@skeet-framework/solana-utils/dist/index.js

Skeet Framework Plugin - Solana Utils

var PQ=Object.create;var bf=Object.defineProperty;var TQ=Object.getOwnPropertyDescriptor;var zQ=Object.getOwnPropertyNames;var IQ=Object.getPrototypeOf,RQ=Object.prototype.hasOwnProperty;var n=(t,e)=>bf(t,"name",{value:e,configurable:!0}),_e=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,r)=>(typeof require<"u"?require:e)[r]}):t)(function(t){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});var Vr=(t,e)=>()=>(t&&(e=t(t=0)),e);var _=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports),CI=(t,e)=>{for(var r in e)bf(t,r,{get:e[r],enumerable:!0})},BI=(t,e,r,i)=>{if(e&&typeof e=="object"||typeof e=="function")for(let a of zQ(e))!RQ.call(t,a)&&a!==r&&bf(t,a,{get:()=>e[a],enumerable:!(i=TQ(e,a))||i.enumerable});return t};var yt=(t,e,r)=>(r=t!=null?PQ(IQ(t)):{},BI(e||!t||!t.__esModule?bf(r,"default",{value:t,enumerable:!0}):r,t)),OI=t=>BI(bf({},"__esModule",{value:!0}),t);var ey=_(Vi=>{"use strict";Object.defineProperty(Vi,"__esModule",{value:!0});Vi.output=Vi.exists=Vi.hash=Vi.bytes=Vi.bool=Vi.number=void 0;function X3(t){if(!Number.isSafeInteger(t)||t<0)throw new Error(`Wrong positive integer: ${t}`)}n(X3,"number");Vi.number=X3;function NI(t){if(typeof t!="boolean")throw new Error(`Expected boolean, not ${t}`)}n(NI,"bool");Vi.bool=NI;function MQ(t){return t instanceof Uint8Array||t!=null&&typeof t=="object"&&t.constructor.name==="Uint8Array"}n(MQ,"isBytes");function G7(t,...e){if(!MQ(t))throw new Error("Expected Uint8Array");if(e.length>0&&!e.includes(t.length))throw new Error(`Expected Uint8Array of length ${e}, not of length=${t.length}`)}n(G7,"bytes");Vi.bytes=G7;function qI(t){if(typeof t!="function"||typeof t.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");X3(t.outputLen),X3(t.blockLen)}n(qI,"hash");Vi.hash=qI;function WI(t,e=!0){if(t.destroyed)throw new Error("Hash instance has been destroyed");if(e&&t.finished)throw new Error("Hash#digest() has already been called")}n(WI,"exists");Vi.exists=WI;function VI(t,e){G7(t);let r=e.outputLen;if(t.length<r)throw new Error(`digestInto() expects output buffer of length at least ${r}`)}n(VI,"output");Vi.output=VI;var DQ={number:X3,bool:NI,bytes:G7,hash:qI,exists:WI,output:VI};Vi.default=DQ});var FI=_(ry=>{"use strict";Object.defineProperty(ry,"__esModule",{value:!0});ry.crypto=void 0;var ty=_e("node:crypto");ry.crypto=ty&&typeof ty=="object"&&"webcrypto"in ty?ty.webcrypto:void 0});var Ns=_(He=>{"use strict";Object.defineProperty(He,"__esModule",{value:!0});He.randomBytes=He.wrapXOFConstructorWithOpts=He.wrapConstructorWithOpts=He.wrapConstructor=He.checkOpts=He.Hash=He.concatBytes=He.toBytes=He.utf8ToBytes=He.asyncLoop=He.nextTick=He.hexToBytes=He.bytesToHex=He.isLE=He.rotr=He.createView=He.u32=He.u8=void 0;var Z7=FI(),CQ=n(t=>new Uint8Array(t.buffer,t.byteOffset,t.byteLength),"u8");He.u8=CQ;var BQ=n(t=>new Uint32Array(t.buffer,t.byteOffset,Math.floor(t.byteLength/4)),"u32");He.u32=BQ;function Y7(t){return t instanceof Uint8Array||t!=null&&typeof t=="object"&&t.constructor.name==="Uint8Array"}n(Y7,"isBytes");var OQ=n(t=>new DataView(t.buffer,t.byteOffset,t.byteLength),"createView");He.createView=OQ;var NQ=n((t,e)=>t<<32-e|t>>>e,"rotr");He.rotr=NQ;He.isLE=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!He.isLE)throw new Error("Non little-endian hardware is not supported");var qQ=Array.from({length:256},(t,e)=>e.toString(16).padStart(2,"0"));function WQ(t){if(!Y7(t))throw new Error("Uint8Array expected");let e="";for(let r=0;r<t.length;r++)e+=qQ[t[r]];return e}n(WQ,"bytesToHex");He.bytesToHex=WQ;var Os={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function LI(t){if(t>=Os._0&&t<=Os._9)return t-Os._0;if(t>=Os._A&&t<=Os._F)return t-(Os._A-10);if(t>=Os._a&&t<=Os._f)return t-(Os._a-10)}n(LI,"asciiToBase16");function VQ(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);let e=t.length,r=e/2;if(e%2)throw new Error("padded hex string expected, got unpadded hex of length "+e);let i=new Uint8Array(r);for(let a=0,s=0;a<r;a++,s+=2){let o=LI(t.charCodeAt(s)),l=LI(t.charCodeAt(s+1));if(o===void 0||l===void 0){let u=t[s]+t[s+1];throw new Error('hex string expected, got non-hex character "'+u+'" at index '+s)}i[a]=o*16+l}return i}n(VQ,"hexToBytes");He.hexToBytes=VQ;var FQ=n(async()=>{},"nextTick");He.nextTick=FQ;async function LQ(t,e,r){let i=Date.now();for(let a=0;a<t;a++){r(a);let s=Date.now()-i;s>=0&&s<e||(await(0,He.nextTick)(),i+=s)}}n(LQ,"asyncLoop");He.asyncLoop=LQ;function KI(t){if(typeof t!="string")throw new Error(`utf8ToBytes expected string, got ${typeof t}`);return new Uint8Array(new TextEncoder().encode(t))}n(KI,"utf8ToBytes");He.utf8ToBytes=KI;function iy(t){if(typeof t=="string"&&(t=KI(t)),!Y7(t))throw new Error(`expected Uint8Array, got ${typeof t}`);return t}n(iy,"toBytes");He.toBytes=iy;function KQ(...t){let e=0;for(let i=0;i<t.length;i++){let a=t[i];if(!Y7(a))throw new Error("Uint8Array expected");e+=a.length}let r=new Uint8Array(e);for(let i=0,a=0;i<t.length;i++){let s=t[i];r.set(s,a),a+=s.length}return r}n(KQ,"concatBytes");He.concatBytes=KQ;var J7=class{static{n(this,"Hash")}clone(){return this._cloneInto()}};He.Hash=J7;var UQ={}.toString;function jQ(t,e){if(e!==void 0&&UQ.call(e)!