19,38,53,63,20,40,56,66,21,43,59,70,22,45,62,74,24,47,65,77,25,49,68,81],Ar=[7,10,13,17,10,16,22,28,15,26,36,44,20,36,52,64,26,48,72,88,36,64,96,112,40,72,108,130,48,88,132,156,60,110,160,192,72,130,192,224,80,150,224,264,96,176,260,308,104,198,288,352,120,216,320,384,132,240,360,432,144,280,408,480,168,308,448,532,180,338,504,588,196,364,546,650,224,416,600,700,224,442,644,750,252,476,690,816,270,504,750,900,300,560,810,960,312,588,870,1050,336,644,952,1110,360,700,1020,1200,390,728,1050,1260,420,784,1140,1350,450,812,1200,1440,480,868,1290,1530,510,924,1350,1620,540,980,1440,1710,570,1036,1530,1800,570,1064,1590,1890,600,1120,1680,1980,630,1204,1770,2100,660,1260,1860,2220,720,1316,1950,2310,750,1372,2040,2430];ri.getBlocksCount=function(e,n){switch(n){case rt.L:return Br[(e-1)*4+0];case rt.M:return Br[(e-1)*4+1];case rt.Q:return Br[(e-1)*4+2];case rt.H:return Br[(e-1)*4+3];default:return}};ri.getTotalCodewordsCount=function(e,n){switch(n){case rt.L:return Ar[(e-1)*4+0];case rt.M:return Ar[(e-1)*4+1];case rt.Q:return Ar[(e-1)*4+2];case rt.H:return Ar[(e-1)*4+3];default:return}}});var sc=X(Cr=>{var vn=new Uint8Array(512),Rr=new Uint8Array(256);(function(){let e=1;for(let n=0;n<255;n++)vn[n]=e,Rr[e]=n,e<<=1,e&256&&(e^=285);for(let n=255;n<512;n++)vn[n]=vn[n-255]})();Cr.log=function(e){if(e<1)throw new Error("log("+e+")");return Rr[e]};Cr.exp=function(e){return vn[e]};Cr.mul=function(e,n){return e===0||n===0?0:vn[Rr[e]+Rr[n]]}});var ac=X(Sn=>{var ii=sc();Sn.mul=function(e,n){let r=new Uint8Array(e.length+n.length-1);for(let o=0;o<e.length;o++)for(let i=0;i<n.length;i++)r[o+i]^=ii.mul(e[o],n[i]);return r};Sn.mod=function(e,n){let r=new Uint8Array(e);for(;r.length-n.length>=0;){let o=r[0];for(let s=0;s<n.length;s++)r[s]^=ii.mul(n[s],o);let i=0;for(;i<r.length&&r[i]===0;)i++;r=r.slice(i)}return r};Sn.generateECPolynomial=function(e){let n=new Uint8Array([1]);for(let r=0;r<e;r++)n=Sn.mul(n,new Uint8Array([1,ii.exp(r)]));return n}});var uc=X((Xg,lc)=>{var cc=ac();function si(t){this.genPoly=void 0,this.degree=t,this.degree&&this.initialize(this.degree)}si.prototype.initialize=function(e){this.degree=e,this.genPoly=cc.generateECPolynomial(this.degree)};si.prototype.encode=function(e){if(!this.genPoly)throw new Error("Encoder not initialized");let n=new Uint8Array(e.length+this.degree);n.set(e);let r=cc.mod(n,this.genPoly),o=this.degree-r.length;if(o>0){let i=new Uint8Array(this.degree);return i.set(r,o),i}return r};lc.exports=si});var ai=X(fc=>{fc.isValid=function(e){return!isNaN(e)&&e>=1&&e<=40}});var ci=X(ze=>{var dc="[0-9]+",If="[A-Z $%*+\\-./:]+",kn="(?:[u3000-u303F]|[u3040-u309F]|[u30A0-u30FF]|[uFF00-uFFEF]|[u4E00-u9FAF]|[u2605-u2606]|[u2190-u2195]|u203B|[u2010u2015u2018u2019u2025u2026u201Cu201Du2225u2260]|[u0391-u0451]|[u00A7u00A8u00B1u00B4u00D7u00F7])+";kn=kn.replace(/u/g,"\\u");var _f="(?:(?![A-Z0-9 $%*+\\-./:]|"+kn+`)(?:.|[\r
+]))+`;ze.KANJI=new RegExp(kn,"g");ze.BYTE_KANJI=new RegExp("[^A-Z0-9 $%*+\\-./:]+","g");ze.BYTE=new RegExp(_f,"g");ze.NUMERIC=new RegExp(dc,"g");ze.ALPHANUMERIC=new RegExp(If,"g");var Uf=new RegExp("^"+kn+"$"),Of=new RegExp("^"+dc+"$"),Pf=new RegExp("^[A-Z0-9 $%*+\\-./:]+$");ze.testKanji=function(e){return Uf.test(e)};ze.testNumeric=function(e){return Of.test(e)};ze.testAlphanumeric=function(e){return Pf.test(e)}});var ot=X(ie=>{var Hf=ai(),li=ci();ie.NUMERIC={id:"Numeric",bit:1,ccBits:[10,12,14]};ie.ALPHANUMERIC={id:"Alphanumeric",bit:2,ccBits:[9,11,13]};ie.BYTE={id:"Byte",bit:4,ccBits:[8,16,16]};ie.KANJI={id:"Kanji",bit:8,ccBits:[8,10,12]};ie.MIXED={bit:-1};ie.getCharCountIndicator=function(e,n){if(!e.ccBits)throw new Error("Invalid mode: "+e);if(!Hf.isValid(n))throw new Error("Invalid version: "+n);return n>=1&&n<10?e.ccBits[0]:n<27?e.ccBits[1]:e.ccBits[2]};ie.getBestModeForData=function(e){return li.testNumeric(e)?ie.NUMERIC:li.testAlphanumeric(e)?ie.ALPHANUMERIC:li.testKanji(e)?ie.KANJI:ie.BYTE};ie.toString=function(e){if(e&&e.id)return e.id;throw new Error("Invalid mode")};ie.isValid=function(e){return e&&e.bit&&e.ccBits};function Mf(t){if(typeof t!="string")throw new Error("Param is not a string");switch(t.toLowerCase()){case"numeric":return ie.NUMERIC;case"alphanumeric":return ie.ALPHANUMERIC;case"kanji":return ie.KANJI;case"byte":return ie.BYTE;default:throw new Error("Unknown mode: "+t)}}ie.from=function(e,n){if(ie.isValid(e))return e;try{return Mf(e)}catch{return n}}});var bc=X(St=>{var Tr=nt(),qf=oi(),hc=Sr(),it=ot(),ui=ai(),pc=7973,gc=Tr.getBCHDigit(pc);function Df(t,e,n){for(let r=1;r<=40;r++)if(e<=St.getCapacity(r,n,t))return r}function yc(t,e){return it.getCharCountIndicator(t,e)+4}function $f(t,e){let n=0;return t.forEach(function(r){let o=yc(r.mode,e);n+=o+r.getBitsLength()}),n}function Vf(t,e){for(let n=1;n<=40;n++)if($f(t,n)<=St.getCapacity(n,e,it.MIXED))return n}St.from=function(e,n){return ui.isValid(e)?parseInt(e,10):n};St.getCapacity=function(e,n,r){if(!ui.isValid(e))throw new Error("Invalid QR Code version");typeof r>"u"&&(r=it.BYTE);let o=Tr.getSymbolTotalCodewords(e),i=qf.getTotalCodewordsCount(e,n),s=(o-i)*8;if(r===it.MIXED)return s;let a=s-yc(r,e);switch(r){case it.NUMERIC:return Math.floor(a/10*3);case it.ALPHANUMERIC:return Math.floor(a/11*2);case it.KANJI:return Math.floor(a/13);case it.BYTE:default:return Math.floor(a/8)}};St.getBestVersionForData=function(e,n){let r,o=hc.from(n,hc.M);if(Array.isArray(e)){if(e.length>1)return Vf(e,o);if(e.length===0)return 1;r=e[0]}else r=e;return Df(r.mode,r.getLength(),o)};St.getEncodedBits=function(e){if(!ui.isValid(e)||e<7)throw new Error("Invalid QR Code version");let n=e<<12;for(;Tr.getBCHDigit(n)-gc>=0;)n^=pc<<Tr.getBCHDigit(n)-gc;return e<<12|n}});var Ec=X(xc=>{var fi=nt(),wc=1335,Kf=21522,mc=fi.getBCHDigit(wc);xc.getEncodedBits=function(e,n){let r=e.bit<<3|n,o=r<<10;for(;fi.getBCHDigit(o)-mc>=0;)o^=wc<<fi.getBCHDigit(o)-mc;return(r<<10|o)^Kf}});var Sc=X((rp,vc)=>{var zf=ot();function jt(t){this.mode=zf.NUMERIC,this.data=t.toString()}jt.getBitsLength=function(e){return 10*Math.floor(e/3)+(e%3?e%3*3+1:0)};jt.prototype.getLength=function(){return this.data.length};jt.prototype.getBitsLength=function(){return jt.getBitsLength(this.data.length)};jt.prototype.write=function(e){let n,r,o;for(n=0;n+3<=this.data.length;n+=3)r=this.data.substr(n,3),o=parseInt(r,10),e.put(o,10);let i=this.data.length-n;i>0&&(r=this.data.substr(n),o=parseInt(r,10),e.put(o,i*3+1))};vc.exports=jt});var Bc=X((op,kc)=>{var jf=ot(),di=["0","1","2","3","4","5","6","7","8","9","A","B","C","D","E","F","G","H","I","J","K","L","M","N","O","P","Q","R","S","T","U","V","W","X","Y","Z"," ","$","%","*","+","-",".","/",":"];function Zt(t){this.mode=jf.ALPHANUMERIC,this.data=t}Zt.getBitsLength=function(e){return 11*Math.floor(e/2)+6*(e%2)};Zt.prototype.getLength=function(){return this.data.length};Zt.prototype.getBitsLength=function(){return Zt.getBitsLength(this.data.length)};Zt.prototype.write=function(e){let n;for(n=0;n+2<=this.data.length;n+=2){let r=di.indexOf(this.data[n])*45;r+=di.indexOf(this.data[n+1]),e.put(r,11)}this.data.length%2&&e.put(di.indexOf(this.data[n]),6)};kc.exports=Zt});var Rc=X((ip,Ac)=>{var Zf=ot();function Gt(t){this.mode=Zf.BYTE,typeof t=="string"?this.data=new TextEncoder().encode(t):this.data=new Uint8Array(t)}Gt.getBitsLength=function(e){return e*8};Gt.prototype.getLength=function(){return this.data.length};Gt.prototype.getBitsLength=function(){return Gt.getBitsLength(this.data.length)};Gt.prototype.write=function(t){for(let e=0,n=this.data.length;e<n;e++)t.put(this.data[e],8)};Ac.exports=Gt});var Tc=X((sp,Cc)=>{var Gf=ot(),Wf=nt();function Wt(t){this.mode=Gf.KANJI,this.data=t}Wt.getBitsLength=function(e){return e*13};Wt.prototype.getLength=function(){return this.data.length};Wt.prototype.getBitsLength=function(){return Wt.getBitsLength(this.data.length)};Wt.prototype.write=function(t){let e;for(e=0;e<this.data.length;e++){let n=Wf.toSJIS(this.data[e]);if(n>=33088&&n<=40956)n-=33088;else if(n>=57408&&n<=60351)n-=49472;else throw new Error("Invalid SJIS character: "+this.data[e]+`
+Make sure your charset is UTF-8`);n=(n>>>8&255)*192+(n&255),t.put(n,13)}};Cc.exports=Wt});var Lc=X((ap,hi)=>{"use strict";var Bn={single_source_shortest_paths:function(t,e,n){var r={},o={};o[e]=0;var i=Bn.PriorityQueue.make();i.push(e,0);for(var s,a,c,l,d,g,u,f,y;!i.empty();){s=i.pop(),a=s.value,l=s.cost,d=t[a]||{};for(c in d)d.hasOwnProperty(c)&&(g=d[c],u=l+g,f=o[c],y=typeof o[c]>"u",(y||f>u)&&(o[c]=u,i.push(c,u),r[c]=a))}if(typeof n<"u"&&typeof o[n]>"u"){var b=["Could not find a path from ",e," to ",n,"."].join("");throw new Error(b)}return r},extract_shortest_path_from_predecessor_list:function(t,e){for(var n=[],r=e,o;r;)n.push(r),o=t[r],r=t[r];return n.reverse(),n},find_path:function(t,e,n){var r=Bn.single_source_shortest_paths(t,e,n);return Bn.extract_shortest_path_from_predecessor_list(r,n)},PriorityQueue:{make:function(t){var e=Bn.PriorityQueue,n={},r;t=t||{};for(r in e)e.hasOwnProperty(r)&&(n[r]=e[r]);return n.queue=[],n.sorter=t.sorter||e.default_sorter,n},default_sorter:function(t,e){return t.cost-e.cost},push:function(t,e){var n={value:t,cost:e};this.queue.push(n),this.queue.sort(this.sorter)},pop:function(){return this.queue.shift()},empty:function(){return this.queue.length===0}}};typeof hi<"u"&&(hi.exports=Bn)});var Mc=X(Yt=>{var J=ot(),_c=Sc(),Uc=Bc(),Oc=Rc(),Pc=Tc(),An=ci(),Lr=nt(),Yf=Lc();function Nc(t){return unescape(encodeURIComponent(t)).length}function Rn(t,e,n){let r=[],o;for(;(o=t.exec(n))!==null;)r.push({data:o[0],index:o.index,mode:e,length:o[0].length});return r}function Hc(t){let e=Rn(An.NUMERIC,J.NUMERIC,t),n=Rn(An.ALPHANUMERIC,J.ALPHANUMERIC,t),r,o;return Lr.isKanjiModeEnabled()?(r=Rn(An.BYTE,J.BYTE,t),o=Rn(An.KANJI,J.KANJI,t)):(r=Rn(An.BYTE_KANJI,J.BYTE,t),o=[]),e.concat(n,r,o).sort(function(s,a){return s.index-a.index}).map(function(s){return{data:s.data,mode:s.mode,length:s.length}})}function gi(t,e){switch(e){case J.NUMERIC:return _c.getBitsLength(t);case J.ALPHANUMERIC:return Uc.getBitsLength(t);case J.KANJI:return Pc.getBitsLength(t);case J.BYTE:return Oc.getBitsLength(t)}}function Jf(t){return t.reduce(function(e,n){let r=e.length-1>=0?e[e.length-1]:null;return r&&r.mode===n.mode?(e[e.length-1].data+=n.data,e):(e.push(n),e)},[])}function Xf(t){let e=[];for(let n=0;n<t.length;n++){let r=t[n];switch(r.mode){case J.NUMERIC:e.push([r,{data:r.data,mode:J.ALPHANUMERIC,length:r.length},{data:r.data,mode:J.BYTE,length:r.length}]);break;case J.ALPHANUMERIC:e.push([r,{data:r.data,mode:J.BYTE,length:r.length}]);break;case J.KANJI:e.push([r,{data:r.data,mode:J.BYTE,length:Nc(r.data)}]);break;case J.BYTE:e.push([{data:r.data,mode:J.BYTE,length:Nc(r.data)}])}}return e}function Ff(t,e){let n={},r={start:{}},o=["start"];for(let i=0;i<t.length;i++){let s=t[i],a=[];for(let c=0;c<s.length;c++){let l=s[c],d=""+i+c;a.push(d),n[d]={node:l,lastCount:0},r[d]={};for(let g=0;g<o.length;g++){let u=o[g];n[u]&&n[u].node.mode===l.mode?(r[u][d]=gi(n[u].lastCount+l.length,l.mode)-gi(n[u].lastCount,l.mode),n[u].lastCount+=l.length):(n[u]&&(n[u].lastCount=l.length),r[u][d]=gi(l.length,l.mode)+4+J.getCharCountIndicator(l.mode,e))}}o=a}for(let i=0;i<o.length;i++)r[o[i]].end=0;return{map:r,table:n}}function Ic(t,e){let n,r=J.getBestModeForData(t);if(n=J.from(e,r),n!==J.BYTE&&n.bit<r.bit)throw new Error('"'+t+'" cannot be encoded with mode '+J.toString(n)+`.
+ Suggested mode is: `+J.toString(r));switch(n===J.KANJI&&!Lr.isKanjiModeEnabled()&&(n=J.BYTE),n){case J.NUMERIC:return new _c(t);case J.ALPHANUMERIC:return new Uc(t);case J.KANJI:return new Pc(t);case J.BYTE:return new Oc(t)}}Yt.fromArray=function(e){return e.reduce(function(n,r){return typeof r=="string"?n.push(Ic(r,null)):r.data&&n.push(Ic(r.data,r.mode)),n},[])};Yt.fromString=function(e,n){let r=Hc(e,Lr.isKanjiModeEnabled()),o=Xf(r),i=Ff(o,n),s=Yf.find_path(i.map,"start","end"),a=[];for(let c=1;c<s.length-1;c++)a.push(i.table[s[c]].node);return Yt.fromArray(Jf(a))};Yt.rawSplit=function(e){return Yt.fromArray(Hc(e,Lr.isKanjiModeEnabled()))}});var Dc=X(qc=>{var Ir=nt(),pi=Sr(),Qf=Fa(),ed=ec(),td=tc(),nd=oc(),mi=ic(),wi=oi(),rd=uc(),Nr=bc(),od=Ec(),id=ot(),yi=Mc();function sd(t,e){let n=t.size,r=nd.getPositions(e);for(let o=0;o<r.length;o++){let i=r[o][0],s=r[o][1];for(let a=-1;a<=7;a++)if(!(i+a<=-1||n<=i+a))for(let c=-1;c<=7;c++)s+c<=-1||n<=s+c||(a>=0&&a<=6&&(c===0||c===6)||c>=0&&c<=6&&(a===0||a===6)||a>=2&&a<=4&&c>=2&&c<=4?t.set(i+a,s+c,!0,!0):t.set(i+a,s+c,!1,!0))}}function ad(t){let e=t.size;for(let n=8;n<e-8;n++){let r=n%2===0;t.set(n,6,r,!0),t.set(6,n,r,!0)}}function cd(t,e){let n=td.getPositions(e);for(let r=0;r<n.length;r++){let o=n[r][0],i=n[r][1];for(let s=-2;s<=2;s++)for(let a=-2;a<=2;a++)s===-2||s===2||a===-2||a===2||s===0&&a===0?t.set(o+s,i+a,!0,!0):t.set(o+s,i+a,!1,!0)}}function ld(t,e){let n=t.size,r=Nr.getEncodedBits(e),o,i,s;for(let a=0;a<18;a++)o=Math.floor(a/3),i=a%3+n-8-3,s=(r>>a&1)===1,t.set(o,i,s,!0),t.set(i,o,s,!0)}function bi(t,e,n){let r=t.size,o=od.getEncodedBits(e,n),i,s;for(i=0;i<15;i++)s=(o>>i&1)===1,i<6?t.set(i,8,s,!0):i<8?t.set(i+1,8,s,!0):t.set(r-15+i,8,s,!0),i<8?t.set(8,r-i-1,s,!0):i<9?t.set(8,15-i-1+1,s,!0):t.set(8,15-i-1,s,!0);t.set(r-8,8,1,!0)}function ud(t,e){let n=t.size,r=-1,o=n-1,i=7,s=0;for(let a=n-1;a>0;a-=2)for(a===6&&a--;;){for(let c=0;c<2;c++)if(!t.isReserved(o,a-c)){let l=!1;s<e.length&&(l=(e[s]>>>i&1)===1),t.set(o,a-c,l),i--,i===-1&&(s++,i=7)}if(o+=r,o<0||n<=o){o-=r,r=-r;break}}}function fd(t,e,n){let r=new Qf;n.forEach(function(c){r.put(c.mode.bit,4),r.put(c.getLength(),id.getCharCountIndicator(c.mode,t)),c.write(r)});let o=Ir.getSymbolTotalCodewords(t),i=wi.getTotalCodewordsCount(t,e),s=(o-i)*8;for(r.getLengthInBits()+4<=s&&r.put(0,4);r.getLengthInBits()%8!==0;)r.putBit(0);let a=(s-r.getLengthInBits())/8;for(let c=0;c<a;c++)r.put(c%2?17:236,8);return dd(r,t,e)}function dd(t,e,n){let r=Ir.getSymbolTotalCodewords(e),o=wi.getTotalCodewordsCount(e,n),i=r-o,s=wi.getBlocksCount(e,n),a=r%s,c=s-a,l=Math.floor(r/s),d=Math.floor(i/s),g=d+1,u=l-d,f=new rd(u),y=0,b=new Array(s),v=new Array(s),R=0,O=new Uint8Array(t.buffer);for(let j=0;j<s;j++){let Z=j<c?d:g;b[j]=O.slice(y,y+Z),v[j]=f.encode(b[j]),y+=Z,R=Math.max(R,Z)}let N=new Uint8Array(r),I=0,_,q;for(_=0;_<R;_++)for(q=0;q<s;q++)_<b[q].length&&(N[I++]=b[q][_]);for(_=0;_<u;_++)for(q=0;q<s;q++)N[I++]=v[q][_];return N}function hd(t,e,n,r){let o;if(Array.isArray(t))o=yi.fromArray(t);else if(typeof t=="string"){let l=e;if(!l){let d=yi.rawSplit(t);l=Nr.getBestVersionForData(d,n)}o=yi.fromString(t,l||40)}else throw new Error("Invalid data");let i=Nr.getBestVersionForData(o,n);if(!i)throw new Error("The amount of data is too big to be stored in a QR Code");if(!e)e=i;else if(e<i)throw new Error(`
 The chosen QR Code version cannot contain this amount of data.
 Minimum version required to store current data is: `+i+`.
-`);let s=ud(e,n,o),a=Ir.getSymbolSize(e),c=new Qf(a);return id(c,e),sd(c),ad(c,e),bi(c,n,0),e>=7&&cd(c,e),ld(c,s),isNaN(r)&&(r=mi.getBestMask(c,bi.bind(null,c,n))),mi.applyMask(r,c),bi(c,n,r),{modules:c,version:e,errorCorrectionLevel:n,maskPattern:r,segments:o}}qc.create=function(e,n){if(typeof e>"u"||e==="")throw new Error("No input text");let r=pi.M,o,i;return typeof n<"u"&&(r=pi.from(n.errorCorrectionLevel,pi.M),o=Nr.from(n.version),i=mi.from(n.maskPattern),n.toSJISFunc&&Ir.setToSJISFunction(n.toSJISFunc)),dd(e,o,r,i)}});var xi=X(kt=>{function $c(t){if(typeof t=="number"&&(t=t.toString()),typeof t!="string")throw new Error("Color should be defined as hex string");let e=t.slice().replace("#","").split("");if(e.length<3||e.length===5||e.length>8)throw new Error("Invalid hex color: "+t);(e.length===3||e.length===4)&&(e=Array.prototype.concat.apply([],e.map(function(r){return[r,r]}))),e.length===6&&e.push("F","F");let n=parseInt(e.join(""),16);return{r:n>>24&255,g:n>>16&255,b:n>>8&255,a:n&255,hex:"#"+e.slice(0,6).join("")}}kt.getOptions=function(e){e||(e={}),e.color||(e.color={});let n=typeof e.margin>"u"||e.margin===null||e.margin<0?4:e.margin,r=e.width&&e.width>=21?e.width:void 0,o=e.scale||4;return{width:r,scale:r?4:o,margin:n,color:{dark:$c(e.color.dark||"#000000ff"),light:$c(e.color.light||"#ffffffff")},type:e.type,rendererOpts:e.rendererOpts||{}}};kt.getScale=function(e,n){return n.width&&n.width>=e+n.margin*2?n.width/(e+n.margin*2):n.scale};kt.getImageWidth=function(e,n){let r=kt.getScale(e,n);return Math.floor((e+n.margin*2)*r)};kt.qrToImageData=function(e,n,r){let o=n.modules.size,i=n.modules.data,s=kt.getScale(o,r),a=Math.floor((o+r.margin*2)*s),c=r.margin*s,l=[r.color.light,r.color.dark];for(let d=0;d<a;d++)for(let g=0;g<a;g++){let u=(d*a+g)*4,f=r.color.light;if(d>=c&&g>=c&&d<a-c&&g<a-c){let y=Math.floor((d-c)/s),b=Math.floor((g-c)/s);f=l[i[y*o+b]?1:0]}e[u++]=f.r,e[u++]=f.g,e[u++]=f.b,e[u]=f.a}}});var Vc=X(_r=>{var Ei=xi();function hd(t,e,n){t.clearRect(0,0,e.width,e.height),e.style||(e.style={}),e.height=n,e.width=n,e.style.height=n+"px",e.style.width=n+"px"}function gd(){try{return document.createElement("canvas")}catch{throw new Error("You need to specify a canvas element")}}_r.render=function(e,n,r){let o=r,i=n;typeof o>"u"&&(!n||!n.getContext)&&(o=n,n=void 0),n||(i=gd()),o=Ei.getOptions(o);let s=Ei.getImageWidth(e.modules.size,o),a=i.getContext("2d"),c=a.createImageData(s,s);return Ei.qrToImageData(c.data,e,o),hd(a,i,s),a.putImageData(c,0,0),i};_r.renderToDataURL=function(e,n,r){let o=r;typeof o>"u"&&(!n||!n.getContext)&&(o=n,n=void 0),o||(o={});let i=_r.render(e,n,o),s=o.type||"image/png",a=o.rendererOpts||{};return i.toDataURL(s,a.quality)}});var jc=X(zc=>{var pd=xi();function Kc(t,e){let n=t.a/255,r=e+'="'+t.hex+'"';return n<1?r+" "+e+'-opacity="'+n.toFixed(2).slice(1)+'"':r}function vi(t,e,n){let r=t+e;return typeof n<"u"&&(r+=" "+n),r}function yd(t,e,n){let r="",o=0,i=!1,s=0;for(let a=0;a<t.length;a++){let c=Math.floor(a%e),l=Math.floor(a/e);!c&&!i&&(i=!0),t[a]?(s++,a>0&&c>0&&t[a-1]||(r+=i?vi("M",c+n,.5+l+n):vi("m",o,0),o=0,i=!1),c+1<e&&t[a+1]||(r+=vi("h",s),s=0)):o++}return r}zc.render=function(e,n,r){let o=pd.getOptions(n),i=e.modules.size,s=e.modules.data,a=i+o.margin*2,c=o.color.light.a?"<path "+Kc(o.color.light,"fill")+' d="M0 0h'+a+"v"+a+'H0z"/>':"",l="<path "+Kc(o.color.dark,"stroke")+' d="'+yd(s,i,o.margin)+'"/>',d='viewBox="0 0 '+a+" "+a+'"',u='<svg xmlns="http://www.w3.org/2000/svg" '+(o.width?'width="'+o.width+'" height="'+o.width+'" ':"")+d+' shape-rendering="crispEdges">'+c+l+`</svg>
-`;return typeof r=="function"&&r(null,u),u}});var Gc=X(Cn=>{var bd=Ya(),Si=Dc(),Zc=Vc(),md=jc();function ki(t,e,n,r,o){let i=[].slice.call(arguments,1),s=i.length,a=typeof i[s-1]=="function";if(!a&&!bd())throw new Error("Callback required as last argument");if(a){if(s<2)throw new Error("Too few arguments provided");s===2?(o=n,n=e,e=r=void 0):s===3&&(e.getContext&&typeof o>"u"?(o=r,r=void 0):(o=r,r=n,n=e,e=void 0))}else{if(s<1)throw new Error("Too few arguments provided");return s===1?(n=e,e=r=void 0):s===2&&!e.getContext&&(r=n,n=e,e=void 0),new Promise(function(c,l){try{let d=Si.create(n,r);c(t(d,e,r))}catch(d){l(d)}})}try{let c=Si.create(n,r);o(null,t(c,e,r))}catch(c){o(c)}}Cn.create=Si.create;Cn.toCanvas=ki.bind(null,Zc.render);Cn.toDataURL=ki.bind(null,Zc.renderToDataURL);Cn.toString=ki.bind(null,function(t,e,n){return md.render(t,n)})});var Ud={};dl(Ud,{handleCallback:()=>rl,handleRedirectCallback:()=>ol,isAndroid:()=>sr,login:()=>tl,logout:()=>il,restoreSession:()=>nl});var je={relayUrl:"wss://relay.damus.io",signetAppOrigin:"https://mysignet.app",timeout:12e4,theme:"auto",persist:!0,mode:"relay"},Tn=300*1e3,F={pubkey:"signet:login.pubkey",method:"signet:login.method",authEvent:"signet:login.authEvent",bunkerUri:"signet:login.bunkerUri",bunkerClientSk:"signet:login.bunkerClientSk",clientSk:"signet:login.clientSk",expiresAt:"signet:login.expiresAt",displayName:"signet:login.displayName",pendingRedirect:"signet:login.pendingRedirect"};function en(t){return t instanceof Uint8Array||ArrayBuffer.isView(t)&&t.constructor.name==="Uint8Array"}function we(t,e=""){if(!Number.isSafeInteger(t)||t<0){let n=e&&`"${e}" `;throw new Error(`${n}expected integer >= 0, got ${t}`)}}function Y(t,e,n=""){let r=en(t),o=t?.length,i=e!==void 0;if(!r||i&&o!==e){let s=n&&`"${n}" `,a=i?` of length ${e}`:"",c=r?`length=${o}`:`type=${typeof t}`;throw new Error(s+"expected Uint8Array"+a+", got "+c)}return t}function st(t){if(typeof t!="function"||typeof t.create!="function")throw new Error("Hash must wrapped by utils.createHasher");we(t.outputLen),we(t.blockLen)}function At(t,e=!0){if(t.destroyed)throw new Error("Hash instance has been destroyed");if(e&&t.finished)throw new Error("Hash#digest() has already been called")}function Ti(t,e){Y(t,void 0,"digestInto() output");let n=e.outputLen;if(t.length<n)throw new Error('"digestInto() output" expected to be of length >='+n)}function Ne(...t){for(let e=0;e<t.length;e++)t[e].fill(0)}function Ln(t){return new DataView(t.buffer,t.byteOffset,t.byteLength)}function Se(t,e){return t<<32-e|t>>>e}var Li=typeof Uint8Array.from([]).toHex=="function"&&typeof Uint8Array.fromHex=="function",pl=Array.from({length:256},(t,e)=>e.toString(16).padStart(2,"0"));function ee(t){if(Y(t),Li)return t.toHex();let e="";for(let n=0;n<t.length;n++)e+=pl[t[n]];return e}var Le={_0:48,_9:57,A:65,F:70,a:97,f:102};function Ci(t){if(t>=Le._0&&t<=Le._9)return t-Le._0;if(t>=Le.A&&t<=Le.F)return t-(Le.A-10);if(t>=Le.a&&t<=Le.f)return t-(Le.a-10)}function ne(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);if(Li)return Uint8Array.fromHex(t);let e=t.length,n=e/2;if(e%2)throw new Error("hex string expected, got unpadded hex of length "+e);let r=new Uint8Array(n);for(let o=0,i=0;o<n;o++,i+=2){let s=Ci(t.charCodeAt(i)),a=Ci(t.charCodeAt(i+1));if(s===void 0||a===void 0){let c=t[i]+t[i+1];throw new Error('hex string expected, got non-hex character "'+c+'" at index '+i)}r[o]=s*16+a}return r}function te(...t){let e=0;for(let r=0;r<t.length;r++){let o=t[r];Y(o),e+=o.length}let n=new Uint8Array(e);for(let r=0,o=0;r<t.length;r++){let i=t[r];n.set(i,o),o+=i.length}return n}function Ni(t,e={}){let n=(o,i)=>t(i).update(o).digest(),r=t(void 0);return n.outputLen=r.outputLen,n.blockLen=r.blockLen,n.create=o=>t(o),Object.assign(n,e),Object.freeze(n)}function ke(t=32){let e=typeof globalThis=="object"?globalThis.crypto:null;if(typeof e?.getRandomValues!="function")throw new Error("crypto.getRandomValues must be defined");return e.getRandomValues(new Uint8Array(t))}var Ii=t=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,t])});function _i(t,e,n){return t&e^~t&n}function Ui(t,e,n){return t&e^t&n^e&n}var Nn=class{constructor(e,n,r,o){S(this,"blockLen");S(this,"outputLen");S(this,"padOffset");S(this,"isLE");S(this,"buffer");S(this,"view");S(this,"finished",!1);S(this,"length",0);S(this,"pos",0);S(this,"destroyed",!1);this.blockLen=e,this.outputLen=n,this.padOffset=r,this.isLE=o,this.buffer=new Uint8Array(e),this.view=Ln(this.buffer)}update(e){At(this),Y(e);let{view:n,buffer:r,blockLen:o}=this,i=e.length;for(let s=0;s<i;){let a=Math.min(o-this.pos,i-s);if(a===o){let c=Ln(e);for(;o<=i-s;s+=o)this.process(c,s);continue}r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===o&&(this.process(n,0),this.pos=0)}return this.length+=e.length,this.roundClean(),this}digestInto(e){At(this),Ti(e,this),this.finished=!0;let{buffer:n,view:r,blockLen:o,isLE:i}=this,{pos:s}=this;n[s++]=128,Ne(this.buffer.subarray(s)),this.padOffset>o-s&&(this.process(r,0),s=0);for(let g=s;g<o;g++)n[g]=0;r.setBigUint64(o-8,BigInt(this.length*8),i),this.process(r,0);let a=Ln(e),c=this.outputLen;if(c%4)throw new Error("_sha2: outputLen must be aligned to 32bit");let l=c/4,d=this.get();if(l>d.length)throw new Error("_sha2: outputLen bigger than state");for(let g=0;g<l;g++)a.setUint32(4*g,d[g],i)}digest(){let{buffer:e,outputLen:n}=this;this.digestInto(e);let r=e.slice(0,n);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());let{blockLen:n,buffer:r,length:o,finished:i,destroyed:s,pos:a}=this;return e.destroyed=s,e.finished=i,e.length=o,e.pos=a,o%n&&e.buffer.set(r),e}clone(){return this._cloneInto()}},Ie=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var yl=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ze=new Uint32Array(64),Ur=class extends Nn{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:n,C:r,D:o,E:i,F:s,G:a,H:c}=this;return[e,n,r,o,i,s,a,c]}set(e,n,r,o,i,s,a,c){this.A=e|0,this.B=n|0,this.C=r|0,this.D=o|0,this.E=i|0,this.F=s|0,this.G=a|0,this.H=c|0}process(e,n){for(let g=0;g<16;g++,n+=4)Ze[g]=e.getUint32(n,!1);for(let g=16;g<64;g++){let u=Ze[g-15],f=Ze[g-2],y=Se(u,7)^Se(u,18)^u>>>3,b=Se(f,17)^Se(f,19)^f>>>10;Ze[g]=b+Ze[g-7]+y+Ze[g-16]|0}let{A:r,B:o,C:i,D:s,E:a,F:c,G:l,H:d}=this;for(let g=0;g<64;g++){let u=Se(a,6)^Se(a,11)^Se(a,25),f=d+u+_i(a,c,l)+yl[g]+Ze[g]|0,b=(Se(r,2)^Se(r,13)^Se(r,22))+Ui(r,o,i)|0;d=l,l=c,c=a,a=s+f|0,s=i,i=o,o=r,r=f+b|0}r=r+this.A|0,o=o+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,c=c+this.F|0,l=l+this.G|0,d=d+this.H|0,this.set(r,o,i,s,a,c,l,d)}roundClean(){Ne(Ze)}destroy(){this.set(0,0,0,0,0,0,0,0),Ne(this.buffer)}},Or=class extends Ur{constructor(){super(32);S(this,"A",Ie[0]|0);S(this,"B",Ie[1]|0);S(this,"C",Ie[2]|0);S(this,"D",Ie[3]|0);S(this,"E",Ie[4]|0);S(this,"F",Ie[5]|0);S(this,"G",Ie[6]|0);S(this,"H",Ie[7]|0)}};var ue=Ni(()=>new Or,Ii(1));var Hr=BigInt(0),Pr=BigInt(1);function tn(t,e=""){if(typeof t!="boolean"){let n=e&&`"${e}" `;throw new Error(n+"expected boolean, got type="+typeof t)}return t}function Oi(t){if(typeof t=="bigint"){if(!In(t))throw new Error("positive bigint expected, got "+t)}else we(t);return t}function nn(t){let e=Oi(t).toString(16);return e.length&1?"0"+e:e}function Pi(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);return t===""?Hr:BigInt("0x"+t)}function Ge(t){return Pi(ee(t))}function Mr(t){return Pi(ee(bl(Y(t)).reverse()))}function _n(t,e){we(e),t=Oi(t);let n=ne(t.toString(16).padStart(e*2,"0"));if(n.length!==e)throw new Error("number too large");return n}function qr(t,e){return _n(t,e).reverse()}function bl(t){return Uint8Array.from(t)}function Hi(t){return Uint8Array.from(t,(e,n)=>{let r=e.charCodeAt(0);if(e.length!==1||r>127)throw new Error(`string contains non-ASCII character "${t[n]}" with code ${r} at position ${n}`);return r})}var In=t=>typeof t=="bigint"&&Hr<=t;function ml(t,e,n){return In(t)&&In(e)&&In(n)&&e<=t&&t<n}function Mi(t,e,n,r){if(!ml(e,n,r))throw new Error("expected valid "+t+": "+n+" <= n < "+r+", got "+e)}function Dr(t){let e;for(e=0;t>Hr;t>>=Pr,e+=1);return e}var rn=t=>(Pr<<BigInt(t))-Pr;function qi(t,e,n){if(we(t,"hashLen"),we(e,"qByteLen"),typeof n!="function")throw new Error("hmacFn must be a function");let r=v=>new Uint8Array(v),o=Uint8Array.of(),i=Uint8Array.of(0),s=Uint8Array.of(1),a=1e3,c=r(t),l=r(t),d=0,g=()=>{c.fill(1),l.fill(0),d=0},u=(...v)=>n(l,te(c,...v)),f=(v=o)=>{l=u(i,v),c=u(),v.length!==0&&(l=u(s,v),c=u())},y=()=>{if(d++>=a)throw new Error("drbg: tried max amount of iterations");let v=0,R=[];for(;v<e;){c=u();let O=c.slice();R.push(O),v+=c.length}return te(...R)};return(v,R)=>{g(),f(v);let O;for(;!(O=R(y()));)f();return g(),O}}function on(t,e={},n={}){if(!t||typeof t!="object")throw new Error("expected valid options object");function r(i,s,a){let c=t[i];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw new Error(`param "${i}" is invalid: expected ${s}, got ${l}`)}let o=(i,s)=>Object.entries(i).forEach(([a,c])=>r(a,c,s));o(e,!1),o(n,!0)}function $r(t){let e=new WeakMap;return(n,...r)=>{let o=e.get(n);if(o!==void 0)return o;let i=t(n,...r);return e.set(n,i),i}}var he=BigInt(0),fe=BigInt(1),at=BigInt(2),Vi=BigInt(3),Ki=BigInt(4),zi=BigInt(5),wl=BigInt(7),ji=BigInt(8),xl=BigInt(9),Zi=BigInt(16);function Be(t,e){let n=t%e;return n>=he?n:e+n}function ye(t,e,n){let r=t;for(;e-- >he;)r*=r,r%=n;return r}function Di(t,e){if(t===he)throw new Error("invert: expected non-zero number");if(e<=he)throw new Error("invert: expected positive modulus, got "+e);let n=Be(t,e),r=e,o=he,i=fe,s=fe,a=he;for(;n!==he;){let l=r/n,d=r%n,g=o-s*l,u=i-a*l;r=n,n=d,o=s,i=a,s=g,a=u}if(r!==fe)throw new Error("invert: does not exist");return Be(o,e)}function Kr(t,e,n){if(!t.eql(t.sqr(e),n))throw new Error("Cannot find square root")}function Gi(t,e){let n=(t.ORDER+fe)/Ki,r=t.pow(e,n);return Kr(t,r,e),r}function El(t,e){let n=(t.ORDER-zi)/ji,r=t.mul(e,at),o=t.pow(r,n),i=t.mul(e,o),s=t.mul(t.mul(i,at),o),a=t.mul(i,t.sub(s,t.ONE));return Kr(t,a,e),a}function vl(t){let e=Rt(t),n=Wi(t),r=n(e,e.neg(e.ONE)),o=n(e,r),i=n(e,e.neg(r)),s=(t+wl)/Zi;return(a,c)=>{let l=a.pow(c,s),d=a.mul(l,r),g=a.mul(l,o),u=a.mul(l,i),f=a.eql(a.sqr(d),c),y=a.eql(a.sqr(g),c);l=a.cmov(l,d,f),d=a.cmov(u,g,y);let b=a.eql(a.sqr(d),c),v=a.cmov(l,d,b);return Kr(a,v,c),v}}function Wi(t){if(t<Vi)throw new Error("sqrt is not defined for small field");let e=t-fe,n=0;for(;e%at===he;)e/=at,n++;let r=at,o=Rt(t);for(;$i(o,r)===1;)if(r++>1e3)throw new Error("Cannot find square root: probably non-prime P");if(n===1)return Gi;let i=o.pow(r,e),s=(e+fe)/at;return function(c,l){if(c.is0(l))return l;if($i(c,l)!==1)throw new Error("Cannot find square root");let d=n,g=c.mul(c.ONE,i),u=c.pow(l,e),f=c.pow(l,s);for(;!c.eql(u,c.ONE);){if(c.is0(u))return c.ZERO;let y=1,b=c.sqr(u);for(;!c.eql(b,c.ONE);)if(y++,b=c.sqr(b),y===d)throw new Error("Cannot find square root");let v=fe<<BigInt(d-y-1),R=c.pow(g,v);d=y,g=c.sqr(R),u=c.mul(u,g),f=c.mul(f,R)}return f}}function Sl(t){return t%Ki===Vi?Gi:t%ji===zi?El:t%Zi===xl?vl(t):Wi(t)}var kl=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function zr(t){let e={ORDER:"bigint",BYTES:"number",BITS:"number"},n=kl.reduce((r,o)=>(r[o]="function",r),e);return on(t,n),t}function Bl(t,e,n){if(n<he)throw new Error("invalid exponent, negatives unsupported");if(n===he)return t.ONE;if(n===fe)return e;let r=t.ONE,o=e;for(;n>he;)n&fe&&(r=t.mul(r,o)),o=t.sqr(o),n>>=fe;return r}function Un(t,e,n=!1){let r=new Array(e.length).fill(n?t.ZERO:void 0),o=e.reduce((s,a,c)=>t.is0(a)?s:(r[c]=s,t.mul(s,a)),t.ONE),i=t.inv(o);return e.reduceRight((s,a,c)=>t.is0(a)?s:(r[c]=t.mul(s,r[c]),t.mul(s,a)),i),r}function $i(t,e){let n=(t.ORDER-fe)/at,r=t.pow(e,n),o=t.eql(r,t.ONE),i=t.eql(r,t.ZERO),s=t.eql(r,t.neg(t.ONE));if(!o&&!i&&!s)throw new Error("invalid Legendre symbol result");return o?1:i?0:-1}function Al(t,e){e!==void 0&&we(e);let n=e!==void 0?e:t.toString(2).length,r=Math.ceil(n/8);return{nBitLength:n,nByteLength:r}}var Vr=class{constructor(e,n={}){S(this,"ORDER");S(this,"BITS");S(this,"BYTES");S(this,"isLE");S(this,"ZERO",he);S(this,"ONE",fe);S(this,"_lengths");S(this,"_sqrt");S(this,"_mod");if(e<=he)throw new Error("invalid field: expected ORDER > 0, got "+e);let r;this.isLE=!1,n!=null&&typeof n=="object"&&(typeof n.BITS=="number"&&(r=n.BITS),typeof n.sqrt=="function"&&(this.sqrt=n.sqrt),typeof n.isLE=="boolean"&&(this.isLE=n.isLE),n.allowedLengths&&(this._lengths=n.allowedLengths?.slice()),typeof n.modFromBytes=="boolean"&&(this._mod=n.modFromBytes));let{nBitLength:o,nByteLength:i}=Al(e,r);if(i>2048)throw new Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=o,this.BYTES=i,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Be(e,this.ORDER)}isValid(e){if(typeof e!="bigint")throw new Error("invalid field element: expected bigint, got "+typeof e);return he<=e&&e<this.ORDER}is0(e){return e===he}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&fe)===fe}neg(e){return Be(-e,this.ORDER)}eql(e,n){return e===n}sqr(e){return Be(e*e,this.ORDER)}add(e,n){return Be(e+n,this.ORDER)}sub(e,n){return Be(e-n,this.ORDER)}mul(e,n){return Be(e*n,this.ORDER)}pow(e,n){return Bl(this,e,n)}div(e,n){return Be(e*Di(n,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,n){return e+n}subN(e,n){return e-n}mulN(e,n){return e*n}inv(e){return Di(e,this.ORDER)}sqrt(e){return this._sqrt||(this._sqrt=Sl(this.ORDER)),this._sqrt(this,e)}toBytes(e){return this.isLE?qr(e,this.BYTES):_n(e,this.BYTES)}fromBytes(e,n=!1){Y(e);let{_lengths:r,BYTES:o,isLE:i,ORDER:s,_mod:a}=this;if(r){if(!r.includes(e.length)||e.length>o)throw new Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let l=new Uint8Array(o);l.set(e,i?0:l.length-e.length),e=l}if(e.length!==o)throw new Error("Field.fromBytes: expected "+o+" bytes, got "+e.length);let c=i?Mr(e):Ge(e);if(a&&(c=Be(c,s)),!n&&!this.isValid(c))throw new Error("invalid field element: outside of range 0..ORDER");return c}invertBatch(e){return Un(this,e)}cmov(e,n,r){return r?n:e}};function Rt(t,e={}){return new Vr(t,e)}function Yi(t){if(typeof t!="bigint")throw new Error("field order must be bigint");let e=t.toString(2).length;return Math.ceil(e/8)}function jr(t){let e=Yi(t);return e+Math.ceil(e/2)}function On(t,e,n=!1){Y(t);let r=t.length,o=Yi(e),i=jr(e);if(r<16||r<i||r>1024)throw new Error("expected "+i+"-1024 bytes of input, got "+r);let s=n?Mr(t):Ge(t),a=Be(s,e-fe)+fe;return n?qr(a,o):_n(a,o)}var Ct=BigInt(0),ct=BigInt(1);function sn(t,e){let n=e.negate();return t?n:e}function Yr(t,e){let n=Un(t.Fp,e.map(r=>r.Z));return e.map((r,o)=>t.fromAffine(r.toAffine(n[o])))}function Qi(t,e){if(!Number.isSafeInteger(t)||t<=0||t>e)throw new Error("invalid window size, expected [1.."+e+"], got W="+t)}function Zr(t,e){Qi(t,e);let n=Math.ceil(e/t)+1,r=2**(t-1),o=2**t,i=rn(t),s=BigInt(t);return{windows:n,windowSize:r,mask:i,maxNumber:o,shiftBy:s}}function Ji(t,e,n){let{windowSize:r,mask:o,maxNumber:i,shiftBy:s}=n,a=Number(t&o),c=t>>s;a>r&&(a-=i,c+=ct);let l=e*r,d=l+Math.abs(a)-1,g=a===0,u=a<0,f=e%2!==0;return{nextN:c,offset:d,isZero:g,isNeg:u,isNegF:f,offsetF:l}}var Gr=new WeakMap,es=new WeakMap;function Wr(t){return es.get(t)||1}function Xi(t){if(t!==Ct)throw new Error("invalid wNAF")}var Pn=class{constructor(e,n){S(this,"BASE");S(this,"ZERO");S(this,"Fn");S(this,"bits");this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=n}_unsafeLadder(e,n,r=this.ZERO){let o=e;for(;n>Ct;)n&ct&&(r=r.add(o)),o=o.double(),n>>=ct;return r}precomputeWindow(e,n){let{windows:r,windowSize:o}=Zr(n,this.bits),i=[],s=e,a=s;for(let c=0;c<r;c++){a=s,i.push(a);for(let l=1;l<o;l++)a=a.add(s),i.push(a);s=a.double()}return i}wNAF(e,n,r){if(!this.Fn.isValid(r))throw new Error("invalid scalar");let o=this.ZERO,i=this.BASE,s=Zr(e,this.bits);for(let a=0;a<s.windows;a++){let{nextN:c,offset:l,isZero:d,isNeg:g,isNegF:u,offsetF:f}=Ji(r,a,s);r=c,d?i=i.add(sn(u,n[f])):o=o.add(sn(g,n[l]))}return Xi(r),{p:o,f:i}}wNAFUnsafe(e,n,r,o=this.ZERO){let i=Zr(e,this.bits);for(let s=0;s<i.windows&&r!==Ct;s++){let{nextN:a,offset:c,isZero:l,isNeg:d}=Ji(r,s,i);if(r=a,!l){let g=n[c];o=o.add(d?g.negate():g)}}return Xi(r),o}getPrecomputes(e,n,r){let o=Gr.get(n);return o||(o=this.precomputeWindow(n,e),e!==1&&(typeof r=="function"&&(o=r(o)),Gr.set(n,o))),o}cached(e,n,r){let o=Wr(e);return this.wNAF(o,this.getPrecomputes(o,e,r),n)}unsafe(e,n,r,o){let i=Wr(e);return i===1?this._unsafeLadder(e,n,o):this.wNAFUnsafe(i,this.getPrecomputes(i,e,r),n,o)}createCache(e,n){Qi(n,this.bits),es.set(e,n),Gr.delete(e)}hasCache(e){return Wr(e)!==1}};function ts(t,e,n,r){let o=e,i=t.ZERO,s=t.ZERO;for(;n>Ct||r>Ct;)n&ct&&(i=i.add(o)),r&ct&&(s=s.add(o)),o=o.double(),n>>=ct,r>>=ct;return{p1:i,p2:s}}function Fi(t,e,n){if(e){if(e.ORDER!==t)throw new Error("Field.ORDER must match order: Fp == p, Fn == n");return zr(e),e}else return Rt(t,{isLE:n})}function ns(t,e,n={},r){if(r===void 0&&(r=t==="edwards"),!e||typeof e!="object")throw new Error(`expected valid ${t} CURVE object`);for(let c of["p","n","h"]){let l=e[c];if(!(typeof l=="bigint"&&l>Ct))throw new Error(`CURVE.${c} must be positive bigint`)}let o=Fi(e.p,n.Fp,r),i=Fi(e.n,n.Fn,r),a=["Gx","Gy","a",t==="weierstrass"?"b":"d"];for(let c of a)if(!o.isValid(e[c]))throw new Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return e=Object.freeze(Object.assign({},e)),{CURVE:e,Fp:o,Fn:i}}function Hn(t,e){return function(r){let o=t(r);return{secretKey:o,publicKey:e(o)}}}var Mn=class{constructor(e,n){S(this,"oHash");S(this,"iHash");S(this,"blockLen");S(this,"outputLen");S(this,"finished",!1);S(this,"destroyed",!1);if(st(e),Y(n,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,o=new Uint8Array(r);o.set(n.length>r?e.create().update(n).digest():n);for(let i=0;i<o.length;i++)o[i]^=54;this.iHash.update(o),this.oHash=e.create();for(let i=0;i<o.length;i++)o[i]^=106;this.oHash.update(o),Ne(o)}update(e){return At(this),this.iHash.update(e),this}digestInto(e){At(this),Y(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));let{oHash:n,iHash:r,finished:o,destroyed:i,blockLen:s,outputLen:a}=this;return e=e,e.finished=o,e.destroyed=i,e.blockLen=s,e.outputLen=a,e.oHash=n._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}},Ce=(t,e,n)=>new Mn(t,e).update(n).digest();Ce.create=(t,e)=>new Mn(t,e);var rs=(t,e)=>(t+(t>=0?e:-e)/os)/e;function Rl(t,e,n){let[[r,o],[i,s]]=e,a=rs(s*t,n),c=rs(-o*t,n),l=t-a*r-c*i,d=-a*o-c*s,g=l<_e,u=d<_e;g&&(l=-l),u&&(d=-d);let f=rn(Math.ceil(Dr(n)/2))+Tt;if(l<_e||l>=f||d<_e||d>=f)throw new Error("splitScalar (endomorphism): failed, k="+t);return{k1neg:g,k1:l,k2neg:u,k2:d}}function Xr(t){if(!["compact","recovered","der"].includes(t))throw new Error('Signature format must be "compact", "recovered", or "der"');return t}function Jr(t,e){let n={};for(let r of Object.keys(e))n[r]=t[r]===void 0?e[r]:t[r];return tn(n.lowS,"lowS"),tn(n.prehash,"prehash"),n.format!==void 0&&Xr(n.format),n}var Fr=class extends Error{constructor(e=""){super(e)}},We={Err:Fr,_tlv:{encode:(t,e)=>{let{Err:n}=We;if(t<0||t>256)throw new n("tlv.encode: wrong tag");if(e.length&1)throw new n("tlv.encode: unpadded data");let r=e.length/2,o=nn(r);if(o.length/2&128)throw new n("tlv.encode: long form length too big");let i=r>127?nn(o.length/2|128):"";return nn(t)+i+o+e},decode(t,e){let{Err:n}=We,r=0;if(t<0||t>256)throw new n("tlv.encode: wrong tag");if(e.length<2||e[r++]!==t)throw new n("tlv.decode: wrong tlv");let o=e[r++],i=!!(o&128),s=0;if(!i)s=o;else{let c=o&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=e.subarray(r,r+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let d of l)s=s<<8|d;if(r+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=e.subarray(r,r+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:e.subarray(r+s)}}},_int:{encode(t){let{Err:e}=We;if(t<_e)throw new e("integer: negative integers are not allowed");let n=nn(t);if(Number.parseInt(n[0],16)&8&&(n="00"+n),n.length&1)throw new e("unexpected DER parsing assertion: unpadded hex");return n},decode(t){let{Err:e}=We;if(t[0]&128)throw new e("invalid signature integer: negative");if(t[0]===0&&!(t[1]&128))throw new e("invalid signature integer: unnecessary leading zero");return Ge(t)}},toSig(t){let{Err:e,_int:n,_tlv:r}=We,o=Y(t,void 0,"signature"),{v:i,l:s}=r.decode(48,o);if(s.length)throw new e("invalid signature: left bytes after parsing");let{v:a,l:c}=r.decode(2,i),{v:l,l:d}=r.decode(2,c);if(d.length)throw new e("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(t){let{_tlv:e,_int:n}=We,r=e.encode(2,n.encode(t.r)),o=e.encode(2,n.encode(t.s)),i=r+o;return e.encode(48,i)}},_e=BigInt(0),Tt=BigInt(1),os=BigInt(2),qn=BigInt(3),Cl=BigInt(4);function is(t,e={}){let n=ns("weierstrass",t,e),{Fp:r,Fn:o}=n,i=n.CURVE,{h:s,n:a}=i;on(e,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=e;if(c&&(!r.is0(i.a)||typeof c.beta!="bigint"||!Array.isArray(c.basises)))throw new Error('invalid endo: expected "beta": bigint and "basises": array');let l=as(r,o);function d(){if(!r.isOdd)throw new Error("compression is not supported: Field does not have .isOdd()")}function g(x,p,h){let{x:m,y:E}=p.toAffine(),B=r.toBytes(m);if(tn(h,"isCompressed"),h){d();let w=!r.isOdd(E);return te(ss(w),B)}else return te(Uint8Array.of(4),B,r.toBytes(E))}function u(x){Y(x,void 0,"Point");let{publicKey:p,publicKeyUncompressed:h}=l,m=x.length,E=x[0],B=x.subarray(1);if(m===p&&(E===2||E===3)){let w=r.fromBytes(B);if(!r.isValid(w))throw new Error("bad point: is not on curve, wrong x");let A=b(w),k;try{k=r.sqrt(A)}catch(D){let M=D instanceof Error?": "+D.message:"";throw new Error("bad point: is not on curve, sqrt error"+M)}d();let C=r.isOdd(k);return(E&1)===1!==C&&(k=r.neg(k)),{x:w,y:k}}else if(m===h&&E===4){let w=r.BYTES,A=r.fromBytes(B.subarray(0,w)),k=r.fromBytes(B.subarray(w,w*2));if(!v(A,k))throw new Error("bad point: is not on curve");return{x:A,y:k}}else throw new Error(`bad point: got length ${m}, expected compressed=${p} or uncompressed=${h}`)}let f=e.toBytes||g,y=e.fromBytes||u;function b(x){let p=r.sqr(x),h=r.mul(p,x);return r.add(r.add(h,r.mul(x,i.a)),i.b)}function v(x,p){let h=r.sqr(p),m=b(x);return r.eql(h,m)}if(!v(i.Gx,i.Gy))throw new Error("bad curve params: generator point");let R=r.mul(r.pow(i.a,qn),Cl),O=r.mul(r.sqr(i.b),BigInt(27));if(r.is0(r.add(R,O)))throw new Error("bad curve params: a or b");function N(x,p,h=!1){if(!r.isValid(p)||h&&r.is0(p))throw new Error(`bad point coordinate ${x}`);return p}function I(x){if(!(x instanceof L))throw new Error("Weierstrass Point expected")}function _(x){if(!c||!c.basises)throw new Error("no endo");return Rl(x,c.basises,o.ORDER)}let q=$r((x,p)=>{let{X:h,Y:m,Z:E}=x;if(r.eql(E,r.ONE))return{x:h,y:m};let B=x.is0();p==null&&(p=B?r.ONE:r.inv(E));let w=r.mul(h,p),A=r.mul(m,p),k=r.mul(E,p);if(B)return{x:r.ZERO,y:r.ZERO};if(!r.eql(k,r.ONE))throw new Error("invZ was invalid");return{x:w,y:A}}),j=$r(x=>{if(x.is0()){if(e.allowInfinityPoint&&!r.is0(x.Y))return;throw new Error("bad point: ZERO")}let{x:p,y:h}=x.toAffine();if(!r.isValid(p)||!r.isValid(h))throw new Error("bad point: x or y not field elements");if(!v(p,h))throw new Error("bad point: equation left != right");if(!x.isTorsionFree())throw new Error("bad point: not in prime-order subgroup");return!0});function Z(x,p,h,m,E){return h=new L(r.mul(h.X,x),h.Y,h.Z),p=sn(m,p),h=sn(E,h),p.add(h)}let T=class T{constructor(p,h,m){S(this,"X");S(this,"Y");S(this,"Z");this.X=N("x",p),this.Y=N("y",h,!0),this.Z=N("z",m),Object.freeze(this)}static CURVE(){return i}static fromAffine(p){let{x:h,y:m}=p||{};if(!p||!r.isValid(h)||!r.isValid(m))throw new Error("invalid affine point");if(p instanceof T)throw new Error("projective point not allowed");return r.is0(h)&&r.is0(m)?T.ZERO:new T(h,m,r.ONE)}static fromBytes(p){let h=T.fromAffine(y(Y(p,void 0,"point")));return h.assertValidity(),h}static fromHex(p){return T.fromBytes(ne(p))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(p=8,h=!0){return $.createCache(this,p),h||this.multiply(qn),this}assertValidity(){j(this)}hasEvenY(){let{y:p}=this.toAffine();if(!r.isOdd)throw new Error("Field doesn't support isOdd");return!r.isOdd(p)}equals(p){I(p);let{X:h,Y:m,Z:E}=this,{X:B,Y:w,Z:A}=p,k=r.eql(r.mul(h,A),r.mul(B,E)),C=r.eql(r.mul(m,A),r.mul(w,E));return k&&C}negate(){return new T(this.X,r.neg(this.Y),this.Z)}double(){let{a:p,b:h}=i,m=r.mul(h,qn),{X:E,Y:B,Z:w}=this,A=r.ZERO,k=r.ZERO,C=r.ZERO,P=r.mul(E,E),D=r.mul(B,B),M=r.mul(w,w),U=r.mul(E,B);return U=r.add(U,U),C=r.mul(E,w),C=r.add(C,C),A=r.mul(p,C),k=r.mul(m,M),k=r.add(A,k),A=r.sub(D,k),k=r.add(D,k),k=r.mul(A,k),A=r.mul(U,A),C=r.mul(m,C),M=r.mul(p,M),U=r.sub(P,M),U=r.mul(p,U),U=r.add(U,C),C=r.add(P,P),P=r.add(C,P),P=r.add(P,M),P=r.mul(P,U),k=r.add(k,P),M=r.mul(B,w),M=r.add(M,M),P=r.mul(M,U),A=r.sub(A,P),C=r.mul(M,D),C=r.add(C,C),C=r.add(C,C),new T(A,k,C)}add(p){I(p);let{X:h,Y:m,Z:E}=this,{X:B,Y:w,Z:A}=p,k=r.ZERO,C=r.ZERO,P=r.ZERO,D=i.a,M=r.mul(i.b,qn),U=r.mul(h,B),V=r.mul(m,w),W=r.mul(E,A),K=r.add(h,m),G=r.add(B,w);K=r.mul(K,G),G=r.add(U,V),K=r.sub(K,G),G=r.add(h,E);let oe=r.add(B,A);return G=r.mul(G,oe),oe=r.add(U,W),G=r.sub(G,oe),oe=r.add(m,E),k=r.add(w,A),oe=r.mul(oe,k),k=r.add(V,W),oe=r.sub(oe,k),P=r.mul(D,G),k=r.mul(M,W),P=r.add(k,P),k=r.sub(V,P),P=r.add(V,P),C=r.mul(k,P),V=r.add(U,U),V=r.add(V,U),W=r.mul(D,W),G=r.mul(M,G),V=r.add(V,W),W=r.sub(U,W),W=r.mul(D,W),G=r.add(G,W),U=r.mul(V,G),C=r.add(C,U),U=r.mul(oe,G),k=r.mul(K,k),k=r.sub(k,U),U=r.mul(K,V),P=r.mul(oe,P),P=r.add(P,U),new T(k,C,P)}subtract(p){return this.add(p.negate())}is0(){return this.equals(T.ZERO)}multiply(p){let{endo:h}=e;if(!o.isValidNot0(p))throw new Error("invalid scalar: out of range");let m,E,B=w=>$.cached(this,w,A=>Yr(T,A));if(h){let{k1neg:w,k1:A,k2neg:k,k2:C}=_(p),{p:P,f:D}=B(A),{p:M,f:U}=B(C);E=D.add(U),m=Z(h.beta,P,M,w,k)}else{let{p:w,f:A}=B(p);m=w,E=A}return Yr(T,[m,E])[0]}multiplyUnsafe(p){let{endo:h}=e,m=this;if(!o.isValid(p))throw new Error("invalid scalar: out of range");if(p===_e||m.is0())return T.ZERO;if(p===Tt)return m;if($.hasCache(this))return this.multiply(p);if(h){let{k1neg:E,k1:B,k2neg:w,k2:A}=_(p),{p1:k,p2:C}=ts(T,m,B,A);return Z(h.beta,k,C,E,w)}else return $.unsafe(m,p)}toAffine(p){return q(this,p)}isTorsionFree(){let{isTorsionFree:p}=e;return s===Tt?!0:p?p(T,this):$.