@invisi-labs/protocol 1.1.0 → 1.1.2

package/dist/index.d.cts

@@ -1,10 +1,9 @@
-import * as _invisi_labs_core from '@invisi-labs/core';
-import { Hex, Address, ReceivingKeyLookup, WalletAuthorizationRequest, Wallet, WalletAuthorizationProvider, Note, CreditDeliveryState, AuthorizedStatement } from '@invisi-labs/core';
-import { ContractRunner, Provider } from 'ethers';
-import { Prover, ProverOptions, ProofTarget, CircuitName, ProofStatement, ProvingRequest } from '@invisi-labs/prover';
+import { Hex, Address, ReceivingKeyLookup, Wallet, Note, CreditDeliveryState, AuthorizedStatement } from '@invisi-labs/core';
+import { ContractRunner, Signer, Provider } from 'ethers';
 import { DeploymentContext, CanonicalBlock, ProtocolDeployment, ProtocolRpcClient } from '@invisi-labs/rpc';
 export { CanonicalBlock, DeploymentContext, Membership, ProtocolDataProvider, ProtocolDataStatus, ProtocolUpdateRange, ProtocolUpdates } from '@invisi-labs/rpc';
-import { F as FundingParams, D as Delivery, I as InputSource, C as CreateCreditParams, a as CancelCreditParams, b as CreditDrawParams, T as TopUpCreditParams, c as TransactRequest, S as ShieldParams, d as ShieldOutput, e as CrossTreeTransactParams } from './types-RN45XzKc.cjs';
+import { F as FundingParams, D as Delivery, I as InputSource, C as CreateCreditParams, a as CancelCreditParams, b as CreditDrawParams, T as TopUpCreditParams, c as TransactRequest, S as ShieldParams, d as ShieldOutput, e as CrossTreeTransactParams } from './types-BCTQjKzw.cjs';
+import { ProofTarget, CircuitName, ProofStatement, ProvingRequest } from '@invisi-labs/prover';
 
 interface RegistryContext {
     chainId: bigint;
@@ -17,7 +16,7 @@ interface RegistryReceivingKeys {
     clueKey: Hex;
 }
 interface AddressRegistration {
-    /** Nonzero 20-byte EVM owner address. ABI calls zero-pad it to bytes32. */
+    /** Nonzero EVM owner: 20 bytes or canonical zero-padded bytes32. */
     walletIdentity: Hex;
     keys: RegistryReceivingKeys;
     /** The current registry nonce expected for this operation. */
@@ -33,10 +32,8 @@ interface RegistrationCalldata {
     to: Address;
     callData: Hex;
     value: 0n;
-    publicInputs: readonly [Hex, Hex, Hex];
 }
-/** Private-wallet authorization request; it contains only the public transcript. */
-declare function registrationAuthorizationRequest(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): WalletAuthorizationRequest;
+/** Standard registry EIP-712 data, independent of private WalletAuthorization. */
 declare function registrationTypedData(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): {
     domain: {
         name: string;
@@ -44,25 +41,24 @@ declare function registrationTypedData(context: RegistryContext, registration: A
         chainId: bigint;
         verifyingContract: `0x${string}`;
     };
+    primaryType: string;
     types: {
-        readonly WalletAuthorization: readonly [{
-            readonly name: "operation";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "statementHash";
-            readonly type: "bytes32";
-        }];
+        [x: string]: {
+            name: string;
+            type: string;
+        }[];
     };
-    primaryType: "WalletAuthorization";
     message: {
-        operation: `0x${string}`;
-        statementHash: `0x${string}`;
+        nonce: bigint;
+        deadline: bigint;
+        viewingPublicKey: Hex;
+        clueKey: Hex;
+        walletIdentity: string;
     };
 };
-/** Exact wallet_registration public statement: WID, digest high128, digest low128. */
-declare function registrationPublicInputs(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): readonly [Hex, Hex, Hex];
-/** Encode a relayer-ready call after obtaining a proof; does not sign or broadcast. */
-declare function buildRegistrationCalldata(context: RegistryContext, registration: AddressRegistration, proof: Hex, options?: RegistrationOptions): RegistrationCalldata;
+declare function registrationDigest(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): Hex;
+/** Encode an owner call (empty signature) or an EIP-712 / ERC-1271 authorized relay. */
+declare function buildRegistrationCalldata(context: RegistryContext, registration: AddressRegistration, signature: Hex, options?: RegistrationOptions): RegistrationCalldata;
 /** Ethers runner used for registry contract reads. */
 type RegistryReadClient = ContractRunner;
 /** One receivingKeysOf query per short address; RPC failures propagate unchanged. */
@@ -91,7 +87,7 @@ declare const word: (v: bigint | string) => Hex;
 declare function dense<T>(v: readonly T[], name: string): readonly T[];
 declare function known(v: object, keys: readonly string[], name?: string): void;
 declare function notes(v: readonly Hex[], name: string): `0x${string}`[];
-declare function envelope(v: Hex, length: number, version?: number): Hex;
+declare function envelope(v: Hex, length: number, version?: number, maximum?: number): Hex;
 declare function normalizeContext(c: TransactionContext): {
     chainId: bigint;
     protocolAddress: Hex;
@@ -149,6 +145,8 @@ interface CanonicalReceipt {
 }
 interface ChainReader {
     getChainId(): Promise<bigint>;
+    /** Required when a selected deployment includes a receiving-key registry. */
+    getProtocolAddressRegistry?(address: Address): Promise<Address>;
     getCode(address: Address): Promise<Hex>;
     getBlock(number: bigint): Promise<CanonicalBlock>;
     getLatestBlockNumber(): Promise<bigint>;
@@ -175,17 +173,18 @@ interface FactoryReader {
 }
 