=="[object Object]")throw new Error("Options should be object or undefined");return Object.assign(t,e)}n(jQ,"checkOpts");He.checkOpts=jQ;function HQ(t){let e=n(i=>t().update(iy(i)).digest(),"hashC"),r=t();return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=()=>t(),e}n(HQ,"wrapConstructor");He.wrapConstructor=HQ;function $Q(t){let e=n((i,a)=>t(a).update(iy(i)).digest(),"hashC"),r=t({});return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=i=>t(i),e}n($Q,"wrapConstructorWithOpts");He.wrapConstructorWithOpts=$Q;function GQ(t){let e=n((i,a)=>t(a).update(iy(i)).digest(),"hashC"),r=t({});return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=i=>t(i),e}n(GQ,"wrapXOFConstructorWithOpts");He.wrapXOFConstructorWithOpts=GQ;function ZQ(t=32){if(Z7.crypto&&typeof Z7.crypto.getRandomValues=="function")return Z7.crypto.getRandomValues(new Uint8Array(t));throw new Error("crypto.getRandomValues must be defined")}n(ZQ,"randomBytes");He.randomBytes=ZQ});var eS=_(ay=>{"use strict";Object.defineProperty(ay,"__esModule",{value:!0});ay.SHA2=void 0;var Q7=ey(),vf=Ns();function JQ(t,e,r,i){if(typeof t.setBigUint64=="function")return t.setBigUint64(e,r,i);let a=BigInt(32),s=BigInt(4294967295),o=Number(r>>a&s),l=Number(r&s),u=i?4:0,c=i?0:4;t.setUint32(e+u,o,i),t.setUint32(e+c,l,i)}n(JQ,"setBigUint64");var X7=class extends vf.Hash{static{n(this,"SHA2")}constructor(e,r,i,a){super(),this.blockLen=e,this.outputLen=r,this.padOffset=i,this.isLE=a,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=(0,vf.createView)(this.buffer)}update(e){(0,Q7.exists)(this);let{view:r,buffer:i,blockLen:a}=this;e=(0,vf.toBytes)(e);let s=e.length;for(let o=0;o<s;){let l=Math.min(a-this.pos,s-o);if(l===a){let u=(0,vf.createView)(e);for(;a<=s-o;o+=a)this.process(u,o);continue}i.set(e.subarray(o,o+l),this.pos),this.pos+=l,o+=l,this.pos===a&&(this.process(r,0),this.pos=0)}return this.length+=e.length,this.roundClean(),this}digestInto(e){(0,Q7.exists)(this),(0,Q7.output)(e,this),this.finished=!0;let{buffer:r,view:i,blockLen:a,isLE:s}=this,{pos:o}=this;r[o++]=128,this.buffer.subarray(o).fill(0),this.padOffset>a-o&&(this.process(i,0),o=0);for(let f=o;f<a;f++)r[f]=0;JQ(i,a-8,BigInt(this.length*8),s),this.process(i,0);let l=(0,vf.createView)(e),u=this.outputLen;if(u%4)throw new Error("_sha2: outputLen should be aligned to 32bit");let c=u/4,p=this.get();if(c>p.length)throw new Error("_sha2: outputLen bigger than state");for(let f=0;f<c;f++)l.setUint32(4*f,p[f],s)}digest(){let{buffer:e,outputLen:r}=this;this.digestInto(e);let i=e.slice(0,r);return this.destroy(),i}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());let{blockLen:r,buffer:i,length:a,finished:s,destroyed:o,pos:l}=this;return e.length=a,e.pos=l,e.finished=s,e.destroyed=o,a%r&&e.buffer.set(i),e}};ay.SHA2=X7});var iS=_(De=>{"use strict";Object.defineProperty(De,"__esModule",{value:!0});De.add5L=De.add5H=De.add4H=De.add4L=De.add3H=De.add3L=De.add=De.rotlBL=De.rotlBH=De.rotlSL=De.rotlSH=De.rotr32L=De.rotr32H=De.rotrBL=De.rotrBH=De.rotrSL=De.rotrSH=De.shrSL=De.shrSH=De.toBig=De.split=De.fromBig=void 0;var ny=BigInt(2**32-1),tS=BigInt(32);function rS(t,e=!1){return e?{h:Number(t&ny),l:Number(t>>tS&ny)}:{h:Number(t>>tS&ny)|0,l:Number(t&ny)|0}}n(rS,"fromBig");De.fromBig=rS;function UI(t,e=!1){let r=new Uint32Array(t.length),i=new Uint32Array(t.length);for(let a=0;a<t.length;a++){let{h:s,l:o}=rS(t[a],e);[r[a],i[a]]=[s,o]}return[r,i]}n(UI,"split");De.split=UI;var jI=n((t,e)=>BigInt(t>>>0)<<tS|BigInt(e>>>0),"toBig");De.toBig=jI;var HI=n((t,e,r)=>t>>>r,"shrSH");De.shrSH=HI;var $I=n((t,e,r)=>t<<32-r|e>>>r,"shrSL");De.shrSL=$I;var GI=n((t,e,r)=>t>>>r|e<<32-r,"rotrSH");De.rotrSH=GI;var ZI=n((t,e,r)=>t<<32-r|e>>>r,"rotrSL");De.rotrSL=ZI;var JI=n((t,e,r)=>t<<64-r|e>>>r-32,"rotrBH");De.rotrBH=JI;var YI=n((t,e,r)=>t>>>r-32|e<<64-r,"rotrBL");De.rotrBL=YI;var QI=n((t,e)=>e,"rotr32H");De.rotr32H=QI;var XI=n((t,e)=>t,"rotr32L");De.rotr32L=XI;var eR=n((t,e,r)=>t<<r|e>>>32-r,"rotlSH");De.rotlSH=eR;var tR=n((t,e,r)=>e<<r|t>>>32-r,"rotlSL");De.rotlSL=tR;var rR=n((t,e,r)=>e<<r-32|t>>>64-r,"rotlBH");De.rotlBH=rR;var iR=n((t,e,r)=>t<<r-32|e>>>64-r,"rotlBL");De.rotlBL=iR;function aR(t,e,r,i){let a=(e>>>0)+(i>>>0);return{h:t+r+(a/2**32|0)|0,l:a|0}}n(aR,"add");De.add=aR;var nR=n((t,e,r)=>(t>>>0)+(e>>>0)+(r>>>0),"add3L");De.add3L=nR;var sR=n((t,e,r,i)=>e+r+i+(t/2**32|0)|0,"add3H");De.add3H=sR;var oR=n((t,e,r,i)=>(t>>>0)+(e>>>0)+(r>>>0)+(i>>>0),"add4L");De.add4L=oR;var lR=n((t,e,r,i,a)=>e+r+i+a+(t/2**32|0)|0,"add4H");De.add4H=lR;var uR=n((t,e,r,i,a)=>(t>>>0)+(e>>>0)+(r>>>0)+(i>>>0)+(a>>>0),"add5L");De.add5L=uR;var dR=n((t,e,r,i,a,s)=>e+r+i+a+s+(t/2**32|0)|0,"add5H");De.add5H=dR;var YQ={fromBig:rS,split:UI,toBig:jI,shrSH:HI,shrSL:$I,rotrSH:GI,rotrSL:ZI,rotrBH:JI,rotrBL:YI,rotr32H:QI,rotr32L:XI,rotlSH:eR,rotlSL:tR,rotlBH:rR,rotlBL:iR,add:aR,add3L:nR,add3H:sR,add4L:oR,add4H:lR,add5H:dR,add5L:uR};De.default=YQ});var cR=_(Ca=>{"use strict";Object.defineProperty(Ca,"__esModule",{value:!0});Ca.sha384=Ca.sha512_256=Ca.sha512_224=Ca.sha512=Ca.SHA512=void 0;var QQ=eS(),$e=iS(),sy=Ns(),[XQ,eX]=$e.default.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(t=>BigInt(t))),Go=new Uint32Array(80),Zo=new Uint32Array(80),Vu=class extends QQ.SHA2{static{n(this,"SHA512")}constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:e,Al:r,Bh:i,Bl:a,Ch:s,Cl:o,Dh:l,Dl:u,Eh:c,El:p,Fh:f,Fl:P,Gh:I,Gl:T,Hh:z,Hl:R}=this;return[e,r,i,a,s,o,l,u,c,p,f,P,I,T,z,R]}set(e,r,i,a,s,o,l,u,c,p,f,P,I,T,z,R){this.Ah=e|0,this.Al=r|0,this.Bh=i|0,this.Bl=a|0,this.Ch=s|0,this.Cl=o|0,this.Dh=l|0,this.Dl=u|0,this.Eh=c|0,this.El=p|0,this.Fh=f|0,this.Fl=P|0,this.Gh=I|0,this.Gl=T|0,this.Hh=z|0,this.Hl=R|0}process(e,r){for(let W=0;W<16;W++,r+=4)Go[W]=e.getUint32(r),Zo[W]=e.getUint32(r+=4);for(let W=16;W<80;W++){let q=Go[W-15]|0,V=Zo[W-15]|0,L=$e.default.rotrSH(q,V,1)^$e.default.rotrSH(q,V,8)^$e.default.shrSH(q,V,7),Z=$e.default.rotrSL(q,V,1)^$e.default.rotrSL(q,V,8)^$e.default.shrSL(q,V,7),te=Go[W-2]|0,me=Zo[W-2]|0,ye=$e.default.rotrSH(te,me,19)^$e.default.rotrBH(te,me,61)^$e.default.shrSH(te,me,6),ne=$e.default.rotrSL(te,me,19)^$e.default.rotrBL(te,me,61)^$e.default.shrSL(te,me,6),ve=$e.default.add4L(Z,ne,Zo[W-7],Zo[W-16]),C=$e.default.add4H(ve,L,ye,Go[W-7],Go[W-16]);Go[W]=C|0,Zo[W]=ve|0}let{Ah:i,Al:a,Bh:s,Bl:o,Ch:l,Cl:u,Dh:c,Dl:p,Eh:f,El:P,Fh:I,Fl:T,Gh:z,Gl:R,Hh:O,Hl:F}=this;for(let W=0;W<80;W++){let