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:p}=e;return s===Tt?this:p?p(T,this):this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(p=!0){return tn(p,"isCompressed"),this.assertValidity(),f(T,this,p)}toHex(p=!0){return ee(this.toBytes(p))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}};S(T,"BASE",new T(i.Gx,i.Gy,r.ONE)),S(T,"ZERO",new T(r.ZERO,r.ONE,r.ZERO)),S(T,"Fp",r),S(T,"Fn",o);let L=T,z=o.BITS,$=new Pn(L,e.endo?Math.ceil(z/2):z);return L.BASE.precompute(8),L}function ss(t){return Uint8Array.of(t?2:3)}function as(t,e){return{secretKey:e.BYTES,publicKey:1+t.BYTES,publicKeyUncompressed:1+2*t.BYTES,publicKeyHasPrefix:!0,signature:2*e.BYTES}}function Tl(t,e={}){let{Fn:n}=t,r=e.randomBytes||ke,o=Object.assign(as(t.Fp,n),{seed:jr(n.ORDER)});function i(f){try{let y=n.fromBytes(f);return n.isValidNot0(y)}catch{return!1}}function s(f,y){let{publicKey:b,publicKeyUncompressed:v}=o;try{let R=f.length;return y===!0&&R!==b||y===!1&&R!==v?!1:!!t.fromBytes(f)}catch{return!1}}function a(f=r(o.seed)){return On(Y(f,o.seed,"seed"),n.ORDER)}function c(f,y=!0){return t.BASE.multiply(n.fromBytes(f)).toBytes(y)}function l(f){let{secretKey:y,publicKey:b,publicKeyUncompressed:v}=o;if(!en(f)||"_lengths"in n&&n._lengths||y===b)return;let R=Y(f,void 0,"key").length;return R===b||R===v}function d(f,y,b=!0){if(l(f)===!0)throw new Error("first arg must be private key");if(l(y)===!1)throw new Error("second arg must be public key");let v=n.fromBytes(f);return t.fromBytes(y).multiply(v).toBytes(b)}let g={isValidSecretKey:i,isValidPublicKey:s,randomSecretKey:a},u=Hn(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:d,keygen:u,Point:t,utils:g,lengths:o})}function cs(t,e,n={}){st(e),on(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),n=Object.assign({},n);let r=n.randomBytes||ke,o=n.hmac||((p,h)=>Ce(e,p,h)),{Fp:i,Fn:s}=t,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:d,getSharedSecret:g,utils:u,lengths:f}=Tl(t,n),y={prehash:!0,lowS:typeof n.lowS=="boolean"?n.lowS:!0,format:"compact",extraEntropy:!1},b=a*os<i.ORDER;function v(p){let h=a>>Tt;return p>h}function R(p,h){if(!s.isValidNot0(h))throw new Error(`invalid signature ${p}: out of range 1..Point.Fn.ORDER`);return h}function O(){if(b)throw new Error('"recovered" sig type is not supported for cofactor >2 curves')}function N(p,h){Xr(h);let m=f.signature,E=h==="compact"?m:h==="recovered"?m+1:void 0;return Y(p,E)}class I{constructor(h,m,E){S(this,"r");S(this,"s");S(this,"recovery");if(this.r=R("r",h),this.s=R("s",m),E!=null){if(O(),![0,1,2,3].includes(E))throw new Error("invalid recovery id");this.recovery=E}Object.freeze(this)}static fromBytes(h,m=y.format){N(h,m);let E;if(m==="der"){let{r:k,s:C}=We.toSig(Y(h));return new I(k,C)}m==="recovered"&&(E=h[0],m="compact",h=h.subarray(1));let B=f.signature/2,w=h.subarray(0,B),A=h.subarray(B,B*2);return new I(s.fromBytes(w),s.fromBytes(A),E)}static fromHex(h,m){return this.fromBytes(ne(h),m)}assertRecovery(){let{recovery:h}=this;if(h==null)throw new Error("invalid recovery id: must be present");return h}addRecoveryBit(h){return new I(this.r,this.s,h)}recoverPublicKey(h){let{r:m,s:E}=this,B=this.assertRecovery(),w=B===2||B===3?m+a:m;if(!i.isValid(w))throw new Error("invalid recovery id: sig.r+curve.n != R.x");let A=i.toBytes(w),k=t.fromBytes(te(ss((B&1)===0),A)),C=s.inv(w),P=q(Y(h,void 0,"msgHash")),D=s.create(-P*C),M=s.create(E*C),U=t.BASE.multiplyUnsafe(D).add(k.multiplyUnsafe(M));if(U.is0())throw new Error("invalid recovery: point at infinify");return U.assertValidity(),U}hasHighS(){return v(this.s)}toBytes(h=y.format){if(Xr(h),h==="der")return ne(We.hexFromSig(this));let{r:m,s:E}=this,B=s.toBytes(m),w=s.toBytes(E);return h==="recovered"?(O(),te(Uint8Array.of(this.assertRecovery()),B,w)):te(B,w)}toHex(h){return ee(this.toBytes(h))}}let _=n.bits2int||function(h){if(h.length>8192)throw new Error("input is too large");let m=Ge(h),E=h.length*8-c;return E>0?m>>BigInt(E):m},q=n.bits2int_modN||function(h){return s.create(_(h))},j=rn(c);function Z(p){return Mi("num < 2^"+c,p,_e,j),s.toBytes(p)}function L(p,h){return Y(p,void 0,"message"),h?Y(e(p),void 0,"prehashed message"):p}function z(p,h,m){let{lowS:E,prehash:B,extraEntropy:w}=Jr(m,y);p=L(p,B);let A=q(p),k=s.fromBytes(h);if(!s.isValidNot0(k))throw new Error("invalid private key");let C=[Z(k),Z(A)];if(w!=null&&w!==!1){let U=w===!0?r(f.secretKey):w;C.push(Y(U,void 0,"extraEntropy"))}let P=te(...C),D=A;function M(U){let V=_(U);if(!s.isValidNot0(V))return;let W=s.inv(V),K=t.BASE.multiply(V).toAffine(),G=s.create(K.x);if(G===_e)return;let oe=s.create(W*s.create(D+G*k));if(oe===_e)return;let Xt=(K.x===G?0:2)|Number(K.y&Tt),Ft=oe;return E&&v(oe)&&(Ft=s.neg(oe),Xt^=1),new I(G,Ft,b?void 0:Xt)}return{seed:P,k2sig:M}}function $(p,h,m={}){let{seed:E,k2sig:B}=z(p,h,m);return qi(e.outputLen,s.BYTES,o)(E,B).toBytes(m.format)}function T(p,h,m,E={}){let{lowS:B,prehash:w,format:A}=Jr(E,y);if(m=Y(m,void 0,"publicKey"),h=L(h,w),!en(p)){let k=p instanceof I?", use sig.toBytes()":"";throw new Error("verify expects Uint8Array signature"+k)}N(p,A);try{let k=I.fromBytes(p,A),C=t.fromBytes(m);if(B&&k.hasHighS())return!1;let{r:P,s:D}=k,M=q(h),U=s.inv(D),V=s.create(M*U),W=s.create(P*U),K=t.BASE.multiplyUnsafe(V).add(C.multiplyUnsafe(W));return K.is0()?!1:s.create(K.x)===P}catch{return!1}}function x(p,h,m={}){let{prehash:E}=Jr(m,y);return h=L(h,E),I.fromBytes(p,"recovered").recoverPublicKey(h).toBytes()}return Object.freeze({keygen:l,getPublicKey:d,getSharedSecret:g,utils:u,lengths:f,Point:t,sign:$,verify:T,recoverPublicKey:x,Signature:I,hash:e})}var Vn={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},Ll={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]},Nl=BigInt(0),Qr=BigInt(2);function Il(t){let e=Vn.p,n=BigInt(3),r=BigInt(6),o=BigInt(11),i=BigInt(22),s=BigInt(23),a=BigInt(44),c=BigInt(88),l=t*t*t%e,d=l*l*t%e,g=ye(d,n,e)*d%e,u=ye(g,n,e)*d%e,f=ye(u,Qr,e)*l%e,y=ye(f,o,e)*f%e,b=ye(y,i,e)*y%e,v=ye(b,a,e)*b%e,R=ye(v,c,e)*v%e,O=ye(R,a,e)*b%e,N=ye(O,n,e)*d%e,I=ye(N,s,e)*y%e,_=ye(I,r,e)*l%e,q=ye(_,Qr,e);if(!Dn.eql(Dn.sqr(q),t))throw new Error("Cannot find square root");return q}var Dn=Rt(Vn.p,{sqrt:Il}),lt=is(Vn,{Fp:Dn,endo:Ll}),Kn=cs(lt,ue),ls={};function $n(t,...e){let n=ls[t];if(n===void 0){let r=ue(Hi(t));n=te(r,r),ls[t]=n}return ue(te(n,...e))}var to=t=>t.toBytes(!0).slice(1),no=t=>t%Qr===Nl;function eo(t){let{Fn:e,BASE:n}=lt,r=e.fromBytes(t),o=n.multiply(r);return{scalar:no(o.y)?r:e.neg(r),bytes:to(o)}}function fs(t){let e=Dn;if(!e.isValidNot0(t))throw new Error("invalid x: Fail if x \u2265 p");let n=e.create(t*t),r=e.create(n*t+BigInt(7)),o=e.sqrt(r);no(o)||(o=e.neg(o));let i=lt.fromAffine({x:t,y:o});return i.assertValidity(),i}var an=Ge;function ds(...t){return lt.Fn.create(an($n("BIP0340/challenge",...t)))}function us(t){return eo(t).bytes}function _l(t,e,n=ke(32)){let{Fn:r}=lt,o=Y(t,void 0,"message"),{bytes:i,scalar:s}=eo(e),a=Y(n,32,"auxRand"),c=r.toBytes(s^an($n("BIP0340/aux",a))),l=$n("BIP0340/nonce",c,i,o),{bytes:d,scalar:g}=eo(l),u=ds(d,i,o),f=new Uint8Array(64);if(f.set(d,0),f.set(r.toBytes(r.create(g+u*s)),32),!hs(f,o,i))throw new Error("sign: Invalid signature produced");return f}function hs(t,e,n){let{Fp:r,Fn:o,BASE:i}=lt,s=Y(t,64,"signature"),a=Y(e,void 0,"message"),c=Y(n,32,"publicKey");try{let l=fs(an(c)),d=an(s.subarray(0,32));if(!r.isValidNot0(d))return!1;let g=an(s.subarray(32,64));if(!o.isValidNot0(g))return!1;let u=ds(o.toBytes(d),to(l),a),f=i.multiplyUnsafe(g).add(l.multiplyUnsafe(o.neg(u))),{x:y,y:b}=f.toAffine();return!(f.is0()||!no(b)||y!==d)}catch{return!1}}var xe=(()=>{let n=(r=ke(48))=>On(r,Vn.n);return{keygen:Hn(n,us),getPublicKey:us,sign:_l,verify:hs,Point:lt,utils:{randomSecretKey:n,taggedHash:$n,lift_x:fs,pointToBytes:to},lengths:{secretKey:32,publicKey:32,publicKeyHasPrefix:!1,signature:64,seed:48}}})();function Ul(t){return t instanceof Uint8Array||ArrayBuffer.isView(t)&&t.constructor.name==="Uint8Array"}function zn(t){if(typeof t!="boolean")throw new Error(`boolean expected, not ${t}`)}function jn(t){if(!Number.isSafeInteger(t)||t<0)throw new Error("positive integer expected, got "+t)}function ae(t,e,n=""){let r=Ul(t),o=t?.length,i=e!==void 0;if(!r||i&&o!==e){let s=n&&`"${n}" `,a=i?` of length ${e}`:"",c=r?`length=${o}`:`type=${typeof t}`;throw new Error(s+"expected Uint8Array"+a+", got "+c)}return t}function ro(t,e=!0){if(t.destroyed)throw new Error("Hash instance has been destroyed");if(e&&t.finished)throw new Error("Hash#digest() has already been called")}function gs(t,e){ae(t,void 0,"output");let n=e.outputLen;if(t.length<n)throw new Error("digestInto() expects output buffer of length at least "+n)}function Ue(t){return new Uint32Array(t.buffer,t.byteOffset,Math.floor(t.byteLength/4))}function Oe(...t){for(let e=0;e<t.length;e++)t[e].fill(0)}function Ol(t){return new DataView(t.buffer,t.byteOffset,t.byteLength)}var Pl=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;function ps(t,e){if(e==null||typeof e!="object")throw new Error("options must be defined");return Object.assign(t,e)}function Lt(t,e){if(t.length!==e.length)return!1;let n=0;for(let r=0;r<t.length;r++)n|=t[r]^e[r];return n===0}var oo=(t,e)=>{function n(r,...o){if(ae(r,void 0,"key"),!Pl)throw new Error("Non little-endian hardware is not yet supported");if(t.nonceLength!==void 0){let d=o[0];ae(d,t.varSizeNonce?void 0:t.nonceLength,"nonce")}let i=t.tagLength;i&&o[1]!==void 0&&ae(o[1],void 0,"AAD");let s=e(r,...o),a=(d,g)=>{if(g!==void 0){if(d!==2)throw new Error("cipher output not supported");ae(g,void 0,"output")}},c=!1;return{encrypt(d,g){if(c)throw new Error("cannot encrypt() twice with same key + nonce");return c=!0,ae(d),a(s.encrypt.length,g),s.encrypt(d,g)},decrypt(d,g){if(ae(d),i&&d.length<i)throw new Error('"ciphertext" expected length bigger than tagLength='+i);return a(s.decrypt.length,g),s.decrypt(d,g)}}}return Object.assign(n,t),n};function io(t,e,n=!0){if(e===void 0)return new Uint8Array(t);if(e.length!==t)throw new Error('"output" expected Uint8Array of length '+t+", got: "+e.length);if(n&&!Hl(e))throw new Error("invalid output, must be aligned");return e}function ys(t,e,n){zn(n);let r=new Uint8Array(16),o=Ol(r);return o.setBigUint64(0,BigInt(e),n),o.setBigUint64(8,BigInt(t),n),r}function Hl(t){return t.byteOffset%4===0}function Nt(t){return Uint8Array.from(t)}var ms=t=>Uint8Array.from(t.split(""),e=>e.charCodeAt(0)),Ml=ms("expand 16-byte k"),ql=ms("expand 32-byte k"),Dl=Ue(Ml),$l=Ue(ql);function H(t,e){return t<<e|t>>>32-e}function so(t){return t.byteOffset%4===0}var Zn=64,Vl=16,ws=2**32-1,bs=Uint32Array.of();function Kl(t,e,n,r,o,i,s,a){let c=o.length,l=new Uint8Array(Zn),d=Ue(l),g=so(o)&&so(i),u=g?Ue(o):bs,f=g?Ue(i):bs;for(let y=0;y<c;s++){if(t(e,n,r,d,s,a),s>=ws)throw new Error("arx: counter overflow");let b=Math.min(Zn,c-y);if(g&&b===Zn){let v=y/4;if(y%4!==0)throw new Error("arx: invalid block position");for(let R=0,O;R<Vl;R++)O=v+R,f[O]=u[O]^d[R];y+=Zn;continue}for(let v=0,R;v<b;v++)R=y+v,i[R]=o[R]^l[v];y+=b}}function ao(t,e){let{allowShortKeys:n,extendNonceFn:r,counterLength:o,counterRight:i,rounds:s}=ps({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},e);if(typeof t!="function")throw new Error("core must be a function");return jn(o),jn(s),zn(i),zn(n),(a,c,l,d,g=0)=>{ae(a,void 0,"key"),ae(c,void 0,"nonce"),ae(l,void 0,"data");let u=l.length;if(d===void 0&&(d=new Uint8Array(u)),ae(d,void 0,"output"),jn(g),g<0||g>=ws)throw new Error("arx: counter overflow");if(d.length<u)throw new Error(`arx: output (${d.length}) is shorter than data (${u})`);let f=[],y=a.length,b,v;if(y===32)f.push(b=Nt(a)),v=$l;else if(y===16&&n)b=new Uint8Array(32),b.set(a),b.set(a,16),v=Dl,f.push(b);else throw ae(a,32,"arx key"),new Error("invalid key size");so(c)||f.push(c=Nt(c));let R=Ue(b);if(r){if(c.length!==24)throw new Error("arx: extended nonce must be 24 bytes");r(v,R,Ue(c.subarray(0,16)),R),c=c.subarray(16)}let O=16-o;if(O!==c.length)throw new Error(`arx: nonce must be ${O} or 16 bytes`);if(O!==12){let I=new Uint8Array(12);I.set(c,i?0:12-c.length),c=I,f.push(c)}let N=Ue(c);return Kl(t,v,R,N,l,d,g,s),Oe(...f),d}}function ce(t,e){return t[e++]&255|(t[e++]&255)<<8}var co=class{constructor(e){S(this,"blockLen",16);S(this,"outputLen",16);S(this,"buffer",new Uint8Array(16));S(this,"r",new Uint16Array(10));S(this,"h",new Uint16Array(10));S(this,"pad",new Uint16Array(8));S(this,"pos",0);S(this,"finished",!1);e=Nt(ae(e,32,"key"));let n=ce(e,0),r=ce(e,2),o=ce(e,4),i=ce(e,6),s=ce(e,8),a=ce(e,10),c=ce(e,12),l=ce(e,14);this.r[0]=n&8191,this.r[1]=(n>>>13|r<<3)&8191,this.r[2]=(r>>>10|o<<6)&7939,this.r[3]=(o>>>7|i<<9)&8191,this.r[4]=(i>>>4|s<<12)&255,this.r[5]=s>>>1&8190,this.r[6]=(s>>>14|a<<2)&8191,this.r[7]=(a>>>11|c<<5)&8065,this.r[8]=(c>>>8|l<<8)&8191,this.r[9]=l>>>5&127;for(let d=0;d<8;d++)this.pad[d]=ce(e,16+2*d)}process(e,n,r=!1){let o=r?0:2048,{h:i,r:s}=this,a=s[0],c=s[1],l=s[2],d=s[3],g=s[4],u=s[5],f=s[6],y=s[7],b=s[8],v=s[9],R=ce(e,n+0),O=ce(e,n+2),N=ce(e,n+4),I=ce(e,n+6),_=ce(e,n+8),q=ce(e,n+10),j=ce(e,n+12),Z=ce(e,n+14),L=i[0]+(R&8191),z=i[1]+((R>>>13|O<<3)&8191),$=i[2]+((O>>>10|N<<6)&8191),T=i[3]+((N>>>7|I<<9)&8191),x=i[4]+((I>>>4|_<<12)&8191),p=i[5]+(_>>>1&8191),h=i[6]+((_>>>14|q<<2)&8191),m=i[7]+((q>>>11|j<<5)&8191),E=i[8]+((j>>>8|Z<<8)&8191),B=i[9]+(Z>>>5|o),w=0,A=w+L*a+z*(5*v)+$*(5*b)+T*(5*y)+x*(5*f);w=A>>>13,A&=8191,A+=p*(5*u)+h*(5*g)+m*(5*d)+E*(5*l)+B*(5*c),w+=A>>>13,A&=8191;let k=w+L*c+z*a+$*(5*v)+T*(5*b)+x*(5*y);w=k>>>13,k&=8191,k+=p*(5*f)+h*(5*u)+m*(5*g)+E*(5*d)+B*(5*l),w+=k>>>13,k&=8191;let C=w+L*l+z*c+$*a+T*(5*v)+x*(5*b);w=C>>>13,C&=8191,C+=p*(5*y)+h*(5*f)+m*(5*u)+E*(5*g)+B*(5*d),w+=C>>>13,C&=8191;let P=w+L*d+z*l+$*c+T*a+x*(5*v);w=P>>>13,P&=8191,P+=p*(5*b)+h*(5*y)+m*(5*f)+E*(5*u)+B*(5*g),w+=P>>>13,P&=8191;let D=w+L*g+z*d+$*l+T*c+x*a;w=D>>>13,D&=8191,D+=p*(5*v)+h*(5*b)+m*(5*y)+E*(5*f)+B*(5*u),w+=D>>>13,D&=8191;let M=w+L*u+z*g+$*d+T*l+x*c;w=M>>>13,M&=8191,M+=p*a+h*(5*v)+m*(5*b)+E*(5*y)+B*(5*f),w+=M>>>13,M&=8191;let U=w+L*f+z*u+$*g+T*d+x*l;w=U>>>13,U&=8191,U+=p*c+h*a+m*(5*v)+E*(5*b)+B*(5*y),w+=U>>>13,U&=8191;let V=w+L*y+z*f+$*u+T*g+x*d;w=V>>>13,V&=8191,V+=p*l+h*c+m*a+E*(5*v)+B*(5*b),w+=V>>>13,V&=8191;let W=w+L*b+z*y+$*f+T*u+x*g;w=W>>>13,W&=8191,W+=p*d+h*l+m*c+E*a+B*(5*v),w+=W>>>13,W&=8191;let K=w+L*v+z*b+$*y+T*f+x*u;w=K>>>13,K&=8191,K+=p*g+h*d+m*l+E*c+B*a,w+=K>>>13,K&=8191,w=(w<<2)+w|0,w=w+A|0,A=w&8191,w=w>>>13,k+=w,i[0]=A,i[1]=k,i[2]=C,i[3]=P,i[4]=D,i[5]=M,i[6]=U,i[7]=V,i[8]=W,i[9]=K}finalize(){let{h:e,pad:n}=this,r=new Uint16Array(10),o=e[1]>>>13;e[1]&=8191;for(let a=2;a<10;a++)e[a]+=o,o=e[a]>>>13,e[a]&=8191;e[0]+=o*5,o=e[0]>>>13,e[0]&=8191,e[1]+=o,o=e[1]>>>13,e[1]&=8191,e[2]+=o,r[0]=e[0]+5,o=r[0]>>>13,r[0]&=8191;for(let a=1;a<10;a++)r[a]=e[a]+o,o=r[a]>>>13,r[a]&=8191;r[9]-=8192;let i=(o^1)-1;for(let a=0;a<10;a++)r[a]&=i;i=~i;for(let a=0;a<10;a++)e[a]=e[a]&i|r[a];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let s=e[0]+n[0];e[0]=s&65535;for(let a=1;a<8;a++)s=(e[a]+n[a]|0)+(s>>>16)|0,e[a]=s&65535;Oe(r)}update(e){ro(this),ae(e),e=Nt(e);let{buffer:n,blockLen:r}=this,o=e.length;for(let i=0;i<o;){let s=Math.min(r-this.pos,o-i);if(s===r){for(;r<=o-i;i+=r)this.process(e,i);continue}n.set(e.subarray(i,i+s),this.pos),this.pos+=s,i+=s,this.pos===r&&(this.process(n,0,!1),this.pos=0)}return this}destroy(){Oe(this.h,this.r,this.buffer,this.pad)}digestInto(e){ro(this),gs(e,this),this.finished=!0;let{buffer:n,h:r}=this,{pos:o}=this;if(o){for(n[o++]=1;o<16;o++)n[o]=0;this.process(n,0,!0)}this.finalize();let i=0;for(let s=0;s<8;s++)e[i++]=r[s]>>>0,e[i++]=r[s]>>>8;return e}digest(){let{buffer:e,outputLen:n}=this;this.digestInto(e);let r=e.slice(0,n);return this.destroy(),r}};function zl(t){let e=(r,o)=>t(o).update(r).digest(),n=t(new Uint8Array(32));return e.outputLen=n.outputLen,e.blockLen=n.blockLen,e.create=r=>t(r),e}var xs=zl(t=>new co(t));function Ss(t,e,n,r,o,i=20){let s=t[0],a=t[1],c=t[2],l=t[3],d=e[0],g=e[1],u=e[2],f=e[3],y=e[4],b=e[5],v=e[6],R=e[7],O=o,N=n[0],I=n[1],_=n[2],q=s,j=a,Z=c,L=l,z=d,$=g,T=u,x=f,p=y,h=b,m=v,E=R,B=O,w=N,A=I,k=_;for(let P=0;P<i;P+=2)q=q+z|0,B=H(B^q,16),p=p+B|0,z=H(z^p,12),q=q+z|0,B=H(B^q,8),p=p+B|0,z=H(z^p,7),j=j+$|0,w=H(w^j,16),h=h+w|0,$=H($^h,12),j=j+$|0,w=H(w^j,8),h=h+w|0,$=H($^h,7),Z=Z+T|0,A=H(A^Z,16),m=m+A|0,T=H(T^m,12),Z=Z+T|0,A=H(A^Z,8),m=m+A|0,T=H(T^m,7),L=L+x|0,k=H(k^L,16),E=E+k|0,x=H(x^E,12),L=L+x|0,k=H(k^L,8),E=E+k|0,x=H(x^E,7),q=q+$|0,k=H(k^q,16),m=m+k|0,$=H($^m,12),q=q+$|0,k=H(k^q,8),m=m+k|0,$=H($^m,7),j=j+T|0,B=H(B^j,16),E=E+B|0,T=H(T^E,12),j=j+T|0,B=H(B^j,8),E=E+B|0,T=H(T^E,7),Z=Z+x|0,w=H(w^Z,16),p=p+w|0,x=H(x^p,12),Z=Z+x|0,w=H(w^Z,8),p=p+w|0,x=H(x^p,7),L=L+z|0,A=H(A^L,16),h=h+A|0,z=H(z^h,12),L=L+z|0,A=H(A^L,8),h=h+A|0,z=H(z^h,7);let C=0;r[C++]=s+q|0,r[C++]=a+j|0,r[C++]=c+Z|0,r[C++]=l+L|0,r[C++]=d+z|0,r[C++]=g+$|0,r[C++]=u+T|0,r[C++]=f+x|0,r[C++]=y+p|0,r[C++]=b+h|0,r[C++]=v+m|0,r[C++]=R+E|0,r[C++]=O+B|0,r[C++]=N+w|0,r[C++]=I+A|0,r[C++]=_+k|0}function jl(t,e,n,r){let o=t[0],i=t[1],s=t[2],a=t[3],c=e[0],l=e[1],d=e[2],g=e[3],u=e[4],f=e[5],y=e[6],b=e[7],v=n[0],R=n[1],O=n[2],N=n[3];for(let _=0;_<20;_+=2)o=o+c|0,v=H(v^o,16),u=u+v|0,c=H(c^u,12),o=o+c|0,v=H(v^o,8),u=u+v|0,c=H(c^u,7),i=i+l|0,R=H(R^i,16),f=f+R|0,l=H(l^f,12),i=i+l|0,R=H(R^i,8),f=f+R|0,l=H(l^f,7),s=s+d|0,O=H(O^s,16),y=y+O|0,d=H(d^y,12),s=s+d|0,O=H(O^s,8),y=y+O|0,d=H(d^y,7),a=a+g|0,N=H(N^a,16),b=b+N|0,g=H(g^b,12),a=a+g|0,N=H(N^a,8),b=b+N|0,g=H(g^b,7),o=o+l|0,N=H(N^o,16),y=y+N|0,l=H(l^y,12),o=o+l|0,N=H(N^o,8),y=y+N|0,l=H(l^y,7),i=i+d|0,v=H(v^i,16),b=b+v|0,d=H(d^b,12),i=i+d|0,v=H(v^i,8),b=b+v|0,d=H(d^b,7),s=s+g|0,R=H(R^s,16),u=u+R|0,g=H(g^u,12),s=s+g|0,R=H(R^s,8),u=u+R|0,g=H(g^u,7),a=a+c|0,O=H(O^a,16),f=f+O|0,c=H(c^f,12),a=a+c|0,O=H(O^a,8),f=f+O|0,c=H(c^f,7);let I=0;r[I++]=o,r[I++]=i,r[I++]=s,r[I++]=a,r[I++]=v,r[I++]=R,r[I++]=O,r[I++]=N}var ut=ao(Ss,{counterRight:!1,counterLength:4,allowShortKeys:!1}),Zl=ao(Ss,{counterRight:!1,counterLength:8,extendNonceFn:jl,allowShortKeys:!1});var Gl=new Uint8Array(16),Es=(t,e)=>{t.update(e);let n=e.length%16;n&&t.update(Gl.subarray(n))},Wl=new Uint8Array(32);function vs(t,e,n,r,o){o!==void 0&&ae(o,void 0,"AAD");let i=t(e,n,Wl),s=ys(r.length,o?o.length:0,!0),a=xs.create(i);o&&Es(a,o),Es(a,r),a.update(s);let c=a.digest();return Oe(i,s),c}var ks=t=>(e,n,r)=>({encrypt(i,s){let a=i.length;s=io(a+16,s,!1),s.set(i);let c=s.subarray(0,-16);t(e,n,c,c,1);let l=vs(t,e,n,c,r);return s.set(l,a),Oe(l),s},decrypt(i,s){s=io(i.length-16,s,!1);let a=i.subarray(0,-16),c=i.subarray(-16),l=vs(t,e,n,a,r);if(!Lt(c,l))throw new Error("invalid tag");return s.set(i.subarray(0,-16)),t(e,n,s,s,1),Oe(l),s}}),Mh=oo({blockSize:64,nonceLength:12,tagLength:16},ks(ut)),qh=oo({blockSize:64,nonceLength:24,tagLength:16},ks(Zl));function Gn(t,e,n){return st(t),n===void 0&&(n=new Uint8Array(t.outputLen)),Ce(t,n,e)}var lo=Uint8Array.of(0),Bs=Uint8Array.of();function Wn(t,e,n,r=32){st(t),we(r,"length");let o=t.outputLen;if(r>255*o)throw new Error("Length must be <= 255*HashLen");let i=Math.ceil(r/o);n===void 0?n=Bs:Y(n,void 0,"info");let s=new Uint8Array(i*o),a=Ce.create(t,e),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let d=0;d<i;d++)lo[0]=d+1,c.update(d===0?Bs:l).update(n).update(lo).digestInto(l),s.set(l,o*d),a._cloneInto(c);return a.destroy(),c.destroy(),Ne(l,lo),s.slice(0,r)}function go(t){return t instanceof Uint8Array||ArrayBuffer.isView(t)&&t.constructor.name==="Uint8Array"}function Yl(t){if(!go(t))throw new Error("Uint8Array expected")}function Ts(t,e){return Array.isArray(e)?e.length===0?!0:t?e.every(n=>typeof n=="string"):e.every(n=>Number.isSafeInteger(n)):!1}function Jl(t){if(typeof t!="function")throw new Error("function expected");return!0}function ft(t,e){if(typeof e!="string")throw new Error(`${t}: string expected`);return!0}function po(t){if(!Number.isSafeInteger(t))throw new Error(`invalid integer: ${t}`)}function uo(t){if(!Array.isArray(t))throw new Error("array expected")}function Jn(t,e){if(!Ts(!0,e))throw new Error(`${t}: array of strings expected`)}function Ls(t,e){if(!Ts(!1,e))throw new Error(`${t}: array of numbers expected`)}function Ns(...t){let e=i=>i,n=(i,s)=>a=>i(s(a)),r=t.map(i=>i.encode).reduceRight(n,e),o=t.map(i=>i.decode).reduce(n,e);return{encode:r,decode:o}}function Is(t){let e=typeof t=="string"?t.split(""):t,n=e.length;Jn("alphabet",e);let r=new Map(e.map((o,i)=>[o,i]));return{encode:o=>(uo(o),o.map(i=>{if(!Number.isSafeInteger(i)||i<0||i>=n)throw new Error(`alphabet.encode: digit index outside alphabet "${i}". Allowed: ${t}`);return e[i]})),decode:o=>(uo(o),o.map(i=>{ft("alphabet.decode",i);let s=r.get(i);if(s===void 0)throw new Error(`Unknown letter: "${i}". Allowed: ${t}`);return s}))}}function _s(t=""){return ft("join",t),{encode:e=>(Jn("join.decode",e),e.join(t)),decode:e=>(ft("join.decode",e),e.split(t))}}function Xl(t,e="="){return po(t),ft("padding",e),{encode(n){for(Jn("padding.encode",n);n.length*t%8;)n.push(e);return n},decode(n){Jn("padding.decode",n);let r=n.length;if(r*t%8)throw new Error("padding: invalid, string should have whole number of bytes");for(;r>0&&n[r-1]===e;r--)if((r-1)*t%8===0)throw new Error("padding: invalid, string has too much padding");return n.slice(0,r)}}}var Us=(t,e)=>e===0?t:Us(e,t%e),Xn=(t,e)=>t+(e-Us(t,e)),Yn=(()=>{let t=[];for(let e=0;e<40;e++)t.push(2**e);return t})();function fo(t,e,n,r){if(uo(t),e<=0||e>32)throw new Error(`convertRadix2: wrong from=${e}`);if(n<=0||n>32)throw new Error(`convertRadix2: wrong to=${n}`);if(Xn(e,n)>32)throw new Error(`convertRadix2: carry overflow from=${e} to=${n} carryBits=${Xn(e,n)}`);let o=0,i=0,s=Yn[e],a=Yn[n]-1,c=[];for(let l of t){if(po(l),l>=s)throw new Error(`convertRadix2: invalid data word=${l} from=${e}`);if(o=o<<e|l,i+e>32)throw new Error(`convertRadix2: carry overflow pos=${i} from=${e}`);for(i+=e;i>=n;i-=n)c.push((o>>i-n&a)>>>0);let d=Yn[i];if(d===void 0)throw new Error("invalid carry");o&=d-1}if(o=o<<n-i&a,!r&&i>=e)throw new Error("Excess padding");if(!r&&o>0)throw new Error(`Non-zero padding: ${o}`);return r&&i>0&&c.push(o>>>0),c}function Os(t,e=!1){if(po(t),t<=0||t>32)throw new Error("radix2: bits should be in (0..32]");if(Xn(8,t)>32||Xn(t,8)>32)throw new Error("radix2: carry overflow");return{encode:n=>{if(!go(n))throw new Error("radix2.encode input should be Uint8Array");return fo(Array.from(n),8,t,!e)},decode:n=>(Ls("radix2.decode",n),Uint8Array.from(fo(n,t,8,e)))}}function As(t){return Jl(t),function(...e){try{return t.apply(null,e)}catch{}}}var Fl=typeof Uint8Array.from([]).toBase64=="function"&&typeof Uint8Array.fromBase64=="function",Ql=(t,e)=>{ft("base64",t);let n=e?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,r=e?"base64url":"base64";if(t.length>0&&!n.test(t))throw new Error("invalid base64");return Uint8Array.fromBase64(t,{alphabet:r,lastChunkHandling:"strict"})},It=Fl?{encode(t){return Yl(t),t.toBase64()},decode(t){return Ql(t,!1)}}:Ns(Os(6),Is("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Xl(6),_s(""));var ho=Ns(Is("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),_s("")),Rs=[996825010,642813549,513874426,1027748829,705979059];function cn(t){let e=t>>25,n=(t&33554431)<<5;for(let r=0;r<Rs.length;r++)(e>>r&1)===1&&(n^=Rs[r]);return n}function Cs(t,e,n=1){let r=t.length,o=1;for(let i=0;i<r;i++){let s=t.charCodeAt(i);if(s<33||s>126)throw new Error(`Invalid prefix (${t})`);o=cn(o)^s>>5}o=cn(o);for(let i=0;i<r;i++)o=cn(o)^t.charCodeAt(i)&31;for(let i of e)o=cn(o)^i;for(let i=0;i<6;i++)o=cn(o);return o^=n,ho.encode(fo([o%Yn[30]],30,5,!1))}function eu(t){let e=t==="bech32"?1:734539939,n=Os(5),r=n.decode,o=n.encode,i=As(r);function s(g,u,f=90){ft("bech32.encode prefix",g),go(u)&&(u=Array.from(u)),Ls("bech32.encode",u);let y=g.length;if(y===0)throw new TypeError(`Invalid prefix length ${y}`);let b=y+7+u.length;if(f!==!1&&b>f)throw new TypeError(`Length ${b} exceeds limit ${f}`);let v=g.toLowerCase(),R=Cs(v,u,e);return`${v}1${ho.encode(u)}${R}`}function a(g,u=90){ft("bech32.decode input",g);let f=g.length;if(f<8||u!==!1&&f>u)throw new TypeError(`invalid string length: ${f} (${g}). Expected (8..${u})`);let y=g.toLowerCase();if(g!==y&&g!==g.toUpperCase())throw new Error("String must be lowercase or uppercase");let b=y.lastIndexOf("1");if(b===0||b===-1)throw new Error('Letter "1" must be present between prefix and data only');let v=y.slice(0,b),R=y.slice(b+1);if(R.length<6)throw new Error("Data must be at least 6 characters long");let O=ho.decode(R).slice(0,-6),N=Cs(v,O,e);if(!R.endsWith(N))throw new Error(`Invalid checksum in ${g}: expected "${N}"`);return{prefix:v,words:O}}let c=As(a);function l(g){let{prefix:u,words:f}=a(g,!1);return{prefix:u,words:f,bytes:r(f)}}function d(g,u){return s(g,o(u))}return{encode:s,decode:a,encodeFromBytes:d,decodeToBytes:l,decodeUnsafe:c,fromWords:r,fromWordsUnsafe:i,toWords:o}}var yo=eu("bech32");var dt=Symbol("verified"),tu=t=>t instanceof Object;function nu(t){if(!tu(t)||typeof t.kind!="number"||typeof t.content!="string"||typeof t.created_at!="number"||typeof t.pubkey!="string"||!t.pubkey.match(/^[a-f0-9]{64}$/)||!Array.isArray(t.tags))return!1;for(let e=0;e<t.tags.length;e++){let n=t.tags[e];if(!Array.isArray(n))return!1;for(let r=0;r<n.length;r++)if(typeof n[r]!="string")return!1}return!0}var ru=new TextDecoder("utf-8"),Eo=new TextEncoder;function ln(t){try{t.indexOf("://")===-1&&(t="wss://"+t);let e=new URL(t);return e.protocol==="http:"?e.protocol="ws:":e.protocol==="https:"&&(e.protocol="wss:"),e.pathname=e.pathname.replace(/\/+/g,"/"),e.pathname.endsWith("/")&&(e.pathname=e.pathname.slice(0,-1)),(e.port==="80"&&e.protocol==="ws:"||e.port==="443"&&e.protocol==="wss:")&&(e.port=""),e.searchParams.sort(),e.hash="",e.toString()}catch{throw new Error(`Invalid URL: ${t}`)}}var ou=class{generateSecretKey(){return xe.utils.randomSecretKey()}getPublicKey(t){return ee(xe.getPublicKey(t))}finalizeEvent(t,e){let n=t;return n.pubkey=ee(xe.getPublicKey(e)),n.id=bo(n),n.sig=ee(xe.sign(ne(bo(n)),e)),n[dt]=!0,n}verifyEvent(t){if(typeof t[dt]=="boolean")return t[dt];try{let e=bo(t);if(e!==t.id)return t[dt]=!1,!1;let n=xe.verify(ne(t.sig),ne(e),ne(t.pubkey));return t[dt]=n,n}catch{return t[dt]=!1,!1}}};function iu(t){if(!nu(t))throw new Error("can't serialize event with wrong or missing properties");return JSON.stringify([0,t.pubkey,t.created_at,t.kind,t.tags,t.content])}function bo(t){let e=ue(Eo.encode(iu(t)));return ee(e)}var Fn=new ou,Wh=Fn.generateSecretKey,Ps=Fn.getPublicKey,su=Fn.finalizeEvent,Ms=Fn.verifyEvent,vo=1,So=4294967295,ko=65536;function mo(t,e){let n=Kn.getSharedSecret(t,ne("02"+e)).subarray(1,33);return Gn(ue,n,Eo.encode("nip44-v2"))}function qs(t,e){let n=Wn(ue,t,e,76);return{chacha_key:n.subarray(0,32),chacha_nonce:n.subarray(32,44),hmac_key:n.subarray(44,76)}}function Ds(t){if(!Number.isSafeInteger(t)||t<1)throw new Error("expected positive integer");if(t<=32)return 32;let e=2**(Math.floor(Math.log2(t-1))+1),n=e<=256?32:e/8;return n*(Math.floor((t-1)/n)+1)}function au(t){if(!Number.isSafeInteger(t)||t<vo||t>65535)throw new Error("invalid plaintext size: must be between 1 and 65535 bytes");let e=new Uint8Array(2);return new DataView(e.buffer).setUint16(0,t,!1),e}function cu(t){if(!Number.isSafeInteger(t)||t<ko||t>So)throw new Error("invalid plaintext size: must be between 65536 and 4294967295 bytes");let e=new Uint8Array(4);return new DataView(e.buffer).setUint32(0,t,!1),e}function lu(t){let e=Eo.encode(t),n=e.length;if(n<vo||n>So)throw new Error("invalid plaintext size: must be between 1 and 4294967295 bytes");let r=n>=ko?te(new Uint8Array([0,0]),cu(n)):au(n),o=new Uint8Array(Ds(n)-n);return te(r,e,o)}function uu(t){let e=new DataView(t.buffer,t.byteOffset,t.byteLength),n=e.getUint16(0),r,o;if(n===0){if(r=e.getUint32(2),r<ko)throw new Error("invalid padding");o=6}else r=n,o=2;let i=t.subarray(o,o+r);if(r<vo||r>So||i.length!==r||t.length!==o+Ds(r))throw new Error("invalid padding");return ru.decode(i)}function $s(t,e,n){if(n.length!==32)throw new Error("AAD associated data must be 32 bytes");let r=te(n,e);return Ce(ue,t,r)}function fu(t){if(typeof t!="string")throw new Error("payload must be a valid string");let e=t.length;if(e<132)throw new Error("invalid payload length: "+e);if(t[0]==="#")throw new Error("unknown encryption version");let n;try{n=It.decode(t)}catch(i){throw new Error("invalid base64: "+i.message)}let r=n.length;if(r<99)throw new Error("invalid data length: "+r);let o=n[0];if(o!==2)throw new Error("unknown encryption version "+o);return{nonce:n.subarray(1,33),ciphertext:n.subarray(33,-32),mac:n.subarray(-32)}}function du(t,e,n=ke(32)){let{chacha_key:r,chacha_nonce:o,hmac_key:i}=qs(e,n),s=lu(t),a=ut(r,o,s),c=$s(i,a,n);return It.encode(te(new Uint8Array([2]),n,a,c))}function Hs(t,e){let{nonce:n,ciphertext:r,mac:o}=fu(t),{chacha_key:i,chacha_nonce:s,hmac_key:a}=qs(e,n),c=$s(a,r,n);if(!Lt(c,o))throw new Error("invalid MAC");let l=ut(i,s,r);return uu(l)}var hu=/^(?:([\w.+-]+)@)?([\w_-]+(\.[\w_-]+)+)$/,gu;try{gu=fetch}catch{}var pu=22242,wo=24133;function yu(t,e){if(t.ids&&t.ids.indexOf(e.id)===-1||t.kinds&&t.kinds.indexOf(e.kind)===-1||t.authors&&t.authors.indexOf(e.pubkey)===-1)return!1;for(let n in t)if(n[0]==="#"){let r=n.slice(1),o=t[`#${r}`];if(o&&!e.tags.find(([i,s])=>i===n.slice(1)&&o.indexOf(s)!==-1))return!1}return!(t.since&&e.created_at<t.since||t.until&&e.created_at>t.until)}function bu(t,e){for(let n=0;n<t.length;n++)if(yu(t[n],e))return!0;return!1}function mu(t,e){let n=e.length+3,r=t.indexOf(`"${e}":`)+n,o=t.slice(r).indexOf('"')+r+1;return t.slice(o,o+64)}function wu(t){let e=t.slice(0,22).indexOf('"EVENT"');if(e===-1)return null;let n=t.slice(e+7+1).indexOf('"');if(n===-1)return null;let r=e+7+1+n,o=t.slice(r+1,80).indexOf('"');if(o===-1)return null;let i=r+1+o;return t.slice(r+1,i)}function xu(t,e){return{kind:pu,created_at:Math.floor(Date.now()/1e3),tags:[["relay",t],["challenge",e]],content:""}}var xo=class extends Error{constructor(t,e){super(`Tried to send message '${t} on a closed connection to ${e}.`),this.name="SendingOnClosedConnection"}},Vs=class{constructor(t,e){S(this,"url");S(this,"_connected",!1);S(this,"onclose",null);S(this,"onnotice",t=>console.debug(`NOTICE from ${this.url}: ${t}`));S(this,"onauth");S(this,"baseEoseTimeout",4400);S(this,"publishTimeout",4400);S(this,"pingFrequency",29e3);S(this,"pingTimeout",2e4);S(this,"resubscribeBackoff",[1e4,1e4,1e4,2e4,2e4,3e4,6e4]);S(this,"openSubs",new Map);S(this,"enablePing");S(this,"enableReconnect");S(this,"idleSince",Date.now());S(this,"ongoingOperations",0);S(this,"reconnectTimeoutHandle");S(this,"pingIntervalHandle");S(this,"reconnectAttempts",0);S(this,"skipReconnection",!1);S(this,"connectionPromise");S(this,"openCountRequests",new Map);S(this,"openEventPublishes",new Map);S(this,"ws");S(this,"challenge");S(this,"authPromise");S(this,"serial",0);S(this,"verifyEvent");S(this,"_WebSocket");this.url=ln(t),this.verifyEvent=e.verifyEvent,this._WebSocket=e.websocketImplementation||WebSocket,this.enablePing=e.enablePing,this.enableReconnect=e.enableReconnect||!1}static async connect(t,e){let n=new Vs(t,e);return await n.connect(e),n}closeAllSubscriptions(t){for(let[e,n]of this.openSubs)n.close(t);this.openSubs.clear();for(let[e,n]of this.openEventPublishes)n.reject(new Error(t));this.openEventPublishes.clear();for(let[e,n]of this.openCountRequests)n.reject(new Error(t));this.openCountRequests.clear()}get connected(){return this._connected}async reconnect(){let t=this.resubscribeBackoff[Math.min(this.reconnectAttempts,this.resubscribeBackoff.length-1)];this.reconnectAttempts++,this.reconnectTimeoutHandle=setTimeout(async()=>{try{await this.connect()}catch{}},t)}handleHardClose(t){this.pingIntervalHandle&&(clearInterval(this.pingIntervalHandle),this.pingIntervalHandle=void 0),this._connected=!1,this.connectionPromise=void 0,this.idleSince=void 0,this.enableReconnect&&!this.skipReconnection?this.reconnect():(this.onclose?.(),this.closeAllSubscriptions(t))}async connect(t){let e;return this.connectionPromise?this.connectionPromise:(this.challenge=void 0,this.authPromise=void 0,this.skipReconnection=!1,this.connectionPromise=new Promise((n,r)=>{t?.timeout&&(e=setTimeout(()=>{r("connection timed out"),this.connectionPromise=void 0,this.skipReconnection=!0,this.onclose?.(),this.handleHardClose("relay connection timed out")},t.timeout)),t?.abort&&(t.abort.onabort=r);try{this.ws=new this._WebSocket(this.url)}catch(o){clearTimeout(e),r(o);return}this.ws.onopen=()=>{this.reconnectTimeoutHandle&&(clearTimeout(this.reconnectTimeoutHandle),this.reconnectTimeoutHandle=void 0),clearTimeout(e),this._connected=!0;let o=this.reconnectAttempts>0;this.reconnectAttempts=0;for(let i of this.openSubs.values()){if(i.eosed=!1,o)for(let s=0;s<i.filters.length;s++)i.lastEmitted&&(i.filters[s].since=i.lastEmitted+1);i.fire()}this.enablePing&&(this.pingIntervalHandle=setInterval(()=>this.pingpong(),this.pingFrequency)),n()},this.ws.onerror=()=>{clearTimeout(e),r("connection failed"),this.connectionPromise=void 0,this.skipReconnection=!0,this.onclose?.(),this.handleHardClose("relay connection failed")},this.ws.onclose=o=>{clearTimeout(e),r(o.message||"websocket closed"),this.handleHardClose("relay connection closed")},this.ws.onmessage=this._onmessage.bind(this)}),this.connectionPromise)}waitForPingPong(){return new Promise(t=>{this.ws.once("pong",()=>t(!0)),this.ws.ping()})}waitForDummyReq(){return new Promise((t,e)=>{if(!this.connectionPromise)return e(new Error(`no connection to ${this.url}, can't ping`));try{let n=this.subscribe([{ids:["aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"],limit:0}],{label:"<forced-ping>",oneose:()=>{t(!0),n.close()},onclose(){t(!0)},eoseTimeout:this.pingTimeout+1e3})}catch(n){e(n)}})}async pingpong(){this.ws?.readyState===1&&(await Promise.any([this.ws&&this.ws.ping&&this.ws.once?this.waitForPingPong():this.waitForDummyReq(),new Promise(e=>setTimeout(()=>e(!1),this.pingTimeout))])||this.ws?.readyState===this._WebSocket.OPEN&&this.ws?.close())}async send(t){if(!this.connectionPromise)throw new xo(t,this.url);this.connectionPromise.then(()=>{this.ws?.send(t)})}async auth(t){let e=this.challenge;if(!e)throw new Error("can't perform auth, no challenge was received");return this.authPromise?this.authPromise:(this.authPromise=new Promise(async(n,r)=>{try{let o=await t(xu(this.url,e)),i=setTimeout(()=>{let s=this.openEventPublishes.get(o.id);s&&(s.reject(new Error("auth timed out")),this.openEventPublishes.delete(o.id))},this.publishTimeout);this.openEventPublishes.set(o.id,{resolve:n,reject:r,timeout:i}),this.send('["AUTH",'+JSON.stringify(o)+"]")}catch(o){console.warn("subscribe auth function failed:",o)}}),this.authPromise)}async publish(t){this.idleSince=void 0,this.ongoingOperations++;let e=new Promise((n,r)=>{let o=setTimeout(()=>{let i=this.openEventPublishes.get(t.id);i&&(i.reject(new Error("publish timed out")),this.openEventPublishes.delete(t.id))},this.publishTimeout);this.openEventPublishes.set(t.id,{resolve:n,reject:r,timeout:o})});return this.send('["EVENT",'+JSON.stringify(t)+"]"),this.ongoingOperations--,this.ongoingOperations===0&&(this.idleSince=Date.now()),e}async count(t,e){this.serial++;let n=e?.id||"count:"+this.serial,r=new Promise((o,i)=>{this.openCountRequests.set(n,{resolve:o,reject:i})});return this.send('["COUNT","'+n+'",'+JSON.stringify(t).substring(1)),r}subscribe(t,e){e.label!=="<forced-ping>"&&(this.idleSince=void 0,this.ongoingOperations++);let n=this.prepareSubscription(t,e);return n.fire(),e.abort&&(e.abort.onabort=()=>n.close(String(e.abort.reason||"<aborted>"))),n}prepareSubscription(t,e){this.serial++;let n=e.id||(e.label?e.label+":":"sub:")+this.serial,r=new Eu(this,n,t,e);return this.openSubs.set(n,r),r}close(){this.skipReconnection=!0,this.reconnectTimeoutHandle&&(clearTimeout(this.reconnectTimeoutHandle),this.reconnectTimeoutHandle=void 0),this.pingIntervalHandle&&(clearInterval(this.pingIntervalHandle),this.pingIntervalHandle=void 0),this.closeAllSubscriptions("relay connection closed by us"),this._connected=!1,this.idleSince=void 0,this.onclose?.(),this.ws?.readyState===this._WebSocket.OPEN&&this.ws?.close()}_onmessage(t){let e=t.data;if(!e)return;let n=wu(e);if(n){let r=this.openSubs.get(n);if(!r)return;let o=mu(e,"id"),i=r.alreadyHaveEvent?.(o);if(r.receivedEvent?.(this,o),i)return}try{let r=JSON.parse(e);switch(r[0]){case"EVENT":{let o=this.openSubs.get(r[1]),i=r[2];this.verifyEvent(i)&&bu(o.filters,i)?o.onevent(i):o.oninvalidevent?.(i),(!o.lastEmitted||o.lastEmitted<i.created_at)&&(o.lastEmitted=i.created_at);return}case"COUNT":{let o=r[1],i=r[2],s=this.openCountRequests.get(o);s&&(s.resolve(i.count),this.openCountRequests.delete(o));return}case"EOSE":{let o=this.openSubs.get(r[1]);if(!o)return;o.receivedEose();return}case"OK":{let o=r[1],i=r[2],s=r[3],a=this.openEventPublishes.get(o);a&&(clearTimeout(a.timeout),i?a.resolve(s):a.reject(new Error(s)),this.openEventPublishes.delete(o));return}case"CLOSED":{let o=r[1],i=this.openSubs.get(o);if(!i)return;i.closed=!0,i.close(r[2]);return}case"NOTICE":{this.onnotice(r[1]);return}case"AUTH":{this.challenge=r[1],this.onauth&&this.auth(this.onauth).catch(o=>{if(!(o instanceof xo))throw o});return}default:{this.openSubs.get(r[1])?.oncustom?.(r);return}}}catch(r){try{let[o,i,s]=JSON.parse(e);console.warn(`[nostr] relay ${this.url} error processing message:`,r,s)}catch{console.warn(`[nostr] relay ${this.url} error processing message:`,r)}return}}},Eu=class{constructor(t,e,n,r){S(this,"relay");S(this,"id");S(this,"lastEmitted");S(this,"closed",!1);S(this,"eosed",!1);S(this,"filters");S(this,"alreadyHaveEvent");S(this,"receivedEvent");S(this,"onevent");S(this,"oninvalidevent");S(this,"oneose");S(this,"onclose");S(this,"oncustom");S(this,"eoseTimeout");S(this,"eoseTimeoutHandle");if(n.length===0)throw new Error("subscription can't be created with zero filters");this.relay=t,this.filters=n,this.id=e,this.alreadyHaveEvent=r.alreadyHaveEvent,this.receivedEvent=r.receivedEvent,this.eoseTimeout=r.eoseTimeout||t.baseEoseTimeout,this.oneose=r.oneose,this.onclose=r.onclose,this.oninvalidevent=r.oninvalidevent,this.onevent=r.onevent||(o=>{console.warn(`onevent() callback not defined for subscription '${this.id}' in relay ${this.relay.url}. event received:`,o)})}fire(){this.relay.send('["REQ","'+this.id+'",'+JSON.stringify(this.filters).substring(1)),this.eoseTimeoutHandle=setTimeout(this.receivedEose.bind(this),this.eoseTimeout)}receivedEose(){this.eosed||(clearTimeout(this.eoseTimeoutHandle),this.eosed=!0,this.oneose?.())}close(t="closed by caller"){if(!this.closed&&this.relay.connected){try{this.relay.send('["CLOSE",'+JSON.stringify(this.id)+"]")}catch(e){if(!(e instanceof xo))throw e}this.closed=!0}this.relay.openSubs.delete(this.id),this.relay.ongoingOperations--,this.relay.ongoingOperations===0&&(this.relay.idleSince=Date.now()),this.onclose?.(t)}},vu=t=>(t[dt]=!0,!0),Su=class{constructor(t){S(this,"relays",new Map);S(this,"seenOn",new Map);S(this,"trackRelays",!1);S(this,"verifyEvent");S(this,"enablePing");S(this,"enableReconnect");S(this,"automaticallyAuth");S(this,"trustedRelayURLs",new Set);S(this,"onRelayConnectionFailure");S(this,"onRelayConnectionSuccess");S(this,"allowConnectingToRelay");S(this,"maxWaitForConnection");S(this,"_WebSocket");this.verifyEvent=t.verifyEvent,this._WebSocket=t.websocketImplementation,this.enablePing=t.enablePing,this.enableReconnect=t.enableReconnect||!1,this.automaticallyAuth=t.automaticallyAuth,this.onRelayConnectionFailure=t.onRelayConnectionFailure,this.onRelayConnectionSuccess=t.onRelayConnectionSuccess,this.allowConnectingToRelay=t.allowConnectingToRelay,this.maxWaitForConnection=t.maxWaitForConnection||3e3}async ensureRelay(t,e){t=ln(t);let n=this.relays.get(t);if(n||(n=new Vs(t,{verifyEvent:this.trustedRelayURLs.has(t)?vu:this.verifyEvent,websocketImplementation:this._WebSocket,enablePing:this.enablePing,enableReconnect:this.enableReconnect}),n.onclose=()=>{this.relays.delete(t)},this.relays.set(t,n)),this.automaticallyAuth){let r=this.automaticallyAuth(t);r&&(n.onauth=r)}try{await n.connect({timeout:e?.connectionTimeout,abort:e?.abort})}catch(r){throw this.relays.delete(t),r}return n}close(t){t.map(ln).forEach(e=>{this.relays.get(e)?.close(),this.relays.delete(e)})}subscribe(t,e,n){let r=[],o=[];for(let i=0;i<t.length;i++){let s=ln(t[i]);r.find(a=>a.url===s)||o.indexOf(s)===-1&&(o.push(s),r.push({url:s,filter:e}))}return this.subscribeMap(r,n)}subscribeMany(t,e,n){return this.subscribe(t,e,n)}subscribeMap(t,e){let n=new Map;for(let u of t){let{url:f,filter:y}=u;n.has(f)||n.set(f,[]),n.get(f).push(y)}let r=Array.from(n.entries()).map(([u,f])=>({url:u,filters:f}));this.trackRelays&&(e.receivedEvent=(u,f)=>{let y=this.seenOn.get(f);y||(y=new Set,this.seenOn.set(f,y)),y.add(u)});let o=new Set,i=[],s=[],a=u=>{s[u]||(s[u]=!0,s.filter(f=>f).length===r.length&&(e.oneose?.(),a=()=>{}))},c=[],l=(u,f)=>{c[u]||(a(u),c[u]=f,c.filter(y=>y).length===r.length&&(e.onclose?.(c),l=()=>{}))},d=u=>{if(e.alreadyHaveEvent?.