@invisi-labs/protocol 1.1.6 → 1.2.0

package/dist/index.d.cts

@@ -1,140 +1,15 @@
-import * as _invisi_labs_core from '@invisi-labs/core';
-import { Hex, Address, ReceivingKeyLookup, PublicWallet, CreditDeliveryState, AuthorizedStatement, Note } from '@invisi-labs/core';
-import { ContractRunner, Provider } from 'ethers';
-import { DeploymentContext, CanonicalBlock, ProtocolDeployment, ProtocolRpcClient } from '@invisi-labs/rpc';
-export { CanonicalBlock, DeploymentContext, Membership, ProtocolDataProvider, ProtocolDataStatus, ProtocolUpdateRange, ProtocolUpdates } from '@invisi-labs/rpc';
-import { F as FundingParams, D as Delivery, I as InputSource, C as CreateCreditParams, a as CancelCreditParams, b as CreditDrawParams, T as TopUpCreditParams, c as TransactRequest, S as ShieldParams, d as ShieldOutput, e as CrossTreeTransactParams } from './types-BmUlasOg.cjs';
-import { ProofTarget, CircuitName, ProofStatement, ProvingRequest } from '@invisi-labs/prover';
+export { BuildCreateCreditCalldataParams, BuildCreditDrawCalldataParams, BuildRevokeCreditCalldataParams, BuildUpdateCreditCalldataParams, CREATE_CREDIT_FIELDS, CREDIT_DRAW_CAPACITIES, REVOKE_CREDIT_TYPES, authorizedCreditInputs, buildCreateCreditCalldata, buildCreditDrawCalldata, buildRevokeCreditCalldata, buildUpdateCreditCalldata, createCreditBaseInputs, createCreditPublicInputs, creditDrawBaseInputs, creditDrawPublicInputs, encodeCreateCreditTypedData, encodeCreditDrawTypedData, encodeCreditProof, encodeRevokeCreditTypedData, encodeUpdateCreditTypedData, selectCreditDrawCircuit, updateCreditBaseInputs, updateCreditPublicInputs, validateCreateCreditRequest, validateCreditDrawRequest, validateUpdateCreditRequest } from './credit.cjs';
+import { TransactRequestParams } from './note.cjs';
+export { AGGREGATE_ROUTES, AggregateMemberInput, AggregateRoute, BuildShieldCalldataParams, BuildTransactAggregateCalldataParams, BuildTransactCalldataParams, TRANSACT_CAPACITIES, TransactCapacity, aggregateMemberRequestHash, aggregatePublicInputs, buildShieldCalldata, buildTransactAggregateCalldata, buildTransactCalldata, encodeAggregateFundingTypedData, encodeShieldFundingTypedData, encodeTransactFundingTypedData, encodeTransactTypedData, normalizeTransactRequest, selectAggregateRoute, selectTransactCapacity, shieldFundingRequestHash, transactFundingRequestHash, transactPublicInputs, validateShieldRequest } from './note.cjs';
+import { D as Delivery } from './types-CUnFzl5S.cjs';
+import { T as TransactionContext, F as FundingInput, C as CanonicalBlock, D as DeploymentContext } from './validation-MgURYiNF.cjs';
+export { B as BroadcasterPage, a as BroadcasterQuery, E as EMPTY_FUNDING, b as EMPTY_PERMIT, c as FIELD_MODULUS, I as IndexedCreditAllocation, d as IndexedCreditRevocationBitmap, e as IndexedCreditState, M as Membership, P as ProtocolCreditCandidates, f as ProtocolCreditTransition, g as ProtocolCreditUpdates, h as ProtocolDataProvider, i as ProtocolDataStatus, j as ProtocolNoteOutput, k as ProtocolNoteUpdates, l as ProtocolTransactionCreditUpdates, m as ProtocolTransactionNoteUpdates, n as ProtocolUpdateRange, R as RegisteredBroadcaster, o as RegisteredReceivingAddress, Z as ZERO_ADDRESS, p as ZERO_WORD, q as checkDeadline, r as deliveriesHash, s as dense, t as envelope, u as field, v as fundingFields, w as getEIP712Domain, x as known, y as normalizeContext, z as normalizeFunding, A as normalizeOpaqueDelivery, G as normalizeSources, H as notes, J as pad, K as uint, L as validateFundingSubmission, N as word } from './validation-MgURYiNF.cjs';
+import * as _invisi_labs_primitives from '@invisi-labs/primitives';
+import { Hex, Address, ReceivingKeyLookup } from '@invisi-labs/primitives';
+import { ContractRunner } from 'ethers';
 