q=$e.default.rotrSH(f,P,14)^$e.default.rotrSH(f,P,18)^$e.default.rotrBH(f,P,41),V=$e.default.rotrSL(f,P,14)^$e.default.rotrSL(f,P,18)^$e.default.rotrBL(f,P,41),L=f&I^~f&z,Z=P&T^~P&R,te=$e.default.add5L(F,V,Z,eX[W],Zo[W]),me=$e.default.add5H(te,O,q,L,XQ[W],Go[W]),ye=te|0,ne=$e.default.rotrSH(i,a,28)^$e.default.rotrBH(i,a,34)^$e.default.rotrBH(i,a,39),ve=$e.default.rotrSL(i,a,28)^$e.default.rotrBL(i,a,34)^$e.default.rotrBL(i,a,39),C=i&s^i&l^s&l,h=a&o^a&u^o&u;O=z|0,F=R|0,z=I|0,R=T|0,I=f|0,T=P|0,{h:f,l:P}=$e.default.add(c|0,p|0,me|0,ye|0),c=l|0,p=u|0,l=s|0,u=o|0,s=i|0,o=a|0;let b=$e.default.add3L(ye,ve,h);i=$e.default.add3H(b,me,ne,C),a=b|0}({h:i,l:a}=$e.default.add(this.Ah|0,this.Al|0,i|0,a|0)),{h:s,l:o}=$e.default.add(this.Bh|0,this.Bl|0,s|0,o|0),{h:l,l:u}=$e.default.add(this.Ch|0,this.Cl|0,l|0,u|0),{h:c,l:p}=$e.default.add(this.Dh|0,this.Dl|0,c|0,p|0),{h:f,l:P}=$e.default.add(this.Eh|0,this.El|0,f|0,P|0),{h:I,l:T}=$e.default.add(this.Fh|0,this.Fl|0,I|0,T|0),{h:z,l:R}=$e.default.add(this.Gh|0,this.Gl|0,z|0,R|0),{h:O,l:F}=$e.default.add(this.Hh|0,this.Hl|0,O|0,F|0),this.set(i,a,s,o,l,u,c,p,f,P,I,T,z,R,O,F)}roundClean(){Go.fill(0),Zo.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}};Ca.SHA512=Vu;var aS=class extends Vu{static{n(this,"SHA512_224")}constructor(){super(),this.Ah=-1942145080,this.Al=424955298,this.Bh=1944164710,this.Bl=-1982016298,this.Ch=502970286,this.Cl=855612546,this.Dh=1738396948,this.Dl=1479516111,this.Eh=258812777,this.El=2077511080,this.Fh=2011393907,this.Fl=79989058,this.Gh=1067287976,this.Gl=1780299464,this.Hh=286451373,this.Hl=-1848208735,this.outputLen=28}},nS=class extends Vu{static{n(this,"SHA512_256")}constructor(){super(),this.Ah=573645204,this.Al=-64227540,this.Bh=-1621794909,this.Bl=-934517566,this.Ch=596883563,this.Cl=1867755857,this.Dh=-1774684391,this.Dl=1497426621,this.Eh=-1775747358,this.El=-1467023389,this.Fh=-1101128155,this.Fl=1401305490,this.Gh=721525244,this.Gl=746961066,this.Hh=246885852,this.Hl=-2117784414,this.outputLen=32}},sS=class extends Vu{static{n(this,"SHA384")}constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}};Ca.sha512=(0,sy.wrapConstructor)(()=>new Vu);Ca.sha512_224=(0,sy.wrapConstructor)(()=>new aS);Ca.sha512_256=(0,sy.wrapConstructor)(()=>new nS);Ca.sha384=(0,sy.wrapConstructor)(()=>new sS)});var yn=_(Fe=>{"use strict";Object.defineProperty(Fe,"__esModule",{value:!0});Fe.validateObject=Fe.createHmacDrbg=Fe.bitMask=Fe.bitSet=Fe.bitGet=Fe.bitLen=Fe.utf8ToBytes=Fe.equalBytes=Fe.concatBytes=Fe.ensureBytes=Fe.numberToVarBytesBE=Fe.numberToBytesLE=Fe.numberToBytesBE=Fe.bytesToNumberLE=Fe.bytesToNumberBE=Fe.hexToBytes=Fe.hexToNumber=Fe.numberToHexUnpadded=Fe.bytesToHex=Fe.isBytes=void 0;var fR=BigInt(0),oy=BigInt(1),tX=BigInt(2);function R1(t){return t instanceof Uint8Array||t!=null&&typeof t=="object"&&t.constructor.name==="Uint8Array"}n(R1,"isBytes");Fe.isBytes=R1;var rX=Array.from({length:256},(t,e)=>e.toString(16).padStart(2,"0"));function lS(t){if(!R1(t))throw new Error("Uint8Array expected");let e="";for(let r=0;r<t.length;r++)e+=rX[t[r]];return e}n(lS,"bytesToHex");Fe.bytesToHex=lS;function hR(t){let e=t.toString(16);return e.length&1?`0${e}`:e}n(hR,"numberToHexUnpadded");Fe.numberToHexUnpadded=hR;function uS(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);return BigInt(t===""?"0":`0x${t}`)}n(uS,"hexToNumber");Fe.hexToNumber=uS;var qs={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function pR(t){if(t>=qs._0&&t<=qs._9)return t-qs._0;if(t>=qs._A&&t<=qs._F)return t-(qs._A-10);if(t>=qs._a&&t<=qs._f)return t-(qs._a-10)}n(pR,"asciiToBase16");function ly(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);let e=t.length,r=e/2;if(e%2)throw new Error("padded hex string expected, got unpadded hex of length "+e);let i=new Uint8Array(r);for(let a=0,s=0;a<r;a++,s+=2){let o=pR(t.charCodeAt(s)),l=pR(t.charCodeAt(s+1));if(o===void 0||l===void 0){let u=t[s]+t[s+1];throw new Error('hex string expected, got non-hex character "'+u+'" at index '+s)}i[a]=o*16+l}return i}n(ly,"hexToBytes");Fe.hexToBytes=ly;function iX(t){return uS(lS(t))}n(iX,"bytesToNumberBE");Fe.bytesToNumberBE=iX;function aX(t){if(!R1(t))throw new Error("Uint8Array expected");return uS(lS(Uint8Array.from(t).reverse()))}n(aX,"bytesToNumberLE");Fe.bytesToNumberLE=aX;function gR(t,e){return ly(t.toString(16).padStart(e*2,"0"))}n(gR,"numberToBytesBE");Fe.numberToBytesBE=gR;function nX(t,e){return gR(t,e).reverse()}n(nX,"numberToBytesLE");Fe.numberToBytesLE=nX;function sX(t){return ly(hR(t))}n(sX,"numberToVarBytesBE");Fe.numberToVarBytesBE=sX;function oX(t,e,r){let i;if(typeof e=="string")try{i=ly(e)}catch(s){throw new Error(`${t} must be valid hex string, got "${e}". Cause: ${s}`)}else if(R1(e))i=Uint8Array.from(e);else throw new Error(`${t} must be hex string or Uint8Array`);let a=i.length;if(typeof r=="number"&&a!==r)throw new Error(`${t} expected ${r} bytes, got ${a}`);return i}n(oX,"ensureBytes");Fe.ensureBytes=oX;function yR(...t){let e=0;for(let a=0;a<t.length;a++){let s=t[a];if(!R1(s))throw new Error("Uint8Array expected");e+=s.length}let r=new Uint8Array(e),i=0;for(let a=0;a<t.length;a++){let s=t[a];r.set(s,i),i+=s.length}return r}n(yR,"concatBytes");Fe.concatBytes=yR;function lX(t,e){if(t.length!==e.length)return!1;let r=0;for(let i=0;i<t.length;i++)r|=t[i]^e[i];return r===0}n(lX,"equalBytes");Fe.equalBytes=lX;function uX(t){if(typeof t!="string")throw new Error(`utf8ToBytes expected string, got ${typeof t}`);return new Uint8Array(new TextEncoder().encode(t))}n(uX,"utf8ToBytes");Fe.utf8ToBytes=uX;function dX(t){let e;for(e=0;t>fR;t>>=oy,e+=1);return e}n(dX,"bitLen");Fe.bitLen=dX;function cX(t,e){return t>>BigInt(e)&oy}n(cX,"bitGet");Fe.bitGet=cX;var pX=n((t,e,r)=>t|(r?oy:fR)<<BigInt(e),"bitSet");Fe.bitSet=pX;var mX=n(t=>(tX<<BigInt(t-1))-oy,"bitMask");Fe.bitMask=mX;var oS=n(t=>new Uint8Array(t),"u8n"),mR=n(t=>Uint8Array.from(t),"u8fr");function fX(t,e,r){if(typeof t!