 interface RegistryReader extends Pick<ChainReader, "getChainId" | "getCode" | "getBlock" | "getLatestBlockNumber" | "getTransaction" | "getReceipt"> {
+    /** Validate arbitrary ERC-1271 bytes for a contract owner; transport errors propagate. */
+    isValidRegistrationSignature?(owner: Address, digest: Hex, signature: Hex): Promise<boolean>;
     getRegistryNonce(context: RegistryContext, walletIdentity: Hex, block: CanonicalBlock): Promise<bigint>;
 }
 interface RegistrationPreparation {
     wallet: Wallet;
     reader: RegistryReader;
-    authorization?: WalletAuthorizationProvider;
-    prover?: Prover;
+    signer?: Signer;
     deadline?: bigint;
     update?: boolean;
 }
-type RegistrationStatus = "prepared" | "authorized" | "ready" | "submitted" | "confirmed" | "uncertain" | "failed" | "expired" | "reorged";
+type RegistrationStatus = "prepared" | "ready" | "submitted" | "confirmed" | "uncertain" | "failed" | "expired" | "reorged";
 declare class RegistrationOperation {
     #private;
     readonly status: RegistrationStatus;
@@ -203,12 +202,38 @@ declare class RegistrationOperation {
         chainId: bigint;
         registryAddress: `0x${string}`;
     };
+    /** Sign with ethers, or attach externally obtained ERC-1271 signature bytes. */
     authorize(options?: {
         signal?: AbortSignal;
+        signature?: Hex;
     }): Promise<RegistrationOperation>;
-    prove(options?: ProverOptions): Promise<RegistrationOperation>;
+    /** Empty signatures require the transaction sender to be the wallet owner. */
+    authorizeDirect(): Promise<RegistrationOperation>;
+    typedData(): {
+        domain: {
+            name: string;
+            version: string;
+            chainId: bigint;
+            verifyingContract: `0x${string}`;
+        };
+        primaryType: string;
+        types: {
+            [x: string]: {
+                name: string;
+                type: string;
+            }[];
+        };
+        message: {
+            nonce: bigint;
+            deadline: bigint;
+            viewingPublicKey: Hex;
+            clueKey: Hex;
+            walletIdentity: string;
+        };
+    };
     private call;
     exportTransaction(): Promise<TransactionCall>;
+    private validateFreshness;
     /** Associate a signed/broadcast transaction; ethers owns sending and receipt waiting. */
     trackTransaction(transactionHash: string): RegistrationOperation;
     reconcile(options?: {
@@ -235,9 +260,30 @@ declare class AddressRegistry {
     validateDeployment(reader: Pick<RegistryReader, "getChainId" | "getCode">): Promise<void>;
     prepareRegistration(options: RegistrationPreparation): Promise<RegistrationOperation>;
     resolve(address: string): Promise<string>;
-    authorization(registration: AddressRegistration, options?: RegistrationOptions): _invisi_labs_core.WalletAuthorizationRequest;
-    publicInputs(registration: AddressRegistration, options?: RegistrationOptions): readonly [`0x${string}`, `0x${string}`, `0x${string}`];
-    buildCall(registration: AddressRegistration, proof: `0x${string}`, options?: RegistrationOptions): RegistrationCalldata;
+    typedData(registration: AddressRegistration, options?: RegistrationOptions): {
+        domain: {
+            name: string;
+            version: string;
+            chainId: bigint;
+            verifyingContract: `0x${string}`;
+        };
+        primaryType: string;
+        types: {
+            [x: string]: {
+                name: string;
+                type: string;
+            }[];
+        };
+        message: {
+            nonce: bigint;
+            deadline: bigint;
+            viewingPublicKey: Hex;
+            clueKey: Hex;
+            walletIdentity: string;
+        };
+    };
+    digest(registration: AddressRegistration, options?: RegistrationOptions): `0x${string}`;
+    buildCall(registration: AddressRegistration, signature: `0x${string}`, options?: RegistrationOptions): RegistrationCalldata;
 }
 