(u))return!0;let f=o.has(u);return o.add(u),f},g=Promise.all(r.map(async({url:u,filters:f},y)=>{if(this.allowConnectingToRelay?.(u,["read",f])===!1){l(y,"connection skipped by allowConnectingToRelay");return}let b;try{b=await this.ensureRelay(u,{connectionTimeout:this.maxWaitForConnection<(e.maxWait||0)?Math.max(e.maxWait*.8,e.maxWait-1e3):this.maxWaitForConnection,abort:e.abort})}catch(R){this.onRelayConnectionFailure?.(u),l(y,R?.message||String(R));return}this.onRelayConnectionSuccess?.(u);let v=b.subscribe(f,{...e,oneose:()=>a(y),onclose:R=>{R.startsWith("auth-required: ")&&e.onauth?b.auth(e.onauth).then(()=>{b.subscribe(f,{...e,oneose:()=>a(y),onclose:O=>{l(y,O)},alreadyHaveEvent:d,eoseTimeout:e.maxWait,abort:e.abort})}).catch(O=>{l(y,`auth was required and attempted, but failed with: ${O}`)}):l(y,R)},alreadyHaveEvent:d,eoseTimeout:e.maxWait,abort:e.abort});i.push(v)}));return{async close(u){await g,i.forEach(f=>{f.close(u)})}}}subscribeEose(t,e,n){let r;return r=this.subscribe(t,e,{...n,oneose(){let o="closed automatically on eose";r?r.close(o):n.onclose?.(t.map(i=>o))}}),r}subscribeManyEose(t,e,n){return this.subscribeEose(t,e,n)}async querySync(t,e,n){return new Promise(async r=>{let o=[];this.subscribeEose(t,e,{...n,onevent(i){o.push(i)},onclose(i){r(o)}})})}async get(t,e,n){e.limit=1;let r=await this.querySync(t,e,n);return r.sort((o,i)=>i.created_at-o.created_at),r[0]||null}publish(t,e,n){return t.map(ln).map(async(r,o,i)=>{if(i.indexOf(r)!==o)return Promise.reject("duplicate url");if(this.allowConnectingToRelay?.(r,["write",e])===!1)return Promise.reject("connection skipped by allowConnectingToRelay");let s;try{s=await this.ensureRelay(r,{connectionTimeout:this.maxWaitForConnection<(n?.maxWait||0)?Math.max(n.maxWait*.8,n.maxWait-1e3):this.maxWaitForConnection,abort:n?.abort})}catch(a){return this.onRelayConnectionFailure?.(r),"connection failure: "+String(a)}return s.publish(e).catch(async a=>{if(a instanceof Error&&a.message.startsWith("auth-required: ")&&n?.onauth)return await s.auth(n.onauth),s.publish(e);throw a}).then(a=>{if(this.trackRelays){let c=this.seenOn.get(e.id);c||(c=new Set,this.seenOn.set(e.id,c)),c.add(s)}return a})})}listConnectionStatus(){let t=new Map;return this.relays.forEach((e,n)=>t.set(n,e.connected)),t}destroy(){this.relays.forEach(t=>t.close()),this.relays=new Map}pruneIdleRelays(t=1e4){let e=[];for(let[n,r]of this.relays)r.idleSince&&Date.now()-r.idleSince>=t&&(this.relays.delete(n),e.push(n),r.close());return e}},Ks;try{Ks=WebSocket}catch{}var ku=class extends Su{constructor(t){super({verifyEvent:Ms,websocketImplementation:Ks,maxWaitForConnection:3e3,...t})}},zs;try{zs=fetch}catch{}var Bu=/^bunker:\/\/([0-9a-f]{64})\??([?\/\w:.=&%-]*)$/;async function js(t){let e=t.match(Bu);if(e)try{let n=e[1],r=new URLSearchParams(e[2]);return{pubkey:n,relays:r.getAll("relay"),secret:r.get("secret")}}catch{}return Au(t)}async function Au(t){let e=t.match(hu);if(!e)return null;let[n,r="_",o]=e;try{let i=`https://${o}/.well-known/nostr.json?name=${r}`,s=await(await zs(i,{redirect:"error"})).json(),a=s.names[r],c=s.nip46[a]||[];return{pubkey:a,relays:c,secret:null}}catch{return null}}var _t=class{constructor(t,e){S(this,"params");S(this,"pool");S(this,"subCloser");S(this,"isOpen");S(this,"serial");S(this,"idPrefix");S(this,"listeners");S(this,"waitingForAuth");S(this,"secretKey");S(this,"conversationKey");S(this,"bp");S(this,"cachedPubKey");this.params=e,this.pool=e.pool||new ku,this.secretKey=t,this.isOpen=!1,this.idPrefix=Math.random().toString(36).substring(7),this.serial=0,this.listeners={},this.waitingForAuth={}}static fromBunker(t,e,n={}){if(e.relays.length===0)throw new Error("no relays specified for this bunker");let r=new _t(t,n);return r.conversationKey=mo(t,e.pubkey),r.bp=e,r.setupSubscription(),r}static async fromURI(t,e,n={},r=3e5){let o=new _t(t,n),i=new URL(e),s=Ps(t);return new Promise((a,c)=>{let l=!1,d=o.pool.subscribe(i.searchParams.getAll("relay"),{kinds:[wo],"#p":[s],limit:0},{onevent:async g=>{try{let u=mo(t,g.pubkey),f=Hs(g.content,u);JSON.parse(f).result===i.searchParams.get("secret")&&(d.close(),o.bp={pubkey:g.pubkey,relays:i.searchParams.getAll("relay"),secret:i.searchParams.get("secret")},o.conversationKey=mo(t,g.pubkey),o.setupSubscription(),l=!0,n.skipSwitchRelays||await Promise.race([new Promise(b=>setTimeout(b,1e3)),o.switchRelays()]),a(o))}catch(u){console.warn("failed to process potential connection event",u)}},onclose:()=>{l||c(new Error("subscription closed before connection was established."))},maxWait:typeof r=="number"?r:void 0,abort:typeof r!="number"?r:void 0})})}setupSubscription(){let t=this.listeners,e=this.waitingForAuth,n=this.conversationKey;this.subCloser=this.pool.subscribe(this.bp.relays,{kinds:[wo],authors:[this.bp.pubkey],"#p":[Ps(this.secretKey)],limit:0},{onevent:async r=>{let o=JSON.parse(Hs(r.content,n)),{id:i,result:s,error:a}=o;if(s==="auth_url"&&e[i]){delete e[i],this.params.onauth?this.params.onauth(a):console.warn(`nostr-tools/nip46: remote signer ${this.bp.pubkey} tried to send an "auth_url"='${a}' but there was no onauth() callback configured.`);return}let c=t[i];c&&(a?c.reject(a):s&&c.resolve(s),delete t[i])},onclose:()=>{this.subCloser=void 0}}),this.isOpen=!0}async switchRelays(){try{let t=await this.sendRequest("switch_relays",[]),e=JSON.parse(t);if(!e||JSON.stringify(e.sort())===JSON.stringify(this.bp.relays))return!1;this.bp.relays=e;let n=this.subCloser;return setTimeout(()=>{n.close()},5e3),this.subCloser=void 0,this.setupSubscription(),!0}catch{return!1}}async close(){this.isOpen=!1,this.subCloser.close()}async sendRequest(t,e){return new Promise(async(n,r)=>{try{if(!this.isOpen)throw new Error("this signer is not open anymore, create a new one");this.subCloser||this.setupSubscription(),this.serial++;let o=`${this.idPrefix}-${this.serial}`,i=du(JSON.stringify({id:o,method:t,params:e}),this.conversationKey),s=su({kind:wo,tags:[["p",this.bp.pubkey]],content:i,created_at:Math.floor(Date.now()/1e3)},this.secretKey);this.listeners[o]={resolve:n,reject:r},this.waitingForAuth[o]=!0,await Promise.any(this.pool.publish(this.bp.relays,s))}catch(o){r(o)}})}async ping(){let t=await this.sendRequest("ping",[]);if(t!=="pong")throw new Error(`result is not pong: ${t}`)}async connect(){await this.sendRequest("connect",[this.bp.pubkey,this.bp.secret||""])}async getPublicKey(){return this.cachedPubKey||(this.cachedPubKey=await this.sendRequest("get_public_key",[])),this.cachedPubKey}async signEvent(t){let e=await this.sendRequest("sign_event",[JSON.stringify(t)]),n=JSON.parse(e);if(Ms(n))return n;throw new Error(`event returned from bunker is improperly signed: ${JSON.stringify(n)}`)}async nip04Encrypt(t,e){return await this.sendRequest("nip04_encrypt",[t,e])}async nip04Decrypt(t,e){return await this.sendRequest("nip04_decrypt",[t,e])}async nip44Encrypt(t,e){return await this.sendRequest("nip44_encrypt",[t,e])}async nip44Decrypt(t,e){return await this.sendRequest("nip44_decrypt",[t,e])}};var Ut=Symbol("verified"),Ru=t=>t instanceof Object;function Cu(t){if(!Ru(t)||typeof t.kind!="number"||typeof t.content!="string"||typeof t.created_at!="number"||typeof t.pubkey!="string"||!t.pubkey.match(/^[a-f0-9]{64}$/)||!Array.isArray(t.tags))return!1;for(let e=0;e<t.tags.length;e++){let n=t.tags[e];if(!Array.isArray(n))return!1;for(let r=0;r<n.length;r++)if(typeof n[r]!="string")return!1}return!0}var p0=new TextDecoder("utf-8"),Tu=new TextEncoder,Lu=class{generateSecretKey(){return xe.utils.randomSecretKey()}getPublicKey(t){return ee(xe.getPublicKey(t))}finalizeEvent(t,e){let n=t;return n.pubkey=ee(xe.getPublicKey(e)),n.id=Bo(n),n.sig=ee(xe.sign(ne(Bo(n)),e)),n[Ut]=!0,n}verifyEvent(t){if(typeof t[Ut]=="boolean")return t[Ut];try{let e=Bo(t);if(e!==t.id)return t[Ut]=!1,!1;let n=xe.verify(ne(t.sig),ne(e),ne(t.pubkey));return t[Ut]=n,n}catch{return t[Ut]=!1,!1}}};function Nu(t){if(!Cu(t))throw new Error("can't serialize event with wrong or missing properties");return JSON.stringify([0,t.pubkey,t.created_at,t.kind,t.tags,t.content])}function Bo(t){let e=ue(Tu.encode(Nu(t)));return ee(e)}var Qn=new Lu,y0=Qn.generateSecretKey,Zs=Qn.getPublicKey,Gs=Qn.finalizeEvent,b0=Qn.verifyEvent;var er=new TextDecoder("utf-8"),v0=new TextEncoder;var Iu=5e3;function Ws(t){let{prefix:e,words:n}=yo.decode(t,Iu),r=new Uint8Array(yo.fromWords(n));switch(e){case"nprofile":{let o=Ao(r);if(!o[0]?.[0])throw new Error("missing TLV 0 for nprofile");if(o[0][0].length!==32)throw new Error("TLV 0 should be 32 bytes");return{type:"nprofile",data:{pubkey:ee(o[0][0]),relays:o[1]?o[1].map(i=>er.decode(i)):[]}}}case"nevent":{let o=Ao(r);if(!o[0]?.[0])throw new Error("missing TLV 0 for nevent");if(o[0][0].length!==32)throw new Error("TLV 0 should be 32 bytes");if(o[2]&&o[2][0].length!==32)throw new Error("TLV 2 should be 32 bytes");if(o[3]&&o[3][0].length!==4)throw new Error("TLV 3 should be 4 bytes");return{type:"nevent",data:{id:ee(o[0][0]),relays:o[1]?o[1].map(i=>er.decode(i)):[],author:o[2]?.[0]?ee(o[2][0]):void 0,kind:o[3]?.[0]?parseInt(ee(o[3][0]),16):void 0}}}case"naddr":{let o=Ao(r);if(!o[0]?.[0])throw new Error("missing TLV 0 for naddr");if(!o[2]?.[0])throw new Error("missing TLV 2 for naddr");if(o[2][0].length!==32)throw new Error("TLV 2 should be 32 bytes");if(!o[3]?.[0])throw new Error("missing TLV 3 for naddr");if(o[3][0].length!==4)throw new Error("TLV 3 should be 4 bytes");return{type:"naddr",data:{identifier:er.decode(o[0][0]),pubkey:ee(o[2][0]),kind:parseInt(ee(o[3][0]),16),relays:o[1]?o[1].map(i=>er.decode(i)):[]}}}case"nsec":return{type:e,data:r};case"npub":case"note":return{type:e,data:ee(r)};default:throw new Error(`unknown prefix ${e}`)}}function Ao(t){let e={},n=t;for(;n.length>0;){let r=n[0],o=n[1],i=n.slice(2,2+o);if(n=n.slice(2+o),i.length<o)throw new Error(`not enough data to read on TLV ${r}`);e[r]=e[r]||[],e[r].push(i)}return e}var _u=new TextDecoder("utf-8"),Ys=new TextEncoder,Ro=1,Co=4294967295,To=65536;function Ot(t,e){let n=Kn.getSharedSecret(t,ne("02"+e)).subarray(1,33);return Gn(ue,n,Ys.encode("nip44-v2"))}function Js(t,e){let n=Wn(ue,t,e,76);return{chacha_key:n.subarray(0,32),chacha_nonce:n.subarray(32,44),hmac_key:n.subarray(44,76)}}function Xs(t){if(!Number.isSafeInteger(t)||t<1)throw new Error("expected positive integer");if(t<=32)return 32;let e=2**(Math.floor(Math.log2(t-1))+1),n=e<=256?32:e/8;return n*(Math.floor((t-1)/n)+1)}function Uu(t){if(!Number.isSafeInteger(t)||t<Ro||t>65535)throw new Error("invalid plaintext size: must be between 1 and 65535 bytes");let e=new Uint8Array(2);return new DataView(e.buffer).setUint16(0,t,!1),e}function Ou(t){if(!Number.isSafeInteger(t)||t<To||t>Co)throw new Error("invalid plaintext size: must be between 65536 and 4294967295 bytes");let e=new Uint8Array(4);return new DataView(e.buffer).setUint32(0,t,!1),e}function Pu(t){let e=Ys.encode(t),n=e.length;if(n<Ro||n>Co)throw new Error("invalid plaintext size: must be between 1 and 4294967295 bytes");let r=n>=To?te(new Uint8Array([0,0]),Ou(n)):Uu(n),o=new Uint8Array(Xs(n)-n);return te(r,e,o)}function Hu(t){let e=new DataView(t.buffer,t.byteOffset,t.byteLength),n=e.getUint16(0),r,o;if(n===0){if(r=e.getUint32(2),r<To)throw new Error("invalid padding");o=6}else r=n,o=2;let i=t.subarray(o,o+r);if(r<Ro||r>Co||i.length!==r||t.length!==o+Xs(r))throw new Error("invalid padding");return _u.decode(i)}function Fs(t,e,n){if(n.length!==32)throw new Error("AAD associated data must be 32 bytes");let r=te(n,e);return Ce(ue,t,r)}function Mu(t){if(typeof t!="string")throw new Error("payload must be a valid string");let e=t.length;if(e<132)throw new Error("invalid payload length: "+e);if(t[0]==="#")throw new Error("unknown encryption version");let n;try{n=It.decode(t)}catch(i){throw new Error("invalid base64: "+i.message)}let r=n.length;if(r<99)throw new Error("invalid data length: "+r);let o=n[0];if(o!==2)throw new Error("unknown encryption version "+o);return{nonce:n.subarray(1,33),ciphertext:n.subarray(33,-32),mac:n.subarray(-32)}}function Qs(t,e,n=ke(32)){let{chacha_key:r,chacha_nonce:o,hmac_key:i}=Js(e,n),s=Pu(t),a=ut(r,o,s),c=Fs(i,a,n);return It.encode(te(new Uint8Array([2]),n,a,c))}function un(t,e){let{nonce:n,ciphertext:r,mac:o}=Mu(t),{chacha_key:i,chacha_nonce:s,hmac_key:a}=Js(e,n),c=Fs(a,r,n);if(!Lt(c,o))throw new Error("invalid MAC");let l=ut(i,s,r);return Hu(l)}function fn(){return typeof window<"u"&&!!window.nostr&&typeof window.nostr.signEvent=="function"}var Lo=class{constructor(e,n){this.pubkey=e;this.provider=n;this.method="nip07";this.capabilities={canSignEvents:!0,hasNip44:!!n.nip44},n.nip44&&(this.nip44={encrypt:(r,o)=>n.nip44.encrypt(r,o),decrypt:(r,o)=>n.nip44.decrypt(r,o)})}async signEvent(e){return qu(()=>this.provider.signEvent(e))}async close(){}};async function qu(t){try{return await t()}catch(e){if(!Du(e))throw e;return await new Promise(n=>setTimeout(n,250)),t()}}function Du(t){let e=t instanceof Error?t.message:String(t);return/Request failed|Receiving end does not exist|Extension context invalidated|message port closed|context invalidated/i.test(e)}async function dn(){if(!fn())throw new Error("no-nip07-provider");let t=window.nostr,e=await t.getPublicKey();if(!/^[0-9a-f]{64}$/i.test(e))throw new Error("invalid-pubkey-from-nip07");return new Lo(e.toLowerCase(),t)}var tr=class{constructor(e,n,r,o){this.pubkey=e;this.bunker=n;this.bunkerUri=r;this.clientSecretKey=o;this.method="bunker";this.capabilities={canSignEvents:!0,hasNip44:!0};this.nip44={encrypt:(i,s)=>n.nip44Encrypt(i,s),decrypt:(i,s)=>n.nip44Decrypt(i,s)}}async signEvent(e){let{pubkey:n,...r}=e,o={kind:r.kind,content:r.content,created_at:r.created_at??Math.floor(Date.now()/1e3),tags:r.tags??[]};return await this.bunker.signEvent(o)}async close(){await this.bunker.close()}};async function ea(t){let{uri:e,clientSecretKey:n,abortSignal:r}=t;if(n.length!==32)throw new Error("invalid-client-secret-key");let o=r?await _t.fromURI(n,e,void 0,r):await _t.fromURI(n,e),i=await o.getPublicKey();if(!/^[0-9a-f]{64}$/i.test(i))throw await o.close().catch(()=>{}),new Error("invalid-pubkey-from-bunker");return new tr(i.toLowerCase(),o,e,n)}function ta(t){let{clientPubkeyHex:e,relayUrl:n,secret:r}=t;if(!/^[0-9a-f]{64}$/i.test(e))throw new Error("invalid-client-pubkey");if(!/^wss?:\/\//.test(n))throw new Error("invalid-relay-url");let o=new URLSearchParams({relay:n,secret:r});return t.perms&&t.perms.length>0&&o.set("perms",t.perms.join(",")),t.appName&&o.set("name",t.appName),t.appUrl&&o.set("url",t.appUrl),`nostrconnect://${e}?${o.toString()}`}async function $u(t,e,n){let r,o=new Promise((i,s)=>{r=setTimeout(()=>{n.close().catch(()=>{}),s(new Error("bunker-connect-timeout"))},e)});try{return await Promise.race([t,o])}finally{r!==void 0&&clearTimeout(r)}}async function Pt(t){let e=t.uri.trim();if(!e)throw new Error("empty-bunker-uri");let n=await js(e);if(!n)throw new Error("invalid-bunker-uri");let r=t.clientSecretKey??Vu();if(r.length!==32)throw new Error("invalid-client-secret-key");let o=_t.fromBunker(r,n,{onauth:t.onauth}),i=(async()=>(await o.connect(),o.getPublicKey()))(),s=t.timeoutMs&&t.timeoutMs>0?await $u(i,t.timeoutMs,o):await i;if(!/^[0-9a-f]{64}$/i.test(s))throw await o.close().catch(()=>{}),new Error("invalid-pubkey-from-bunker");return new tr(s.toLowerCase(),o,e,r)}function Vu(){let t=new Uint8Array(32);return crypto.getRandomValues(t),t}var No=class{constructor(e,n){this.pubkey=e;this.privkey=n;this.method="nsec";this.capabilities={canSignEvents:!0,hasNip44:!0};this.nip44={encrypt:async(r,o)=>Qs(o,Ot(this.privkey,r)),decrypt:async(r,o)=>un(o,Ot(this.privkey,r))}}async signEvent(e){let n={kind:e.kind,content:e.content,created_at:e.created_at??Math.floor(Date.now()/1e3),tags:e.tags??[]};return Gs(n,this.privkey)}async close(){this.privkey.fill(0)}};function na(t){let e=t.trim();if(!e)throw new Error("empty-nsec");let n;if(e.startsWith("nsec1")){let o=Ws(e);if(o.type!=="nsec")throw new Error("not-an-nsec");n=o.data}else if(/^[0-9a-f]{64}$/i.test(e)){n=new Uint8Array(32);for(let o=0;o<32;o++)n[o]=parseInt(e.slice(o*2,o*2+2),16)}else throw new Error("invalid-nsec-format");if(n.length!==32)throw new Error("invalid-nsec-length");let r=Zs(n);if(!/^[0-9a-f]{64}$/i.test(r))throw new Error("invalid-pubkey-from-nsec");return new No(r.toLowerCase(),n)}var Ee=class{constructor(e,n){this.pubkey=e;this.authEvent=n;this.method="redirect";this.capabilities={canSignEvents:!1,hasNip44:!1}}async signEvent(e){throw new Error("signer-auth-only: this session was established via redirect and cannot sign new events. Install a NIP-07 extension (bark, Alby) or paste a bunker URI to upgrade.")}async close(){}},nr=class{constructor(e,n,r,o,i,s=!0){this.pubkey=e;this.authEvent=n;this.upgrade=r;this.bunkerUri=o;this.clientSecretKey=i;this.method="bunker";this.capabilities={canSignEvents:s,hasNip44:s},this.upgrade.then(a=>{a&&(this.capabilities.canSignEvents=!0,this.capabilities.hasNip44=!0)}),this.nip44={encrypt:async(a,c)=>(await this.live()).nip44.encrypt(a,c),decrypt:async(a,c)=>(await this.live()).nip44.decrypt(a,c)}}async live(){let e=await this.upgrade;if(!e)throw new Error("signer-auth-only: the redirect bunker handoff did not connect, so this session cannot sign. Reconnect the signer or paste a bunker URI to upgrade.");return e}async signEvent(e){return(await this.live()).signEvent(e)}async close(){let e=await this.upgrade.catch(()=>null);e&&await e.close().catch(()=>{})}};function Pe(t){try{return typeof localStorage<"u"?localStorage.getItem(t):null}catch{return null}}function He(t,e){try{typeof localStorage<"u"&&localStorage.setItem(t,e)}catch{}}function Ye(t){try{typeof localStorage<"u"&&localStorage.removeItem(t)}catch{}}function ra(t){He(F.pubkey,t.pubkey),He(F.method,t.method),He(F.authEvent,t.authEventJson),t.bunkerUri!==void 0&&He(F.bunkerUri,t.bunkerUri),t.bunkerClientSkHex!==void 0&&He(F.bunkerClientSk,t.bunkerClientSkHex),t.expiresAt!==void 0&&He(F.expiresAt,String(t.expiresAt)),t.displayName!==void 0&&He(F.displayName,t.displayName)}function oa(){let t=Pe(F.pubkey),e=Pe(F.method),n=Pe(F.authEvent);if(!t||!e||!n||!/^[0-9a-f]{64}$/i.test(t)||e!=="nip07"&&e!=="redirect"&&e!=="bunker"&&e!=="amber")return null;let r;try{if(r=JSON.parse(n),typeof r!="object"||r===null||r.pubkey!==t)return null}catch{return null}let o=Pe(F.expiresAt),i=o?Number(o):void 0;if(i!==void 0&&Number.isFinite(i)&&Date.now()>i)return Je(),null;let s={pubkey:t,method:e,authEventJson:n},a=Pe(F.bunkerUri),c=Pe(F.bunkerClientSk),l=Pe(F.displayName);return a&&(s.bunkerUri=a),c&&(s.bunkerClientSkHex=c),i!==void 0&&Number.isFinite(i)&&(s.expiresAt=i),l&&(s.displayName=l),s}function Je(){Ye(F.pubkey),Ye(F.method),Ye(F.authEvent),Ye(F.bunkerUri),Ye(F.bunkerClientSk),Ye(F.expiresAt),Ye(F.displayName)}function ht(){let t=Pe(F.clientSk);if(t&&/^[0-9a-f]{64}$/i.test(t))try{return Ku(t)}catch{}let e=new Uint8Array(32);return crypto.getRandomValues(e),He(F.clientSk,Io(e)),e}function rr(t){He(F.pendingRedirect,JSON.stringify(t))}function or(){let t=Pe(F.pendingRedirect);if(!t)return null;try{let e=JSON.parse(t),n=e.challenge,r=e.origin,o=e.appName,i=e.createdAt;return typeof n!="string"||!/^[0-9a-f]{64}$/i.test(n)||typeof r!="string"||r.length===0||typeof o!="string"||o.length===0||typeof i!="number"||!Number.isFinite(i)?null:{challenge:n,origin:r,appName:o,createdAt:i}}catch{return null}}function ir(){Ye(F.pendingRedirect)}function Io(t){let e="";for(let n=0;n<t.length;n++)e+=t[n].toString(16).padStart(2,"0");return e}function Ku(t){if(t.length%2!==0)throw new Error("odd-hex-length");let e=new Uint8Array(t.length/2);for(let n=0;n<e.length;n++)e[n]=parseInt(t.slice(n*2,n*2+2),16);return e}function sr(){return typeof navigator>"u"?!1:/android/i.test(navigator.userAgent)}var ia=/^[0-9a-f]{64}$/i;function zu(t){return{kind:21236,content:"",created_at:Math.floor(Date.now()/1e3),tags:[["challenge",t.challenge],["origin",t.origin],["app",t.appName]]}}function ju(t){let e=zu(t),n=JSON.stringify(e),r=typeof btoa=="function"?btoa(n):Buffer.from(n,"utf-8").toString("base64"),o=t.redirectCallback??`${t.origin}/?signet_amber=1`,i=new URLSearchParams({type:"sign_event",compressionType:"base64",returnType:"event",callbackUrl:o});return`nostrsigner:${r}?${i.toString()}`}function sa(t){if(typeof window>"u")throw new Error("signet-login: amber mode requires a browser environment");let e={challenge:t.challenge,origin:t.origin,appName:t.appName,createdAt:Date.now()};return rr(e),window.location.href=ju(t),new Promise(()=>{})}function Zu(){if(typeof window>"u")return;let t=new URL(window.location.href),e=!1;for(let r of["event","signet_amber","error"])t.searchParams.has(r)&&(t.searchParams.delete(r),e=!0);if(!e)return;let n=t.pathname+(t.search?t.search:"")+t.hash;try{window.history.replaceState(window.history.state,document.title,n)}catch{}}function aa(){if(typeof window>"u")return{kind:"no-callback"};let t=new URLSearchParams(window.location.search);if(!(t.has("signet_amber")||t.has("event")))return{kind:"no-callback"};let n=g=>(ir(),Zu(),g);if(t.get("error")==="denied")return n({kind:"denied"});let r=or();if(!r)return n({kind:"invalid",reason:"no-pending-state"});if(r.origin!==window.location.origin)return n({kind:"invalid",reason:"origin-mismatch"});if(Date.now()-r.createdAt>Tn)return n({kind:"invalid",reason:"pending-stale"});let o=t.get("event");if(!o)return n({kind:"invalid",reason:"no-event-param"});let i;try{let g;try{g=typeof atob=="function"?atob(o):Buffer.from(o,"base64").toString("utf-8")}catch{g=o}i=JSON.parse(g)}catch{return n({kind:"invalid",reason:"event-malformed"})}if(typeof i!="object"||i===null)return n({kind:"invalid",reason:"event-not-object"});let s=i;if(typeof s.id!="string"||!ia.test(s.id)||typeof s.pubkey!="string"||!ia.test(s.pubkey)||typeof s.sig!="string"||!/^[0-9a-f]{128}$/i.test(s.sig)||typeof s.created_at!="number"||!Array.isArray(s.tags)||s.kind!==21236||typeof s.content!="string")return n({kind:"invalid",reason:"event-shape-invalid"});let a=s.tags.find(g=>Array.isArray(g)&&g[0]==="challenge");if(!a||a[1]!==r.challenge)return n({kind:"invalid",reason:"challenge-mismatch"});let c={id:s.id.toLowerCase(),pubkey:s.pubkey.toLowerCase(),kind:21236,created_at:s.created_at,tags:s.tags,content:s.content,sig:s.sig.toLowerCase()},l=new Ee(c.pubkey,c),d={pubkey:c.pubkey,method:"amber",signer:l,authEvent:c};return n({kind:"session",session:d})}var gt=typeof globalThis=="object"&&"crypto"in globalThis?globalThis.crypto:void 0;function pt(t){return t instanceof Uint8Array||ArrayBuffer.isView(t)&&t.constructor.name==="Uint8Array"}function hn(t){if(!Number.isSafeInteger(t)||t<0)throw new Error("positive integer expected, got "+t)}function Ae(t,...e){if(!pt(t))throw new Error("Uint8Array expected");if(e.length>0&&!e.includes(t.length))throw new Error("Uint8Array expected of length "+e+", got length="+t.length)}function ar(t){if(typeof t!="function"||typeof t.create!="function")throw new Error("Hash should be wrapped by utils.createHasher");hn(t.outputLen),hn(t.blockLen)}function Mt(t,e=!0){if(t.destroyed)throw new Error("Hash instance has been destroyed");if(e&&t.finished)throw new Error("Hash#digest() has already been called")}function la(t,e){Ae(t);let n=e.outputLen;if(t.length<n)throw new Error("digestInto() expects output buffer of length at least "+n)}function yt(...t){for(let e=0;e<t.length;e++)t[e].fill(0)}function cr(t){return new DataView(t.buffer,t.byteOffset,t.byteLength)}function Re(t,e){return t<<32-e|t>>>e}var ua=typeof Uint8Array.from([]).toHex=="function"&&typeof Uint8Array.fromHex=="function",Gu=Array.from({length:256},(t,e)=>e.toString(16).padStart(2,"0"));function le(t){if(Ae(t),ua)return t.toHex();let e="";for(let n=0;n<t.length;n++)e+=Gu[t[n]];return e}var Me={_0:48,_9:57,A:65,F:70,a:97,f:102};function ca(t){if(t>=Me._0&&t<=Me._9)return t-Me._0;if(t>=Me.A&&t<=Me.F)return t-(Me.A-10);if(t>=Me.a&&t<=Me.f)return t-(Me.a-10)}function bt(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);if(ua)return Uint8Array.fromHex(t);let e=t.length,n=e/2;if(e%2)throw new Error("hex string expected, got unpadded hex of length "+e);let r=new Uint8Array(n);for(let o=0,i=0;o<n;o++,i+=2){let s=ca(t.charCodeAt(i)),a=ca(t.charCodeAt(i+1));if(s===void 0||a===void 0){let c=t[i]+t[i+1];throw new Error('hex string expected, got non-hex character "'+c+'" at index '+i)}r[o]=s*16+a}return r}function lr(t){if(typeof t!="string")throw new Error("string expected");return new Uint8Array(new TextEncoder().encode(t))}function gn(t){return typeof t=="string"&&(t=lr(t)),Ae(t),t}function pe(...t){let e=0;for(let r=0;r<t.length;r++){let o=t[r];Ae(o),e+=o.length}let n=new Uint8Array(e);for(let r=0,o=0;r<t.length;r++){let i=t[r];n.set(i,o),o+=i.length}return n}var Ht=class{};function fa(t){let e=r=>t().update(gn(r)).digest(),n=t();return e.outputLen=n.outputLen,e.blockLen=n.blockLen,e.create=()=>t(),e}function mt(t=32){if(gt&&typeof gt.getRandomValues=="function")return gt.getRandomValues(new Uint8Array(t));if(gt&&typeof gt.randomBytes=="function")return Uint8Array.from(gt.randomBytes(t));throw new Error("crypto.getRandomValues must be defined")}function Wu(t,e,n,r){if(typeof t.setBigUint64=="function")return t.setBigUint64(e,n,r);let o=BigInt(32),i=BigInt(4294967295),s=Number(n>>o&i),a=Number(n&i),c=r?4:0,l=r?0:4;t.setUint32(e+c,s,r),t.setUint32(e+l,a,r)}function da(t,e,n){return t&e^~t&n}function ha(t,e,n){return t&e^t&n^e&n}var ur=class extends Ht{constructor(e,n,r,o){super(),this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.blockLen=e,this.outputLen=n,this.padOffset=r,this.isLE=o,this.buffer=new Uint8Array(e),this.view=cr(this.buffer)}update(e){Mt(this),e=gn(e),Ae(e);let{view:n,buffer:r,blockLen:o}=this,i=e.length;for(let s=0;s<i;){let a=Math.min(o-this.pos,i-s);if(a===o){let c=cr(e);for(;o<=i-s;s+=o)this.process(c,s);continue}r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===o&&(this.process(n,0),this.pos=0)}return this.length+=e.length,this.roundClean(),this}digestInto(e){Mt(this),la(e,this),this.finished=!0;let{buffer:n,view:r,blockLen:o,isLE:i}=this,{pos:s}=this;n[s++]=128,yt(this.buffer.subarray(s)),this.padOffset>o-s&&(this.process(r,0),s=0);for(let g=s;g<o;g++)n[g]=0;Wu(r,o-8,BigInt(this.length*8),i),this.process(r,0);let a=cr(e),c=this.outputLen;if(c%4)throw new Error("_sha2: outputLen should be aligned to 32bit");let l=c/4,d=this.get();if(l>d.length)throw new Error("_sha2: outputLen bigger than state");for(let g=0;g<l;g++)a.setUint32(4*g,d[g],i)}digest(){let{buffer:e,outputLen:n}=this;this.digestInto(e);let r=e.slice(0,n);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());let{blockLen:n,buffer:r,length:o,finished:i,destroyed:s,pos:a}=this;return e.destroyed=s,e.finished=i,e.length=o,e.pos=a,o%n&&e.buffer.set(r),e}clone(){return this._cloneInto()}},qe=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var Yu=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Xe=new Uint32Array(64),fr=class extends ur{constructor(e=32){super(64,e,8,!1),this.A=qe[0]|0,this.B=qe[1]|0,this.C=qe[2]|0,this.D=qe[3]|0,this.E=qe[4]|0,this.F=qe[5]|0,this.G=qe[6]|0,this.H=qe[7]|0}get(){let{A:e,B:n,C:r,D:o,E:i,F:s,G:a,H:c}=this;return[e,n,r,o,i,s,a,c]}set(e,n,r,o,i,s,a,c){this.A=e|0,this.B=n|0,this.C=r|0,this.D=o|0,this.E=i|0,this.F=s|0,this.G=a|0,this.H=c|0}process(e,n){for(let g=0;g<16;g++,n+=4)Xe[g]=e.getUint32(n,!1);for(let g=16;g<64;g++){let u=Xe[g-15],f=Xe[g-2],y=Re(u,7)^Re(u,18)^u>>>3,b=Re(f,17)^Re(f,19)^f>>>10;Xe[g]=b+Xe[g-7]+y+Xe[g-16]|0}let{A:r,B:o,C:i,D:s,E:a,F:c,G:l,H:d}=this;for(let g=0;g<64;g++){let u=Re(a,6)^Re(a,11)^Re(a,25),f=d+u+da(a,c,l)+Yu[g]+Xe[g]|0,b=(Re(r,2)^Re(r,13)^Re(r,22))+ha(r,o,i)|0;d=l,l=c,c=a,a=s+f|0,s=i,i=o,o=r,r=f+b|0}r=r+this.A|0,o=o+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,c=c+this.F|0,l=l+this.G|0,d=d+this.H|0,this.set(r,o,i,s,a,c,l,d)}roundClean(){yt(Xe)}destroy(){this.set(0,0,0,0,0,0,0,0),yt(this.buffer)}};var qt=fa(()=>new fr);var dr=class extends Ht{constructor(e,n){super(),this.finished=!1,this.destroyed=!1,ar(e);let r=gn(n);if(this.iHash=e.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let o=this.blockLen,i=new Uint8Array(o);i.set(r.length>o?e.create().update(r).digest():r);for(let s=0;s<i.length;s++)i[s]^=54;this.iHash.update(i),this.oHash=e.create();for(let s=0;s<i.length;s++)i[s]^=106;this.oHash.update(i),yt(i)}update(e){return Mt(this),this.iHash.update(e),this}digestInto(e){Mt(this),Ae(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));let{oHash:n,iHash:r,finished:o,destroyed:i,blockLen:s,outputLen:a}=this;return e=e,e.finished=o,e.destroyed=i,e.blockLen=s,e.outputLen=a,e.oHash=n._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}},_o=(t,e,n)=>new dr(t,e).update(n).digest();_o.create=(t,e)=>new dr(t,e);var Po=BigInt(0),Oo=BigInt(1);function pn(t,e=""){if(typeof t!="boolean"){let n=e&&`"${e}"`;throw new Error(n+"expected boolean, got type="+typeof t)}return t}function Fe(t,e,n=""){let r=pt(t),o=t?.length,i=e!==void 0;if(!r||i&&o!==e){let s=n&&`"${n}" `,a=i?` of length ${e}`:"",c=r?`length=${o}`:`type=${typeof t}`;throw new Error(s+"expected Uint8Array"+a+", got "+c)}return t}function yn(t){let e=t.toString(16);return e.length&1?"0"+e:e}function ga(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);return t===""?Po:BigInt("0x"+t)}function De(t){return ga(le(t))}function Ho(t){return Ae(t),ga(le(Uint8Array.from(t).reverse()))}function Dt(t,e){return bt(t.toString(16).padStart(e*2,"0"))}function Mo(t,e){return Dt(t,e).reverse()}function re(t,e,n){let r;if(typeof e=="string")try{r=bt(e)}catch(i){throw new Error(t+" must be hex string or Uint8Array, cause: "+i)}else if(pt(e))r=Uint8Array.from(e);else throw new Error(t+" must be hex string or Uint8Array");let o=r.length;if(typeof n=="number"&&o!==n)throw new Error(t+" of length "+n+" expected, got "+o);return r}var Uo=t=>typeof t=="bigint"&&Po<=t;function bn(t,e,n){return Uo(t)&&Uo(e)&&Uo(n)&&e<=t&&t<n}function pa(t,e,n,r){if(!bn(e,n,r))throw new Error("expected valid "+t+": "+n+" <= n < "+r+", got "+e)}function hr(t){let e;for(e=0;t>Po;t>>=Oo,e+=1);return e}var Qe=t=>(Oo<<BigInt(t))-Oo;function ya(t,e,n){if(typeof t!="number"||t<2)throw new Error("hashLen must be a number");if(typeof e!="number"||e<2)throw new Error("qByteLen must be a number");if(typeof n!="function")throw new Error("hmacFn must be a function");let r=f=>new Uint8Array(f),o=f=>Uint8Array.of(f),i=r(t),s=r(t),a=0,c=()=>{i.fill(1),s.fill(0),a=0},l=(...f)=>n(s,i,...f),d=(f=r(0))=>{s=l(o(0),f),i=l(),f.length!==0&&(s=l(o(1),f),i=l())},g=()=>{if(a++>=1e3)throw new Error("drbg: tried 1000 values");let f=0,y=[];for(;f<e;){i=l();let b=i.slice();y.push(b),f+=i.length}return pe(...y)};return(f,y)=>{c(),d(f);let b;for(;!(b=y(g()));)d();return c(),b}}function mn(t,e,n={}){if(!t||typeof t!="object")throw new Error("expected valid options object");function r(o,i,s){let a=t[o];if(s&&a===void 0)return;let c=typeof a;if(c!==i||a===null)throw new Error(`param "${o}" is invalid: expected ${i}, got ${c}`)}Object.entries(e).forEach(([o,i])=>r(o,i,!1)),Object.entries(n).forEach(([o,i])=>r(o,i,!0))}function qo(t){let e=new WeakMap;return(n,...r)=>{let o=e.get(n);if(o!==void 0)return o;let i=t(n,...r);return e.set(n,i),i}}var ge=BigInt(0),de=BigInt(1),wt=BigInt(2),wa=BigInt(3),xa=BigInt(4),Ea=BigInt(5),Ju=BigInt(7),va=BigInt(8),Xu=BigInt(9),Sa=BigInt(16);function be(t,e){let n=t%e;return n>=ge?n:e+n}function me(t,e,n){let r=t;for(;e-- >ge;)r*=r,r%=n;return r}function ba(t,e){if(t===ge)throw new Error("invert: expected non-zero number");if(e<=ge)throw new Error("invert: expected positive modulus, got "+e);let n=be(t,e),r=e,o=ge,i=de,s=de,a=ge;for(;n!==ge;){let l=r/n,d=r%n,g=o-s*l,u=i-a*l;r=n,n=d,o=s,i=a,s=g,a=u}if(r!==de)throw new Error("invert: does not exist");return be(o,e)}function Do(t,e,n){if(!t.eql(t.sqr(e),n))throw new Error("Cannot find square root")}function ka(t,e){let n=(t.ORDER+de)/xa,r=t.pow(e,n);return Do(t,r,e),r}function Fu(t,e){let n=(t.ORDER-Ea)/va,r=t.mul(e,wt),o=t.pow(r,n),i=t.mul(e,o),s=t.mul(t.mul(i,wt),o),a=t.mul(i,t.sub(s,t.ONE));return Do(t,a,e),a}function Qu(t){let e=et(t),n=Ba(t),r=n(e,e.neg(e.ONE)),o=n(e,r),i=n(e,e.neg(r)),s=(t+Ju)/Sa;return(a,c)=>{let l=a.pow(c,s),d=a.mul(l,r),g=a.mul(l,o),u=a.mul(l,i),f=a.eql(a.sqr(d),c),y=a.eql(a.sqr(g),c);l=a.cmov(l,d,f),d=a.cmov(u,g,y);let b=a.eql(a.sqr(d),c),v=a.cmov(l,d,b);return Do(a,v,c),v}}function Ba(t){if(t<wa)throw new Error("sqrt is not defined for small field");let e=t-de,n=0;for(;e%wt===ge;)e/=wt,n++;let r=wt,o=et(t);for(;ma(o,r)===1;)if(r++>1e3)throw new Error("Cannot find square root: probably non-prime P");if(n===1)return ka;let i=o.pow(r,e),s=(e+de)/wt;return function(c,l){if(c.is0(l))return l;if(ma(c,l)!==1)throw new Error("Cannot find square root");let d=n,g=c.mul(c.ONE,i),u=c.pow(l,e),f=c.pow(l,s);for(;!c.eql(u,c.ONE);){if(c.is0(u))return c.ZERO;let y=1,b=c.sqr(u);for(;!c.eql(b,c.ONE);)if(y++,b=c.sqr(b),y===d)throw new Error("Cannot find square root");let v=de<<BigInt(d-y-1),R=c.pow(g,v);d=y,g=c.sqr(R),u=c.mul(u,g),f=c.mul(f,R)}return f}}function ef(t){return t%xa===wa?ka:t%va===Ea?Fu:t%Sa===Xu?Qu(t):Ba(t)}var tf=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function $o(t){let e={ORDER:"bigint",MASK:"bigint",BYTES:"number",BITS:"number"},n=tf.reduce((r,o)=>(r[o]="function",r),e);return mn(t,n),t}function nf(t,e,n){if(n<ge)throw new Error("invalid exponent, negatives unsupported");if(n===ge)return t.ONE;if(n===de)return e;let r=t.ONE,o=e;for(;n>ge;)n&de&&(r=t.mul(r,o)),o=t.sqr(o),n>>=de;return r}function gr(t,e,n=!1){let r=new Array(e.length).fill(n?t.ZERO:void 0),o=e.reduce((s,a,c)=>t.is0(a)?s:(r[c]=s,t.mul(s,a)),t.ONE),i=t.inv(o);return e.reduceRight((s,a,c)=>t.is0(a)?s:(r[c]=t.mul(s,r[c]),t.mul(s,a)),i),r}function ma(t,e){let n=(t.ORDER-de)/wt,r=t.pow(e,n),o=t.eql(r,t.ONE),i=t.eql(r,t.ZERO),s=t.eql(r,t.neg(t.ONE));if(!o&&!i&&!s)throw new Error("invalid Legendre symbol result");return o?1:i?0:-1}function pr(t,e){e!==void 0&&hn(e);let n=e!==void 0?e:t.toString(2).length,r=Math.ceil(n/8);return{nBitLength:n,nByteLength:r}}function et(t,e,n=!1,r={}){if(t<=ge)throw new Error("invalid field: expected ORDER > 0, got "+t);let o,i,s=!1,a;if(typeof e=="object"&&e!=null){if(r.sqrt||n)throw new Error("cannot specify opts in two arguments");let u=e;u.BITS&&(o=u.BITS),u.sqrt&&(i=u.sqrt),typeof u.isLE=="boolean"&&(n=u.isLE),typeof u.modFromBytes=="boolean"&&(s=u.modFromBytes),a=u.allowedLengths}else typeof e=="number"&&(o=e),r.sqrt&&(i=r.sqrt);let{nBitLength:c,nByteLength:l}=pr(t,o);if(l>2048)throw new Error("invalid field: expected ORDER of <= 2048 bytes");let d,g=Object.freeze({ORDER:t,isLE:n,BITS:c,BYTES:l,MASK:Qe(c),ZERO:ge,ONE:de,allowedLengths:a,create:u=>be(u,t),isValid:u=>{if(typeof u!="bigint")throw new Error("invalid field element: expected bigint, got "+typeof u);return ge<=u&&u<t},is0:u=>u===ge,isValidNot0:u=>!g.is0(u)&&g.isValid(u),isOdd:u=>(u&de)===de,neg:u=>be(-u,t),eql:(u,f)=>u===f,sqr:u=>be(u*u,t),add:(u,f)=>be(u+f,t),sub:(u,f)=>be(u-f,t),mul:(u,f)=>be(u*f,t),pow:(u,f)=>nf(g,u,f),div:(u,f)=>be(u*ba(f,t),t),sqrN:u=>u*u,addN:(u,f)=>u+f,subN:(u,f)=>u-f,mulN:(u,f)=>u*f,inv:u=>ba(u,t),sqrt:i||(u=>(d||(d=ef(t)),d(g,u))),toBytes:u=>n?Mo(u,l):Dt(u,l),fromBytes:(u,f=!0)=>{if(a){if(!a.includes(u.length)||u.length>l)throw new Error("Field.fromBytes: expected "+a+" bytes, got "+u.length);let b=new Uint8Array(l);b.set(u,n?0:b.length-u.length),u=b}if(u.length!==l)throw new Error("Field.fromBytes: expected "+l+" bytes, got "+u.length);let y=n?Ho(u):De(u);if(s&&(y=be(y,t)),!f&&!g.isValid(y))throw new Error("invalid field element: outside of range 0..ORDER");return y},invertBatch:u=>gr(g,u),cmov:(u,f,y)=>y?f:u});return Object.freeze(g)}function Aa(t){if(typeof t!="bigint")throw new Error("field order must be bigint");let e=t.toString(2).length;return Math.ceil(e/8)}function Vo(t){let e=Aa(t);return e+Math.ceil(e/2)}function yr(t,e,n=!1){let r=t.length,o=Aa(e),i=Vo(e);if(r<16||r<i||r>1024)throw new Error("expected "+i+"-1024 bytes of input, got "+r);let s=n?Ho(t):De(t),a=be(s,e-de)+de;return n?Mo(a,o):Dt(a,o)}var $t=BigInt(0),xt=BigInt(1);function wn(t,e){let n=e.negate();return t?n:e}function mr(t,e){let n=gr(t.Fp,e.map(r=>r.Z));return e.map((r,o)=>t.fromAffine(r.toAffine(n[o])))}function La(t,e){if(!Number.isSafeInteger(t)||t<=0||t>e)throw new Error("invalid window size, expected [1.."+e+"], got W="+t)}function Ko(t,e){La(t,e);let n=Math.ceil(e/t)+1,r=2**(t-1),o=2**t,i=Qe(t),s=BigInt(t);return{windows:n,windowSize:r,mask:i,maxNumber:o,shiftBy:s}}function Ra(t,e,n){let{windowSize:r,mask:o,maxNumber:i,shiftBy:s}=n,a=Number(t&o),c=t>>s;a>r&&(a-=i,c+=xt);let l=e*r,d=l+Math.abs(a)-1,g=a===0,u=a<0,f=e%2!==0;return{nextN:c,offset:d,isZero:g,isNeg:u,isNegF:f,offsetF:l}}function rf(t,e){if(!Array.isArray(t))throw new Error("array expected");t.forEach((n,r)=>{if(!(n instanceof e))throw new Error("invalid point at index "+r)})}function of(t,e){if(!Array.isArray(t))throw new Error("array of scalars expected");t.forEach((n,r)=>{if(!e.isValid(n))throw new Error("invalid scalar at index "+r)})}var zo=new WeakMap,Na=new WeakMap;function jo(t){return Na.get(t)||1}function Ca(t){if(t!==$t)throw new Error("invalid wNAF")}var br=class{constructor(e,n){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=n}_unsafeLadder(e,n,r=this.ZERO){let o=e;for(;n>$t;)n&xt&&(r=r.add(o)),o=o.double(),n>>=xt;return r}precomputeWindow(e,n){let{windows:r,windowSize:o}=Ko(n,this.bits),i=[],s=e,a=s;for(let c=0;c<r;c++){a=s,i.push(a);for(let l=1;l<o;l++)a=a.add(s),i.push(a);s=a.double()}return i}wNAF(e,n,r){if(!this.Fn.isValid(r))throw new Error("invalid scalar");let o=this.ZERO,i=this.BASE,s=Ko(e,this.bits);for(let a=0;a<s.windows;a++){let{nextN:c,offset:l,isZero:d,isNeg:g,isNegF:u,offsetF:f}=Ra(r,a,s);r=c,d?i=i.add(wn(u,n[f])):o=o.add(wn(g,n[l]))}return Ca(r),{p:o,f:i}}wNAFUnsafe(e,n,r,o=this.ZERO){let i=Ko(e,this.bits);for(let s=0;s<i.windows&&r!==$t;s++){let{nextN:a,offset:c,isZero:l,isNeg:d}=Ra(r,s,i);if(r=a,!l){let g=n[c];o=o.add(d?g.negate():g)}}return Ca(r),o}getPrecomputes(e,n,r){let o=zo.get(n);return o||(o=this.precomputeWindow(n,e),e!==1&&(typeof r=="function"&&(o=r(o)),zo.set(n,o))),o}cached(e,n,r){let o=jo(e);return this.wNAF(o,this.getPrecomputes(o,e,r),n)}unsafe(e,n,r,o){let i=jo(e);return i===1?this._unsafeLadder(e,n,o):this.wNAFUnsafe(i,this.getPrecomputes(i,e,r),n,o)}createCache(e,n){La(n,this.bits),Na.set(e,n),zo.delete(e)}hasCache(e){return jo(e)!==1}};function Ia(t,e,n,r){let o=e,i=t.ZERO,s=t.ZERO;for(;n>$t||r>$t;)n&xt&&(i=i.add(o)),r&xt&&(s=s.add(o)),o=o.double(),n>>=xt,r>>=xt;return{p1:i,p2:s}}function _a(t,e,n,r){rf(n,t),of(r,e);let o=n.length,i=r.length;if(o!==i)throw new Error("arrays of points and scalars must have equal length");let s=t.ZERO,a=hr(BigInt(o)),c=1;a>12?c=a-3:a>4?c=a-2:a>0&&(c=2);let l=Qe(c),d=new Array(Number(l)+1).fill(s),g=Math.floor((e.BITS-1)/c)*c,u=s;for(let f=g;f>=0;f-=c){d.fill(s);for(let b=0;b<i;b++){let v=r[b],R=Number(v>>BigInt(f)&l);d[R]=d[R].add(n[b])}let y=s;for(let b=d.length-1,v=s;b>0;b--)v=v.add(d[b]),y=y.add(v);if(u=u.add(y),f!==0)for(let b=0;b<c;b++)u=u.double()}return u}function Ta(t,e,n){if(e){if(e.ORDER!==t)throw new Error("Field.ORDER must match order: Fp == p, Fn == n");return $o(e),e}else return et(t,{isLE:n})}function Ua(t,e,n={},r){if(r===void 0&&(r=t==="edwards"),!e||typeof e!="object")throw new Error(`expected valid ${t} CURVE object`);for(let c of["p","n","h"]){let l=e[c];if(!(typeof l=="bigint"&&l>$t))throw new Error(`CURVE.${c} must be positive bigint`)}let o=Ta(e.p,n.Fp,r),i=Ta(e.n,n.Fn,r),a=["Gx","Gy","a",t==="weierstrass"?"b":"d"];for(let c of a)if(!o.isValid(e[c]))throw new Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return e=Object.freeze(Object.assign({},e)),{CURVE:e,Fp:o,Fn:i}}var Oa=(t,e)=>(t+(t>=0?e:-e)/Pa)/e;function sf(t,e,n){let[[r,o],[i,s]]=e,a=Oa(s*t,n),c=Oa(-o*t,n),l=t-a*r-c*i,d=-a*o-c*s,g=l<Ve,u=d<Ve;g&&(l=-l),u&&(d=-d);let f=Qe(Math.ceil(hr(n)/2))+Vt;if(l<Ve||l>=f||d<Ve||d>=f)throw new Error("splitScalar (endomorphism): failed, k="+t);return{k1neg:g,k1:l,k2neg:u,k2:d}}function Go(t){if(!["compact","recovered","der"].includes(t))throw new Error('Signature format must be "compact", "recovered", or "der"');return t}function Zo(t,e){let n={};for(let r of Object.keys(e))n[r]=t[r]===void 0?e[r]:t[r];return pn(n.lowS,"lowS"),pn(n.prehash,"prehash"),n.format!==void 0&&Go(n.format),n}var Wo=class extends Error{constructor(e=""){super(e)}},$e={Err:Wo,_tlv:{encode:(t,e)=>{let{Err:n}=$e;if(t<0||t>256)throw new n("tlv.encode: wrong tag");if(e.length&1)throw new n("tlv.encode: unpadded data");let r=e.length/2,o=yn(r);if(o.length/2&128)throw new n("tlv.encode: long form length too big");let i=r>127?yn(o.length/2|128):"";return yn(t)+i+o+e},decode(t,e){let{Err:n}=$e,r=0;if(t<0||t>256)throw new n("tlv.encode: wrong tag");if(e.length<2||e[r++]!==t)throw new n("tlv.decode: wrong tlv");let o=e[r++],i=!!(o&128),s=0;if(!i)s=o;else{let c=o&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=e.subarray(r,r+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let d of l)s=s<<8|d;if(r+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=e.subarray(r,r+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:e.subarray(r+s)}}},_int:{encode(t){let{Err:e}=$e;if(t<Ve)throw new e("integer: negative integers are not allowed");let n=yn(t);if(Number.parseInt(n[0],16)&8&&(n="00"+n),n.length&1)throw new e("unexpected DER parsing assertion: unpadded hex");return n},decode(t){let{Err:e}=$e;if(t[0]&128)throw new e("invalid signature integer: negative");if(t[0]===0&&!(t[1]&128))throw new e("invalid signature integer: unnecessary leading zero");return De(t)}},toSig(t){let{Err:e,_int:n,_tlv:r}=$e,o=re("signature",t),{v:i,l:s}=r.decode(48,o);if(s.length)throw new e("invalid signature: left bytes after parsing");let{v:a,l:c}=r.decode(2,i),{v:l,l:d}=r.decode(2,c);if(d.length)throw new e("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(t){let{_tlv:e,_int:n}=$e,r=e.encode(2,n.encode(t.r)),o=e.encode(2,n.encode(t.s)),i=r+o;return e.encode(48,i)}},Ve=BigInt(0),Vt=BigInt(1),Pa=BigInt(2),wr=BigInt(3),af=BigInt(4);function tt(t,e){let{BYTES:n}=t,r;if(typeof e=="bigint")r=e;else{let o=re("private key",e);try{r=t.fromBytes(o)}catch{throw new Error(`invalid private key: expected ui8a of size ${n}, got ${typeof e}`)}}if(!t.isValidNot0(r))throw new Error("invalid private key: out of range [1..N-1]");return r}function cf(t,e={}){let n=Ua("weierstrass",t,e),{Fp:r,Fn:o}=n,i=n.CURVE,{h:s,n:a}=i;mn(e,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object",wrapPrivateKey:"boolean"});let{endo:c}=e;if(c&&(!r.is0(i.a)||typeof c.beta!