="number"||t<2)throw new Error("hashLen must be a number");if(typeof e!="number"||e<2)throw new Error("qByteLen must be a number");if(typeof r!="function")throw new Error("hmacFn must be a function");let i=oS(t),a=oS(t),s=0,o=n(()=>{i.fill(1),a.fill(0),s=0},"reset"),l=n((...f)=>r(a,i,...f),"h"),u=n((f=oS())=>{a=l(mR([0]),f),i=l(),f.length!==0&&(a=l(mR([1]),f),i=l())},"reseed"),c=n(()=>{if(s++>=1e3)throw new Error("drbg: tried 1000 values");let f=0,P=[];for(;f<e;){i=l();let I=i.slice();P.push(I),f+=i.length}return yR(...P)},"gen");return n((f,P)=>{o(),u(f);let I;for(;!(I=P(c()));)u();return o(),I},"genUntil")}n(fX,"createHmacDrbg");Fe.createHmacDrbg=fX;var hX={bigint:t=>typeof t=="bigint",function:t=>typeof t=="function",boolean:t=>typeof t=="boolean",string:t=>typeof t=="string",stringOrUint8Array:t=>typeof t=="string"||R1(t),isSafeInteger:t=>Number.isSafeInteger(t),array:t=>Array.isArray(t),field:(t,e)=>e.Fp.isValid(t),hash:t=>typeof t=="function"&&Number.isSafeInteger(t.outputLen)};function gX(t,e,r={}){let i=n((a,s,o)=>{let l=hX[s];if(typeof l!="function")throw new Error(`Invalid validator "${s}", expected function`);let u=t[a];if(!(o&&u===void 0)&&!l(u,t))throw new Error(`Invalid param ${String(a)}=${u} (${typeof u}), expected ${s}`)},"checkField");for(let[a,s]of Object.entries(e))i(a,s,!1);for(let[a,s]of Object.entries(r))i(a,s,!0);return t}n(gX,"validateObject");Fe.validateObject=gX});var Yo=_(Le=>{"use strict";Object.defineProperty(Le,"__esModule",{value:!0});Le.mapHashToField=Le.getMinHashLength=Le.getFieldBytesLength=Le.hashToPrivateScalar=Le.FpSqrtEven=Le.FpSqrtOdd=Le.Field=Le.nLength=Le.FpIsSquare=Le.FpDiv=Le.FpInvertBatch=Le.FpPow=Le.validateField=Le.isNegativeLE=Le.FpSqrt=Le.tonelliShanks=Le.invert=Le.pow2=Le.pow=Le.mod=void 0;var ha=yn(),jr=BigInt(0),Nt=BigInt(1),Jo=BigInt(2),yX=BigInt(3),dS=BigInt(4),bR=BigInt(5),vR=BigInt(8),bX=BigInt(9),vX=BigInt(16);function fa(t,e){let r=t%e;return r>=jr?r:e+r}n(fa,"mod");Le.mod=fa;function SR(t,e,r){if(r<=jr||e<jr)throw new Error("Expected power/modulo > 0");if(r===Nt)return jr;let i=Nt;for(;e>jr;)e&Nt&&(i=i*t%r),t=t*t%r,e>>=Nt;return i}n(SR,"pow");Le.pow=SR;function SX(t,e,r){let i=t;for(;e-- >jr;)i*=i,i%=r;return i}n(SX,"pow2");Le.pow2=SX;function uy(t,e){if(t===jr||e<=jr)throw new Error(`invert: expected positive integers, got n=${t} mod=${e}`);let r=fa(t,e),i=e,a=jr,s=Nt,o=Nt,l=jr;for(;r!==jr;){let c=i/r,p=i%r,f=a-o*c,P=s-l*c;i=r,r=p,a=o,s=l,o=f,l=P}if(i!==Nt)throw new Error("invert: does not exist");return fa(a,e)}n(uy,"invert");Le.invert=uy;function wR(t){let e=(t-Nt)/Jo,r,i,a;for(r=t-Nt,i=0;r%Jo===jr;r/=Jo,i++);for(a=Jo;a<t&&SR(a,e,t)!==t-Nt;a++);if(i===1){let o=(t+Nt)/dS;return n(function(u,c){let p=u.pow(c,o);if(!u.eql(u.sqr(p),c))throw new Error("Cannot find square root");return p},"tonelliFast")}let s=(r+Nt)/Jo;return n(function(l,u){if(l.pow(u,e)===l.neg(l.ONE))throw new Error("Cannot find square root");let c=i,p=l.pow(l.mul(l.ONE,a),r),f=l.pow(u,s),P=l.pow(u,r);for(;!l.eql(P,l.ONE);){if(l.eql(P,l.ZERO))return l.ZERO;let I=1;for(let z=l.sqr(P);I<c&&!l.eql(z,l.ONE);I++)z=l.sqr(z);let T=l.pow(p,Nt<<BigInt(c-I-1));p=l.sqr(T),f=l.mul(f,T),P=l.mul(P,p),c=I}return f},"tonelliSlow")}n(wR,"tonelliShanks");Le.tonelliShanks=wR;function _R(t){if(t%dS===yX){let e=(t+Nt)/dS;return n(function(i,a){let s=i.pow(a,e);if(!i.eql(i.sqr(s),a))throw new Error("Cannot find square root");return s},"sqrt3mod4")}if(t%vR===bR){let e=(t-bR)/vR;return n(function(i,a){let s=i.mul(a,Jo),o=i.pow(s,e),l=i.mul(a,o),u=i.mul(i.mul(l,Jo),o),c=i.mul(l,i.sub(u,i.ONE));if(!i.eql(i.sqr(c),a))throw new Error("Cannot find square root");return c},"sqrt5mod8")}return t%vX,wR(t)}n(_R,"FpSqrt");Le.FpSqrt=_R;var wX=n((t,e)=>(fa(t,e)&Nt)===Nt,"isNegativeLE");Le.isNegativeLE=wX;var _X=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function xX(t){let e={ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"},r=_X.reduce((i,a)=>(i[a]="function",i),e);return(0,ha.validateObject)(t,r)}n(xX,"validateField");Le.validateField=xX;function xR(t,e,r){if(r<jr)throw new Error("Expected power > 0");if(r===jr)return t.ONE;if(r===Nt)return e;let i=t.ONE,a=e;for(;r>jr;)r&Nt&&(i=t.mul(i,a)),a=t.sqr(a),r>>=Nt;return i}n(xR,"FpPow");Le.FpPow=xR;function AR(t,e){let r=new Array(e.length),i=e.reduce((s,o,l)=>t.is0(o)?s:(r[l]=s,t.mul(s,o)),t.ONE),a=t.inv(i);return e.reduceRight((s,o,l)=>t.is0(o)?s:(r[l]=t.mul(s,r[l]),t.mul(s,o)),a),r}n(AR,"FpInvertBatch");Le.FpInvertBatch=AR;function AX(t,e,r){return t.mul(e,typeof r=="bigint"?uy(r,t.ORDER):t.inv(r))}n(AX,"FpDiv");Le.FpDiv=AX;function kX(t){let e=(t.ORDER-Nt)/Jo;return r=>{let i=t.pow(r,e);return t.eql(i,t.ZERO)||t.eql(i,t.ONE)}}n(kX,"FpIsSquare");Le.FpIsSquare=kX;function cS(t,e){let r=e!==void 0?e:t.toString(2).length,i=Math.ceil(r/8);return{nBitLength:r,nByteLength:i}}n(cS,"nLength");Le.nLength=cS;function EX(t,e,r=!1,i={}){if(t<=jr)throw new Error(`Expected Field ORDER > 0, got ${t}`);let{nBitLength:a,nByteLength:s}=cS(t,e);if(s>2048)throw new Error("Field lengths over 2048 bytes are not supported");let o=_R(t),l=Object.freeze({ORDER:t,BITS:a,BYTES:s,MASK:(0,ha.bitMask)(a),ZERO:jr,ONE:Nt,create:u=>fa(u,t),isValid:u=>{if(typeof u!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof u}`);return jr<=u&&u<t},is0:u=>u===jr,isOdd:u=>(u&Nt)===Nt,neg:u=>fa(-u,t),eql:(u,c)=>u===c,sqr:u=>fa(u*u,t),add:(u,c)=>fa(u+c,t),sub:(u,c)=>fa(u-c,t),mul:(u,c)=>fa(u*c,t),pow:(u,c)=>xR(l,u,c),div:(u,c)=>fa(u*uy(c,t),t),sqrN:u=>u*u,addN:(u,c)=>u+c,subN:(u,c)=>u-c,mulN:(u,c)=>u*c,inv:u=>uy(u,t),sqrt:i.sqrt||(u=>o(l,u)),invertBatch:u=>AR(l,u),cmov:(u,c,p)=>p?c:u,toBytes:u=>r?(0,ha.numberToBytesLE)(u,s):(0,ha.numberToBytesBE)(u,s),fromBytes:u=>{if(u.length!