 declare const CREATE_CREDIT_FIELDS: readonly ["token", "sources", "nullifiers", "creditCommitment", "changeCommitment", "owner", "expiry", "deadline"];
@@ -554,7 +600,7 @@ type TransactCapacity = (typeof TRANSACT_CAPACITIES)[number];
 declare function selectTransactCapacity(inputs: number, outputs: number): TransactCapacity;
 type TransactRequestParams = CrossTreeTransactParams;
 declare function normalizeTransactRequest(c: TransactionContext, p: TransactRequestParams, cs: readonly Delivery[], funding?: FundingInput): {
-    capacity: 14 | 56 | 112 | 168;
+    capacity: 112 | 14 | 56 | 168;
     sources: {
         treeId: bigint;
         merkleRoot: `0x${string}`;
@@ -648,7 +694,7 @@ interface BuildTransactCalldataParams {
 }
 declare function buildTransactCalldata(p: BuildTransactCalldataParams): {
     data: `0x${string}`;
-    capacity: 14 | 56 | 112 | 168;
+    capacity: 112 | 14 | 56 | 168;
     approveAmount: bigint;
 };
 interface BuildTransactAggregateCalldataParams {
@@ -768,7 +814,7 @@ declare class TokenProtocol {
     }): Promise<void>;
     transact(request: Omit<BuildTransactCalldataParams, "context">): {
         data: `0x${string}`;
-        capacity: 14 | 56 | 112 | 168;
+        capacity: 112 | 14 | 56 | 168;
         approveAmount: bigint;
         to: `0x${string}`;
         value: bigint;
@@ -825,6 +871,7 @@ declare class Protocol {
     }): Promise<Protocol>;
     validateDeployment(connection: Provider | (Pick<ChainReader, "getChainId" | "getCode"> & {
         getProtocolVersion?(address: Address): Promise<bigint>;
+        getProtocolAddressRegistry?(address: Address): Promise<Address>;
     })): Promise<void>;
     aggregate(request: Omit<BuildTransactAggregateCalldataParams, "context">): {
         data: Hex;
@@ -872,7 +919,7 @@ interface BuildWithdrawalCalldataParams extends Omit<BuildTransactCalldataParams
 /** Prepare a full public withdrawal whose spending authority is already proven in the supplied proof. */
 declare function buildWithdrawalCalldata(p: BuildWithdrawalCalldataParams): Promise<{
     data: `0x${string}`;
-    capacity: 14 | 56 | 112 | 168;
+    capacity: 112 | 14 | 56 | 168;
     approveAmount: bigint;
 }>;
 
@@ -936,7 +983,6 @@ declare class WitnessBuilder {
     cancelCredit(p: CancelCreditWitnessParams): Promise<ProvingRequest>;
     drawCredit(p: DrawCreditWitnessParams): Promise<ProvingRequest>;
     topUpCredit(p: TopUpCreditWitnessParams): Promise<ProvingRequest>;
-    static registration(context: RegistryContext, registration: AddressRegistration, authorization: AuthorizedStatement, options?: RegistrationOptions): Promise<ProvingRequest>;
 }
 
 /**
@@ -945,4 +991,4 @@ declare class WitnessBuilder {
  */
 declare function resolveInstanceAddress(client: ContractRunner, factoryAddress: `0x${string}`, salt: `0x${string}`): Promise<`0x${string}`>;
 