="bigint"||!Array.isArray(c.basises)))throw new Error('invalid endo: expected "beta": bigint and "basises": array');let l=Ma(r,o);function d(){if(!r.isOdd)throw new Error("compression is not supported: Field does not have .isOdd()")}function g(T,x,p){let{x:h,y:m}=x.toAffine(),E=r.toBytes(h);if(pn(p,"isCompressed"),p){d();let B=!r.isOdd(m);return pe(Ha(B),E)}else return pe(Uint8Array.of(4),E,r.toBytes(m))}function u(T){Fe(T,void 0,"Point");let{publicKey:x,publicKeyUncompressed:p}=l,h=T.length,m=T[0],E=T.subarray(1);if(h===x&&(m===2||m===3)){let B=r.fromBytes(E);if(!r.isValid(B))throw new Error("bad point: is not on curve, wrong x");let w=b(B),A;try{A=r.sqrt(w)}catch(P){let D=P instanceof Error?": "+P.message:"";throw new Error("bad point: is not on curve, sqrt error"+D)}d();let k=r.isOdd(A);return(m&1)===1!==k&&(A=r.neg(A)),{x:B,y:A}}else if(h===p&&m===4){let B=r.BYTES,w=r.fromBytes(E.subarray(0,B)),A=r.fromBytes(E.subarray(B,B*2));if(!v(w,A))throw new Error("bad point: is not on curve");return{x:w,y:A}}else throw new Error(`bad point: got length ${h}, expected compressed=${x} or uncompressed=${p}`)}let f=e.toBytes||g,y=e.fromBytes||u;function b(T){let x=r.sqr(T),p=r.mul(x,T);return r.add(r.add(p,r.mul(T,i.a)),i.b)}function v(T,x){let p=r.sqr(x),h=b(T);return r.eql(p,h)}if(!v(i.Gx,i.Gy))throw new Error("bad curve params: generator point");let R=r.mul(r.pow(i.a,wr),af),O=r.mul(r.sqr(i.b),BigInt(27));if(r.is0(r.add(R,O)))throw new Error("bad curve params: a or b");function N(T,x,p=!1){if(!r.isValid(x)||p&&r.is0(x))throw new Error(`bad point coordinate ${T}`);return x}function I(T){if(!(T instanceof L))throw new Error("ProjectivePoint expected")}function _(T){if(!c||!c.basises)throw new Error("no endo");return sf(T,c.basises,o.ORDER)}let q=qo((T,x)=>{let{X:p,Y:h,Z:m}=T;if(r.eql(m,r.ONE))return{x:p,y:h};let E=T.is0();x==null&&(x=E?r.ONE:r.inv(m));let B=r.mul(p,x),w=r.mul(h,x),A=r.mul(m,x);if(E)return{x:r.ZERO,y:r.ZERO};if(!r.eql(A,r.ONE))throw new Error("invZ was invalid");return{x:B,y:w}}),j=qo(T=>{if(T.is0()){if(e.allowInfinityPoint&&!r.is0(T.Y))return;throw new Error("bad point: ZERO")}let{x,y:p}=T.toAffine();if(!r.isValid(x)||!r.isValid(p))throw new Error("bad point: x or y not field elements");if(!v(x,p))throw new Error("bad point: equation left != right");if(!T.isTorsionFree())throw new Error("bad point: not in prime-order subgroup");return!0});function Z(T,x,p,h,m){return p=new L(r.mul(p.X,T),p.Y,p.Z),x=wn(h,x),p=wn(m,p),x.add(p)}class L{constructor(x,p,h){this.X=N("x",x),this.Y=N("y",p,!0),this.Z=N("z",h),Object.freeze(this)}static CURVE(){return i}static fromAffine(x){let{x:p,y:h}=x||{};if(!x||!r.isValid(p)||!r.isValid(h))throw new Error("invalid affine point");if(x instanceof L)throw new Error("projective point not allowed");return r.is0(p)&&r.is0(h)?L.ZERO:new L(p,h,r.ONE)}static fromBytes(x){let p=L.fromAffine(y(Fe(x,void 0,"point")));return p.assertValidity(),p}static fromHex(x){return L.fromBytes(re("pointHex",x))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(x=8,p=!0){return $.createCache(this,x),p||this.multiply(wr),this}assertValidity(){j(this)}hasEvenY(){let{y:x}=this.toAffine();if(!r.isOdd)throw new Error("Field doesn't support isOdd");return!r.isOdd(x)}equals(x){I(x);let{X:p,Y:h,Z:m}=this,{X:E,Y:B,Z:w}=x,A=r.eql(r.mul(p,w),r.mul(E,m)),k=r.eql(r.mul(h,w),r.mul(B,m));return A&&k}negate(){return new L(this.X,r.neg(this.Y),this.Z)}double(){let{a:x,b:p}=i,h=r.mul(p,wr),{X:m,Y:E,Z:B}=this,w=r.ZERO,A=r.ZERO,k=r.ZERO,C=r.mul(m,m),P=r.mul(E,E),D=r.mul(B,B),M=r.mul(m,E);return M=r.add(M,M),k=r.mul(m,B),k=r.add(k,k),w=r.mul(x,k),A=r.mul(h,D),A=r.add(w,A),w=r.sub(P,A),A=r.add(P,A),A=r.mul(w,A),w=r.mul(M,w),k=r.mul(h,k),D=r.mul(x,D),M=r.sub(C,D),M=r.mul(x,M),M=r.add(M,k),k=r.add(C,C),C=r.add(k,C),C=r.add(C,D),C=r.mul(C,M),A=r.add(A,C),D=r.mul(E,B),D=r.add(D,D),C=r.mul(D,M),w=r.sub(w,C),k=r.mul(D,P),k=r.add(k,k),k=r.add(k,k),new L(w,A,k)}add(x){I(x);let{X:p,Y:h,Z:m}=this,{X:E,Y:B,Z:w}=x,A=r.ZERO,k=r.ZERO,C=r.ZERO,P=i.a,D=r.mul(i.b,wr),M=r.mul(p,E),U=r.mul(h,B),V=r.mul(m,w),W=r.add(p,h),K=r.add(E,B);W=r.mul(W,K),K=r.add(M,U),W=r.sub(W,K),K=r.add(p,m);let G=r.add(E,w);return K=r.mul(K,G),G=r.add(M,V),K=r.sub(K,G),G=r.add(h,m),A=r.add(B,w),G=r.mul(G,A),A=r.add(U,V),G=r.sub(G,A),C=r.mul(P,K),A=r.mul(D,V),C=r.add(A,C),A=r.sub(U,C),C=r.add(U,C),k=r.mul(A,C),U=r.add(M,M),U=r.add(U,M),V=r.mul(P,V),K=r.mul(D,K),U=r.add(U,V),V=r.sub(M,V),V=r.mul(P,V),K=r.add(K,V),M=r.mul(U,K),k=r.add(k,M),M=r.mul(G,K),A=r.mul(W,A),A=r.sub(A,M),M=r.mul(W,U),C=r.mul(G,C),C=r.add(C,M),new L(A,k,C)}subtract(x){return this.add(x.negate())}is0(){return this.equals(L.ZERO)}multiply(x){let{endo:p}=e;if(!o.isValidNot0(x))throw new Error("invalid scalar: out of range");let h,m,E=B=>$.cached(this,B,w=>mr(L,w));if(p){let{k1neg:B,k1:w,k2neg:A,k2:k}=_(x),{p:C,f:P}=E(w),{p:D,f:M}=E(k);m=P.add(M),h=Z(p.beta,C,D,B,A)}else{let{p:B,f:w}=E(x);h=B,m=w}return mr(L,[h,m])[0]}multiplyUnsafe(x){let{endo:p}=e,h=this;if(!o.isValid(x))throw new Error("invalid scalar: out of range");if(x===Ve||h.is0())return L.ZERO;if(x===Vt)return h;if($.hasCache(this))return this.multiply(x);if(p){let{k1neg:m,k1:E,k2neg:B,k2:w}=_(x),{p1:A,p2:k}=Ia(L,h,E,w);return Z(p.beta,A,k,m,B)}else return $.unsafe(h,x)}multiplyAndAddUnsafe(x,p,h){let m=this.multiplyUnsafe(p).add(x.multiplyUnsafe(h));return m.is0()?void 0:m}toAffine(x){return q(this,x)}isTorsionFree(){let{isTorsionFree:x}=e;return s===Vt?!0:x?x(L,this):$.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:x}=e;return s===Vt?this:x?x(L,this):this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(x=!0){return pn(x,"isCompressed"),this.assertValidity(),f(L,this,x)}toHex(x=!0){return le(this.toBytes(x))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get px(){return this.X}get py(){return this.X}get pz(){return this.Z}toRawBytes(x=!0){return this.toBytes(x)}_setWindowSize(x){this.precompute(x)}static normalizeZ(x){return mr(L,x)}static msm(x,p){return _a(L,o,x,p)}static fromPrivateKey(x){return L.BASE.multiply(tt(o,x))}}L.BASE=new L(i.Gx,i.Gy,r.ONE),L.ZERO=new L(r.ZERO,r.ONE,r.ZERO),L.Fp=r,L.Fn=o;let z=o.BITS,$=new br(L,e.endo?Math.ceil(z/2):z);return L.BASE.precompute(8),L}function Ha(t){return Uint8Array.of(t?2:3)}function Ma(t,e){return{secretKey:e.BYTES,publicKey:1+t.BYTES,publicKeyUncompressed:1+2*t.BYTES,publicKeyHasPrefix:!0,signature:2*e.BYTES}}function lf(t,e={}){let{Fn:n}=t,r=e.randomBytes||mt,o=Object.assign(Ma(t.Fp,n),{seed:Vo(n.ORDER)});function i(f){try{return!!tt(n,f)}catch{return!1}}function s(f,y){let{publicKey:b,publicKeyUncompressed:v}=o;try{let R=f.length;return y===!0&&R!==b||y===!1&&R!==v?!1:!!t.fromBytes(f)}catch{return!1}}function a(f=r(o.seed)){return yr(Fe(f,o.seed,"seed"),n.ORDER)}function c(f,y=!0){return t.BASE.multiply(tt(n,f)).toBytes(y)}function l(f){let y=a(f);return{secretKey:y,publicKey:c(y)}}function d(f){if(typeof f=="bigint")return!1;if(f instanceof t)return!0;let{secretKey:y,publicKey:b,publicKeyUncompressed:v}=o;if(n.allowedLengths||y===b)return;let R=re("key",f).length;return R===b||R===v}function g(f,y,b=!0){if(d(f)===!0)throw new Error("first arg must be private key");if(d(y)===!1)throw new Error("second arg must be public key");let v=tt(n,f);return t.fromHex(y).multiply(v).toBytes(b)}return Object.freeze({getPublicKey:c,getSharedSecret:g,keygen:l,Point:t,utils:{isValidSecretKey:i,isValidPublicKey:s,randomSecretKey:a,isValidPrivateKey:i,randomPrivateKey:a,normPrivateKeyToScalar:f=>tt(n,f),precompute(f=8,y=t.BASE){return y.precompute(f,!1)}},lengths:o})}function uf(t,e,n={}){ar(e),mn(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"});let r=n.randomBytes||mt,o=n.hmac||((p,...h)=>_o(e,p,pe(...h))),{Fp:i,Fn:s}=t,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:d,getSharedSecret:g,utils:u,lengths:f}=lf(t,n),y={prehash:!1,lowS:typeof n.lowS=="boolean"?n.lowS:!1,format:void 0,extraEntropy:!1},b="compact";function v(p){let h=a>>Vt;return p>h}function R(p,h){if(!s.isValidNot0(h))throw new Error(`invalid signature ${p}: out of range 1..Point.Fn.ORDER`);return h}function O(p,h){Go(h);let m=f.signature,E=h==="compact"?m:h==="recovered"?m+1:void 0;return Fe(p,E,`${h} signature`)}class N{constructor(h,m,E){this.r=R("r",h),this.s=R("s",m),E!=null&&(this.recovery=E),Object.freeze(this)}static fromBytes(h,m=b){O(h,m);let E;if(m==="der"){let{r:k,s:C}=$e.toSig(Fe(h));return new N(k,C)}m==="recovered"&&(E=h[0],m="compact",h=h.subarray(1));let B=s.BYTES,w=h.subarray(0,B),A=h.subarray(B,B*2);return new N(s.fromBytes(w),s.fromBytes(A),E)}static fromHex(h,m){return this.fromBytes(bt(h),m)}addRecoveryBit(h){return new N(this.r,this.s,h)}recoverPublicKey(h){let m=i.ORDER,{r:E,s:B,recovery:w}=this;if(w==null||![0,1,2,3].includes(w))throw new Error("recovery id invalid");if(a*Pa<m&&w>1)throw new Error("recovery id is ambiguous for h>1 curve");let k=w===2||w===3?E+a:E;if(!i.isValid(k))throw new Error("recovery id 2 or 3 invalid");let C=i.toBytes(k),P=t.fromBytes(pe(Ha((w&1)===0),C)),D=s.inv(k),M=_(re("msgHash",h)),U=s.create(-M*D),V=s.create(B*D),W=t.BASE.multiplyUnsafe(U).add(P.multiplyUnsafe(V));if(W.is0())throw new Error("point at infinify");return W.assertValidity(),W}hasHighS(){return v(this.s)}toBytes(h=b){if(Go(h),h==="der")return bt($e.hexFromSig(this));let m=s.toBytes(this.r),E=s.toBytes(this.s);if(h==="recovered"){if(this.recovery==null)throw new Error("recovery bit must be present");return pe(Uint8Array.of(this.recovery),m,E)}return pe(m,E)}toHex(h){return le(this.toBytes(h))}assertValidity(){}static fromCompact(h){return N.fromBytes(re("sig",h),"compact")}static fromDER(h){return N.fromBytes(re("sig",h),"der")}normalizeS(){return this.hasHighS()?new N(this.r,s.neg(this.s),this.recovery):this}toDERRawBytes(){return this.toBytes("der")}toDERHex(){return le(this.toBytes("der"))}toCompactRawBytes(){return this.toBytes("compact")}toCompactHex(){return le(this.toBytes("compact"))}}let I=n.bits2int||function(h){if(h.length>8192)throw new Error("input is too large");let m=De(h),E=h.length*8-c;return E>0?m>>BigInt(E):m},_=n.bits2int_modN||function(h){return s.create(I(h))},q=Qe(c);function j(p){return pa("num < 2^"+c,p,Ve,q),s.toBytes(p)}function Z(p,h){return Fe(p,void 0,"message"),h?Fe(e(p),void 0,"prehashed message"):p}function L(p,h,m){if(["recovered","canonical"].some(U=>U in m))throw new Error("sign() legacy options not supported");let{lowS:E,prehash:B,extraEntropy:w}=Zo(m,y);p=Z(p,B);let A=_(p),k=tt(s,h),C=[j(k),j(A)];if(w!=null&&w!==!1){let U=w===!0?r(f.secretKey):w;C.push(re("extraEntropy",U))}let P=pe(...C),D=A;function M(U){let V=I(U);if(!s.isValidNot0(V))return;let W=s.inv(V),K=t.BASE.multiply(V).toAffine(),G=s.create(K.x);if(G===Ve)return;let oe=s.create(W*s.create(D+G*k));if(oe===Ve)return;let Xt=(K.x===G?0:2)|Number(K.y&Vt),Ft=oe;return E&&v(oe)&&(Ft=s.neg(oe),Xt^=1),new N(G,Ft,Xt)}return{seed:P,k2sig:M}}function z(p,h,m={}){p=re("message",p);let{seed:E,k2sig:B}=L(p,h,m);return ya(e.outputLen,s.BYTES,o)(E,B)}function $(p){let h,m=typeof p=="string"||pt(p),E=!m&&p!==null&&typeof p=="object"&&typeof p.r=="bigint"&&typeof p.s=="bigint";if(!m&&!E)throw new Error("invalid signature, expected Uint8Array, hex string or Signature instance");if(E)h=new N(p.r,p.s);else if(m){try{h=N.fromBytes(re("sig",p),"der")}catch(B){if(!(B instanceof $e.Err))throw B}if(!h)try{h=N.fromBytes(re("sig",p),"compact")}catch{return!1}}return h||!1}function T(p,h,m,E={}){let{lowS:B,prehash:w,format:A}=Zo(E,y);if(m=re("publicKey",m),h=Z(re("message",h),w),"strict"in E)throw new Error("options.strict was renamed to lowS");let k=A===void 0?$(p):N.fromBytes(re("sig",p),A);if(k===!1)return!1;try{let C=t.fromBytes(m);if(B&&k.hasHighS())return!1;let{r:P,s:D}=k,M=_(h),U=s.inv(D),V=s.create(M*U),W=s.create(P*U),K=t.BASE.multiplyUnsafe(V).add(C.multiplyUnsafe(W));return K.is0()?!1:s.create(K.x)===P}catch{return!1}}function x(p,h,m={}){let{prehash:E}=Zo(m,y);return h=Z(h,E),N.fromBytes(p,"recovered").recoverPublicKey(h).toBytes()}return Object.freeze({keygen:l,getPublicKey:d,getSharedSecret:g,utils:u,lengths:f,Point:t,sign:z,verify:T,recoverPublicKey:x,Signature:N,hash:e})}function ff(t){let e={a:t.a,b:t.b,p:t.Fp.ORDER,n:t.n,h:t.h,Gx:t.Gx,Gy:t.Gy},n=t.Fp,r=t.allowedPrivateKeyLengths?Array.from(new Set(t.allowedPrivateKeyLengths.map(s=>Math.ceil(s/2)))):void 0,o=et(e.n,{BITS:t.nBitLength,allowedLengths:r,modFromBytes:t.wrapPrivateKey}),i={Fp:n,Fn:o,allowInfinityPoint:t.allowInfinityPoint,endo:t.endo,isTorsionFree:t.isTorsionFree,clearCofactor:t.clearCofactor,fromBytes:t.fromBytes,toBytes:t.toBytes};return{CURVE:e,curveOpts:i}}function df(t){let{CURVE:e,curveOpts:n}=ff(t),r={hmac:t.hmac,randomBytes:t.randomBytes,lowS:t.lowS,bits2int:t.bits2int,bits2int_modN:t.bits2int_modN};return{CURVE:e,curveOpts:n,hash:t.hash,ecdsaOpts:r}}function hf(t,e){let n=e.Point;return Object.assign({},e,{ProjectivePoint:n,CURVE:Object.assign({},t,pr(n.Fn.ORDER,n.Fn.BITS))})}function qa(t){let{CURVE:e,curveOpts:n,hash:r,ecdsaOpts:o}=df(t),i=cf(e,n),s=uf(i,r,o);return hf(t,s)}function Da(t,e){let n=r=>qa({...t,hash:r});return{...n(e),create:n}}var Kt={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},gf={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]},pf=BigInt(0),$a=BigInt(1),Yo=BigInt(2);function yf(t){let e=Kt.p,n=BigInt(3),r=BigInt(6),o=BigInt(11),i=BigInt(22),s=BigInt(23),a=BigInt(44),c=BigInt(88),l=t*t*t%e,d=l*l*t%e,g=me(d,n,e)*d%e,u=me(g,n,e)*d%e,f=me(u,Yo,e)*l%e,y=me(f,o,e)*f%e,b=me(y,i,e)*y%e,v=me(b,a,e)*b%e,R=me(v,c,e)*v%e,O=me(R,a,e)*b%e,N=me(O,n,e)*d%e,I=me(N,s,e)*y%e,_=me(I,r,e)*l%e,q=me(_,Yo,e);if(!xr.eql(xr.sqr(q),t))throw new Error("Cannot find square root");return q}var xr=et(Kt.p,{sqrt:yf}),za=Da({...Kt,Fp:xr,lowS:!0,endo:gf},qt),Va={};function Er(t,...e){let n=Va[t];if(n===void 0){let r=qt(lr(t));n=pe(r,r),Va[t]=n}return qt(pe(n,...e))}var Xo=t=>t.toBytes(!0).slice(1),zt=za.Point,Fo=t=>t%Yo===pf;function Jo(t){let{Fn:e,BASE:n}=zt,r=tt(e,t),o=n.multiply(r);return{scalar:Fo(o.y)?r:e.neg(r),bytes:Xo(o)}}function ja(t){let e=xr;if(!e.isValidNot0(t))throw new Error("invalid x: Fail if x \u2265 p");let n=e.create(t*t),r=e.create(n*t+BigInt(7)),o=e.sqrt(r);Fo(o)||(o=e.neg(o));let i=zt.fromAffine({x:t,y:o});return i.assertValidity(),i}var xn=De;function Za(...t){return zt.Fn.create(xn(Er("BIP0340/challenge",...t)))}function Ka(t){return Jo(t).bytes}function bf(t,e,n=mt(32)){let{Fn:r}=zt,o=re("message",t),{bytes:i,scalar:s}=Jo(e),a=re("auxRand",n,32),c=r.toBytes(s^xn(Er("BIP0340/aux",a))),l=Er("BIP0340/nonce",c,i,o),{bytes:d,scalar:g}=Jo(l),u=Za(d,i,o),f=new Uint8Array(64);if(f.set(d,0),f.set(r.toBytes(r.create(g+u*s)),32),!Ga(f,o,i))throw new Error("sign: Invalid signature produced");return f}function Ga(t,e,n){let{Fn:r,BASE:o}=zt,i=re("signature",t,64),s=re("message",e),a=re("publicKey",n,32);try{let c=ja(xn(a)),l=xn(i.subarray(0,32));if(!bn(l,$a,Kt.p))return!1;let d=xn(i.subarray(32,64));if(!bn(d,$a,Kt.n))return!1;let g=Za(r.toBytes(l),Xo(c),s),u=o.multiplyUnsafe(d).add(c.multiplyUnsafe(r.neg(g))),{x:f,y}=u.toAffine();return!(u.is0()||!Fo(y)||f!==l)}catch{return!1}}var Te=(()=>{let n=(o=mt(48))=>yr(o,Kt.n);za.utils.randomSecretKey;function r(o){let i=n(o);return{secretKey:i,publicKey:Ka(i)}}return{keygen:r,getPublicKey:Ka,sign:bf,verify:Ga,Point:zt,utils:{randomSecretKey:n,randomPrivateKey:n,taggedHash:Er,lift_x:ja,pointToBytes:Xo,numberToBytesBE:Dt,bytesToNumberBE:De,mod:be},lengths:{secretKey:32,publicKey:32,publicKeyHasPrefix:!1,signature:64,seed:48}}})();var Qo=qt;function mf(t){return t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;")}function wf(){let t=new Uint8Array(16);return crypto.getRandomValues(t),Array.from(t,e=>e.toString(16).padStart(2,"0")).join("")}function vr(t,e){let n=t.find(r=>r[0]===e);return n?n[1]:void 0}function Ke(t){let e=new Uint8Array(t.length/2);for(let n=0;n<e.length;n++)e[n]=parseInt(t.substr(n*2,2),16);return e}async function xf(t){if(!t.id||!t.pubkey||!t.sig||!t.tags||t.kind!==30470||!/^[0-9a-f]{128}$/i.test(t.sig)||!/^[0-9a-f]{64}$/i.test(t.pubkey)||!/^[0-9a-f]{64}$/i.test(t.id)||t.tags.length>100||t.content.length>65536||t.tags.some(s=>s.some(a=>a.length>1024)))return!1;let e=t.tags.map(s=>s[0]);if(!e.includes("tier")||!e.includes("age-range")||!e.includes("entity-type"))return!1;let n=JSON.stringify([0,t.pubkey,t.created_at,t.kind,t.tags,t.content]),r=new TextEncoder,o=Qo(r.encode(n));if(le(o)!==t.id.toLowerCase())return!1;try{let s=Ke(t.sig),a=Ke(t.id),c=Ke(t.pubkey);return Te.verify(s,a,c)}catch{return!1}}function Ef(t,e){if(t===e||t==="18+"&&e==="18+")return!0;let n=["0-3","4-7","8-12","13-17","18+"],r=n.indexOf(t),o=n.indexOf(e);return r===-1||o===-1?!1:e==="18+"?t==="18+":t===e}async function vf(t,e){if(e==null||!/^https:\/\//i.test(e)||!/^[0-9a-f]{64}$/i.test(t))return null;try{let n=await fetch(`${e}/status/${t}`,{signal:AbortSignal.timeout(5e3)});if(!n.ok)return null;let r=await n.json();if(typeof r!="object"||r===null)return null;let o=r;return{confirmed:o.confirmed===!0,method:["A","B","C","D"].includes(o.method)?o.method:null,profession:typeof o.profession=="string"?o.profession:void 0,jurisdiction:typeof o.jurisdiction=="string"?o.jurisdiction:void 0}}catch{return null}}async function Sf(t,e){if(!["0-3","4-7","8-12","13-17","18+"].includes(t))return{verified:!1,ageRange:null,tier:null,entityType:null,credentialId:null,verifierPubkey:null,verifierConfirmed:null,verifierMethod:null,issuedAt:null,expiresAt:null,error:"invalid-age-range"};let r={requiredAgeRange:t,relayUrl:e?.relayUrl||"wss://relay.damus.io",theme:e?.theme||"auto",timeout:e?.timeout||12e4,verifierCheckUrl:e?.verifierCheckUrl!==void 0?e.verifierCheckUrl:"https://verify.signet.forgesworn.dev",acceptUnconfirmed:e?.acceptUnconfirmed||!1,...e};r.timeout=Math.max(5e3,Math.min(r.timeout??12e4,6e5));let o=wf(),i={type:"signet-verify-request",requestId:o,requiredAgeRange:r.requiredAgeRange,relayUrl:r.relayUrl,timestamp:Math.floor(Date.now()/1e3)},s=JSON.stringify(i),a=btoa(s);return new Promise(c=>{let l=document.createElement("style");l.textContent="#signet-verify-dialog::backdrop{background:rgba(0,0,0,0.7)}",document.head.appendChild(l);let d=r.theme==="dark"||r.theme==="auto"&&window.matchMedia("(prefers-color-scheme: dark)").matches,g=d?"#1a1a2e":"#ffffff",u=d?"#e0e0e0":"#1a1a2e",f=d?"#888":"#666",y=document.createElement("dialog");y.id="signet-verify-dialog",y.style.cssText=`border:none;border-radius:16px;padding:32px;max-width:380px;width:90%;text-align:center;box-shadow:0 20px 60px rgba(0,0,0,0.3);background:${g};color:${u};font-family:system-ui,-apple-system,sans-serif;`,y.innerHTML=`
+`);let s=fd(e,n,o),a=Ir.getSymbolSize(e),c=new ed(a);return sd(c,e),ad(c),cd(c,e),bi(c,n,0),e>=7&&ld(c,e),ud(c,s),isNaN(r)&&(r=mi.getBestMask(c,bi.bind(null,c,n))),mi.applyMask(r,c),bi(c,n,r),{modules:c,version:e,errorCorrectionLevel:n,maskPattern:r,segments:o}}qc.create=function(e,n){if(typeof e>"u"||e==="")throw new Error("No input text");let r=pi.M,o,i;return typeof n<"u"&&(r=pi.from(n.errorCorrectionLevel,pi.M),o=Nr.from(n.version),i=mi.from(n.maskPattern),n.toSJISFunc&&Ir.setToSJISFunction(n.toSJISFunc)),hd(e,o,r,i)}});var xi=X(kt=>{function $c(t){if(typeof t=="number"&&(t=t.toString()),typeof t!="string")throw new Error("Color should be defined as hex string");let e=t.slice().replace("#","").split("");if(e.length<3||e.length===5||e.length>8)throw new Error("Invalid hex color: "+t);(e.length===3||e.length===4)&&(e=Array.prototype.concat.apply([],e.map(function(r){return[r,r]}))),e.length===6&&e.push("F","F");let n=parseInt(e.join(""),16);return{r:n>>24&255,g:n>>16&255,b:n>>8&255,a:n&255,hex:"#"+e.slice(0,6).join("")}}kt.getOptions=function(e){e||(e={}),e.color||(e.color={});let n=typeof e.margin>"u"||e.margin===null||e.margin<0?4:e.margin,r=e.width&&e.width>=21?e.width:void 0,o=e.scale||4;return{width:r,scale:r?4:o,margin:n,color:{dark:$c(e.color.dark||"#000000ff"),light:$c(e.color.light||"#ffffffff")},type:e.type,rendererOpts:e.rendererOpts||{}}};kt.getScale=function(e,n){return n.width&&n.width>=e+n.margin*2?n.width/(e+n.margin*2):n.scale};kt.getImageWidth=function(e,n){let r=kt.getScale(e,n);return Math.floor((e+n.margin*2)*r)};kt.qrToImageData=function(e,n,r){let o=n.modules.size,i=n.modules.data,s=kt.getScale(o,r),a=Math.floor((o+r.margin*2)*s),c=r.margin*s,l=[r.color.light,r.color.dark];for(let d=0;d<a;d++)for(let g=0;g<a;g++){let u=(d*a+g)*4,f=r.color.light;if(d>=c&&g>=c&&d<a-c&&g<a-c){let y=Math.floor((d-c)/s),b=Math.floor((g-c)/s);f=l[i[y*o+b]?1:0]}e[u++]=f.r,e[u++]=f.g,e[u++]=f.b,e[u]=f.a}}});var Vc=X(_r=>{var Ei=xi();function gd(t,e,n){t.clearRect(0,0,e.width,e.height),e.style||(e.style={}),e.height=n,e.width=n,e.style.height=n+"px",e.style.width=n+"px"}function pd(){try{return document.createElement("canvas")}catch{throw new Error("You need to specify a canvas element")}}_r.render=function(e,n,r){let o=r,i=n;typeof o>"u"&&(!n||!n.getContext)&&(o=n,n=void 0),n||(i=pd()),o=Ei.getOptions(o);let s=Ei.getImageWidth(e.modules.size,o),a=i.getContext("2d"),c=a.createImageData(s,s);return Ei.qrToImageData(c.data,e,o),gd(a,i,s),a.putImageData(c,0,0),i};_r.renderToDataURL=function(e,n,r){let o=r;typeof o>"u"&&(!n||!n.getContext)&&(o=n,n=void 0),o||(o={});let i=_r.render(e,n,o),s=o.type||"image/png",a=o.rendererOpts||{};return i.toDataURL(s,a.quality)}});var jc=X(zc=>{var yd=xi();function Kc(t,e){let n=t.a/255,r=e+'="'+t.hex+'"';return n<1?r+" "+e+'-opacity="'+n.toFixed(2).slice(1)+'"':r}function vi(t,e,n){let r=t+e;return typeof n<"u"&&(r+=" "+n),r}function bd(t,e,n){let r="",o=0,i=!1,s=0;for(let a=0;a<t.length;a++){let c=Math.floor(a%e),l=Math.floor(a/e);!c&&!i&&(i=!0),t[a]?(s++,a>0&&c>0&&t[a-1]||(r+=i?vi("M",c+n,.5+l+n):vi("m",o,0),o=0,i=!1),c+1<e&&t[a+1]||(r+=vi("h",s),s=0)):o++}return r}zc.render=function(e,n,r){let o=yd.getOptions(n),i=e.modules.size,s=e.modules.data,a=i+o.margin*2,c=o.color.light.a?"<path "+Kc(o.color.light,"fill")+' d="M0 0h'+a+"v"+a+'H0z"/>':"",l="<path "+Kc(o.color.dark,"stroke")+' d="'+bd(s,i,o.margin)+'"/>',d='viewBox="0 0 '+a+" "+a+'"',u='<svg xmlns="http://www.w3.org/2000/svg" '+(o.width?'width="'+o.width+'" height="'+o.width+'" ':"")+d+' shape-rendering="crispEdges">'+c+l+`</svg>
+`;return typeof r=="function"&&r(null,u),u}});var Gc=X(Cn=>{var md=Ya(),Si=Dc(),Zc=Vc(),wd=jc();function ki(t,e,n,r,o){let i=[].slice.call(arguments,1),s=i.length,a=typeof i[s-1]=="function";if(!a&&!md())throw new Error("Callback required as last argument");if(a){if(s<2)throw new Error("Too few arguments provided");s===2?(o=n,n=e,e=r=void 0):s===3&&(e.getContext&&typeof o>"u"?(o=r,r=void 0):(o=r,r=n,n=e,e=void 0))}else{if(s<1)throw new Error("Too few arguments provided");return s===1?(n=e,e=r=void 0):s===2&&!e.getContext&&(r=n,n=e,e=void 0),new Promise(function(c,l){try{let d=Si.create(n,r);c(t(d,e,r))}catch(d){l(d)}})}try{let c=Si.create(n,r);o(null,t(c,e,r))}catch(c){o(c)}}Cn.create=Si.create;Cn.toCanvas=ki.bind(null,Zc.render);Cn.toDataURL=ki.bind(null,Zc.renderToDataURL);Cn.toString=ki.bind(null,function(t,e,n){return wd.render(t,n)})});var Pd={};hl(Pd,{handleCallback:()=>ol,handleRedirectCallback:()=>il,isAndroid:()=>sr,login:()=>nl,logout:()=>sl,restoreSession:()=>rl});var je={relayUrl:"wss://relay.damus.io",signetAppOrigin:"https://mysignet.app",timeout:12e4,theme:"auto",persist:!0,mode:"relay"},Tn=300*1e3,F={pubkey:"signet:login.pubkey",method:"signet:login.method",authEvent:"signet:login.authEvent",bunkerUri:"signet:login.bunkerUri",bunkerClientSk:"signet:login.bunkerClientSk",clientSk:"signet:login.clientSk",expiresAt:"signet:login.expiresAt",displayName:"signet:login.displayName",pendingRedirect:"signet:login.pendingRedirect"};function en(t){return t instanceof Uint8Array||ArrayBuffer.isView(t)&&t.constructor.name==="Uint8Array"}function we(t,e=""){if(!Number.isSafeInteger(t)||t<0){let n=e&&`"${e}" `;throw new Error(`${n}expected integer >= 0, got ${t}`)}}function Y(t,e,n=""){let r=en(t),o=t?.length,i=e!==void 0;if(!r||i&&o!==e){let s=n&&`"${n}" `,a=i?` of length ${e}`:"",c=r?`length=${o}`:`type=${typeof t}`;throw new Error(s+"expected Uint8Array"+a+", got "+c)}return t}function st(t){if(typeof t!="function"||typeof t.create!="function")throw new Error("Hash must wrapped by utils.createHasher");we(t.outputLen),we(t.blockLen)}function At(t,e=!0){if(t.destroyed)throw new Error("Hash instance has been destroyed");if(e&&t.finished)throw new Error("Hash#digest() has already been called")}function Ti(t,e){Y(t,void 0,"digestInto() output");let n=e.outputLen;if(t.length<n)throw new Error('"digestInto() output" expected to be of length >='+n)}function Ne(...t){for(let e=0;e<t.length;e++)t[e].fill(0)}function Ln(t){return new DataView(t.buffer,t.byteOffset,t.byteLength)}function Se(t,e){return t<<32-e|t>>>e}var Li=typeof Uint8Array.from([]).toHex=="function"&&typeof Uint8Array.fromHex=="function",yl=Array.from({length:256},(t,e)=>e.toString(16).padStart(2,"0"));function ee(t){if(Y(t),Li)return t.toHex();let e="";for(let n=0;n<t.length;n++)e+=yl[t[n]];return e}var Le={_0:48,_9:57,A:65,F:70,a:97,f:102};function Ci(t){if(t>=Le._0&&t<=Le._9)return t-Le._0;if(t>=Le.A&&t<=Le.F)return t-(Le.A-10);if(t>=Le.a&&t<=Le.f)return t-(Le.a-10)}function ne(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);if(Li)return Uint8Array.fromHex(t);let e=t.length,n=e/2;if(e%2)throw new Error("hex string expected, got unpadded hex of length "+e);let r=new Uint8Array(n);for(let o=0,i=0;o<n;o++,i+=2){let s=Ci(t.charCodeAt(i)),a=Ci(t.charCodeAt(i+1));if(s===void 0||a===void 0){let c=t[i]+t[i+1];throw new Error('hex string expected, got non-hex character "'+c+'" at index '+i)}r[o]=s*16+a}return r}function te(...t){let e=0;for(let r=0;r<t.length;r++){let o=t[r];Y(o),e+=o.length}let n=new Uint8Array(e);for(let r=0,o=0;r<t.length;r++){let i=t[r];n.set(i,o),o+=i.length}return n}function Ni(t,e={}){let n=(o,i)=>t(i).update(o).digest(),r=t(void 0);return n.outputLen=r.outputLen,n.blockLen=r.blockLen,n.create=o=>t(o),Object.assign(n,e),Object.freeze(n)}function ke(t=32){let e=typeof globalThis=="object"?globalThis.crypto:null;if(typeof e?.getRandomValues!="function")throw new Error("crypto.getRandomValues must be defined");return e.getRandomValues(new Uint8Array(t))}var Ii=t=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,t])});function _i(t,e,n){return t&e^~t&n}function Ui(t,e,n){return t&e^t&n^e&n}var Nn=class{constructor(e,n,r,o){S(this,"blockLen");S(this,"outputLen");S(this,"padOffset");S(this,"isLE");S(this,"buffer");S(this,"view");S(this,"finished",!1);S(this,"length",0);S(this,"pos",0);S(this,"destroyed",!1);this.blockLen=e,this.outputLen=n,this.padOffset=r,this.isLE=o,this.buffer=new Uint8Array(e),this.view=Ln(this.buffer)}update(e){At(this),Y(e);let{view:n,buffer:r,blockLen:o}=this,i=e.length;for(let s=0;s<i;){let a=Math.min(o-this.pos,i-s);if(a===o){let c=Ln(e);for(;o<=i-s;s+=o)this.process(c,s);continue}r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===o&&(this.process(n,0),this.pos=0)}return this.length+=e.length,this.roundClean(),this}digestInto(e){At(this),Ti(e,this),this.finished=!0;let{buffer:n,view:r,blockLen:o,isLE:i}=this,{pos:s}=this;n[s++]=128,Ne(this.buffer.subarray(s)),this.padOffset>o-s&&(this.process(r,0),s=0);for(let g=s;g<o;g++)n[g]=0;r.setBigUint64(o-8,BigInt(this.length*8),i),this.process(r,0);let a=Ln(e),c=this.outputLen;if(c%4)throw new Error("_sha2: outputLen must be aligned to 32bit");let l=c/4,d=this.get();if(l>d.length)throw new Error("_sha2: outputLen bigger than state");for(let g=0;g<l;g++)a.setUint32(4*g,d[g],i)}digest(){let{buffer:e,outputLen:n}=this;this.digestInto(e);let r=e.slice(0,n);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());let{blockLen:n,buffer:r,length:o,finished:i,destroyed:s,pos:a}=this;return e.destroyed=s,e.finished=i,e.length=o,e.pos=a,o%n&&e.buffer.set(r),e}clone(){return this._cloneInto()}},Ie=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var bl=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ze=new Uint32Array(64),Ur=class extends Nn{constructor(e){super(64,e,8,!1)}get(){let{A:e,B:n,C:r,D:o,E:i,F:s,G:a,H:c}=this;return[e,n,r,o,i,s,a,c]}set(e,n,r,o,i,s,a,c){this.A=e|0,this.B=n|0,this.C=r|0,this.D=o|0,this.E=i|0,this.F=s|0,this.G=a|0,this.H=c|0}process(e,n){for(let g=0;g<16;g++,n+=4)Ze[g]=e.getUint32(n,!1);for(let g=16;g<64;g++){let u=Ze[g-15],f=Ze[g-2],y=Se(u,7)^Se(u,18)^u>>>3,b=Se(f,17)^Se(f,19)^f>>>10;Ze[g]=b+Ze[g-7]+y+Ze[g-16]|0}let{A:r,B:o,C:i,D:s,E:a,F:c,G:l,H:d}=this;for(let g=0;g<64;g++){let u=Se(a,6)^Se(a,11)^Se(a,25),f=d+u+_i(a,c,l)+bl[g]+Ze[g]|0,b=(Se(r,2)^Se(r,13)^Se(r,22))+Ui(r,o,i)|0;d=l,l=c,c=a,a=s+f|0,s=i,i=o,o=r,r=f+b|0}r=r+this.A|0,o=o+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,c=c+this.F|0,l=l+this.G|0,d=d+this.H|0,this.set(r,o,i,s,a,c,l,d)}roundClean(){Ne(Ze)}destroy(){this.set(0,0,0,0,0,0,0,0),Ne(this.buffer)}},Or=class extends Ur{constructor(){super(32);S(this,"A",Ie[0]|0);S(this,"B",Ie[1]|0);S(this,"C",Ie[2]|0);S(this,"D",Ie[3]|0);S(this,"E",Ie[4]|0);S(this,"F",Ie[5]|0);S(this,"G",Ie[6]|0);S(this,"H",Ie[7]|0)}};var ue=Ni(()=>new Or,Ii(1));var Hr=BigInt(0),Pr=BigInt(1);function tn(t,e=""){if(typeof t!="boolean"){let n=e&&`"${e}" `;throw new Error(n+"expected boolean, got type="+typeof t)}return t}function Oi(t){if(typeof t=="bigint"){if(!In(t))throw new Error("positive bigint expected, got "+t)}else we(t);return t}function nn(t){let e=Oi(t).toString(16);return e.length&1?"0"+e:e}function Pi(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);return t===""?Hr:BigInt("0x"+t)}function Ge(t){return Pi(ee(t))}function Mr(t){return Pi(ee(ml(Y(t)).reverse()))}function _n(t,e){we(e),t=Oi(t);let n=ne(t.toString(16).padStart(e*2,"0"));if(n.length!==e)throw new Error("number too large");return n}function qr(t,e){return _n(t,e).reverse()}function ml(t){return Uint8Array.from(t)}function Hi(t){return Uint8Array.from(t,(e,n)=>{let r=e.charCodeAt(0);if(e.length!==1||r>127)throw new Error(`string contains non-ASCII character "${t[n]}" with code ${r} at position ${n}`);return r})}var In=t=>typeof t=="bigint"&&Hr<=t;function wl(t,e,n){return In(t)&&In(e)&&In(n)&&e<=t&&t<n}function Mi(t,e,n,r){if(!wl(e,n,r))throw new Error("expected valid "+t+": "+n+" <= n < "+r+", got "+e)}function Dr(t){let e;for(e=0;t>Hr;t>>=Pr,e+=1);return e}var rn=t=>(Pr<<BigInt(t))-Pr;function qi(t,e,n){if(we(t,"hashLen"),we(e,"qByteLen"),typeof n!="function")throw new Error("hmacFn must be a function");let r=v=>new Uint8Array(v),o=Uint8Array.of(),i=Uint8Array.of(0),s=Uint8Array.of(1),a=1e3,c=r(t),l=r(t),d=0,g=()=>{c.fill(1),l.fill(0),d=0},u=(...v)=>n(l,te(c,...v)),f=(v=o)=>{l=u(i,v),c=u(),v.length!==0&&(l=u(s,v),c=u())},y=()=>{if(d++>=a)throw new Error("drbg: tried max amount of iterations");let v=0,R=[];for(;v<e;){c=u();let O=c.slice();R.push(O),v+=c.length}return te(...R)};return(v,R)=>{g(),f(v);let O;for(;!(O=R(y()));)f();return g(),O}}function on(t,e={},n={}){if(!t||typeof t!="object")throw new Error("expected valid options object");function r(i,s,a){let c=t[i];if(a&&c===void 0)return;let l=typeof c;if(l!==s||c===null)throw new Error(`param "${i}" is invalid: expected ${s}, got ${l}`)}let o=(i,s)=>Object.entries(i).forEach(([a,c])=>r(a,c,s));o(e,!1),o(n,!0)}function $r(t){let e=new WeakMap;return(n,...r)=>{let o=e.get(n);if(o!==void 0)return o;let i=t(n,...r);return e.set(n,i),i}}var he=BigInt(0),fe=BigInt(1),at=BigInt(2),Vi=BigInt(3),Ki=BigInt(4),zi=BigInt(5),xl=BigInt(7),ji=BigInt(8),El=BigInt(9),Zi=BigInt(16);function Be(t,e){let n=t%e;return n>=he?n:e+n}function ye(t,e,n){let r=t;for(;e-- >he;)r*=r,r%=n;return r}function Di(t,e){if(t===he)throw new Error("invert: expected non-zero number");if(e<=he)throw new Error("invert: expected positive modulus, got "+e);let n=Be(t,e),r=e,o=he,i=fe,s=fe,a=he;for(;n!==he;){let l=r/n,d=r%n,g=o-s*l,u=i-a*l;r=n,n=d,o=s,i=a,s=g,a=u}if(r!==fe)throw new Error("invert: does not exist");return Be(o,e)}function Kr(t,e,n){if(!t.eql(t.sqr(e),n))throw new Error("Cannot find square root")}function Gi(t,e){let n=(t.ORDER+fe)/Ki,r=t.pow(e,n);return Kr(t,r,e),r}function vl(t,e){let n=(t.ORDER-zi)/ji,r=t.mul(e,at),o=t.pow(r,n),i=t.mul(e,o),s=t.mul(t.mul(i,at),o),a=t.mul(i,t.sub(s,t.ONE));return Kr(t,a,e),a}function Sl(t){let e=Rt(t),n=Wi(t),r=n(e,e.neg(e.ONE)),o=n(e,r),i=n(e,e.neg(r)),s=(t+xl)/Zi;return(a,c)=>{let l=a.pow(c,s),d=a.mul(l,r),g=a.mul(l,o),u=a.mul(l,i),f=a.eql(a.sqr(d),c),y=a.eql(a.sqr(g),c);l=a.cmov(l,d,f),d=a.cmov(u,g,y);let b=a.eql(a.sqr(d),c),v=a.cmov(l,d,b);return Kr(a,v,c),v}}function Wi(t){if(t<Vi)throw new Error("sqrt is not defined for small field");let e=t-fe,n=0;for(;e%at===he;)e/=at,n++;let r=at,o=Rt(t);for(;$i(o,r)===1;)if(r++>1e3)throw new Error("Cannot find square root: probably non-prime P");if(n===1)return Gi;let i=o.pow(r,e),s=(e+fe)/at;return function(c,l){if(c.is0(l))return l;if($i(c,l)!==1)throw new Error("Cannot find square root");let d=n,g=c.mul(c.ONE,i),u=c.pow(l,e),f=c.pow(l,s);for(;!c.eql(u,c.ONE);){if(c.is0(u))return c.ZERO;let y=1,b=c.sqr(u);for(;!c.eql(b,c.ONE);)if(y++,b=c.sqr(b),y===d)throw new Error("Cannot find square root");let v=fe<<BigInt(d-y-1),R=c.pow(g,v);d=y,g=c.sqr(R),u=c.mul(u,g),f=c.mul(f,R)}return f}}function kl(t){return t%Ki===Vi?Gi:t%ji===zi?vl:t%Zi===El?Sl(t):Wi(t)}var Bl=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function zr(t){let e={ORDER:"bigint",BYTES:"number",BITS:"number"},n=Bl.reduce((r,o)=>(r[o]="function",r),e);return on(t,n),t}function Al(t,e,n){if(n<he)throw new Error("invalid exponent, negatives unsupported");if(n===he)return t.ONE;if(n===fe)return e;let r=t.ONE,o=e;for(;n>he;)n&fe&&(r=t.mul(r,o)),o=t.sqr(o),n>>=fe;return r}function Un(t,e,n=!1){let r=new Array(e.length).fill(n?t.ZERO:void 0),o=e.reduce((s,a,c)=>t.is0(a)?s:(r[c]=s,t.mul(s,a)),t.ONE),i=t.inv(o);return e.reduceRight((s,a,c)=>t.is0(a)?s:(r[c]=t.mul(s,r[c]),t.mul(s,a)),i),r}function $i(t,e){let n=(t.ORDER-fe)/at,r=t.pow(e,n),o=t.eql(r,t.ONE),i=t.eql(r,t.ZERO),s=t.eql(r,t.neg(t.ONE));if(!o&&!i&&!s)throw new Error("invalid Legendre symbol result");return o?1:i?0:-1}function Rl(t,e){e!==void 0&&we(e);let n=e!==void 0?e:t.toString(2).length,r=Math.ceil(n/8);return{nBitLength:n,nByteLength:r}}var Vr=class{constructor(e,n={}){S(this,"ORDER");S(this,"BITS");S(this,"BYTES");S(this,"isLE");S(this,"ZERO",he);S(this,"ONE",fe);S(this,"_lengths");S(this,"_sqrt");S(this,"_mod");if(e<=he)throw new Error("invalid field: expected ORDER > 0, got "+e);let r;this.isLE=!1,n!=null&&typeof n=="object"&&(typeof n.BITS=="number"&&(r=n.BITS),typeof n.sqrt=="function"&&(this.sqrt=n.sqrt),typeof n.isLE=="boolean"&&(this.isLE=n.isLE),n.allowedLengths&&(this._lengths=n.allowedLengths?.slice()),typeof n.modFromBytes=="boolean"&&(this._mod=n.modFromBytes));let{nBitLength:o,nByteLength:i}=Rl(e,r);if(i>2048)throw new Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=e,this.BITS=o,this.BYTES=i,this._sqrt=void 0,Object.preventExtensions(this)}create(e){return Be(e,this.ORDER)}isValid(e){if(typeof e!="bigint")throw new Error("invalid field element: expected bigint, got "+typeof e);return he<=e&&e<this.ORDER}is0(e){return e===he}isValidNot0(e){return!this.is0(e)&&this.isValid(e)}isOdd(e){return(e&fe)===fe}neg(e){return Be(-e,this.ORDER)}eql(e,n){return e===n}sqr(e){return Be(e*e,this.ORDER)}add(e,n){return Be(e+n,this.ORDER)}sub(e,n){return Be(e-n,this.ORDER)}mul(e,n){return Be(e*n,this.ORDER)}pow(e,n){return Al(this,e,n)}div(e,n){return Be(e*Di(n,this.ORDER),this.ORDER)}sqrN(e){return e*e}addN(e,n){return e+n}subN(e,n){return e-n}mulN(e,n){return e*n}inv(e){return Di(e,this.ORDER)}sqrt(e){return this._sqrt||(this._sqrt=kl(this.ORDER)),this._sqrt(this,e)}toBytes(e){return this.isLE?qr(e,this.BYTES):_n(e,this.BYTES)}fromBytes(e,n=!1){Y(e);let{_lengths:r,BYTES:o,isLE:i,ORDER:s,_mod:a}=this;if(r){if(!r.includes(e.length)||e.length>o)throw new Error("Field.fromBytes: expected "+r+" bytes, got "+e.length);let l=new Uint8Array(o);l.set(e,i?0:l.length-e.length),e=l}if(e.length!==o)throw new Error("Field.fromBytes: expected "+o+" bytes, got "+e.length);let c=i?Mr(e):Ge(e);if(a&&(c=Be(c,s)),!n&&!this.isValid(c))throw new Error("invalid field element: outside of range 0..ORDER");return c}invertBatch(e){return Un(this,e)}cmov(e,n,r){return r?n:e}};function Rt(t,e={}){return new Vr(t,e)}function Yi(t){if(typeof t!="bigint")throw new Error("field order must be bigint");let e=t.toString(2).length;return Math.ceil(e/8)}function jr(t){let e=Yi(t);return e+Math.ceil(e/2)}function On(t,e,n=!1){Y(t);let r=t.length,o=Yi(e),i=jr(e);if(r<16||r<i||r>1024)throw new Error("expected "+i+"-1024 bytes of input, got "+r);let s=n?Mr(t):Ge(t),a=Be(s,e-fe)+fe;return n?qr(a,o):_n(a,o)}var Ct=BigInt(0),ct=BigInt(1);function sn(t,e){let n=e.negate();return t?n:e}function Yr(t,e){let n=Un(t.Fp,e.map(r=>r.Z));return e.map((r,o)=>t.fromAffine(r.toAffine(n[o])))}function Qi(t,e){if(!Number.isSafeInteger(t)||t<=0||t>e)throw new Error("invalid window size, expected [1.."+e+"], got W="+t)}function Zr(t,e){Qi(t,e);let n=Math.ceil(e/t)+1,r=2**(t-1),o=2**t,i=rn(t),s=BigInt(t);return{windows:n,windowSize:r,mask:i,maxNumber:o,shiftBy:s}}function Ji(t,e,n){let{windowSize:r,mask:o,maxNumber:i,shiftBy:s}=n,a=Number(t&o),c=t>>s;a>r&&(a-=i,c+=ct);let l=e*r,d=l+Math.abs(a)-1,g=a===0,u=a<0,f=e%2!==0;return{nextN:c,offset:d,isZero:g,isNeg:u,isNegF:f,offsetF:l}}var Gr=new WeakMap,es=new WeakMap;function Wr(t){return es.get(t)||1}function Xi(t){if(t!==Ct)throw new Error("invalid wNAF")}var Pn=class{constructor(e,n){S(this,"BASE");S(this,"ZERO");S(this,"Fn");S(this,"bits");this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=n}_unsafeLadder(e,n,r=this.ZERO){let o=e;for(;n>Ct;)n&ct&&(r=r.add(o)),o=o.double(),n>>=ct;return r}precomputeWindow(e,n){let{windows:r,windowSize:o}=Zr(n,this.bits),i=[],s=e,a=s;for(let c=0;c<r;c++){a=s,i.push(a);for(let l=1;l<o;l++)a=a.add(s),i.push(a);s=a.double()}return i}wNAF(e,n,r){if(!this.Fn.isValid(r))throw new Error("invalid scalar");let o=this.ZERO,i=this.BASE,s=Zr(e,this.bits);for(let a=0;a<s.windows;a++){let{nextN:c,offset:l,isZero:d,isNeg:g,isNegF:u,offsetF:f}=Ji(r,a,s);r=c,d?i=i.add(sn(u,n[f])):o=o.add(sn(g,n[l]))}return Xi(r),{p:o,f:i}}wNAFUnsafe(e,n,r,o=this.ZERO){let i=Zr(e,this.bits);for(let s=0;s<i.windows&&r!==Ct;s++){let{nextN:a,offset:c,isZero:l,isNeg:d}=Ji(r,s,i);if(r=a,!l){let g=n[c];o=o.add(d?g.negate():g)}}return Xi(r),o}getPrecomputes(e,n,r){let o=Gr.get(n);return o||(o=this.precomputeWindow(n,e),e!==1&&(typeof r=="function"&&(o=r(o)),Gr.set(n,o))),o}cached(e,n,r){let o=Wr(e);return this.wNAF(o,this.getPrecomputes(o,e,r),n)}unsafe(e,n,r,o){let i=Wr(e);return i===1?this._unsafeLadder(e,n,o):this.wNAFUnsafe(i,this.getPrecomputes(i,e,r),n,o)}createCache(e,n){Qi(n,this.bits),es.set(e,n),Gr.delete(e)}hasCache(e){return Wr(e)!==1}};function ts(t,e,n,r){let o=e,i=t.ZERO,s=t.ZERO;for(;n>Ct||r>Ct;)n&ct&&(i=i.add(o)),r&ct&&(s=s.add(o)),o=o.double(),n>>=ct,r>>=ct;return{p1:i,p2:s}}function Fi(t,e,n){if(e){if(e.ORDER!==t)throw new Error("Field.ORDER must match order: Fp == p, Fn == n");return zr(e),e}else return Rt(t,{isLE:n})}function ns(t,e,n={},r){if(r===void 0&&(r=t==="edwards"),!e||typeof e!="object")throw new Error(`expected valid ${t} CURVE object`);for(let c of["p","n","h"]){let l=e[c];if(!(typeof l=="bigint"&&l>Ct))throw new Error(`CURVE.${c} must be positive bigint`)}let o=Fi(e.p,n.Fp,r),i=Fi(e.n,n.Fn,r),a=["Gx","Gy","a",t==="weierstrass"?"b":"d"];for(let c of a)if(!o.isValid(e[c]))throw new Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return e=Object.freeze(Object.assign({},e)),{CURVE:e,Fp:o,Fn:i}}function Hn(t,e){return function(r){let o=t(r);return{secretKey:o,publicKey:e(o)}}}var Mn=class{constructor(e,n){S(this,"oHash");S(this,"iHash");S(this,"blockLen");S(this,"outputLen");S(this,"finished",!1);S(this,"destroyed",!1);if(st(e),Y(n,void 0,"key"),this.iHash=e.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let r=this.blockLen,o=new Uint8Array(r);o.set(n.length>r?e.create().update(n).digest():n);for(let i=0;i<o.length;i++)o[i]^=54;this.iHash.update(o),this.oHash=e.create();for(let i=0;i<o.length;i++)o[i]^=106;this.oHash.update(o),Ne(o)}update(e){return At(this),this.iHash.update(e),this}digestInto(e){At(this),Y(e,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));let{oHash:n,iHash:r,finished:o,destroyed:i,blockLen:s,outputLen:a}=this;return e=e,e.finished=o,e.destroyed=i,e.blockLen=s,e.outputLen=a,e.oHash=n._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}},Ce=(t,e,n)=>new Mn(t,e).update(n).digest();Ce.create=(t,e)=>new Mn(t,e);var rs=(t,e)=>(t+(t>=0?e:-e)/os)/e;function Cl(t,e,n){let[[r,o],[i,s]]=e,a=rs(s*t,n),c=rs(-o*t,n),l=t-a*r-c*i,d=-a*o-c*s,g=l<_e,u=d<_e;g&&(l=-l),u&&(d=-d);let f=rn(Math.ceil(Dr(n)/2))+Tt;if(l<_e||l>=f||d<_e||d>=f)throw new Error("splitScalar (endomorphism): failed, k="+t);return{k1neg:g,k1:l,k2neg:u,k2:d}}function Xr(t){if(!["compact","recovered","der"].includes(t))throw new Error('Signature format must be "compact", "recovered", or "der"');return t}function Jr(t,e){let n={};for(let r of Object.keys(e))n[r]=t[r]===void 0?e[r]:t[r];return tn(n.lowS,"lowS"),tn(n.prehash,"prehash"),n.format!==void 0&&Xr(n.format),n}var Fr=class extends Error{constructor(e=""){super(e)}},We={Err:Fr,_tlv:{encode:(t,e)=>{let{Err:n}=We;if(t<0||t>256)throw new n("tlv.encode: wrong tag");if(e.length&1)throw new n("tlv.encode: unpadded data");let r=e.length/2,o=nn(r);if(o.length/2&128)throw new n("tlv.encode: long form length too big");let i=r>127?nn(o.length/2|128):"";return nn(t)+i+o+e},decode(t,e){let{Err:n}=We,r=0;if(t<0||t>256)throw new n("tlv.encode: wrong tag");if(e.length<2||e[r++]!==t)throw new n("tlv.decode: wrong tlv");let o=e[r++],i=!!(o&128),s=0;if(!i)s=o;else{let c=o&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=e.subarray(r,r+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let d of l)s=s<<8|d;if(r+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=e.subarray(r,r+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:e.subarray(r+s)}}},_int:{encode(t){let{Err:e}=We;if(t<_e)throw new e("integer: negative integers are not allowed");let n=nn(t);if(Number.parseInt(n[0],16)&8&&(n="00"+n),n.length&1)throw new e("unexpected DER parsing assertion: unpadded hex");return n},decode(t){let{Err:e}=We;if(t[0]&128)throw new e("invalid signature integer: negative");if(t[0]===0&&!(t[1]&128))throw new e("invalid signature integer: unnecessary leading zero");return Ge(t)}},toSig(t){let{Err:e,_int:n,_tlv:r}=We,o=Y(t,void 0,"signature"),{v:i,l:s}=r.decode(48,o);if(s.length)throw new e("invalid signature: left bytes after parsing");let{v:a,l:c}=r.decode(2,i),{v:l,l:d}=r.decode(2,c);if(d.length)throw new e("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(t){let{_tlv:e,_int:n}=We,r=e.encode(2,n.encode(t.r)),o=e.encode(2,n.encode(t.s)),i=r+o;return e.encode(48,i)}},_e=BigInt(0),Tt=BigInt(1),os=BigInt(2),qn=BigInt(3),Tl=BigInt(4);function is(t,e={}){let n=ns("weierstrass",t,e),{Fp:r,Fn:o}=n,i=n.CURVE,{h:s,n:a}=i;on(e,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:c}=e;if(c&&(!r.is0(i.a)||typeof c.beta!