npm - @invisi-labs/protocol - Versions diffs - 1.1.6 → 1.1.7 - Mend

@invisi-labs/protocol 1.1.6 → 1.1.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11) hide show

package/dist/contracts.d.cts +1 -1
package/dist/contracts.d.ts +1 -1
package/dist/index.cjs +6566 -6496
package/dist/index.cjs.map +1 -1
package/dist/index.d.cts +397 -398
package/dist/index.d.ts +397 -398
package/dist/index.js +2228 -2153
package/dist/index.js.map +1 -1
package/dist/{types-BmUlasOg.d.cts → types-Bvakbfeb.d.cts} +1 -1
package/dist/{types-BmUlasOg.d.ts → types-Bvakbfeb.d.ts} +1 -1
package/package.json +4 -4

package/dist/index.js CHANGED Viewed

@@ -4,623 +4,145 @@ import {
   invisiProtocolAbi
 } from "./chunk-BYJ4LXCJ.js";
-// src/AddressRegistry.ts
-import { getAddress as getAddress2, keccak256 } from "ethers";
+// src/authorization/WitnessContext.ts
 import {
-  MissingCapabilityError,
-  ReceivingAddress as ReceivingAddress3
+  computeCreditCommitment,
+  computeCreditSharedKeyHash,
+  computeNoteCommitment,
+  computeNoteIdentity,
+  computeNoteNullifier,
+  computeWalletAuthorizationDigest,
+  poseidonHash,
+  verifyWalletAuthorization
 } from "@invisi-labs/core";
-// src/RegistrationOperation.ts
-import { hexlify as hexlify2, Interface as Interface2, getBytes as getBytes2, verifyTypedData } from "ethers";
-import { ReceivingAddress as ReceivingAddress2, createSigningRequest } from "@invisi-labs/core";
+// src/authorization/common.ts
+import {
+  normalizeCreditPolicy
+} from "@invisi-labs/core";
+import {
+  LocalWitness
+} from "@invisi-labs/prover";
-// src/registry.ts
+// src/validation.ts
+import { MAX_CIPHERTEXT_BYTES } from "@invisi-labs/core";
 import {
-  Contract,
-  Interface,
+  AbiCoder,
+  dataLength,
   getAddress,
-  getBytes,
-  hexlify,
   isHexString,
-  TypedDataEncoder,
+  keccak256,
+  ParamType,
   toBeHex
 } from "ethers";
-import { ReceivingAddress, decodeAddress } from "@invisi-labs/core";
-var MAX_NONCE = (1n << 64n) - 1n;
-function uint64(value, name) {
-  if (typeof value !== "bigint" || value < 0n || value > MAX_NONCE)
-    throw new RangeError(`${name} must be uint64`);
-  return value;
+var FIELD_MODULUS = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
+var ZERO_ADDRESS = "0x0000000000000000000000000000000000000000";
+var ZERO_WORD = toBeHex(0n, 32);
+var EMPTY_PERMIT = {
+  deadline: 0n,
+  v: 0,
+  r: ZERO_WORD,
+  s: ZERO_WORD
+};
+var EMPTY_FUNDING = {
+  payer: ZERO_ADDRESS,
+  amount: 0n,
+  sigNonce: 0n,
+  deadline: 0n,
+  signature: "0x",
+  permit: EMPTY_PERMIT
+};
+function uint(v, bits, name = "value") {
+  if (typeof v !== "bigint" && typeof v !== "number" && typeof v !== "string" || typeof v === "number" && !Number.isSafeInteger(v))
+    throw new Error(`${name} must be an integer`);
+  const n = BigInt(v);
+  if (n < 0n || n >= 1n << BigInt(bits)) throw new Error(`${name} exceeds u${bits}`);
+  return n;
 }
-function hexBytes(value, length) {
-  if (typeof value !== "string" || !isHexString(value) || value.length !== 2 + length * 2)
-    throw new Error(`Expected ${length} hexadecimal bytes`);
-  return getBytes(value);
+function field(v, name = "field") {
+  const n = uint(v, 256, name);
+  if (n >= FIELD_MODULUS) throw new Error(`${name} is noncanonical field`);
+  return n;
 }
-function normalizeKeys(ownerAddress, keys) {
-  const decoded = decodeAddress(
-    ReceivingAddress.from({
-      ownerAddress,
-      viewingPublicKey: hexBytes(keys.viewingPublicKey, 33),
-      clueKey: hexBytes(keys.clueKey, 32)
-    }).toString()
-  );
-  if (decoded.kind !== "long") throw new Error("Expected full receiving address");
-  return {
-    viewingPublicKey: hexlify(decoded.viewingPublicKey),
-    clueKey: hexlify(decoded.clueKey)
-  };
+var word = (v) => toBeHex(typeof v === "bigint" ? v : BigInt(v), 32);
+function dense(v, name) {
+  if (!Array.isArray(v)) throw new Error(`${name} must be array`);
+  for (let i = 0; i < v.length; i++)
+    if (!Object.hasOwn(v, i) || v[i] === void 0 || v[i] === null)
+      throw new Error(`${name} has missing or sparse entries`);
+  return v;
 }
-function normalize(context, registration, options) {
-  uint64(context.chainId, "chainId");
-  const registryAddress = getAddress(context.registryAddress);
-  if (BigInt(registryAddress) === 0n) throw new Error("Registry address must be nonzero");
-  if (!/^0x(?:[0-9a-fA-F]{40}|[0-9a-fA-F]{64})$/.test(registration.ownerAddress))
-    throw new Error("Wallet identity must be an EVM owner or padded bytes32");
-  const ownerAddress = decodeAddress(
-    ReceivingAddress.fromIdentity(
-      toBeHex(BigInt(registration.ownerAddress), 20)
-    ).toString()
-  ).ownerAddress;
-  const keys = normalizeKeys(ownerAddress, registration.keys);
-  const nonce = uint64(registration.nonce, "nonce"), deadline = uint64(registration.deadline, "deadline");
-  if (nonce === MAX_NONCE) throw new Error("Registry nonce exhausted");
-  if (options.update !== void 0 && typeof options.update !== "boolean")
-    throw new TypeError("update must be boolean");
-  if (!options.update && nonce !== 0n)
-    throw new Error("Initial registration requires nonce zero");
-  if (options.expectedNonce !== void 0 && uint64(options.expectedNonce, "expectedNonce") !== nonce)
-    throw new Error("Registry nonce mismatch");
-  if (context.now !== void 0 && deadline < uint64(context.now, "now"))
-    throw new Error("Registration expired");
-  return { registryAddress, registration: { ownerAddress, keys, nonce, deadline } };
+function known(v, keys, name = "params") {
+  if (!v || typeof v !== "object" || Array.isArray(v) || Object.keys(v).some((k) => !keys.includes(k)))
+    throw new Error(`${name} has unsupported fields`);
 }
-function registrationTypedData(context, registration, options = {}) {
-  const { registryAddress, registration: r } = normalize(context, registration, options);
-  const primaryType = options.update ? "UpdateReceivingKeys" : "RegisterReceivingKeys";
-  return {
-    domain: {
-      name: "InvisiAddressRegistry",
-      version: "1",
-      chainId: context.chainId,
-      verifyingContract: registryAddress
-    },
-    primaryType,
-    types: {
-      [primaryType]: [
-        { name: "walletIdentity", type: "bytes32" },
-        { name: "viewingPublicKey", type: "bytes" },
-        { name: "clueKey", type: "bytes32" },
-        { name: "nonce", type: "uint64" },
-        { name: "deadline", type: "uint64" }
-      ]
-    },
-    message: {
-      walletIdentity: toBeHex(BigInt(r.ownerAddress), 32),
-      ...r.keys,
-      nonce: r.nonce,
-      deadline: r.deadline
-    }
-  };
+function notes(v, name) {
+  const r = dense(v, name).map((v2) => word(field(v2, name)));
+  if (r.some((v2) => BigInt(v2) === 0n) || new Set(r).size !== r.length)
+    throw new Error(`duplicate or zero ${name}`);
+  return r;
 }
-function registrationDigest(context, registration, options = {}) {
-  const typed = registrationTypedData(context, registration, options);
-  return TypedDataEncoder.hash(typed.domain, typed.types, typed.message);
+function envelope(v, length, version, maximum = length) {
+  if (!isHexString(v) || !/^0x(?:[a-fA-F0-9]{2})*$/.test(v) || dataLength(v) < length || dataLength(v) > maximum)
+    throw new Error(`ciphertext must be ${length} bytes`);
+  if (version !== void 0 && Number.parseInt(v.slice(2, 4), 16) !== version)
+    throw new Error("unsupported ciphertext envelope version");
+  return v;
 }
-function buildRegistrationCalldata(context, registration, signature, options = {}) {
-  const normalized = normalize(context, registration, options);
-  if (typeof signature !== "string" || !isHexString(signature) || signature.length % 2 !== 0)
-    throw new Error("Registration signature must be hexadecimal bytes");
+function normalizeContext(c) {
   return {
-    to: normalized.registryAddress,
-    value: 0n,
-    callData: new Interface(invisiAddressRegistryAbi).encodeFunctionData(
-      options.update ? "updateKeys" : "registerKeys",
-      [
-        {
-          // The registry wire schema retains its deployed EIP-712/ABI field name.
-          walletIdentity: toBeHex(BigInt(normalized.registration.ownerAddress), 32),
-          keys: normalized.registration.keys,
-          nonce: normalized.registration.nonce,
-          deadline: normalized.registration.deadline
-        },
-        signature
-      ]
-    )
+    ...c,
+    chainId: uint(c.chainId, 64, "chainId"),
+    protocolAddress: getAddress(c.protocolAddress),
+    tokenAddress: getAddress(c.tokenAddress)
   };
 }
-function createRegistryReceivingKeyLookup(client, registryAddress) {
-  const address = getAddress(registryAddress);
-  if (BigInt(address) === 0n) throw new Error("Registry address must be nonzero");
-  return async (ownerAddress) => {
-    const identity = decodeAddress(
-      ReceivingAddress.fromIdentity(ownerAddress).toString()
-    ).ownerAddress;
-    const [keys, nonce] = await new Contract(
-      address,
-      invisiAddressRegistryAbi,
-      client
-    ).getFunction("receivingKeysOf")(toBeHex(BigInt(identity), 32));
-    uint64(nonce, "registry nonce");
-    const normalized = normalizeKeys(identity, keys);
-    return {
-      viewingPublicKey: getBytes(normalized.viewingPublicKey),
-      clueKey: getBytes(normalized.clueKey)
-    };
-  };
+function checkDeadline(c, value) {
+  const n = uint(value, 64, "deadline");
+  if (c.now !== void 0 && n < uint(c.now, 64, "now")) throw new Error("deadline has expired");
+  return n;
 }
-// src/RegistrationOperation.ts
-function check(ok, message) {
-  if (!ok) {
-    throw new Error(message);
-  }
+function normalizeSources(sources, inputCount, capacity) {
+  dense(sources, "sources");
+  if (inputCount < 0 || inputCount > capacity || sources.length > inputCount || (inputCount === 0 ? sources.length !== 0 : sources.length === 0))
+    throw new Error("source count must be 1..inputCount, or empty for zero inputs");
+  let previous = 0n;
+  return sources.map((s) => {
+    known(s, ["treeId", "merkleRoot"], "source");
+    const treeId = uint(s.treeId, 64, "treeId"), merkleRoot = word(field(s.merkleRoot, "merkleRoot"));
+    if (treeId === 0n || treeId <= previous || BigInt(merkleRoot) === 0n)
+      throw new Error("sources must have positive roots and strictly ascending tree IDs");
+    previous = treeId;
+    return { treeId, merkleRoot };
+  });
 }
-var RegistrationOperation = class _RegistrationOperation {
-  #registry;
-  #runtime;
-  #plan;
-  #signature;
-  #hash;
-  #anchor;
-  status;
-  constructor(registry, runtime, plan, status, signature, hash, anchor) {
-    this.#registry = registry;
-    this.#runtime = { ...runtime };
-    this.#plan = structuredClone(plan);
-    this.status = status;
-    this.#signature = signature;
-    this.#hash = hash;
-    this.#anchor = anchor ? { ...anchor } : void 0;
-    Object.freeze(this);
+var pad = (v, n) => [
+  ...v,
+  ...Array(n - v.length).fill(0n)
+];
+function normalizeOpaqueDelivery(value, options = {}) {
+  known(value, ["ciphertext", "clue"], "delivery");
+  if (options.empty) {
+    if (value.ciphertext !== "0x" || value.clue !== "0x")
+      throw new Error("absent output requires an empty delivery");
+    return { ciphertext: "0x", clue: "0x" };
   }
-  static async prepare(registry, options) {
-    const runtime = { ...options };
-    const update = options.update ?? false;
-    check(typeof update === "boolean", "update must be boolean");
-    await registry.validateDeployment(runtime.reader);
-    const block = await runtime.reader.getBlock(await runtime.reader.getLatestBlockNumber());
-    const context = { ...registry.context, now: block.timestamp };
-    const nonce = await runtime.reader.getRegistryNonce(
-      context,
-      runtime.wallet.ownerAddress,
-      block
-    );
-    check(
-      typeof nonce === "bigint" && nonce >= 0n && nonce < (1n << 64n) - 1n,
-      "invalid or exhausted registry nonce"
-    );
-    check(
-      update ? nonce > 0n : nonce === 0n,
-      update ? "wallet is not registered" : "wallet is already registered; prepare an update"
-    );
-    const address = ReceivingAddress2.parse(await registry.resolve(runtime.wallet.getAddress()));
-    const keys = address.getReceivingKeys();
-    const registration = {
-      ownerAddress: runtime.wallet.ownerAddress,
-      keys: {
-        viewingPublicKey: hexlify2(keys.viewingPublicKey),
-        clueKey: hexlify2(keys.clueKey)
-      },
-      nonce,
-      deadline: options.deadline ?? block.timestamp + 300n
-    };
-    registrationTypedData(context, registration, { update, expectedNonce: nonce });
-    check(
-      (await runtime.reader.getBlock(block.number)).hash === block.hash,
-      "canonical registry block changed while preparing"
-    );
-    return new _RegistrationOperation(
-      registry,
-      runtime,
-      { id: crypto.randomUUID(), context, registration, update },
-      "prepared"
-    );
-  }
-  get id() {
-    return this.#plan.id;
-  }
-  preview() {
-    return {
-      id: this.id,
-      status: this.status,
-      chainId: this.#plan.context.chainId,
-      registryAddress: this.#plan.context.registryAddress,
-      ...structuredClone(this.#plan.registration),
-      update: this.#plan.update
-    };
-  }
-  /** Export portable EIP-712 data for external signing. */
-  async exportRegistrationAuthorization(options = {}) {
-    check(this.status === "prepared", "registry operation is not awaiting authorization");
-    options.signal?.throwIfAborted();
-    await this.validateFreshness();
-    options.signal?.throwIfAborted();
-    return createSigningRequest(this.typedData());
-  }
-  /** Validate and attach an independently obtained EOA or ERC-1271 signature. */
-  async withSignature(signature, options = {}) {
-    check(this.status === "prepared", "registry operation is not awaiting authorization");
-    options.signal?.throwIfAborted();
-    await this.validateFreshness();
-    options.signal?.throwIfAborted();
-    check(
-      /^0x(?:[a-fA-F0-9]{2})+$/.test(signature),
-      "registry signature must be nonempty hexadecimal bytes"
-    );
-    const p = this.#plan;
-    const owner = p.registration.ownerAddress;
-    let valid = false;
-    try {
-      const bytes = getBytes2(signature);
-      const typed = this.typedData();
-      valid = bytes.length === 65 && (bytes[64] === 27 || bytes[64] === 28) && BigInt(verifyTypedData(typed.domain, typed.types, typed.message, signature)) === BigInt(owner);
-    } catch {
-      valid = false;
-    }
-    if (!valid) {
-      const code = await this.#runtime.reader.getCode(owner);
-      check(/^0x(?:[a-fA-F0-9]{2})*$/.test(code), "invalid owner contract code");
-      check(code !== "0x", "invalid EOA registry signature");
-      const verify = this.#runtime.reader.isValidRegistrationSignature;
-      check(verify, "ERC-1271 registry signature verification capability is missing");
-      check(
-        await verify.call(
-          this.#runtime.reader,
-          owner,
-          registrationDigest(p.context, p.registration, { update: p.update }),
-          signature
-        ),
-        "invalid ERC-1271 registry signature"
-      );
-    }
-    options.signal?.throwIfAborted();
-    return new _RegistrationOperation(
-      this.#registry,
-      this.#runtime,
-      this.#plan,
-      "ready",
-      signature
-    );
-  }
-  /** Empty signatures require the transaction sender to be the wallet owner. */
-  async authorizeDirect() {
-    check(this.status === "prepared", "registry operation is not awaiting authorization");
-    await this.validateFreshness();
-    return new _RegistrationOperation(this.#registry, this.#runtime, this.#plan, "ready", "0x");
-  }
-  typedData() {
-    const p = this.#plan;
-    return registrationTypedData(p.context, p.registration, {
-      update: p.update,
-      expectedNonce: p.registration.nonce
-    });
-  }
-  call() {
-    check(this.#signature !== void 0, "registry signature is missing");
-    const p = this.#plan;
-    const result = buildRegistrationCalldata(p.context, p.registration, this.#signature, {
-      update: p.update,
-      expectedNonce: p.registration.nonce
-    });
-    return { to: result.to, data: result.callData, value: result.value };
-  }
-  async exportTransaction() {
-    check(
-      this.#signature !== void 0 && this.status !== "prepared",
-      "registry operation is not ready"
-    );
-    await this.validateFreshness();
-    return this.call();
-  }
-  async validateFreshness() {
-    await this.#registry.validateDeployment(this.#runtime.reader);
-    const block = await this.#runtime.reader.getBlock(
-      await this.#runtime.reader.getLatestBlockNumber()
-    );
-    const p = this.#plan;
-    check(block.timestamp <= p.registration.deadline, "registry operation has expired");
-    check(
-      await this.#runtime.reader.getRegistryNonce(
-        p.context,
-        p.registration.ownerAddress,
-        block
-      ) === p.registration.nonce,
-      "registry nonce changed; prepare again"
-    );
-    check(
-      (await this.#runtime.reader.getBlock(block.number)).hash === block.hash,
-      "canonical registry block changed during authorization"
-    );
-  }
-  /** Associate a signed/broadcast transaction; ethers owns sending and receipt waiting. */
-  trackTransaction(transactionHash) {
-    check(/^0x[a-fA-F0-9]{64}$/.test(transactionHash), "invalid registry transaction hash");
-    check(
-      this.#signature !== void 0 && ["ready", "uncertain"].includes(this.status),
-      "registry operation is not ready"
-    );
-    return new _RegistrationOperation(
-      this.#registry,
-      this.#runtime,
-      this.#plan,
-      "uncertain",
-      this.#signature,
-      transactionHash
-    );
-  }
-  async reconcile(options = {}) {
-    options.signal?.throwIfAborted();
-    const { reader } = this.#runtime;
-    const p = this.#plan;
-    await this.#registry.validateDeployment(reader);
-    if (this.#anchor && (await reader.getBlock(this.#anchor.number)).hash !== this.#anchor.hash) {
-      return new _RegistrationOperation(
-        this.#registry,
-        this.#runtime,
-        p,
-        "reorged",
-        this.#signature,
-        this.#hash
-      );
-    }
-    const hash = options.transactionHash ?? this.#hash;
-    const receipt = hash ? await reader.getReceipt(hash) : null;
-    if (receipt) {
-      check(
-        receipt.transactionHash === hash && (await reader.getBlock(receipt.block.number)).hash === receipt.block.hash,
-        "registry receipt is not canonical"
-      );
-      const transaction = await reader.getTransaction(hash);
-      const call = this.call();
-      check(
-        transaction && transaction.transactionHash === hash && transaction.to.toLowerCase() === call.to.toLowerCase() && transaction.data.toLowerCase() === call.data.toLowerCase() && transaction.value === 0n && (this.#signature !== "0x" || BigInt(transaction.from) === BigInt(p.registration.ownerAddress)),
-        "registry transaction differs from frozen request"
-      );
-      check(
-        receipt.status === "success" || receipt.status === "reverted",
-        "registry execution status is missing"
-      );
-      if (receipt.status === "success") {
-        const found = receipt.logs.some((log) => {
-          if (log.address.toLowerCase() !== p.context.registryAddress.toLowerCase() || log.transactionHash !== hash) {
-            return false;
-          }
-          try {
-            const event = ((decoded) => ({
-              eventName: decoded.name,
-              args: decoded.args.toObject()
-            }))(
-              new Interface2(invisiAddressRegistryAbi).parseLog({
-                data: log.data,
-                topics: log.topics
-              })
-            );
-            return event.eventName === "ReceivingKeysSet" && BigInt(event.args.walletIdentity) === BigInt(p.registration.ownerAddress) && event.args.viewingPublicKey.toLowerCase() === p.registration.keys.viewingPublicKey.toLowerCase() && event.args.clueKey.toLowerCase() === p.registration.keys.clueKey.toLowerCase() && event.args.nextNonce === p.registration.nonce + 1n;
-          } catch {
-            return false;
-          }
-        });
-        check(found, "registry receipt has no matching key update event");
-        check(
-          (await reader.getBlock(receipt.block.number)).hash === receipt.block.hash,
-          "registry block changed during confirmation"
-        );
-        options.signal?.throwIfAborted();
-        return new _RegistrationOperation(
-          this.#registry,
-          this.#runtime,
-          p,
-          "confirmed",
-          this.#signature,
-          hash,
-          receipt.block
-        );
-      }
-    }
-    const head = await reader.getBlock(await reader.getLatestBlockNumber());
-    const nonce = await reader.getRegistryNonce(p.context, p.registration.ownerAddress, head);
-    check(
-      (await reader.getBlock(head.number)).hash === head.hash,