-export { type AddressRegistration, AddressRegistry, type AddressRegistryOptions, type AggregateMemberInput, type BuildCancelCreditCalldataParams, type BuildCreateCreditCalldataParams, type BuildCreditDrawCalldataParams, type BuildShieldCalldataParams, type BuildTopUpCreditCalldataParams, type BuildTransactAggregateCalldataParams, type BuildTransactCalldataParams, type BuildWithdrawalCalldataParams, CREATE_CREDIT_FIELDS, CREDIT_DRAW_CAPACITIES, type CancelCreditWitnessParams, type CanonicalReceipt, type ChainReader, type CreateCreditWitnessParams, type CreditMembership, type DrawCreditWitnessParams, EMPTY_FUNDING, EMPTY_PERMIT, FIELD_MODULUS, type FactoryReader, type FundingInput, type NoteMembership, Protocol, type ProtocolLog, type ProtocolOptions, type RegistrationCalldata, RegistrationOperation, type RegistrationOptions, type RegistrationPreparation, type RegistrationStatus, type RegistryContext, type RegistryReadClient, type RegistryReader, type RegistryReceivingKeys, TRANSACT_CAPACITIES, TokenProtocol, type TokenProtocolOptions, type TopUpCreditWitnessParams, type TransactCapacity, type TransactRequestParams, type TransactWitnessParams, type TransactionCall, type TransactionContext, type VerifyCreditCommitmentParams, type VerifyNoteCommitmentParams, WitnessBuilder, ZERO_ADDRESS, ZERO_WORD, aggregateMemberRequestHash, aggregatePublicInputs, buildCancelCreditCalldata, buildCreateCreditCalldata, buildCreditDrawCalldata, buildRegistrationCalldata, buildShieldCalldata, buildTopUpCreditCalldata, buildTransactAggregateCalldata, buildTransactCalldata, buildWithdrawalCalldata, cancelCreditBaseInputs, cancelCreditPublicInputs, cancelCreditRequestHash, checkDeadline, createCreditBaseInputs, createCreditPublicInputs, createCreditRequestHash, createRegistryReceivingKeyLookup, creditDrawBaseInputs, creditDrawPublicInputs, deliveriesHash, dense, encodeAggregateFundingTypedData, encodeCancelCreditTypedData, encodeCreateCreditFundingTypedData, encodeCreateCreditTypedData, encodeCreditDrawTypedData, encodeCreditProof, encodeShieldFundingTypedData, encodeTopUpCreditFundingTypedData, encodeTopUpCreditTypedData, encodeTransactFundingTypedData, encodeTransactTypedData, envelope, field, fundingFields, getEIP712Domain, known, normalizeContext, normalizeDelivery, normalizeFunding, normalizeSources, normalizeTransactRequest, notes, pad, registrationAuthorizationRequest, registrationPublicInputs, registrationTypedData, resolveInstanceAddress, selectCreditDrawCircuit, selectTransactCapacity, shieldFundingRequestHash, topUpCreditBaseInputs, topUpCreditPublicInputs, topUpCreditRequestHash, transactFundingRequestHash, transactPublicInputs, transactUserPublicInputs, uint, validateCancelCreditRequest, validateCreateCreditRequest, validateCreditDrawRequest, validateFundingSubmission, validateShieldRequest, validateTopUpCreditRequest, verifyCreditCommitment, verifyNoteCommitment, word };
+export { type AddressRegistration, AddressRegistry, type AddressRegistryOptions, type AggregateMemberInput, type BuildCancelCreditCalldataParams, type BuildCreateCreditCalldataParams, type BuildCreditDrawCalldataParams, type BuildShieldCalldataParams, type BuildTopUpCreditCalldataParams, type BuildTransactAggregateCalldataParams, type BuildTransactCalldataParams, type BuildWithdrawalCalldataParams, CREATE_CREDIT_FIELDS, CREDIT_DRAW_CAPACITIES, type CancelCreditWitnessParams, type CanonicalReceipt, type ChainReader, type CreateCreditWitnessParams, type CreditMembership, type DrawCreditWitnessParams, EMPTY_FUNDING, EMPTY_PERMIT, FIELD_MODULUS, type FactoryReader, type FundingInput, type NoteMembership, Protocol, type ProtocolLog, type ProtocolOptions, type RegistrationCalldata, RegistrationOperation, type RegistrationOptions, type RegistrationPreparation, type RegistrationStatus, type RegistryContext, type RegistryReadClient, type RegistryReader, type RegistryReceivingKeys, TRANSACT_CAPACITIES, TokenProtocol, type TokenProtocolOptions, type TopUpCreditWitnessParams, type TransactCapacity, type TransactRequestParams, type TransactWitnessParams, type TransactionCall, type TransactionContext, type VerifyCreditCommitmentParams, type VerifyNoteCommitmentParams, WitnessBuilder, ZERO_ADDRESS, ZERO_WORD, aggregateMemberRequestHash, aggregatePublicInputs, buildCancelCreditCalldata, buildCreateCreditCalldata, buildCreditDrawCalldata, buildRegistrationCalldata, buildShieldCalldata, buildTopUpCreditCalldata, buildTransactAggregateCalldata, buildTransactCalldata, buildWithdrawalCalldata, cancelCreditBaseInputs, cancelCreditPublicInputs, cancelCreditRequestHash, checkDeadline, createCreditBaseInputs, createCreditPublicInputs, createCreditRequestHash, createRegistryReceivingKeyLookup, creditDrawBaseInputs, creditDrawPublicInputs, deliveriesHash, dense, encodeAggregateFundingTypedData, encodeCancelCreditTypedData, encodeCreateCreditFundingTypedData, encodeCreateCreditTypedData, encodeCreditDrawTypedData, encodeCreditProof, encodeShieldFundingTypedData, encodeTopUpCreditFundingTypedData, encodeTopUpCreditTypedData, encodeTransactFundingTypedData, encodeTransactTypedData, envelope, field, fundingFields, getEIP712Domain, known, normalizeContext, normalizeDelivery, normalizeFunding, normalizeSources, normalizeTransactRequest, notes, pad, registrationDigest, registrationTypedData, resolveInstanceAddress, selectCreditDrawCircuit, selectTransactCapacity, shieldFundingRequestHash, topUpCreditBaseInputs, topUpCreditPublicInputs, topUpCreditRequestHash, transactFundingRequestHash, transactPublicInputs, transactUserPublicInputs, uint, validateCancelCreditRequest, validateCreateCreditRequest, validateCreditDrawRequest, validateFundingSubmission, validateShieldRequest, validateTopUpCreditRequest, verifyCreditCommitment, verifyNoteCommitment, word };