="bigint"||!Array.isArray(c.basises)))throw new Error('invalid endo: expected "beta": bigint and "basises": array');let l=as(r,o);function d(){if(!r.isOdd)throw new Error("compression is not supported: Field does not have .isOdd()")}function g(x,p,h){let{x:m,y:E}=p.toAffine(),B=r.toBytes(m);if(tn(h,"isCompressed"),h){d();let w=!r.isOdd(E);return te(ss(w),B)}else return te(Uint8Array.of(4),B,r.toBytes(E))}function u(x){Y(x,void 0,"Point");let{publicKey:p,publicKeyUncompressed:h}=l,m=x.length,E=x[0],B=x.subarray(1);if(m===p&&(E===2||E===3)){let w=r.fromBytes(B);if(!r.isValid(w))throw new Error("bad point: is not on curve, wrong x");let A=b(w),k;try{k=r.sqrt(A)}catch(D){let M=D instanceof Error?": "+D.message:"";throw new Error("bad point: is not on curve, sqrt error"+M)}d();let C=r.isOdd(k);return(E&1)===1!==C&&(k=r.neg(k)),{x:w,y:k}}else if(m===h&&E===4){let w=r.BYTES,A=r.fromBytes(B.subarray(0,w)),k=r.fromBytes(B.subarray(w,w*2));if(!v(A,k))throw new Error("bad point: is not on curve");return{x:A,y:k}}else throw new Error(`bad point: got length ${m}, expected compressed=${p} or uncompressed=${h}`)}let f=e.toBytes||g,y=e.fromBytes||u;function b(x){let p=r.sqr(x),h=r.mul(p,x);return r.add(r.add(h,r.mul(x,i.a)),i.b)}function v(x,p){let h=r.sqr(p),m=b(x);return r.eql(h,m)}if(!v(i.Gx,i.Gy))throw new Error("bad curve params: generator point");let R=r.mul(r.pow(i.a,qn),Tl),O=r.mul(r.sqr(i.b),BigInt(27));if(r.is0(r.add(R,O)))throw new Error("bad curve params: a or b");function N(x,p,h=!1){if(!r.isValid(p)||h&&r.is0(p))throw new Error(`bad point coordinate ${x}`);return p}function I(x){if(!(x instanceof L))throw new Error("Weierstrass Point expected")}function _(x){if(!c||!c.basises)throw new Error("no endo");return Cl(x,c.basises,o.ORDER)}let q=$r((x,p)=>{let{X:h,Y:m,Z:E}=x;if(r.eql(E,r.ONE))return{x:h,y:m};let B=x.is0();p==null&&(p=B?r.ONE:r.inv(E));let w=r.mul(h,p),A=r.mul(m,p),k=r.mul(E,p);if(B)return{x:r.ZERO,y:r.ZERO};if(!r.eql(k,r.ONE))throw new Error("invZ was invalid");return{x:w,y:A}}),j=$r(x=>{if(x.is0()){if(e.allowInfinityPoint&&!r.is0(x.Y))return;throw new Error("bad point: ZERO")}let{x:p,y:h}=x.toAffine();if(!r.isValid(p)||!r.isValid(h))throw new Error("bad point: x or y not field elements");if(!v(p,h))throw new Error("bad point: equation left != right");if(!x.isTorsionFree())throw new Error("bad point: not in prime-order subgroup");return!0});function Z(x,p,h,m,E){return h=new L(r.mul(h.X,x),h.Y,h.Z),p=sn(m,p),h=sn(E,h),p.add(h)}let T=class T{constructor(p,h,m){S(this,"X");S(this,"Y");S(this,"Z");this.X=N("x",p),this.Y=N("y",h,!0),this.Z=N("z",m),Object.freeze(this)}static CURVE(){return i}static fromAffine(p){let{x:h,y:m}=p||{};if(!p||!r.isValid(h)||!r.isValid(m))throw new Error("invalid affine point");if(p instanceof T)throw new Error("projective point not allowed");return r.is0(h)&&r.is0(m)?T.ZERO:new T(h,m,r.ONE)}static fromBytes(p){let h=T.fromAffine(y(Y(p,void 0,"point")));return h.assertValidity(),h}static fromHex(p){return T.fromBytes(ne(p))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(p=8,h=!0){return $.createCache(this,p),h||this.multiply(qn),this}assertValidity(){j(this)}hasEvenY(){let{y:p}=this.toAffine();if(!r.isOdd)throw new Error("Field doesn't support isOdd");return!r.isOdd(p)}equals(p){I(p);let{X:h,Y:m,Z:E}=this,{X:B,Y:w,Z:A}=p,k=r.eql(r.mul(h,A),r.mul(B,E)),C=r.eql(r.mul(m,A),r.mul(w,E));return k&&C}negate(){return new T(this.X,r.neg(this.Y),this.Z)}double(){let{a:p,b:h}=i,m=r.mul(h,qn),{X:E,Y:B,Z:w}=this,A=r.ZERO,k=r.ZERO,C=r.ZERO,P=r.mul(E,E),D=r.mul(B,B),M=r.mul(w,w),U=r.mul(E,B);return U=r.add(U,U),C=r.mul(E,w),C=r.add(C,C),A=r.mul(p,C),k=r.mul(m,M),k=r.add(A,k),A=r.sub(D,k),k=r.add(D,k),k=r.mul(A,k),A=r.mul(U,A),C=r.mul(m,C),M=r.mul(p,M),U=r.sub(P,M),U=r.mul(p,U),U=r.add(U,C),C=r.add(P,P),P=r.add(C,P),P=r.add(P,M),P=r.mul(P,U),k=r.add(k,P),M=r.mul(B,w),M=r.add(M,M),P=r.mul(M,U),A=r.sub(A,P),C=r.mul(M,D),C=r.add(C,C),C=r.add(C,C),new T(A,k,C)}add(p){I(p);let{X:h,Y:m,Z:E}=this,{X:B,Y:w,Z:A}=p,k=r.ZERO,C=r.ZERO,P=r.ZERO,D=i.a,M=r.mul(i.b,qn),U=r.mul(h,B),V=r.mul(m,w),W=r.mul(E,A),K=r.add(h,m),G=r.add(B,w);K=r.mul(K,G),G=r.add(U,V),K=r.sub(K,G),G=r.add(h,E);let oe=r.add(B,A);return G=r.mul(G,oe),oe=r.add(U,W),G=r.sub(G,oe),oe=r.add(m,E),k=r.add(w,A),oe=r.mul(oe,k),k=r.add(V,W),oe=r.sub(oe,k),P=r.mul(D,G),k=r.mul(M,W),P=r.add(k,P),k=r.sub(V,P),P=r.add(V,P),C=r.mul(k,P),V=r.add(U,U),V=r.add(V,U),W=r.mul(D,W),G=r.mul(M,G),V=r.add(V,W),W=r.sub(U,W),W=r.mul(D,W),G=r.add(G,W),U=r.mul(V,G),C=r.add(C,U),U=r.mul(oe,G),k=r.mul(K,k),k=r.sub(k,U),U=r.mul(K,V),P=r.mul(oe,P),P=r.add(P,U),new T(k,C,P)}subtract(p){return this.add(p.negate())}is0(){return this.equals(T.ZERO)}multiply(p){let{endo:h}=e;if(!o.isValidNot0(p))throw new Error("invalid scalar: out of range");let m,E,B=w=>$.cached(this,w,A=>Yr(T,A));if(h){let{k1neg:w,k1:A,k2neg:k,k2:C}=_(p),{p:P,f:D}=B(A),{p:M,f:U}=B(C);E=D.add(U),m=Z(h.beta,P,M,w,k)}else{let{p:w,f:A}=B(p);m=w,E=A}return Yr(T,[m,E])[0]}multiplyUnsafe(p){let{endo:h}=e,m=this;if(!o.isValid(p))throw new Error("invalid scalar: out of range");if(p===_e||m.is0())return T.ZERO;if(p===Tt)return m;if($.hasCache(this))return this.multiply(p);if(h){let{k1neg:E,k1:B,k2neg:w,k2:A}=_(p),{p1:k,p2:C}=ts(T,m,B,A);return Z(h.beta,k,C,E,w)}else return $.unsafe(m,p)}toAffine(p){return q(this,p)}isTorsionFree(){let{isTorsionFree:p}=e;return s===Tt?!0:p?p(T,this):$.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:p}=e;return s===Tt?this:p?p(T,this):this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(p=!0){return tn(p,"isCompressed"),this.assertValidity(),f(T,this,p)}toHex(p=!0){return ee(this.toBytes(p))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}};S(T,"BASE",new T(i.Gx,i.Gy,r.ONE)),S(T,"ZERO",new T(r.ZERO,r.ONE,r.ZERO)),S(T,"Fp",r),S(T,"Fn",o);let L=T,z=o.BITS,$=new Pn(L,e.endo?Math.ceil(z/2):z);return L.BASE.precompute(8),L}function ss(t){return Uint8Array.of(t?2:3)}function as(t,e){return{secretKey:e.BYTES,publicKey:1+t.BYTES,publicKeyUncompressed:1+2*t.BYTES,publicKeyHasPrefix:!0,signature:2*e.BYTES}}function Ll(t,e={}){let{Fn:n}=t,r=e.randomBytes||ke,o=Object.assign(as(t.Fp,n),{seed:jr(n.ORDER)});function i(f){try{let y=n.fromBytes(f);return n.isValidNot0(y)}catch{return!1}}function s(f,y){let{publicKey:b,publicKeyUncompressed:v}=o;try{let R=f.length;return y===!0&&R!==b||y===!1&&R!==v?!1:!!t.fromBytes(f)}catch{return!1}}function a(f=r(o.seed)){return On(Y(f,o.seed,"seed"),n.ORDER)}function c(f,y=!0){return t.BASE.multiply(n.fromBytes(f)).toBytes(y)}function l(f){let{secretKey:y,publicKey:b,publicKeyUncompressed:v}=o;if(!en(f)||"_lengths"in n&&n._lengths||y===b)return;let R=Y(f,void 0,"key").length;return R===b||R===v}function d(f,y,b=!0){if(l(f)===!0)throw new Error("first arg must be private key");if(l(y)===!1)throw new Error("second arg must be public key");let v=n.fromBytes(f);return t.fromBytes(y).multiply(v).toBytes(b)}let g={isValidSecretKey:i,isValidPublicKey:s,randomSecretKey:a},u=Hn(a,c);return Object.freeze({getPublicKey:c,getSharedSecret:d,keygen:u,Point:t,utils:g,lengths:o})}function cs(t,e,n={}){st(e),on(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),n=Object.assign({},n);let r=n.randomBytes||ke,o=n.hmac||((p,h)=>Ce(e,p,h)),{Fp:i,Fn:s}=t,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:d,getSharedSecret:g,utils:u,lengths:f}=Ll(t,n),y={prehash:!0,lowS:typeof n.lowS=="boolean"?n.lowS:!0,format:"compact",extraEntropy:!1},b=a*os<i.ORDER;function v(p){let h=a>>Tt;return p>h}function R(p,h){if(!s.isValidNot0(h))throw new Error(`invalid signature ${p}: out of range 1..Point.Fn.ORDER`);return h}function O(){if(b)throw new Error('"recovered" sig type is not supported for cofactor >2 curves')}function N(p,h){Xr(h);let m=f.signature,E=h==="compact"?m:h==="recovered"?m+1:void 0;return Y(p,E)}class I{constructor(h,m,E){S(this,"r");S(this,"s");S(this,"recovery");if(this.r=R("r",h),this.s=R("s",m),E!=null){if(O(),![0,1,2,3].includes(E))throw new Error("invalid recovery id");this.recovery=E}Object.freeze(this)}static fromBytes(h,m=y.format){N(h,m);let E;if(m==="der"){let{r:k,s:C}=We.toSig(Y(h));return new I(k,C)}m==="recovered"&&(E=h[0],m="compact",h=h.subarray(1));let B=f.signature/2,w=h.subarray(0,B),A=h.subarray(B,B*2);return new I(s.fromBytes(w),s.fromBytes(A),E)}static fromHex(h,m){return this.fromBytes(ne(h),m)}assertRecovery(){let{recovery:h}=this;if(h==null)throw new Error("invalid recovery id: must be present");return h}addRecoveryBit(h){return new I(this.r,this.s,h)}recoverPublicKey(h){let{r:m,s:E}=this,B=this.assertRecovery(),w=B===2||B===3?m+a:m;if(!i.isValid(w))throw new Error("invalid recovery id: sig.r+curve.n != R.x");let A=i.toBytes(w),k=t.fromBytes(te(ss((B&1)===0),A)),C=s.inv(w),P=q(Y(h,void 0,"msgHash")),D=s.create(-P*C),M=s.create(E*C),U=t.BASE.multiplyUnsafe(D).add(k.multiplyUnsafe(M));if(U.is0())throw new Error("invalid recovery: point at infinify");return U.assertValidity(),U}hasHighS(){return v(this.s)}toBytes(h=y.format){if(Xr(h),h==="der")return ne(We.hexFromSig(this));let{r:m,s:E}=this,B=s.toBytes(m),w=s.toBytes(E);return h==="recovered"?(O(),te(Uint8Array.of(this.assertRecovery()),B,w)):te(B,w)}toHex(h){return ee(this.toBytes(h))}}let _=n.bits2int||function(h){if(h.length>8192)throw new Error("input is too large");let m=Ge(h),E=h.length*8-c;return E>0?m>>BigInt(E):m},q=n.bits2int_modN||function(h){return s.create(_(h))},j=rn(c);function Z(p){return Mi("num < 2^"+c,p,_e,j),s.toBytes(p)}function L(p,h){return Y(p,void 0,"message"),h?Y(e(p),void 0,"prehashed message"):p}function z(p,h,m){let{lowS:E,prehash:B,extraEntropy:w}=Jr(m,y);p=L(p,B);let A=q(p),k=s.fromBytes(h);if(!s.isValidNot0(k))throw new Error("invalid private key");let C=[Z(k),Z(A)];if(w!=null&&w!==!1){let U=w===!0?r(f.secretKey):w;C.push(Y(U,void 0,"extraEntropy"))}let P=te(...C),D=A;function M(U){let V=_(U);if(!s.isValidNot0(V))return;let W=s.inv(V),K=t.BASE.multiply(V).toAffine(),G=s.create(K.x);if(G===_e)return;let oe=s.create(W*s.create(D+G*k));if(oe===_e)return;let Xt=(K.x===G?0:2)|Number(K.y&Tt),Ft=oe;return E&&v(oe)&&(Ft=s.neg(oe),Xt^=1),new I(G,Ft,b?void 0:Xt)}return{seed:P,k2sig:M}}function $(p,h,m={}){let{seed:E,k2sig:B}=z(p,h,m);return qi(e.outputLen,s.BYTES,o)(E,B).toBytes(m.format)}function T(p,h,m,E={}){let{lowS:B,prehash:w,format:A}=Jr(E,y);if(m=Y(m,void 0,"publicKey"),h=L(h,w),!en(p)){let k=p instanceof I?", use sig.toBytes()":"";throw new Error("verify expects Uint8Array signature"+k)}N(p,A);try{let k=I.fromBytes(p,A),C=t.fromBytes(m);if(B&&k.hasHighS())return!1;let{r:P,s:D}=k,M=q(h),U=s.inv(D),V=s.create(M*U),W=s.create(P*U),K=t.BASE.multiplyUnsafe(V).add(C.multiplyUnsafe(W));return K.is0()?!1:s.create(K.x)===P}catch{return!1}}function x(p,h,m={}){let{prehash:E}=Jr(m,y);return h=L(h,E),I.fromBytes(p,"recovered").recoverPublicKey(h).toBytes()}return Object.freeze({keygen:l,getPublicKey:d,getSharedSecret:g,utils:u,lengths:f,Point:t,sign:$,verify:T,recoverPublicKey:x,Signature:I,hash:e})}var Vn={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},Nl={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]},Il=BigInt(0),Qr=BigInt(2);function _l(t){let e=Vn.p,n=BigInt(3),r=BigInt(6),o=BigInt(11),i=BigInt(22),s=BigInt(23),a=BigInt(44),c=BigInt(88),l=t*t*t%e,d=l*l*t%e,g=ye(d,n,e)*d%e,u=ye(g,n,e)*d%e,f=ye(u,Qr,e)*l%e,y=ye(f,o,e)*f%e,b=ye(y,i,e)*y%e,v=ye(b,a,e)*b%e,R=ye(v,c,e)*v%e,O=ye(R,a,e)*b%e,N=ye(O,n,e)*d%e,I=ye(N,s,e)*y%e,_=ye(I,r,e)*l%e,q=ye(_,Qr,e);if(!Dn.eql(Dn.sqr(q),t))throw new Error("Cannot find square root");return q}var Dn=Rt(Vn.p,{sqrt:_l}),lt=is(Vn,{Fp:Dn,endo:Nl}),Kn=cs(lt,ue),ls={};function $n(t,...e){let n=ls[t];if(n===void 0){let r=ue(Hi(t));n=te(r,r),ls[t]=n}return ue(te(n,...e))}var to=t=>t.toBytes(!0).slice(1),no=t=>t%Qr===Il;function eo(t){let{Fn:e,BASE:n}=lt,r=e.fromBytes(t),o=n.multiply(r);return{scalar:no(o.y)?r:e.neg(r),bytes:to(o)}}function fs(t){let e=Dn;if(!e.isValidNot0(t))throw new Error("invalid x: Fail if x \u2265 p");let n=e.create(t*t),r=e.create(n*t+BigInt(7)),o=e.sqrt(r);no(o)||(o=e.neg(o));let i=lt.fromAffine({x:t,y:o});return i.assertValidity(),i}var an=Ge;function ds(...t){return lt.Fn.create(an($n("BIP0340/challenge",...t)))}function us(t){return eo(t).bytes}function Ul(t,e,n=ke(32)){let{Fn:r}=lt,o=Y(t,void 0,"message"),{bytes:i,scalar:s}=eo(e),a=Y(n,32,"auxRand"),c=r.toBytes(s^an($n("BIP0340/aux",a))),l=$n("BIP0340/nonce",c,i,o),{bytes:d,scalar:g}=eo(l),u=ds(d,i,o),f=new Uint8Array(64);if(f.set(d,0),f.set(r.toBytes(r.create(g+u*s)),32),!hs(f,o,i))throw new Error("sign: Invalid signature produced");return f}function hs(t,e,n){let{Fp:r,Fn:o,BASE:i}=lt,s=Y(t,64,"signature"),a=Y(e,void 0,"message"),c=Y(n,32,"publicKey");try{let l=fs(an(c)),d=an(s.subarray(0,32));if(!r.isValidNot0(d))return!1;let g=an(s.subarray(32,64));if(!o.isValidNot0(g))return!1;let u=ds(o.toBytes(d),to(l),a),f=i.multiplyUnsafe(g).add(l.multiplyUnsafe(o.neg(u))),{x:y,y:b}=f.toAffine();return!(f.is0()||!no(b)||y!==d)}catch{return!1}}var xe=(()=>{let n=(r=ke(48))=>On(r,Vn.n);return{keygen:Hn(n,us),getPublicKey:us,sign:Ul,verify:hs,Point:lt,utils:{randomSecretKey:n,taggedHash:$n,lift_x:fs,pointToBytes:to},lengths:{secretKey:32,publicKey:32,publicKeyHasPrefix:!1,signature:64,seed:48}}})();function Ol(t){return t instanceof Uint8Array||ArrayBuffer.isView(t)&&t.constructor.name==="Uint8Array"}function zn(t){if(typeof t!="boolean")throw new Error(`boolean expected, not ${t}`)}function jn(t){if(!Number.isSafeInteger(t)||t<0)throw new Error("positive integer expected, got "+t)}function ae(t,e,n=""){let r=Ol(t),o=t?.length,i=e!==void 0;if(!r||i&&o!==e){let s=n&&`"${n}" `,a=i?` of length ${e}`:"",c=r?`length=${o}`:`type=${typeof t}`;throw new Error(s+"expected Uint8Array"+a+", got "+c)}return t}function ro(t,e=!0){if(t.destroyed)throw new Error("Hash instance has been destroyed");if(e&&t.finished)throw new Error("Hash#digest() has already been called")}function gs(t,e){ae(t,void 0,"output");let n=e.outputLen;if(t.length<n)throw new Error("digestInto() expects output buffer of length at least "+n)}function Ue(t){return new Uint32Array(t.buffer,t.byteOffset,Math.floor(t.byteLength/4))}function Oe(...t){for(let e=0;e<t.length;e++)t[e].fill(0)}function Pl(t){return new DataView(t.buffer,t.byteOffset,t.byteLength)}var Hl=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;function ps(t,e){if(e==null||typeof e!="object")throw new Error("options must be defined");return Object.assign(t,e)}function Lt(t,e){if(t.length!==e.length)return!1;let n=0;for(let r=0;r<t.length;r++)n|=t[r]^e[r];return n===0}var oo=(t,e)=>{function n(r,...o){if(ae(r,void 0,"key"),!Hl)throw new Error("Non little-endian hardware is not yet supported");if(t.nonceLength!==void 0){let d=o[0];ae(d,t.varSizeNonce?void 0:t.nonceLength,"nonce")}let i=t.tagLength;i&&o[1]!==void 0&&ae(o[1],void 0,"AAD");let s=e(r,...o),a=(d,g)=>{if(g!==void 0){if(d!==2)throw new Error("cipher output not supported");ae(g,void 0,"output")}},c=!1;return{encrypt(d,g){if(c)throw new Error("cannot encrypt() twice with same key + nonce");return c=!0,ae(d),a(s.encrypt.length,g),s.encrypt(d,g)},decrypt(d,g){if(ae(d),i&&d.length<i)throw new Error('"ciphertext" expected length bigger than tagLength='+i);return a(s.decrypt.length,g),s.decrypt(d,g)}}}return Object.assign(n,t),n};function io(t,e,n=!0){if(e===void 0)return new Uint8Array(t);if(e.length!==t)throw new Error('"output" expected Uint8Array of length '+t+", got: "+e.length);if(n&&!Ml(e))throw new Error("invalid output, must be aligned");return e}function ys(t,e,n){zn(n);let r=new Uint8Array(16),o=Pl(r);return o.setBigUint64(0,BigInt(e),n),o.setBigUint64(8,BigInt(t),n),r}function Ml(t){return t.byteOffset%4===0}function Nt(t){return Uint8Array.from(t)}var ms=t=>Uint8Array.from(t.split(""),e=>e.charCodeAt(0)),ql=ms("expand 16-byte k"),Dl=ms("expand 32-byte k"),$l=Ue(ql),Vl=Ue(Dl);function H(t,e){return t<<e|t>>>32-e}function so(t){return t.byteOffset%4===0}var Zn=64,Kl=16,ws=2**32-1,bs=Uint32Array.of();function zl(t,e,n,r,o,i,s,a){let c=o.length,l=new Uint8Array(Zn),d=Ue(l),g=so(o)&&so(i),u=g?Ue(o):bs,f=g?Ue(i):bs;for(let y=0;y<c;s++){if(t(e,n,r,d,s,a),s>=ws)throw new Error("arx: counter overflow");let b=Math.min(Zn,c-y);if(g&&b===Zn){let v=y/4;if(y%4!==0)throw new Error("arx: invalid block position");for(let R=0,O;R<Kl;R++)O=v+R,f[O]=u[O]^d[R];y+=Zn;continue}for(let v=0,R;v<b;v++)R=y+v,i[R]=o[R]^l[v];y+=b}}function ao(t,e){let{allowShortKeys:n,extendNonceFn:r,counterLength:o,counterRight:i,rounds:s}=ps({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},e);if(typeof t!="function")throw new Error("core must be a function");return jn(o),jn(s),zn(i),zn(n),(a,c,l,d,g=0)=>{ae(a,void 0,"key"),ae(c,void 0,"nonce"),ae(l,void 0,"data");let u=l.length;if(d===void 0&&(d=new Uint8Array(u)),ae(d,void 0,"output"),jn(g),g<0||g>=ws)throw new Error("arx: counter overflow");if(d.length<u)throw new Error(`arx: output (${d.length}) is shorter than data (${u})`);let f=[],y=a.length,b,v;if(y===32)f.push(b=Nt(a)),v=Vl;else if(y===16&&n)b=new Uint8Array(32),b.set(a),b.set(a,16),v=$l,f.push(b);else throw ae(a,32,"arx key"),new Error("invalid key size");so(c)||f.push(c=Nt(c));let R=Ue(b);if(r){if(c.length!==24)throw new Error("arx: extended nonce must be 24 bytes");r(v,R,Ue(c.subarray(0,16)),R),c=c.subarray(16)}let O=16-o;if(O!==c.length)throw new Error(`arx: nonce must be ${O} or 16 bytes`);if(O!==12){let I=new Uint8Array(12);I.set(c,i?0:12-c.length),c=I,f.push(c)}let N=Ue(c);return zl(t,v,R,N,l,d,g,s),Oe(...f),d}}function ce(t,e){return t[e++]&255|(t[e++]&255)<<8}var co=class{constructor(e){S(this,"blockLen",16);S(this,"outputLen",16);S(this,"buffer",new Uint8Array(16));S(this,"r",new Uint16Array(10));S(this,"h",new Uint16Array(10));S(this,"pad",new Uint16Array(8));S(this,"pos",0);S(this,"finished",!1);e=Nt(ae(e,32,"key"));let n=ce(e,0),r=ce(e,2),o=ce(e,4),i=ce(e,6),s=ce(e,8),a=ce(e,10),c=ce(e,12),l=ce(e,14);this.r[0]=n&8191,this.r[1]=(n>>>13|r<<3)&8191,this.r[2]=(r>>>10|o<<6)&7939,this.r[3]=(o>>>7|i<<9)&8191,this.r[4]=(i>>>4|s<<12)&255,this.r[5]=s>>>1&8190,this.r[6]=(s>>>14|a<<2)&8191,this.r[7]=(a>>>11|c<<5)&8065,this.r[8]=(c>>>8|l<<8)&8191,this.r[9]=l>>>5&127;for(let d=0;d<8;d++)this.pad[d]=ce(e,16+2*d)}process(e,n,r=!1){let o=r?0:2048,{h:i,r:s}=this,a=s[0],c=s[1],l=s[2],d=s[3],g=s[4],u=s[5],f=s[6],y=s[7],b=s[8],v=s[9],R=ce(e,n+0),O=ce(e,n+2),N=ce(e,n+4),I=ce(e,n+6),_=ce(e,n+8),q=ce(e,n+10),j=ce(e,n+12),Z=ce(e,n+14),L=i[0]+(R&8191),z=i[1]+((R>>>13|O<<3)&8191),$=i[2]+((O>>>10|N<<6)&8191),T=i[3]+((N>>>7|I<<9)&8191),x=i[4]+((I>>>4|_<<12)&8191),p=i[5]+(_>>>1&8191),h=i[6]+((_>>>14|q<<2)&8191),m=i[7]+((q>>>11|j<<5)&8191),E=i[8]+((j>>>8|Z<<8)&8191),B=i[9]+(Z>>>5|o),w=0,A=w+L*a+z*(5*v)+$*(5*b)+T*(5*y)+x*(5*f);w=A>>>13,A&=8191,A+=p*(5*u)+h*(5*g)+m*(5*d)+E*(5*l)+B*(5*c),w+=A>>>13,A&=8191;let k=w+L*c+z*a+$*(5*v)+T*(5*b)+x*(5*y);w=k>>>13,k&=8191,k+=p*(5*f)+h*(5*u)+m*(5*g)+E*(5*d)+B*(5*l),w+=k>>>13,k&=8191;let C=w+L*l+z*c+$*a+T*(5*v)+x*(5*b);w=C>>>13,C&=8191,C+=p*(5*y)+h*(5*f)+m*(5*u)+E*(5*g)+B*(5*d),w+=C>>>13,C&=8191;let P=w+L*d+z*l+$*c+T*a+x*(5*v);w=P>>>13,P&=8191,P+=p*(5*b)+h*(5*y)+m*(5*f)+E*(5*u)+B*(5*g),w+=P>>>13,P&=8191;let D=w+L*g+z*d+$*l+T*c+x*a;w=D>>>13,D&=8191,D+=p*(5*v)+h*(5*b)+m*(5*y)+E*(5*f)+B*(5*u),w+=D>>>13,D&=8191;let M=w+L*u+z*g+$*d+T*l+x*c;w=M>>>13,M&=8191,M+=p*a+h*(5*v)+m*(5*b)+E*(5*y)+B*(5*f),w+=M>>>13,M&=8191;let U=w+L*f+z*u+$*g+T*d+x*l;w=U>>>13,U&=8191,U+=p*c+h*a+m*(5*v)+E*(5*b)+B*(5*y),w+=U>>>13,U&=8191;let V=w+L*y+z*f+$*u+T*g+x*d;w=V>>>13,V&=8191,V+=p*l+h*c+m*a+E*(5*v)+B*(5*b),w+=V>>>13,V&=8191;let W=w+L*b+z*y+$*f+T*u+x*g;w=W>>>13,W&=8191,W+=p*d+h*l+m*c+E*a+B*(5*v),w+=W>>>13,W&=8191;let K=w+L*v+z*b+$*y+T*f+x*u;w=K>>>13,K&=8191,K+=p*g+h*d+m*l+E*c+B*a,w+=K>>>13,K&=8191,w=(w<<2)+w|0,w=w+A|0,A=w&8191,w=w>>>13,k+=w,i[0]=A,i[1]=k,i[2]=C,i[3]=P,i[4]=D,i[5]=M,i[6]=U,i[7]=V,i[8]=W,i[9]=K}finalize(){let{h:e,pad:n}=this,r=new Uint16Array(10),o=e[1]>>>13;e[1]&=8191;for(let a=2;a<10;a++)e[a]+=o,o=e[a]>>>13,e[a]&=8191;e[0]+=o*5,o=e[0]>>>13,e[0]&=8191,e[1]+=o,o=e[1]>>>13,e[1]&=8191,e[2]+=o,r[0]=e[0]+5,o=r[0]>>>13,r[0]&=8191;for(let a=1;a<10;a++)r[a]=e[a]+o,o=r[a]>>>13,r[a]&=8191;r[9]-=8192;let i=(o^1)-1;for(let a=0;a<10;a++)r[a]&=i;i=~i;for(let a=0;a<10;a++)e[a]=e[a]&i|r[a];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let s=e[0]+n[0];e[0]=s&65535;for(let a=1;a<8;a++)s=(e[a]+n[a]|0)+(s>>>16)|0,e[a]=s&65535;Oe(r)}update(e){ro(this),ae(e),e=Nt(e);let{buffer:n,blockLen:r}=this,o=e.length;for(let i=0;i<o;){let s=Math.min(r-this.pos,o-i);if(s===r){for(;r<=o-i;i+=r)this.process(e,i);continue}n.set(e.subarray(i,i+s),this.pos),this.pos+=s,i+=s,this.pos===r&&(this.process(n,0,!1),this.pos=0)}return this}destroy(){Oe(this.h,this.r,this.buffer,this.pad)}digestInto(e){ro(this),gs(e,this),this.finished=!0;let{buffer:n,h:r}=this,{pos:o}=this;if(o){for(n[o++]=1;o<16;o++)n[o]=0;this.process(n,0,!0)}this.finalize();let i=0;for(let s=0;s<8;s++)e[i++]=r[s]>>>0,e[i++]=r[s]>>>8;return e}digest(){let{buffer:e,outputLen:n}=this;this.digestInto(e);let r=e.slice(0,n);return this.destroy(),r}};function jl(t){let e=(r,o)=>t(o).update(r).digest(),n=t(new Uint8Array(32));return e.outputLen=n.outputLen,e.blockLen=n.blockLen,e.create=r=>t(r),e}var xs=jl(t=>new co(t));function Ss(t,e,n,r,o,i=20){let s=t[0],a=t[1],c=t[2],l=t[3],d=e[0],g=e[1],u=e[2],f=e[3],y=e[4],b=e[5],v=e[6],R=e[7],O=o,N=n[0],I=n[1],_=n[2],q=s,j=a,Z=c,L=l,z=d,$=g,T=u,x=f,p=y,h=b,m=v,E=R,B=O,w=N,A=I,k=_;for(let P=0;P<i;P+=2)q=q+z|0,B=H(B^q,16),p=p+B|0,z=H(z^p,12),q=q+z|0,B=H(B^q,8),p=p+B|0,z=H(z^p,7),j=j+$|0,w=H(w^j,16),h=h+w|0,$=H($^h,12),j=j+$|0,w=H(w^j,8),h=h+w|0,$=H($^h,7),Z=Z+T|0,A=H(A^Z,16),m=m+A|0,T=H(T^m,12),Z=Z+T|0,A=H(A^Z,8),m=m+A|0,T=H(T^m,7),L=L+x|0,k=H(k^L,16),E=E+k|0,x=H(x^E,12),L=L+x|0,k=H(k^L,8),E=E+k|0,x=H(x^E,7),q=q+$|0,k=H(k^q,16),m=m+k|0,$=H($^m,12),q=q+$|0,k=H(k^q,8),m=m+k|0,$=H($^m,7),j=j+T|0,B=H(B^j,16),E=E+B|0,T=H(T^E,12),j=j+T|0,B=H(B^j,8),E=E+B|0,T=H(T^E,7),Z=Z+x|0,w=H(w^Z,16),p=p+w|0,x=H(x^p,12),Z=Z+x|0,w=H(w^Z,8),p=p+w|0,x=H(x^p,7),L=L+z|0,A=H(A^L,16),h=h+A|0,z=H(z^h,12),L=L+z|0,A=H(A^L,8),h=h+A|0,z=H(z^h,7);let C=0;r[C++]=s+q|0,r[C++]=a+j|0,r[C++]=c+Z|0,r[C++]=l+L|0,r[C++]=d+z|0,r[C++]=g+$|0,r[C++]=u+T|0,r[C++]=f+x|0,r[C++]=y+p|0,r[C++]=b+h|0,r[C++]=v+m|0,r[C++]=R+E|0,r[C++]=O+B|0,r[C++]=N+w|0,r[C++]=I+A|0,r[C++]=_+k|0}function Zl(t,e,n,r){let o=t[0],i=t[1],s=t[2],a=t[3],c=e[0],l=e[1],d=e[2],g=e[3],u=e[4],f=e[5],y=e[6],b=e[7],v=n[0],R=n[1],O=n[2],N=n[3];for(let _=0;_<20;_+=2)o=o+c|0,v=H(v^o,16),u=u+v|0,c=H(c^u,12),o=o+c|0,v=H(v^o,8),u=u+v|0,c=H(c^u,7),i=i+l|0,R=H(R^i,16),f=f+R|0,l=H(l^f,12),i=i+l|0,R=H(R^i,8),f=f+R|0,l=H(l^f,7),s=s+d|0,O=H(O^s,16),y=y+O|0,d=H(d^y,12),s=s+d|0,O=H(O^s,8),y=y+O|0,d=H(d^y,7),a=a+g|0,N=H(N^a,16),b=b+N|0,g=H(g^b,12),a=a+g|0,N=H(N^a,8),b=b+N|0,g=H(g^b,7),o=o+l|0,N=H(N^o,16),y=y+N|0,l=H(l^y,12),o=o+l|0,N=H(N^o,8),y=y+N|0,l=H(l^y,7),i=i+d|0,v=H(v^i,16),b=b+v|0,d=H(d^b,12),i=i+d|0,v=H(v^i,8),b=b+v|0,d=H(d^b,7),s=s+g|0,R=H(R^s,16),u=u+R|0,g=H(g^u,12),s=s+g|0,R=H(R^s,8),u=u+R|0,g=H(g^u,7),a=a+c|0,O=H(O^a,16),f=f+O|0,c=H(c^f,12),a=a+c|0,O=H(O^a,8),f=f+O|0,c=H(c^f,7);let I=0;r[I++]=o,r[I++]=i,r[I++]=s,r[I++]=a,r[I++]=v,r[I++]=R,r[I++]=O,r[I++]=N}var ut=ao(Ss,{counterRight:!1,counterLength:4,allowShortKeys:!1}),Gl=ao(Ss,{counterRight:!1,counterLength:8,extendNonceFn:Zl,allowShortKeys:!1});var Wl=new Uint8Array(16),Es=(t,e)=>{t.update(e);let n=e.length%16;n&&t.update(Wl.subarray(n))},Yl=new Uint8Array(32);function vs(t,e,n,r,o){o!==void 0&&ae(o,void 0,"AAD");let i=t(e,n,Yl),s=ys(r.length,o?o.length:0,!0),a=xs.create(i);o&&Es(a,o),Es(a,r),a.update(s);let c=a.digest();return Oe(i,s),c}var ks=t=>(e,n,r)=>({encrypt(i,s){let a=i.length;s=io(a+16,s,!1),s.set(i);let c=s.subarray(0,-16);t(e,n,c,c,1);let l=vs(t,e,n,c,r);return s.set(l,a),Oe(l),s},decrypt(i,s){s=io(i.length-16,s,!1);let a=i.subarray(0,-16),c=i.subarray(-16),l=vs(t,e,n,a,r);if(!Lt(c,l))throw new Error("invalid tag");return s.set(i.subarray(0,-16)),t(e,n,s,s,1),Oe(l),s}}),Dh=oo({blockSize:64,nonceLength:12,tagLength:16},ks(ut)),$h=oo({blockSize:64,nonceLength:24,tagLength:16},ks(Gl));function Gn(t,e,n){return st(t),n===void 0&&(n=new Uint8Array(t.outputLen)),Ce(t,n,e)}var lo=Uint8Array.of(0),Bs=Uint8Array.of();function Wn(t,e,n,r=32){st(t),we(r,"length");let o=t.outputLen;if(r>255*o)throw new Error("Length must be <= 255*HashLen");let i=Math.ceil(r/o);n===void 0?n=Bs:Y(n,void 0,"info");let s=new Uint8Array(i*o),a=Ce.create(t,e),c=a._cloneInto(),l=new Uint8Array(a.outputLen);for(let d=0;d<i;d++)lo[0]=d+1,c.update(d===0?Bs:l).update(n).update(lo).digestInto(l),s.set(l,o*d),a._cloneInto(c);return a.destroy(),c.destroy(),Ne(l,lo),s.slice(0,r)}function go(t){return t instanceof Uint8Array||ArrayBuffer.isView(t)&&t.constructor.name==="Uint8Array"}function Jl(t){if(!go(t))throw new Error("Uint8Array expected")}function Ts(t,e){return Array.isArray(e)?e.length===0?!0:t?e.every(n=>typeof n=="string"):e.every(n=>Number.isSafeInteger(n)):!1}function Xl(t){if(typeof t!="function")throw new Error("function expected");return!0}function ft(t,e){if(typeof e!="string")throw new Error(`${t}: string expected`);return!0}function po(t){if(!Number.isSafeInteger(t))throw new Error(`invalid integer: ${t}`)}function uo(t){if(!Array.isArray(t))throw new Error("array expected")}function Jn(t,e){if(!Ts(!0,e))throw new Error(`${t}: array of strings expected`)}function Ls(t,e){if(!Ts(!1,e))throw new Error(`${t}: array of numbers expected`)}function Ns(...t){let e=i=>i,n=(i,s)=>a=>i(s(a)),r=t.map(i=>i.encode).reduceRight(n,e),o=t.map(i=>i.decode).reduce(n,e);return{encode:r,decode:o}}function Is(t){let e=typeof t=="string"?t.split(""):t,n=e.length;Jn("alphabet",e);let r=new Map(e.map((o,i)=>[o,i]));return{encode:o=>(uo(o),o.map(i=>{if(!Number.isSafeInteger(i)||i<0||i>=n)throw new Error(`alphabet.encode: digit index outside alphabet "${i}". Allowed: ${t}`);return e[i]})),decode:o=>(uo(o),o.map(i=>{ft("alphabet.decode",i);let s=r.get(i);if(s===void 0)throw new Error(`Unknown letter: "${i}". Allowed: ${t}`);return s}))}}function _s(t=""){return ft("join",t),{encode:e=>(Jn("join.decode",e),e.join(t)),decode:e=>(ft("join.decode",e),e.split(t))}}function Fl(t,e="="){return po(t),ft("padding",e),{encode(n){for(Jn("padding.encode",n);n.length*t%8;)n.push(e);return n},decode(n){Jn("padding.decode",n);let r=n.length;if(r*t%8)throw new Error("padding: invalid, string should have whole number of bytes");for(;r>0&&n[r-1]===e;r--)if((r-1)*t%8===0)throw new Error("padding: invalid, string has too much padding");return n.slice(0,r)}}}var Us=(t,e)=>e===0?t:Us(e,t%e),Xn=(t,e)=>t+(e-Us(t,e)),Yn=(()=>{let t=[];for(let e=0;e<40;e++)t.push(2**e);return t})();function fo(t,e,n,r){if(uo(t),e<=0||e>32)throw new Error(`convertRadix2: wrong from=${e}`);if(n<=0||n>32)throw new Error(`convertRadix2: wrong to=${n}`);if(Xn(e,n)>32)throw new Error(`convertRadix2: carry overflow from=${e} to=${n} carryBits=${Xn(e,n)}`);let o=0,i=0,s=Yn[e],a=Yn[n]-1,c=[];for(let l of t){if(po(l),l>=s)throw new Error(`convertRadix2: invalid data word=${l} from=${e}`);if(o=o<<e|l,i+e>32)throw new Error(`convertRadix2: carry overflow pos=${i} from=${e}`);for(i+=e;i>=n;i-=n)c.push((o>>i-n&a)>>>0);let d=Yn[i];if(d===void 0)throw new Error("invalid carry");o&=d-1}if(o=o<<n-i&a,!r&&i>=e)throw new Error("Excess padding");if(!r&&o>0)throw new Error(`Non-zero padding: ${o}`);return r&&i>0&&c.push(o>>>0),c}function Os(t,e=!1){if(po(t),t<=0||t>32)throw new Error("radix2: bits should be in (0..32]");if(Xn(8,t)>32||Xn(t,8)>32)throw new Error("radix2: carry overflow");return{encode:n=>{if(!go(n))throw new Error("radix2.encode input should be Uint8Array");return fo(Array.from(n),8,t,!e)},decode:n=>(Ls("radix2.decode",n),Uint8Array.from(fo(n,t,8,e)))}}function As(t){return Xl(t),function(...e){try{return t.apply(null,e)}catch{}}}var Ql=typeof Uint8Array.from([]).toBase64=="function"&&typeof Uint8Array.fromBase64=="function",eu=(t,e)=>{ft("base64",t);let n=e?/^[A-Za-z0-9=_-]+$/:/^[A-Za-z0-9=+/]+$/,r=e?"base64url":"base64";if(t.length>0&&!n.test(t))throw new Error("invalid base64");return Uint8Array.fromBase64(t,{alphabet:r,lastChunkHandling:"strict"})},It=Ql?{encode(t){return Jl(t),t.toBase64()},decode(t){return eu(t,!1)}}:Ns(Os(6),Is("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),Fl(6),_s(""));var ho=Ns(Is("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),_s("")),Rs=[996825010,642813549,513874426,1027748829,705979059];function cn(t){let e=t>>25,n=(t&33554431)<<5;for(let r=0;r<Rs.length;r++)(e>>r&1)===1&&(n^=Rs[r]);return n}function Cs(t,e,n=1){let r=t.length,o=1;for(let i=0;i<r;i++){let s=t.charCodeAt(i);if(s<33||s>126)throw new Error(`Invalid prefix (${t})`);o=cn(o)^s>>5}o=cn(o);for(let i=0;i<r;i++)o=cn(o)^t.charCodeAt(i)&31;for(let i of e)o=cn(o)^i;for(let i=0;i<6;i++)o=cn(o);return o^=n,ho.encode(fo([o%Yn[30]],30,5,!1))}function tu(t){let e=t==="bech32"?1:734539939,n=Os(5),r=n.decode,o=n.encode,i=As(r);function s(g,u,f=90){ft("bech32.encode prefix",g),go(u)&&(u=Array.from(u)),Ls("bech32.encode",u);let y=g.length;if(y===0)throw new TypeError(`Invalid prefix length ${y}`);let b=y+7+u.length;if(f!==!1&&b>f)throw new TypeError(`Length ${b} exceeds limit ${f}`);let v=g.toLowerCase(),R=Cs(v,u,e);return`${v}1${ho.encode(u)}${R}`}function a(g,u=90){ft("bech32.decode input",g);let f=g.length;if(f<8||u!==!1&&f>u)throw new TypeError(`invalid string length: ${f} (${g}). Expected (8..${u})`);let y=g.toLowerCase();if(g!==y&&g!==g.toUpperCase())throw new Error("String must be lowercase or uppercase");let b=y.lastIndexOf("1");if(b===0||b===-1)throw new Error('Letter "1" must be present between prefix and data only');let v=y.slice(0,b),R=y.slice(b+1);if(R.length<6)throw new Error("Data must be at least 6 characters long");let O=ho.decode(R).slice(0,-6),N=Cs(v,O,e);if(!R.endsWith(N))throw new Error(`Invalid checksum in ${g}: expected "${N}"`);return{prefix:v,words:O}}let c=As(a);function l(g){let{prefix:u,words:f}=a(g,!1);return{prefix:u,words:f,bytes:r(f)}}function d(g,u){return s(g,o(u))}return{encode:s,decode:a,encodeFromBytes:d,decodeToBytes:l,decodeUnsafe:c,fromWords:r,fromWordsUnsafe:i,toWords:o}}var yo=tu("bech32");var dt=Symbol("verified"),nu=t=>t instanceof Object;function ru(t){if(!nu(t)||typeof t.kind!="number"||typeof t.content!="string"||typeof t.created_at!="number"||typeof t.pubkey!="string"||!t.pubkey.match(/^[a-f0-9]{64}$/)||!Array.isArray(t.tags))return!1;for(let e=0;e<t.tags.length;e++){let n=t.tags[e];if(!Array.isArray(n))return!1;for(let r=0;r<n.length;r++)if(typeof n[r]!="string")return!1}return!0}var ou=new TextDecoder("utf-8"),Eo=new TextEncoder;function ln(t){try{t.indexOf("://")===-1&&(t="wss://"+t);let e=new URL(t);return e.protocol==="http:"?e.protocol="ws:":e.protocol==="https:"&&(e.protocol="wss:"),e.pathname=e.pathname.replace(/\/+/g,"/"),e.pathname.endsWith("/")&&(e.pathname=e.pathname.slice(0,-1)),(e.port==="80"&&e.protocol==="ws:"||e.port==="443"&&e.protocol==="wss:")&&(e.port=""),e.searchParams.sort(),e.hash="",e.toString()}catch{throw new Error(`Invalid URL: ${t}`)}}var iu=class{generateSecretKey(){return xe.utils.randomSecretKey()}getPublicKey(t){return ee(xe.getPublicKey(t))}finalizeEvent(t,e){let n=t;return n.pubkey=ee(xe.getPublicKey(e)),n.id=bo(n),n.sig=ee(xe.sign(ne(bo(n)),e)),n[dt]=!0,n}verifyEvent(t){if(typeof t[dt]=="boolean")return t[dt];try{let e=bo(t);if(e!==t.id)return t[dt]=!1,!1;let n=xe.verify(ne(t.sig),ne(e),ne(t.pubkey));return t[dt]=n,n}catch{return t[dt]=!1,!1}}};function su(t){if(!ru(t))throw new Error("can't serialize event with wrong or missing properties");return JSON.stringify([0,t.pubkey,t.created_at,t.kind,t.tags,t.content])}function bo(t){let e=ue(Eo.encode(su(t)));return ee(e)}var Fn=new iu,Jh=Fn.generateSecretKey,Ps=Fn.getPublicKey,au=Fn.finalizeEvent,Ms=Fn.verifyEvent,vo=1,So=4294967295,ko=65536;function mo(t,e){let n=Kn.getSharedSecret(t,ne("02"+e)).subarray(1,33);return Gn(ue,n,Eo.encode("nip44-v2"))}function qs(t,e){let n=Wn(ue,t,e,76);return{chacha_key:n.subarray(0,32),chacha_nonce:n.subarray(32,44),hmac_key:n.subarray(44,76)}}function Ds(t){if(!Number.isSafeInteger(t)||t<1)throw new Error("expected positive integer");if(t<=32)return 32;let e=2**(Math.floor(Math.log2(t-1))+1),n=e<=256?32:e/8;return n*(Math.floor((t-1)/n)+1)}function cu(t){if(!Number.isSafeInteger(t)||t<vo||t>65535)throw new Error("invalid plaintext size: must be between 1 and 65535 bytes");let e=new Uint8Array(2);return new DataView(e.buffer).setUint16(0,t,!1),e}function lu(t){if(!Number.isSafeInteger(t)||t<ko||t>So)throw new Error("invalid plaintext size: must be between 65536 and 4294967295 bytes");let e=new Uint8Array(4);return new DataView(e.buffer).setUint32(0,t,!1),e}function uu(t){let e=Eo.encode(t),n=e.length;if(n<vo||n>So)throw new Error("invalid plaintext size: must be between 1 and 4294967295 bytes");let r=n>=ko?te(new Uint8Array([0,0]),lu(n)):cu(n),o=new Uint8Array(Ds(n)-n);return te(r,e,o)}function fu(t){let e=new DataView(t.buffer,t.byteOffset,t.byteLength),n=e.getUint16(0),r,o;if(n===0){if(r=e.getUint32(2),r<ko)throw new Error("invalid padding");o=6}else r=n,o=2;let i=t.subarray(o,o+r);if(r<vo||r>So||i.length!==r||t.length!==o+Ds(r))throw new Error("invalid padding");return ou.decode(i)}function $s(t,e,n){if(n.length!==32)throw new Error("AAD associated data must be 32 bytes");let r=te(n,e);return Ce(ue,t,r)}function du(t){if(typeof t!="string")throw new Error("payload must be a valid string");let e=t.length;if(e<132)throw new Error("invalid payload length: "+e);if(t[0]==="#")throw new Error("unknown encryption version");let n;try{n=It.decode(t)}catch(i){throw new Error("invalid base64: "+i.message)}let r=n.length;if(r<99)throw new Error("invalid data length: "+r);let o=n[0];if(o!==2)throw new Error("unknown encryption version "+o);return{nonce:n.subarray(1,33),ciphertext:n.subarray(33,-32),mac:n.subarray(-32)}}function hu(t,e,n=ke(32)){let{chacha_key:r,chacha_nonce:o,hmac_key:i}=qs(e,n),s=uu(t),a=ut(r,o,s),c=$s(i,a,n);return It.encode(te(new Uint8Array([2]),n,a,c))}function Hs(t,e){let{nonce:n,ciphertext:r,mac:o}=du(t),{chacha_key:i,chacha_nonce:s,hmac_key:a}=qs(e,n),c=$s(a,r,n);if(!Lt(c,o))throw new Error("invalid MAC");let l=ut(i,s,r);return fu(l)}var gu=/^(?:([\w.+-]+)@)?([\w_-]+(\.[\w_-]+)+)$/,pu;try{pu=fetch}catch{}var yu=22242,wo=24133;function bu(t,e){if(t.ids&&t.ids.indexOf(e.id)===-1||t.kinds&&t.kinds.indexOf(e.kind)===-1||t.authors&&t.authors.indexOf(e.pubkey)===-1)return!1;for(let n in t)if(n[0]==="#"){let r=n.slice(1),o=t[`#${r}`];if(o&&!e.tags.find(([i,s])=>i===n.slice(1)&&o.indexOf(s)!==-1))return!1}return!(t.since&&e.created_at<t.since||t.until&&e.created_at>t.until)}function mu(t,e){for(let n=0;n<t.length;n++)if(bu(t[n],e))return!0;return!1}function wu(t,e){let n=e.length+3,r=t.indexOf(`"${e}":`)+n,o=t.slice(r).indexOf('"')+r+1;return t.slice(o,o+64)}function xu(t){let e=t.slice(0,22).indexOf('"EVENT"');if(e===-1)return null;let n=t.slice(e+7+1).indexOf('"');if(n===-1)return null;let r=e+7+1+n,o=t.slice(r+1,80).indexOf('"');if(o===-1)return null;let i=r+1+o;return t.slice(r+1,i)}function Eu(t,e){return{kind:yu,created_at:Math.floor(Date.now()/1e3),tags:[["relay",t],["challenge",e]],content:""}}var xo=class extends Error{constructor(t,e){super(`Tried to send message '${t} on a closed connection to ${e}.`),this.name="SendingOnClosedConnection"}},Vs=class{constructor(t,e){S(this,"url");S(this,"_connected",!1);S(this,"onclose",null);S(this,"onnotice",t=>console.debug(`NOTICE from ${this.url}: ${t}`));S(this,"onauth");S(this,"baseEoseTimeout",4400);S(this,"publishTimeout",4400);S(this,"pingFrequency",29e3);S(this,"pingTimeout",2e4);S(this,"resubscribeBackoff",[1e4,1e4,1e4,2e4,2e4,3e4,6e4]);S(this,"openSubs",new Map);S(this,"enablePing");S(this,"enableReconnect");S(this,"idleSince",Date.now());S(this,"ongoingOperations",0);S(this,"reconnectTimeoutHandle");S(this,"pingIntervalHandle");S(this,"reconnectAttempts",0);S(this,"skipReconnection",!1);S(this,"connectionPromise");S(this,"openCountRequests",new Map);S(this,"openEventPublishes",new Map);S(this,"ws");S(this,"challenge");S(this,"authPromise");S(this,"serial",0);S(this,"verifyEvent");S(this,"_WebSocket");this.url=ln(t),this.verifyEvent=e.verifyEvent,this._WebSocket=e.websocketImplementation||WebSocket,this.enablePing=e.enablePing,this.enableReconnect=e.enableReconnect||!1}static async connect(t,e){let n=new Vs(t,e);return await n.connect(e),n}closeAllSubscriptions(t){for(let[e,n]of this.openSubs)n.close(t);this.openSubs.clear();for(let[e,n]of this.openEventPublishes)n.reject(new Error(t));this.openEventPublishes.clear();for(let[e,n]of this.openCountRequests)n.reject(new Error(t));this.openCountRequests.clear()}get connected(){return this._connected}async reconnect(){let t=this.resubscribeBackoff[Math.min(this.reconnectAttempts,this.resubscribeBackoff.length-1)];this.reconnectAttempts++,this.reconnectTimeoutHandle=setTimeout(async()=>{try{await this.connect()}catch{}},t)}handleHardClose(t){this.pingIntervalHandle&&(clearInterval(this.pingIntervalHandle),this.pingIntervalHandle=void 0),this._connected=!1,this.connectionPromise=void 0,this.idleSince=void 0,this.enableReconnect&&!this.skipReconnection?this.reconnect():(this.onclose?.(),this.closeAllSubscriptions(t))}async connect(t){let e;return this.connectionPromise?this.connectionPromise:(this.challenge=void 0,this.authPromise=void 0,this.skipReconnection=!1,this.connectionPromise=new Promise((n,r)=>{t?.timeout&&(e=setTimeout(()=>{r("connection timed out"),this.connectionPromise=void 0,this.skipReconnection=!0,this.onclose?.(),this.handleHardClose("relay connection timed out")},t.timeout)),t?.abort&&(t.abort.onabort=r);try{this.ws=new this._WebSocket(this.url)}catch(o){clearTimeout(e),r(o);return}this.ws.onopen=()=>{this.reconnectTimeoutHandle&&(clearTimeout(this.reconnectTimeoutHandle),this.reconnectTimeoutHandle=void 0),clearTimeout(e),this._connected=!0;let o=this.reconnectAttempts>0;this.reconnectAttempts=0;for(let i of this.openSubs.values()){if(i.eosed=!1,o)for(let s=0;s<i.filters.length;s++)i.lastEmitted&&(i.filters[s].since=i.lastEmitted+1);i.fire()}this.enablePing&&(this.pingIntervalHandle=setInterval(()=>this.pingpong(),this.pingFrequency)),n()},this.ws.onerror=()=>{clearTimeout(e),r("connection failed"),this.connectionPromise=void 0,this.skipReconnection=!0,this.onclose?.(),this.handleHardClose("relay connection failed")},this.ws.onclose=o=>{clearTimeout(e),r(o.message||"websocket closed"),this.handleHardClose("relay connection closed")},this.ws.onmessage=this._onmessage.bind(this)}),this.connectionPromise)}waitForPingPong(){return new Promise(t=>{this.ws.once("pong",()=>t(!0)),this.ws.ping()})}waitForDummyReq(){return new Promise((t,e)=>{if(!this.connectionPromise)return e(new Error(`no connection to ${this.url}, can't ping`));try{let n=this.subscribe([{ids:["aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"],limit:0}],{label:"<forced-ping>",oneose:()=>{t(!0),n.close()},onclose(){t(!0)},eoseTimeout:this.pingTimeout+1e3})}catch(n){e(n)}})}async pingpong(){this.ws?.readyState===1&&(await Promise.any([this.ws&&this.ws.ping&&this.ws.once?this.waitForPingPong():this.waitForDummyReq(),new Promise(e=>setTimeout(()=>e(!1),this.pingTimeout))])||this.ws?.readyState===this._WebSocket.OPEN&&this.ws?.close())}async send(t){if(!this.connectionPromise)throw new xo(t,this.url);this.connectionPromise.then(()=>{this.ws?.send(t)})}async auth(t){let e=this.challenge;if(!e)throw new Error("can't perform auth, no challenge was received");return this.authPromise?this.authPromise:(this.authPromise=new Promise(async(n,r)=>{try{let o=await t(Eu(this.url,e)),i=setTimeout(()=>{let s=this.openEventPublishes.get(o.id);s&&(s.reject(new Error("auth timed out")),this.openEventPublishes.delete(o.id))},this.publishTimeout);this.openEventPublishes.set(o.id,{resolve:n,reject:r,timeout:i}),this.send('["AUTH",'+JSON.stringify(o)+"]")}catch(o){console.warn("subscribe auth function failed:",o)}}),this.authPromise)}async publish(t){this.idleSince=void 0,this.ongoingOperations++;let e=new Promise((n,r)=>{let o=setTimeout(()=>{let i=this.openEventPublishes.get(t.id);i&&(i.reject(new Error("publish timed out")),this.openEventPublishes.delete(t.id))},this.publishTimeout);this.openEventPublishes.set(t.id,{resolve:n,reject:r,timeout:o})});return this.send('["EVENT",'+JSON.stringify(t)+"]"),this.ongoingOperations--,this.ongoingOperations===0&&(this.idleSince=Date.now()),e}async count(t,e){this.serial++;let n=e?.id||"count:"+this.serial,r=new Promise((o,i)=>{this.openCountRequests.set(n,{resolve:o,reject:i})});return this.send('["COUNT","'+n+'",'+JSON.stringify(t).substring(1)),r}subscribe(t,e){e.label!=="<forced-ping>"&&(this.idleSince=void 0,this.ongoingOperations++);let n=this.prepareSubscription(t,e);return n.fire(),e.abort&&(e.abort.onabort=()=>n.close(String(e.abort.reason||"<aborted>"))),n}prepareSubscription(t,e){this.serial++;let n=e.id||(e.label?e.label+":":"sub:")+this.serial,r=new vu(this,n,t,e);return this.openSubs.set(n,r),r}close(){this.skipReconnection=!0,this.reconnectTimeoutHandle&&(clearTimeout(this.reconnectTimeoutHandle),this.reconnectTimeoutHandle=void 0),this.pingIntervalHandle&&(clearInterval(this.pingIntervalHandle),this.pingIntervalHandle=void 0),this.closeAllSubscriptions("relay connection closed by us"),this._connected=!1,this.idleSince=void 0,this.onclose?.(),this.ws?.readyState===this._WebSocket.OPEN&&this.ws?.close()}_onmessage(t){let e=t.data;if(!e)return;let n=xu(e);if(n){let r=this.openSubs.get(n);if(!r)return;let o=wu(e,"id"),i=r.alreadyHaveEvent?.(o);if(r.receivedEvent?.(this,o),i)return}try{let r=JSON.parse(e);switch(r[0]){case"EVENT":{let o=this.openSubs.get(r[1]),i=r[2];this.verifyEvent(i)&&mu(o.filters,i)?o.onevent(i):o.oninvalidevent?.(i),(!o.lastEmitted||o.lastEmitted<i.created_at)&&(o.lastEmitted=i.created_at);return}case"COUNT":{let o=r[1],i=r[2],s=this.openCountRequests.get(o);s&&(s.resolve(i.count),this.openCountRequests.delete(o));return}case"EOSE":{let o=this.openSubs.get(r[1]);if(!o)return;o.receivedEose();return}case"OK":{let o=r[1],i=r[2],s=r[3],a=this.openEventPublishes.get(o);a&&(clearTimeout(a.timeout),i?a.resolve(s):a.reject(new Error(s)),this.openEventPublishes.delete(o));return}case"CLOSED":{let o=r[1],i=this.openSubs.get(o);if(!i)return;i.closed=!0,i.close(r[2]);return}case"NOTICE":{this.onnotice(r[1]);return}case"AUTH":{this.challenge=r[1],this.onauth&&this.auth(this.onauth).catch(o=>{if(!(o instanceof xo))throw o});return}default:{this.openSubs.get(r[1])?.oncustom?.