==s)throw new Error(`Fp.fromBytes: expected ${s}, got ${u.length}`);return r?(0,ha.bytesToNumberLE)(u):(0,ha.bytesToNumberBE)(u)}});return Object.freeze(l)}n(EX,"Field");Le.Field=EX;function PX(t,e){if(!t.isOdd)throw new Error("Field doesn't have isOdd");let r=t.sqrt(e);return t.isOdd(r)?r:t.neg(r)}n(PX,"FpSqrtOdd");Le.FpSqrtOdd=PX;function TX(t,e){if(!t.isOdd)throw new Error("Field doesn't have isOdd");let r=t.sqrt(e);return t.isOdd(r)?t.neg(r):r}n(TX,"FpSqrtEven");Le.FpSqrtEven=TX;function zX(t,e,r=!1){t=(0,ha.ensureBytes)("privateHash",t);let i=t.length,a=cS(e).nByteLength+8;if(a<24||i<a||i>1024)throw new Error(`hashToPrivateScalar: expected ${a}-1024 bytes of input, got ${i}`);let s=r?(0,ha.bytesToNumberLE)(t):(0,ha.bytesToNumberBE)(t);return fa(s,e-Nt)+Nt}n(zX,"hashToPrivateScalar");Le.hashToPrivateScalar=zX;function pS(t){if(typeof t!="bigint")throw new Error("field order must be bigint");let e=t.toString(2).length;return Math.ceil(e/8)}n(pS,"getFieldBytesLength");Le.getFieldBytesLength=pS;function kR(t){let e=pS(t);return e+Math.ceil(e/2)}n(kR,"getMinHashLength");Le.getMinHashLength=kR;function IX(t,e,r=!1){let i=t.length,a=pS(e),s=kR(e);if(i<16||i<s||i>1024)throw new Error(`expected ${s}-1024 bytes of input, got ${i}`);let o=r?(0,ha.bytesToNumberBE)(t):(0,ha.bytesToNumberLE)(t),l=fa(o,e-Nt)+Nt;return r?(0,ha.numberToBytesLE)(l,a):(0,ha.numberToBytesBE)(l,a)}n(IX,"mapHashToField");Le.mapHashToField=IX});var fS=_(M1=>{"use strict";Object.defineProperty(M1,"__esModule",{value:!0});M1.validateBasic=M1.wNAF=void 0;var ER=Yo(),RX=yn(),MX=BigInt(0),mS=BigInt(1);function DX(t,e){let r=n((a,s)=>{let o=s.negate();return a?o:s},"constTimeNegate"),i=n(a=>{let s=Math.ceil(e/a)+1,o=2**(a-1);return{windows:s,windowSize:o}},"opts");return{constTimeNegate:r,unsafeLadder(a,s){let o=t.ZERO,l=a;for(;s>MX;)s&mS&&(o=o.add(l)),l=l.double(),s>>=mS;return o},precomputeWindow(a,s){let{windows:o,windowSize:l}=i(s),u=[],c=a,p=c;for(let f=0;f<o;f++){p=c,u.push(p);for(let P=1;P<l;P++)p=p.add(c),u.push(p);c=p.double()}return u},wNAF(a,s,o){let{windows:l,windowSize:u}=i(a),c=t.ZERO,p=t.BASE,f=BigInt(2**a-1),P=2**a,I=BigInt(a);for(let T=0;T<l;T++){let z=T*u,R=Number(o&f);o>>=I,R>u&&(R-=P,o+=mS);let O=z,F=z+Math.abs(R)-1,W=T%2!==0,q=R<0;R===0?p=p.add(r(W,s[O])):c=c.add(r(q,s[F]))}return{p:c,f:p}},wNAFCached(a,s,o,l){let u=a._WINDOW_SIZE||1,c=s.get(a);return c||(c=this.precomputeWindow(a,u),u!==1&&s.set(a,l(c))),this.wNAF(u,c,o)}}}n(DX,"wNAF");M1.wNAF=DX;function CX(t){return(0,ER.validateField)(t.Fp),(0,RX.validateObject)(t,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...(0,ER.nLength)(t.n,t.nBitLength),...t,p:t.Fp.ORDER})}n(CX,"validateBasic");M1.validateBasic=CX});var TR=_(cy=>{"use strict";Object.defineProperty(cy,"__esModule",{value:!0});cy.twistedEdwards=void 0;var BX=Yo(),Ws=yn(),Qo=yn(),PR=fS(),bn=BigInt(0),ga=BigInt(1),dy=BigInt(2),OX=BigInt(8),NX={zip215:!0};function qX(t){let e=(0,PR.validateBasic)(t);return Ws.validateObject(t,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...e})}n(qX,"validateOpts");function WX(t){let e=qX(t),{Fp:r,n:i,prehash:a,hash:s,randomBytes:o,nByteLength:l,h:u}=e,c=dy<<BigInt(l*8)-ga,p=r.create,f=e.uvRatio||((v,A)=>{try{return{isValid:!0,value:r.sqrt(v*r.inv(A))}}catch{return{isValid:!1,value:bn}}}),P=e.adjustScalarBytes||(v=>v),I=e.domain||((v,A,D)=>{if(A.length||D)throw new Error("Contexts/pre-hash are not supported");return v}),T=n(v=>typeof v=="bigint"&&bn<v,"inBig"),z=n((v,A)=>T(v)&&T(A)&&v<A,"inRange"),R=n(v=>v===bn||z(v,c),"in0MaskRange");function O(v,A){if(z(v,A))return v;throw new Error(`Expected valid scalar < ${A}, got ${typeof v} ${v}`)}n(O,"assertInRange");function F(v){return v===bn?v:O(v,i)}n(F,"assertGE0");let W=new Map;function q(v){if(!(v instanceof V))throw new Error("ExtendedPoint expected")}n(q,"isPoint");class V{static{n(this,"Point")}constructor(A,D,k,y){if(this.ex=A,this.ey=D,this.ez=k,this.et=y,!R(A))throw new Error("x required");if(!R(D))throw new Error("y required");if(!R(k))throw new Error("z required");if(!R(y))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(A){if(A instanceof V)throw new Error("extended point not allowed");let{x:D,y:k}=A||{};if(!R(D)||!R(k))throw new Error("invalid affine point");return new V(D,k,ga,p(D*k))}static normalizeZ(A){let D=r.invertBatch(A.map(k=>k.ez));return A.map((k,y)=>k.toAffine(D[y])).map(V.fromAffine)}_setWindowSize(A){this._WINDOW_SIZE=A,W.delete(this)}assertValidity(){let{a:A,d:D}=e;if(this.is0())throw new Error("bad point: ZERO");let{ex:k,ey:y,ez:M,et:J}=this,X=p(k*k),ee=p(y*y),ae=p(M*M),de=p(ae*ae),ge=p(X*A),Ke=p(ae*p(ge+ee)),Se=p(de+p(D*p(X*ee)));if(Ke!==Se)throw new Error("bad point: equation left != right (1)");let xe=p(k*y),nt=p(M*J);if(xe!==nt)throw new Error("bad point: equation left != right (2)")}equals(A){q(A);let{ex:D,ey:k,ez:y}=this,{ex:M,ey:J,ez:X}=A,ee=p(D*X),ae=p(M*y),de=p(k*X),ge=p(J*y);return ee===ae&&de===ge}is0(){return this.equals(V.ZERO)}negate(){return new V(p(-this.ex),this.ey,this.ez,p(-this.et))}double(){let{a:A}=e,{ex:D,ey:k,ez:y}=this,M=p(D*D),J=p(k*k),X=p(dy*p(y*y)),ee=p(A*M),ae=D+k,de=p(p(ae*ae)-M-J),ge=ee+J,Ke=ge-X,Se=ee-J,xe=p(de*Ke),nt=p(ge*Se),Ye=p(de*Se),je=p(Ke*ge);return new V(xe,nt,je,Ye)}add(A){q(A);let{a:D,d:k}=e,{ex:y,ey:M,ez:J,et:X}=this,{ex:ee,ey:ae,ez:de,et:ge}=A;if(D===BigInt(-1)){let Zi=p((M-y)*(ae+ee)),Et=p((M+y)*(ae-ee)),ct=p(Et-Zi);if(ct===bn)return this.double();let pa=p(J*dy*ge),Pt=p(X*dy*de),_t=Pt+pa,mn=Et+Zi,Tt=Pt-pa,Ct=p(_t*ct),Is=p(mn*Tt),Bt=p(_t*Tt),zt=p(ct*mn);return new V(Ct,Is,zt,Bt)}let Ke=p(y*ee),Se=p(M*ae),xe=p(X*k*ge),nt=p(J*de),Ye=p((y+M)*(ee+ae)-Ke-Se),je=nt-xe,Gi=nt+xe,ht=p(Se-D*Ke),wt=p(Ye*je),zs=p(Gi*ht),st=p(Ye*ht),ot=p(je*Gi);return new V(wt,zs,ot,st)}subtract(A){return this.add(A.negate())}wNAF(A){return te.wNAFCached(this,W,A,V.normalizeZ)}multiply(A){let{p:D,f:k}=this.wNAF(O(A,i));return V.normalizeZ([D,k])[0]}multiplyUnsafe(A){let D=F(A);return D===bn?Z:this.equals(Z)||D===ga?this:this.equals(L)?this.wNAF(D).p:te.unsafeLadder(this,D)}isSmallOrder(){return this.multiplyUnsafe(u).is0()}isTorsionFree(){return te.unsafeLadder(this,i).is0()}toAffine(A){let{ex:D,ey:k,ez:y}=this,M=this.is0();A==null&&(A=M?OX:r.inv(y));let J=p(D*A),X=p(k*A),ee=p(y*A);if(M)return{x:bn,y:ga};if(ee!