-      "canonical registry block changed during reconciliation"
-    );
-    return new _RegistrationOperation(
-      this.#registry,
-      this.#runtime,
-      p,
-      head.timestamp > p.registration.deadline ? "expired" : nonce !== p.registration.nonce ? "failed" : "uncertain",
-      this.#signature,
-      hash
-    );
-  }
-  toJSON() {
-    return {
-      id: this.id,
-      kind: this.#plan.update ? "update-receiving-keys" : "register-receiving-keys",
-      status: this.status
-    };
-  }
-  [/* @__PURE__ */ Symbol.for("nodejs.util.inspect.custom")]() {
-    return this.toJSON();
-  }
-};
-// src/AddressRegistry.ts
-var AddressRegistry = class {
-  context;
-  #lookup;
-  expectedRuntimeCodeHash;
-  constructor(context, options = {}) {
-    if (typeof context.chainId !== "bigint" || context.chainId < 0n || context.chainId >= 1n << 64n || BigInt(getAddress2(context.registryAddress)) === 0n) {
-      throw new Error("invalid registry context");
-    }
-    this.context = Object.freeze({
-      ...context,
-      registryAddress: getAddress2(context.registryAddress)
-    });
-    this.#lookup = options.lookup;
-    this.expectedRuntimeCodeHash = options.expectedRuntimeCodeHash?.toLowerCase();
-    if (this.expectedRuntimeCodeHash && !/^0x[0-9a-f]{64}$/.test(this.expectedRuntimeCodeHash)) {
-      throw new Error("invalid registry runtime profile");
-    }
-    Object.freeze(this);
-  }
-  async validateDeployment(reader) {
-    if (!this.expectedRuntimeCodeHash) {
-      throw new MissingCapabilityError("trusted registry deployment profile");
-    }
-    if (await reader.getChainId() !== this.context.chainId) {
-      throw new Error("registry chain mismatch");
-    }
-    const code = await reader.getCode(this.context.registryAddress);
-    if (!/^0x(?:[0-9a-fA-F]{2})+$/.test(code) || keccak256(code) !== this.expectedRuntimeCodeHash) {
-      throw new Error("registry runtime profile mismatch");
-    }
-  }
-  prepareRegistration(options) {
-    return RegistrationOperation.prepare(this, options);
-  }
-  async resolve(address) {
-    const receiving = ReceivingAddress3.parse(address);
-    if (receiving.kind === "short" && !this.#lookup) {
-      throw new MissingCapabilityError("registry reader");
-    }
-    return (await receiving.resolve(this.#lookup)).toString();
-  }
-  typedData(registration, options) {
-    return registrationTypedData(this.context, registration, options);
-  }
-  digest(registration, options) {
-    return registrationDigest(this.context, registration, options);
-  }
-  buildCall(registration, signature, options) {
-    return buildRegistrationCalldata(this.context, registration, signature, options);
-  }
-};
-// src/fee.ts
-import { getAddress as getAddress4 } from "ethers";
-// src/validation.ts
-import { MAX_CIPHERTEXT_BYTES } from "@invisi-labs/core";
-import {
-  AbiCoder,
-  dataLength,
-  getAddress as getAddress3,
-  isHexString as isHexString2,
-  keccak256 as keccak2562,
-  ParamType,
-  toBeHex as toBeHex2
-} from "ethers";
-var FIELD_MODULUS = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
-var ZERO_ADDRESS = "0x0000000000000000000000000000000000000000";
-var ZERO_WORD = toBeHex2(0n, 32);
-var EMPTY_PERMIT = {
-  deadline: 0n,
-  v: 0,
-  r: ZERO_WORD,
-  s: ZERO_WORD
-};
-var EMPTY_FUNDING = {
-  payer: ZERO_ADDRESS,
-  amount: 0n,
-  sigNonce: 0n,
-  deadline: 0n,
-  signature: "0x",
-  permit: EMPTY_PERMIT
-};
-function uint(v, bits, name = "value") {
-  if (typeof v !== "bigint" && typeof v !== "number" && typeof v !== "string" || typeof v === "number" && !Number.isSafeInteger(v))
-    throw new Error(`${name} must be an integer`);
-  const n = BigInt(v);
-  if (n < 0n || n >= 1n << BigInt(bits)) throw new Error(`${name} exceeds u${bits}`);
-  return n;
-}
-function field(v, name = "field") {
-  const n = uint(v, 256, name);
-  if (n >= FIELD_MODULUS) throw new Error(`${name} is noncanonical field`);
-  return n;
-}
-var word = (v) => toBeHex2(typeof v === "bigint" ? v : BigInt(v), 32);
-function dense(v, name) {
-  if (!Array.isArray(v)) throw new Error(`${name} must be array`);
-  for (let i = 0; i < v.length; i++)
-    if (!Object.hasOwn(v, i) || v[i] === void 0 || v[i] === null)
-      throw new Error(`${name} has missing or sparse entries`);
-  return v;
-}
-function known(v, keys, name = "params") {
-  if (!v || typeof v !== "object" || Array.isArray(v) || Object.keys(v).some((k) => !keys.includes(k)))
-    throw new Error(`${name} has unsupported fields`);
-}
-function notes(v, name) {
-  const r = dense(v, name).map((v2) => word(field(v2, name)));
-  if (r.some((v2) => BigInt(v2) === 0n) || new Set(r).size !== r.length)
-    throw new Error(`duplicate or zero ${name}`);
-  return r;
-}
-function envelope(v, length, version, maximum = length) {
-  if (!isHexString2(v) || !/^0x(?:[a-fA-F0-9]{2})*$/.test(v) || dataLength(v) < length || dataLength(v) > maximum)
-    throw new Error(`ciphertext must be ${length} bytes`);
-  if (version !== void 0 && Number.parseInt(v.slice(2, 4), 16) !== version)
-    throw new Error("unsupported ciphertext envelope version");
-  return v;
-}
-function normalizeContext(c) {
-  return {
-    ...c,
-    chainId: uint(c.chainId, 64, "chainId"),
-    protocolAddress: getAddress3(c.protocolAddress),
-    tokenAddress: getAddress3(c.tokenAddress)
-  };
-}
-function checkDeadline(c, value) {
-  const n = uint(value, 64, "deadline");
-  if (c.now !== void 0 && n < uint(c.now, 64, "now")) throw new Error("deadline has expired");
-  return n;
-}
-function normalizeSources(sources, inputCount, capacity) {
-  dense(sources, "sources");
-  if (inputCount < 0 || inputCount > capacity || sources.length > inputCount || (inputCount === 0 ? sources.length !== 0 : sources.length === 0))
-    throw new Error("source count must be 1..inputCount, or empty for zero inputs");
-  let previous = 0n;
-  return sources.map((s) => {
-    known(s, ["treeId", "merkleRoot"], "source");
-    const treeId = uint(s.treeId, 64, "treeId"), merkleRoot = word(field(s.merkleRoot, "merkleRoot"));
-    if (treeId === 0n || treeId <= previous || BigInt(merkleRoot) === 0n)
-      throw new Error("sources must have positive roots and strictly ascending tree IDs");
-    previous = treeId;
-    return { treeId, merkleRoot };
-  });
-}
-var pad = (v, n) => [
-  ...v,
-  ...Array(n - v.length).fill(0n)
-];
-function normalizeOpaqueDelivery(value, options = {}) {
-  known(value, ["ciphertext", "clue"], "delivery");
-  if (options.empty) {
-    if (value.ciphertext !== "0x" || value.clue !== "0x")
-      throw new Error("absent output requires an empty delivery");
-    return { ciphertext: "0x", clue: "0x" };
-  }
-  if (options.allowEmpty && value.ciphertext === "0x" && value.clue === "0x")
-    return { ciphertext: "0x", clue: "0x" };
-  const ciphertext = envelope(value.ciphertext, 1, void 0, MAX_CIPHERTEXT_BYTES);
-  const clue = envelope(value.clue, 68);
-  if (clue.slice(130, 132).toLowerCase() !== "18") throw new Error("clue precision must be 24");
-  return { ciphertext, clue };
-}
-var deliveriesHash = (v) => keccak2562(
-  AbiCoder.defaultAbiCoder().encode(
-    [
-      {
-        type: "tuple[]",
-        components: [
-          { name: "ciphertext", type: "bytes" },
-          { name: "clue", type: "bytes" }
-        ]
+  if (options.allowEmpty && value.ciphertext === "0x" && value.clue === "0x")
+    return { ciphertext: "0x", clue: "0x" };
+  const ciphertext = envelope(value.ciphertext, 1, void 0, MAX_CIPHERTEXT_BYTES);
+  const clue = envelope(value.clue, 68);
+  if (clue.slice(130, 132).toLowerCase() !== "18") throw new Error("clue precision must be 24");
+  return { ciphertext, clue };
+}
+var deliveriesHash = (v) => keccak256(
+  AbiCoder.defaultAbiCoder().encode(
+    [
+      {
+        type: "tuple[]",
+        components: [
+          { name: "ciphertext", type: "bytes" },
+          { name: "clue", type: "bytes" }
+        ]
       }
     ].map((parameter) => ParamType.from(parameter)),
     [dense(v, "deliveries")]
@@ -628,34 +150,34 @@ var deliveriesHash = (v) => keccak2562(
 );
 function normalizeFunding(input = {}) {
   const f = { ...EMPTY_FUNDING, ...input };
-  getAddress3(f.payer);
+  getAddress(f.payer);
   uint(f.amount, 128, "depositAmount");
   uint(f.sigNonce, 256, "sigNonce");
   uint(f.deadline, 256, "funding deadline");
-  if (!isHexString2(f.signature) || !/^0x(?:[a-fA-F0-9]{2})*$/.test(f.signature))
+  if (!isHexString(f.signature) || !/^0x(?:[a-fA-F0-9]{2})*$/.test(f.signature))
     throw new Error("invalid signature bytes");
   const p = f.permit;
   uint(p.deadline, 256);
   uint(p.v, 8);
   for (const v of [p.r, p.s])
-    if (!isHexString2(v) || dataLength(v) !== 32) throw new Error("permit r/s must be bytes32");
+    if (!isHexString(v) || dataLength(v) !== 32) throw new Error("permit r/s must be bytes32");
   if (f.amount === 0n !== (BigInt(f.payer) === 0n))
     throw new Error("deposit amount and payer must both be zero or positive");
   if (f.amount === 0n && (f.sigNonce !== 0n || f.deadline !== 0n || f.signature !== "0x" || p.deadline !== 0n || p.v !== 0 || BigInt(p.r) !== 0n || BigInt(p.s) !== 0n))
     throw new Error("zero funding must be entirely empty");
-  return { ...f, payer: getAddress3(f.payer) };
+  return { ...f, payer: getAddress(f.payer) };
 }
 function validateFundingSubmission(f, caller, now) {
   if (f.signature !== "0x" && now !== void 0 && uint(now, 64, "now") > f.deadline)
     throw new Error("funding authorization has expired");
-  if (f.signature === "0x" && (f.sigNonce !== 0n || f.deadline !== 0n || caller !== void 0 && f.amount > 0n && getAddress3(caller) !== f.payer))
+  if (f.signature === "0x" && (f.sigNonce !== 0n || f.deadline !== 0n || caller !== void 0 && f.amount > 0n && getAddress(caller) !== f.payer))
     throw new Error("direct funding requires payer caller and zero nonce/deadline");
 }
 var getEIP712Domain = (c) => ({
   name: "InvisibleProtocol",
   version: "1",
   chainId: uint(c.chainId, 64),
-  verifyingContract: getAddress3(c.protocolAddress)
+  verifyingContract: getAddress(c.protocolAddress)
 });
 var fundingFields = [
   { name: "requestHash", type: "bytes32" },
@@ -665,1075 +187,6 @@ var fundingFields = [
   { name: "deadline", type: "uint256" }
 ];
-// src/fee.ts
-function normalizeFee(p) {
-  const feeRecipient = getAddress4(p.feeRecipient ?? ZERO_ADDRESS);
-  const feeAmount = uint(p.feeAmount ?? 0n, 128, "feeAmount");
-  if (BigInt(feeRecipient) === 0n !== (feeAmount === 0n))
-    throw new Error("invalid fee context");
-  return { feeRecipient, feeAmount };
-}
-// src/credit-create.ts
-import {
-  AbiCoder as AbiCoder2,
-  dataLength as dataLength2,
-  getAddress as getAddress5,
-  Interface as Interface3,
-  isHexString as isHexString3,
-  keccak256 as keccak2563,
-  ParamType as ParamType2
-} from "ethers";
-import { computeWalletAuthorizationDigest, walletAuthorizationTypedData } from "@invisi-labs/core";
-var creationTuple = [
-  "(address token,(uint256 treeId,bytes32 merkleRoot)[] sources,bytes32[] nullifiers,bytes32 creditCommitment,bytes32 changeCommitment,address owner,uint256 expiry,uint256 deadline,address feeRecipient,uint256 feeAmount)"
-][0];
-var CREATE_CREDIT_FIELDS = [
-  "token",
-  "sources",
-  "nullifiers",
-  "creditCommitment",
-  "changeCommitment",
-  "owner",
-  "expiry",
-  "deadline",
-  "feeRecipient",
-  "feeAmount"
-];
-function validateCreateCreditRequest(c, p, cs, funding = {}) {
-  known(p, CREATE_CREDIT_FIELDS);
-  if (getAddress5(p.token) !== getAddress5(c.tokenAddress))
-    throw new Error("request token mismatch");
-  const ctx = normalizeContext(c), ns = notes(p.nullifiers, "nullifiers"), sources = normalizeSources(p.sources, ns.length, 10), creditCommitment = word(field(p.creditCommitment)), changeCommitment = word(field(p.changeCommitment)), owner = getAddress5(p.owner), expiry = uint(p.expiry, 64, "expiry"), deadline = checkDeadline(c, p.deadline), f = normalizeFunding(funding);
-  if (BigInt(creditCommitment) === 0n || creditCommitment === changeCommitment)
-    throw new Error("zero or duplicate commitment");
-  if (BigInt(owner) === 0n || expiry === 0n || c.now !== void 0 && expiry <= c.now)
-    throw new Error("owner must be nonzero and expiry future");
-  if (dense(cs, "deliveries").length !== 3) throw new Error("deliveries count mismatch");
-  const deliveries = cs.map(
-    (v, i) => normalizeOpaqueDelivery(v, {
-      empty: i === 2 && BigInt(changeCommitment) === 0n,
-      allowEmpty: i === 2
-    })
-  );
-  if (ns.length === 0 && f.amount === 0n)
-    throw new Error("empty inputs require positive funding");
-  return {
-    ...ctx,
-    ...normalizeFee(p),
-    sources,
-    nullifiers: ns,
-    actualCount: ns.length,
-    sourceCount: sources.length,
-    creditCommitment,
-    changeCommitment,
-    owner,
-    expiry,
-    deadline,
-    deliveries,
-    funding: f
-  };
-}
-function createCreditBaseInputs(c, p, cs, f = {}) {
-  const r = validateCreateCreditRequest(c, p, cs, f), h = BigInt(deliveriesHash(cs));
-  return [
-    r.chainId,
-    BigInt(r.protocolAddress),
-    BigInt(r.tokenAddress),
-    BigInt(r.owner),
-    BigInt(r.actualCount),
-    BigInt(r.sourceCount),
-    ...pad(
-      r.sources.map((s) => s.treeId),
-      10
-    ),
-    ...pad(
-      r.sources.map((s) => BigInt(s.merkleRoot)),
-      10
-    ),
-    ...pad(r.nullifiers.map(BigInt), 10),
-    BigInt(r.creditCommitment),
-    BigInt(r.changeCommitment),
-    h >> 128n,
-    h & (1n << 128n) - 1n,
-    r.expiry,
-    r.deadline,
-    r.funding.amount,
-    BigInt(r.funding.payer),
-    BigInt(r.feeRecipient),
-    r.feeAmount
-  ].map(word);
-}
-function createCreditPublicInputs(c, p, deliveries, funding = {}) {
-  const base = createCreditBaseInputs(c, p, deliveries, funding);
-  const digest = BigInt(
-    computeWalletAuthorizationDigest({
-      context: { chainId: c.chainId, protocolAddress: BigInt(c.protocolAddress) },
-      operation: "create-credit",
-      capacity: 10,
-      words: base.map(BigInt)
-    })
-  );
-  return [...base, word(digest >> 128n), word(digest & (1n << 128n) - 1n)];
-}
-var hashContext = {
-  chainId: 0n,
-  protocolAddress: ZERO_ADDRESS,
-  tokenAddress: ZERO_ADDRESS
-};
-function createCreditRequestHash(p, cs, f = {}) {
-  const r = validateCreateCreditRequest({ ...hashContext, tokenAddress: p.token }, p, cs, f);
-  return keccak2563(
-    AbiCoder2.defaultAbiCoder().encode(
-      [
-        { type: "bytes32" },
-        creationTuple,
-        { type: "bytes32" },
-        { type: "address" },
-        { type: "uint256" }
-      ].map((parameter) => ParamType2.from(parameter)),
-      [
-        keccak2563(new TextEncoder().encode("InvisiCreateCredit")),
-        { ...p, ...normalizeFee(p) },
-        deliveriesHash(cs),
-        r.funding.payer,
-        r.funding.amount
-      ]
-    )
-  );
-}
-function encodeCreateCreditTypedData(c, p, deliveries, funding = {}) {
-  return walletAuthorizationTypedData({
-    context: { chainId: c.chainId, protocolAddress: BigInt(c.protocolAddress) },
-    operation: "create-credit",
-    capacity: 10,
-    words: createCreditBaseInputs(c, p, deliveries, funding).map(BigInt)
-  });
-}
-function encodeCreateCreditFundingTypedData(c, p, cs, f) {
-  const r = validateCreateCreditRequest(c, p, cs, f);
-  if (r.funding.amount === 0n) throw new Error("funding authorization requires positive deposit");
-  return {
-    domain: getEIP712Domain(c),
-    primaryType: "FundTransact",
-    types: { FundTransact: fundingFields },
-    message: {
-      requestHash: createCreditRequestHash(p, cs, f),
-      payer: r.funding.payer,
-      amount: r.funding.amount,
-      sigNonce: r.funding.sigNonce,
-      deadline: r.funding.deadline
-    }
-  };
-}
-function buildCreateCreditCalldata(p) {
-  const r = validateCreateCreditRequest(p.context, p.params, p.deliveries, p.funding);
-  validateFundingSubmission(r.funding, p.caller, p.context.now);
-  return {
-    data: new Interface3(invisiProtocolAbi).encodeFunctionData("createCredit", [
-      encodeCreditProof(p.proof),
-      { ...p.params, ...normalizeFee(p.params) },
-      p.deliveries,
-      r.funding
-    ]),
-    approveAmount: r.funding.amount
-  };
-}
-function encodeCreditProof(proof) {
-  if (!isHexString3(proof) || !/^0x(?:[a-fA-F0-9]{2})*$/.test(proof) || dataLength2(proof) === 0)
-    throw new Error("empty or malformed Credit proof");
-  return AbiCoder2.defaultAbiCoder().encode(
-    ["uint8", "bytes"].map((parameter) => ParamType2.from(parameter)),
-    [0, proof]
-  );
-}
-// src/credit-lifecycle.ts
-import { AbiCoder as AbiCoder3, getAddress as getAddress6, Interface as Interface4, keccak256 as keccak2564, ParamType as ParamType3 } from "ethers";
-import {
-  creditPeriods,
-  computeWalletAuthorizationDigest as computeWalletAuthorizationDigest2,
-  walletAuthorizationTypedData as walletAuthorizationTypedData2
-} from "@invisi-labs/core";
-var CREDIT_DRAW_CAPACITIES = [1, 12, 50, 120];
-function selectCreditDrawCircuit(count) {
-  if (!Number.isInteger(count) || count < 1 || count > 120)
-    throw new Error("draw requires 1..120 credits");
-  const maxSize = CREDIT_DRAW_CAPACITIES.find((n) => count <= n);
-  return {
-    name: `credit_draw_slots${maxSize}`,
-    maxSize,
-    publicInputCount: 6 * maxSize + 14,
-    totalBits: 126 + Math.ceil(Math.log2(maxSize))
-  };
-}
-function validateCreditDrawRequest(c, p, cs) {
-  known(p, [
-    "token",
-    "sources",
-    "nullifiers",
-    "remainderCommitments",
-    "expiries",
-    "recoveryAmounts",
-    "spender",
-    "totalAmount",
-    "deadline"
-  ]);
-  if (getAddress6(p.token) !== getAddress6(c.tokenAddress))
-    throw new Error("request token mismatch");
-  const ctx = normalizeContext(c), ns = notes(p.nullifiers, "nullifiers"), profile = selectCreditDrawCircuit(ns.length), sources = normalizeSources(p.sources, ns.length, profile.maxSize);
-  for (const [key, v] of Object.entries({
-    remainderCommitments: p.remainderCommitments,
-    expiries: p.expiries,
-    recoveryAmounts: p.recoveryAmounts
-  }))
-    if (dense(v, key).length !== ns.length) throw new Error(`${key} count mismatch`);
-  const remainderCommitments = p.remainderCommitments.map((v) => word(field(v))), recoveryAmounts = p.recoveryAmounts.map((v) => word(field(v))), expiries = p.expiries.map((v) => uint(v, 64, "expiry")), positives = remainderCommitments.filter((v) => BigInt(v) !== 0n);
-  if (new Set(positives).size !== positives.length)
-    throw new Error("duplicate remainder commitment");
-  for (let i = 0; i < ns.length; i++) {
-    if (expiries[i] === 0n || c.now !== void 0 && expiries[i] <= c.now)
-      throw new Error("expiry must be future");
-    if (BigInt(remainderCommitments[i]) === 0n && BigInt(recoveryAmounts[i]) !== 0n)
-      throw new Error("full draw requires zero recovery amount");
-  }
-  const spender = getAddress6(p.spender), totalAmount = uint(p.totalAmount, profile.totalBits, "totalAmount");
-  if (BigInt(spender) === 0n || totalAmount === 0n)
-    throw new Error("spender and total amount must be positive");
-  if (dense(cs, "deliveries").length !== 2 * ns.length)
-    throw new Error("deliveries count mismatch");
-  const deliveries = cs.map(
-    (v, i) => BigInt(remainderCommitments[Math.floor(i / 2)]) === 0n ? normalizeOpaqueDelivery(v, { empty: true }) : normalizeOpaqueDelivery(v, {})
-  );
-  return {
-    ...ctx,
-    sources,
-    nullifiers: ns,
-    remainderCommitments,
-    recoveryAmounts,
-    expiries,
-    spender,
-    totalAmount,
-    deadline: checkDeadline(c, p.deadline),
-    deliveries,
-    profile,
-    periods: creditPeriods(c.timestamp)
-  };
-}
-function creditDrawBaseInputs(c, p, cs) {
-  const r = validateCreditDrawRequest(c, p, cs), n = r.profile.maxSize, h = BigInt(deliveriesHash(cs));
-  return [
-    r.chainId,
-    BigInt(r.protocolAddress),
-    BigInt(r.tokenAddress),
-    BigInt(r.spender),
-    BigInt(r.nullifiers.length),
-    BigInt(r.sources.length),
-    ...pad(
-      r.sources.map((s) => s.treeId),
-      n
-    ),
-    ...pad(
-      r.sources.map((s) => BigInt(s.merkleRoot)),
-      n
-    ),
-    ...pad(r.nullifiers.map(BigInt), n),
-    ...pad(r.remainderCommitments.map(BigInt), n),
-    ...pad(r.expiries, n),
-    r.totalAmount,
-    r.deadline,
-    h >> 128n,
-    h & (1n << 128n) - 1n,
-    ...pad(r.recoveryAmounts.map(BigInt), n),
-    r.periods.currentDay,
-    r.periods.currentMonth
-  ].map(word);
-}
-function validateCancelCreditRequest(c, p) {
-  known(p, [
-    "token",
-    "source",
-    "nullifier",
-    "owner",
-    "amount",
-    "deadline",
-    "feeRecipient",
-    "feeAmount"
-  ]);
-  if (getAddress6(p.token) !== getAddress6(c.tokenAddress))
-    throw new Error("request token mismatch");
-  const ctx = normalizeContext(c), source = normalizeSources([p.source], 1, 1)[0], nullifier = notes([p.nullifier], "nullifier")[0], owner = getAddress6(p.owner), amount = uint(p.amount, 126, "amount");
-  if (BigInt(owner) === 0n || amount === 0n) throw new Error("owner and amount must be positive");