(r);return}}}catch(r){try{let[o,i,s]=JSON.parse(e);console.warn(`[nostr] relay ${this.url} error processing message:`,r,s)}catch{console.warn(`[nostr] relay ${this.url} error processing message:`,r)}return}}},vu=class{constructor(t,e,n,r){S(this,"relay");S(this,"id");S(this,"lastEmitted");S(this,"closed",!1);S(this,"eosed",!1);S(this,"filters");S(this,"alreadyHaveEvent");S(this,"receivedEvent");S(this,"onevent");S(this,"oninvalidevent");S(this,"oneose");S(this,"onclose");S(this,"oncustom");S(this,"eoseTimeout");S(this,"eoseTimeoutHandle");if(n.length===0)throw new Error("subscription can't be created with zero filters");this.relay=t,this.filters=n,this.id=e,this.alreadyHaveEvent=r.alreadyHaveEvent,this.receivedEvent=r.receivedEvent,this.eoseTimeout=r.eoseTimeout||t.baseEoseTimeout,this.oneose=r.oneose,this.onclose=r.onclose,this.oninvalidevent=r.oninvalidevent,this.onevent=r.onevent||(o=>{console.warn(`onevent() callback not defined for subscription '${this.id}' in relay ${this.relay.url}. event received:`,o)})}fire(){this.relay.send('["REQ","'+this.id+'",'+JSON.stringify(this.filters).substring(1)),this.eoseTimeoutHandle=setTimeout(this.receivedEose.bind(this),this.eoseTimeout)}receivedEose(){this.eosed||(clearTimeout(this.eoseTimeoutHandle),this.eosed=!0,this.oneose?.())}close(t="closed by caller"){if(!this.closed&&this.relay.connected){try{this.relay.send('["CLOSE",'+JSON.stringify(this.id)+"]")}catch(e){if(!(e instanceof xo))throw e}this.closed=!0}this.relay.openSubs.delete(this.id),this.relay.ongoingOperations--,this.relay.ongoingOperations===0&&(this.relay.idleSince=Date.now()),this.onclose?.(t)}},Su=t=>(t[dt]=!0,!0),ku=class{constructor(t){S(this,"relays",new Map);S(this,"seenOn",new Map);S(this,"trackRelays",!1);S(this,"verifyEvent");S(this,"enablePing");S(this,"enableReconnect");S(this,"automaticallyAuth");S(this,"trustedRelayURLs",new Set);S(this,"onRelayConnectionFailure");S(this,"onRelayConnectionSuccess");S(this,"allowConnectingToRelay");S(this,"maxWaitForConnection");S(this,"_WebSocket");this.verifyEvent=t.verifyEvent,this._WebSocket=t.websocketImplementation,this.enablePing=t.enablePing,this.enableReconnect=t.enableReconnect||!1,this.automaticallyAuth=t.automaticallyAuth,this.onRelayConnectionFailure=t.onRelayConnectionFailure,this.onRelayConnectionSuccess=t.onRelayConnectionSuccess,this.allowConnectingToRelay=t.allowConnectingToRelay,this.maxWaitForConnection=t.maxWaitForConnection||3e3}async ensureRelay(t,e){t=ln(t);let n=this.relays.get(t);if(n||(n=new Vs(t,{verifyEvent:this.trustedRelayURLs.has(t)?Su:this.verifyEvent,websocketImplementation:this._WebSocket,enablePing:this.enablePing,enableReconnect:this.enableReconnect}),n.onclose=()=>{this.relays.delete(t)},this.relays.set(t,n)),this.automaticallyAuth){let r=this.automaticallyAuth(t);r&&(n.onauth=r)}try{await n.connect({timeout:e?.connectionTimeout,abort:e?.abort})}catch(r){throw this.relays.delete(t),r}return n}close(t){t.map(ln).forEach(e=>{this.relays.get(e)?.close(),this.relays.delete(e)})}subscribe(t,e,n){let r=[],o=[];for(let i=0;i<t.length;i++){let s=ln(t[i]);r.find(a=>a.url===s)||o.indexOf(s)===-1&&(o.push(s),r.push({url:s,filter:e}))}return this.subscribeMap(r,n)}subscribeMany(t,e,n){return this.subscribe(t,e,n)}subscribeMap(t,e){let n=new Map;for(let u of t){let{url:f,filter:y}=u;n.has(f)||n.set(f,[]),n.get(f).push(y)}let r=Array.from(n.entries()).map(([u,f])=>({url:u,filters:f}));this.trackRelays&&(e.receivedEvent=(u,f)=>{let y=this.seenOn.get(f);y||(y=new Set,this.seenOn.set(f,y)),y.add(u)});let o=new Set,i=[],s=[],a=u=>{s[u]||(s[u]=!0,s.filter(f=>f).length===r.length&&(e.oneose?.(),a=()=>{}))},c=[],l=(u,f)=>{c[u]||(a(u),c[u]=f,c.filter(y=>y).length===r.length&&(e.onclose?.(c),l=()=>{}))},d=u=>{if(e.alreadyHaveEvent?.(u))return!0;let f=o.has(u);return o.add(u),f},g=Promise.all(r.map(async({url:u,filters:f},y)=>{if(this.allowConnectingToRelay?.(u,["read",f])===!1){l(y,"connection skipped by allowConnectingToRelay");return}let b;try{b=await this.ensureRelay(u,{connectionTimeout:this.maxWaitForConnection<(e.maxWait||0)?Math.max(e.maxWait*.8,e.maxWait-1e3):this.maxWaitForConnection,abort:e.abort})}catch(R){this.onRelayConnectionFailure?.(u),l(y,R?.message||String(R));return}this.onRelayConnectionSuccess?.(u);let v=b.subscribe(f,{...e,oneose:()=>a(y),onclose:R=>{R.startsWith("auth-required: ")&&e.onauth?b.auth(e.onauth).then(()=>{b.subscribe(f,{...e,oneose:()=>a(y),onclose:O=>{l(y,O)},alreadyHaveEvent:d,eoseTimeout:e.maxWait,abort:e.abort})}).catch(O=>{l(y,`auth was required and attempted, but failed with: ${O}`)}):l(y,R)},alreadyHaveEvent:d,eoseTimeout:e.maxWait,abort:e.abort});i.push(v)}));return{async close(u){await g,i.forEach(f=>{f.close(u)})}}}subscribeEose(t,e,n){let r;return r=this.subscribe(t,e,{...n,oneose(){let o="closed automatically on eose";r?r.close(o):n.onclose?.(t.map(i=>o))}}),r}subscribeManyEose(t,e,n){return this.subscribeEose(t,e,n)}async querySync(t,e,n){return new Promise(async r=>{let o=[];this.subscribeEose(t,e,{...n,onevent(i){o.push(i)},onclose(i){r(o)}})})}async get(t,e,n){e.limit=1;let r=await this.querySync(t,e,n);return r.sort((o,i)=>i.created_at-o.created_at),r[0]||null}publish(t,e,n){return t.map(ln).map(async(r,o,i)=>{if(i.indexOf(r)!==o)return Promise.reject("duplicate url");if(this.allowConnectingToRelay?.(r,["write",e])===!1)return Promise.reject("connection skipped by allowConnectingToRelay");let s;try{s=await this.ensureRelay(r,{connectionTimeout:this.maxWaitForConnection<(n?.maxWait||0)?Math.max(n.maxWait*.8,n.maxWait-1e3):this.maxWaitForConnection,abort:n?.abort})}catch(a){return this.onRelayConnectionFailure?.(r),"connection failure: "+String(a)}return s.publish(e).catch(async a=>{if(a instanceof Error&&a.message.startsWith("auth-required: ")&&n?.onauth)return await s.auth(n.onauth),s.publish(e);throw a}).then(a=>{if(this.trackRelays){let c=this.seenOn.get(e.id);c||(c=new Set,this.seenOn.set(e.id,c)),c.add(s)}return a})})}listConnectionStatus(){let t=new Map;return this.relays.forEach((e,n)=>t.set(n,e.connected)),t}destroy(){this.relays.forEach(t=>t.close()),this.relays=new Map}pruneIdleRelays(t=1e4){let e=[];for(let[n,r]of this.relays)r.idleSince&&Date.now()-r.idleSince>=t&&(this.relays.delete(n),e.push(n),r.close());return e}},Ks;try{Ks=WebSocket}catch{}var Bu=class extends ku{constructor(t){super({verifyEvent:Ms,websocketImplementation:Ks,maxWaitForConnection:3e3,...t})}},zs;try{zs=fetch}catch{}var Au=/^bunker:\/\/([0-9a-f]{64})\??([?\/\w:.=&%-]*)$/;async function js(t){let e=t.match(Au);if(e)try{let n=e[1],r=new URLSearchParams(e[2]);return{pubkey:n,relays:r.getAll("relay"),secret:r.get("secret")}}catch{}return Ru(t)}async function Ru(t){let e=t.match(gu);if(!e)return null;let[n,r="_",o]=e;try{let i=`https://${o}/.well-known/nostr.json?name=${r}`,s=await(await zs(i,{redirect:"error"})).json(),a=s.names[r],c=s.nip46[a]||[];return{pubkey:a,relays:c,secret:null}}catch{return null}}var _t=class{constructor(t,e){S(this,"params");S(this,"pool");S(this,"subCloser");S(this,"isOpen");S(this,"serial");S(this,"idPrefix");S(this,"listeners");S(this,"waitingForAuth");S(this,"secretKey");S(this,"conversationKey");S(this,"bp");S(this,"cachedPubKey");this.params=e,this.pool=e.pool||new Bu,this.secretKey=t,this.isOpen=!1,this.idPrefix=Math.random().toString(36).substring(7),this.serial=0,this.listeners={},this.waitingForAuth={}}static fromBunker(t,e,n={}){if(e.relays.length===0)throw new Error("no relays specified for this bunker");let r=new _t(t,n);return r.conversationKey=mo(t,e.pubkey),r.bp=e,r.setupSubscription(),r}static async fromURI(t,e,n={},r=3e5){let o=new _t(t,n),i=new URL(e),s=Ps(t);return new Promise((a,c)=>{let l=!1,d=o.pool.subscribe(i.searchParams.getAll("relay"),{kinds:[wo],"#p":[s],limit:0},{onevent:async g=>{try{let u=mo(t,g.pubkey),f=Hs(g.content,u);JSON.parse(f).result===i.searchParams.get("secret")&&(d.close(),o.bp={pubkey:g.pubkey,relays:i.searchParams.getAll("relay"),secret:i.searchParams.get("secret")},o.conversationKey=mo(t,g.pubkey),o.setupSubscription(),l=!0,n.skipSwitchRelays||await Promise.race([new Promise(b=>setTimeout(b,1e3)),o.switchRelays()]),a(o))}catch(u){console.warn("failed to process potential connection event",u)}},onclose:()=>{l||c(new Error("subscription closed before connection was established."))},maxWait:typeof r=="number"?r:void 0,abort:typeof r!="number"?r:void 0})})}setupSubscription(){let t=this.listeners,e=this.waitingForAuth,n=this.conversationKey;this.subCloser=this.pool.subscribe(this.bp.relays,{kinds:[wo],authors:[this.bp.pubkey],"#p":[Ps(this.secretKey)],limit:0},{onevent:async r=>{let o=JSON.parse(Hs(r.content,n)),{id:i,result:s,error:a}=o;if(s==="auth_url"&&e[i]){delete e[i],this.params.onauth?this.params.onauth(a):console.warn(`nostr-tools/nip46: remote signer ${this.bp.pubkey} tried to send an "auth_url"='${a}' but there was no onauth() callback configured.`);return}let c=t[i];c&&(a?c.reject(a):s&&c.resolve(s),delete t[i])},onclose:()=>{this.subCloser=void 0}}),this.isOpen=!0}async switchRelays(){try{let t=await this.sendRequest("switch_relays",[]),e=JSON.parse(t);if(!e||JSON.stringify(e.sort())===JSON.stringify(this.bp.relays))return!1;this.bp.relays=e;let n=this.subCloser;return setTimeout(()=>{n.close()},5e3),this.subCloser=void 0,this.setupSubscription(),!0}catch{return!1}}async close(){this.isOpen=!1,this.subCloser.close()}async sendRequest(t,e){return new Promise(async(n,r)=>{try{if(!this.isOpen)throw new Error("this signer is not open anymore, create a new one");this.subCloser||this.setupSubscription(),this.serial++;let o=`${this.idPrefix}-${this.serial}`,i=hu(JSON.stringify({id:o,method:t,params:e}),this.conversationKey),s=au({kind:wo,tags:[["p",this.bp.pubkey]],content:i,created_at:Math.floor(Date.now()/1e3)},this.secretKey);this.listeners[o]={resolve:n,reject:r},this.waitingForAuth[o]=!0,await Promise.any(this.pool.publish(this.bp.relays,s))}catch(o){r(o)}})}async ping(){let t=await this.sendRequest("ping",[]);if(t!=="pong")throw new Error(`result is not pong: ${t}`)}async connect(){await this.sendRequest("connect",[this.bp.pubkey,this.bp.secret||""])}async getPublicKey(){return this.cachedPubKey||(this.cachedPubKey=await this.sendRequest("get_public_key",[])),this.cachedPubKey}async signEvent(t){let e=await this.sendRequest("sign_event",[JSON.stringify(t)]),n=JSON.parse(e);if(Ms(n))return n;throw new Error(`event returned from bunker is improperly signed: ${JSON.stringify(n)}`)}async nip04Encrypt(t,e){return await this.sendRequest("nip04_encrypt",[t,e])}async nip04Decrypt(t,e){return await this.sendRequest("nip04_decrypt",[t,e])}async nip44Encrypt(t,e){return await this.sendRequest("nip44_encrypt",[t,e])}async nip44Decrypt(t,e){return await this.sendRequest("nip44_decrypt",[t,e])}};var Ut=Symbol("verified"),Cu=t=>t instanceof Object;function Tu(t){if(!Cu(t)||typeof t.kind!="number"||typeof t.content!="string"||typeof t.created_at!="number"||typeof t.pubkey!="string"||!t.pubkey.match(/^[a-f0-9]{64}$/)||!Array.isArray(t.tags))return!1;for(let e=0;e<t.tags.length;e++){let n=t.tags[e];if(!Array.isArray(n))return!1;for(let r=0;r<n.length;r++)if(typeof n[r]!="string")return!1}return!0}var b0=new TextDecoder("utf-8"),Lu=new TextEncoder,Nu=class{generateSecretKey(){return xe.utils.randomSecretKey()}getPublicKey(t){return ee(xe.getPublicKey(t))}finalizeEvent(t,e){let n=t;return n.pubkey=ee(xe.getPublicKey(e)),n.id=Bo(n),n.sig=ee(xe.sign(ne(Bo(n)),e)),n[Ut]=!0,n}verifyEvent(t){if(typeof t[Ut]=="boolean")return t[Ut];try{let e=Bo(t);if(e!==t.id)return t[Ut]=!1,!1;let n=xe.verify(ne(t.sig),ne(e),ne(t.pubkey));return t[Ut]=n,n}catch{return t[Ut]=!1,!1}}};function Iu(t){if(!Tu(t))throw new Error("can't serialize event with wrong or missing properties");return JSON.stringify([0,t.pubkey,t.created_at,t.kind,t.tags,t.content])}function Bo(t){let e=ue(Lu.encode(Iu(t)));return ee(e)}var Qn=new Nu,m0=Qn.generateSecretKey,Zs=Qn.getPublicKey,Gs=Qn.finalizeEvent,w0=Qn.verifyEvent;var er=new TextDecoder("utf-8"),k0=new TextEncoder;var _u=5e3;function Ws(t){let{prefix:e,words:n}=yo.decode(t,_u),r=new Uint8Array(yo.fromWords(n));switch(e){case"nprofile":{let o=Ao(r);if(!o[0]?.[0])throw new Error("missing TLV 0 for nprofile");if(o[0][0].length!==32)throw new Error("TLV 0 should be 32 bytes");return{type:"nprofile",data:{pubkey:ee(o[0][0]),relays:o[1]?o[1].map(i=>er.decode(i)):[]}}}case"nevent":{let o=Ao(r);if(!o[0]?.[0])throw new Error("missing TLV 0 for nevent");if(o[0][0].length!==32)throw new Error("TLV 0 should be 32 bytes");if(o[2]&&o[2][0].length!==32)throw new Error("TLV 2 should be 32 bytes");if(o[3]&&o[3][0].length!==4)throw new Error("TLV 3 should be 4 bytes");return{type:"nevent",data:{id:ee(o[0][0]),relays:o[1]?o[1].map(i=>er.decode(i)):[],author:o[2]?.[0]?ee(o[2][0]):void 0,kind:o[3]?.[0]?parseInt(ee(o[3][0]),16):void 0}}}case"naddr":{let o=Ao(r);if(!o[0]?.[0])throw new Error("missing TLV 0 for naddr");if(!o[2]?.[0])throw new Error("missing TLV 2 for naddr");if(o[2][0].length!==32)throw new Error("TLV 2 should be 32 bytes");if(!o[3]?.[0])throw new Error("missing TLV 3 for naddr");if(o[3][0].length!==4)throw new Error("TLV 3 should be 4 bytes");return{type:"naddr",data:{identifier:er.decode(o[0][0]),pubkey:ee(o[2][0]),kind:parseInt(ee(o[3][0]),16),relays:o[1]?o[1].map(i=>er.decode(i)):[]}}}case"nsec":return{type:e,data:r};case"npub":case"note":return{type:e,data:ee(r)};default:throw new Error(`unknown prefix ${e}`)}}function Ao(t){let e={},n=t;for(;n.length>0;){let r=n[0],o=n[1],i=n.slice(2,2+o);if(n=n.slice(2+o),i.length<o)throw new Error(`not enough data to read on TLV ${r}`);e[r]=e[r]||[],e[r].push(i)}return e}var Uu=new TextDecoder("utf-8"),Ys=new TextEncoder,Ro=1,Co=4294967295,To=65536;function Ot(t,e){let n=Kn.getSharedSecret(t,ne("02"+e)).subarray(1,33);return Gn(ue,n,Ys.encode("nip44-v2"))}function Js(t,e){let n=Wn(ue,t,e,76);return{chacha_key:n.subarray(0,32),chacha_nonce:n.subarray(32,44),hmac_key:n.subarray(44,76)}}function Xs(t){if(!Number.isSafeInteger(t)||t<1)throw new Error("expected positive integer");if(t<=32)return 32;let e=2**(Math.floor(Math.log2(t-1))+1),n=e<=256?32:e/8;return n*(Math.floor((t-1)/n)+1)}function Ou(t){if(!Number.isSafeInteger(t)||t<Ro||t>65535)throw new Error("invalid plaintext size: must be between 1 and 65535 bytes");let e=new Uint8Array(2);return new DataView(e.buffer).setUint16(0,t,!1),e}function Pu(t){if(!Number.isSafeInteger(t)||t<To||t>Co)throw new Error("invalid plaintext size: must be between 65536 and 4294967295 bytes");let e=new Uint8Array(4);return new DataView(e.buffer).setUint32(0,t,!1),e}function Hu(t){let e=Ys.encode(t),n=e.length;if(n<Ro||n>Co)throw new Error("invalid plaintext size: must be between 1 and 4294967295 bytes");let r=n>=To?te(new Uint8Array([0,0]),Pu(n)):Ou(n),o=new Uint8Array(Xs(n)-n);return te(r,e,o)}function Mu(t){let e=new DataView(t.buffer,t.byteOffset,t.byteLength),n=e.getUint16(0),r,o;if(n===0){if(r=e.getUint32(2),r<To)throw new Error("invalid padding");o=6}else r=n,o=2;let i=t.subarray(o,o+r);if(r<Ro||r>Co||i.length!==r||t.length!==o+Xs(r))throw new Error("invalid padding");return Uu.decode(i)}function Fs(t,e,n){if(n.length!==32)throw new Error("AAD associated data must be 32 bytes");let r=te(n,e);return Ce(ue,t,r)}function qu(t){if(typeof t!="string")throw new Error("payload must be a valid string");let e=t.length;if(e<132)throw new Error("invalid payload length: "+e);if(t[0]==="#")throw new Error("unknown encryption version");let n;try{n=It.decode(t)}catch(i){throw new Error("invalid base64: "+i.message)}let r=n.length;if(r<99)throw new Error("invalid data length: "+r);let o=n[0];if(o!==2)throw new Error("unknown encryption version "+o);return{nonce:n.subarray(1,33),ciphertext:n.subarray(33,-32),mac:n.subarray(-32)}}function Qs(t,e,n=ke(32)){let{chacha_key:r,chacha_nonce:o,hmac_key:i}=Js(e,n),s=Hu(t),a=ut(r,o,s),c=Fs(i,a,n);return It.encode(te(new Uint8Array([2]),n,a,c))}function un(t,e){let{nonce:n,ciphertext:r,mac:o}=qu(t),{chacha_key:i,chacha_nonce:s,hmac_key:a}=Js(e,n),c=Fs(a,r,n);if(!Lt(c,o))throw new Error("invalid MAC");let l=ut(i,s,r);return Mu(l)}function fn(){return typeof window<"u"&&!!window.nostr&&typeof window.nostr.signEvent=="function"}var Lo=class{constructor(e,n){this.pubkey=e;this.provider=n;this.method="nip07";this.capabilities={canSignEvents:!0,hasNip44:!!n.nip44},n.nip44&&(this.nip44={encrypt:(r,o)=>n.nip44.encrypt(r,o),decrypt:(r,o)=>n.nip44.decrypt(r,o)})}async signEvent(e){return Du(()=>this.provider.signEvent(e))}async close(){}};async function Du(t){try{return await t()}catch(e){if(!$u(e))throw e;return await new Promise(n=>setTimeout(n,250)),t()}}function $u(t){let e=t instanceof Error?t.message:String(t);return/Request failed|Receiving end does not exist|Extension context invalidated|message port closed|context invalidated/i.test(e)}async function dn(){if(!fn())throw new Error("no-nip07-provider");let t=window.nostr,e=await t.getPublicKey();if(!/^[0-9a-f]{64}$/i.test(e))throw new Error("invalid-pubkey-from-nip07");return new Lo(e.toLowerCase(),t)}var tr=class{constructor(e,n,r,o){this.pubkey=e;this.bunker=n;this.bunkerUri=r;this.clientSecretKey=o;this.method="bunker";this.capabilities={canSignEvents:!0,hasNip44:!0};this.nip44={encrypt:(i,s)=>n.nip44Encrypt(i,s),decrypt:(i,s)=>n.nip44Decrypt(i,s)}}async signEvent(e){let{pubkey:n,...r}=e,o={kind:r.kind,content:r.content,created_at:r.created_at??Math.floor(Date.now()/1e3),tags:r.tags??[]};return await this.bunker.signEvent(o)}async close(){await this.bunker.close()}};async function ea(t){let{uri:e,clientSecretKey:n,abortSignal:r}=t;if(n.length!==32)throw new Error("invalid-client-secret-key");let o=r?await _t.fromURI(n,e,void 0,r):await _t.fromURI(n,e),i=await o.getPublicKey();if(!/^[0-9a-f]{64}$/i.test(i))throw await o.close().catch(()=>{}),new Error("invalid-pubkey-from-bunker");return new tr(i.toLowerCase(),o,e,n)}function ta(t){let{clientPubkeyHex:e,relayUrl:n,secret:r}=t;if(!/^[0-9a-f]{64}$/i.test(e))throw new Error("invalid-client-pubkey");if(!/^wss?:\/\//.test(n))throw new Error("invalid-relay-url");let o=new URLSearchParams({relay:n,secret:r});return t.perms&&t.perms.length>0&&o.set("perms",t.perms.join(",")),t.appName&&o.set("name",t.appName),t.appUrl&&o.set("url",t.appUrl),`nostrconnect://${e}?${o.toString()}`}async function Vu(t,e,n){let r,o=new Promise((i,s)=>{r=setTimeout(()=>{n.close().catch(()=>{}),s(new Error("bunker-connect-timeout"))},e)});try{return await Promise.race([t,o])}finally{r!==void 0&&clearTimeout(r)}}async function Pt(t){let e=t.uri.trim();if(!e)throw new Error("empty-bunker-uri");let n=await js(e);if(!n)throw new Error("invalid-bunker-uri");let r=t.clientSecretKey??Ku();if(r.length!==32)throw new Error("invalid-client-secret-key");let o=_t.fromBunker(r,n,{onauth:t.onauth}),i=(async()=>(await o.connect(),o.getPublicKey()))(),s=t.timeoutMs&&t.timeoutMs>0?await Vu(i,t.timeoutMs,o):await i;if(!/^[0-9a-f]{64}$/i.test(s))throw await o.close().catch(()=>{}),new Error("invalid-pubkey-from-bunker");return new tr(s.toLowerCase(),o,e,r)}function Ku(){let t=new Uint8Array(32);return crypto.getRandomValues(t),t}var No=class{constructor(e,n){this.pubkey=e;this.privkey=n;this.method="nsec";this.capabilities={canSignEvents:!0,hasNip44:!0};this.nip44={encrypt:async(r,o)=>Qs(o,Ot(this.privkey,r)),decrypt:async(r,o)=>un(o,Ot(this.privkey,r))}}async signEvent(e){let n={kind:e.kind,content:e.content,created_at:e.created_at??Math.floor(Date.now()/1e3),tags:e.tags??[]};return Gs(n,this.privkey)}async close(){this.privkey.fill(0)}};function na(t){let e=t.trim();if(!e)throw new Error("empty-nsec");let n;if(e.startsWith("nsec1")){let o=Ws(e);if(o.type!=="nsec")throw new Error("not-an-nsec");n=o.data}else if(/^[0-9a-f]{64}$/i.test(e)){n=new Uint8Array(32);for(let o=0;o<32;o++)n[o]=parseInt(e.slice(o*2,o*2+2),16)}else throw new Error("invalid-nsec-format");if(n.length!==32)throw new Error("invalid-nsec-length");let r=Zs(n);if(!/^[0-9a-f]{64}$/i.test(r))throw new Error("invalid-pubkey-from-nsec");return new No(r.toLowerCase(),n)}var Ee=class{constructor(e,n){this.pubkey=e;this.authEvent=n;this.method="redirect";this.capabilities={canSignEvents:!1,hasNip44:!1}}async signEvent(e){throw new Error("signer-auth-only: this session was established via redirect and cannot sign new events. Install a NIP-07 extension (bark, Alby) or paste a bunker URI to upgrade.")}async close(){}},nr=class{constructor(e,n,r,o,i,s=!0){this.pubkey=e;this.authEvent=n;this.upgrade=r;this.bunkerUri=o;this.clientSecretKey=i;this.method="bunker";this.capabilities={canSignEvents:s,hasNip44:s},this.upgrade.then(a=>{a&&(this.capabilities.canSignEvents=!0,this.capabilities.hasNip44=!0)}),this.nip44={encrypt:async(a,c)=>(await this.live()).nip44.encrypt(a,c),decrypt:async(a,c)=>(await this.live()).nip44.decrypt(a,c)}}async live(){let e=await this.upgrade;if(!e)throw new Error("signer-auth-only: the redirect bunker handoff did not connect, so this session cannot sign. Reconnect the signer or paste a bunker URI to upgrade.");return e}async signEvent(e){return(await this.live()).signEvent(e)}async close(){let e=await this.upgrade.catch(()=>null);e&&await e.close().catch(()=>{})}};function Pe(t){try{return typeof localStorage<"u"?localStorage.getItem(t):null}catch{return null}}function He(t,e){try{typeof localStorage<"u"&&localStorage.setItem(t,e)}catch{}}function Ye(t){try{typeof localStorage<"u"&&localStorage.removeItem(t)}catch{}}function ra(t){He(F.pubkey,t.pubkey),He(F.method,t.method),He(F.authEvent,t.authEventJson),t.bunkerUri!==void 0&&He(F.bunkerUri,t.bunkerUri),t.bunkerClientSkHex!==void 0&&He(F.bunkerClientSk,t.bunkerClientSkHex),t.expiresAt!==void 0&&He(F.expiresAt,String(t.expiresAt)),t.displayName!==void 0&&He(F.displayName,t.displayName)}function oa(){let t=Pe(F.pubkey),e=Pe(F.method),n=Pe(F.authEvent);if(!t||!e||!n||!/^[0-9a-f]{64}$/i.test(t)||e!=="nip07"&&e!=="redirect"&&e!=="bunker"&&e!=="amber")return null;let r;try{if(r=JSON.parse(n),typeof r!="object"||r===null||r.pubkey!==t)return null}catch{return null}let o=Pe(F.expiresAt),i=o?Number(o):void 0;if(i!==void 0&&Number.isFinite(i)&&Date.now()>i)return Je(),null;let s={pubkey:t,method:e,authEventJson:n},a=Pe(F.bunkerUri),c=Pe(F.bunkerClientSk),l=Pe(F.displayName);return a&&(s.bunkerUri=a),c&&(s.bunkerClientSkHex=c),i!==void 0&&Number.isFinite(i)&&(s.expiresAt=i),l&&(s.displayName=l),s}function Je(){Ye(F.pubkey),Ye(F.method),Ye(F.authEvent),Ye(F.bunkerUri),Ye(F.bunkerClientSk),Ye(F.expiresAt),Ye(F.displayName)}function ht(){let t=Pe(F.clientSk);if(t&&/^[0-9a-f]{64}$/i.test(t))try{return zu(t)}catch{}let e=new Uint8Array(32);return crypto.getRandomValues(e),He(F.clientSk,Io(e)),e}function rr(t){He(F.pendingRedirect,JSON.stringify(t))}function or(){let t=Pe(F.pendingRedirect);if(!t)return null;try{let e=JSON.parse(t),n=e.challenge,r=e.origin,o=e.appName,i=e.createdAt;return typeof n!="string"||!/^[0-9a-f]{64}$/i.test(n)||typeof r!="string"||r.length===0||typeof o!="string"||o.length===0||typeof i!="number"||!Number.isFinite(i)?null:{challenge:n,origin:r,appName:o,createdAt:i}}catch{return null}}function ir(){Ye(F.pendingRedirect)}function Io(t){let e="";for(let n=0;n<t.length;n++)e+=t[n].toString(16).padStart(2,"0");return e}function zu(t){if(t.length%2!==0)throw new Error("odd-hex-length");let e=new Uint8Array(t.length/2);for(let n=0;n<e.length;n++)e[n]=parseInt(t.slice(n*2,n*2+2),16);return e}function sr(){return typeof navigator>"u"?!1:/android/i.test(navigator.userAgent)}var ia=/^[0-9a-f]{64}$/i;function ju(t){return{kind:21236,content:"",created_at:Math.floor(Date.now()/1e3),tags:[["challenge",t.challenge],["origin",t.origin],["app",t.appName]]}}function Zu(t){let e=ju(t),n=JSON.stringify(e),r=typeof btoa=="function"?btoa(n):Buffer.from(n,"utf-8").toString("base64"),o=t.redirectCallback??`${t.origin}/?signet_amber=1`,i=new URLSearchParams({type:"sign_event",compressionType:"base64",returnType:"event",callbackUrl:o});return`nostrsigner:${r}?${i.toString()}`}function sa(t){if(typeof window>"u")throw new Error("signet-login: amber mode requires a browser environment");let e={challenge:t.challenge,origin:t.origin,appName:t.appName,createdAt:Date.now()};return rr(e),window.location.href=Zu(t),new Promise(()=>{})}function Gu(){if(typeof window>"u")return;let t=new URL(window.location.href),e=!1;for(let r of["event","signet_amber","error"])t.searchParams.has(r)&&(t.searchParams.delete(r),e=!0);if(!e)return;let n=t.pathname+(t.search?t.search:"")+t.hash;try{window.history.replaceState(window.history.state,document.title,n)}catch{}}function aa(){if(typeof window>"u")return{kind:"no-callback"};let t=new URLSearchParams(window.location.search);if(!(t.has("signet_amber")||t.has("event")))return{kind:"no-callback"};let n=g=>(ir(),Gu(),g);if(t.get("error")==="denied")return n({kind:"denied"});let r=or();if(!r)return n({kind:"invalid",reason:"no-pending-state"});if(r.origin!==window.location.origin)return n({kind:"invalid",reason:"origin-mismatch"});if(Date.now()-r.createdAt>Tn)return n({kind:"invalid",reason:"pending-stale"});let o=t.get("event");if(!o)return n({kind:"invalid",reason:"no-event-param"});let i;try{let g;try{g=typeof atob=="function"?atob(o):Buffer.from(o,"base64").toString("utf-8")}catch{g=o}i=JSON.parse(g)}catch{return n({kind:"invalid",reason:"event-malformed"})}if(typeof i!="object"||i===null)return n({kind:"invalid",reason:"event-not-object"});let s=i;if(typeof s.id!="string"||!ia.test(s.id)||typeof s.pubkey!="string"||!ia.test(s.pubkey)||typeof s.sig!="string"||!/^[0-9a-f]{128}$/i.test(s.sig)||typeof s.created_at!="number"||!Array.isArray(s.tags)||s.kind!==21236||typeof s.content!="string")return n({kind:"invalid",reason:"event-shape-invalid"});let a=s.tags.find(g=>Array.isArray(g)&&g[0]==="challenge");if(!a||a[1]!==r.challenge)return n({kind:"invalid",reason:"challenge-mismatch"});let c={id:s.id.toLowerCase(),pubkey:s.pubkey.toLowerCase(),kind:21236,created_at:s.created_at,tags:s.tags,content:s.content,sig:s.sig.toLowerCase()},l=new Ee(c.pubkey,c),d={pubkey:c.pubkey,method:"amber",signer:l,authEvent:c};return n({kind:"session",session:d})}var gt=typeof globalThis=="object"&&"crypto"in globalThis?globalThis.crypto:void 0;function pt(t){return t instanceof Uint8Array||ArrayBuffer.isView(t)&&t.constructor.name==="Uint8Array"}function hn(t){if(!Number.isSafeInteger(t)||t<0)throw new Error("positive integer expected, got "+t)}function Ae(t,...e){if(!pt(t))throw new Error("Uint8Array expected");if(e.length>0&&!e.includes(t.length))throw new Error("Uint8Array expected of length "+e+", got length="+t.length)}function ar(t){if(typeof t!="function"||typeof t.create!="function")throw new Error("Hash should be wrapped by utils.createHasher");hn(t.outputLen),hn(t.blockLen)}function Mt(t,e=!0){if(t.destroyed)throw new Error("Hash instance has been destroyed");if(e&&t.finished)throw new Error("Hash#digest() has already been called")}function la(t,e){Ae(t);let n=e.outputLen;if(t.length<n)throw new Error("digestInto() expects output buffer of length at least "+n)}function yt(...t){for(let e=0;e<t.length;e++)t[e].fill(0)}function cr(t){return new DataView(t.buffer,t.byteOffset,t.byteLength)}function Re(t,e){return t<<32-e|t>>>e}var ua=typeof Uint8Array.from([]).toHex=="function"&&typeof Uint8Array.fromHex=="function",Wu=Array.from({length:256},(t,e)=>e.toString(16).padStart(2,"0"));function le(t){if(Ae(t),ua)return t.toHex();let e="";for(let n=0;n<t.length;n++)e+=Wu[t[n]];return e}var Me={_0:48,_9:57,A:65,F:70,a:97,f:102};function ca(t){if(t>=Me._0&&t<=Me._9)return t-Me._0;if(t>=Me.A&&t<=Me.F)return t-(Me.A-10);if(t>=Me.a&&t<=Me.f)return t-(Me.a-10)}function bt(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);if(ua)return Uint8Array.fromHex(t);let e=t.length,n=e/2;if(e%2)throw new Error("hex string expected, got unpadded hex of length "+e);let r=new Uint8Array(n);for(let o=0,i=0;o<n;o++,i+=2){let s=ca(t.charCodeAt(i)),a=ca(t.charCodeAt(i+1));if(s===void 0||a===void 0){let c=t[i]+t[i+1];throw new Error('hex string expected, got non-hex character "'+c+'" at index '+i)}r[o]=s*16+a}return r}function lr(t){if(typeof t!="string")throw new Error("string expected");return new Uint8Array(new TextEncoder().encode(t))}function gn(t){return typeof t=="string"&&(t=lr(t)),Ae(t),t}function pe(...t){let e=0;for(let r=0;r<t.length;r++){let o=t[r];Ae(o),e+=o.length}let n=new Uint8Array(e);for(let r=0,o=0;r<t.length;r++){let i=t[r];n.set(i,o),o+=i.length}return n}var Ht=class{};function fa(t){let e=r=>t().update(gn(r)).digest(),n=t();return e.outputLen=n.outputLen,e.blockLen=n.blockLen,e.create=()=>t(),e}function mt(t=32){if(gt&&typeof gt.getRandomValues=="function")return gt.getRandomValues(new Uint8Array(t));if(gt&&typeof gt.randomBytes=="function")return Uint8Array.from(gt.randomBytes(t));throw new Error("crypto.getRandomValues must be defined")}function Yu(t,e,n,r){if(typeof t.setBigUint64=="function")return t.setBigUint64(e,n,r);let o=BigInt(32),i=BigInt(4294967295),s=Number(n>>o&i),a=Number(n&i),c=r?4:0,l=r?0:4;t.setUint32(e+c,s,r),t.setUint32(e+l,a,r)}function da(t,e,n){return t&e^~t&n}function ha(t,e,n){return t&e^t&n^e&n}var ur=class extends Ht{constructor(e,n,r,o){super(),this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.blockLen=e,this.outputLen=n,this.padOffset=r,this.isLE=o,this.buffer=new Uint8Array(e),this.view=cr(this.buffer)}update(e){Mt(this),e=gn(e),Ae(e);let{view:n,buffer:r,blockLen:o}=this,i=e.length;for(let s=0;s<i;){let a=Math.min(o-this.pos,i-s);if(a===o){let c=cr(e);for(;o<=i-s;s+=o)this.process(c,s);continue}r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===o&&(this.process(n,0),this.pos=0)}return this.length+=e.length,this.roundClean(),this}digestInto(e){Mt(this),la(e,this),this.finished=!0;let{buffer:n,view:r,blockLen:o,isLE:i}=this,{pos:s}=this;n[s++]=128,yt(this.buffer.subarray(s)),this.padOffset>o-s&&(this.process(r,0),s=0);for(let g=s;g<o;g++)n[g]=0;Yu(r,o-8,BigInt(this.length*8),i),this.process(r,0);let a=cr(e),c=this.outputLen;if(c%4)throw new Error("_sha2: outputLen should be aligned to 32bit");let l=c/4,d=this.get();if(l>d.length)throw new Error("_sha2: outputLen bigger than state");for(let g=0;g<l;g++)a.setUint32(4*g,d[g],i)}digest(){let{buffer:e,outputLen:n}=this;this.digestInto(e);let r=e.slice(0,n);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());let{blockLen:n,buffer:r,length:o,finished:i,destroyed:s,pos:a}=this;return e.destroyed=s,e.finished=i,e.length=o,e.pos=a,o%n&&e.buffer.set(r),e}clone(){return this._cloneInto()}},qe=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var Ju=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Xe=new Uint32Array(64),fr=class extends ur{constructor(e=32){super(64,e,8,!1),this.A=qe[0]|0,this.B=qe[1]|0,this.C=qe[2]|0,this.D=qe[3]|0,this.E=qe[4]|0,this.F=qe[5]|0,this.G=qe[6]|0,this.H=qe[7]|0}get(){let{A:e,B:n,C:r,D:o,E:i,F:s,G:a,H:c}=this;return[e,n,r,o,i,s,a,c]}set(e,n,r,o,i,s,a,c){this.A=e|0,this.B=n|0,this.C=r|0,this.D=o|0,this.E=i|0,this.F=s|0,this.G=a|0,this.H=c|0}process(e,n){for(let g=0;g<16;g++,n+=4)Xe[g]=e.getUint32(n,!1);for(let g=16;g<64;g++){let u=Xe[g-15],f=Xe[g-2],y=Re(u,7)^Re(u,18)^u>>>3,b=Re(f,17)^Re(f,19)^f>>>10;Xe[g]=b+Xe[g-7]+y+Xe[g-16]|0}let{A:r,B:o,C:i,D:s,E:a,F:c,G:l,H:d}=this;for(let g=0;g<64;g++){let u=Re(a,6)^Re(a,11)^Re(a,25),f=d+u+da(a,c,l)+Ju[g]+Xe[g]|0,b=(Re(r,2)^Re(r,13)^Re(r,22))+ha(r,o,i)|0;d=l,l=c,c=a,a=s+f|0,s=i,i=o,o=r,r=f+b|0}r=r+this.A|0,o=o+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,c=c+this.F|0,l=l+this.G|0,d=d+this.H|0,this.set(r,o,i,s,a,c,l,d)}roundClean(){yt(Xe)}destroy(){this.set(0,0,0,0,0,0,0,0),yt(this.buffer)}};var qt=fa(()=>new fr);var dr=class extends Ht{constructor(e,n){super(),this.finished=!1,this.destroyed=!1,ar(e);let r=gn(n);if(this.iHash=e.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let o=this.blockLen,i=new Uint8Array(o);i.set(r.length>o?e.create().update(r).digest():r);for(let s=0;s<i.length;s++)i[s]^=54;this.iHash.update(i),this.oHash=e.create();for(let s=0;s<i.length;s++)i[s]^=106;this.oHash.update(i),yt(i)}update(e){return Mt(this),this.iHash.update(e),this}digestInto(e){Mt(this),Ae(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));let{oHash:n,iHash:r,finished:o,destroyed:i,blockLen:s,outputLen:a}=this;return e=e,e.finished=o,e.destroyed=i,e.blockLen=s,e.outputLen=a,e.oHash=n._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}},_o=(t,e,n)=>new dr(t,e).update(n).digest();_o.create=(t,e)=>new dr(t,e);var Po=BigInt(0),Oo=BigInt(1);function pn(t,e=""){if(typeof t!="boolean"){let n=e&&`"${e}"`;throw new Error(n+"expected boolean, got type="+typeof t)}return t}function Fe(t,e,n=""){let r=pt(t),o=t?.length,i=e!==void 0;if(!r||i&&o!==e){let s=n&&`"${n}" `,a=i?` of length ${e}`:"",c=r?`length=${o}`:`type=${typeof t}`;throw new Error(s+"expected Uint8Array"+a+", got "+c)}return t}function yn(t){let e=t.toString(16);return e.length&1?"0"+e:e}function ga(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);return t===""?Po:BigInt("0x"+t)}function De(t){return ga(le(t))}function Ho(t){return Ae(t),ga(le(Uint8Array.from(t).reverse()))}function Dt(t,e){return bt(t.toString(16).padStart(e*2,"0"))}function Mo(t,e){return Dt(t,e).reverse()}function re(t,e,n){let r;if(typeof e=="string")try{r=bt(e)}catch(i){throw new Error(t+" must be hex string or Uint8Array, cause: "+i)}else if(pt(e))r=Uint8Array.from(e);else throw new Error(t+" must be hex string or Uint8Array");let o=r.length;if(typeof n=="number"&&o!==n)throw new Error(t+" of length "+n+" expected, got "+o);return r}var Uo=t=>typeof t=="bigint"&&Po<=t;function bn(t,e,n){return Uo(t)&&Uo(e)&&Uo(n)&&e<=t&&t<n}function pa(t,e,n,r){if(!bn(e,n,r))throw new Error("expected valid "+t+": "+n+" <= n < "+r+", got "+e)}function hr(t){let e;for(e=0;t>Po;t>>=Oo,e+=1);return e}var Qe=t=>(Oo<<BigInt(t))-Oo;function ya(t,e,n){if(typeof t!="number"||t<2)throw new Error("hashLen must be a number");if(typeof e!="number"||e<2)throw new Error("qByteLen must be a number");if(typeof n!="function")throw new Error("hmacFn must be a function");let r=f=>new Uint8Array(f),o=f=>Uint8Array.of(f),i=r(t),s=r(t),a=0,c=()=>{i.fill(1),s.fill(0),a=0},l=(...f)=>n(s,i,...f),d=(f=r(0))=>{s=l(o(0),f),i=l(),f.length!==0&&(s=l(o(1),f),i=l())},g=()=>{if(a++>=1e3)throw new Error("drbg: tried 1000 values");let f=0,y=[];for(;f<e;){i=l();let b=i.slice();y.push(b),f+=i.length}return pe(...y)};return(f,y)=>{c(),d(f);let b;for(;!(b=y(g()));)d();return c(),b}}function mn(t,e,n={}){if(!t||typeof t!="object")throw new Error("expected valid options object");function r(o,i,s){let a=t[o];if(s&&a===void 0)return;let c=typeof a;if(c!==i||a===null)throw new Error(`param "${o}" is invalid: expected ${i}, got ${c}`)}Object.entries(e).forEach(([o,i])=>r(o,i,!1)),Object.entries(n).forEach(([o,i])=>r(o,i,!0))}function qo(t){let e=new WeakMap;return(n,...r)=>{let o=e.get(n);if(o!==void 0)return o;let i=t(n,...r);return e.set(n,i),i}}var ge=BigInt(0),de=BigInt(1),wt=BigInt(2),wa=BigInt(3),xa=BigInt(4),Ea=BigInt(5),Xu=BigInt(7),va=BigInt(8),Fu=BigInt(9),Sa=BigInt(16);function be(t,e){let n=t%e;return n>=ge?n:e+n}function me(t,e,n){let r=t;for(;e-- >ge;)r*=r,r%=n;return r}function ba(t,e){if(t===ge)throw new Error("invert: expected non-zero number");if(e<=ge)throw new Error("invert: expected positive modulus, got "+e);let n=be(t,e),r=e,o=ge,i=de,s=de,a=ge;for(;n!==ge;){let l=r/n,d=r%n,g=o-s*l,u=i-a*l;r=n,n=d,o=s,i=a,s=g,a=u}if(r!==de)throw new Error("invert: does not exist");return be(o,e)}function Do(t,e,n){if(!t.eql(t.sqr(e),n))throw new Error("Cannot find square root")}function ka(t,e){let n=(t.ORDER+de)/xa,r=t.pow(e,n);return Do(t,r,e),r}function Qu(t,e){let n=(t.ORDER-Ea)/va,r=t.mul(e,wt),o=t.pow(r,n),i=t.mul(e,o),s=t.mul(t.mul(i,wt),o),a=t.mul(i,t.sub(s,t.ONE));return Do(t,a,e),a}function ef(t){let e=et(t),n=Ba(t),r=n(e,e.neg(e.ONE)),o=n(e,r),i=n(e,e.neg(r)),s=(t+Xu)/Sa;return(a,c)=>{let l=a.pow(c,s),d=a.mul(l,r),g=a.mul(l,o),u=a.mul(l,i),f=a.eql(a.sqr(d),c),y=a.eql(a.sqr(g),c);l=a.cmov(l,d,f),d=a.cmov(u,g,y);let b=a.eql(a.sqr(d),c),v=a.cmov(l,d,b);return Do(a,v,c),v}}function Ba(t){if(t<wa)throw new Error("sqrt is not defined for small field");let e=t-de,n=0;for(;e%wt===ge;)e/=wt,n++;let r=wt,o=et(t);for(;ma(o,r)===1;)if(r++>1e3)throw new Error("Cannot find square root: probably non-prime P");if(n===1)return ka;let i=o.pow(r,e),s=(e+de)/wt;return function(c,l){if(c.is0(l))return l;if(ma(c,l)!==1)throw new Error("Cannot find square root");let d=n,g=c.mul(c.ONE,i),u=c.pow(l,e),f=c.pow(l,s);for(;!c.eql(u,c.ONE);){if(c.is0(u))return c.ZERO;let y=1,b=c.sqr(u);for(;!c.eql(b,c.ONE);)if(y++,b=c.sqr(b),y===d)throw new Error("Cannot find square root");let v=de<<BigInt(d-y-1),R=c.pow(g,v);d=y,g=c.sqr(R),u=c.mul(u,g),f=c.mul(f,R)}return f}}function tf(t){return t%xa===wa?ka:t%va===Ea?Qu:t%Sa===Fu?ef(t):Ba(t)}var nf=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function $o(t){let e={ORDER:"bigint",MASK:"bigint",BYTES:"number",BITS:"number"},n=nf.reduce((r,o)=>(r[o]="function",r),e);return mn(t,n),t}function rf(t,e,n){if(n<ge)throw new Error("invalid exponent, negatives unsupported");if(n===ge)return t.ONE;if(n===de)return e;let r=t.ONE,o=e;for(;n>ge;)n&de&&(r=t.mul(r,o)),o=t.sqr(o),n>>=de;return r}function gr(t,e,n=!1){let r=new Array(e.length).fill(n?t.ZERO:void 0),o=e.reduce((s,a,c)=>t.is0(a)?s:(r[c]=s,t.mul(s,a)),t.ONE),i=t.inv(o);return e.reduceRight((s,a,c)=>t.is0(a)?s:(r[c]=t.mul(s,r[c]),t.mul(s,a)),i),r}function ma(t,e){let n=(t.ORDER-de)/wt,r=t.pow(e,n),o=t.eql(r,t.ONE),i=t.eql(r,t.ZERO),s=t.eql(r,t.neg(t.ONE));if(!o&&!i&&!s)throw new Error("invalid Legendre symbol result");return o?1:i?0:-1}function pr(t,e){e!==void 0&&hn(e);let n=e!==void 0?e:t.toString(2).length,r=Math.ceil(n/8);return{nBitLength:n,nByteLength:r}}function et(t,e,n=!1,r={}){if(t<=ge)throw new Error("invalid field: expected ORDER > 0, got "+t);let o,i,s=!1,a;if(typeof e=="object"&&e!=null){if(r.sqrt||n)throw new Error("cannot specify opts in two arguments");let u=e;u.BITS&&(o=u.BITS),u.sqrt&&(i=u.sqrt),typeof u.isLE=="boolean"&&(n=u.isLE),typeof u.modFromBytes=="boolean"&&(s=u.modFromBytes),a=u.allowedLengths}else typeof e=="number"&&(o=e),r.sqrt&&(i=r.sqrt);let{nBitLength:c,nByteLength:l}=pr(t,o);if(l>2048)throw new Error("invalid field: expected ORDER of <= 2048 bytes");let d,g=Object.freeze({ORDER:t,isLE:n,BITS:c,BYTES:l,MASK:Qe(c),ZERO:ge,ONE:de,allowedLengths:a,create:u=>be(u,t),isValid:u=>{if(typeof u!="bigint")throw new Error("invalid field element: expected bigint, got "+typeof u);return ge<=u&&u<t},is0:u=>u===ge,isValidNot0:u=>!g.is0(u)&&g.isValid(u),isOdd:u=>(u&de)===de,neg:u=>be(-u,t),eql:(u,f)=>u===f,sqr:u=>be(u*u,t),add:(u,f)=>be(u+f,t),sub:(u,f)=>be(u-f,t),mul:(u,f)=>be(u*f,t),pow:(u,f)=>rf(g,u,f),div:(u,f)=>be(u*ba(f,t),t),sqrN:u=>u*u,addN:(u,f)=>u+f,subN:(u,f)=>u-f,mulN:(u,f)=>u*f,inv:u=>ba(u,t),sqrt:i||(u=>(d||(d=tf(t)),d(g,u))),toBytes:u=>n?Mo(u,l):Dt(u,l),fromBytes:(u,f=!0)=>{if(a){if(!a.includes(u.length)||u.length>l)throw new Error("Field.fromBytes: expected "+a+" bytes, got "+u.length);let b=new Uint8Array(l);b.set(u,n?0:b.length-u.length),u=b}if(u.length!==l)throw new Error("Field.fromBytes: expected "+l+" bytes, got "+u.length);let y=n?Ho(u):De(u);if(s&&(y=be(y,t)),!f&&!g.isValid(y))throw new Error("invalid field element: outside of range 0..ORDER");return y},invertBatch:u=>gr(g,u),cmov:(u,f,y)=>y?f:u});return Object.freeze(g)}function Aa(t){if(typeof t!="bigint")throw new Error("field order must be bigint");let e=t.toString(2).length;return Math.ceil(e/8)}function Vo(t){let e=Aa(t);return e+Math.ceil(e/2)}function yr(t,e,n=!1){let r=t.length,o=Aa(e),i=Vo(e);if(r<16||r<i||r>1024)throw new Error("expected "+i+"-1024 bytes of input, got "+r);let s=n?Ho(t):De(t),a=be(s,e-de)+de;return n?Mo(a,o):Dt(a,o)}var $t=BigInt(0),xt=BigInt(1);function wn(t,e){let n=e.negate();return t?n:e}function mr(t,e){let n=gr(t.Fp,e.map(r=>r.Z));return e.map((r,o)=>t.fromAffine(r.toAffine(n[o])))}function La(t,e){if(!Number.isSafeInteger(t)||t<=0||t>e)throw new Error("invalid window size, expected [1.."+e+"], got W="+t)}function Ko(t,e){La(t,e);let n=Math.ceil(e/t)+1,r=2**(t-1),o=2**t,i=Qe(t),s=BigInt(t);return{windows:n,windowSize:r,mask:i,maxNumber:o,shiftBy:s}}function Ra(t,e,n){let{windowSize:r,mask:o,maxNumber:i,shiftBy:s}=n,a=Number(t&o),c=t>>s;a>r&&(a-=i,c+=xt);let l=e*r,d=l+Math.abs(a)-1,g=a===0,u=a<0,f=e%2!==0;return{nextN:c,offset:d,isZero:g,isNeg:u,isNegF:f,offsetF:l}}function of(t,e){if(!Array.isArray(t))throw new Error("array expected");t.forEach((n,r)=>{if(!(n instanceof e))throw new Error("invalid point at index "+r)})}function sf(t,e){if(!Array.isArray(t))throw new Error("array of scalars expected");t.forEach((n,r)=>{if(!e.isValid(n))throw new Error("invalid scalar at index "+r)})}var zo=new WeakMap,Na=new WeakMap;function jo(t){return Na.get(t)||1}function Ca(t){if(t!==$t)throw new Error("invalid wNAF")}var br=class{constructor(e,n){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=n}_unsafeLadder(e,n,r=this.ZERO){let o=e;for(;n>$t;)n&xt&&(r=r.add(o)),o=o.double(),n>>=xt;return r}precomputeWindow(e,n){let{windows:r,windowSize:o}=Ko(n,this.bits),i=[],s=e,a=s;for(let c=0;c<r;c++){a=s,i.push(a);for(let l=1;l<o;l++)a=a.add(s),i.push(a);s=a.double()}return i}wNAF(e,n,r){if(!this.Fn.isValid(r))throw new Error("invalid scalar");let o=this.ZERO,i=this.BASE,s=Ko(e,this.bits);for(let a=0;a<s.windows;a++){let{nextN:c,offset:l,isZero:d,isNeg:g,isNegF:u,offsetF:f}=Ra(r,a,s);r=c,d?i=i.add(wn(u,n[f])):o=o.add(wn(g,n[l]))}return Ca(r),{p:o,f:i}}wNAFUnsafe(e,n,r,o=this.ZERO){let i=Ko(e,this.bits);for(let s=0;s<i.windows&&r!==$t;s++){let{nextN:a,offset:c,isZero:l,isNeg:d}=Ra(r,s,i);if(r=a,!l){let g=n[c];o=o.add(d?g.negate():g)}}return Ca(r),o}getPrecomputes(e,n,r){let o=zo.get(n);return o||(o=this.precomputeWindow(n,e),e!==1&&(typeof r=="function"&&(o=r(o)),zo.set(n,o))),o}cached(e,n,r){let o=jo(e);return this.wNAF(o,this.getPrecomputes(o,e,r),n)}unsafe(e,n,r,o){let i=jo(e);return i===1?this._unsafeLadder(e,n,o):this.wNAFUnsafe(i,this.getPrecomputes(i,e,r),n,o)}createCache(e,n){La(n,this.bits),Na.set(e,n),zo.delete(e)}hasCache(e){return jo(e)!==1}};function Ia(t,e,n,r){let o=e,i=t.ZERO,s=t.ZERO;for(;n>$t||r>$t;)n&xt&&(i=i.add(o)),r&xt&&(s=s.add(o)),o=o.double(),n>>=xt,r>>=xt;return{p1:i,p2:s}}function _a(t,e,n,r){of(n,t),sf(r,e);let o=n.length,i=r.length;if(o!==i)throw new Error("arrays of points and scalars must have equal length");let s=t.ZERO,a=hr(BigInt(o)),c=1;a>12?c=a-3:a>4?c=a-2:a>0&&(c=2);let l=Qe(c),d=new Array(Number(l)+1).fill(s),g=Math.floor((e.BITS-1)/c)*c,u=s;for(let f=g;f>=0;f-=c){d.fill(s);for(let b=0;b<i;b++){let v=r[b],R=Number(v>>BigInt(f)&l);d[R]=d[R].add(n[b])}let y=s;for(let b=d.length-1,v=s;b>0;b--)v=v.add(d[b]),y=y.add(v);if(u=u.add(y),f!==0)for(let b=0;b<c;b++)u=u.double()}return u}function Ta(t,e,n){if(e){if(e.ORDER!