package/dist/index.d.ts

@@ -1,10 +1,9 @@
-import * as _invisi_labs_core from '@invisi-labs/core';
-import { Hex, Address, ReceivingKeyLookup, WalletAuthorizationRequest, Wallet, WalletAuthorizationProvider, Note, CreditDeliveryState, AuthorizedStatement } from '@invisi-labs/core';
-import { ContractRunner, Provider } from 'ethers';
-import { Prover, ProverOptions, ProofTarget, CircuitName, ProofStatement, ProvingRequest } from '@invisi-labs/prover';
+import { Hex, Address, ReceivingKeyLookup, Wallet, Note, CreditDeliveryState, AuthorizedStatement } from '@invisi-labs/core';
+import { ContractRunner, Signer, Provider } from 'ethers';
 import { DeploymentContext, CanonicalBlock, ProtocolDeployment, ProtocolRpcClient } from '@invisi-labs/rpc';
 export { CanonicalBlock, DeploymentContext, Membership, ProtocolDataProvider, ProtocolDataStatus, ProtocolUpdateRange, ProtocolUpdates } from '@invisi-labs/rpc';
-import { F as FundingParams, D as Delivery, I as InputSource, C as CreateCreditParams, a as CancelCreditParams, b as CreditDrawParams, T as TopUpCreditParams, c as TransactRequest, S as ShieldParams, d as ShieldOutput, e as CrossTreeTransactParams } from './types-RN45XzKc.js';
+import { F as FundingParams, D as Delivery, I as InputSource, C as CreateCreditParams, a as CancelCreditParams, b as CreditDrawParams, T as TopUpCreditParams, c as TransactRequest, S as ShieldParams, d as ShieldOutput, e as CrossTreeTransactParams } from './types-BCTQjKzw.js';
+import { ProofTarget, CircuitName, ProofStatement, ProvingRequest } from '@invisi-labs/prover';
 
 interface RegistryContext {
     chainId: bigint;
@@ -17,7 +16,7 @@ interface RegistryReceivingKeys {
     clueKey: Hex;
 }
 interface AddressRegistration {
-    /** Nonzero 20-byte EVM owner address. ABI calls zero-pad it to bytes32. */
+    /** Nonzero EVM owner: 20 bytes or canonical zero-padded bytes32. */
     walletIdentity: Hex;
     keys: RegistryReceivingKeys;
     /** The current registry nonce expected for this operation. */
@@ -33,10 +32,8 @@ interface RegistrationCalldata {
     to: Address;
     callData: Hex;
     value: 0n;
-    publicInputs: readonly [Hex, Hex, Hex];
 }
-/** Private-wallet authorization request; it contains only the public transcript. */
-declare function registrationAuthorizationRequest(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): WalletAuthorizationRequest;
+/** Standard registry EIP-712 data, independent of private WalletAuthorization. */
 declare function registrationTypedData(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): {
     domain: {
         name: string;
@@ -44,25 +41,24 @@ declare function registrationTypedData(context: RegistryContext, registration: A
         chainId: bigint;
         verifyingContract: `0x${string}`;
     };
+    primaryType: string;
     types: {
-        readonly WalletAuthorization: readonly [{
-            readonly name: "operation";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "statementHash";
-            readonly type: "bytes32";
-        }];
+        [x: string]: {
+            name: string;
+            type: string;
+        }[];
     };
-    primaryType: "WalletAuthorization";
     message: {
-        operation: `0x${string}`;
-        statementHash: `0x${string}`;
+        nonce: bigint;
+        deadline: bigint;
+        viewingPublicKey: Hex;
+        clueKey: Hex;
+        walletIdentity: string;
     };
 };
-/** Exact wallet_registration public statement: WID, digest high128, digest low128. */
-declare function registrationPublicInputs(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): readonly [Hex, Hex, Hex];
-/** Encode a relayer-ready call after obtaining a proof; does not sign or broadcast. */
-declare function buildRegistrationCalldata(context: RegistryContext, registration: AddressRegistration, proof: Hex, options?: RegistrationOptions): RegistrationCalldata;
+declare function registrationDigest(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): Hex;
+/** Encode an owner call (empty signature) or an EIP-712 / ERC-1271 authorized relay. */
+declare function buildRegistrationCalldata(context: RegistryContext, registration: AddressRegistration, signature: Hex, options?: RegistrationOptions): RegistrationCalldata;
 /** Ethers runner used for registry contract reads. */
 type RegistryReadClient = ContractRunner;
 /** One receivingKeysOf query per short address; RPC failures propagate unchanged. */
@@ -91,7 +87,7 @@ declare const word: (v: bigint | string) => Hex;
 declare function dense<T>(v: readonly T[], name: string): readonly T[];
 declare function known(v: object, keys: readonly string[], name?: string): void;
 declare function notes(v: readonly Hex[], name: string): `0x${string}`[];
-declare function envelope(v: Hex, length: number, version?: number): Hex;
+declare function envelope(v: Hex, length: number, version?: number, maximum?: number): Hex;
 declare function normalizeContext(c: TransactionContext): {
     chainId: bigint;
     protocolAddress: Hex;
@@ -149,6 +145,8 @@ interface CanonicalReceipt {
 }
 interface ChainReader {
     getChainId(): Promise<bigint>;
+    /** Required when a selected deployment includes a receiving-key registry. */
+    getProtocolAddressRegistry?(address: Address): Promise<Address>;
     getCode(address: Address): Promise<Hex>;
     getBlock(number: bigint): Promise<CanonicalBlock>;
     getLatestBlockNumber(): Promise<bigint>;
@@ -175,17 +173,18 @@ interface FactoryReader {
 }
 