-  const fee = normalizeFee(p);
-  if (fee.feeAmount >= amount) throw new Error("fee must leave a positive owner refund");
-  return {
-    ...ctx,
-    ...fee,
-    source,
-    nullifier,
-    owner,
-    amount,
-    deadline: checkDeadline(c, p.deadline)
-  };
-}
-function cancelCreditBaseInputs(c, p) {
-  const r = validateCancelCreditRequest(c, p);
-  return [
-    r.chainId,
-    BigInt(r.protocolAddress),
-    BigInt(r.tokenAddress),
-    BigInt(r.owner),
-    r.source.treeId,
-    BigInt(r.source.merkleRoot),
-    BigInt(r.nullifier),
-    r.amount,
-    r.deadline,
-    BigInt(r.feeRecipient),
-    r.feeAmount
-  ].map(word);
-}
-function validateTopUpCreditRequest(c, p, cs, funding = {}) {
-  known(p, ["token", "creation", "creditSource", "creditNullifier", "previousExpiry"]);
-  const creation = validateCreateCreditRequest(c, p.creation, cs, funding), creditSource = normalizeSources([p.creditSource], 1, 1)[0], creditNullifier = notes([p.creditNullifier], "creditNullifier")[0], previousExpiry = uint(p.previousExpiry, 64, "previousExpiry");
-  if (previousExpiry === 0n || c.now !== void 0 && previousExpiry <= c.now)
-    throw new Error("previous Credit has expired");
-  if (creation.expiry < previousExpiry) throw new Error("expiry must not decrease");
-  if (creation.nullifiers.includes(creditNullifier))
-    throw new Error("duplicate credit and ordinary nullifier");
-  return { creation, creditSource, creditNullifier, previousExpiry };
-}
-function topUpCreditBaseInputs(c, p, cs, f = {}) {
-  const r = validateTopUpCreditRequest(c, p, cs, f);
-  return [
-    ...createCreditBaseInputs(c, p.creation, cs, f),
-    word(r.creditSource.treeId),
-    r.creditSource.merkleRoot,
-    r.creditNullifier,
-    word(r.previousExpiry)
-  ];
-}
-var cancelTuple = [
-  "(address token,(uint256 treeId,bytes32 merkleRoot) source,bytes32 nullifier,address owner,uint256 amount,uint256 deadline,address feeRecipient,uint256 feeAmount)"
-][0];
-var topTuple = [
-  "((address token,(uint256 treeId,bytes32 merkleRoot)[] sources,bytes32[] nullifiers,bytes32 creditCommitment,bytes32 changeCommitment,address owner,uint256 expiry,uint256 deadline,address feeRecipient,uint256 feeAmount) creation,(uint256 treeId,bytes32 merkleRoot) creditSource,bytes32 creditNullifier,uint256 previousExpiry)"
-][0];
-var hashContext2 = {
-  chainId: 0n,
-  protocolAddress: ZERO_ADDRESS,
-  tokenAddress: ZERO_ADDRESS
-};
-function cancelCreditRequestHash(p) {
-  validateCancelCreditRequest({ ...hashContext2, tokenAddress: p.token }, p);
-  return keccak2564(
-    AbiCoder3.defaultAbiCoder().encode(
-      [{ type: "bytes32" }, cancelTuple].map((parameter) => ParamType3.from(parameter)),
-      [
-        keccak2564(new TextEncoder().encode("InvisiCancelCredit")),
-        { ...p, ...normalizeFee(p) }
-      ]
-    )
-  );
-}
-function topUpCreditRequestHash(p, cs, f = {}) {
-  const r = validateTopUpCreditRequest(
-    { ...hashContext2, tokenAddress: p.creation.token },
-    p,
-    cs,
-    f
-  );
-  return keccak2564(
-    AbiCoder3.defaultAbiCoder().encode(
-      [
-        { type: "bytes32" },
-        topTuple,
-        { type: "bytes32" },
-        { type: "address" },
-        { type: "uint256" }
-      ].map((parameter) => ParamType3.from(parameter)),
-      [
-        keccak2564(new TextEncoder().encode("InvisiTopUpCredit")),
-        { ...p, creation: { ...p.creation, ...normalizeFee(p.creation) } },
-        deliveriesHash(cs),
-        r.creation.funding.payer,
-        r.creation.funding.amount
-      ]
-    )
-  );
-}
-function authorize(c, operation, capacity, words) {
-  return walletAuthorizationTypedData2({
-    context: { chainId: c.chainId, protocolAddress: BigInt(c.protocolAddress) },
-    operation,
-    capacity,
-    words: words.map(BigInt)
-  });
-}
-function appendDigest(c, operation, capacity, words) {
-  const digest = BigInt(
-    computeWalletAuthorizationDigest2({
-      context: { chainId: c.chainId, protocolAddress: BigInt(c.protocolAddress) },
-      operation,
-      capacity,
-      words: words.map(BigInt)
-    })
-  );
-  return [...words, word(digest >> 128n), word(digest & (1n << 128n) - 1n)];
-}
-function encodeCancelCreditTypedData(c, p) {
-  return authorize(c, "cancel-credit", 1, cancelCreditBaseInputs(c, p));
-}
-function encodeTopUpCreditTypedData(c, p, deliveries, funding = {}) {
-  return authorize(c, "top-up-credit", 10, topUpCreditBaseInputs(c, p, deliveries, funding));
-}
-function encodeCreditDrawTypedData(c, p, deliveries) {
-  return authorize(
-    c,
-    "credit-draw",
-    selectCreditDrawCircuit(p.nullifiers.length).maxSize,
-    creditDrawBaseInputs(c, p, deliveries)
-  );
-}
-function creditDrawPublicInputs(c, p, deliveries) {
-  return appendDigest(
-    c,
-    "credit-draw",
-    selectCreditDrawCircuit(p.nullifiers.length).maxSize,
-    creditDrawBaseInputs(c, p, deliveries)
-  );
-}
-function cancelCreditPublicInputs(c, p) {
-  return appendDigest(c, "cancel-credit", 1, cancelCreditBaseInputs(c, p));
-}
-function topUpCreditPublicInputs(c, p, deliveries, funding = {}) {
-  return appendDigest(c, "top-up-credit", 10, topUpCreditBaseInputs(c, p, deliveries, funding));
-}
-function encodeTopUpCreditFundingTypedData(c, p, cs, f) {
-  const r = validateTopUpCreditRequest(c, p, cs, f), funding = r.creation.funding;
-  if (funding.amount === 0n) throw new Error("funding authorization requires positive deposit");
-  return {
-    domain: getEIP712Domain(c),
-    primaryType: "FundTransact",
-    types: { FundTransact: fundingFields },
-    message: {
-      requestHash: topUpCreditRequestHash(p, cs, f),
-      payer: funding.payer,
-      amount: funding.amount,
-      sigNonce: funding.sigNonce,
-      deadline: funding.deadline
-    }
-  };
-}
-function buildCreditDrawCalldata(p) {
-  validateCreditDrawRequest(p.context, p.params, p.deliveries);
-  return {
-    data: new Interface4(invisiProtocolAbi).encodeFunctionData("creditDraw", [
-      encodeCreditProof(p.proof),
-      p.params,
-      p.deliveries
-    ]),
-    nullifiers: p.params.nullifiers,
-    totalAmount: p.params.totalAmount
-  };
-}
-function buildCancelCreditCalldata(p) {
-  validateCancelCreditRequest(p.context, p.params);
-  return {
-    data: new Interface4(invisiProtocolAbi).encodeFunctionData("cancelCredit", [
-      encodeCreditProof(p.proof),
-      { ...p.params, ...normalizeFee(p.params) }
-    ])
-  };
-}
-function buildTopUpCreditCalldata(p) {
-  const r = validateTopUpCreditRequest(p.context, p.params, p.deliveries, p.funding);
-  validateFundingSubmission(r.creation.funding, p.caller, p.context.now);
-  return {
-    data: new Interface4(invisiProtocolAbi).encodeFunctionData("topUpCredit", [
-      encodeCreditProof(p.proof),
-      { ...p.params, creation: { ...p.params.creation, ...normalizeFee(p.params.creation) } },
-      p.deliveries,
-      r.creation.funding
-    ]),
-    approveAmount: r.creation.funding.amount
-  };
-}
-// src/funds.ts
-import { AbiCoder as AbiCoder4, getAddress as getAddress7, Interface as Interface5, keccak256 as keccak2565, ParamType as ParamType4, TypedDataEncoder as TypedDataEncoder2 } from "ethers";
-import { computeNoteCommitment, walletAuthorizationTypedData as walletAuthorizationTypedData3 } from "@invisi-labs/core";
-var TRANSACT_CAPACITIES = [14, 56, 112, 168];
-function selectTransactCapacity(inputs, outputs) {
-  if (!Number.isInteger(inputs) || !Number.isInteger(outputs) || inputs < 0 || outputs < 0 || inputs + outputs < 1 || inputs === 0 && outputs < 2 || inputs + outputs > 168)
-    throw new Error("unsupported transact shape");
-  return TRANSACT_CAPACITIES.find((n) => inputs + outputs <= n);
-}
-function normalizeTransactRequest(c, p, cs, funding = {}) {
-  const ctx = normalizeContext(c);
-  if (getAddress7(p.token) !== ctx.tokenAddress)
-    throw new Error("request token mismatch");
-  known(p, [
-    "token",
-    "sources",
-    "nullifiers",
-    "outputCommitments",
-    "withdrawalAddress",
-    "withdrawalAmount",
-    "deadline",
-    "feeRecipient",
-    "feeAmount"
-  ]);
-  const ns = notes(p.nullifiers, "nullifiers"), os = notes(p.outputCommitments, "outputCommitments"), capacity = selectTransactCapacity(ns.length, os.length);
-  const sources = normalizeSources(p.sources, ns.length, capacity), deliveries = dense(cs, "deliveries").map(
-    (v) => normalizeOpaqueDelivery(v, { allowEmpty: true })
-  );
-  if (deliveries.length !== os.length) throw new Error("deliveries count mismatch");
-  const withdrawalAmount = uint(p.withdrawalAmount, 128, "withdrawalAmount"), withdrawalAddress = getAddress7(p.withdrawalAddress), f = normalizeFunding(funding);
-  const feeAmount = uint(p.feeAmount ?? 0n, 128, "feeAmount");
-  const feeRecipient = getAddress7(
-    p.feeRecipient ?? "0x0000000000000000000000000000000000000000"
-  );
-  if (feeAmount === 0n !== (BigInt(feeRecipient) === 0n)) throw new Error("invalid fee");
-  if (withdrawalAmount === 0n !== (BigInt(withdrawalAddress) === 0n) || os.length === 0 && withdrawalAmount === 0n)
-    throw new Error("invalid withdrawal");
-  if (ns.length === 0 && (f.amount === 0n || withdrawalAmount !== 0n))
-    throw new Error("zero inputs require positive funding and zero withdrawal");
-  return {
-    ...ctx,
-    capacity,
-    sources,
-    nullifiers: ns,
-    outputCommitments: os,
-    inputCount: ns.length,
-    outputCount: os.length,
-    sourceCount: sources.length,
-    inputTreeIds: pad(
-      sources.map((s) => s.treeId),
-      capacity
-    ),
-    merkleRoots: pad(
-      sources.map((s) => BigInt(s.merkleRoot)),
-      capacity
-    ),
-    slotValues: pad([...ns, ...os].map(BigInt), capacity),
-    deliveries,
-    deliveriesHash: deliveriesHash(deliveries),
-    withdrawalAddress,
-    withdrawalAmount,
-    feeRecipient,
-    feeAmount,
-    deadline: checkDeadline(c, p.deadline),
-    depositAmount: f.amount,
-    depositPayer: f.payer,
-    funding: f
-  };
-}
-function transactPublicInputs(c, p, cs, f = {}) {
-  const r = normalizeTransactRequest(c, p, cs, f), h = BigInt(r.deliveriesHash);
-  return [
-    r.chainId,
-    BigInt(r.protocolAddress),
-    BigInt(r.tokenAddress),
-    BigInt(r.inputCount),
-    BigInt(r.outputCount),
-    BigInt(r.sourceCount),
-    ...r.inputTreeIds,
-    ...r.merkleRoots,
-    ...r.slotValues,
-    h >> 128n,
-    h & (1n << 128n) - 1n,
-    BigInt(r.withdrawalAddress),
-    r.withdrawalAmount,
-    r.deadline,
-    r.depositAmount,
-    BigInt(r.depositPayer),
-    BigInt(r.feeRecipient),
-    r.feeAmount
-  ].map(word);
-}
-function encodeTransactTypedData(c, p, deliveries, f = {}) {
-  const r = normalizeTransactRequest(c, p, deliveries, f);
-  return walletAuthorizationTypedData3({
-    context: { chainId: r.chainId, protocolAddress: BigInt(r.protocolAddress) },
-    operation: "transact",
-    capacity: r.capacity,
-    words: transactPublicInputs(c, p, deliveries, f).map(BigInt)
-  });
-}
-var singleTuple = [
-  "(address token,bytes32 merkleRoot,bytes32[] nullifiers,bytes32[] outputCommitments,uint256 inputTreeId,address withdrawalAddress,uint256 withdrawalAmount,uint256 deadline,address feeRecipient,uint256 feeAmount)"
-][0];
-var crossTuple = [
-  "(address token,(uint256 treeId,bytes32 merkleRoot)[] sources,bytes32[] nullifiers,bytes32[] outputCommitments,address withdrawalAddress,uint256 withdrawalAmount,uint256 deadline,address feeRecipient,uint256 feeAmount)"
-][0];
-function transactFundingRequestHash(proof, p, cs) {
-  const single = {
-    token: p.token,
-    merkleRoot: p.sources[0]?.merkleRoot ?? word(0n),
-    nullifiers: p.nullifiers,
-    outputCommitments: p.outputCommitments,
-    inputTreeId: p.sources[0]?.treeId ?? 0n,
-    withdrawalAddress: p.withdrawalAddress,
-    withdrawalAmount: p.withdrawalAmount,
-    deadline: p.deadline,
-    feeRecipient: p.feeRecipient ?? "0x0000000000000000000000000000000000000000",
-    feeAmount: p.feeAmount ?? 0n
-  };
-  return p.sources.length > 1 ? keccak2565(
-    AbiCoder4.defaultAbiCoder().encode(
-      [{ type: "bytes32" }, { type: "bytes32" }, crossTuple, { type: "bytes32" }].map(
-        (parameter) => ParamType4.from(parameter)
-      ),
-      [
-        keccak2565(new TextEncoder().encode("InvisiCrossTreeTransact")),
-        keccak2565(proof),
-        { ...p, feeRecipient: single.feeRecipient, feeAmount: single.feeAmount },
-        deliveriesHash(cs)
-      ]
-    )
-  ) : keccak2565(
-    AbiCoder4.defaultAbiCoder().encode(
-      [{ type: "bytes32" }, singleTuple, { type: "bytes32" }].map(
-        (parameter) => ParamType4.from(parameter)
-      ),
-      [keccak2565(proof), single, deliveriesHash(cs)]
-    )
-  );
-}
-function encodeTransactFundingTypedData(c, proof, p, cs, funding) {
-  normalizeTransactRequest(c, p, cs, funding);
-  const f = normalizeFunding(funding);
-  if (f.amount === 0n) throw new Error("funding authorization requires positive deposit");
-  return {
-    domain: getEIP712Domain(c),
-    primaryType: "FundTransact",
-    types: { FundTransact: fundingFields },
-    message: {
-      requestHash: transactFundingRequestHash(proof, p, cs),
-      payer: f.payer,
-      amount: f.amount,
-      sigNonce: f.sigNonce,
-      deadline: f.deadline
-    }
-  };
-}
-function buildTransactCalldata(p) {
-  const r = normalizeTransactRequest(p.context, p.params, p.deliveries, p.funding);
-  validateFundingSubmission(r.funding, p.caller, p.context.now);
-  const request = {
-    params: {
-      token: r.tokenAddress,
-      sources: r.sources,
-      nullifiers: r.nullifiers,
-      outputCommitments: r.outputCommitments,
-      withdrawalAddress: r.withdrawalAddress,
-      withdrawalAmount: r.withdrawalAmount,
-      deadline: r.deadline,
-      feeRecipient: r.feeRecipient,
-      feeAmount: r.feeAmount
-    },
-    deliveries: p.deliveries,
-    funding: r.funding
-  };
-  const abi = invisiProtocolAbi.filter(
-    (item) => item.type === "function" && item.name === "transact" && item.inputs.length === 2 && item.inputs[1]?.type === "tuple"
-  );
-  const data = new Interface5(abi).encodeFunctionData("transact", [p.proof, request]);
-  return { data, capacity: r.capacity, approveAmount: r.depositAmount };
-}
-function buildTransactAggregateCalldata(p) {
-  if (![4, 8, 12].includes(dense(p.requests, "requests").length))
-    throw new Error("aggregate requires 4, 8 or 12 requests");
-  const requests = p.requests.map((request) => {
-    const r = normalizeTransactRequest(
-      { ...p.context, tokenAddress: request.params.token },
-      request.params,
-      request.deliveries,
-      request.funding
-    );
-    if (r.capacity !== 14) throw new Error("aggregate supports only capacity 14");
-    validateFundingSubmission(r.funding, p.caller, p.context.now);
-    return {
-      ...request,
-      params: { ...request.params, feeRecipient: r.feeRecipient, feeAmount: r.feeAmount }
-    };
-  });
-  return {
-    data: new Interface5(
-      invisiProtocolAbi.filter(
-        (item) => item.type === "function" && item.name === "transact" && item.inputs[1]?.type === "tuple[]"
-      )
-    ).encodeFunctionData("transact", [p.proof, requests]),
-    capacity: 14
-  };
-}
-async function validateShieldRequest(p) {
-  normalizeContext(p.context);
-  if (getAddress7(p.params.token) !== getAddress7(p.context.tokenAddress))
-    throw new Error("request token mismatch");
-  known(p.params, ["token", "outputCommitments", "deadline", "feeRecipient", "feeAmount"]);
-  checkDeadline(p.context, p.params.deadline);
-  const outputs = dense(p.outputs, "outputs"), commitments = notes(p.params.outputCommitments, "outputCommitments"), cs = dense(p.deliveries, "deliveries"), f = normalizeFunding(p.funding);
-  if (outputs.length < 1 || outputs.length > 10 || commitments.length !== outputs.length || cs.length !== outputs.length)
-    throw new Error("shield requires 1..10 outputs and matching deliveries");
-  let total = 0n;
-  for (const [i, o] of outputs.entries()) {
-    known(o, ["identity", "amount"], "output");
-    uint(o.amount, 128, "amount");
-    if (o.amount === 0n) throw new Error("amount must be positive");
-    field(o.identity);
-    normalizeOpaqueDelivery(cs[i], { allowEmpty: true });
-    if (await computeNoteCommitment(
-      p.context.chainId,
-      o.identity,
-      BigInt(p.context.tokenAddress),
-      o.amount
-    ) !== commitments[i])
-      throw new Error("output commitment mismatch");
-    total += o.amount;
-  }
-  if (total + normalizeFee(p.params).feeAmount !== f.amount)
-    throw new Error("funding must equal output total plus fee");
-  return f;
-}
-function shieldFundingRequestHash(params, outputs, cs) {
-  const outputHash = keccak2565(
-    AbiCoder4.defaultAbiCoder().encode(
-      ["(bytes32 identity,uint256 amount)[]"].map((parameter) => ParamType4.from(parameter)),
-      [outputs]
-    )
-  );
-  return keccak2565(
-    AbiCoder4.defaultAbiCoder().encode(
-      [
-        "bytes32",
-        "(address token,bytes32[] outputCommitments,uint256 deadline,address feeRecipient,uint256 feeAmount)",
-        "bytes32",
-        "bytes32"
-      ].map((parameter) => ParamType4.from(parameter)),
-      [
-        keccak2565(new TextEncoder().encode("InvisiShield")),
-        { ...params, ...normalizeFee(params) },
-        outputHash,
-        deliveriesHash(cs)
-      ]
-    )
-  );
-}
-async function encodeShieldFundingTypedData(p) {
-  const f = await validateShieldRequest(p);
-  return {
-    domain: getEIP712Domain(p.context),
-    primaryType: "FundShield",
-    types: { FundShield: fundingFields },
-    message: {
-      requestHash: shieldFundingRequestHash(p.params, p.outputs, p.deliveries),
-      payer: f.payer,
-      amount: f.amount,
-      sigNonce: f.sigNonce,
-      deadline: f.deadline
-    }
-  };
-}
-async function buildShieldCalldata(p) {
-  const f = await validateShieldRequest(p);
-  validateFundingSubmission(f, p.caller, p.context.now);
-  return {
-    data: new Interface5(invisiProtocolAbi).encodeFunctionData("shield", [
-      { ...p.params, ...normalizeFee(p.params) },
-      p.outputs,
-      p.deliveries,
-      f
-    ]),
-    approveAmount: f.amount
-  };
-}
-function transactUserPublicInputs(c, p, cs, f = {}) {
-  const words = transactPublicInputs(c, p, cs, f), digest = BigInt(
-    ((typed) => TypedDataEncoder2.hash(
-      typed.domain,
-      Object.fromEntries(
-        Object.entries(typed.types).map(([name, fields]) => [
-          name,
-          [...fields]
-        ])
-      ),
-      typed.message
-    ))(encodeTransactTypedData(c, p, cs, f))
-  );
-  return [...words, word(digest >> 128n), word(digest & (1n << 128n) - 1n)];
-}
-function aggregateMemberRequestHash(c, r) {
-  const capacity = selectTransactCapacity(
-    r.params.nullifiers.length,
-    r.params.outputCommitments.length
-  );
-  if (capacity !== 14) throw new Error("aggregate supports only capacity 14");
-  return keccak2565(
-    AbiCoder4.defaultAbiCoder().encode(
-      ["bytes32", "uint256", "bytes32[]"].map((parameter) => ParamType4.from(parameter)),
-      [
-        keccak2565(new TextEncoder().encode("InvisiAtomicBatchMemberV1")),
-        BigInt(capacity),
-        transactPublicInputs(c, r.params, r.deliveries, r.funding)
-      ]
-    )
-  );
-}
-function aggregatePublicInputs(c, requests) {
-  if (![4, 8, 12].includes(dense(requests, "requests").length))
-    throw new Error("aggregate requires 4, 8 or 12 requests");
-  return requests.flatMap((r) => {
-    const context = { ...c, tokenAddress: r.params.token };
-    aggregateMemberRequestHash(context, r);
-    return [word(14n), ...transactPublicInputs(context, r.params, r.deliveries, r.funding)];
-  });
-}
-function encodeAggregateFundingTypedData(c, r) {
-  const f = normalizeFunding(r.funding);
-  if (f.amount === 0n) throw new Error("funding authorization requires positive deposit");
-  return {
-    domain: getEIP712Domain(c),
-    primaryType: "FundTransact",
-    types: { FundTransact: fundingFields },
-    message: {
-      requestHash: aggregateMemberRequestHash(c, r),
-      payer: f.payer,
-      amount: f.amount,
-      sigNonce: f.sigNonce,
-      deadline: f.deadline
-    }
-  };
-}
-// src/Protocol.ts
-import { Contract as Contract2, getAddress as getAddress8, keccak256 as keccak2567 } from "ethers";
-import {
-  defineDeployment
-} from "@invisi-labs/rpc";
-// src/TokenProtocol.ts
-import { keccak256 as keccak2566 } from "ethers";
-import { MissingCapabilityError as MissingCapabilityError2 } from "@invisi-labs/core";
-var TokenProtocol = class {
-  context;
-  expectedRuntimeCodeHash;
-  constructor(context, options = {}) {
-    const normalized = normalizeContext(context);
-    if (BigInt(normalized.protocolAddress) === 0n || BigInt(normalized.tokenAddress) === 0n) {
-      throw new Error("deployment addresses must be nonzero");
-    }
-    if (options.expectedRuntimeCodeHash && !/^0x[0-9a-fA-F]{64}$/.test(options.expectedRuntimeCodeHash)) {