==ga)throw new Error("invZ was invalid");return{x:J,y:X}}clearCofactor(){let{h:A}=e;return A===ga?this:this.multiplyUnsafe(A)}static fromHex(A,D=!1){let{d:k,a:y}=e,M=r.BYTES;A=(0,Qo.ensureBytes)("pointHex",A,M);let J=A.slice(),X=A[M-1];J[M-1]=X&-129;let ee=Ws.bytesToNumberLE(J);ee===bn||(D?O(ee,c):O(ee,r.ORDER));let ae=p(ee*ee),de=p(ae-ga),ge=p(k*ae-y),{isValid:Ke,value:Se}=f(de,ge);if(!Ke)throw new Error("Point.fromHex: invalid y coordinate");let xe=(Se&ga)===ga,nt=(X&128)!==0;if(!D&&Se===bn&&nt)throw new Error("Point.fromHex: x=0 and x_0=1");return nt!==xe&&(Se=p(-Se)),V.fromAffine({x:Se,y:ee})}static fromPrivateKey(A){return ne(A).point}toRawBytes(){let{x:A,y:D}=this.toAffine(),k=Ws.numberToBytesLE(D,r.BYTES);return k[k.length-1]|=A&ga?128:0,k}toHex(){return Ws.bytesToHex(this.toRawBytes())}}V.BASE=new V(e.Gx,e.Gy,ga,p(e.Gx*e.Gy)),V.ZERO=new V(bn,ga,ga,bn);let{BASE:L,ZERO:Z}=V,te=(0,PR.wNAF)(V,l*8);function me(v){return(0,BX.mod)(v,i)}n(me,"modN");function ye(v){return me(Ws.bytesToNumberLE(v))}n(ye,"modN_LE");function ne(v){let A=l;v=(0,Qo.ensureBytes)("private key",v,A);let D=(0,Qo.ensureBytes)("hashed private key",s(v),2*A),k=P(D.slice(0,A)),y=D.slice(A,2*A),M=ye(k),J=L.multiply(M),X=J.toRawBytes();return{head:k,prefix:y,scalar:M,point:J,pointBytes:X}}n(ne,"getExtendedPublicKey");function ve(v){return ne(v).pointBytes}n(ve,"getPublicKey");function C(v=new Uint8Array,...A){let D=Ws.concatBytes(...A);return ye(s(I(D,(0,Qo.ensureBytes)("context",v),!!a)))}n(C,"hashDomainToScalar");function h(v,A,D={}){v=(0,Qo.ensureBytes)("message",v),a&&(v=a(v));let{prefix:k,scalar:y,pointBytes:M}=ne(A),J=C(D.context,k,v),X=L.multiply(J).toRawBytes(),ee=C(D.context,X,M,v),ae=me(J+ee*y);F(ae);let de=Ws.concatBytes(X,Ws.numberToBytesLE(ae,r.BYTES));return(0,Qo.ensureBytes)("result",de,l*2)}n(h,"sign");let b=NX;function S(v,A,D,k=b){let{context:y,zip215:M}=k,J=r.BYTES;v=(0,Qo.ensureBytes)("signature",v,2*J),A=(0,Qo.ensureBytes)("message",A),a&&(A=a(A));let X=Ws.bytesToNumberLE(v.slice(J,2*J)),ee,ae,de;try{ee=V.fromHex(D,M),ae=V.fromHex(v.slice(0,J),M),de=L.multiplyUnsafe(X)}catch{return!1}if(!M&&ee.isSmallOrder())return!1;let ge=C(y,ae.toRawBytes(),ee.toRawBytes(),A);return ae.add(ee.multiplyUnsafe(ge)).subtract(de).clearCofactor().equals(V.ZERO)}return n(S,"verify"),L._setWindowSize(8),{CURVE:e,getPublicKey:ve,sign:h,verify:S,ExtendedPoint:V,utils:{getExtendedPublicKey:ne,randomPrivateKey:()=>o(r.BYTES),precompute(v=8,A=V.BASE){return A._setWindowSize(v),A.multiply(BigInt(3)),A}}}}n(WX,"twistedEdwards");cy.twistedEdwards=WX});var IR=_(py=>{"use strict";Object.defineProperty(py,"__esModule",{value:!0});py.montgomery=void 0;var zR=Yo(),D1=yn(),Sf=BigInt(0),hS=BigInt(1);function VX(t){return(0,D1.validateObject)(t,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...t})}n(VX,"validateOpts");function FX(t){let e=VX(t),{P:r}=e,i=n(W=>(0,zR.mod)(W,r),"modP"),a=e.montgomeryBits,s=Math.ceil(a/8),o=e.nByteLength,l=e.adjustScalarBytes||(W=>W),u=e.powPminus2||(W=>(0,zR.pow)(W,r-BigInt(2),r));function c(W,q,V){let L=i(W*(q-V));return q=i(q-L),V=i(V+L),[q,V]}n(c,"cswap");function p(W){if(typeof W=="bigint"&&Sf<=W&&W<r)return W;throw new Error("Expected valid scalar 0 < scalar < CURVE.P")}n(p,"assertFieldElement");let f=(e.a-BigInt(2))/BigInt(4);function P(W,q){let V=p(W),L=p(q),Z=V,te=hS,me=Sf,ye=V,ne=hS,ve=Sf,C;for(let b=BigInt(a-1);b>=Sf;b--){let S=L>>b&hS;ve^=S,C=c(ve,te,ye),te=C[0],ye=C[1],C=c(ve,me,ne),me=C[0],ne=C[1],ve=S;let x=te+me,v=i(x*x),A=te-me,D=i(A*A),k=v-D,y=ye+ne,M=ye-ne,J=i(M*x),X=i(y*A),ee=J+X,ae=J-X;ye=i(ee*ee),ne=i(Z*i(ae*ae)),te=i(v*D),me=i(k*(v+i(f*k)))}C=c(ve,te,ye),te=C[0],ye=C[1],C=c(ve,me,ne),me=C[0],ne=C[1];let h=u(me);return i(te*h)}n(P,"montgomeryLadder");function I(W){return(0,D1.numberToBytesLE)(i(W),s)}n(I,"encodeUCoordinate");function T(W){let q=(0,D1.ensureBytes)("u coordinate",W,s);return o===32&&(q[31]&=127),(0,D1.bytesToNumberLE)(q)}n(T,"decodeUCoordinate");function z(W){let q=(0,D1.ensureBytes)("scalar",W),V=q.length;if(V!==s&&V!==o)throw new Error(`Expected ${s} or ${o} bytes, got ${V}`);return(0,D1.bytesToNumberLE)(l(q))}n(z,"decodeScalar");function R(W,q){let V=T(q),L=z(W),Z=P(V,L);if(Z===Sf)throw new Error("Invalid private or public key received");return I(Z)}n(R,"scalarMult");let O=I(e.Gu);function F(W){return R(W,O)}return n(F,"scalarMultBase"),{scalarMult:R,scalarMultBase:F,getSharedSecret:(W,q)=>R(W,q),getPublicKey:W=>F(W),utils:{randomPrivateKey:()=>e.randomBytes(e.nByteLength)},GuBytes:O}}n(FX,"montgomery");py.montgomery=FX});var bS=_(Ba=>{"use strict";Object.defineProperty(Ba,"__esModule",{value:!0});Ba.createHasher=Ba.isogenyMap=Ba.hash_to_field=Ba.expand_message_xof=Ba.expand_message_xmd=void 0;var LX=Yo(),ya=yn();function KX(t){if((0,ya.isBytes)(t))return t;if(typeof t=="string")return(0,ya.utf8ToBytes)(t);throw new Error("DST must be Uint8Array or string")}n(KX,"validateDST");var UX=ya.bytesToNumberBE;function Xo(t,e){if(t<0||t>=1<<8*e)throw new Error(`bad I2OSP call: value=${t} length=${e}`);let r=Array.from({length:e}).fill(0);for(let i=e-1;i>=0;i--)r[i]=t&255,t>>>=8;return new Uint8Array(r)}n(Xo,"i2osp");function jX(t,e){let r=new Uint8Array(t.length);for(let i=0;i<t.length;i++)r[i]=t[i]^e[i];return r}n(jX,"strxor");function wf(t){if(!