 interface RegistryReader extends Pick<ChainReader, "getChainId" | "getCode" | "getBlock" | "getLatestBlockNumber" | "getTransaction" | "getReceipt"> {
+    /** Validate arbitrary ERC-1271 bytes for a contract owner; transport errors propagate. */
+    isValidRegistrationSignature?(owner: Address, digest: Hex, signature: Hex): Promise<boolean>;
     getRegistryNonce(context: RegistryContext, walletIdentity: Hex, block: CanonicalBlock): Promise<bigint>;
 }
 interface RegistrationPreparation {
     wallet: Wallet;
     reader: RegistryReader;
-    authorization?: WalletAuthorizationProvider;
-    prover?: Prover;
+    signer?: Signer;
     deadline?: bigint;
     update?: boolean;
 }
-type RegistrationStatus = "prepared" | "authorized" | "ready" | "submitted" | "confirmed" | "uncertain" | "failed" | "expired" | "reorged";
+type RegistrationStatus = "prepared" | "ready" | "submitted" | "confirmed" | "uncertain" | "failed" | "expired" | "reorged";
 declare class RegistrationOperation {
     #private;
     readonly status: RegistrationStatus;
@@ -203,12 +202,38 @@ declare class RegistrationOperation {
         chainId: bigint;
         registryAddress: `0x${string}`;
     };
+    /** Sign with ethers, or attach externally obtained ERC-1271 signature bytes. */
     authorize(options?: {
         signal?: AbortSignal;
+        signature?: Hex;
     }): Promise<RegistrationOperation>;
-    prove(options?: ProverOptions): Promise<RegistrationOperation>;
+    /** Empty signatures require the transaction sender to be the wallet owner. */
+    authorizeDirect(): Promise<RegistrationOperation>;
+    typedData(): {
+        domain: {
+            name: string;
+            version: string;
+            chainId: bigint;
+            verifyingContract: `0x${string}`;
+        };
+        primaryType: string;
+        types: {
+            [x: string]: {
+                name: string;
+                type: string;
+            }[];
+        };
+        message: {
+            nonce: bigint;
+            deadline: bigint;
+            viewingPublicKey: Hex;
+            clueKey: Hex;
+            walletIdentity: string;
+        };
+    };
     private call;
     exportTransaction(): Promise<TransactionCall>;
+    private validateFreshness;
     /** Associate a signed/broadcast transaction; ethers owns sending and receipt waiting. */
     trackTransaction(transactionHash: string): RegistrationOperation;
     reconcile(options?: {
@@ -235,9 +260,30 @@ declare class AddressRegistry {
     validateDeployment(reader: Pick<RegistryReader, "getChainId" | "getCode">): Promise<void>;
     prepareRegistration(options: RegistrationPreparation): Promise<RegistrationOperation>;
     resolve(address: string): Promise<string>;
-    authorization(registration: AddressRegistration, options?: RegistrationOptions): _invisi_labs_core.WalletAuthorizationRequest;
-    publicInputs(registration: AddressRegistration, options?: RegistrationOptions): readonly [`0x${string}`, `0x${string}`, `0x${string}`];
-    buildCall(registration: AddressRegistration, proof: `0x${string}`, options?: RegistrationOptions): RegistrationCalldata;
+    typedData(registration: AddressRegistration, options?: RegistrationOptions): {
+        domain: {
+            name: string;
+            version: string;
+            chainId: bigint;
+            verifyingContract: `0x${string}`;
+        };
+        primaryType: string;
+        types: {
+            [x: string]: {
+                name: string;
+                type: string;
+            }[];
+        };
+        message: {
+            nonce: bigint;
+            deadline: bigint;
+            viewingPublicKey: Hex;
+            clueKey: Hex;
+            walletIdentity: string;
+        };
+    };
+    digest(registration: AddressRegistration, options?: RegistrationOptions): `0x${string}`;
+    buildCall(registration: AddressRegistration, signature: `0x${string}`, options?: RegistrationOptions): RegistrationCalldata;
 }
 