-      throw new Error("invalid runtime code hash");
-    }
-    this.expectedRuntimeCodeHash = options.expectedRuntimeCodeHash?.toLowerCase();
-    this.context = Object.freeze(normalized);
-    Object.freeze(this);
-  }
-  async validateDeployment(reader, options = {}) {
-    if ((options.requireRuntimeProfile ?? true) && !this.expectedRuntimeCodeHash) {
-      throw new MissingCapabilityError2("trusted deployment profile");
-    }
-    if (await reader.getChainId() !== this.context.chainId) {
-      throw new Error("deployment chain mismatch");
-    }
-    const code = await reader.getCode(this.context.protocolAddress);
-    if (!/^0x(?:[0-9a-fA-F]{2})+$/.test(code) || this.expectedRuntimeCodeHash && keccak2566(code) !== this.expectedRuntimeCodeHash) {
-      throw new Error("deployment runtime code profile mismatch");
-    }
-    const tokenCode = await reader.getCode(this.context.tokenAddress);
-    if (!/^0x(?:[0-9a-fA-F]{2})+$/.test(tokenCode)) {
-      throw new Error("token address must have contract code");
-    }
-  }
-  transact(request) {
-    return {
-      to: this.context.protocolAddress,
-      value: 0n,
-      ...buildTransactCalldata({ ...request, context: this.context })
-    };
-  }
-  aggregate(request) {
-    return {
-      to: this.context.protocolAddress,
-      value: 0n,
-      ...buildTransactAggregateCalldata({ ...request, context: this.context })
-    };
-  }
-  async shield(request) {
-    return {
-      to: this.context.protocolAddress,
-      value: 0n,
-      ...await buildShieldCalldata({ ...request, context: this.context })
-    };
-  }
-  createCredit(request) {
-    return {
-      to: this.context.protocolAddress,
-      value: 0n,
-      ...buildCreateCreditCalldata({ ...request, context: this.context })
-    };
-  }
-  drawCredit(request) {
-    return {
-      to: this.context.protocolAddress,
-      value: 0n,
-      ...buildCreditDrawCalldata({ ...request, context: this.context })
-    };
-  }
-  cancelCredit(request) {
-    return {
-      to: this.context.protocolAddress,
-      value: 0n,
-      ...buildCancelCreditCalldata({ ...request, context: this.context })
-    };
-  }
-  topUpCredit(request) {
-    return {
-      to: this.context.protocolAddress,
-      value: 0n,
-      ...buildTopUpCreditCalldata({ ...request, context: this.context })
-    };
-  }
-};
-// src/Protocol.ts
-var Protocol = class _Protocol {
-  deployment;
-  context;
-  constructor(options) {
-    known(options, ["deployment"], "protocol options");
-    this.deployment = defineDeployment(options.deployment);
-    this.context = Object.freeze({
-      chainId: this.deployment.chainId,
-      protocolAddress: this.deployment.protocol.address
-    });
-    Object.freeze(this);
-  }
-  /** Load the selected deployment and verify its contract against Chain RPC before returning. */
-  static async fromRpc(rpc, provider, options = {}) {
-    const chainId = (await provider.getNetwork()).chainId;
-    if (typeof chainId !== "bigint" || chainId <= 0n || chainId >= 1n << 64n)
-      throw new Error("invalid protocol chainId");
-    const deployment = await rpc.getDeployment(
-      chainId,
-      options.signal ? { signal: options.signal } : {}
-    );
-    const protocol = new _Protocol({ deployment });
-    if (protocol.context.chainId !== chainId) throw new Error("RPC deployment chain mismatch");
-    await protocol.validateDeployment(provider);
-    return protocol;
-  }
-  async validateDeployment(connection) {
-    const reader = "getNetwork" in connection ? {
-      getChainId: async () => (await connection.getNetwork()).chainId,
-      getCode: async (address) => await connection.getCode(address),
-      getProtocolAddressRegistry: async (address) => getAddress8(
-        await new Contract2(
-          address,
-          ["function addressRegistry() view returns (address)"],
-          connection
-        ).getFunction("addressRegistry")()
-      ),
-      getProtocolVersion: async (address) => BigInt(
-        await new Contract2(
-          address,
-          ["function VERSION() view returns (uint256)"],
-          connection
-        ).getFunction("VERSION")()
-      )
-    } : connection;
-    if (await reader.getChainId() !== this.context.chainId)
-      throw new Error("deployment chain mismatch");
-    const code = await reader.getCode(this.context.protocolAddress);
-    if (!/^0x(?:[0-9a-fA-F]{2})+$/.test(code) || keccak2567(code) !== this.deployment.protocol.runtimeCodeHash)
-      throw new Error("protocol runtime code profile mismatch");
-    if (reader.getProtocolVersion && await reader.getProtocolVersion(this.context.protocolAddress) !== 1n)
-      throw new Error("unsupported onchain protocol version");
-    const registry = this.deployment.registry;
-    if (registry) {
-      if (!reader.getProtocolAddressRegistry)
-        throw new Error("registry binding reader capability is missing");
-      if (getAddress8(
-        await reader.getProtocolAddressRegistry(this.context.protocolAddress)
-      ) !== getAddress8(registry.address))
-        throw new Error("protocol registry binding mismatch");
-      const registryCode = await reader.getCode(registry.address);
-      if (!/^0x(?:[0-9a-fA-F]{2})+$/.test(registryCode) || keccak2567(registryCode) !== registry.runtimeCodeHash)
-        throw new Error("registry runtime code profile mismatch");
-    }
-  }
-  aggregate(request) {
-    return {
-      to: this.context.protocolAddress,
-      value: 0n,
-      ...buildTransactAggregateCalldata({ ...request, context: this.context })
-    };
-  }
-  /** Build an operation context for one asset within this same deployment. */
-  forToken(tokenAddress) {
-    return new TokenProtocol(
-      { ...this.context, tokenAddress: getAddress8(tokenAddress) },
-      { expectedRuntimeCodeHash: this.deployment.protocol.runtimeCodeHash }
-    );
-  }
-};
-// src/verify.ts
-import {
-  computeCreditCommitment,
-  computeCreditSharedKeyHash,
-  computeNoteCommitment as computeNoteCommitment2,
-  computeNoteIdentity,
-  FIELD_MODULUS as FIELD_MODULUS2
-} from "@invisi-labs/core";
-async function verifyNoteCommitment(params) {
-  const expected = await computeNoteCommitment2(
-    params.chainId,
-    await computeNoteIdentity(BigInt(params.ownerAddress), BigInt(params.nonce)),
-    BigInt(params.tokenAddress),
-    params.amount
-  );
-  return BigInt(expected) === BigInt(params.noteCommitment);
-}
-async function verifyCreditCommitment(params) {
-  if (params.creditSharedKey <= 0n || params.creditSharedKey >= FIELD_MODULUS2)
-    throw new RangeError("creditSharedKey must be a nonzero canonical Field");
-  const expected = await computeCreditCommitment(
-    params.chainId,
-    params.spenderWalletIdentity,
-    params.ownerWalletIdentity,
-    BigInt(params.spenderPayout),
-    BigInt(params.ownerPayout),
-    BigInt(params.tokenAddress),
-    params.amount,
-    params.nonce,
-    params.expiry,
-    await computeCreditSharedKeyHash(params.creditSharedKey),
-    params
-  );
-  return BigInt(expected) === BigInt(params.creditCommitment);
-}
-// src/witness.ts
-import {
-  computeCreditCommitment as computeCreditCommitment2,
-  normalizeCreditPolicy,
-  applyCreditDrawUsage,
-  computeCreditNullifier,
-  computeCreditSharedKeyHash as computeCreditSharedKeyHash2,
-  computeNoteCommitment as computeNoteCommitment3,
-  computeNoteIdentity as computeNoteIdentity2,
-  computeNoteNullifier,
-  computeWalletAuthorizationDigest as computeWalletAuthorizationDigest3,
-  normalizeCreditDeliveryState,
-  poseidonHash,
-  verifyWalletAuthorization
-} from "@invisi-labs/core";
-import {
-  LocalWitness
-} from "@invisi-labs/prover";
 // src/witness-layouts.json
 var witness_layouts_default = {
   transact_user_slots14: {
@@ -3178,541 +1631,2163 @@ var witness_layouts_default = {
         count: 1,
         array: false
       }
-    ],
-    private: [
-      "input_amounts",
-      "input_nonces",
-      "leaf_indices",
-      "merkle_paths",
-      "input_source_indices",
-      "public_key_x",
-      "public_key_y",
-      "signature",
-      "spender_payout",
-      "spender_wallet_identity",
-      "owner_wallet_identity",
-      "credit_amount",
-      "credit_nonce",
-      "credit_shared_key",
-      "single_limit",
-      "daily_limit",
-      "monthly_limit",
-      "previous_single_limit",
-      "previous_daily_limit",
-      "previous_monthly_limit",
-      "last_day",
-      "daily_spent",
-      "last_month",
-      "monthly_spent",
-      "change_amount",
-      "change_nonce",
-      "previous_credit_amount",
-      "previous_credit_nonce",
-      "previous_credit_leaf_index",
-      "previous_credit_merkle_path"
-    ]
+    ],
+    private: [
+      "input_amounts",
+      "input_nonces",
+      "leaf_indices",
+      "merkle_paths",
+      "input_source_indices",
+      "public_key_x",
+      "public_key_y",
+      "signature",
+      "spender_payout",
+      "spender_wallet_identity",
+      "owner_wallet_identity",
+      "credit_amount",
+      "credit_nonce",
+      "credit_shared_key",
+      "single_limit",
+      "daily_limit",
+      "monthly_limit",
+      "previous_single_limit",
+      "previous_daily_limit",
+      "previous_monthly_limit",
+      "last_day",
+      "daily_spent",
+      "last_month",
+      "monthly_spent",
+      "change_amount",
+      "change_nonce",
+      "previous_credit_amount",
+      "previous_credit_nonce",
+      "previous_credit_leaf_index",
+      "previous_credit_merkle_path"
+    ]
+  }
+};
+// src/authorization/common.ts
+var pad2 = (values, count, zero) => {
+  if (values.length > count) throw new Error("witness capacity exceeded");
+  return [...values, ...Array.from({ length: count - values.length }, zero)];
+};
+var policyWitness = (note, usage = true) => {
+  const p = normalizeCreditPolicy(note);
+  return {
+    single_limit: p.singleLimit,
+    daily_limit: p.dailyLimit,
+    monthly_limit: p.monthlyLimit,
+    ...usage ? {
+      last_day: p.lastDay,
+      daily_spent: p.dailySpent,
+      last_month: p.lastMonth,
+      monthly_spent: p.monthlySpent
+    } : {}
+  };
+};
+var zeros = () => Array(16).fill(0n);
+var zeroAuthority = () => ({
+  public_key_x: Array(32).fill(0),
+  public_key_y: Array(32).fill(0),
+  signature: Array(64).fill(0)
+});
+function check(ok, message) {
+  if (!ok) throw new Error(message);
+}
+function provingRequest(circuitName, privateInputs, expectedPublicInputs, target = "evm") {
+  const schema = witness_layouts_default[circuitName], key = schema.keys[target];
+  check(typeof key === "string", "unpublished proof target");
+  check(
+    expectedPublicInputs.length === schema.publicInputCount,
+    "public input order/width mismatch"
+  );
+  check(
+    Object.keys(privateInputs).length === schema.private.length && schema.private.every((name) => Object.hasOwn(privateInputs, name)),
+    "private witness schema mismatch"
+  );
+  let offset = 0;
+  const publicInputs = {};
+  for (const entry of schema.public) {
+    const values = expectedPublicInputs.slice(offset, offset + entry.count).map((value) => {
+      const n = BigInt(value);
+      check(n >= 0n && n < FIELD_MODULUS, "noncanonical public input");
+      return n;
+    });
+    publicInputs[entry.name] = entry.array ? values : values[0];
+    offset += entry.count;
+  }
+  check(offset === expectedPublicInputs.length, "public input layout mismatch");
+  return {
+    circuitName,
+    target,
+    artifactSha256: schema.artifactSha256,
+    vkSha256: key,
+    expectedPublicInputs: [...expectedPublicInputs],
+    witness: new LocalWitness({ ...privateInputs, ...publicInputs })
+  };
+}
+function witnessStatement(circuitName, expectedPublicInputs, target = "evm") {
+  const schema = witness_layouts_default[circuitName], key = schema.keys[target];
+  check(
+    typeof key === "string" && expectedPublicInputs.length === schema.publicInputCount,
+    "unpublished target or statement width mismatch"
+  );
+  return {
+    circuitName,
+    target,
+    artifactSha256: schema.artifactSha256,
+    vkSha256: key,
+    expectedPublicInputs: [...expectedPublicInputs]
+  };
+}
+// src/authorization/WitnessContext.ts
+var WitnessContext = class {
+  constructor(protocol) {
+    this.protocol = protocol;
+  }
+  context(note) {
+    const c = this.protocol.context;
+    check(
+      note.chainId === c.chainId && note.protocolAddress === BigInt(c.protocolAddress) && note.tokenAddress === BigInt(c.tokenAddress),
+      "note context mismatch"
+    );
+  }
+  async authority(operation, capacity, words, signed, identity) {
+    check(!!signed, "private wallet authorization required");
+    const c = this.protocol.context, request = {
+      context: { chainId: c.chainId, protocolAddress: BigInt(c.protocolAddress) },
+      operation,
+      capacity,
+      words: words.slice(0, -2).map(BigInt)
+    };
+    check(
+      signed.ownerAddress === identity && signed.digest === computeWalletAuthorizationDigest(request),
+      "authorization statement mismatch"
+    );
+    const witness = signed.withWitness((value) => value);
+    check(
+      await verifyWalletAuthorization(
+        identity,
+        Uint8Array.from([4, ...witness.public_key_x, ...witness.public_key_y]),
+        Uint8Array.from(witness.signature),
+        request
+      ),
+      "invalid wallet authorization"
+    );
+    return witness;
+  }
+  async membership(leaf, input, sources) {
+    const source = sources.findIndex((value) => value.treeId === input.treeId);
+    check(
+      source >= 0 && Number.isInteger(input.leafIndex) && input.leafIndex >= 0 && input.leafIndex < 65536 && input.path.length === 16,
+      "invalid membership position"
+    );
+    let root = BigInt(leaf);
+    for (let level = 0; level < 16; level++)
+      root = BigInt(
+        await poseidonHash(
+          input.leafIndex >> level & 1 ? [input.path[level], root] : [root, input.path[level]]
+        )
+      );
+    check(root === BigInt(sources[source].merkleRoot), "membership root mismatch");
+    return source;
+  }
+  async noteLeaf(note) {
+    this.context(note);
+    return computeNoteCommitment(
+      note.chainId,
+      await computeNoteIdentity(BigInt(note.ownerAddress), note.nonce),
+      note.tokenAddress,
+      note.amount
+    );
+  }
+  async creditLeaf(note) {
+    this.context(note);
+    return computeCreditCommitment(
+      note.chainId,
+      note.spenderWalletIdentity,
+      note.ownerWalletIdentity,
+      note.spenderPayout,
+      note.ownerPayout,
+      note.tokenAddress,
+      note.amount,
+      note.nonce,
+      note.expiry,
+      await computeCreditSharedKeyHash(note.creditSharedKey),
+      note
+    );
+  }
+  async noteInputs(inputs, sources, nullifiers, identity, authority) {
+    check(inputs.length === nullifiers.length, "input count mismatch");
+    return Promise.all(
+      inputs.map(async (input, i) => {
+        check(input.note.ownerAddress === identity, "input wallet mismatch");
+        const leaf = await this.noteLeaf(input.note);
+        check(
+          await computeNoteNullifier(input.note.chainId, input.note.nonce, leaf) === nullifiers[i],
+          "input nullifier mismatch"
+        );
+        return BigInt(await this.membership(leaf, input, sources));
+      })
+    );
+  }
+};
+// src/authorization/credit-cancel.ts
+import { computeCreditNullifier, normalizeCreditDeliveryState } from "@invisi-labs/core";
+// src/credit/credit-lifecycle.ts
+import { AbiCoder as AbiCoder3, getAddress as getAddress4, Interface as Interface2, keccak256 as keccak2563, ParamType as ParamType3 } from "ethers";
+// src/fees/fee.ts
+import { getAddress as getAddress2 } from "ethers";
+function normalizeFee(p) {
+  const feeRecipient = getAddress2(p.feeRecipient ?? ZERO_ADDRESS);
+  const feeAmount = uint(p.feeAmount ?? 0n, 128, "feeAmount");
+  if (BigInt(feeRecipient) === 0n !== (feeAmount === 0n))
+    throw new Error("invalid fee context");
+  return { feeRecipient, feeAmount };
+}
+// src/credit/credit-lifecycle.ts
+import {
+  computeWalletAuthorizationDigest as computeWalletAuthorizationDigest3,
+  creditPeriods,
+  walletAuthorizationTypedData as walletAuthorizationTypedData2
+} from "@invisi-labs/core";
+// src/credit/credit-create.ts
+import {
+  AbiCoder as AbiCoder2,
+  dataLength as dataLength2,
+  getAddress as getAddress3,
+  Interface,
+  isHexString as isHexString2,
+  keccak256 as keccak2562,
+  ParamType as ParamType2
+} from "ethers";
+import { computeWalletAuthorizationDigest as computeWalletAuthorizationDigest2, walletAuthorizationTypedData } from "@invisi-labs/core";
+var creationTuple = [
+  "(address token,(uint256 treeId,bytes32 merkleRoot)[] sources,bytes32[] nullifiers,bytes32 creditCommitment,bytes32 changeCommitment,address owner,uint256 expiry,uint256 deadline,address feeRecipient,uint256 feeAmount)"
+][0];
+var CREATE_CREDIT_FIELDS = [
+  "token",
+  "sources",
+  "nullifiers",
+  "creditCommitment",
+  "changeCommitment",
+  "owner",
+  "expiry",
+  "deadline",
+  "feeRecipient",
+  "feeAmount"
+];
+function validateCreateCreditRequest(c, p, cs, funding = {}) {
+  known(p, CREATE_CREDIT_FIELDS);
+  if (getAddress3(p.token) !== getAddress3(c.tokenAddress))
+    throw new Error("request token mismatch");
+  const ctx = normalizeContext(c), ns = notes(p.nullifiers, "nullifiers"), sources = normalizeSources(p.sources, ns.length, 10), creditCommitment = word(field(p.creditCommitment)), changeCommitment = word(field(p.changeCommitment)), owner = getAddress3(p.owner), expiry = uint(p.expiry, 64, "expiry"), deadline = checkDeadline(c, p.deadline), f = normalizeFunding(funding);
+  if (BigInt(creditCommitment) === 0n || creditCommitment === changeCommitment)
+    throw new Error("zero or duplicate commitment");
+  if (BigInt(owner) === 0n || expiry === 0n || c.now !== void 0 && expiry <= c.now)
+    throw new Error("owner must be nonzero and expiry future");
+  if (dense(cs, "deliveries").length !== 3) throw new Error("deliveries count mismatch");
+  const deliveries = cs.map(
+    (v, i) => normalizeOpaqueDelivery(v, {
+      empty: i === 2 && BigInt(changeCommitment) === 0n,
+      allowEmpty: i === 2
+    })
+  );
+  if (ns.length === 0 && f.amount === 0n)
+    throw new Error("empty inputs require positive funding");
+  return {
+    ...ctx,
+    ...normalizeFee(p),
+    sources,
+    nullifiers: ns,
+    actualCount: ns.length,
+    sourceCount: sources.length,
+    creditCommitment,
+    changeCommitment,
+    owner,
+    expiry,
+    deadline,
+    deliveries,
+    funding: f
+  };
+}
+function createCreditBaseInputs(c, p, cs, f = {}) {
+  const r = validateCreateCreditRequest(c, p, cs, f), h = BigInt(deliveriesHash(cs));
+  return [
+    r.chainId,
+    BigInt(r.protocolAddress),
+    BigInt(r.tokenAddress),
+    BigInt(r.owner),
+    BigInt(r.actualCount),
+    BigInt(r.sourceCount),
+    ...pad(
+      r.sources.map((s) => s.treeId),
+      10
+    ),
+    ...pad(
+      r.sources.map((s) => BigInt(s.merkleRoot)),
+      10
+    ),
+    ...pad(r.nullifiers.map(BigInt), 10),
+    BigInt(r.creditCommitment),
+    BigInt(r.changeCommitment),
+    h >> 128n,
+    h & (1n << 128n) - 1n,
+    r.expiry,
+    r.deadline,
+    r.funding.amount,
+    BigInt(r.funding.payer),
+    BigInt(r.feeRecipient),
+    r.feeAmount
+  ].map(word);
+}
+function createCreditPublicInputs(c, p, deliveries, funding = {}) {
+  const base = createCreditBaseInputs(c, p, deliveries, funding);
+  const digest = BigInt(
+    computeWalletAuthorizationDigest2({
+      context: { chainId: c.chainId, protocolAddress: BigInt(c.protocolAddress) },
+      operation: "create-credit",
+      capacity: 10,
+      words: base.map(BigInt)
+    })
+  );
+  return [...base, word(digest >> 128n), word(digest & (1n << 128n) - 1n)];
+}
+var hashContext = {
+  chainId: 0n,
+  protocolAddress: ZERO_ADDRESS,
+  tokenAddress: ZERO_ADDRESS
+};
+function createCreditRequestHash(p, cs, f = {}) {
+  const r = validateCreateCreditRequest({ ...hashContext, tokenAddress: p.token }, p, cs, f);
+  return keccak2562(
+    AbiCoder2.defaultAbiCoder().encode(
+      [
+        { type: "bytes32" },
+        creationTuple,
+        { type: "bytes32" },
+        { type: "address" },
+        { type: "uint256" }
+      ].map((parameter) => ParamType2.from(parameter)),
+      [
+        keccak2562(new TextEncoder().encode("InvisiCreateCredit")),
+        { ...p, ...normalizeFee(p) },
+        deliveriesHash(cs),
+        r.funding.payer,
+        r.funding.amount
+      ]
+    )
+  );
+}
+function encodeCreateCreditTypedData(c, p, deliveries, funding = {}) {
+  return walletAuthorizationTypedData({
+    context: { chainId: c.chainId, protocolAddress: BigInt(c.protocolAddress) },
+    operation: "create-credit",
+    capacity: 10,
+    words: createCreditBaseInputs(c, p, deliveries, funding).map(BigInt)
+  });
+}
+function encodeCreateCreditFundingTypedData(c, p, cs, f) {
+  const r = validateCreateCreditRequest(c, p, cs, f);