(0,ya.isBytes)(t))throw new Error("Uint8Array expected")}n(wf,"abytes");function yS(t){if(!Number.isSafeInteger(t))throw new Error("number expected")}n(yS,"isNum");function RR(t,e,r,i){wf(t),wf(e),yS(r),e.length>255&&(e=i((0,ya.concatBytes)((0,ya.utf8ToBytes)("H2C-OVERSIZE-DST-"),e)));let{outputLen:a,blockLen:s}=i,o=Math.ceil(r/a);if(o>255)throw new Error("Invalid xmd length");let l=(0,ya.concatBytes)(e,Xo(e.length,1)),u=Xo(0,s),c=Xo(r,2),p=new Array(o),f=i((0,ya.concatBytes)(u,t,c,Xo(0,1),l));p[0]=i((0,ya.concatBytes)(f,Xo(1,1),l));for(let I=1;I<=o;I++){let T=[jX(f,p[I-1]),Xo(I+1,1),l];p[I]=i((0,ya.concatBytes)(...T))}return(0,ya.concatBytes)(...p).slice(0,r)}n(RR,"expand_message_xmd");Ba.expand_message_xmd=RR;function MR(t,e,r,i,a){if(wf(t),wf(e),yS(r),e.length>255){let s=Math.ceil(2*i/8);e=a.create({dkLen:s}).update((0,ya.utf8ToBytes)("H2C-OVERSIZE-DST-")).update(e).digest()}if(r>65535||e.length>255)throw new Error("expand_message_xof: invalid lenInBytes");return a.create({dkLen:r}).update(t).update(Xo(r,2)).update(e).update(Xo(e.length,1)).digest()}n(MR,"expand_message_xof");Ba.expand_message_xof=MR;function gS(t,e,r){(0,ya.validateObject)(r,{DST:"stringOrUint8Array",p:"bigint",m:"isSafeInteger",k:"isSafeInteger",hash:"hash"});let{p:i,k:a,m:s,hash:o,expand:l,DST:u}=r;wf(t),yS(e);let c=KX(u),p=i.toString(2).length,f=Math.ceil((p+a)/8),P=e*s*f,I;if(l==="xmd")I=RR(t,c,P,o);else if(l==="xof")I=MR(t,c,P,a,o);else if(l==="_internal_pass")I=t;else throw new Error('expand must be "xmd" or "xof"');let T=new Array(e);for(let z=0;z<e;z++){let R=new Array(s);for(let O=0;O<s;O++){let F=f*(O+z*s),W=I.subarray(F,F+f);R[O]=(0,LX.mod)(UX(W),i)}T[z]=R}return T}n(gS,"hash_to_field");Ba.hash_to_field=gS;function HX(t,e){let r=e.map(i=>Array.from(i).reverse());return(i,a)=>{let[s,o,l,u]=r.map(c=>c.reduce((p,f)=>t.add(t.mul(p,i),f)));return i=t.div(s,o),a=t.mul(a,t.div(l,u)),{x:i,y:a}}}n(HX,"isogenyMap");Ba.isogenyMap=HX;function $X(t,e,r){if(typeof e!="function")throw new Error("mapToCurve() must be defined");return{hashToCurve(i,a){let s=gS(i,2,{...r,DST:r.DST,...a}),o=t.fromAffine(e(s[0])),l=t.fromAffine(e(s[1])),u=o.add(l).clearCofactor();return u.assertValidity(),u},encodeToCurve(i,a){let s=gS(i,1,{...r,DST:r.encodeDST,...a}),o=t.fromAffine(e(s[0])).clearCofactor();return o.assertValidity(),o}}}n($X,"createHasher");Ba.createHasher=$X});var jR=_(Ce=>{"use strict";Object.defineProperty(Ce,"__esModule",{value:!0});Ce.hash_to_ristretto255=Ce.hashToRistretto255=Ce.RistrettoPoint=Ce.encodeToCurve=Ce.hashToCurve=Ce.edwardsToMontgomeryPriv=Ce.edwardsToMontgomery=Ce.edwardsToMontgomeryPub=Ce.x25519=Ce.ed25519ph=Ce.ed25519ctx=Ce.ed25519=Ce.ED25519_TORSION_SUBGROUP=void 0;var fy=cR(),_f=Ns(),xS=TR(),GX=IR(),bt=Yo(),Fu=yn(),WR=bS(),xf=BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),wS=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752"),ZX=BigInt(0),Hn=BigInt(1),my=BigInt(2),JX=BigInt(5),DR=BigInt(10),YX=BigInt(20),QX=BigInt(40),CR=BigInt(80);function VR(t){let e=xf,i=t*t%e*t%e,a=(0,bt.pow2)(i,my,e)*i%e,s=(0,bt.pow2)(a,Hn,e)*t%e,o=(0,bt.pow2)(s,JX,e)*s%e,l=(0,bt.pow2)(o,DR,e)*o%e,u=(0,bt.pow2)(l,YX,e)*l%e,c=(0,bt.pow2)(u,QX,e)*u%e,p=(0,bt.pow2)(c,CR,e)*c%e,f=(0,bt.pow2)(p,CR,e)*c%e,P=(0,bt.pow2)(f,DR,e)*o%e;return{pow_p_5_8:(0,bt.pow2)(P,my,e)*t%e,b2:i}}n(VR,"ed25519_pow_2_252_3");function FR(t){return t[0]&=248,t[31]&=127,t[31]|=64,t}n(FR,"adjustScalarBytes");function AS(t,e){let r=xf,i=(0,bt.mod)(e*e*e,r),a=(0,bt.mod)(i*i*e,r),s=VR(t*a).pow_p_5_8,o=(0,bt.mod)(t*i*s,r),l=(0,bt.mod)(e*o*o,r),u=o,c=(0,bt.mod)(o*wS,r),p=l===t,f=l===(0,bt.mod)(-t,r),P=l===(0,bt.mod)(-t*wS,r);return p&&(o=u),(f||P)&&(o=c),(0,bt.isNegativeLE)(o,r)&&(o=(0,bt.mod)(-o,r)),{isValid:p||f,value:o}}n(AS,"uvRatio");Ce.ED25519_TORSION_SUBGROUP=["0100000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a","0000000000000000000000000000000000000000000000000000000000000080","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05","ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc85","0000000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa"];var fe=(0,bt.Field)(xf,void 0,!0),Af={a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),Fp:fe,n:BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960"),hash:fy.sha512,randomBytes:_f.randomBytes,adjustScalarBytes:FR,uvRatio:AS};Ce.ed25519=(0,xS.twistedEdwards)(Af);function LR(t,e,r){if(e.length>255)throw new Error("Context is too big");return(0,_f.concatBytes)((0,_f.utf8ToBytes)("SigEd25519 no Ed25519 collisions"),new Uint8Array([r?1:0,e.length]),e,t)}n(LR,"ed25519_domain");Ce.ed25519ctx=(0,xS.twistedEdwards)({...Af,domain:LR});Ce.ed25519ph=(0,xS.twistedEdwards)({...Af,domain:LR,prehash:fy.sha512});Ce.x25519=(0,GX.montgomery)({P:xf,a:BigInt(486662),montgomeryBits:255,nByteLength:32,Gu:BigInt(9),powPminus2:t=>{let e=xf,{pow_p_5_8:r,b2:i}=VR(t);return(0,bt.mod)((0,bt.pow2)(r,BigInt(3),e)*i,e)},adjustScalarBytes:FR,randomBytes:_f.randomBytes});function KR(t){let{y:e}=Ce.ed25519.ExtendedPoint.fromHex(t),r=BigInt(1);return fe.toBytes(fe.create((r+e)*fe.inv(r-e)))}n(KR,"edwardsToMontgomeryPub");Ce.edwardsToMontgomeryPub=KR;Ce.edwardsToMontgomery=KR;function XX(t){let e=Af.hash(t.subarray(0,32));return Af.adjustScalarBytes(e).subarray(0,32)}n(XX,"edwardsToMontgomeryPriv");Ce.edwardsToMontgomeryPriv=XX;var eee=(fe.ORDER+BigInt(3))/BigInt(8),tee=fe.pow(my,eee),BR=fe.sqrt(fe.neg(fe.ONE)),ree=(fe.ORDER-BigInt(5))/BigInt(8),OR=BigInt(486662);function iee(t){let e=fe.sqr(t);e=fe.mul(e,my);let r=fe.add(e,fe.ONE),i=fe.neg(OR),a=fe.sqr(r),s=fe.mul(a,r),o=fe.mul(e,OR);o=fe.mul(o,i),o=fe.add(o,a),o=fe.mul(o,i);let l=fe.sqr(s);a=fe.sqr(l),l=fe.mul(l,s),l=fe.mul(l,o),a=fe.mul(a,l);let u=fe.pow(a,ree);u=fe.mul(u,l);let c=fe.mul(u,BR);a=fe.sqr(u),a=fe.mul(a,s);let p=fe.eql(a,o),f=fe.cmov(c,u,p),P=fe.mul(i,e),I=fe.mul(u,t);I=fe.mul(I,tee);let T=fe.mul(I,BR),z=fe.mul(o,e);a=fe.sqr(I),a=fe.mul(a,s);let R=fe.eql(a,z),O=fe.cmov(T,I,R);a=fe.sqr(f),a=fe.mul(a,s);let F=fe.eql(a,o),W=fe.cmov(P,i,F),q=fe.cmov(O,f,F),V=fe.isOdd(q);return q=fe.cmov(q,fe.neg(q),F!