==t)throw new Error("Field.ORDER must match order: Fp == p, Fn == n");return $o(e),e}else return et(t,{isLE:n})}function Ua(t,e,n={},r){if(r===void 0&&(r=t==="edwards"),!e||typeof e!="object")throw new Error(`expected valid ${t} CURVE object`);for(let c of["p","n","h"]){let l=e[c];if(!(typeof l=="bigint"&&l>$t))throw new Error(`CURVE.${c} must be positive bigint`)}let o=Ta(e.p,n.Fp,r),i=Ta(e.n,n.Fn,r),a=["Gx","Gy","a",t==="weierstrass"?"b":"d"];for(let c of a)if(!o.isValid(e[c]))throw new Error(`CURVE.${c} must be valid field element of CURVE.Fp`);return e=Object.freeze(Object.assign({},e)),{CURVE:e,Fp:o,Fn:i}}var Oa=(t,e)=>(t+(t>=0?e:-e)/Pa)/e;function af(t,e,n){let[[r,o],[i,s]]=e,a=Oa(s*t,n),c=Oa(-o*t,n),l=t-a*r-c*i,d=-a*o-c*s,g=l<Ve,u=d<Ve;g&&(l=-l),u&&(d=-d);let f=Qe(Math.ceil(hr(n)/2))+Vt;if(l<Ve||l>=f||d<Ve||d>=f)throw new Error("splitScalar (endomorphism): failed, k="+t);return{k1neg:g,k1:l,k2neg:u,k2:d}}function Go(t){if(!["compact","recovered","der"].includes(t))throw new Error('Signature format must be "compact", "recovered", or "der"');return t}function Zo(t,e){let n={};for(let r of Object.keys(e))n[r]=t[r]===void 0?e[r]:t[r];return pn(n.lowS,"lowS"),pn(n.prehash,"prehash"),n.format!==void 0&&Go(n.format),n}var Wo=class extends Error{constructor(e=""){super(e)}},$e={Err:Wo,_tlv:{encode:(t,e)=>{let{Err:n}=$e;if(t<0||t>256)throw new n("tlv.encode: wrong tag");if(e.length&1)throw new n("tlv.encode: unpadded data");let r=e.length/2,o=yn(r);if(o.length/2&128)throw new n("tlv.encode: long form length too big");let i=r>127?yn(o.length/2|128):"";return yn(t)+i+o+e},decode(t,e){let{Err:n}=$e,r=0;if(t<0||t>256)throw new n("tlv.encode: wrong tag");if(e.length<2||e[r++]!==t)throw new n("tlv.decode: wrong tlv");let o=e[r++],i=!!(o&128),s=0;if(!i)s=o;else{let c=o&127;if(!c)throw new n("tlv.decode(long): indefinite length not supported");if(c>4)throw new n("tlv.decode(long): byte length is too big");let l=e.subarray(r,r+c);if(l.length!==c)throw new n("tlv.decode: length bytes not complete");if(l[0]===0)throw new n("tlv.decode(long): zero leftmost byte");for(let d of l)s=s<<8|d;if(r+=c,s<128)throw new n("tlv.decode(long): not minimal encoding")}let a=e.subarray(r,r+s);if(a.length!==s)throw new n("tlv.decode: wrong value length");return{v:a,l:e.subarray(r+s)}}},_int:{encode(t){let{Err:e}=$e;if(t<Ve)throw new e("integer: negative integers are not allowed");let n=yn(t);if(Number.parseInt(n[0],16)&8&&(n="00"+n),n.length&1)throw new e("unexpected DER parsing assertion: unpadded hex");return n},decode(t){let{Err:e}=$e;if(t[0]&128)throw new e("invalid signature integer: negative");if(t[0]===0&&!(t[1]&128))throw new e("invalid signature integer: unnecessary leading zero");return De(t)}},toSig(t){let{Err:e,_int:n,_tlv:r}=$e,o=re("signature",t),{v:i,l:s}=r.decode(48,o);if(s.length)throw new e("invalid signature: left bytes after parsing");let{v:a,l:c}=r.decode(2,i),{v:l,l:d}=r.decode(2,c);if(d.length)throw new e("invalid signature: left bytes after parsing");return{r:n.decode(a),s:n.decode(l)}},hexFromSig(t){let{_tlv:e,_int:n}=$e,r=e.encode(2,n.encode(t.r)),o=e.encode(2,n.encode(t.s)),i=r+o;return e.encode(48,i)}},Ve=BigInt(0),Vt=BigInt(1),Pa=BigInt(2),wr=BigInt(3),cf=BigInt(4);function tt(t,e){let{BYTES:n}=t,r;if(typeof e=="bigint")r=e;else{let o=re("private key",e);try{r=t.fromBytes(o)}catch{throw new Error(`invalid private key: expected ui8a of size ${n}, got ${typeof e}`)}}if(!t.isValidNot0(r))throw new Error("invalid private key: out of range [1..N-1]");return r}function lf(t,e={}){let n=Ua("weierstrass",t,e),{Fp:r,Fn:o}=n,i=n.CURVE,{h:s,n:a}=i;mn(e,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object",wrapPrivateKey:"boolean"});let{endo:c}=e;if(c&&(!r.is0(i.a)||typeof c.beta!="bigint"||!Array.isArray(c.basises)))throw new Error('invalid endo: expected "beta": bigint and "basises": array');let l=Ma(r,o);function d(){if(!r.isOdd)throw new Error("compression is not supported: Field does not have .isOdd()")}function g(T,x,p){let{x:h,y:m}=x.toAffine(),E=r.toBytes(h);if(pn(p,"isCompressed"),p){d();let B=!r.isOdd(m);return pe(Ha(B),E)}else return pe(Uint8Array.of(4),E,r.toBytes(m))}function u(T){Fe(T,void 0,"Point");let{publicKey:x,publicKeyUncompressed:p}=l,h=T.length,m=T[0],E=T.subarray(1);if(h===x&&(m===2||m===3)){let B=r.fromBytes(E);if(!r.isValid(B))throw new Error("bad point: is not on curve, wrong x");let w=b(B),A;try{A=r.sqrt(w)}catch(P){let D=P instanceof Error?": "+P.message:"";throw new Error("bad point: is not on curve, sqrt error"+D)}d();let k=r.isOdd(A);return(m&1)===1!==k&&(A=r.neg(A)),{x:B,y:A}}else if(h===p&&m===4){let B=r.BYTES,w=r.fromBytes(E.subarray(0,B)),A=r.fromBytes(E.subarray(B,B*2));if(!v(w,A))throw new Error("bad point: is not on curve");return{x:w,y:A}}else throw new Error(`bad point: got length ${h}, expected compressed=${x} or uncompressed=${p}`)}let f=e.toBytes||g,y=e.fromBytes||u;function b(T){let x=r.sqr(T),p=r.mul(x,T);return r.add(r.add(p,r.mul(T,i.a)),i.b)}function v(T,x){let p=r.sqr(x),h=b(T);return r.eql(p,h)}if(!v(i.Gx,i.Gy))throw new Error("bad curve params: generator point");let R=r.mul(r.pow(i.a,wr),cf),O=r.mul(r.sqr(i.b),BigInt(27));if(r.is0(r.add(R,O)))throw new Error("bad curve params: a or b");function N(T,x,p=!1){if(!r.isValid(x)||p&&r.is0(x))throw new Error(`bad point coordinate ${T}`);return x}function I(T){if(!(T instanceof L))throw new Error("ProjectivePoint expected")}function _(T){if(!c||!c.basises)throw new Error("no endo");return af(T,c.basises,o.ORDER)}let q=qo((T,x)=>{let{X:p,Y:h,Z:m}=T;if(r.eql(m,r.ONE))return{x:p,y:h};let E=T.is0();x==null&&(x=E?r.ONE:r.inv(m));let B=r.mul(p,x),w=r.mul(h,x),A=r.mul(m,x);if(E)return{x:r.ZERO,y:r.ZERO};if(!r.eql(A,r.ONE))throw new Error("invZ was invalid");return{x:B,y:w}}),j=qo(T=>{if(T.is0()){if(e.allowInfinityPoint&&!r.is0(T.Y))return;throw new Error("bad point: ZERO")}let{x,y:p}=T.toAffine();if(!r.isValid(x)||!r.isValid(p))throw new Error("bad point: x or y not field elements");if(!v(x,p))throw new Error("bad point: equation left != right");if(!T.isTorsionFree())throw new Error("bad point: not in prime-order subgroup");return!0});function Z(T,x,p,h,m){return p=new L(r.mul(p.X,T),p.Y,p.Z),x=wn(h,x),p=wn(m,p),x.add(p)}class L{constructor(x,p,h){this.X=N("x",x),this.Y=N("y",p,!0),this.Z=N("z",h),Object.freeze(this)}static CURVE(){return i}static fromAffine(x){let{x:p,y:h}=x||{};if(!x||!r.isValid(p)||!r.isValid(h))throw new Error("invalid affine point");if(x instanceof L)throw new Error("projective point not allowed");return r.is0(p)&&r.is0(h)?L.ZERO:new L(p,h,r.ONE)}static fromBytes(x){let p=L.fromAffine(y(Fe(x,void 0,"point")));return p.assertValidity(),p}static fromHex(x){return L.fromBytes(re("pointHex",x))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(x=8,p=!0){return $.createCache(this,x),p||this.multiply(wr),this}assertValidity(){j(this)}hasEvenY(){let{y:x}=this.toAffine();if(!r.isOdd)throw new Error("Field doesn't support isOdd");return!r.isOdd(x)}equals(x){I(x);let{X:p,Y:h,Z:m}=this,{X:E,Y:B,Z:w}=x,A=r.eql(r.mul(p,w),r.mul(E,m)),k=r.eql(r.mul(h,w),r.mul(B,m));return A&&k}negate(){return new L(this.X,r.neg(this.Y),this.Z)}double(){let{a:x,b:p}=i,h=r.mul(p,wr),{X:m,Y:E,Z:B}=this,w=r.ZERO,A=r.ZERO,k=r.ZERO,C=r.mul(m,m),P=r.mul(E,E),D=r.mul(B,B),M=r.mul(m,E);return M=r.add(M,M),k=r.mul(m,B),k=r.add(k,k),w=r.mul(x,k),A=r.mul(h,D),A=r.add(w,A),w=r.sub(P,A),A=r.add(P,A),A=r.mul(w,A),w=r.mul(M,w),k=r.mul(h,k),D=r.mul(x,D),M=r.sub(C,D),M=r.mul(x,M),M=r.add(M,k),k=r.add(C,C),C=r.add(k,C),C=r.add(C,D),C=r.mul(C,M),A=r.add(A,C),D=r.mul(E,B),D=r.add(D,D),C=r.mul(D,M),w=r.sub(w,C),k=r.mul(D,P),k=r.add(k,k),k=r.add(k,k),new L(w,A,k)}add(x){I(x);let{X:p,Y:h,Z:m}=this,{X:E,Y:B,Z:w}=x,A=r.ZERO,k=r.ZERO,C=r.ZERO,P=i.a,D=r.mul(i.b,wr),M=r.mul(p,E),U=r.mul(h,B),V=r.mul(m,w),W=r.add(p,h),K=r.add(E,B);W=r.mul(W,K),K=r.add(M,U),W=r.sub(W,K),K=r.add(p,m);let G=r.add(E,w);return K=r.mul(K,G),G=r.add(M,V),K=r.sub(K,G),G=r.add(h,m),A=r.add(B,w),G=r.mul(G,A),A=r.add(U,V),G=r.sub(G,A),C=r.mul(P,K),A=r.mul(D,V),C=r.add(A,C),A=r.sub(U,C),C=r.add(U,C),k=r.mul(A,C),U=r.add(M,M),U=r.add(U,M),V=r.mul(P,V),K=r.mul(D,K),U=r.add(U,V),V=r.sub(M,V),V=r.mul(P,V),K=r.add(K,V),M=r.mul(U,K),k=r.add(k,M),M=r.mul(G,K),A=r.mul(W,A),A=r.sub(A,M),M=r.mul(W,U),C=r.mul(G,C),C=r.add(C,M),new L(A,k,C)}subtract(x){return this.add(x.negate())}is0(){return this.equals(L.ZERO)}multiply(x){let{endo:p}=e;if(!o.isValidNot0(x))throw new Error("invalid scalar: out of range");let h,m,E=B=>$.cached(this,B,w=>mr(L,w));if(p){let{k1neg:B,k1:w,k2neg:A,k2:k}=_(x),{p:C,f:P}=E(w),{p:D,f:M}=E(k);m=P.add(M),h=Z(p.beta,C,D,B,A)}else{let{p:B,f:w}=E(x);h=B,m=w}return mr(L,[h,m])[0]}multiplyUnsafe(x){let{endo:p}=e,h=this;if(!o.isValid(x))throw new Error("invalid scalar: out of range");if(x===Ve||h.is0())return L.ZERO;if(x===Vt)return h;if($.hasCache(this))return this.multiply(x);if(p){let{k1neg:m,k1:E,k2neg:B,k2:w}=_(x),{p1:A,p2:k}=Ia(L,h,E,w);return Z(p.beta,A,k,m,B)}else return $.unsafe(h,x)}multiplyAndAddUnsafe(x,p,h){let m=this.multiplyUnsafe(p).add(x.multiplyUnsafe(h));return m.is0()?void 0:m}toAffine(x){return q(this,x)}isTorsionFree(){let{isTorsionFree:x}=e;return s===Vt?!0:x?x(L,this):$.unsafe(this,a).is0()}clearCofactor(){let{clearCofactor:x}=e;return s===Vt?this:x?x(L,this):this.multiplyUnsafe(s)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}toBytes(x=!0){return pn(x,"isCompressed"),this.assertValidity(),f(L,this,x)}toHex(x=!0){return le(this.toBytes(x))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get px(){return this.X}get py(){return this.X}get pz(){return this.Z}toRawBytes(x=!0){return this.toBytes(x)}_setWindowSize(x){this.precompute(x)}static normalizeZ(x){return mr(L,x)}static msm(x,p){return _a(L,o,x,p)}static fromPrivateKey(x){return L.BASE.multiply(tt(o,x))}}L.BASE=new L(i.Gx,i.Gy,r.ONE),L.ZERO=new L(r.ZERO,r.ONE,r.ZERO),L.Fp=r,L.Fn=o;let z=o.BITS,$=new br(L,e.endo?Math.ceil(z/2):z);return L.BASE.precompute(8),L}function Ha(t){return Uint8Array.of(t?2:3)}function Ma(t,e){return{secretKey:e.BYTES,publicKey:1+t.BYTES,publicKeyUncompressed:1+2*t.BYTES,publicKeyHasPrefix:!0,signature:2*e.BYTES}}function uf(t,e={}){let{Fn:n}=t,r=e.randomBytes||mt,o=Object.assign(Ma(t.Fp,n),{seed:Vo(n.ORDER)});function i(f){try{return!!tt(n,f)}catch{return!1}}function s(f,y){let{publicKey:b,publicKeyUncompressed:v}=o;try{let R=f.length;return y===!0&&R!==b||y===!1&&R!==v?!1:!!t.fromBytes(f)}catch{return!1}}function a(f=r(o.seed)){return yr(Fe(f,o.seed,"seed"),n.ORDER)}function c(f,y=!0){return t.BASE.multiply(tt(n,f)).toBytes(y)}function l(f){let y=a(f);return{secretKey:y,publicKey:c(y)}}function d(f){if(typeof f=="bigint")return!1;if(f instanceof t)return!0;let{secretKey:y,publicKey:b,publicKeyUncompressed:v}=o;if(n.allowedLengths||y===b)return;let R=re("key",f).length;return R===b||R===v}function g(f,y,b=!0){if(d(f)===!0)throw new Error("first arg must be private key");if(d(y)===!1)throw new Error("second arg must be public key");let v=tt(n,f);return t.fromHex(y).multiply(v).toBytes(b)}return Object.freeze({getPublicKey:c,getSharedSecret:g,keygen:l,Point:t,utils:{isValidSecretKey:i,isValidPublicKey:s,randomSecretKey:a,isValidPrivateKey:i,randomPrivateKey:a,normPrivateKeyToScalar:f=>tt(n,f),precompute(f=8,y=t.BASE){return y.precompute(f,!1)}},lengths:o})}function ff(t,e,n={}){ar(e),mn(n,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"});let r=n.randomBytes||mt,o=n.hmac||((p,...h)=>_o(e,p,pe(...h))),{Fp:i,Fn:s}=t,{ORDER:a,BITS:c}=s,{keygen:l,getPublicKey:d,getSharedSecret:g,utils:u,lengths:f}=uf(t,n),y={prehash:!1,lowS:typeof n.lowS=="boolean"?n.lowS:!1,format:void 0,extraEntropy:!1},b="compact";function v(p){let h=a>>Vt;return p>h}function R(p,h){if(!s.isValidNot0(h))throw new Error(`invalid signature ${p}: out of range 1..Point.Fn.ORDER`);return h}function O(p,h){Go(h);let m=f.signature,E=h==="compact"?m:h==="recovered"?m+1:void 0;return Fe(p,E,`${h} signature`)}class N{constructor(h,m,E){this.r=R("r",h),this.s=R("s",m),E!=null&&(this.recovery=E),Object.freeze(this)}static fromBytes(h,m=b){O(h,m);let E;if(m==="der"){let{r:k,s:C}=$e.toSig(Fe(h));return new N(k,C)}m==="recovered"&&(E=h[0],m="compact",h=h.subarray(1));let B=s.BYTES,w=h.subarray(0,B),A=h.subarray(B,B*2);return new N(s.fromBytes(w),s.fromBytes(A),E)}static fromHex(h,m){return this.fromBytes(bt(h),m)}addRecoveryBit(h){return new N(this.r,this.s,h)}recoverPublicKey(h){let m=i.ORDER,{r:E,s:B,recovery:w}=this;if(w==null||![0,1,2,3].includes(w))throw new Error("recovery id invalid");if(a*Pa<m&&w>1)throw new Error("recovery id is ambiguous for h>1 curve");let k=w===2||w===3?E+a:E;if(!i.isValid(k))throw new Error("recovery id 2 or 3 invalid");let C=i.toBytes(k),P=t.fromBytes(pe(Ha((w&1)===0),C)),D=s.inv(k),M=_(re("msgHash",h)),U=s.create(-M*D),V=s.create(B*D),W=t.BASE.multiplyUnsafe(U).add(P.multiplyUnsafe(V));if(W.is0())throw new Error("point at infinify");return W.assertValidity(),W}hasHighS(){return v(this.s)}toBytes(h=b){if(Go(h),h==="der")return bt($e.hexFromSig(this));let m=s.toBytes(this.r),E=s.toBytes(this.s);if(h==="recovered"){if(this.recovery==null)throw new Error("recovery bit must be present");return pe(Uint8Array.of(this.recovery),m,E)}return pe(m,E)}toHex(h){return le(this.toBytes(h))}assertValidity(){}static fromCompact(h){return N.fromBytes(re("sig",h),"compact")}static fromDER(h){return N.fromBytes(re("sig",h),"der")}normalizeS(){return this.hasHighS()?new N(this.r,s.neg(this.s),this.recovery):this}toDERRawBytes(){return this.toBytes("der")}toDERHex(){return le(this.toBytes("der"))}toCompactRawBytes(){return this.toBytes("compact")}toCompactHex(){return le(this.toBytes("compact"))}}let I=n.bits2int||function(h){if(h.length>8192)throw new Error("input is too large");let m=De(h),E=h.length*8-c;return E>0?m>>BigInt(E):m},_=n.bits2int_modN||function(h){return s.create(I(h))},q=Qe(c);function j(p){return pa("num < 2^"+c,p,Ve,q),s.toBytes(p)}function Z(p,h){return Fe(p,void 0,"message"),h?Fe(e(p),void 0,"prehashed message"):p}function L(p,h,m){if(["recovered","canonical"].some(U=>U in m))throw new Error("sign() legacy options not supported");let{lowS:E,prehash:B,extraEntropy:w}=Zo(m,y);p=Z(p,B);let A=_(p),k=tt(s,h),C=[j(k),j(A)];if(w!=null&&w!==!1){let U=w===!0?r(f.secretKey):w;C.push(re("extraEntropy",U))}let P=pe(...C),D=A;function M(U){let V=I(U);if(!s.isValidNot0(V))return;let W=s.inv(V),K=t.BASE.multiply(V).toAffine(),G=s.create(K.x);if(G===Ve)return;let oe=s.create(W*s.create(D+G*k));if(oe===Ve)return;let Xt=(K.x===G?0:2)|Number(K.y&Vt),Ft=oe;return E&&v(oe)&&(Ft=s.neg(oe),Xt^=1),new N(G,Ft,Xt)}return{seed:P,k2sig:M}}function z(p,h,m={}){p=re("message",p);let{seed:E,k2sig:B}=L(p,h,m);return ya(e.outputLen,s.BYTES,o)(E,B)}function $(p){let h,m=typeof p=="string"||pt(p),E=!m&&p!==null&&typeof p=="object"&&typeof p.r=="bigint"&&typeof p.s=="bigint";if(!m&&!E)throw new Error("invalid signature, expected Uint8Array, hex string or Signature instance");if(E)h=new N(p.r,p.s);else if(m){try{h=N.fromBytes(re("sig",p),"der")}catch(B){if(!(B instanceof $e.Err))throw B}if(!h)try{h=N.fromBytes(re("sig",p),"compact")}catch{return!1}}return h||!1}function T(p,h,m,E={}){let{lowS:B,prehash:w,format:A}=Zo(E,y);if(m=re("publicKey",m),h=Z(re("message",h),w),"strict"in E)throw new Error("options.strict was renamed to lowS");let k=A===void 0?$(p):N.fromBytes(re("sig",p),A);if(k===!1)return!1;try{let C=t.fromBytes(m);if(B&&k.hasHighS())return!1;let{r:P,s:D}=k,M=_(h),U=s.inv(D),V=s.create(M*U),W=s.create(P*U),K=t.BASE.multiplyUnsafe(V).add(C.multiplyUnsafe(W));return K.is0()?!1:s.create(K.x)===P}catch{return!1}}function x(p,h,m={}){let{prehash:E}=Zo(m,y);return h=Z(h,E),N.fromBytes(p,"recovered").recoverPublicKey(h).toBytes()}return Object.freeze({keygen:l,getPublicKey:d,getSharedSecret:g,utils:u,lengths:f,Point:t,sign:z,verify:T,recoverPublicKey:x,Signature:N,hash:e})}function df(t){let e={a:t.a,b:t.b,p:t.Fp.ORDER,n:t.n,h:t.h,Gx:t.Gx,Gy:t.Gy},n=t.Fp,r=t.allowedPrivateKeyLengths?Array.from(new Set(t.allowedPrivateKeyLengths.map(s=>Math.ceil(s/2)))):void 0,o=et(e.n,{BITS:t.nBitLength,allowedLengths:r,modFromBytes:t.wrapPrivateKey}),i={Fp:n,Fn:o,allowInfinityPoint:t.allowInfinityPoint,endo:t.endo,isTorsionFree:t.isTorsionFree,clearCofactor:t.clearCofactor,fromBytes:t.fromBytes,toBytes:t.toBytes};return{CURVE:e,curveOpts:i}}function hf(t){let{CURVE:e,curveOpts:n}=df(t),r={hmac:t.hmac,randomBytes:t.randomBytes,lowS:t.lowS,bits2int:t.bits2int,bits2int_modN:t.bits2int_modN};return{CURVE:e,curveOpts:n,hash:t.hash,ecdsaOpts:r}}function gf(t,e){let n=e.Point;return Object.assign({},e,{ProjectivePoint:n,CURVE:Object.assign({},t,pr(n.Fn.ORDER,n.Fn.BITS))})}function qa(t){let{CURVE:e,curveOpts:n,hash:r,ecdsaOpts:o}=hf(t),i=lf(e,n),s=ff(i,r,o);return gf(t,s)}function Da(t,e){let n=r=>qa({...t,hash:r});return{...n(e),create:n}}var Kt={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},pf={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]},yf=BigInt(0),$a=BigInt(1),Yo=BigInt(2);function bf(t){let e=Kt.p,n=BigInt(3),r=BigInt(6),o=BigInt(11),i=BigInt(22),s=BigInt(23),a=BigInt(44),c=BigInt(88),l=t*t*t%e,d=l*l*t%e,g=me(d,n,e)*d%e,u=me(g,n,e)*d%e,f=me(u,Yo,e)*l%e,y=me(f,o,e)*f%e,b=me(y,i,e)*y%e,v=me(b,a,e)*b%e,R=me(v,c,e)*v%e,O=me(R,a,e)*b%e,N=me(O,n,e)*d%e,I=me(N,s,e)*y%e,_=me(I,r,e)*l%e,q=me(_,Yo,e);if(!xr.eql(xr.sqr(q),t))throw new Error("Cannot find square root");return q}var xr=et(Kt.p,{sqrt:bf}),za=Da({...Kt,Fp:xr,lowS:!0,endo:pf},qt),Va={};function Er(t,...e){let n=Va[t];if(n===void 0){let r=qt(lr(t));n=pe(r,r),Va[t]=n}return qt(pe(n,...e))}var Xo=t=>t.toBytes(!0).slice(1),zt=za.Point,Fo=t=>t%Yo===yf;function Jo(t){let{Fn:e,BASE:n}=zt,r=tt(e,t),o=n.multiply(r);return{scalar:Fo(o.y)?r:e.neg(r),bytes:Xo(o)}}function ja(t){let e=xr;if(!e.isValidNot0(t))throw new Error("invalid x: Fail if x \u2265 p");let n=e.create(t*t),r=e.create(n*t+BigInt(7)),o=e.sqrt(r);Fo(o)||(o=e.neg(o));let i=zt.fromAffine({x:t,y:o});return i.assertValidity(),i}var xn=De;function Za(...t){return zt.Fn.create(xn(Er("BIP0340/challenge",...t)))}function Ka(t){return Jo(t).bytes}function mf(t,e,n=mt(32)){let{Fn:r}=zt,o=re("message",t),{bytes:i,scalar:s}=Jo(e),a=re("auxRand",n,32),c=r.toBytes(s^xn(Er("BIP0340/aux",a))),l=Er("BIP0340/nonce",c,i,o),{bytes:d,scalar:g}=Jo(l),u=Za(d,i,o),f=new Uint8Array(64);if(f.set(d,0),f.set(r.toBytes(r.create(g+u*s)),32),!Ga(f,o,i))throw new Error("sign: Invalid signature produced");return f}function Ga(t,e,n){let{Fn:r,BASE:o}=zt,i=re("signature",t,64),s=re("message",e),a=re("publicKey",n,32);try{let c=ja(xn(a)),l=xn(i.subarray(0,32));if(!bn(l,$a,Kt.p))return!1;let d=xn(i.subarray(32,64));if(!bn(d,$a,Kt.n))return!1;let g=Za(r.toBytes(l),Xo(c),s),u=o.multiplyUnsafe(d).add(c.multiplyUnsafe(r.neg(g))),{x:f,y}=u.toAffine();return!(u.is0()||!Fo(y)||f!==l)}catch{return!1}}var Te=(()=>{let n=(o=mt(48))=>yr(o,Kt.n);za.utils.randomSecretKey;function r(o){let i=n(o);return{secretKey:i,publicKey:Ka(i)}}return{keygen:r,getPublicKey:Ka,sign:mf,verify:Ga,Point:zt,utils:{randomSecretKey:n,randomPrivateKey:n,taggedHash:Er,lift_x:ja,pointToBytes:Xo,numberToBytesBE:Dt,bytesToNumberBE:De,mod:be},lengths:{secretKey:32,publicKey:32,publicKeyHasPrefix:!1,signature:64,seed:48}}})();var Qo=qt;function wf(t){return t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;")}function xf(){let t=new Uint8Array(16);return crypto.getRandomValues(t),Array.from(t,e=>e.toString(16).padStart(2,"0")).join("")}function vr(t,e){let n=t.find(r=>r[0]===e);return n?n[1]:void 0}function Ke(t){let e=new Uint8Array(t.length/2);for(let n=0;n<e.length;n++)e[n]=parseInt(t.substr(n*2,2),16);return e}async function Ef(t){if(!t.id||!t.pubkey||!t.sig||!t.tags||t.kind!==30470||!/^[0-9a-f]{128}$/i.test(t.sig)||!/^[0-9a-f]{64}$/i.test(t.pubkey)||!/^[0-9a-f]{64}$/i.test(t.id)||t.tags.length>100||t.content.length>65536||t.tags.some(s=>s.some(a=>a.length>1024)))return!1;let e=t.tags.map(s=>s[0]);if(!e.includes("tier")||!e.includes("age-range")||!e.includes("entity-type"))return!1;let n=JSON.stringify([0,t.pubkey,t.created_at,t.kind,t.tags,t.content]),r=new TextEncoder,o=Qo(r.encode(n));if(le(o)!==t.id.toLowerCase())return!1;try{let s=Ke(t.sig),a=Ke(t.id),c=Ke(t.pubkey);return Te.verify(s,a,c)}catch{return!1}}function vf(t,e){if(t===e||t==="18+"&&e==="18+")return!0;let n=["0-3","4-7","8-12","13-17","18+"],r=n.indexOf(t),o=n.indexOf(e);return r===-1||o===-1?!1:e==="18+"?t==="18+":t===e}async function Sf(t,e){if(e==null||!/^https:\/\//i.test(e)||!/^[0-9a-f]{64}$/i.test(t))return null;try{let n=await fetch(`${e}/status/${t}`,{signal:AbortSignal.timeout(5e3)});if(!n.ok)return null;let r=await n.json();if(typeof r!="object"||r===null)return null;let o=r;return{confirmed:o.confirmed===!0,method:["A","B","C","D"].includes(o.method)?o.method:null,profession:typeof o.profession=="string"?o.profession:void 0,jurisdiction:typeof o.jurisdiction=="string"?o.jurisdiction:void 0}}catch{return null}}async function kf(t,e){if(!["0-3","4-7","8-12","13-17","18+"].includes(t))return{verified:!1,ageRange:null,tier:null,entityType:null,credentialId:null,verifierPubkey:null,verifierConfirmed:null,verifierMethod:null,issuedAt:null,expiresAt:null,error:"invalid-age-range"};let r={requiredAgeRange:t,relayUrl:e?.relayUrl||"wss://relay.damus.io",theme:e?.theme||"auto",timeout:e?.timeout||12e4,verifierCheckUrl:e?.verifierCheckUrl!==void 0?e.verifierCheckUrl:"https://verify.signet.forgesworn.dev",acceptUnconfirmed:e?.acceptUnconfirmed||!1,...e};r.timeout=Math.max(5e3,Math.min(r.timeout??12e4,6e5));let o=xf(),i={type:"signet-verify-request",requestId:o,requiredAgeRange:r.requiredAgeRange,relayUrl:r.relayUrl,timestamp:Math.floor(Date.now()/1e3)},s=JSON.stringify(i),a=btoa(s);return new Promise(c=>{let l=document.createElement("style");l.textContent="#signet-verify-dialog::backdrop{background:rgba(0,0,0,0.7)}",document.head.appendChild(l);let d=r.theme==="dark"||r.theme==="auto"&&window.matchMedia("(prefers-color-scheme: dark)").matches,g=d?"#1a1a2e":"#ffffff",u=d?"#e0e0e0":"#1a1a2e",f=d?"#888":"#666",y=document.createElement("dialog");y.id="signet-verify-dialog",y.style.cssText=`border:none;border-radius:16px;padding:32px;max-width:380px;width:90%;text-align:center;box-shadow:0 20px 60px rgba(0,0,0,0.3);background:${g};color:${u};font-family:system-ui,-apple-system,sans-serif;`,y.innerHTML=`
       <h2 style="margin:0 0 8px;font-size:1.3rem;">Verify your age with Signet</h2>
-      <p style="margin:0 0 24px;color:${f};font-size:0.9rem;">Scan this QR code with your Signet app to prove you are ${mf(t)}. No personal data is shared.</p>
+      <p style="margin:0 0 24px;color:${f};font-size:0.9rem;">Scan this QR code with your Signet app to prove you are ${wf(t)}. No personal data is shared.</p>
       <div id="signet-qr" style="display:flex;justify-content:center;margin-bottom:24px;"></div>
       <p style="margin:0 0 16px;color:${f};font-size:0.8rem;">Waiting for verification...</p>
       <button id="signet-cancel" style="background:none;border:1px solid ${f};color:${u};padding:10px 24px;border-radius:8px;cursor:pointer;font-size:0.9rem;">Cancel</button>
-    `,document.body.appendChild(y),y.showModal();let b=y.querySelector("#signet-qr");if(b){let R=document.createElement("div");R.style.cssText=`width:200px;height:200px;background:${d?"#2a2a3e":"#f0f0f0"};border-radius:8px;display:flex;align-items:center;justify-content:center;font-size:0.75rem;color:${f};word-break:break-all;padding:12px;`,R.textContent=`signet:verify:${a.slice(0,40)}...`,b.appendChild(R)}let v=new BroadcastChannel("signet-verify-"+o);y.querySelector("#signet-cancel")?.addEventListener("click",()=>{v.close(),y.close(),y.remove(),l.remove(),c({verified:!1,ageRange:null,tier:null,entityType:null,credentialId:null,verifierPubkey:null,verifierConfirmed:null,verifierMethod:null,issuedAt:null,expiresAt:null,error:"cancelled"})}),v.onmessage=async R=>{let O=R.data;if(typeof O!="object"||O===null)return;let N=O;if(N.type!=="signet-verify-response"||N.requestId!==o||!N.credential||typeof N.credential!="object"||!Array.isArray(N.credential.tags))return;let I=N.credential,_=await xf(I),q=vr(I.tags,"age-range"),j=vr(I.tags,"tier"),Z=vr(I.tags,"entity-type"),L=vr(I.tags,"expires"),z=q?Ef(q,r.requiredAgeRange):!1,$=await vf(I.pubkey,r.verifierCheckUrl),T=$?.confirmed??null,x=$?.method??null,p=r.acceptUnconfirmed||T===!0;y.close(),y.remove(),l.remove(),v.close();let h=j?parseInt(j,10):null,m=L?parseInt(L,10):null,E=Math.floor(Date.now()/1e3),B=m===null||!isNaN(m)&&m>E,w;_?B?z?p||(w=T===!1?"verifier-not-confirmed":"verifier-check-unavailable"):w="age-range-not-met":w="credential-expired":w="invalid-credential",c({verified:_&&B&&z&&p,ageRange:q||null,tier:h!==null&&!isNaN(h)?h:null,entityType:Z||null,credentialId:I.id,verifierPubkey:I.pubkey,verifierConfirmed:T,verifierMethod:x,issuedAt:I.created_at,expiresAt:m!==null&&!isNaN(m)?m:null,error:w})},setTimeout(()=>{y.close(),y.remove(),l.remove(),v.close(),c({verified:!1,ageRange:null,tier:null,entityType:null,credentialId:null,verifierPubkey:null,verifierConfirmed:null,verifierMethod:null,issuedAt:null,expiresAt:null,error:"timeout"})},r.timeout)})}function ei(t){let e=JSON.stringify([0,t.pubkey,t.created_at,t.kind,t.tags,t.content]),n=Qo(new TextEncoder().encode(e));return le(n)}async function kf(t,e){try{let n=Ot(e,t.pubkey),r=un(t.content,n),o=JSON.parse(r);if(typeof o!="object"||o===null)return null;let i=o;if(i.kind!==13||typeof i.pubkey!="string"||!/^[0-9a-f]{64}$/i.test(i.pubkey)||typeof i.created_at!="number"||!Array.isArray(i.tags)||typeof i.content!="string"||typeof i.id!="string"||!/^[0-9a-f]{64}$/i.test(i.id)||typeof i.sig!="string"||!/^[0-9a-f]{128}$/i.test(i.sig)||ei({pubkey:i.pubkey,created_at:i.created_at,kind:13,tags:i.tags,content:i.content})!==i.id.toLowerCase())return null;let a=Ke(i.sig),c=Ke(i.id),l=Ke(i.pubkey);if(!Te.verify(a,c,l))return null;let d=Ot(e,i.pubkey),g=un(i.content,d),u=JSON.parse(g);if(typeof u!="object"||u===null)return null;let f=u;if(typeof f.pubkey!="string"||f.pubkey!==i.pubkey||typeof f.kind!="number"||typeof f.created_at!="number"||!Array.isArray(f.tags)||typeof f.content!="string")return null;let y=typeof f.id=="string"?f.id:ei({pubkey:f.pubkey,created_at:f.created_at,kind:f.kind,tags:f.tags,content:f.content});return{pubkey:f.pubkey,id:y,kind:f.kind,created_at:f.created_at,tags:f.tags,content:f.content}}catch{return null}}function Bf(t){if(typeof t!="string")return;let e=t.replace(/[\x00-\x1f\x7f-\x9f\u200b-\u200f\u2028-\u202e\u2066-\u2069]/g,"").trim().slice(0,64);return e.length>0?e:void 0}async function ti(t){if(!/^[0-9a-f]{64}$/i.test(t.requestId))throw new Error("invalid-request-id");if(!(t.sessionPrivKey instanceof Uint8Array)||t.sessionPrivKey.length!==32)throw new Error("invalid-session-privkey");if(!/^wss:\/\//i.test(t.relayUrl)&&!/^ws:\/\/(localhost|127\.0\.0\.1)([:\/]|$)/i.test(t.relayUrl))throw new Error("invalid-relay-url");if(typeof t.expectedOrigin!="string"||t.expectedOrigin.length===0)throw new Error("invalid-expected-origin");let e=le(Te.getPublicKey(t.sessionPrivKey)),n=Math.max(5e3,Math.min(t.timeout??12e4,6e5)),r=t.requestId.toLowerCase(),o=t.expectedOrigin;return new Promise((i,s)=>{let a=`sa-${Math.random().toString(36).slice(2,12)}`,c=!1,l;try{l=new WebSocket(t.relayUrl)}catch{s(new Error("relay-error"));return}let d=u=>{if(!c){c=!0,clearTimeout(g);try{l.close()}catch{}u()}},g=setTimeout(()=>{d(()=>s(new Error("timeout")))},n);l.onopen=()=>{let u=Math.floor(Date.now()/1e3)-60;l.send(JSON.stringify(["REQ",a,{kinds:[1059],"#p":[e],since:u}]))},l.onmessage=async u=>{if(c)return;let f;try{f=JSON.parse(typeof u.data=="string"?u.data:"")}catch{return}if(!Array.isArray(f)||f[0]!=="EVENT"||f[1]!==a)return;let y=f[2];if(typeof y!="object"||y===null)return;let b=y;if(b.kind!==1059||typeof b.pubkey!="string"||typeof b.content!="string")return;let v=await kf({pubkey:b.pubkey,content:b.content},t.sessionPrivKey);if(!v||v.kind!==29999)return;let R=v.tags.find(h=>h[0]==="session");if(!R||R[1]!==r)return;let O=v.tags.find(h=>h[0]==="status");if(O?.[1]==="rejected"){d(()=>s(new Error("denied")));return}if(O?.[1]!=="approved"||Math.abs(Date.now()/1e3-v.created_at)>300)return;let I;try{let h=JSON.parse(v.content);if(typeof h!="object"||h===null)return;I=h}catch{return}if(I.type!=="signet-auth-response"||I.requestId!==r||typeof I.authEvent!="object"||I.authEvent===null)return;let _=I.authEvent;if(typeof _.id!="string"||!/^[0-9a-f]{64}$/i.test(_.id)||typeof _.pubkey!="string"||!/^[0-9a-f]{64}$/i.test(_.pubkey)||typeof _.sig!="string"||!/^[0-9a-f]{128}$/i.test(_.sig)||_.kind!==21236||typeof _.created_at!="number"||!Array.isArray(_.tags)||typeof _.content!="string"||_.pubkey.toLowerCase()!==v.pubkey.toLowerCase()||ei({pubkey:_.pubkey,created_at:_.created_at,kind:21236,tags:_.tags,content:_.content})!==_.id.toLowerCase())return;let j=!1;try{let h=Ke(_.sig),m=Ke(_.id),E=Ke(_.pubkey);j=Te.verify(h,m,E)}catch{j=!1}if(!j)return;let Z=_.tags,L=Z.find(h=>Array.isArray(h)&&h[0]==="challenge");if(!L||typeof L[1]!="string"||L[1].toLowerCase()!==r)return;let z=Z.find(h=>Array.isArray(h)&&h[0]==="origin");if(!z||z[1]!==o||Math.abs(Date.now()/1e3-_.created_at)>300)return;let T={id:_.id.toLowerCase(),pubkey:_.pubkey.toLowerCase(),kind:21236,created_at:_.created_at,tags:Z,content:_.content,sig:_.sig},x=Bf(I.displayName),p=typeof I.bunkerUri=="string"&&/^bunker:\/\//i.test(I.bunkerUri)?I.bunkerUri:void 0;d(()=>i({pubkey:T.pubkey,authEvent:T,credential:I.credential,...x!==void 0?{displayName:x}:{},...p!==void 0?{bunkerUri:p}:{},createdAt:T.created_at}))},l.onerror=()=>{d(()=>s(new Error("relay-error")))}})}typeof window<"u"&&(window.Signet={verifyAge:Sf,waitForAuthResponse:ti});var Ai=hl(Gc(),1),wd=8e3;function Bi(t){return t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;")}function xd(){let t=new Uint8Array(32);return crypto.getRandomValues(t),Array.from(t,e=>e.toString(16).padStart(2,"0")).join("")}function Bt(t){return t==="dark"?!0:t==="light"?!1:typeof window<"u"&&window.matchMedia("(prefers-color-scheme: dark)").matches}function Ed(t){let e=document.createElement("style");e.textContent="#signet-login-dialog::backdrop{background:rgba(0,0,0,0.7)}",document.head.appendChild(e);let n=Bt(t),r=n?"#1a1a2e":"#ffffff",o=n?"#e0e0e0":"#1a1a2e",i=document.createElement("dialog");i.id="signet-login-dialog",i.style.cssText=`border:none;border-radius:16px;padding:32px;max-width:380px;width:90%;text-align:center;box-shadow:0 20px 60px rgba(0,0,0,0.3);background:${r};color:${o};font-family:system-ui,-apple-system,sans-serif;`,document.body.appendChild(i),i.showModal();let s=()=>Array.from(i.querySelectorAll("button")).filter(u=>{if(u.disabled||!u.isConnected)return!1;let f=window.getComputedStyle(u);return f.display!=="none"&&f.visibility!=="hidden"}),a=()=>document.activeElement instanceof HTMLButtonElement&&i.contains(document.activeElement)?document.activeElement:null,c=0,l=()=>{let u=s();u.length!==0&&(c=Math.min(Math.max(c,0),u.length-1),u[c].focus())},d=u=>{if(!i.isConnected||!i.open)return;let f=u.target;if(f&&(f.tagName==="INPUT"||f.tagName==="TEXTAREA")&&u.isTrusted)return;let y=s();if(y.length===0)return;let b=u.key||u.code,v=u.code||u.key,R=b==="ArrowDown"||v==="ArrowDown"||b==="ArrowRight"||v==="ArrowRight"?1:b==="ArrowUp"||v==="ArrowUp"||b==="ArrowLeft"||v==="ArrowLeft"?-1:0;if(R){u.preventDefault(),u.stopImmediatePropagation();let O=a(),N=O?y.indexOf(O):-1;c=((N>=0?N:c)+R+y.length)%y.length,y[c].focus();return}u.isTrusted||(u.key==="Enter"||u.key===" "||u.code==="Space"||u.code==="Enter"?(u.preventDefault(),u.stopImmediatePropagation(),y[Math.min(Math.max(c,0),y.length-1)].click()):(u.key==="Escape"||u.code==="Escape")&&(u.preventDefault(),u.stopImmediatePropagation(),(i.querySelector('[data-action="back"]')??i.querySelector('[data-action="cancel"],[data-choice="cancel"]'))?.click()))};window.addEventListener("keydown",d,!0);let g=new MutationObserver(()=>{c=0,l()});return g.observe(i,{childList:!0}),l(),{dialog:i,style:e,cleanupNav:()=>{window.removeEventListener("keydown",d,!0),g.disconnect()}}}function vd(t){t.cleanupNav?.();try{t.dialog.close()}catch{}t.dialog.remove(),t.style.remove()}function se(t,e=!1){return e?"background:#2c3e8f;color:white;border:0;padding:12px 16px;border-radius:8px;cursor:pointer;font-size:0.95rem;width:100%;margin-bottom:8px;text-align:left;display:flex;align-items:center;gap:12px;":`background:transparent;color:${t?"#e0e0e0":"#1a1a2e"};border:1px solid ${t?"#3a3a4e":"#d0d0d0"};padding:12px 16px;border-radius:8px;cursor:pointer;font-size:0.95rem;width:100%;margin-bottom:8px;text-align:left;display:flex;align-items:center;gap:12px;`}function Sd(t,e,n){let r=Bt(n),o=r?"#888":"#666",i=fn(),s=sr();return t.dialog.innerHTML=`
+    `,document.body.appendChild(y),y.showModal();let b=y.querySelector("#signet-qr");if(b){let R=document.createElement("div");R.style.cssText=`width:200px;height:200px;background:${d?"#2a2a3e":"#f0f0f0"};border-radius:8px;display:flex;align-items:center;justify-content:center;font-size:0.75rem;color:${f};word-break:break-all;padding:12px;`,R.textContent=`signet:verify:${a.slice(0,40)}...`,b.appendChild(R)}let v=new BroadcastChannel("signet-verify-"+o);y.querySelector("#signet-cancel")?.addEventListener("click",()=>{v.close(),y.close(),y.remove(),l.remove(),c({verified:!1,ageRange:null,tier:null,entityType:null,credentialId:null,verifierPubkey:null,verifierConfirmed:null,verifierMethod:null,issuedAt:null,expiresAt:null,error:"cancelled"})}),v.onmessage=async R=>{let O=R.data;if(typeof O!="object"||O===null)return;let N=O;if(N.type!=="signet-verify-response"||N.requestId!==o||!N.credential||typeof N.credential!="object"||!Array.isArray(N.credential.tags))return;let I=N.credential,_=await Ef(I),q=vr(I.tags,"age-range"),j=vr(I.tags,"tier"),Z=vr(I.tags,"entity-type"),L=vr(I.tags,"expires"),z=q?vf(q,r.requiredAgeRange):!1,$=await Sf(I.pubkey,r.verifierCheckUrl),T=$?.confirmed??null,x=$?.method??null,p=r.acceptUnconfirmed||T===!0;y.close(),y.remove(),l.remove(),v.close();let h=j?parseInt(j,10):null,m=L?parseInt(L,10):null,E=Math.floor(Date.now()/1e3),B=m===null||!isNaN(m)&&m>E,w;_?B?z?p||(w=T===!1?"verifier-not-confirmed":"verifier-check-unavailable"):w="age-range-not-met":w="credential-expired":w="invalid-credential",c({verified:_&&B&&z&&p,ageRange:q||null,tier:h!==null&&!isNaN(h)?h:null,entityType:Z||null,credentialId:I.id,verifierPubkey:I.pubkey,verifierConfirmed:T,verifierMethod:x,issuedAt:I.created_at,expiresAt:m!==null&&!isNaN(m)?m:null,error:w})},setTimeout(()=>{y.close(),y.remove(),l.remove(),v.close(),c({verified:!1,ageRange:null,tier:null,entityType:null,credentialId:null,verifierPubkey:null,verifierConfirmed:null,verifierMethod:null,issuedAt:null,expiresAt:null,error:"timeout"})},r.timeout)})}function ei(t){let e=JSON.stringify([0,t.pubkey,t.created_at,t.kind,t.tags,t.content]),n=Qo(new TextEncoder().encode(e));return le(n)}async function Bf(t,e){try{let n=Ot(e,t.pubkey),r=un(t.content,n),o=JSON.parse(r);if(typeof o!="object"||o===null)return null;let i=o;if(i.kind!==13||typeof i.pubkey!="string"||!/^[0-9a-f]{64}$/i.test(i.pubkey)||typeof i.created_at!="number"||!Array.isArray(i.tags)||typeof i.content!="string"||typeof i.id!="string"||!/^[0-9a-f]{64}$/i.test(i.id)||typeof i.sig!="string"||!/^[0-9a-f]{128}$/i.test(i.sig)||ei({pubkey:i.pubkey,created_at:i.created_at,kind:13,tags:i.tags,content:i.content})!==i.id.toLowerCase())return null;let a=Ke(i.sig),c=Ke(i.id),l=Ke(i.pubkey);if(!Te.verify(a,c,l))return null;let d=Ot(e,i.pubkey),g=un(i.content,d),u=JSON.parse(g);if(typeof u!="object"||u===null)return null;let f=u;if(typeof f.pubkey!="string"||f.pubkey!==i.pubkey||typeof f.kind!="number"||typeof f.created_at!="number"||!Array.isArray(f.tags)||typeof f.content!="string")return null;let y=typeof f.id=="string"?f.id:ei({pubkey:f.pubkey,created_at:f.created_at,kind:f.kind,tags:f.tags,content:f.content});return{pubkey:f.pubkey,id:y,kind:f.kind,created_at:f.created_at,tags:f.tags,content:f.content}}catch{return null}}function Af(t){if(typeof t!="string")return;let e=t.replace(/[\x00-\x1f\x7f-\x9f\u200b-\u200f\u2028-\u202e\u2066-\u2069]/g,"").trim().slice(0,64);return e.length>0?e:void 0}async function ti(t){if(!/^[0-9a-f]{64}$/i.test(t.requestId))throw new Error("invalid-request-id");if(!(t.sessionPrivKey instanceof Uint8Array)||t.sessionPrivKey.length!==32)throw new Error("invalid-session-privkey");if(!/^wss:\/\//i.test(t.relayUrl)&&!/^ws:\/\/(localhost|127\.0\.0\.1)([:\/]|$)/i.test(t.relayUrl))throw new Error("invalid-relay-url");if(typeof t.expectedOrigin!="string"||t.expectedOrigin.length===0)throw new Error("invalid-expected-origin");let e=le(Te.getPublicKey(t.sessionPrivKey)),n=Math.max(5e3,Math.min(t.timeout??12e4,6e5)),r=t.requestId.toLowerCase(),o=t.expectedOrigin;return new Promise((i,s)=>{let a=`sa-${Math.random().toString(36).slice(2,12)}`,c=!1,l;try{l=new WebSocket(t.relayUrl)}catch{s(new Error("relay-error"));return}let d=u=>{if(!c){c=!0,clearTimeout(g);try{l.close()}catch{}u()}},g=setTimeout(()=>{d(()=>s(new Error("timeout")))},n);l.onopen=()=>{let u=Math.floor(Date.now()/1e3)-60;l.send(JSON.stringify(["REQ",a,{kinds:[1059],"#p":[e],since:u}]))},l.onmessage=async u=>{if(c)return;let f;try{f=JSON.parse(typeof u.data=="string"?u.data:"")}catch{return}if(!Array.isArray(f)||f[0]!=="EVENT"||f[1]!==a)return;let y=f[2];if(typeof y!="object"||y===null)return;let b=y;if(b.kind!==1059||typeof b.pubkey!="string"||typeof b.content!="string")return;let v=await Bf({pubkey:b.pubkey,content:b.content},t.sessionPrivKey);if(!v||v.kind!==29999)return;let R=v.tags.find(h=>h[0]==="session");if(!R||R[1]!==r)return;let O=v.tags.find(h=>h[0]==="status");if(O?.[1]==="rejected"){d(()=>s(new Error("denied")));return}if(O?.[1]!=="approved"||Math.abs(Date.now()/1e3-v.created_at)>300)return;let I;try{let h=JSON.parse(v.content);if(typeof h!="object"||h===null)return;I=h}catch{return}if(I.type!=="signet-auth-response"||I.requestId!==r||typeof I.authEvent!="object"||I.authEvent===null)return;let _=I.authEvent;if(typeof _.id!="string"||!/^[0-9a-f]{64}$/i.test(_.id)||typeof _.pubkey!="string"||!/^[0-9a-f]{64}$/i.test(_.pubkey)||typeof _.sig!="string"||!/^[0-9a-f]{128}$/i.test(_.sig)||_.kind!==21236||typeof _.created_at!="number"||!Array.isArray(_.tags)||typeof _.content!="string"||_.pubkey.toLowerCase()!==v.pubkey.toLowerCase()||ei({pubkey:_.pubkey,created_at:_.created_at,kind:21236,tags:_.tags,content:_.content})!==_.id.toLowerCase())return;let j=!1;try{let h=Ke(_.sig),m=Ke(_.id),E=Ke(_.pubkey);j=Te.verify(h,m,E)}catch{j=!1}if(!j)return;let Z=_.tags,L=Z.find(h=>Array.isArray(h)&&h[0]==="challenge");if(!L||typeof L[1]!="string"||L[1].toLowerCase()!==r)return;let z=Z.find(h=>Array.isArray(h)&&h[0]==="origin");if(!z||z[1]!==o||Math.abs(Date.now()/1e3-_.created_at)>300)return;let T={id:_.id.toLowerCase(),pubkey:_.pubkey.toLowerCase(),kind:21236,created_at:_.created_at,tags:Z,content:_.content,sig:_.sig},x=Af(I.displayName),p=typeof I.bunkerUri=="string"&&/^bunker:\/\//i.test(I.bunkerUri)?I.bunkerUri:void 0;d(()=>i({pubkey:T.pubkey,authEvent:T,credential:I.credential,...x!==void 0?{displayName:x}:{},...p!==void 0?{bunkerUri:p}:{},createdAt:T.created_at}))},l.onerror=()=>{d(()=>s(new Error("relay-error")))}})}typeof window<"u"&&(window.Signet={verifyAge:kf,waitForAuthResponse:ti});var Ai=gl(Gc(),1),xd=8e3;function Bi(t){return t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;")}function Ed(){let t=new Uint8Array(32);return crypto.getRandomValues(t),Array.from(t,e=>e.toString(16).padStart(2,"0")).join("")}function Bt(t){return t==="dark"?!0:t==="light"?!1:typeof window<"u"&&window.matchMedia("(prefers-color-scheme: dark)").matches}function vd(t){let e=document.createElement("style");e.textContent="#signet-login-dialog::backdrop{background:rgba(0,0,0,0.7)}",document.head.appendChild(e);let n=Bt(t),r=n?"#1a1a2e":"#ffffff",o=n?"#e0e0e0":"#1a1a2e",i=document.createElement("dialog");i.id="signet-login-dialog",i.style.cssText=`border:none;border-radius:16px;padding:32px;max-width:460px;width:90%;text-align:center;box-shadow:0 20px 60px rgba(0,0,0,0.3);background:${r};color:${o};font-family:system-ui,-apple-system,sans-serif;`,document.body.appendChild(i),i.showModal();let s=()=>Array.from(i.querySelectorAll("button")).filter(u=>{if(u.disabled||!u.isConnected)return!1;let f=window.getComputedStyle(u);return f.display!=="none"&&f.visibility!=="hidden"}),a=()=>document.activeElement instanceof HTMLButtonElement&&i.contains(document.activeElement)?document.activeElement:null,c=0,l=()=>{let u=s();u.length!==0&&(c=Math.min(Math.max(c,0),u.length-1),u[c].focus())},d=u=>{if(!i.isConnected||!i.open)return;let f=u.target;if(f&&(f.tagName==="INPUT"||f.tagName==="TEXTAREA")&&u.isTrusted)return;let y=s();if(y.length===0)return;let b=u.key||u.code,v=u.code||u.key,R=b==="ArrowDown"||v==="ArrowDown"||b==="ArrowRight"||v==="ArrowRight"?1:b==="ArrowUp"||v==="ArrowUp"||b==="ArrowLeft"||v==="ArrowLeft"?-1:0;if(R){u.preventDefault(),u.stopImmediatePropagation();let O=a(),N=O?y.indexOf(O):-1;c=((N>=0?N:c)+R+y.length)%y.length,y[c].focus();return}u.isTrusted||(u.key==="Enter"||u.key===" "||u.code==="Space"||u.code==="Enter"?(u.preventDefault(),u.stopImmediatePropagation(),y[Math.min(Math.max(c,0),y.length-1)].click()):(u.key==="Escape"||u.code==="Escape")&&(u.preventDefault(),u.stopImmediatePropagation(),(i.querySelector('[data-action="back"]')??i.querySelector('[data-action="cancel"],[data-choice="cancel"]'))?.click()))};window.addEventListener("keydown",d,!0);let g=new MutationObserver(()=>{c=0,l()});return g.observe(i,{childList:!0}),l(),{dialog:i,style:e,cleanupNav:()=>{window.removeEventListener("keydown",d,!0),g.disconnect()}}}function Sd(t){t.cleanupNav?.();try{t.dialog.close()}catch{}t.dialog.remove(),t.style.remove()}function se(t,e=!1){return e?"background:#2c3e8f;color:white;border:0;padding:12px 16px;border-radius:8px;cursor:pointer;font-size:0.95rem;width:100%;margin-bottom:8px;text-align:left;display:flex;align-items:center;gap:12px;":`background:transparent;color:${t?"#e0e0e0":"#1a1a2e"};border:1px solid ${t?"#3a3a4e":"#d0d0d0"};padding:12px 16px;border-radius:8px;cursor:pointer;font-size:0.95rem;width:100%;margin-bottom:8px;text-align:left;display:flex;align-items:center;gap:12px;`}function kd(t,e,n){let r=Bt(n),o=r?"#888":"#666",i=fn(),s=sr();return t.dialog.innerHTML=`
     <h2 style="margin:0 0 8px;font-size:1.3rem;">Sign in to ${Bi(e)}</h2>
     <p style="margin:0 0 24px;color:${o};font-size:0.9rem;">Choose how you want to sign in. Your keys never leave your control.</p>
     <div style="display:flex;flex-direction:column;">
@@ -24,7 +24,7 @@ Minimum version required to store current data is: `+i+`.