+  if (r.funding.amount === 0n) throw new Error("funding authorization requires positive deposit");
+  return {
+    domain: getEIP712Domain(c),
+    primaryType: "FundTransact",
+    types: { FundTransact: fundingFields },
+    message: {
+      requestHash: createCreditRequestHash(p, cs, f),
+      payer: r.funding.payer,
+      amount: r.funding.amount,
+      sigNonce: r.funding.sigNonce,
+      deadline: r.funding.deadline
+    }
+  };
+}
+function buildCreateCreditCalldata(p) {
+  const r = validateCreateCreditRequest(p.context, p.params, p.deliveries, p.funding);
+  validateFundingSubmission(r.funding, p.caller, p.context.now);
+  return {
+    data: new Interface(invisiProtocolAbi).encodeFunctionData("createCredit", [
+      encodeCreditProof(p.proof),
+      { ...p.params, ...normalizeFee(p.params) },
+      p.deliveries,
+      r.funding
+    ]),
+    approveAmount: r.funding.amount
+  };
+}
+function encodeCreditProof(proof) {
+  if (!isHexString2(proof) || !/^0x(?:[a-fA-F0-9]{2})*$/.test(proof) || dataLength2(proof) === 0)
+    throw new Error("empty or malformed Credit proof");
+  return AbiCoder2.defaultAbiCoder().encode(
+    ["uint8", "bytes"].map((parameter) => ParamType2.from(parameter)),
+    [0, proof]
+  );
+}
+// src/credit/credit-lifecycle.ts
+var CREDIT_DRAW_CAPACITIES = [1, 12, 50, 120];
+function selectCreditDrawCircuit(count) {
+  if (!Number.isInteger(count) || count < 1 || count > 120)
+    throw new Error("draw requires 1..120 credits");
+  const maxSize = CREDIT_DRAW_CAPACITIES.find((n) => count <= n);
+  return {
+    name: `credit_draw_slots${maxSize}`,
+    maxSize,
+    publicInputCount: 6 * maxSize + 14,
+    totalBits: 126 + Math.ceil(Math.log2(maxSize))
+  };
+}
+function validateCreditDrawRequest(c, p, cs) {
+  known(p, [
+    "token",
+    "sources",
+    "nullifiers",
+    "remainderCommitments",
+    "expiries",
+    "recoveryAmounts",
+    "spender",
+    "totalAmount",
+    "deadline"
+  ]);
+  if (getAddress4(p.token) !== getAddress4(c.tokenAddress))
+    throw new Error("request token mismatch");
+  const ctx = normalizeContext(c), ns = notes(p.nullifiers, "nullifiers"), profile = selectCreditDrawCircuit(ns.length), sources = normalizeSources(p.sources, ns.length, profile.maxSize);
+  for (const [key, v] of Object.entries({
+    remainderCommitments: p.remainderCommitments,
+    expiries: p.expiries,
+    recoveryAmounts: p.recoveryAmounts
+  }))
+    if (dense(v, key).length !== ns.length) throw new Error(`${key} count mismatch`);
+  const remainderCommitments = p.remainderCommitments.map((v) => word(field(v))), recoveryAmounts = p.recoveryAmounts.map((v) => word(field(v))), expiries = p.expiries.map((v) => uint(v, 64, "expiry")), positives = remainderCommitments.filter((v) => BigInt(v) !== 0n);
+  if (new Set(positives).size !== positives.length)
+    throw new Error("duplicate remainder commitment");
+  for (let i = 0; i < ns.length; i++) {
+    if (expiries[i] === 0n || c.now !== void 0 && expiries[i] <= c.now)
+      throw new Error("expiry must be future");
+    if (BigInt(remainderCommitments[i]) === 0n && BigInt(recoveryAmounts[i]) !== 0n)
+      throw new Error("full draw requires zero recovery amount");
+  }
+  const spender = getAddress4(p.spender), totalAmount = uint(p.totalAmount, profile.totalBits, "totalAmount");
+  if (BigInt(spender) === 0n || totalAmount === 0n)
+    throw new Error("spender and total amount must be positive");
+  if (dense(cs, "deliveries").length !== 2 * ns.length)
+    throw new Error("deliveries count mismatch");
+  const deliveries = cs.map(
+    (v, i) => BigInt(remainderCommitments[Math.floor(i / 2)]) === 0n ? normalizeOpaqueDelivery(v, { empty: true }) : normalizeOpaqueDelivery(v, {})
+  );
+  return {
+    ...ctx,
+    sources,
+    nullifiers: ns,
+    remainderCommitments,
+    recoveryAmounts,
+    expiries,
+    spender,
+    totalAmount,
+    deadline: checkDeadline(c, p.deadline),
+    deliveries,
+    profile,
+    periods: creditPeriods(c.timestamp)
+  };
+}
+function creditDrawBaseInputs(c, p, cs) {
+  const r = validateCreditDrawRequest(c, p, cs), n = r.profile.maxSize, h = BigInt(deliveriesHash(cs));
+  return [
+    r.chainId,
+    BigInt(r.protocolAddress),
+    BigInt(r.tokenAddress),
+    BigInt(r.spender),
+    BigInt(r.nullifiers.length),
+    BigInt(r.sources.length),
+    ...pad(
+      r.sources.map((s) => s.treeId),
+      n
+    ),
+    ...pad(
+      r.sources.map((s) => BigInt(s.merkleRoot)),
+      n
+    ),
+    ...pad(r.nullifiers.map(BigInt), n),
+    ...pad(r.remainderCommitments.map(BigInt), n),
+    ...pad(r.expiries, n),
+    r.totalAmount,
+    r.deadline,
+    h >> 128n,
+    h & (1n << 128n) - 1n,
+    ...pad(r.recoveryAmounts.map(BigInt), n),
+    r.periods.currentDay,
+    r.periods.currentMonth
+  ].map(word);
+}
+function validateCancelCreditRequest(c, p) {
+  known(p, [
+    "token",
+    "source",
+    "nullifier",
+    "owner",
+    "amount",
+    "deadline",
+    "feeRecipient",
+    "feeAmount"
+  ]);
+  if (getAddress4(p.token) !== getAddress4(c.tokenAddress))
+    throw new Error("request token mismatch");
+  const ctx = normalizeContext(c), source = normalizeSources([p.source], 1, 1)[0], nullifier = notes([p.nullifier], "nullifier")[0], owner = getAddress4(p.owner), amount = uint(p.amount, 126, "amount");
+  if (BigInt(owner) === 0n || amount === 0n) throw new Error("owner and amount must be positive");
+  const fee = normalizeFee(p);
+  if (fee.feeAmount >= amount) throw new Error("fee must leave a positive owner refund");
+  return {
+    ...ctx,
+    ...fee,
+    source,
+    nullifier,
+    owner,
+    amount,
+    deadline: checkDeadline(c, p.deadline)
+  };
+}
+function cancelCreditBaseInputs(c, p) {
+  const r = validateCancelCreditRequest(c, p);
+  return [
+    r.chainId,
+    BigInt(r.protocolAddress),
+    BigInt(r.tokenAddress),
+    BigInt(r.owner),
+    r.source.treeId,
+    BigInt(r.source.merkleRoot),
+    BigInt(r.nullifier),
+    r.amount,
+    r.deadline,
+    BigInt(r.feeRecipient),
+    r.feeAmount
+  ].map(word);
+}
+function validateTopUpCreditRequest(c, p, cs, funding = {}) {
+  known(p, ["token", "creation", "creditSource", "creditNullifier", "previousExpiry"]);
+  const creation2 = validateCreateCreditRequest(c, p.creation, cs, funding), creditSource = normalizeSources([p.creditSource], 1, 1)[0], creditNullifier = notes([p.creditNullifier], "creditNullifier")[0], previousExpiry = uint(p.previousExpiry, 64, "previousExpiry");
+  if (previousExpiry === 0n || c.now !== void 0 && previousExpiry <= c.now)
+    throw new Error("previous Credit has expired");
+  if (creation2.expiry < previousExpiry) throw new Error("expiry must not decrease");
+  if (creation2.nullifiers.includes(creditNullifier))
+    throw new Error("duplicate credit and ordinary nullifier");
+  return { creation: creation2, creditSource, creditNullifier, previousExpiry };
+}
+function topUpCreditBaseInputs(c, p, cs, f = {}) {
+  const r = validateTopUpCreditRequest(c, p, cs, f);
+  return [
+    ...createCreditBaseInputs(c, p.creation, cs, f),
+    word(r.creditSource.treeId),
+    r.creditSource.merkleRoot,
+    r.creditNullifier,
+    word(r.previousExpiry)
+  ];
+}
+var cancelTuple = [
+  "(address token,(uint256 treeId,bytes32 merkleRoot) source,bytes32 nullifier,address owner,uint256 amount,uint256 deadline,address feeRecipient,uint256 feeAmount)"
+][0];
+var topTuple = [
+  "((address token,(uint256 treeId,bytes32 merkleRoot)[] sources,bytes32[] nullifiers,bytes32 creditCommitment,bytes32 changeCommitment,address owner,uint256 expiry,uint256 deadline,address feeRecipient,uint256 feeAmount) creation,(uint256 treeId,bytes32 merkleRoot) creditSource,bytes32 creditNullifier,uint256 previousExpiry)"
+][0];
+var hashContext2 = {
+  chainId: 0n,
+  protocolAddress: ZERO_ADDRESS,
+  tokenAddress: ZERO_ADDRESS
+};
+function cancelCreditRequestHash(p) {
+  validateCancelCreditRequest({ ...hashContext2, tokenAddress: p.token }, p);
+  return keccak2563(
+    AbiCoder3.defaultAbiCoder().encode(
+      [{ type: "bytes32" }, cancelTuple].map((parameter) => ParamType3.from(parameter)),
+      [
+        keccak2563(new TextEncoder().encode("InvisiCancelCredit")),
+        { ...p, ...normalizeFee(p) }
+      ]
+    )
+  );
+}
+function topUpCreditRequestHash(p, cs, f = {}) {
+  const r = validateTopUpCreditRequest(
+    { ...hashContext2, tokenAddress: p.creation.token },
+    p,
+    cs,
+    f
+  );
+  return keccak2563(
+    AbiCoder3.defaultAbiCoder().encode(
+      [
+        { type: "bytes32" },
+        topTuple,
+        { type: "bytes32" },
+        { type: "address" },
+        { type: "uint256" }
+      ].map((parameter) => ParamType3.from(parameter)),
+      [
+        keccak2563(new TextEncoder().encode("InvisiTopUpCredit")),
+        { ...p, creation: { ...p.creation, ...normalizeFee(p.creation) } },
+        deliveriesHash(cs),
+        r.creation.funding.payer,
+        r.creation.funding.amount
+      ]
+    )
+  );
+}
+function authorize(c, operation, capacity, words) {
+  return walletAuthorizationTypedData2({
+    context: { chainId: c.chainId, protocolAddress: BigInt(c.protocolAddress) },
+    operation,
+    capacity,
+    words: words.map(BigInt)
+  });
+}
+function appendDigest(c, operation, capacity, words) {
+  const digest = BigInt(
+    computeWalletAuthorizationDigest3({
+      context: { chainId: c.chainId, protocolAddress: BigInt(c.protocolAddress) },
+      operation,
+      capacity,
+      words: words.map(BigInt)
+    })
+  );
+  return [...words, word(digest >> 128n), word(digest & (1n << 128n) - 1n)];
+}
+function encodeCancelCreditTypedData(c, p) {
+  return authorize(c, "cancel-credit", 1, cancelCreditBaseInputs(c, p));
+}
+function encodeTopUpCreditTypedData(c, p, deliveries, funding = {}) {
+  return authorize(c, "top-up-credit", 10, topUpCreditBaseInputs(c, p, deliveries, funding));
+}
+function encodeCreditDrawTypedData(c, p, deliveries) {
+  return authorize(
+    c,
+    "credit-draw",
+    selectCreditDrawCircuit(p.nullifiers.length).maxSize,
+    creditDrawBaseInputs(c, p, deliveries)
+  );
+}
+function creditDrawPublicInputs(c, p, deliveries) {
+  return appendDigest(
+    c,
+    "credit-draw",
+    selectCreditDrawCircuit(p.nullifiers.length).maxSize,
+    creditDrawBaseInputs(c, p, deliveries)
+  );
+}
+function cancelCreditPublicInputs(c, p) {
+  return appendDigest(c, "cancel-credit", 1, cancelCreditBaseInputs(c, p));
+}
+function topUpCreditPublicInputs(c, p, deliveries, funding = {}) {
+  return appendDigest(c, "top-up-credit", 10, topUpCreditBaseInputs(c, p, deliveries, funding));
+}
+function encodeTopUpCreditFundingTypedData(c, p, cs, f) {
+  const r = validateTopUpCreditRequest(c, p, cs, f), funding = r.creation.funding;
+  if (funding.amount === 0n) throw new Error("funding authorization requires positive deposit");
+  return {
+    domain: getEIP712Domain(c),
+    primaryType: "FundTransact",
+    types: { FundTransact: fundingFields },
+    message: {
+      requestHash: topUpCreditRequestHash(p, cs, f),
+      payer: funding.payer,
+      amount: funding.amount,
+      sigNonce: funding.sigNonce,
+      deadline: funding.deadline
+    }
+  };
+}
+function buildCreditDrawCalldata(p) {
+  validateCreditDrawRequest(p.context, p.params, p.deliveries);
+  return {
+    data: new Interface2(invisiProtocolAbi).encodeFunctionData("creditDraw", [
+      encodeCreditProof(p.proof),
+      p.params,
+      p.deliveries
+    ]),
+    nullifiers: p.params.nullifiers,
+    totalAmount: p.params.totalAmount
+  };
+}
+function buildCancelCreditCalldata(p) {
+  validateCancelCreditRequest(p.context, p.params);
+  return {
+    data: new Interface2(invisiProtocolAbi).encodeFunctionData("cancelCredit", [
+      encodeCreditProof(p.proof),
+      { ...p.params, ...normalizeFee(p.params) }
+    ])
+  };
+}
+function buildTopUpCreditCalldata(p) {
+  const r = validateTopUpCreditRequest(p.context, p.params, p.deliveries, p.funding);
+  validateFundingSubmission(r.creation.funding, p.caller, p.context.now);
+  return {
+    data: new Interface2(invisiProtocolAbi).encodeFunctionData("topUpCredit", [
+      encodeCreditProof(p.proof),
+      { ...p.params, creation: { ...p.params.creation, ...normalizeFee(p.params.creation) } },
+      p.deliveries,
+      r.creation.funding
+    ]),
+    approveAmount: r.creation.funding.amount
+  };
+}
+// src/authorization/credit-cancel.ts
+async function cancelCredit(witness, p) {
+  const note = normalizeCreditDeliveryState(p.input.state).note, leaf = await witness.creditLeaf(note), c = witness.protocol.context;
+  check(
+    await computeCreditNullifier(c.chainId, note.creditSharedKey, leaf) === p.params.nullifier && note.amount === p.params.amount && note.ownerPayout === BigInt(p.params.owner),
+    "Credit cancellation mismatch"
+  );
+  await witness.membership(leaf, p.input, [p.params.source]);
+  const words = cancelCreditPublicInputs(c, p.params), authority = await witness.authority(
+    "cancel-credit",
+    1,
+    words,
+    p.authorization,
+    note.ownerWalletIdentity
+  );
+  return provingRequest(
+    "credit_cancel",
+    {
+      ...authority,
+      spender_payout: note.spenderPayout,
+      spender_wallet_identity: BigInt(note.spenderWalletIdentity),
+      owner_wallet_identity: BigInt(note.ownerWalletIdentity),
+      ...policyWitness(note),
+      input_nonce: note.nonce,
+      expiry: note.expiry,
+      credit_shared_key: note.creditSharedKey,
+      leaf_index: BigInt(p.input.leafIndex),
+      merkle_path: [...p.input.path]
+    },
+    words
+  );
+}
+// src/authorization/credit-creation.ts
+import { normalizeCreditDeliveryState as normalizeCreditDeliveryState2 } from "@invisi-labs/core";
+async function creation(witness, p, operation, words) {
+  const state = normalizeCreditDeliveryState2(p.state), note = state.note;
+  check(
+    await witness.creditLeaf(note) === p.params.creditCommitment && note.ownerPayout === BigInt(p.params.owner) && note.expiry === p.params.expiry,
+    "Credit creation mismatch"
+  );
+  if (operation === "create-credit" && [note.lastDay, note.dailySpent, note.lastMonth, note.monthlySpent].some((v) => v !== 0n))
+    throw new Error("new Credit usage must be zero");
+  const authority = await witness.authority(
+    operation,
+    10,
+    words,
+    p.authorization,
+    note.ownerWalletIdentity
+  );
+  const sources = await witness.noteInputs(
+    p.inputs,
+    p.params.sources,
+    p.params.nullifiers,
+    note.ownerWalletIdentity,
+    authority
+  );
+  if (p.change)
+    check(
+      p.change.ownerAddress === note.ownerWalletIdentity && await witness.noteLeaf(p.change) === p.params.changeCommitment,
+      "change commitment mismatch"
+    );
+  else check(BigInt(p.params.changeCommitment) === 0n, "missing change note");
+  return {
+    ...authority,
+    input_amounts: pad2(
+      p.inputs.map((input) => input.note.amount),
+      10,
+      () => 0n
+    ),
+    input_nonces: pad2(
+      p.inputs.map((input) => input.note.nonce),
+      10,
+      () => 0n
+    ),
+    leaf_indices: pad2(
+      p.inputs.map((input) => BigInt(input.leafIndex)),
+      10,
+      () => 0n
+    ),
+    merkle_paths: pad2(
+      p.inputs.map((input) => [...input.path]),
+      10,
+      zeros
+    ),
+    input_source_indices: pad2(sources, 10, () => 0n),
+    spender_payout: note.spenderPayout,
+    spender_wallet_identity: BigInt(note.spenderWalletIdentity),
+    owner_wallet_identity: BigInt(note.ownerWalletIdentity),
+    ...policyWitness(note, operation === "top-up-credit"),
+    credit_amount: note.amount,
+    credit_nonce: note.nonce,
+    credit_shared_key: note.creditSharedKey,
+    change_amount: p.change?.amount ?? 0n,
+    change_nonce: p.change?.nonce ?? 0n
+  };
+}
+// src/authorization/credit-create.ts
+async function createCredit(witness, p) {
+  const words = createCreditPublicInputs(
+    witness.protocol.context,
+    p.params,
+    p.deliveries,
+    p.funding
+  );
+  return provingRequest(
+    "create_credit",
+    await creation(witness, p, "create-credit", words),
+    words
+  );
+}
+// src/authorization/credit-draw.ts
+import {
+  applyCreditDrawUsage,
+  computeCreditNullifier as computeCreditNullifier2,
+  normalizeCreditDeliveryState as normalizeCreditDeliveryState3,
+  normalizeCreditPolicy as normalizeCreditPolicy2
+} from "@invisi-labs/core";
+async function drawCredit(witness, p) {
+  const c = { ...witness.protocol.context, timestamp: p.timestamp }, profile = selectCreditDrawCircuit(p.inputs.length), capacity = profile.maxSize;
+  check(
+    p.inputs.length === p.amounts.length && p.inputs.length === p.params.nullifiers.length,
+    "draw input count mismatch"
+  );
+  const notes2 = p.inputs.map((input) => normalizeCreditDeliveryState3(input.state).note), identity = notes2[0].spenderWalletIdentity;
+  const words = creditDrawPublicInputs(c, p.params, p.deliveries), authority = await witness.authority(
+    "credit-draw",
+    capacity,
+    words,
+    p.authorization,
+    identity
+  );
+  const sourceIndices = await Promise.all(
+    notes2.map(async (note, i) => {
+      applyCreditDrawUsage(note, p.amounts[i], p.timestamp);
+      const leaf = await witness.creditLeaf(note);
+      check(
+        note.spenderWalletIdentity === identity && note.spenderPayout === BigInt(p.params.spender) && note.expiry === p.params.expiries[i] && p.amounts[i] > 0n && p.amounts[i] <= note.amount && await computeCreditNullifier2(c.chainId, note.creditSharedKey, leaf) === p.params.nullifiers[i],
+        "Credit draw mismatch"
+      );
+      return BigInt(await witness.membership(leaf, p.inputs[i], p.params.sources));
+    })
+  );
+  return provingRequest(
+    profile.name,
+    {
+      ...authority,
+      ...Object.fromEntries(
+        Object.entries({
+          singleLimit: "single_limits",
+          dailyLimit: "daily_limits",
+          monthlyLimit: "monthly_limits",
+          lastDay: "last_days",
+          dailySpent: "daily_spents",
+          lastMonth: "last_months",
+          monthlySpent: "monthly_spents"
+        }).map(([key, name]) => [
+          name,
+          pad2(
+            notes2.map(
+              (note) => normalizeCreditPolicy2(note)[key]
+            ),
+            capacity,
+            () => 0n
+          )
+        ])
+      ),
+      spender_wallet_identity: BigInt(identity),
+      owner_payouts: pad2(
+        notes2.map((note) => note.ownerPayout),
+        capacity,
+        () => 0n
+      ),
+      owner_wallet_identities: pad2(
+        notes2.map((note) => BigInt(note.ownerWalletIdentity)),
+        capacity,
+        () => 0n
+      ),
+      input_amounts: pad2(
+        notes2.map((note) => note.amount),
+        capacity,
+        () => 0n
+      ),
+      input_nonces: pad2(
+        notes2.map((note) => note.nonce),
+        capacity,
+        () => 0n
+      ),
+      credit_shared_keys: pad2(
+        notes2.map((note) => note.creditSharedKey),
+        capacity,
+        () => 0n
+      ),
+      leaf_indices: pad2(
+        p.inputs.map((input) => BigInt(input.leafIndex)),
+        capacity,
+        () => 0n
+      ),
+      merkle_paths: pad2(
+        p.inputs.map((input) => [...input.path]),
+        capacity,
+        zeros
+      ),
+      input_source_indices: pad2(sourceIndices, capacity, () => 0n),
+      draw_amounts: pad2(p.amounts, capacity, () => 0n)
+    },
+    words
+  );
+}
+// src/authorization/credit-top-up.ts
+import { computeCreditNullifier as computeCreditNullifier3, normalizeCreditDeliveryState as normalizeCreditDeliveryState4 } from "@invisi-labs/core";
+async function topUpCredit(witness, p) {
+  const c = witness.protocol.context, previous = normalizeCreditDeliveryState4(p.previous.state), next = normalizeCreditDeliveryState4(p.state), old = previous.note, note = next.note, leaf = await witness.creditLeaf(old);
+  for (const field2 of [
+    "spenderWalletIdentity",
+    "ownerWalletIdentity",
+    "spenderPayout",
+    "ownerPayout",
+    "creditSharedKey",
+    "lastDay",
+    "dailySpent",
+    "lastMonth",
+    "monthlySpent"
+  ])
+    check(old[field2] === note[field2], "Credit role or payout changed");
+  check(
+    JSON.stringify(previous.ownerReceivingKeys) === JSON.stringify(next.ownerReceivingKeys) && JSON.stringify(previous.spenderReceivingKeys) === JSON.stringify(next.spenderReceivingKeys),
+    "Credit receiving snapshots changed"
+  );
+  check(
+    old.amount < note.amount && old.expiry <= note.expiry && old.expiry === p.params.previousExpiry && (c.now === void 0 || old.expiry > c.now),
+    "invalid Credit top-up"
+  );
+  check(
+    await computeCreditNullifier3(c.chainId, old.creditSharedKey, leaf) === p.params.creditNullifier,
+    "previous Credit nullifier mismatch"
+  );
+  await witness.membership(leaf, p.previous, [p.params.creditSource]);
+  const words = topUpCreditPublicInputs(c, p.params, p.deliveries, p.funding), base = await creation(witness, { ...p, params: p.params.creation }, "top-up-credit", words);