 declare const CREATE_CREDIT_FIELDS: readonly ["token", "sources", "nullifiers", "creditCommitment", "changeCommitment", "owner", "expiry", "deadline"];
@@ -554,7 +600,7 @@ type TransactCapacity = (typeof TRANSACT_CAPACITIES)[number];
 declare function selectTransactCapacity(inputs: number, outputs: number): TransactCapacity;
 type TransactRequestParams = CrossTreeTransactParams;
 declare function normalizeTransactRequest(c: TransactionContext, p: TransactRequestParams, cs: readonly Delivery[], funding?: FundingInput): {
-    capacity: 14 | 56 | 112 | 168;
+    capacity: 112 | 14 | 56 | 168;
     sources: {
         treeId: bigint;
         merkleRoot: `0x${string}`;
@@ -648,7 +694,7 @@ interface BuildTransactCalldataParams {
 }
 declare function buildTransactCalldata(p: BuildTransactCalldataParams): {
     data: `0x${string}`;
-    capacity: 14 | 56 | 112 | 168;
+    capacity: 112 | 14 | 56 | 168;
     approveAmount: bigint;
 };
 interface BuildTransactAggregateCalldataParams {
@@ -768,7 +814,7 @@ declare class TokenProtocol {
     }): Promise<void>;
     transact(request: Omit<BuildTransactCalldataParams, "context">): {
         data: `0x${string}`;
-        capacity: 14 | 56 | 112 | 168;
+        capacity: 112 | 14 | 56 | 168;
         approveAmount: bigint;
         to: `0x${string}`;
         value: bigint;
@@ -825,6 +871,7 @@ declare class Protocol {
     }): Promise<Protocol>;
     validateDeployment(connection: Provider | (Pick<ChainReader, "getChainId" | "getCode"> & {
         getProtocolVersion?(address: Address): Promise<bigint>;
+        getProtocolAddressRegistry?(address: Address): Promise<Address>;
     })): Promise<void>;
     aggregate(request: Omit<BuildTransactAggregateCalldataParams, "context">): {
         data: Hex;
@@ -872,7 +919,7 @@ interface BuildWithdrawalCalldataParams extends Omit<BuildTransactCalldataParams
 /** Prepare a full public withdrawal whose spending authority is already proven in the supplied proof. */
 declare function buildWithdrawalCalldata(p: BuildWithdrawalCalldataParams): Promise<{
     data: `0x${string}`;
-    capacity: 14 | 56 | 112 | 168;
+    capacity: 112 | 14 | 56 | 168;
     approveAmount: bigint;
 }>;
 
@@ -936,7 +983,6 @@ declare class WitnessBuilder {
     cancelCredit(p: CancelCreditWitnessParams): Promise<ProvingRequest>;
     drawCredit(p: DrawCreditWitnessParams): Promise<ProvingRequest>;
     topUpCredit(p: TopUpCreditWitnessParams): Promise<ProvingRequest>;
-    static registration(context: RegistryContext, registration: AddressRegistration, authorization: AuthorizedStatement, options?: RegistrationOptions): Promise<ProvingRequest>;
 }
 
 /**
@@ -945,4 +991,4 @@ declare class WitnessBuilder {
  */
 declare function resolveInstanceAddress(client: ContractRunner, factoryAddress: `0x${string}`, salt: `0x${string}`): Promise<`0x${string}`>;
 