       <button data-choice="nsec" style="${se(r)}"><span style="font-size:1.2rem;">\u26A0\uFE0F</span><span><strong>Paste private key</strong><br><span style="font-size:0.8rem;color:${o};">In-memory only \u2014 risky, last resort</span></span></button>
     </div>
     <button data-choice="cancel" style="background:transparent;color:${r?"#e0e0e0":"#1a1a2e"};border:1px solid ${r?"#3a3a4e":"#d0d0d0"};border-radius:8px;padding:12px;cursor:pointer;font-size:0.95rem;width:100%;margin-top:12px;text-align:center;">Cancel</button>
-  `,new Promise(a=>{t.dialog.querySelectorAll("button[data-choice]").forEach(c=>{c.addEventListener("click",()=>{let l=c.dataset.choice;a(l)})})})}async function kd(t,e){let n=Bt(e.theme),r=n?"#888":"#666",o=n?"#e0e0e0":"#1a1a2e";t.dialog.innerHTML=`
+  `,new Promise(a=>{t.dialog.querySelectorAll("button[data-choice]").forEach(c=>{c.addEventListener("click",()=>{let l=c.dataset.choice;a(l)})})})}async function Bd(t,e){let n=Bt(e.theme),r=n?"#888":"#666",o=n?"#e0e0e0":"#1a1a2e";t.dialog.innerHTML=`
     <h2 style="margin:0 0 8px;font-size:1.2rem;">Waiting for your extension</h2>
     <p style="margin:0 0 20px;color:${r};font-size:0.85rem;">Approve the sign-in prompt in bark, Alby, nos2x, or whichever NIP-07 extension you use. Cold-start can take a few seconds.</p>
     <div style="display:flex;align-items:center;justify-content:center;gap:14px;margin:0 0 24px;color:${o};">
@@ -40,7 +40,7 @@ Minimum version required to store current data is: `+i+`.
     <h2 style="margin:0 0 8px;font-size:1.2rem;">${i?"Open My Signet":"Sign in with Signet"}</h2>
     <p style="margin:0 0 16px;color:${o};font-size:0.85rem;">${i?"Approve in My Signet and keep that tab open so it can sign for this app.":"Open the link on your phone, or scan the QR if rendered."}</p>
     <div style="background:${r?"#0f0f1f":"#f5f5f8"};border-radius:8px;padding:16px;margin-bottom:16px;">
-      <canvas id="signet-login-qr" width="200" height="200" style="display:block;width:200px;height:200px;margin:0 auto 12px;background:#ffffff;border-radius:6px;box-sizing:border-box;"></canvas>
+      <canvas id="signet-login-qr" width="360" height="360" style="display:block;width:360px;height:360px;max-width:100%;margin:0 auto 12px;background:#ffffff;border-radius:6px;box-sizing:border-box;"></canvas>
       <a id="signet-login-open-signet" href="${Bi(l)}" target="_blank" rel="noopener" style="${i?se(r,!0)+"justify-content:center;text-align:center;text-decoration:none;":"display:block;color:#5b6dff;font-size:0.75rem;word-break:break-all;text-decoration:none;"}">${i?"Open My Signet":`${Bi(l.slice(0,80))}\u2026`}</a>
     </div>
     <p id="signet-login-status" style="margin:0 0 12px;color:${o};font-size:0.85rem;">${i?"Waiting for My Signet approval\u2026":"Waiting for approval\u2026"}</p>
@@ -48,7 +48,7 @@ Minimum version required to store current data is: `+i+`.
       <button data-action="back" style="${se(r)}width:auto;flex:0 0 auto;padding:8px 16px;">\u2190 Back</button>
       <button data-action="cancel" style="${se(r)}width:auto;flex:0 0 auto;padding:8px 16px;">Cancel</button>
     </div>
-  `;let d=t.dialog.querySelector("#signet-login-qr");if(d&&Ai.default.toCanvas(d,l,{width:200,margin:1,errorCorrectionLevel:"M",color:{dark:"#0a0418",light:"#ffffff"}}).catch(()=>{}),i&&typeof window<"u")try{window.open(l,"_blank","noopener,noreferrer")}catch{}return new Promise(g=>{let u=!1,f=y=>{u||(u=!0,g(y))};t.dialog.querySelector('[data-action="back"]')?.addEventListener("click",()=>{f(null)}),t.dialog.querySelector('[data-action="cancel"]')?.addEventListener("click",()=>{f(null)}),ti({requestId:e.challenge,relayUrl:e.relayUrl,sessionPrivKey:s,expectedOrigin:e.origin,timeout:e.timeout}).then(y=>{let b=y,v={id:b.authEvent.id,pubkey:b.authEvent.pubkey,kind:21236,created_at:b.authEvent.created_at,tags:b.authEvent.tags,content:b.authEvent.content,sig:b.authEvent.sig},R={pubkey:b.pubkey,authEvent:v};b.displayName&&(R.displayName=b.displayName),b.bunkerUri&&(R.bunkerUri=b.bunkerUri),f(R)}).catch(y=>{let b=t.dialog.querySelector("#signet-login-status");b&&(b.textContent=`\u2717 ${y instanceof Error?y.message:String(y)}`,b.style.color="#d04848")})})}async function Yc(t,e,n){let r=new Ee(e.pubkey,e.authEvent),o="redirect";if(e.bunkerUri){let s=ht(),a=e.pubkey,c=t.dialog.querySelector("#signet-login-status");c&&(c.textContent="Connecting signer...");try{let l=await Pt({uri:e.bunkerUri,clientSecretKey:s,timeoutMs:wd});if(l.pubkey.toLowerCase()!==a.toLowerCase())return console.warn("[signet-login] Signet relay upgrade: bunker pubkey mismatch \u2014 cannot sign",{connected:l.pubkey,expected:a}),l.close().catch(()=>{}),c&&(c.textContent="Signer connected with the wrong public key.",c.style.color="#d04848"),await Promise.race([new Promise(d=>setTimeout(d,2500)),n]),null;r=l}catch(l){console.warn("[signet-login] Signet relay upgrade: createBunkerSigner failed \u2014 signer did not become live.",l);let d=t.dialog.querySelector("#signet-login-status");return d&&(d.textContent=`Signer connection failed: ${l instanceof Error?l.message:String(l)}`,d.style.color="#d04848"),await Promise.race([new Promise(g=>setTimeout(g,2500)),n]),null}o="bunker"}else console.warn("[signet-login] Signet relay login carried no bunkerUri \u2014 auth-only ephemeral (cannot sign). The signer device must have its NIP-46 server enabled to hand back a bunker:// URI.");let i={pubkey:e.pubkey,method:o,signer:r,authEvent:e.authEvent};return e.displayName&&(i.displayName=e.displayName),i}async function Bd(t,e){let n=Bt(e.theme),r=n?"#888":"#666",o=n?"#0f0f1f":"#f5f5f8",i=n?"#e0e0e0":"#1a1a2e";return t.dialog.innerHTML=`
+  `;let d=t.dialog.querySelector("#signet-login-qr");if(d&&Ai.default.toCanvas(d,l,{width:360,margin:1,errorCorrectionLevel:"H",color:{dark:"#0a0418",light:"#ffffff"}}).catch(()=>{}),i&&typeof window<"u")try{window.open(l,"_blank","noopener,noreferrer")}catch{}return new Promise(g=>{let u=!1,f=y=>{u||(u=!0,g(y))};t.dialog.querySelector('[data-action="back"]')?.addEventListener("click",()=>{f(null)}),t.dialog.querySelector('[data-action="cancel"]')?.addEventListener("click",()=>{f(null)}),ti({requestId:e.challenge,relayUrl:e.relayUrl,sessionPrivKey:s,expectedOrigin:e.origin,timeout:e.timeout}).then(y=>{let b=y,v={id:b.authEvent.id,pubkey:b.authEvent.pubkey,kind:21236,created_at:b.authEvent.created_at,tags:b.authEvent.tags,content:b.authEvent.content,sig:b.authEvent.sig},R={pubkey:b.pubkey,authEvent:v};b.displayName&&(R.displayName=b.displayName),b.bunkerUri&&(R.bunkerUri=b.bunkerUri),f(R)}).catch(y=>{let b=t.dialog.querySelector("#signet-login-status");b&&(b.textContent=`\u2717 ${y instanceof Error?y.message:String(y)}`,b.style.color="#d04848")})})}async function Yc(t,e,n){let r=new Ee(e.pubkey,e.authEvent),o="redirect";if(e.bunkerUri){let s=ht(),a=e.pubkey,c=t.dialog.querySelector("#signet-login-status");c&&(c.textContent="Connecting signer...");try{let l=await Pt({uri:e.bunkerUri,clientSecretKey:s,timeoutMs:xd});l.pubkey.toLowerCase()!==a.toLowerCase()?(console.warn("[signet-login] Signet relay upgrade: bunker pubkey mismatch \u2014 continuing identity-only",{connected:l.pubkey,expected:a}),l.close().catch(()=>{})):(r=l,o="bunker")}catch(l){console.warn("[signet-login] Signet relay upgrade: createBunkerSigner failed \u2014 continuing identity-only (auth-only).",l)}}else console.warn("[signet-login] Signet relay login carried no bunkerUri \u2014 auth-only ephemeral (cannot sign). The signer device must have its NIP-46 server enabled to hand back a bunker:// URI.");let i={pubkey:e.pubkey,method:o,signer:r,authEvent:e.authEvent};return e.displayName&&(i.displayName=e.displayName),i}async function Ad(t,e){let n=Bt(e.theme),r=n?"#888":"#666",o=n?"#0f0f1f":"#f5f5f8",i=n?"#e0e0e0":"#1a1a2e";return t.dialog.innerHTML=`
     <h2 style="margin:0 0 8px;font-size:1.2rem;">Paste bunker URI</h2>
     <p style="margin:0 0 16px;color:${r};font-size:0.85rem;">Connect to your NIP-46 bunker (Heartwood, nsecBunker, or any compatible signer).</p>
     <textarea id="signet-login-bunker-input" placeholder="bunker://..." rows="3" style="width:100%;background:${o};color:${i};border:1px solid ${n?"#3a3a4e":"#d0d0d0"};border-radius:8px;padding:10px;font-size:0.85rem;font-family:ui-monospace,monospace;box-sizing:border-box;resize:vertical;margin-bottom:12px;"></textarea>
@@ -57,7 +57,7 @@ Minimum version required to store current data is: `+i+`.
       <button data-action="back" style="${se(n)}width:auto;flex:0 0 auto;padding:8px 16px;">\u2190 Back</button>
       <button data-action="connect" style="${se(n,!0)}width:auto;flex:1;padding:8px 16px;text-align:center;">Connect</button>
     </div>
-  `,new Promise(s=>{let a=!1,c=u=>{a||(a=!0,s(u))},l=t.dialog.querySelector("#signet-login-bunker-input"),d=t.dialog.querySelector("#signet-login-bunker-status"),g=t.dialog.querySelector('[data-action="connect"]');t.dialog.querySelector('[data-action="back"]')?.addEventListener("click",()=>{c(null)}),g?.addEventListener("click",async()=>{let u=l?.value.trim()??"";if(!u){d&&(d.textContent="Please paste a bunker URI.");return}d&&(d.textContent="Connecting\u2026",d.style.color=""),g.disabled=!0;try{let f=await Pt({uri:u,clientSecretKey:ht()});c(f)}catch(f){d&&(d.textContent=`\u2717 ${f instanceof Error?f.message:String(f)}`,d.style.color="#d04848"),g.disabled=!1}})})}async function Ad(t,e){let n=Bt(e.theme),r=n?"#888":"#666",o=ht(),i=le(Te.getPublicKey(o)),s=le(Te.utils.randomPrivateKey()).slice(0,32),a=ta({clientPubkeyHex:i,relayUrl:e.relayUrl,secret:s,perms:["sign_event","nip44_encrypt","nip44_decrypt"],appName:e.appName,appUrl:e.origin});t.dialog.innerHTML=`
+  `,new Promise(s=>{let a=!1,c=u=>{a||(a=!0,s(u))},l=t.dialog.querySelector("#signet-login-bunker-input"),d=t.dialog.querySelector("#signet-login-bunker-status"),g=t.dialog.querySelector('[data-action="connect"]');t.dialog.querySelector('[data-action="back"]')?.addEventListener("click",()=>{c(null)}),g?.addEventListener("click",async()=>{let u=l?.value.trim()??"";if(!u){d&&(d.textContent="Please paste a bunker URI.");return}d&&(d.textContent="Connecting\u2026",d.style.color=""),g.disabled=!0;try{let f=await Pt({uri:u,clientSecretKey:ht()});c(f)}catch(f){d&&(d.textContent=`\u2717 ${f instanceof Error?f.message:String(f)}`,d.style.color="#d04848"),g.disabled=!1}})})}async function Rd(t,e){let n=Bt(e.theme),r=n?"#888":"#666",o=ht(),i=le(Te.getPublicKey(o)),s=le(Te.utils.randomPrivateKey()).slice(0,32),a=ta({clientPubkeyHex:i,relayUrl:e.relayUrl,secret:s,perms:["sign_event","nip44_encrypt","nip44_decrypt"],appName:e.appName,appUrl:e.origin});t.dialog.innerHTML=`
     <h2 style="margin:0 0 8px;font-size:1.2rem;">Connect a Nostr signer</h2>
     <p style="margin:0 0 16px;color:${r};font-size:0.85rem;">Scan or paste this into your signer (nsec.app, Amber, Keychat\u2026). The connection happens over your relay.</p>
     <div style="background:${n?"#0f0f1f":"#f5f5f8"};border-radius:8px;padding:16px;margin-bottom:16px;">
@@ -69,7 +69,7 @@ Minimum version required to store current data is: `+i+`.
       <button data-action="back" style="${se(n)}width:auto;flex:0 0 auto;padding:8px 16px;">\u2190 Back</button>
       <button data-action="cancel" style="${se(n)}width:auto;flex:0 0 auto;padding:8px 16px;">Cancel</button>
     </div>
-  `;let c=t.dialog.querySelector("#signet-login-nc-qr");c&&Ai.default.toCanvas(c,a,{width:200,margin:1,errorCorrectionLevel:"M",color:{dark:"#0a0418",light:"#ffffff"}}).catch(()=>{});let l=t.dialog.querySelector('[data-action="copy"]');l?.addEventListener("click",()=>{navigator.clipboard?.writeText(a).then(()=>{l.textContent="Copied \u2713",window.setTimeout(()=>{l.textContent="Copy URI"},1500)})});let d=new AbortController,g=t.dialog.querySelector("#signet-login-nc-status");return new Promise(u=>{let f=!1,y=b=>{f||(f=!0,u(b))};t.dialog.querySelector('[data-action="back"]')?.addEventListener("click",()=>{d.abort(),y(null)}),t.dialog.querySelector('[data-action="cancel"]')?.addEventListener("click",()=>{d.abort(),y(null)}),ea({uri:a,clientSecretKey:o,abortSignal:d.signal}).then(b=>y(b)).catch(b=>{f||g&&(g.textContent=`\u2717 ${b instanceof Error?b.message:String(b)}`,g.style.color="#d04848")})})}async function Rd(t,e){let n=Bt(e.theme),r=n?"#888":"#666",o=n?"#0f0f1f":"#f5f5f8",i=n?"#e0e0e0":"#1a1a2e";return t.dialog.innerHTML=`
+  `;let c=t.dialog.querySelector("#signet-login-nc-qr");c&&Ai.default.toCanvas(c,a,{width:200,margin:1,errorCorrectionLevel:"M",color:{dark:"#0a0418",light:"#ffffff"}}).catch(()=>{});let l=t.dialog.querySelector('[data-action="copy"]');l?.addEventListener("click",()=>{navigator.clipboard?.writeText(a).then(()=>{l.textContent="Copied \u2713",window.setTimeout(()=>{l.textContent="Copy URI"},1500)})});let d=new AbortController,g=t.dialog.querySelector("#signet-login-nc-status");return new Promise(u=>{let f=!1,y=b=>{f||(f=!0,u(b))};t.dialog.querySelector('[data-action="back"]')?.addEventListener("click",()=>{d.abort(),y(null)}),t.dialog.querySelector('[data-action="cancel"]')?.addEventListener("click",()=>{d.abort(),y(null)}),ea({uri:a,clientSecretKey:o,abortSignal:d.signal}).then(b=>y(b)).catch(b=>{f||g&&(g.textContent=`\u2717 ${b instanceof Error?b.message:String(b)}`,g.style.color="#d04848")})})}async function Cd(t,e){let n=Bt(e.theme),r=n?"#888":"#666",o=n?"#0f0f1f":"#f5f5f8",i=n?"#e0e0e0":"#1a1a2e";return t.dialog.innerHTML=`
     <h2 style="margin:0 0 8px;font-size:1.2rem;">Paste private key</h2>
     <p style="margin:0 0 12px;color:#d04848;font-size:0.85rem;font-weight:600;">\u26A0\uFE0F Last-resort method \u2014 only paste keys you can afford to lose.</p>
     <p style="margin:0 0 16px;color:${r};font-size:0.8rem;line-height:1.4;">Held in memory for this session only. Cleared on page reload. Prefer a browser extension or bunker URI for any key with real value.</p>
@@ -79,7 +79,7 @@ Minimum version required to store current data is: `+i+`.
       <button data-action="back" style="${se(n)}width:auto;flex:0 0 auto;padding:8px 16px;">\u2190 Back</button>
       <button data-action="connect" style="${se(n,!0)}width:auto;flex:1;padding:8px 16px;text-align:center;">Sign in</button>
     </div>
-  `,new Promise(s=>{let a=!1,c=u=>{a||(a=!0,s(u))},l=t.dialog.querySelector("#signet-login-nsec-input"),d=t.dialog.querySelector("#signet-login-nsec-status"),g=t.dialog.querySelector('[data-action="connect"]');t.dialog.querySelector('[data-action="back"]')?.addEventListener("click",()=>{l&&(l.value=""),c(null)}),g?.addEventListener("click",()=>{let u=l?.value??"";if(!u.trim()){d&&(d.textContent="Please paste an nsec.");return}try{let f=na(u);l&&(l.value=""),c(f)}catch(f){d&&(d.textContent=`\u2717 ${f instanceof Error?f.message:String(f)}`,d.style.color="#d04848")}})})}function Cd(t){let e=t.challenge??xd();if(!/^[0-9a-f]{64}$/i.test(e))throw new Error("challenge-must-be-64-hex");let n=typeof window<"u"?window.location.origin:"http://localhost",r=Math.max(5e3,Math.min(t.timeout??je.timeout,6e5)),o={appName:t.appName,challenge:e.toLowerCase(),origin:n,relayUrl:t.relayUrl??je.relayUrl,theme:t.theme??je.theme,timeout:r,signetAppOrigin:t.signetAppOrigin??je.signetAppOrigin};return t.preferredMethod!==void 0&&(o.preferredMethod=t.preferredMethod),t.redirectCallback!==void 0&&(o.redirectCallback=t.redirectCallback),o}async function Jc(t){if(!t.appName||t.appName.length===0)throw new Error("appName-required");if(t.appName.length>64)throw new Error("appName-too-long");let e=Cd(t),n=Ed(e.theme),r=!1,o=new Promise(i=>{n.dialog.addEventListener("cancel",()=>{r=!0,i(null)})});try{for(;;){let i=e.preferredMethod?e.preferredMethod:await Promise.race([Sd(n,e.appName,e.theme),o]);if(r||i===null||i==="cancel")return null;if(i==="nip07"){let s=await Promise.race([kd(n,e),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await dn();return{pubkey:s.pubkey,method:"nip07",signer:a,authEvent:s.authEvent}}if(i==="redirect"){let s=await Promise.race([Wc(n,e,{sameDevice:!0}),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await Yc(n,s,o);if(r)return null;if(!a){if(e.preferredMethod)return null;continue}return a}if(i==="amber")return await sa({appName:e.appName,challenge:e.challenge,origin:e.origin,...e.redirectCallback!==void 0?{redirectCallback:e.redirectCallback}:{}}),null;if(i==="qr"){let s=await Promise.race([Wc(n,e),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await Yc(n,s,o);if(r)return null;if(!a){if(e.preferredMethod)return null;continue}return a}if(i==="bunker"){let s=await Promise.race([Bd(n,e),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await s.signEvent({kind:21236,content:"",tags:[["challenge",e.challenge],["origin",e.origin],["app",e.appName]]});return{pubkey:s.pubkey,method:"bunker",signer:s,authEvent:a}}if(i==="nostrconnect"){let s=await Promise.race([Ad(n,e),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await s.signEvent({kind:21236,content:"",tags:[["challenge",e.challenge],["origin",e.origin],["app",e.appName]]});return{pubkey:s.pubkey,method:"bunker",signer:s,authEvent:a}}if(i==="nsec"){let s=await Promise.race([Rd(n,e),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await s.signEvent({kind:21236,content:"",tags:[["challenge",e.challenge],["origin",e.origin],["app",e.appName]]});return{pubkey:s.pubkey,method:"nsec",signer:s,authEvent:a}}}}finally{vd(n)}}function Xc(t){let e={};typeof window<"u"&&new URLSearchParams(window.location.search).forEach((o,i)=>{e[i]=o});let n=typeof window<"u"&&!!window.opener&&window.opener!==window;if(n){try{window.opener.postMessage({type:"signet-login-callback",params:e},"*")}catch{}if(t?.closeAfterPost??!0)try{window.close()}catch{}}return{params:e,isPopup:n}}var Fc=/^[0-9a-f]{64}$/i,Td=/^[0-9a-f]{128}$/i;function Ld(t){let e=t.redirectCallback??`${t.origin}/`,n=new URLSearchParams({auth:"1",challenge:t.challenge,origin:t.origin,name:t.appName,callback:e,t:String(Math.floor(Date.now()/1e3))});return`${t.signetAppOrigin}/?${n.toString()}`}function Qc(t){if(typeof window>"u")throw new Error("signet-login: redirect mode requires a browser environment");let e={challenge:t.challenge,origin:t.origin,appName:t.appName,createdAt:Date.now()};rr(e);let n=Ld(t);return window.location.href=n,new Promise(()=>{})}function Nd(){if(typeof window>"u")return;let t=new URL(window.location.href),e=["pubkey","npub","signature","eventId","error","warnings","fromNP","display_name","t","bunker","avatar_hash","avatar_url","avatar_key"],n=!1;for(let o of e)t.searchParams.has(o)&&(t.searchParams.delete(o),n=!0);if(!n)return;let r=t.pathname+(t.search?t.search:"")+t.hash;try{window.history.replaceState(window.history.state,document.title,r)}catch{}}function el(){if(typeof window>"u")return{kind:"no-callback"};let t=new URLSearchParams(window.location.search),e=t.get("error"),n=t.get("pubkey"),r=t.get("signature"),o=t.get("eventId");if(!e&&!n&&!r&&!o)return{kind:"no-callback"};let i=or(),s=q=>(ir(),Nd(),q);if(e==="denied")return s({kind:"denied"});if(!i)return s({kind:"invalid",reason:"no-pending-state"});if(i.origin!==window.location.origin)return s({kind:"invalid",reason:"origin-mismatch"});if(Date.now()-i.createdAt>Tn)return s({kind:"invalid",reason:"pending-stale"});if(!n||!Fc.test(n))return s({kind:"invalid",reason:"pubkey-malformed"});if(!r||!Td.test(r))return s({kind:"invalid",reason:"signature-malformed"});if(!o||!Fc.test(o))return s({kind:"invalid",reason:"eventId-malformed"});let a,c=t.get("t");if(c&&/^\d+$/.test(c)){let q=Number(c);if(!Number.isFinite(q))return s({kind:"invalid",reason:"t-malformed"});a=q}else a=Math.floor(Date.now()/1e3),typeof console<"u"&&console.warn("signet-login: redirect callback missing `t` param \u2014 auth event created_at approximated. Server-side verification may reject. Upgrade signet-app to emit `t` in the redirect URL.");let l=n.toLowerCase(),d=r.toLowerCase(),g=o.toLowerCase(),u=[["challenge",i.challenge],["origin",i.origin]],f=t.get("avatar_hash"),y=t.get("avatar_url"),b=t.get("avatar_key");f&&/^[0-9a-f]{64}$/i.test(f)&&u.push(["avatar_hash",f]),y&&y.length<=500&&u.push(["avatar_url",y]),b&&/^[0-9a-f]{64}$/i.test(b)&&u.push(["avatar_key",b]);let v={id:g,pubkey:l,kind:21236,created_at:a,tags:u,content:"",sig:d},R=t.get("display_name")||void 0,O=new Ee(l,v),N={pubkey:l,method:"redirect",signer:O,authEvent:v};R&&(N.displayName=R);let I=t.get("bunker"),_;return I&&I.length>=9&&I.length<=8192&&I.slice(0,9).toLowerCase()==="bunker://"&&(_=I),s(_?{kind:"session",session:N,bunkerUri:_}:{kind:"session",session:N})}var Id=8e3;async function tl(t){if(t.mode==="redirect"){if(typeof window>"u")throw new Error("signet-login: redirect mode requires a browser environment");let n=t.challenge??_d();if(!/^[0-9a-f]{64}$/i.test(n))throw new Error("challenge-must-be-64-hex");if(!t.appName||t.appName.length===0)throw new Error("appName-required");if(t.appName.length>64)throw new Error("appName-too-long");return Qc({appName:t.appName,challenge:n.toLowerCase(),origin:window.location.origin,signetAppOrigin:t.signetAppOrigin??je.signetAppOrigin,...t.redirectCallback!==void 0?{redirectCallback:t.redirectCallback}:{}})}let e=await Jc(t);return e?(t.persist!==!1&&Jt(e),e):null}function _d(){let t=new Uint8Array(32);return crypto.getRandomValues(t),Array.from(t,e=>e.toString(16).padStart(2,"0")).join("")}async function nl(t){let e=oa();if(!e)return null;let n;try{n=JSON.parse(e.authEventJson)}catch{return Je(),null}if(e.method==="nip07"){if(!fn()){let i=new Ee(e.pubkey,n);return{pubkey:e.pubkey,method:"redirect",signer:i,authEvent:n}}try{let i=await dn();return i.pubkey!==e.pubkey?(Je(),null):{pubkey:e.pubkey,method:"nip07",signer:i,authEvent:n}}catch{return Je(),null}}if(e.method==="bunker"){if(t?.reconnectBunker===!1){let i=new Ee(e.pubkey,n);return{pubkey:e.pubkey,method:"redirect",signer:i,authEvent:n}}if(!e.bunkerUri||!e.bunkerClientSkHex)return console.warn("[signet-login] restore: stored bunker session has no reconnect creds (bunkerUri/clientSk) \u2014 it was an auth-only login. Clearing."),Je(),null;try{let i=await Pt({uri:e.bunkerUri,clientSecretKey:ht()});return i.pubkey!==e.pubkey?(console.warn("[signet-login] restore: reconnected bunker pubkey mismatch \u2014 clearing session",{connected:i.pubkey,expected:e.pubkey}),await i.close(),Je(),null):{pubkey:e.pubkey,method:"bunker",signer:i,authEvent:n}}catch(i){return console.warn("[signet-login] restore: bunker reconnect failed \u2014 keeping creds for the next retry (NOT clearing). The signer device should still recognise us on reconnect.",i),null}}let r=new Ee(e.pubkey,n),o={pubkey:e.pubkey,method:e.method,signer:r,authEvent:n};return e.displayName&&(o.displayName=e.displayName),o}var rl=Xc;async function ol(t={}){let e=aa();if(e.kind==="session")return Jt(e.session),e;if(e.kind!=="no-callback")return e;let n=el();if(n.kind!=="session")return n;if(n.bunkerUri){let r=n.session.pubkey,o=n.session.authEvent,i=n.session.displayName,s=ht(),a=Pt({uri:n.bunkerUri,clientSecretKey:s,timeoutMs:Id}).then(l=>{if(l.pubkey.toLowerCase()!==r.toLowerCase())return console.warn("[signet-login] redirect upgrade: bunker pubkey mismatch \u2014 staying auth-only (cannot sign)",{connected:l.pubkey,expected:r}),l.close().catch(()=>{}),null;let d={pubkey:r,method:"bunker",signer:l,authEvent:o};return i&&(d.displayName=i),Jt(d),l}).catch(l=>(console.warn("[signet-login] redirect upgrade: createBunkerSigner failed \u2014 staying auth-only (no live signing). Reconnect/relay issue or signer device unreachable.",l),null));if(t.waitForBunker){let l=await a;if(l){let d={pubkey:r,method:"bunker",signer:l,authEvent:o};return i&&(d.displayName=i),Jt(d),{kind:"session",session:d}}}let c={pubkey:r,method:"bunker",signer:new nr(r,o,a,n.bunkerUri,s,!1),authEvent:o};return i&&(c.displayName=i),Jt(c),{kind:"session",session:c}}return console.warn("[signet-login] redirect login carried no bunkerUri \u2014 auth-only ephemeral (cannot sign). The signer device must enable its NIP-46 server to return a bunker:// URI."),Jt(n.session),n}async function il(t){if(t)try{await t.signer.close()}catch{}Je()}function Jt(t){if(t.method==="nsec")return;let e={pubkey:t.pubkey,method:t.method,authEventJson:JSON.stringify(t.authEvent)};if(t.method==="bunker"){let n=t.signer;n.bunkerUri&&n.clientSecretKey instanceof Uint8Array&&(e.bunkerUri=n.bunkerUri,e.bunkerClientSkHex=Io(n.clientSecretKey))}t.expiresAt!==void 0&&(e.expiresAt=t.expiresAt),t.displayName!==void 0&&(e.displayName=t.displayName),ra(e)}if(typeof window<"u"){let e=window.Signet??{};Object.assign(e,{login:tl,restoreSession:nl,logout:il,handleCallback:rl,handleRedirectCallback:ol}),window.Signet=e}return gl(Ud);})();
+  `,new Promise(s=>{let a=!1,c=u=>{a||(a=!0,s(u))},l=t.dialog.querySelector("#signet-login-nsec-input"),d=t.dialog.querySelector("#signet-login-nsec-status"),g=t.dialog.querySelector('[data-action="connect"]');t.dialog.querySelector('[data-action="back"]')?.addEventListener("click",()=>{l&&(l.value=""),c(null)}),g?.addEventListener("click",()=>{let u=l?.value??"";if(!u.trim()){d&&(d.textContent="Please paste an nsec.");return}try{let f=na(u);l&&(l.value=""),c(f)}catch(f){d&&(d.textContent=`\u2717 ${f instanceof Error?f.message:String(f)}`,d.style.color="#d04848")}})})}function Td(t){let e=t.challenge??Ed();if(!/^[0-9a-f]{64}$/i.test(e))throw new Error("challenge-must-be-64-hex");let n=typeof window<"u"?window.location.origin:"http://localhost",r=Math.max(5e3,Math.min(t.timeout??je.timeout,6e5)),o={appName:t.appName,challenge:e.toLowerCase(),origin:n,relayUrl:t.relayUrl??je.relayUrl,theme:t.theme??je.theme,timeout:r,signetAppOrigin:t.signetAppOrigin??je.signetAppOrigin};return t.preferredMethod!==void 0&&(o.preferredMethod=t.preferredMethod),t.redirectCallback!==void 0&&(o.redirectCallback=t.redirectCallback),o}var Jc=Promise.resolve();async function Xc(t){let e=Jc,n;Jc=new Promise(r=>{n=r}),await e;try{return await Ld(t)}finally{n()}}async function Ld(t){if(!t.appName||t.appName.length===0)throw new Error("appName-required");if(t.appName.length>64)throw new Error("appName-too-long");let e=Td(t),n=vd(e.theme),r=!1,o=new Promise(i=>{n.dialog.addEventListener("cancel",()=>{r=!0,i(null)})});try{for(;;){let i=e.preferredMethod?e.preferredMethod:await Promise.race([kd(n,e.appName,e.theme),o]);if(r||i===null||i==="cancel")return null;if(i==="nip07"){let s=await Promise.race([Bd(n,e),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await dn();return{pubkey:s.pubkey,method:"nip07",signer:a,authEvent:s.authEvent}}if(i==="redirect"){let s=await Promise.race([Wc(n,e,{sameDevice:!0}),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await Yc(n,s,o);if(r)return null;if(!a){if(e.preferredMethod)return null;continue}return a}if(i==="amber")return await sa({appName:e.appName,challenge:e.challenge,origin:e.origin,...e.redirectCallback!==void 0?{redirectCallback:e.redirectCallback}:{}}),null;if(i==="qr"){let s=await Promise.race([Wc(n,e),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await Yc(n,s,o);if(r)return null;if(!a){if(e.preferredMethod)return null;continue}return a}if(i==="bunker"){let s=await Promise.race([Ad(n,e),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await s.signEvent({kind:21236,content:"",tags:[["challenge",e.challenge],["origin",e.origin],["app",e.appName]]});return{pubkey:s.pubkey,method:"bunker",signer:s,authEvent:a}}if(i==="nostrconnect"){let s=await Promise.race([Rd(n,e),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await s.signEvent({kind:21236,content:"",tags:[["challenge",e.challenge],["origin",e.origin],["app",e.appName]]});return{pubkey:s.pubkey,method:"bunker",signer:s,authEvent:a}}if(i==="nsec"){let s=await Promise.race([Cd(n,e),o]);if(r)return null;if(!s){if(e.preferredMethod)return null;continue}let a=await s.signEvent({kind:21236,content:"",tags:[["challenge",e.challenge],["origin",e.origin],["app",e.appName]]});return{pubkey:s.pubkey,method:"nsec",signer:s,authEvent:a}}}}finally{Sd(n)}}function Fc(t){let e={};typeof window<"u"&&new URLSearchParams(window.location.search).forEach((o,i)=>{e[i]=o});let n=typeof window<"u"&&!!window.opener&&window.opener!==window;if(n){try{window.opener.postMessage({type:"signet-login-callback",params:e},"*")}catch{}if(t?.closeAfterPost??!0)try{window.close()}catch{}}return{params:e,isPopup:n}}var Qc=/^[0-9a-f]{64}$/i,Nd=/^[0-9a-f]{128}$/i;function Id(t){let e=t.redirectCallback??`${t.origin}/`,n=new URLSearchParams({auth:"1",challenge:t.challenge,origin:t.origin,name:t.appName,callback:e,t:String(Math.floor(Date.now()/1e3))});return`${t.signetAppOrigin}/?${n.toString()}`}function el(t){if(typeof window>"u")throw new Error("signet-login: redirect mode requires a browser environment");let e={challenge:t.challenge,origin:t.origin,appName:t.appName,createdAt:Date.now()};rr(e);let n=Id(t);return window.location.href=n,new Promise(()=>{})}function _d(){if(typeof window>"u")return;let t=new URL(window.location.href),e=["pubkey","npub","signature","eventId","error","warnings","fromNP","display_name","t","bunker","avatar_hash","avatar_url","avatar_key"],n=!1;for(let o of e)t.searchParams.has(o)&&(t.searchParams.delete(o),n=!0);if(!n)return;let r=t.pathname+(t.search?t.search:"")+t.hash;try{window.history.replaceState(window.history.state,document.title,r)}catch{}}function tl(){if(typeof window>"u")return{kind:"no-callback"};let t=new URLSearchParams(window.location.search),e=t.get("error"),n=t.get("pubkey"),r=t.get("signature"),o=t.get("eventId");if(!e&&!n&&!r&&!o)return{kind:"no-callback"};let i=or(),s=q=>(ir(),_d(),q);if(e==="denied")return s({kind:"denied"});if(!i)return s({kind:"invalid",reason:"no-pending-state"});if(i.origin!==window.location.origin)return s({kind:"invalid",reason:"origin-mismatch"});if(Date.now()-i.createdAt>Tn)return s({kind:"invalid",reason:"pending-stale"});if(!n||!Qc.test(n))return s({kind:"invalid",reason:"pubkey-malformed"});if(!r||!Nd.test(r))return s({kind:"invalid",reason:"signature-malformed"});if(!o||!Qc.test(o))return s({kind:"invalid",reason:"eventId-malformed"});let a,c=t.get("t");if(c&&/^\d+$/.test(c)){let q=Number(c);if(!Number.isFinite(q))return s({kind:"invalid",reason:"t-malformed"});a=q}else a=Math.floor(Date.now()/1e3),typeof console<"u"&&console.warn("signet-login: redirect callback missing `t` param \u2014 auth event created_at approximated. Server-side verification may reject. Upgrade signet-app to emit `t` in the redirect URL.");let l=n.toLowerCase(),d=r.toLowerCase(),g=o.toLowerCase(),u=[["challenge",i.challenge],["origin",i.origin]],f=t.get("avatar_hash"),y=t.get("avatar_url"),b=t.get("avatar_key");f&&/^[0-9a-f]{64}$/i.test(f)&&u.push(["avatar_hash",f]),y&&y.length<=500&&u.push(["avatar_url",y]),b&&/^[0-9a-f]{64}$/i.test(b)&&u.push(["avatar_key",b]);let v={id:g,pubkey:l,kind:21236,created_at:a,tags:u,content:"",sig:d},R=t.get("display_name")||void 0,O=new Ee(l,v),N={pubkey:l,method:"redirect",signer:O,authEvent:v};R&&(N.displayName=R);let I=t.get("bunker"),_;return I&&I.length>=9&&I.length<=8192&&I.slice(0,9).toLowerCase()==="bunker://"&&(_=I),s(_?{kind:"session",session:N,bunkerUri:_}:{kind:"session",session:N})}var Ud=8e3;async function nl(t){if(t.mode==="redirect"){if(typeof window>"u")throw new Error("signet-login: redirect mode requires a browser environment");let n=t.challenge??Od();if(!/^[0-9a-f]{64}$/i.test(n))throw new Error("challenge-must-be-64-hex");if(!t.appName||t.appName.length===0)throw new Error("appName-required");if(t.appName.length>64)throw new Error("appName-too-long");return el({appName:t.appName,challenge:n.toLowerCase(),origin:window.location.origin,signetAppOrigin:t.signetAppOrigin??je.signetAppOrigin,...t.redirectCallback!==void 0?{redirectCallback:t.redirectCallback}:{}})}let e=await Xc(t);return e?(t.persist!==!1&&Jt(e),e):null}function Od(){let t=new Uint8Array(32);return crypto.getRandomValues(t),Array.from(t,e=>e.toString(16).padStart(2,"0")).join("")}async function rl(t){let e=oa();if(!e)return null;let n;try{n=JSON.parse(e.authEventJson)}catch{return Je(),null}if(e.method==="nip07"){if(!fn()){let i=new Ee(e.pubkey,n);return{pubkey:e.pubkey,method:"redirect",signer:i,authEvent:n}}try{let i=await dn();return i.pubkey!==e.pubkey?(Je(),null):{pubkey:e.pubkey,method:"nip07",signer:i,authEvent:n}}catch{return Je(),null}}if(e.method==="bunker"){if(t?.reconnectBunker===!1){let i=new Ee(e.pubkey,n);return{pubkey:e.pubkey,method:"redirect",signer:i,authEvent:n}}if(!e.bunkerUri||!e.bunkerClientSkHex)return console.warn("[signet-login] restore: stored bunker session has no reconnect creds (bunkerUri/clientSk) \u2014 it was an auth-only login. Clearing."),Je(),null;try{let i=await Pt({uri:e.bunkerUri,clientSecretKey:ht()});return i.pubkey!==e.pubkey?(console.warn("[signet-login] restore: reconnected bunker pubkey mismatch \u2014 clearing session",{connected:i.pubkey,expected:e.pubkey}),await i.close(),Je(),null):{pubkey:e.pubkey,method:"bunker",signer:i,authEvent:n}}catch(i){return console.warn("[signet-login] restore: bunker reconnect failed \u2014 keeping creds for the next retry (NOT clearing). The signer device should still recognise us on reconnect.",i),null}}let r=new Ee(e.pubkey,n),o={pubkey:e.pubkey,method:e.method,signer:r,authEvent:n};return e.displayName&&(o.displayName=e.displayName),o}var ol=Fc;async function il(t={}){let e=aa();if(e.kind==="session")return Jt(e.session),e;if(e.kind!=="no-callback")return e;let n=tl();if(n.kind!=="session")return n;if(n.bunkerUri){let r=n.session.pubkey,o=n.session.authEvent,i=n.session.displayName,s=ht(),a=Pt({uri:n.bunkerUri,clientSecretKey:s,timeoutMs:Ud}).then(l=>{if(l.pubkey.toLowerCase()!==r.toLowerCase())return console.warn("[signet-login] redirect upgrade: bunker pubkey mismatch \u2014 staying auth-only (cannot sign)",{connected:l.pubkey,expected:r}),l.close().catch(()=>{}),null;let d={pubkey:r,method:"bunker",signer:l,authEvent:o};return i&&(d.displayName=i),Jt(d),l}).catch(l=>(console.warn("[signet-login] redirect upgrade: createBunkerSigner failed \u2014 staying auth-only (no live signing). Reconnect/relay issue or signer device unreachable.",l),null));if(t.waitForBunker){let l=await a;if(l){let d={pubkey:r,method:"bunker",signer:l,authEvent:o};return i&&(d.displayName=i),Jt(d),{kind:"session",session:d}}}let c={pubkey:r,method:"bunker",signer:new nr(r,o,a,n.bunkerUri,s,!1),authEvent:o};return i&&(c.displayName=i),Jt(c),{kind:"session",session:c}}return console.warn("[signet-login] redirect login carried no bunkerUri \u2014 auth-only ephemeral (cannot sign). The signer device must enable its NIP-46 server to return a bunker:// URI."),Jt(n.session),n}async function sl(t){if(t)try{await t.signer.close()}catch{}Je()}function Jt(t){if(t.method==="nsec")return;let e={pubkey:t.pubkey,method:t.method,authEventJson:JSON.stringify(t.authEvent)};if(t.method==="bunker"){let n=t.signer;n.bunkerUri&&n.clientSecretKey instanceof Uint8Array&&(e.bunkerUri=n.bunkerUri,e.bunkerClientSkHex=Io(n.clientSecretKey))}t.expiresAt!==void 0&&(e.expiresAt=t.expiresAt),t.displayName!==void 0&&(e.displayName=t.displayName),ra(e)}if(typeof window<"u"){let e=window.Signet??{};Object.assign(e,{login:nl,restoreSession:rl,logout:sl,handleCallback:ol,handleRedirectCallback:il}),window.Signet=e}return pl(Pd);})();
 /*! Bundled license information:
 
 @noble/hashes/utils.js:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "signet-login",
-  "version": "0.9.13",
+  "version": "0.9.15",
   "description": "Sign in with Signet — drop-in login SDK for Nostr-aware websites. NIP-07, bunker URI, and Signet redirect/QR in one unified API.",
   "type": "module",
   "main": "./dist/signet-login.js",