+  return provingRequest(
+    "credit_top_up",
+    {
+      ...base,
+      previous_single_limit: old.singleLimit,
+      previous_daily_limit: old.dailyLimit,
+      previous_monthly_limit: old.monthlyLimit,
+      previous_credit_amount: old.amount,
+      previous_credit_nonce: old.nonce,
+      previous_credit_leaf_index: BigInt(p.previous.leafIndex),
+      previous_credit_merkle_path: [...p.previous.path]
+    },
+    words
+  );
+}
+// src/authorization/transact.ts
+import { computeNoteCommitment as computeNoteCommitment2, computeNoteIdentity as computeNoteIdentity2 } from "@invisi-labs/core";
+// src/funds/public-inputs.ts
+import { TypedDataEncoder } from "ethers";
+// src/funds/funding.ts
+import { walletAuthorizationTypedData as walletAuthorizationTypedData3 } from "@invisi-labs/core";
+import { AbiCoder as AbiCoder4, keccak256 as keccak2564, ParamType as ParamType4 } from "ethers";
+// src/funds/abi-tuples.ts
+var singleTuple = [
+  "(address token,bytes32 merkleRoot,bytes32[] nullifiers,bytes32[] outputCommitments,uint256 inputTreeId,address withdrawalAddress,uint256 withdrawalAmount,uint256 deadline,address feeRecipient,uint256 feeAmount)"
+][0];
+var crossTuple = [
+  "(address token,(uint256 treeId,bytes32 merkleRoot)[] sources,bytes32[] nullifiers,bytes32[] outputCommitments,address withdrawalAddress,uint256 withdrawalAmount,uint256 deadline,address feeRecipient,uint256 feeAmount)"
+][0];
+// src/funds/request.ts
+import { getAddress as getAddress5 } from "ethers";
+var TRANSACT_CAPACITIES = [14, 56, 112, 168];
+function selectTransactCapacity(inputs, outputs) {
+  if (!Number.isInteger(inputs) || !Number.isInteger(outputs) || inputs < 0 || outputs < 0 || inputs + outputs < 1 || inputs === 0 && outputs < 2 || inputs + outputs > 168)
+    throw new Error("unsupported transact shape");
+  return TRANSACT_CAPACITIES.find((n) => inputs + outputs <= n);
+}
+function normalizeTransactRequest(c, p, cs, funding = {}) {
+  const ctx = normalizeContext(c);
+  if (getAddress5(p.token) !== ctx.tokenAddress)
+    throw new Error("request token mismatch");
+  known(p, [
+    "token",
+    "sources",
+    "nullifiers",
+    "outputCommitments",
+    "withdrawalAddress",
+    "withdrawalAmount",
+    "deadline",
+    "feeRecipient",
+    "feeAmount"
+  ]);
+  const ns = notes(p.nullifiers, "nullifiers"), os = notes(p.outputCommitments, "outputCommitments"), capacity = selectTransactCapacity(ns.length, os.length);
+  const sources = normalizeSources(p.sources, ns.length, capacity), deliveries = dense(cs, "deliveries").map(
+    (v) => normalizeOpaqueDelivery(v, { allowEmpty: true })
+  );
+  if (deliveries.length !== os.length) throw new Error("deliveries count mismatch");
+  const withdrawalAmount = uint(p.withdrawalAmount, 128, "withdrawalAmount"), withdrawalAddress = getAddress5(p.withdrawalAddress), f = normalizeFunding(funding);
+  const feeAmount = uint(p.feeAmount ?? 0n, 128, "feeAmount");
+  const feeRecipient = getAddress5(
+    p.feeRecipient ?? "0x0000000000000000000000000000000000000000"
+  );
+  if (feeAmount === 0n !== (BigInt(feeRecipient) === 0n)) throw new Error("invalid fee");
+  if (withdrawalAmount === 0n !== (BigInt(withdrawalAddress) === 0n) || os.length === 0 && withdrawalAmount === 0n)
+    throw new Error("invalid withdrawal");
+  if (ns.length === 0 && (f.amount === 0n || withdrawalAmount !== 0n))
+    throw new Error("zero inputs require positive funding and zero withdrawal");
+  return {
+    ...ctx,
+    capacity,
+    sources,
+    nullifiers: ns,
+    outputCommitments: os,
+    inputCount: ns.length,
+    outputCount: os.length,
+    sourceCount: sources.length,
+    inputTreeIds: pad(
+      sources.map((s) => s.treeId),
+      capacity
+    ),
+    merkleRoots: pad(
+      sources.map((s) => BigInt(s.merkleRoot)),
+      capacity
+    ),
+    slotValues: pad([...ns, ...os].map(BigInt), capacity),
+    deliveries,
+    deliveriesHash: deliveriesHash(deliveries),
+    withdrawalAddress,
+    withdrawalAmount,
+    feeRecipient,
+    feeAmount,
+    deadline: checkDeadline(c, p.deadline),
+    depositAmount: f.amount,
+    depositPayer: f.payer,
+    funding: f
+  };
+}
+function transactPublicInputs(c, p, cs, f = {}) {
+  const r = normalizeTransactRequest(c, p, cs, f), h = BigInt(r.deliveriesHash);
+  return [
+    r.chainId,
+    BigInt(r.protocolAddress),
+    BigInt(r.tokenAddress),
+    BigInt(r.inputCount),
+    BigInt(r.outputCount),
+    BigInt(r.sourceCount),
+    ...r.inputTreeIds,
+    ...r.merkleRoots,
+    ...r.slotValues,
+    h >> 128n,
+    h & (1n << 128n) - 1n,
+    BigInt(r.withdrawalAddress),
+    r.withdrawalAmount,
+    r.deadline,
+    r.depositAmount,
+    BigInt(r.depositPayer),
+    BigInt(r.feeRecipient),
+    r.feeAmount
+  ].map(word);
+}
+// src/funds/funding.ts
+function encodeTransactTypedData(c, p, deliveries, f = {}) {
+  const r = normalizeTransactRequest(c, p, deliveries, f);
+  return walletAuthorizationTypedData3({
+    context: { chainId: r.chainId, protocolAddress: BigInt(r.protocolAddress) },
+    operation: "transact",
+    capacity: r.capacity,
+    words: transactPublicInputs(c, p, deliveries, f).map(BigInt)
+  });
+}
+function transactFundingRequestHash(proof, p, cs) {
+  const single = {
+    token: p.token,
+    merkleRoot: p.sources[0]?.merkleRoot ?? word(0n),
+    nullifiers: p.nullifiers,
+    outputCommitments: p.outputCommitments,
+    inputTreeId: p.sources[0]?.treeId ?? 0n,
+    withdrawalAddress: p.withdrawalAddress,
+    withdrawalAmount: p.withdrawalAmount,
+    deadline: p.deadline,
+    feeRecipient: p.feeRecipient ?? "0x0000000000000000000000000000000000000000",
+    feeAmount: p.feeAmount ?? 0n
+  };
+  return p.sources.length > 1 ? keccak2564(
+    AbiCoder4.defaultAbiCoder().encode(
+      [{ type: "bytes32" }, { type: "bytes32" }, crossTuple, { type: "bytes32" }].map(
+        (parameter) => ParamType4.from(parameter)
+      ),
+      [
+        keccak2564(new TextEncoder().encode("InvisiCrossTreeTransact")),
+        keccak2564(proof),
+        { ...p, feeRecipient: single.feeRecipient, feeAmount: single.feeAmount },
+        deliveriesHash(cs)
+      ]
+    )
+  ) : keccak2564(
+    AbiCoder4.defaultAbiCoder().encode(
+      [{ type: "bytes32" }, singleTuple, { type: "bytes32" }].map(
+        (parameter) => ParamType4.from(parameter)
+      ),
+      [keccak2564(proof), single, deliveriesHash(cs)]
+    )
+  );
+}
+function encodeTransactFundingTypedData(c, proof, p, cs, funding) {
+  normalizeTransactRequest(c, p, cs, funding);
+  const f = normalizeFunding(funding);
+  if (f.amount === 0n) throw new Error("funding authorization requires positive deposit");
+  return {
+    domain: getEIP712Domain(c),
+    primaryType: "FundTransact",
+    types: { FundTransact: fundingFields },
+    message: {
+      requestHash: transactFundingRequestHash(proof, p, cs),
+      payer: f.payer,
+      amount: f.amount,
+      sigNonce: f.sigNonce,
+      deadline: f.deadline
+    }
+  };
+}
+// src/funds/public-inputs.ts
+function transactUserPublicInputs(c, p, cs, f = {}) {
+  const words = transactPublicInputs(c, p, cs, f), digest = BigInt(
+    ((typed) => TypedDataEncoder.hash(
+      typed.domain,
+      Object.fromEntries(
+        Object.entries(typed.types).map(([name, fields]) => [
+          name,
+          [...fields]
+        ])
+      ),
+      typed.message
+    ))(encodeTransactTypedData(c, p, cs, f))
+  );
+  return [...words, word(digest >> 128n), word(digest & (1n << 128n) - 1n)];
+}
+// src/authorization/transact.ts
+async function transact(witness, p) {
+  const c = witness.protocol.context, n = normalizeTransactRequest(c, p.params, p.deliveries, p.funding), words = transactUserPublicInputs(c, p.params, p.deliveries, p.funding);
+  check(
+    p.inputs.length === n.inputCount && p.outputs.length === n.outputCount,
+    "note count mismatch"
+  );
+  const identity = p.inputs[0]?.note.ownerAddress;
+  const unsignedSweep = !!identity && !p.authorization && n.outputCount === 0 && n.depositAmount === 0n && n.feeAmount === 0n && BigInt(p.params.withdrawalAddress) === BigInt(identity);
+  const authority = identity && !unsignedSweep ? await witness.authority("transact", n.capacity, words, p.authorization, identity) : zeroAuthority();
+  const sources = await witness.noteInputs(
+    p.inputs,
+    p.params.sources,
+    p.params.nullifiers,
+    identity ?? "0x" + "00".repeat(32),
+    authority
+  );
+  const outputs = await Promise.all(
+    p.outputs.map(async (output, i) => {
+      const opening = "identity" in output ? output.note : output;
+      const identity2 = "identity" in output ? field(output.identity) : BigInt(await computeNoteIdentity2(BigInt(output.ownerAddress), output.nonce));
+      const amount = uint(output.amount, 128, "output amount");
+      check(identity2 !== 0n && amount !== 0n, "zero output identity or amount");
+      if (opening) {
+        witness.context(opening);
+        check(
+          opening.amount === amount && BigInt(
+            await computeNoteIdentity2(BigInt(opening.ownerAddress), opening.nonce)
+          ) === identity2,
+          "output opening mismatch"
+        );
+      }
+      const commitment = await computeNoteCommitment2(
+        c.chainId,
+        word(identity2),
+        BigInt(c.tokenAddress),
+        amount
+      );
+      check(commitment === p.params.outputCommitments[i], "output commitment mismatch");
+      return { identity: identity2, amount };
+    })
+  );
+  const all = [...p.inputs.map((input) => input.note), ...outputs];
+  return provingRequest(
+    `transact_user_slots${n.capacity}`,
+    {
+      input_owner_address: identity ? BigInt(identity) : 0n,
+      ...authority,
+      output_identities: pad2(
+        [...p.inputs.map(() => 0n), ...outputs.map((output) => output.identity)],
+        n.capacity,
+        () => 0n
+      ),
+      amounts: pad2(
+        all.map((note) => note.amount),
+        n.capacity,
+        () => 0n
+      ),
+      nonces: pad2(
+        [...p.inputs.map((input) => input.note.nonce), ...outputs.map(() => 0n)],
+        n.capacity,
+        () => 0n
+      ),
+      leaf_indices: pad2(
+        p.inputs.map((input) => BigInt(input.leafIndex)),
+        n.capacity,
+        () => 0n
+      ),
+      merkle_paths: pad2(
+        p.inputs.map((input) => [...input.path]),
+        n.capacity,
+        zeros
+      ),
+      input_source_indices: pad2(sources, n.capacity, () => 0n)
+    },
+    words,
+    p.target
+  );
+}
+// src/authorization/witness.ts
+var WitnessBuilder = class {
+  #witness;
+  constructor(protocol) {
+    this.#witness = new WitnessContext(protocol);
+  }
+  static statement(circuitName, expectedPublicInputs, target = "evm") {
+    return witnessStatement(circuitName, expectedPublicInputs, target);
+  }
+  async transact(p) {
+    return transact(this.#witness, p);
+  }
+  async createCredit(p) {
+    return createCredit(this.#witness, p);
+  }
+  async cancelCredit(p) {
+    return cancelCredit(this.#witness, p);
+  }
+  async drawCredit(p) {
+    return drawCredit(this.#witness, p);
+  }
+  async topUpCredit(p) {
+    return topUpCredit(this.#witness, p);
+  }
+};
+// src/client/Protocol.ts
+import { Contract, getAddress as getAddress7, keccak256 as keccak2568 } from "ethers";
+import {
+  defineDeployment
+} from "@invisi-labs/rpc";
+// src/funds/aggregate.ts
+import { AbiCoder as AbiCoder5, Interface as Interface3, keccak256 as keccak2565, ParamType as ParamType5 } from "ethers";
+function buildTransactAggregateCalldata(p) {
+  if (![4, 8, 12].includes(dense(p.requests, "requests").length))
+    throw new Error("aggregate requires 4, 8 or 12 requests");
+  const requests = p.requests.map((request) => {
+    const r = normalizeTransactRequest(
+      { ...p.context, tokenAddress: request.params.token },
+      request.params,
+      request.deliveries,
+      request.funding
+    );
+    if (r.capacity !== 14) throw new Error("aggregate supports only capacity 14");
+    validateFundingSubmission(r.funding, p.caller, p.context.now);
+    return {
+      ...request,
+      params: { ...request.params, feeRecipient: r.feeRecipient, feeAmount: r.feeAmount }
+    };
+  });
+  return {
+    data: new Interface3(
+      invisiProtocolAbi.filter(
+        (item) => item.type === "function" && item.name === "transact" && item.inputs[1]?.type === "tuple[]"
+      )
+    ).encodeFunctionData("transact", [p.proof, requests]),
+    capacity: 14
+  };
+}
+function aggregateMemberRequestHash(c, r) {
+  const capacity = selectTransactCapacity(
+    r.params.nullifiers.length,
+    r.params.outputCommitments.length
+  );
+  if (capacity !== 14) throw new Error("aggregate supports only capacity 14");
+  return keccak2565(
+    AbiCoder5.defaultAbiCoder().encode(
+      ["bytes32", "uint256", "bytes32[]"].map((parameter) => ParamType5.from(parameter)),
+      [
+        keccak2565(new TextEncoder().encode("InvisiAtomicBatchMemberV1")),
+        BigInt(capacity),
+        transactPublicInputs(c, r.params, r.deliveries, r.funding)
+      ]
+    )
+  );
+}
+function aggregatePublicInputs(c, requests) {
+  if (![4, 8, 12].includes(dense(requests, "requests").length))
+    throw new Error("aggregate requires 4, 8 or 12 requests");
+  return requests.flatMap((r) => {
+    const context = { ...c, tokenAddress: r.params.token };
+    aggregateMemberRequestHash(context, r);
+    return [word(14n), ...transactPublicInputs(context, r.params, r.deliveries, r.funding)];
+  });
+}
+function encodeAggregateFundingTypedData(c, r) {
+  const f = normalizeFunding(r.funding);
+  if (f.amount === 0n) throw new Error("funding authorization requires positive deposit");
+  return {
+    domain: getEIP712Domain(c),
+    primaryType: "FundTransact",
+    types: { FundTransact: fundingFields },
+    message: {
+      requestHash: aggregateMemberRequestHash(c, r),
+      payer: f.payer,
+      amount: f.amount,
+      sigNonce: f.sigNonce,
+      deadline: f.deadline
+    }
+  };
+}
+// src/client/TokenProtocol.ts
+import { keccak256 as keccak2567 } from "ethers";
+import { MissingCapabilityError } from "@invisi-labs/core";
+// src/funds/calldata.ts
+import { Interface as Interface4 } from "ethers";
+function buildTransactCalldata(p) {
+  const r = normalizeTransactRequest(p.context, p.params, p.deliveries, p.funding);
+  validateFundingSubmission(r.funding, p.caller, p.context.now);
+  const request = {
+    params: {
+      token: r.tokenAddress,
+      sources: r.sources,
+      nullifiers: r.nullifiers,
+      outputCommitments: r.outputCommitments,
+      withdrawalAddress: r.withdrawalAddress,
+      withdrawalAmount: r.withdrawalAmount,
+      deadline: r.deadline,
+      feeRecipient: r.feeRecipient,
+      feeAmount: r.feeAmount
+    },
+    deliveries: p.deliveries,
+    funding: r.funding
+  };
+  const abi = invisiProtocolAbi.filter(
+    (item) => item.type === "function" && item.name === "transact" && item.inputs.length === 2 && item.inputs[1]?.type === "tuple"
+  );
+  const data = new Interface4(abi).encodeFunctionData("transact", [p.proof, request]);
+  return { data, capacity: r.capacity, approveAmount: r.depositAmount };
+}
+// src/funds/shield.ts
+import { computeNoteCommitment as computeNoteCommitment3 } from "@invisi-labs/core";
+import { AbiCoder as AbiCoder6, getAddress as getAddress6, Interface as Interface5, keccak256 as keccak2566, ParamType as ParamType6 } from "ethers";
+async function validateShieldRequest(p) {
+  normalizeContext(p.context);
+  if (getAddress6(p.params.token) !== getAddress6(p.context.tokenAddress))
+    throw new Error("request token mismatch");
+  known(p.params, ["token", "outputCommitments", "deadline", "feeRecipient", "feeAmount"]);
+  checkDeadline(p.context, p.params.deadline);
+  const outputs = dense(p.outputs, "outputs"), commitments = notes(p.params.outputCommitments, "outputCommitments"), cs = dense(p.deliveries, "deliveries"), f = normalizeFunding(p.funding);
+  if (outputs.length < 1 || outputs.length > 10 || commitments.length !== outputs.length || cs.length !== outputs.length)
+    throw new Error("shield requires 1..10 outputs and matching deliveries");
+  let total = 0n;
+  for (const [i, o] of outputs.entries()) {
+    known(o, ["identity", "amount"], "output");
+    uint(o.amount, 128, "amount");
+    if (o.amount === 0n) throw new Error("amount must be positive");
+    field(o.identity);
+    normalizeOpaqueDelivery(cs[i], { allowEmpty: true });
+    if (await computeNoteCommitment3(
+      p.context.chainId,
+      o.identity,
+      BigInt(p.context.tokenAddress),
+      o.amount
+    ) !== commitments[i])
+      throw new Error("output commitment mismatch");
+    total += o.amount;
+  }
+  if (total + normalizeFee(p.params).feeAmount !== f.amount)
+    throw new Error("funding must equal output total plus fee");
+  return f;
+}
+async function encodeShieldFundingTypedData(p) {
+  const f = await validateShieldRequest(p);
+  return {
+    domain: getEIP712Domain(p.context),
+    primaryType: "FundShield",
+    types: { FundShield: fundingFields },
+    message: {
+      requestHash: shieldFundingRequestHash(p.params, p.outputs, p.deliveries),
+      payer: f.payer,
+      amount: f.amount,
+      sigNonce: f.sigNonce,
+      deadline: f.deadline
+    }
+  };
+}
+async function buildShieldCalldata(p) {
+  const f = await validateShieldRequest(p);
+  validateFundingSubmission(f, p.caller, p.context.now);
+  return {
+    data: new Interface5(invisiProtocolAbi).encodeFunctionData("shield", [
+      { ...p.params, ...normalizeFee(p.params) },
+      p.outputs,
+      p.deliveries,
+      f
+    ]),
+    approveAmount: f.amount
+  };
+}
+function shieldFundingRequestHash(params, outputs, cs) {
+  const outputHash = keccak2566(
+    AbiCoder6.defaultAbiCoder().encode(
+      ["(bytes32 identity,uint256 amount)[]"].map((parameter) => ParamType6.from(parameter)),
+      [outputs]
+    )
+  );
+  return keccak2566(
+    AbiCoder6.defaultAbiCoder().encode(
+      [
+        "bytes32",
+        "(address token,bytes32[] outputCommitments,uint256 deadline,address feeRecipient,uint256 feeAmount)",
+        "bytes32",
+        "bytes32"
+      ].map((parameter) => ParamType6.from(parameter)),
+      [
+        keccak2566(new TextEncoder().encode("InvisiShield")),
+        { ...params, ...normalizeFee(params) },
+        outputHash,
+        deliveriesHash(cs)
+      ]
+    )
+  );
+}
+// src/client/TokenProtocol.ts
+var TokenProtocol = class {
+  context;
+  expectedRuntimeCodeHash;
+  constructor(context, options = {}) {
+    const normalized = normalizeContext(context);
+    if (BigInt(normalized.protocolAddress) === 0n || BigInt(normalized.tokenAddress) === 0n) {
+      throw new Error("deployment addresses must be nonzero");
+    }
+    if (options.expectedRuntimeCodeHash && !/^0x[0-9a-fA-F]{64}$/.test(options.expectedRuntimeCodeHash)) {
+      throw new Error("invalid runtime code hash");
+    }
+    this.expectedRuntimeCodeHash = options.expectedRuntimeCodeHash?.toLowerCase();
+    this.context = Object.freeze(normalized);
+    Object.freeze(this);
+  }
+  async validateDeployment(reader, options = {}) {
+    if ((options.requireRuntimeProfile ?? true) && !this.expectedRuntimeCodeHash) {
+      throw new MissingCapabilityError("trusted deployment profile");
+    }
+    if (await reader.getChainId() !== this.context.chainId) {
+      throw new Error("deployment chain mismatch");
+    }
+    const code = await reader.getCode(this.context.protocolAddress);
+    if (!/^0x(?:[0-9a-fA-F]{2})+$/.test(code) || this.expectedRuntimeCodeHash && keccak2567(code) !== this.expectedRuntimeCodeHash) {
+      throw new Error("deployment runtime code profile mismatch");
+    }
+    const tokenCode = await reader.getCode(this.context.tokenAddress);
+    if (!/^0x(?:[0-9a-fA-F]{2})+$/.test(tokenCode)) {
+      throw new Error("token address must have contract code");
+    }
+  }
+  transact(request) {
+    return {
+      to: this.context.protocolAddress,
+      value: 0n,
+      ...buildTransactCalldata({ ...request, context: this.context })
+    };
+  }
+  aggregate(request) {
+    return {
+      to: this.context.protocolAddress,
+      value: 0n,
+      ...buildTransactAggregateCalldata({ ...request, context: this.context })
+    };
+  }
+  async shield(request) {
+    return {
+      to: this.context.protocolAddress,
+      value: 0n,
+      ...await buildShieldCalldata({ ...request, context: this.context })
+    };
+  }
+  createCredit(request) {
+    return {
+      to: this.context.protocolAddress,
+      value: 0n,
+      ...buildCreateCreditCalldata({ ...request, context: this.context })
+    };
+  }
+  drawCredit(request) {
+    return {
+      to: this.context.protocolAddress,
+      value: 0n,
+      ...buildCreditDrawCalldata({ ...request, context: this.context })
+    };
+  }
+  cancelCredit(request) {
+    return {
+      to: this.context.protocolAddress,
+      value: 0n,