-export { type AddressRegistration, AddressRegistry, type AddressRegistryOptions, type AggregateMemberInput, type BuildCancelCreditCalldataParams, type BuildCreateCreditCalldataParams, type BuildCreditDrawCalldataParams, type BuildShieldCalldataParams, type BuildTopUpCreditCalldataParams, type BuildTransactAggregateCalldataParams, type BuildTransactCalldataParams, type BuildWithdrawalCalldataParams, CREATE_CREDIT_FIELDS, CREDIT_DRAW_CAPACITIES, type CancelCreditWitnessParams, type CanonicalReceipt, type ChainReader, type CreateCreditWitnessParams, type CreditMembership, type DrawCreditWitnessParams, EMPTY_FUNDING, EMPTY_PERMIT, FIELD_MODULUS, type FactoryReader, type FundingInput, type NoteMembership, Protocol, type ProtocolLog, type ProtocolOptions, type RegistrationCalldata, RegistrationOperation, type RegistrationOptions, type RegistrationPreparation, type RegistrationStatus, type RegistryContext, type RegistryReadClient, type RegistryReader, type RegistryReceivingKeys, TRANSACT_CAPACITIES, TokenProtocol, type TokenProtocolOptions, type TopUpCreditWitnessParams, type TransactCapacity, type TransactRequestParams, type TransactWitnessParams, type TransactionCall, type TransactionContext, type VerifyCreditCommitmentParams, type VerifyNoteCommitmentParams, WitnessBuilder, ZERO_ADDRESS, ZERO_WORD, aggregateMemberRequestHash, aggregatePublicInputs, buildCancelCreditCalldata, buildCreateCreditCalldata, buildCreditDrawCalldata, buildRegistrationCalldata, buildShieldCalldata, buildTopUpCreditCalldata, buildTransactAggregateCalldata, buildTransactCalldata, buildWithdrawalCalldata, cancelCreditBaseInputs, cancelCreditPublicInputs, cancelCreditRequestHash, checkDeadline, createCreditBaseInputs, createCreditPublicInputs, createCreditRequestHash, createRegistryReceivingKeyLookup, creditDrawBaseInputs, creditDrawPublicInputs, deliveriesHash, dense, encodeAggregateFundingTypedData, encodeCancelCreditTypedData, encodeCreateCreditFundingTypedData, encodeCreateCreditTypedData, encodeCreditDrawTypedData, encodeCreditProof, encodeShieldFundingTypedData, encodeTopUpCreditFundingTypedData, encodeTopUpCreditTypedData, encodeTransactFundingTypedData, encodeTransactTypedData, envelope, field, fundingFields, getEIP712Domain, known, normalizeContext, normalizeDelivery, normalizeFunding, normalizeSources, normalizeTransactRequest, notes, pad, registrationAuthorizationRequest, registrationPublicInputs, registrationTypedData, resolveInstanceAddress, selectCreditDrawCircuit, selectTransactCapacity, shieldFundingRequestHash, topUpCreditBaseInputs, topUpCreditPublicInputs, topUpCreditRequestHash, transactFundingRequestHash, transactPublicInputs, transactUserPublicInputs, uint, validateCancelCreditRequest, validateCreateCreditRequest, validateCreditDrawRequest, validateFundingSubmission, validateShieldRequest, validateTopUpCreditRequest, verifyCreditCommitment, verifyNoteCommitment, word };
+export { type AddressRegistration, AddressRegistry, type AddressRegistryOptions, type AggregateMemberInput, type BuildCancelCreditCalldataParams, type BuildCreateCreditCalldataParams, type BuildCreditDrawCalldataParams, type BuildShieldCalldataParams, type BuildTopUpCreditCalldataParams, type BuildTransactAggregateCalldataParams, type BuildTransactCalldataParams, type BuildWithdrawalCalldataParams, CREATE_CREDIT_FIELDS, CREDIT_DRAW_CAPACITIES, type CancelCreditWitnessParams, type CanonicalReceipt, type ChainReader, type CreateCreditWitnessParams, type CreditMembership, type DrawCreditWitnessParams, EMPTY_FUNDING, EMPTY_PERMIT, FIELD_MODULUS, type FactoryReader, type FundingInput, type NoteMembership, Protocol, type ProtocolLog, type ProtocolOptions, type RegistrationCalldata, RegistrationOperation, type RegistrationOptions, type RegistrationPreparation, type RegistrationStatus, type RegistryContext, type RegistryReadClient, type RegistryReader, type RegistryReceivingKeys, TRANSACT_CAPACITIES, TokenProtocol, type TokenProtocolOptions, type TopUpCreditWitnessParams, type TransactCapacity, type TransactRequestParams, type TransactWitnessParams, type TransactionCall, type TransactionContext, type VerifyCreditCommitmentParams, type VerifyNoteCommitmentParams, WitnessBuilder, ZERO_ADDRESS, ZERO_WORD, aggregateMemberRequestHash, aggregatePublicInputs, buildCancelCreditCalldata, buildCreateCreditCalldata, buildCreditDrawCalldata, buildRegistrationCalldata, buildShieldCalldata, buildTopUpCreditCalldata, buildTransactAggregateCalldata, buildTransactCalldata, buildWithdrawalCalldata, cancelCreditBaseInputs, cancelCreditPublicInputs, cancelCreditRequestHash, checkDeadline, createCreditBaseInputs, createCreditPublicInputs, createCreditRequestHash, createRegistryReceivingKeyLookup, creditDrawBaseInputs, creditDrawPublicInputs, deliveriesHash, dense, encodeAggregateFundingTypedData, encodeCancelCreditTypedData, encodeCreateCreditFundingTypedData, encodeCreateCreditTypedData, encodeCreditDrawTypedData, encodeCreditProof, encodeShieldFundingTypedData, encodeTopUpCreditFundingTypedData, encodeTopUpCreditTypedData, encodeTransactFundingTypedData, encodeTransactTypedData, envelope, field, fundingFields, getEIP712Domain, known, normalizeContext, normalizeDelivery, normalizeFunding, normalizeSources, normalizeTransactRequest, notes, pad, registrationDigest, registrationTypedData, resolveInstanceAddress, selectCreditDrawCircuit, selectTransactCapacity, shieldFundingRequestHash, topUpCreditBaseInputs, topUpCreditPublicInputs, topUpCreditRequestHash, transactFundingRequestHash, transactPublicInputs, transactUserPublicInputs, uint, validateCancelCreditRequest, validateCreateCreditRequest, validateCreditDrawRequest, validateFundingSubmission, validateShieldRequest, validateTopUpCreditRequest, verifyCreditCommitment, verifyNoteCommitment, word };