==V),{xMn:W,xMd:r,yMn:q,yMd:Hn}}n(iee,"map_to_curve_elligator2_curve25519");var aee=(0,bt.FpSqrtEven)(fe,fe.neg(BigInt(486664)));function nee(t){let{xMn:e,xMd:r,yMn:i,yMd:a}=iee(t),s=fe.mul(e,a);s=fe.mul(s,aee);let o=fe.mul(r,i),l=fe.sub(e,r),u=fe.add(e,r),c=fe.mul(o,u),p=fe.eql(c,fe.ZERO);s=fe.cmov(s,fe.ZERO,p),o=fe.cmov(o,fe.ONE,p),l=fe.cmov(l,fe.ONE,p),u=fe.cmov(u,fe.ONE,p);let f=fe.invertBatch([o,u]);return{x:fe.mul(s,f[0]),y:fe.mul(l,f[1])}}n(nee,"map_to_curve_elligator2_edwards25519");var UR=(0,WR.createHasher)(Ce.ed25519.ExtendedPoint,t=>nee(t[0]),{DST:"edwards25519_XMD:SHA-512_ELL2_RO_",encodeDST:"edwards25519_XMD:SHA-512_ELL2_NU_",p:fe.ORDER,m:1,k:128,expand:"xmd",hash:fy.sha512});Ce.hashToCurve=UR.hashToCurve;Ce.encodeToCurve=UR.encodeToCurve;function vS(t){if(!(t instanceof vn))throw new Error("RistrettoPoint expected")}n(vS,"assertRstPoint");var _S=wS,see=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),oee=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),lee=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),uee=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),NR=n(t=>AS(Hn,t),"invertSqrt"),dee=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),SS=n(t=>Ce.ed25519.CURVE.Fp.create((0,Fu.bytesToNumberLE)(t)&dee),"bytes255ToNumberLE");function qR(t){let{d:e}=Ce.ed25519.CURVE,r=Ce.ed25519.CURVE.Fp.ORDER,i=Ce.ed25519.CURVE.Fp.create,a=i(_S*t*t),s=i((a+Hn)*lee),o=BigInt(-1),l=i((o-e*a)*i(a+e)),{isValid:u,value:c}=AS(s,l),p=i(c*t);(0,bt.isNegativeLE)(p,r)||(p=i(-p)),u||(c=p),u||(o=a);let f=i(o*(a-Hn)*uee-l),P=c*c,I=i((c+c)*l),T=i(f*see),z=i(Hn-P),R=i(Hn+P);return new Ce.ed25519.ExtendedPoint(i(I*R),i(z*T),i(T*R),i(I*z))}n(qR,"calcElligatorRistrettoMap");var vn=class t{static{n(this,"RistPoint")}constructor(e){this.ep=e}static fromAffine(e){return new t(Ce.ed25519.ExtendedPoint.fromAffine(e))}static hashToCurve(e){e=(0,Fu.ensureBytes)("ristrettoHash",e,64);let r=SS(e.slice(0,32)),i=qR(r),a=SS(e.slice(32,64)),s=qR(a);return new t(i.add(s))}static fromHex(e){e=(0,Fu.ensureBytes)("ristrettoHex",e,32);let{a:r,d:i}=Ce.ed25519.CURVE,a=Ce.ed25519.CURVE.Fp.ORDER,s=Ce.ed25519.CURVE.Fp.create,o="RistrettoPoint.fromHex: the hex is not valid encoding of RistrettoPoint",l=SS(e);if(!(0,Fu.equalBytes)((0,Fu.numberToBytesLE)(l,32),e)||(0,bt.isNegativeLE)(l,a))throw new Error(o);let u=s(l*l),c=s(Hn+r*u),p=s(Hn-r*u),f=s(c*c),P=s(p*p),I=s(r*i*f-P),{isValid:T,value:z}=NR(s(I*P)),R=s(z*p),O=s(z*R*I),F=s((l+l)*R);(0,bt.isNegativeLE)(F,a)&&(F=s(-F));let W=s(c*O),q=s(F*W);if(!T||(0,bt.isNegativeLE)(q,a)||W===ZX)throw new Error(o);return new t(new Ce.ed25519.ExtendedPoint(F,W,Hn,q))}toRawBytes(){let{ex:e,ey:r,ez:i,et:a}=this.ep,s=Ce.ed25519.CURVE.Fp.ORDER,o=Ce.ed25519.CURVE.Fp.create,l=o(o(i+r)*o(i-r)),u=o(e*r),c=o(u*u),{value:p}=NR(o(l*c)),f=o(p*l),P=o(p*u),I=o(f*P*a),T;if((0,bt.isNegativeLE)(a*I,s)){let R=o(r*_S),O=o(e*_S);e=R,r=O,T=o(f*oee)}else T=P;(0,bt.isNegativeLE)(e*I,s)&&(r=o(-r));let z=o((i-r)*T);return(0,bt.isNegativeLE)(z,s)&&(z=o(-z)),(0,Fu.numberToBytesLE)(z,32)}toHex(){return(0,Fu.bytesToHex)(this.toRawBytes())}toString(){return this.toHex()}equals(e){vS(e);let{ex:r,ey:i}=this.ep,{ex:a,ey:s}=e.ep,o=Ce.ed25519.CURVE.Fp.create,l=o(r*s)===o(i*a),u=o(i*s)===o(r*a);return l||u}add(e){return vS(e),new t(this.ep.add(e.ep))}subtract(e){return vS(e),new t(this.ep.subtract(e.ep))}multiply(e){return new t(this.ep.multiply(e))}multiplyUnsafe(e){return new t(this.ep.multiplyUnsafe(e))}double(){return new t(this.ep.double())}negate(){return new t(this.ep.negate())}};Ce.RistrettoPoint=(vn.BASE||(vn.BASE=new vn(Ce.ed25519.ExtendedPoint.BASE)),vn.ZERO||(vn.ZERO=new vn(Ce.ed25519.ExtendedPoint.ZERO)),vn);var cee=n((t,e)=>{let r=e.DST,i=typeof r=="string"?(0,_f.utf8ToBytes)(r):r,a=(0,WR.expand_message_xmd)(t,i,64,fy.sha512);return vn.hashToCurve(a)},"hashToRistretto255");Ce.hashToRistretto255=cee;Ce.hash_to_ristretto255=Ce.hashToRistretto255});var ES=_((HR,kS)=>{(function(t,e){"use strict";function r(C,h){if(!C)throw new Error(h||"Assertion failed")}n(r,"assert");function i(C,h){C.super_=h;var b=n(function(){},"TempCtor");b.prototype=h.prototype,C.prototype=new b,C.prototype.constructor=C}n(i,"inherits");function a(C,h,b){if(a.isBN(C))return C;this.negative=0,this.words=null,this.length=0,this.red=null,C!==null&&((h==="le"||h==="be")&&(b=h,h=10),this._init(C||0,h||10,b||"be"))}n(a,"BN"),typeof t=="object"?t.exports=a:e.BN=a,a.BN=a,a.wordSize=26;var s;try{typeof window<"u"&&typeof window.Buffer<"u"?s=window.Buffer:s=_e("buffer").Buffer}catch{}a.isBN=n(function(h){return h instanceof a?!0:h!==null&&typeof h=="object"&&h.constructor.wordSize===a.wordSize&&Array.isArray(h.words)},"isBN"),a.max=n(function(h,b){return h.cmp(b)>0?h:b},"max"),a.min=n(function(h,b){return h.cmp(b)<0?h:b},"min"),a.prototype._init=n(function(h,b,S){if(typeof h=="number")return this._initNumber(h,b,S);if(typeof h=="object")return this._initArray(h,b,S);b==="hex"&&(b=16),r(b===(b|0)&&b>=2&&b<=36),h=h.toString().replace(/\s+/g,"");var x=0;h[0]==="-"&&(x++,this.negative=1),x<h.length&&(b===16?this._parseHex(h,x,S):(this._parseBase(h,b,x),S==="le"&&this._initArray(this.toArray(),b,S)))},"init"),a.prototype._initNumber=n(function(h,b,S){h<0&&(this.negative=1,h=-h),h<67108864?(this.words=[h&67108863],this.length=1):h<4503599627370496?(this.words=[h&67108863,h/67108864&67108863],this.length=2):(r(h<9007199254740992),this.words=[h&67108863,h/67108864&67108863,1],this.length=3),S==="le"&&this._initArray(this.toArray(),b,S)},"_initNumber"),a.prototype._initArray=n(function(h,b,S){if(r(typeof h.length=="number"),h.length<=0)return this.words=[0],this.length=1,this;this.length=Math.ceil(h.len