+      ...buildCancelCreditCalldata({ ...request, context: this.context })
+    };
+  }
+  topUpCredit(request) {
+    return {
+      to: this.context.protocolAddress,
+      value: 0n,
+      ...buildTopUpCreditCalldata({ ...request, context: this.context })
+    };
   }
 };
-// src/witness.ts
-var pad2 = (values, count, zero) => {
-  if (values.length > count) throw new Error("witness capacity exceeded");
-  return [...values, ...Array.from({ length: count - values.length }, zero)];
+// src/client/Protocol.ts
+var Protocol = class _Protocol {
+  deployment;
+  context;
+  constructor(options) {
+    known(options, ["deployment"], "protocol options");
+    this.deployment = defineDeployment(options.deployment);
+    this.context = Object.freeze({
+      chainId: this.deployment.chainId,
+      protocolAddress: this.deployment.protocol.address
+    });
+    Object.freeze(this);
+  }
+  /** Load the selected deployment and verify its contract against Chain RPC before returning. */
+  static async fromRpc(rpc, provider, options = {}) {
+    const chainId = (await provider.getNetwork()).chainId;
+    if (typeof chainId !== "bigint" || chainId <= 0n || chainId >= 1n << 64n)
+      throw new Error("invalid protocol chainId");
+    const deployment = await rpc.getDeployment(
+      chainId,
+      options.signal ? { signal: options.signal } : {}
+    );
+    const protocol = new _Protocol({ deployment });
+    if (protocol.context.chainId !== chainId) throw new Error("RPC deployment chain mismatch");
+    await protocol.validateDeployment(provider);
+    return protocol;
+  }
+  async validateDeployment(connection) {
+    const reader = "getNetwork" in connection ? {
+      getChainId: async () => (await connection.getNetwork()).chainId,
+      getCode: async (address) => await connection.getCode(address),
+      getProtocolAddressRegistry: async (address) => getAddress7(
+        await new Contract(
+          address,
+          ["function addressRegistry() view returns (address)"],
+          connection
+        ).getFunction("addressRegistry")()
+      ),
+      getProtocolVersion: async (address) => BigInt(
+        await new Contract(
+          address,
+          ["function VERSION() view returns (uint256)"],
+          connection
+        ).getFunction("VERSION")()
+      )
+    } : connection;
+    if (await reader.getChainId() !== this.context.chainId)
+      throw new Error("deployment chain mismatch");
+    const code = await reader.getCode(this.context.protocolAddress);
+    if (!/^0x(?:[0-9a-fA-F]{2})+$/.test(code) || keccak2568(code) !== this.deployment.protocol.runtimeCodeHash)
+      throw new Error("protocol runtime code profile mismatch");
+    if (reader.getProtocolVersion && await reader.getProtocolVersion(this.context.protocolAddress) !== 1n)
+      throw new Error("unsupported onchain protocol version");
+    const registry = this.deployment.registry;
+    if (registry) {
+      if (!reader.getProtocolAddressRegistry)
+        throw new Error("registry binding reader capability is missing");
+      if (getAddress7(
+        await reader.getProtocolAddressRegistry(this.context.protocolAddress)
+      ) !== getAddress7(registry.address))
+        throw new Error("protocol registry binding mismatch");
+      const registryCode = await reader.getCode(registry.address);
+      if (!/^0x(?:[0-9a-fA-F]{2})+$/.test(registryCode) || keccak2568(registryCode) !== registry.runtimeCodeHash)
+        throw new Error("registry runtime code profile mismatch");
+    }
+  }
+  aggregate(request) {
+    return {
+      to: this.context.protocolAddress,
+      value: 0n,
+      ...buildTransactAggregateCalldata({ ...request, context: this.context })
+    };
+  }
+  /** Build an operation context for one asset within this same deployment. */
+  forToken(tokenAddress) {
+    return new TokenProtocol(
+      { ...this.context, tokenAddress: getAddress7(tokenAddress) },
+      { expectedRuntimeCodeHash: this.deployment.protocol.runtimeCodeHash }
+    );
+  }
 };
-var policyWitness = (note, usage = true) => {
-  const p = normalizeCreditPolicy(note);
+// src/registry/AddressRegistry.ts
+import { getAddress as getAddress9, keccak256 as keccak2569 } from "ethers";
+import {
+  MissingCapabilityError as MissingCapabilityError2,
+  ReceivingAddress as ReceivingAddress3
+} from "@invisi-labs/core";
+// src/registry/RegistrationOperation.ts
+import { Interface as Interface7, getBytes as getBytes2, hexlify as hexlify2, verifyTypedData } from "ethers";
+import { ReceivingAddress as ReceivingAddress2, createSigningRequest } from "@invisi-labs/core";
+// src/registry/registry.ts
+import {
+  Contract as Contract2,
+  Interface as Interface6,
+  TypedDataEncoder as TypedDataEncoder2,
+  getAddress as getAddress8,
+  getBytes,
+  hexlify,
+  isHexString as isHexString3,
+  toBeHex as toBeHex2
+} from "ethers";
+import { ReceivingAddress, decodeAddress } from "@invisi-labs/core";
+var MAX_NONCE = (1n << 64n) - 1n;
+function uint64(value, name) {
+  if (typeof value !== "bigint" || value < 0n || value > MAX_NONCE)
+    throw new RangeError(`${name} must be uint64`);
+  return value;
+}
+function hexBytes(value, length) {
+  if (typeof value !== "string" || !isHexString3(value) || value.length !== 2 + length * 2)
+    throw new Error(`Expected ${length} hexadecimal bytes`);
+  return getBytes(value);
+}
+function normalizeKeys(ownerAddress, keys) {
+  const decoded = decodeAddress(
+    ReceivingAddress.from({
+      ownerAddress,
+      viewingPublicKey: hexBytes(keys.viewingPublicKey, 33),
+      clueKey: hexBytes(keys.clueKey, 32)
+    }).toString()
+  );
+  if (decoded.kind !== "long") throw new Error("Expected full receiving address");
   return {
-    single_limit: p.singleLimit,
-    daily_limit: p.dailyLimit,
-    monthly_limit: p.monthlyLimit,
-    ...usage ? {
-      last_day: p.lastDay,
-      daily_spent: p.dailySpent,
-      last_month: p.lastMonth,
-      monthly_spent: p.monthlySpent
-    } : {}
+    viewingPublicKey: hexlify(decoded.viewingPublicKey),
+    clueKey: hexlify(decoded.clueKey)
   };
-};
-var zeros = () => Array(16).fill(0n);
-var zeroAuthority = () => ({
-  public_key_x: Array(32).fill(0),
-  public_key_y: Array(32).fill(0),
-  signature: Array(64).fill(0)
-});
-function check2(ok, message) {
-  if (!ok) throw new Error(message);
 }
-function provingRequest(circuitName, privateInputs, expectedPublicInputs, target = "evm") {
-  const schema = witness_layouts_default[circuitName], key = schema.keys[target];
-  check2(typeof key === "string", "unpublished proof target");
-  check2(
-    expectedPublicInputs.length === schema.publicInputCount,
-    "public input order/width mismatch"
-  );
-  check2(
-    Object.keys(privateInputs).length === schema.private.length && schema.private.every((name) => Object.hasOwn(privateInputs, name)),
-    "private witness schema mismatch"
-  );
-  let offset = 0;
-  const publicInputs = {};
-  for (const entry of schema.public) {
-    const values = expectedPublicInputs.slice(offset, offset + entry.count).map((value) => {
-      const n = BigInt(value);
-      check2(n >= 0n && n < FIELD_MODULUS, "noncanonical public input");
-      return n;
-    });
-    publicInputs[entry.name] = entry.array ? values : values[0];
-    offset += entry.count;
-  }
-  check2(offset === expectedPublicInputs.length, "public input layout mismatch");
+function normalize(context, registration, options) {
+  uint64(context.chainId, "chainId");
+  const registryAddress = getAddress8(context.registryAddress);
+  if (BigInt(registryAddress) === 0n) throw new Error("Registry address must be nonzero");
+  if (!/^0x(?:[0-9a-fA-F]{40}|[0-9a-fA-F]{64})$/.test(registration.ownerAddress))
+    throw new Error("Wallet identity must be an EVM owner or padded bytes32");
+  const ownerAddress = decodeAddress(
+    ReceivingAddress.fromIdentity(
+      toBeHex2(BigInt(registration.ownerAddress), 20)
+    ).toString()
+  ).ownerAddress;
+  const keys = normalizeKeys(ownerAddress, registration.keys);
+  const nonce = uint64(registration.nonce, "nonce"), deadline = uint64(registration.deadline, "deadline");
+  if (nonce === MAX_NONCE) throw new Error("Registry nonce exhausted");
+  if (options.update !== void 0 && typeof options.update !== "boolean")
+    throw new TypeError("update must be boolean");
+  if (!options.update && nonce !== 0n)
+    throw new Error("Initial registration requires nonce zero");
+  if (options.expectedNonce !== void 0 && uint64(options.expectedNonce, "expectedNonce") !== nonce)
+    throw new Error("Registry nonce mismatch");
+  if (context.now !== void 0 && deadline < uint64(context.now, "now"))
+    throw new Error("Registration expired");
+  return { registryAddress, registration: { ownerAddress, keys, nonce, deadline } };
+}
+function registrationTypedData(context, registration, options = {}) {
+  const { registryAddress, registration: r } = normalize(context, registration, options);
+  const primaryType = options.update ? "UpdateReceivingKeys" : "RegisterReceivingKeys";
+  return {
+    domain: {
+      name: "InvisiAddressRegistry",
+      version: "1",
+      chainId: context.chainId,
+      verifyingContract: registryAddress
+    },
+    primaryType,
+    types: {
+      [primaryType]: [
+        { name: "walletIdentity", type: "bytes32" },
+        { name: "viewingPublicKey", type: "bytes" },
+        { name: "clueKey", type: "bytes32" },
+        { name: "nonce", type: "uint64" },
+        { name: "deadline", type: "uint64" }
+      ]
+    },
+    message: {
+      walletIdentity: toBeHex2(BigInt(r.ownerAddress), 32),
+      ...r.keys,
+      nonce: r.nonce,
+      deadline: r.deadline
+    }
+  };
+}
+function registrationDigest(context, registration, options = {}) {
+  const typed = registrationTypedData(context, registration, options);
+  return TypedDataEncoder2.hash(typed.domain, typed.types, typed.message);
+}
+function buildRegistrationCalldata(context, registration, signature, options = {}) {
+  const normalized = normalize(context, registration, options);
+  if (typeof signature !== "string" || !isHexString3(signature) || signature.length % 2 !== 0)
+    throw new Error("Registration signature must be hexadecimal bytes");
   return {
-    circuitName,
-    target,
-    artifactSha256: schema.artifactSha256,
-    vkSha256: key,
-    expectedPublicInputs: [...expectedPublicInputs],
-    witness: new LocalWitness({ ...privateInputs, ...publicInputs })
+    to: normalized.registryAddress,
+    value: 0n,
+    callData: new Interface6(invisiAddressRegistryAbi).encodeFunctionData(
+      options.update ? "updateKeys" : "registerKeys",
+      [
+        {
+          // The registry wire schema retains its deployed EIP-712/ABI field name.
+          walletIdentity: toBeHex2(BigInt(normalized.registration.ownerAddress), 32),
+          keys: normalized.registration.keys,
+          nonce: normalized.registration.nonce,
+          deadline: normalized.registration.deadline
+        },
+        signature
+      ]
+    )
   };
 }
-var WitnessBuilder = class {
-  #protocol;
-  constructor(protocol) {
-    this.#protocol = protocol;
-  }
-  static statement(circuitName, expectedPublicInputs, target = "evm") {
-    const schema = witness_layouts_default[circuitName], key = schema.keys[target];
-    check2(
-      typeof key === "string" && expectedPublicInputs.length === schema.publicInputCount,
-      "unpublished target or statement width mismatch"
-    );
+function createRegistryReceivingKeyLookup(client, registryAddress) {
+  const address = getAddress8(registryAddress);
+  if (BigInt(address) === 0n) throw new Error("Registry address must be nonzero");
+  return async (ownerAddress) => {
+    const identity = decodeAddress(
+      ReceivingAddress.fromIdentity(ownerAddress).toString()
+    ).ownerAddress;
+    const [keys, nonce] = await new Contract2(
+      address,
+      invisiAddressRegistryAbi,
+      client
+    ).getFunction("receivingKeysOf")(toBeHex2(BigInt(identity), 32));
+    uint64(nonce, "registry nonce");
+    const normalized = normalizeKeys(identity, keys);
     return {
-      circuitName,
-      target,
-      artifactSha256: schema.artifactSha256,
-      vkSha256: key,
-      expectedPublicInputs: [...expectedPublicInputs]
+      viewingPublicKey: getBytes(normalized.viewingPublicKey),
+      clueKey: getBytes(normalized.clueKey)
     };
+  };
+}
+// src/registry/RegistrationOperation.ts
+function check2(ok, message) {
+  if (!ok) {
+    throw new Error(message);
   }
-  context(note) {
-    const c = this.#protocol.context;
-    check2(
-      note.chainId === c.chainId && note.protocolAddress === BigInt(c.protocolAddress) && note.tokenAddress === BigInt(c.tokenAddress),
-      "note context mismatch"
-    );
+}
+var RegistrationOperation = class _RegistrationOperation {
+  #registry;
+  #runtime;
+  #plan;
+  #signature;
+  #hash;
+  #anchor;
+  status;
+  constructor(registry, runtime, plan, status, signature, hash, anchor) {
+    this.#registry = registry;
+    this.#runtime = { ...runtime };
+    this.#plan = structuredClone(plan);
+    this.status = status;
+    this.#signature = signature;
+    this.#hash = hash;
+    this.#anchor = anchor ? { ...anchor } : void 0;
+    Object.freeze(this);
   }
-  async authority(operation, capacity, words, signed, identity) {
-    check2(!!signed, "private wallet authorization required");
-    const c = this.#protocol.context, request = {
-      context: { chainId: c.chainId, protocolAddress: BigInt(c.protocolAddress) },
-      operation,
-      capacity,
-      words: words.slice(0, -2).map(BigInt)
-    };
+  static async prepare(registry, options) {
+    const runtime = { ...options };
+    const update = options.update ?? false;
+    check2(typeof update === "boolean", "update must be boolean");
+    await registry.validateDeployment(runtime.reader);
+    const block = await runtime.reader.getBlock(await runtime.reader.getLatestBlockNumber());
+    const context = { ...registry.context, now: block.timestamp };
+    const nonce = await runtime.reader.getRegistryNonce(
+      context,
+      runtime.wallet.ownerAddress,
+      block
+    );
     check2(
-      signed.ownerAddress === identity && signed.digest === computeWalletAuthorizationDigest3(request),
-      "authorization statement mismatch"
+      typeof nonce === "bigint" && nonce >= 0n && nonce < (1n << 64n) - 1n,
+      "invalid or exhausted registry nonce"
     );
-    const witness = signed.withWitness((value) => value);
     check2(
-      await verifyWalletAuthorization(
-        identity,
-        Uint8Array.from([4, ...witness.public_key_x, ...witness.public_key_y]),
-        Uint8Array.from(witness.signature),
-        request
-      ),
-      "invalid wallet authorization"
+      update ? nonce > 0n : nonce === 0n,
+      update ? "wallet is not registered" : "wallet is already registered; prepare an update"
     );
-    return witness;
-  }
-  async membership(leaf, input, sources) {
-    const source = sources.findIndex((value) => value.treeId === input.treeId);
+    const address = ReceivingAddress2.parse(await registry.resolve(runtime.wallet.getAddress()));
+    const keys = address.getReceivingKeys();
+    const registration = {
+      ownerAddress: runtime.wallet.ownerAddress,
+      keys: {
+        viewingPublicKey: hexlify2(keys.viewingPublicKey),
+        clueKey: hexlify2(keys.clueKey)
+      },
+      nonce,
+      deadline: options.deadline ?? block.timestamp + 300n
+    };
+    registrationTypedData(context, registration, { update, expectedNonce: nonce });
     check2(
-      source >= 0 && Number.isInteger(input.leafIndex) && input.leafIndex >= 0 && input.leafIndex < 65536 && input.path.length === 16,
-      "invalid membership position"
+      (await runtime.reader.getBlock(block.number)).hash === block.hash,
+      "canonical registry block changed while preparing"
     );
-    let root = BigInt(leaf);
-    for (let level = 0; level < 16; level++)
-      root = BigInt(
-        await poseidonHash(
-          input.leafIndex >> level & 1 ? [input.path[level], root] : [root, input.path[level]]
-        )
-      );
-    check2(root === BigInt(sources[source].merkleRoot), "membership root mismatch");
-    return source;
-  }
-  async noteLeaf(note) {
-    this.context(note);
-    return computeNoteCommitment3(
-      note.chainId,
-      await computeNoteIdentity2(BigInt(note.ownerAddress), note.nonce),
-      note.tokenAddress,
-      note.amount
+    return new _RegistrationOperation(
+      registry,
+      runtime,
+      { id: crypto.randomUUID(), context, registration, update },
+      "prepared"
     );
   }
-  async creditLeaf(note) {
-    this.context(note);
-    return computeCreditCommitment2(
-      note.chainId,
-      note.spenderWalletIdentity,
-      note.ownerWalletIdentity,
-      note.spenderPayout,
-      note.ownerPayout,
-      note.tokenAddress,
-      note.amount,
-      note.nonce,
-      note.expiry,
-      await computeCreditSharedKeyHash2(note.creditSharedKey),
-      note
-    );
+  get id() {
+    return this.#plan.id;
   }
-  async noteInputs(inputs, sources, nullifiers, identity, authority) {
-    check2(inputs.length === nullifiers.length, "input count mismatch");
-    return Promise.all(
-      inputs.map(async (input, i) => {
-        check2(input.note.ownerAddress === identity, "input wallet mismatch");
-        const leaf = await this.noteLeaf(input.note);
-        check2(
-          await computeNoteNullifier(input.note.chainId, input.note.nonce, leaf) === nullifiers[i],
-          "input nullifier mismatch"
-        );
-        return BigInt(await this.membership(leaf, input, sources));
-      })
-    );
+  preview() {
+    return {
+      id: this.id,
+      status: this.status,
+      chainId: this.#plan.context.chainId,
+      registryAddress: this.#plan.context.registryAddress,
+      ...structuredClone(this.#plan.registration),
+      update: this.#plan.update
+    };
   }
-  async transact(p) {
-    const c = this.#protocol.context, n = normalizeTransactRequest(c, p.params, p.deliveries, p.funding), words = transactUserPublicInputs(c, p.params, p.deliveries, p.funding);
+  /** Export portable EIP-712 data for external signing. */
+  async exportRegistrationAuthorization(options = {}) {
+    check2(this.status === "prepared", "registry operation is not awaiting authorization");
+    options.signal?.throwIfAborted();
+    await this.validateFreshness();
+    options.signal?.throwIfAborted();
+    return createSigningRequest(this.typedData());
+  }
+  /** Validate and attach an independently obtained EOA or ERC-1271 signature. */
+  async withSignature(signature, options = {}) {
+    check2(this.status === "prepared", "registry operation is not awaiting authorization");
+    options.signal?.throwIfAborted();
+    await this.validateFreshness();
+    options.signal?.throwIfAborted();
     check2(
-      p.inputs.length === n.inputCount && p.outputs.length === n.outputCount,
-      "note count mismatch"
-    );
-    const identity = p.inputs[0]?.note.ownerAddress;
-    const unsignedSweep = !!identity && !p.authorization && n.outputCount === 0 && n.depositAmount === 0n && n.feeAmount === 0n && BigInt(p.params.withdrawalAddress) === BigInt(identity);
-    const authority = identity && !unsignedSweep ? await this.authority("transact", n.capacity, words, p.authorization, identity) : zeroAuthority();
-    const sources = await this.noteInputs(
-      p.inputs,
-      p.params.sources,
-      p.params.nullifiers,
-      identity ?? "0x" + "00".repeat(32),
-      authority
-    );
-    const outputs = await Promise.all(
-      p.outputs.map(async (output, i) => {
-        const opening = "identity" in output ? output.note : output;
-        const identity2 = "identity" in output ? field(output.identity) : BigInt(
-          await computeNoteIdentity2(BigInt(output.ownerAddress), output.nonce)
-        );
-        const amount = uint(output.amount, 128, "output amount");
-        check2(identity2 !== 0n && amount !== 0n, "zero output identity or amount");
-        if (opening) {
-          this.context(opening);
-          check2(
-            opening.amount === amount && BigInt(
-              await computeNoteIdentity2(
-                BigInt(opening.ownerAddress),
-                opening.nonce
-              )
-            ) === identity2,
-            "output opening mismatch"
-          );
-        }
-        const commitment = await computeNoteCommitment3(
-          c.chainId,
-          word(identity2),
-          BigInt(c.tokenAddress),
-          amount
-        );
-        check2(commitment === p.params.outputCommitments[i], "output commitment mismatch");
-        return { identity: identity2, amount };
-      })
+      /^0x(?:[a-fA-F0-9]{2})+$/.test(signature),
+      "registry signature must be nonempty hexadecimal bytes"
     );
-    const all = [...p.inputs.map((input) => input.note), ...outputs];
-    return provingRequest(
-      `transact_user_slots${n.capacity}`,
-      {
-        input_owner_address: identity ? BigInt(identity) : 0n,
-        ...authority,
-        output_identities: pad2(
-          [...p.inputs.map(() => 0n), ...outputs.map((output) => output.identity)],
-          n.capacity,
-          () => 0n
-        ),
-        amounts: pad2(
-          all.map((note) => note.amount),
-          n.capacity,
-          () => 0n
-        ),
-        nonces: pad2(
-          [...p.inputs.map((input) => input.note.nonce), ...outputs.map(() => 0n)],
-          n.capacity,
-          () => 0n
-        ),
-        leaf_indices: pad2(
-          p.inputs.map((input) => BigInt(input.leafIndex)),
-          n.capacity,
-          () => 0n
-        ),
-        merkle_paths: pad2(
-          p.inputs.map((input) => [...input.path]),
-          n.capacity,
-          zeros
+    const p = this.#plan;
+    const owner = p.registration.ownerAddress;
+    let valid = false;
+    try {
+      const bytes = getBytes2(signature);
+      const typed = this.typedData();
+      valid = bytes.length === 65 && (bytes[64] === 27 || bytes[64] === 28) && BigInt(verifyTypedData(typed.domain, typed.types, typed.message, signature)) === BigInt(owner);
+    } catch {
+      valid = false;
+    }
+    if (!valid) {
+      const code = await this.#runtime.reader.getCode(owner);
+      check2(/^0x(?:[a-fA-F0-9]{2})*$/.test(code), "invalid owner contract code");
+      check2(code !== "0x", "invalid EOA registry signature");
+      const verify = this.#runtime.reader.isValidRegistrationSignature;
+      check2(verify, "ERC-1271 registry signature verification capability is missing");
+      check2(
+        await verify.call(
+          this.#runtime.reader,
+          owner,
+          registrationDigest(p.context, p.registration, { update: p.update }),
+          signature
         ),
-        input_source_indices: pad2(sources, n.capacity, () => 0n)
-      },
-      words,
-      p.target
+        "invalid ERC-1271 registry signature"
+      );
+    }
+    options.signal?.throwIfAborted();
+    return new _RegistrationOperation(
+      this.#registry,
+      this.#runtime,
+      this.#plan,
+      "ready",
+      signature
     );
   }
-  async creation(p, operation, words) {
-    const state = normalizeCreditDeliveryState(p.state), note = state.note;
+  /** Empty signatures require the transaction sender to be the wallet owner. */
+  async authorizeDirect() {
+    check2(this.status === "prepared", "registry operation is not awaiting authorization");
+    await this.validateFreshness();
+    return new _RegistrationOperation(this.#registry, this.#runtime, this.#plan, "ready", "0x");
+  }
+  typedData() {
+    const p = this.#plan;
+    return registrationTypedData(p.context, p.registration, {
+      update: p.update,
+      expectedNonce: p.registration.nonce
+    });
+  }
+  call() {
+    check2(this.#signature !== void 0, "registry signature is missing");
+    const p = this.#plan;
+    const result = buildRegistrationCalldata(p.context, p.registration, this.#signature, {
+      update: p.update,
+      expectedNonce: p.registration.nonce
+    });
+    return { to: result.to, data: result.callData, value: result.value };
+  }
+  async exportTransaction() {
     check2(
-      await this.creditLeaf(note) === p.params.creditCommitment && note.ownerPayout === BigInt(p.params.owner) && note.expiry === p.params.expiry,
-      "Credit creation mismatch"
-    );
-    if (operation === "create-credit" && [note.lastDay, note.dailySpent, note.lastMonth, note.monthlySpent].some((v) => v !== 0n))
-      throw new Error("new Credit usage must be zero");
-    const authority = await this.authority(
-      operation,
-      10,
-      words,
-      p.authorization,
-      note.ownerWalletIdentity
-    );
-    const sources = await this.noteInputs(
-      p.inputs,
-      p.params.sources,
-      p.params.nullifiers,
-      note.ownerWalletIdentity,
-      authority
+      this.#signature !== void 0 && this.status !== "prepared",
+      "registry operation is not ready"
     );
-    if (p.change)
-      check2(
-        p.change.ownerAddress === note.ownerWalletIdentity && await this.noteLeaf(p.change) === p.params.changeCommitment,
-        "change commitment mismatch"
-      );
-    else check2(BigInt(p.params.changeCommitment) === 0n, "missing change note");
-    return {
-      ...authority,
-      input_amounts: pad2(
-        p.inputs.map((input) => input.note.amount),
-        10,
-        () => 0n
-      ),
-      input_nonces: pad2(
-        p.inputs.map((input) => input.note.nonce),
-        10,
-        () => 0n
-      ),
-      leaf_indices: pad2(
-        p.inputs.map((input) => BigInt(input.leafIndex)),
-        10,
-        () => 0n
-      ),
-      merkle_paths: pad2(
-        p.inputs.map((input) => [...input.path]),
-        10,
-        zeros
-      ),
-      input_source_indices: pad2(sources, 10, () => 0n),
-      spender_payout: note.spenderPayout,
-      spender_wallet_identity: BigInt(note.spenderWalletIdentity),
-      owner_wallet_identity: BigInt(note.ownerWalletIdentity),
-      ...policyWitness(note, operation === "top-up-credit"),
-      credit_amount: note.amount,
-      credit_nonce: note.nonce,
-      credit_shared_key: note.creditSharedKey,
-      change_amount: p.change?.amount ?? 0n,
-      change_nonce: p.change?.nonce ?? 0n
-    };
+    await this.validateFreshness();
+    return this.call();
   }
-  async createCredit(p) {
-    const words = createCreditPublicInputs(
-      this.#protocol.context,
-      p.params,
-      p.deliveries,
-      p.funding
-    );
-    return provingRequest(
-      "create_credit",
-      await this.creation(p, "create-credit", words),
-      words
+  async validateFreshness() {
+    await this.#registry.validateDeployment(this.#runtime.reader);
+    const block = await this.#runtime.reader.getBlock(
+      await this.#runtime.reader.getLatestBlockNumber()
     );
-  }
-  async cancelCredit(p) {
-    const note = normalizeCreditDeliveryState(p.input.state).note, leaf = await this.creditLeaf(note), c = this.#protocol.context;
+    const p = this.#plan;
+    check2(block.timestamp <= p.registration.deadline, "registry operation has expired");
     check2(
-      await computeCreditNullifier(c.chainId, note.creditSharedKey, leaf) === p.params.nullifier && note.amount === p.params.amount && note.ownerPayout === BigInt(p.params.owner),
-      "Credit cancellation mismatch"
-    );
-    await this.membership(leaf, p.input, [p.params.source]);
-    const words = cancelCreditPublicInputs(c, p.params), authority = await this.authority(
-      "cancel-credit",
-      1,
-      words,
-      p.authorization,
-      note.ownerWalletIdentity
+      await this.#runtime.reader.getRegistryNonce(
+        p.context,
+        p.registration.ownerAddress,
+        block
+      ) === p.registration.nonce,
+      "registry nonce changed; prepare again"
     );
-    return provingRequest(
-      "credit_cancel",
-      {
-        ...authority,
-        spender_payout: note.spenderPayout,
-        spender_wallet_identity: BigInt(note.spenderWalletIdentity),
-        owner_wallet_identity: BigInt(note.ownerWalletIdentity),
-        ...policyWitness(note),
-        input_nonce: note.nonce,
-        expiry: note.expiry,
-        credit_shared_key: note.creditSharedKey,
-        leaf_index: BigInt(p.input.leafIndex),
-        merkle_path: [...p.input.path]
-      },
-      words
+    check2(
+      (await this.#runtime.reader.getBlock(block.number)).hash === block.hash,
+      "canonical registry block changed during authorization"
     );
   }
-  async drawCredit(p) {
-    const c = { ...this.#protocol.context, timestamp: p.timestamp }, profile = selectCreditDrawCircuit(p.inputs.length), capacity = profile.maxSize;
+  /** Associate a signed/broadcast transaction; ethers owns sending and receipt waiting. */
+  trackTransaction(transactionHash) {
+    check2(/^0x[a-fA-F0-9]{64}$/.test(transactionHash), "invalid registry transaction hash");
     check2(
-      p.inputs.length === p.amounts.length && p.inputs.length === p.params.nullifiers.length,
-      "draw input count mismatch"
+      this.#signature !== void 0 && ["ready", "uncertain"].includes(this.status),
+      "registry operation is not ready"
     );
-    const notes2 = p.inputs.map((input) => normalizeCreditDeliveryState(input.state).note), identity = notes2[0].spenderWalletIdentity;
-    const words = creditDrawPublicInputs(c, p.params, p.deliveries), authority = await this.authority(
-      "credit-draw",
-      capacity,
-      words,
-      p.authorization,
-      identity
+    return new _RegistrationOperation(
+      this.#registry,
+      this.#runtime,
+      this.#plan,
+      "uncertain",
+      this.#signature,
+      transactionHash
     );
-    const sourceIndices = await Promise.all(
-      notes2.map(async (note, i) => {
-        applyCreditDrawUsage(note, p.amounts[i], p.timestamp);
-        const leaf = await this.creditLeaf(note);
+  }
+  async reconcile(options = {}) {
+    options.signal?.throwIfAborted();
+    const { reader } = this.#runtime;
+    const p = this.#plan;
+    await this.#registry.validateDeployment(reader);
+    if (this.#anchor && (await reader.getBlock(this.#anchor.number)).hash !== this.#anchor.hash) {
+      return new _RegistrationOperation(
+        this.#registry,
+        this.#runtime,
+        p,
+        "reorged",
+        this.#signature,
+        this.#hash
+      );
+    }
+    const hash = options.transactionHash ?? this.#hash;
+    const receipt = hash ? await reader.getReceipt(hash) : null;
+    if (receipt) {
+      check2(
+        receipt.transactionHash === hash && (await reader.getBlock(receipt.block.number)).hash === receipt.block.hash,
+        "registry receipt is not canonical"
+      );
+      const transaction = await reader.getTransaction(hash);
+      const call = this.call();
+      check2(
+        transaction && transaction.transactionHash === hash && transaction.to.toLowerCase() === call.to.toLowerCase() && transaction.data.toLowerCase() === call.data.toLowerCase() && transaction.value === 0n && (this.#signature !== "0x" || BigInt(transaction.from) === BigInt(p.registration.ownerAddress)),
+        "registry transaction differs from frozen request"
+      );
+      check2(
+        receipt.status === "success" || receipt.status === "reverted",
+        "registry execution status is missing"
+      );
+      if (receipt.status === "success") {
+        const found = receipt.logs.some((log) => {
+          if (log.address.toLowerCase() !== p.context.registryAddress.toLowerCase() || log.transactionHash !== hash) {
+            return false;
+          }
+          try {
+            const event = ((decoded) => ({
+              eventName: decoded.name,
+              args: decoded.args.toObject()
+            }))(
+              new Interface7(invisiAddressRegistryAbi).parseLog({
+                data: log.data,
+                topics: log.topics
+              })
+            );
+            return event.eventName === "ReceivingKeysSet" && BigInt(event.args.walletIdentity) === BigInt(p.registration.ownerAddress) && event.args.viewingPublicKey.toLowerCase() === p.registration.keys.viewingPublicKey.toLowerCase() && event.args.clueKey.toLowerCase() === p.registration.keys.clueKey.toLowerCase() && event.args.nextNonce === p.registration.nonce + 1n;
+          } catch {
+            return false;
+          }
+        });
+        check2(found, "registry receipt has no matching key update event");
         check2(
-          note.spenderWalletIdentity === identity && note.spenderPayout === BigInt(p.params.spender) && note.expiry === p.params.expiries[i] && p.amounts[i] > 0n && p.amounts[i] <= note.amount && await computeCreditNullifier(c.chainId, note.creditSharedKey, leaf) === p.params.nullifiers[i],
-          "Credit draw mismatch"
+          (await reader.getBlock(receipt.block.number)).hash === receipt.block.hash,
+          "registry block changed during confirmation"
         );
-        return BigInt(await this.membership(leaf, p.inputs[i], p.params.sources));
-      })
-    );
-    return provingRequest(
-      profile.name,
-      {
-        ...authority,
-        ...Object.fromEntries(
-          Object.entries({
-            singleLimit: "single_limits",
-            dailyLimit: "daily_limits",
-            monthlyLimit: "monthly_limits",
-            lastDay: "last_days",
-            dailySpent: "daily_spents",
-            lastMonth: "last_months",
-            monthlySpent: "monthly_spents"
-          }).map(([key, name]) => [
-            name,
-            pad2(
-              notes2.map(
-                (note) => normalizeCreditPolicy(note)[key]
-              ),
-              capacity,
-              () => 0n
-            )
-          ])
-        ),
-        spender_wallet_identity: BigInt(identity),
-        owner_payouts: pad2(
-          notes2.map((note) => note.ownerPayout),
-          capacity,
-          () => 0n
-        ),
-        owner_wallet_identities: pad2(
-          notes2.map((note) => BigInt(note.ownerWalletIdentity)),
-          capacity,
-          () => 0n
-        ),
-        input_amounts: pad2(
-          notes2.map((note) => note.amount),
-          capacity,
-          () => 0n
-        ),
-        input_nonces: pad2(
-          notes2.map((note) => note.nonce),
-          capacity,
-          () => 0n
-        ),
-        credit_shared_keys: pad2(
-          notes2.map((note) => note.creditSharedKey),
-          capacity,
-          () => 0n
-        ),
-        leaf_indices: pad2(
-          p.inputs.map((input) => BigInt(input.leafIndex)),
-          capacity,
-          () => 0n
-        ),
-        merkle_paths: pad2(
-          p.inputs.map((input) => [...input.path]),
-          capacity,
-          zeros
-        ),
-        input_source_indices: pad2(sourceIndices, capacity, () => 0n),
-        draw_amounts: pad2(p.amounts, capacity, () => 0n)
-      },
-      words
-    );
-  }
-  async topUpCredit(p) {
-    const c = this.#protocol.context, previous = normalizeCreditDeliveryState(p.previous.state), next = normalizeCreditDeliveryState(p.state), old = previous.note, note = next.note, leaf = await this.creditLeaf(old);
-    for (const field2 of [
-      "spenderWalletIdentity",
-      "ownerWalletIdentity",
-      "spenderPayout",
-      "ownerPayout",
-      "creditSharedKey",
-      "lastDay",
-      "dailySpent",
-      "lastMonth",
-      "monthlySpent"
-    ])
-      check2(old[field2] === note[field2], "Credit role or payout changed");
-    check2(
-      JSON.stringify(previous.ownerReceivingKeys) === JSON.stringify(next.ownerReceivingKeys) && JSON.stringify(previous.spenderReceivingKeys) === JSON.stringify(next.spenderReceivingKeys),
-      "Credit receiving snapshots changed"
-    );
-    check2(
-      old.amount < note.amount && old.expiry <= note.expiry && old.expiry === p.params.previousExpiry && (c.now === void 0 || old.expiry > c.now),
-      "invalid Credit top-up"
-    );
+        options.signal?.throwIfAborted();
+        return new _RegistrationOperation(
+          this.#registry,
+          this.#runtime,
+          p,
+          "confirmed",
+          this.#signature,
+          hash,
+          receipt.block
+        );
+      }
+    }
+    const head = await reader.getBlock(await reader.getLatestBlockNumber());
+    const nonce = await reader.getRegistryNonce(p.context, p.registration.ownerAddress, head);
     check2(
-      await computeCreditNullifier(c.chainId, old.creditSharedKey, leaf) === p.params.creditNullifier,
-      "previous Credit nullifier mismatch"
+      (await reader.getBlock(head.number)).hash === head.hash,
+      "canonical registry block changed during reconciliation"
     );
-    await this.membership(leaf, p.previous, [p.params.creditSource]);
-    const words = topUpCreditPublicInputs(c, p.params, p.deliveries, p.funding), base = await this.creation({ ...p, params: p.params.creation }, "top-up-credit", words);
-    return provingRequest(
-      "credit_top_up",
-      {
-        ...base,
-        previous_single_limit: old.singleLimit,
-        previous_daily_limit: old.dailyLimit,
-        previous_monthly_limit: old.monthlyLimit,
-        previous_credit_amount: old.amount,
-        previous_credit_nonce: old.nonce,
-        previous_credit_leaf_index: BigInt(p.previous.leafIndex),
-        previous_credit_merkle_path: [...p.previous.path]
-      },
-      words
+    return new _RegistrationOperation(
+      this.#registry,
+      this.#runtime,
+      p,
+      head.timestamp > p.registration.deadline ? "expired" : nonce !== p.registration.nonce ? "failed" : "uncertain",
+      this.#signature,
+      hash
     );
   }
+  toJSON() {
+    return {
+      id: this.id,
+      kind: this.#plan.update ? "update-receiving-keys" : "register-receiving-keys",
+      status: this.status
+    };
+  }
+  [/* @__PURE__ */ Symbol.for("nodejs.util.inspect.custom")]() {
+    return this.toJSON();
+  }
+};
+// src/registry/AddressRegistry.ts
+var AddressRegistry = class {
+  context;
+  #lookup;
+  expectedRuntimeCodeHash;
+  constructor(context, options = {}) {
+    if (typeof context.chainId !== "bigint" || context.chainId < 0n || context.chainId >= 1n << 64n || BigInt(getAddress9(context.registryAddress)) === 0n) {
+      throw new Error("invalid registry context");
+    }
+    this.context = Object.freeze({
+      ...context,
+      registryAddress: getAddress9(context.registryAddress)
+    });
+    this.#lookup = options.lookup;
+    this.expectedRuntimeCodeHash = options.expectedRuntimeCodeHash?.toLowerCase();
+    if (this.expectedRuntimeCodeHash && !/^0x[0-9a-f]{64}$/.test(this.expectedRuntimeCodeHash)) {
+      throw new Error("invalid registry runtime profile");
+    }
+    Object.freeze(this);
+  }
+  async validateDeployment(reader) {
+    if (!this.expectedRuntimeCodeHash) {
+      throw new MissingCapabilityError2("trusted registry deployment profile");
+    }
+    if (await reader.getChainId() !== this.context.chainId) {
+      throw new Error("registry chain mismatch");
+    }
+    const code = await reader.getCode(this.context.registryAddress);
+    if (!/^0x(?:[0-9a-fA-F]{2})+$/.test(code) || keccak2569(code) !== this.expectedRuntimeCodeHash) {
+      throw new Error("registry runtime profile mismatch");
+    }
+  }
+  prepareRegistration(options) {
+    return RegistrationOperation.prepare(this, options);
+  }
+  async resolve(address) {
+    const receiving = ReceivingAddress3.parse(address);
+    if (receiving.kind === "short" && !this.#lookup) {
+      throw new MissingCapabilityError2("registry reader");
+    }
+    return (await receiving.resolve(this.#lookup)).toString();
+  }
+  typedData(registration, options) {
+    return registrationTypedData(this.context, registration, options);
+  }
+  digest(registration, options) {
+    return registrationDigest(this.context, registration, options);
+  }
+  buildCall(registration, signature, options) {
+    return buildRegistrationCalldata(this.context, registration, signature, options);
+  }
 };
-// src/factory.ts
-import { Contract as Contract3, getAddress as getAddress9 } from "ethers";
+// src/verification/verify.ts
+import {
+  computeCreditCommitment as computeCreditCommitment2,
+  computeCreditSharedKeyHash as computeCreditSharedKeyHash2,
+  computeNoteCommitment as computeNoteCommitment4,
+  computeNoteIdentity as computeNoteIdentity3,
+  FIELD_MODULUS as FIELD_MODULUS2
+} from "@invisi-labs/core";
+async function verifyNoteCommitment(params) {
+  const expected = await computeNoteCommitment4(
+    params.chainId,
+    await computeNoteIdentity3(BigInt(params.ownerAddress), BigInt(params.nonce)),
+    BigInt(params.tokenAddress),
+    params.amount
+  );
+  return BigInt(expected) === BigInt(params.noteCommitment);
+}
+async function verifyCreditCommitment(params) {
+  if (params.creditSharedKey <= 0n || params.creditSharedKey >= FIELD_MODULUS2)
+    throw new RangeError("creditSharedKey must be a nonzero canonical Field");
+  const expected = await computeCreditCommitment2(
+    params.chainId,
+    params.spenderWalletIdentity,
+    params.ownerWalletIdentity,
+    BigInt(params.spenderPayout),
+    BigInt(params.ownerPayout),
+    BigInt(params.tokenAddress),
+    params.amount,
+    params.nonce,
+    params.expiry,
+    await computeCreditSharedKeyHash2(params.creditSharedKey),
+    params
+  );
+  return BigInt(expected) === BigInt(params.creditCommitment);
+}
+// src/factory/factory.ts
+import { Contract as Contract3, getAddress as getAddress10 } from "ethers";
 async function resolveInstanceAddress(client, factoryAddress, salt) {
   const instance = await new Contract3(
-    getAddress9(factoryAddress),
+    getAddress10(factoryAddress),
     invisiFactoryAbi,
     client
   ).getFunction("getInstanceAddress")(salt);
-  return getAddress9(instance);
+  return getAddress10(instance);
 }
 export {
   AddressRegistry,