-interface RegistryContext {
-    chainId: bigint;
-    registryAddress: Address;
-    /** Optional explicit wall-clock value in seconds. Equality with deadline is valid. */
-    now?: bigint;
-}
-interface RegistryReceivingKeys {
-    viewingPublicKey: Hex;
-    clueKey: Hex;
-}
-interface AddressRegistration {
-    /** Nonzero EVM owner: 20 bytes or canonical zero-padded bytes32. */
-    ownerAddress: Hex;
-    keys: RegistryReceivingKeys;
-    /** The current registry nonce expected for this operation. */
-    nonce: bigint;
-    deadline: bigint;
-}
-interface RegistrationOptions {
-    update?: boolean;
-    /** Check a separately obtained current nonce before authorizing or encoding. */
-    expectedNonce?: bigint;
-}
-interface RegistrationCalldata {
-    to: Address;
-    callData: Hex;
-    value: 0n;
-}
-/** Standard registry EIP-712 data, independent of private WalletAuthorization. */
-declare function registrationTypedData(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): {
-    domain: {
-        name: string;
-        version: string;
-        chainId: bigint;
-        verifyingContract: `0x${string}`;
-    };
-    primaryType: string;
-    types: {
-        [x: string]: {
-            name: string;
-            type: string;
-        }[];
-    };
-    message: {
-        nonce: bigint;
-        deadline: bigint;
-        viewingPublicKey: Hex;
-        clueKey: Hex;
-        walletIdentity: string;
-    };
-};
-declare function registrationDigest(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): Hex;
-/** Encode an owner call (empty signature) or an EIP-712 / ERC-1271 authorized relay. */
-declare function buildRegistrationCalldata(context: RegistryContext, registration: AddressRegistration, signature: Hex, options?: RegistrationOptions): RegistrationCalldata;
-/** Ethers runner used for registry contract reads. */
-type RegistryReadClient = ContractRunner;
-/** One receivingKeysOf query per short address; RPC failures propagate unchanged. */
-declare function createRegistryReceivingKeyLookup(client: RegistryReadClient, registryAddress: Address): ReceivingKeyLookup;
-
-interface TransactionContext extends DeploymentContext {
-    tokenAddress: Address;
-    now?: bigint;
-    /** Explicit chain timestamp used to bind Credit draw UTC periods. */
-    timestamp?: bigint;
-}
-declare const FIELD_MODULUS = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
-declare const ZERO_ADDRESS: "0x0000000000000000000000000000000000000000";
-declare const ZERO_WORD: Hex;
-declare const EMPTY_PERMIT: {
-    readonly deadline: 0n;
-    readonly v: 0;
-    readonly r: `0x${string}`;
-    readonly s: `0x${string}`;
-};
-declare const EMPTY_FUNDING: FundingParams;
-type FundingInput = Partial<Omit<FundingParams, "permit">> & {
-    permit?: FundingParams["permit"];
-};
-declare function uint(v: bigint | number | string, bits: number, name?: string): bigint;
-declare function field(v: bigint | string, name?: string): bigint;
-declare const word: (v: bigint | string) => Hex;
-declare function dense<T>(v: readonly T[], name: string): readonly T[];
-declare function known(v: object, keys: readonly string[], name?: string): void;
-declare function notes(v: readonly Hex[], name: string): `0x${string}`[];
-declare function envelope(v: Hex, length: number, version?: number, maximum?: number): Hex;
-declare function normalizeContext(c: TransactionContext): {
-    chainId: bigint;
-    protocolAddress: Hex;
-    tokenAddress: Hex;
-    now?: bigint;
-    /** Explicit chain timestamp used to bind Credit draw UTC periods. */
-    timestamp?: bigint;
-};
-declare function checkDeadline(c: TransactionContext, value: bigint): bigint;
-declare function normalizeSources(sources: readonly InputSource[], inputCount: number, capacity: number): {
-    treeId: bigint;
-    merkleRoot: `0x${string}`;
-}[];
-declare const pad: (v: readonly bigint[], n: number) => bigint[];
-/** Receipt/transport validation must not reject unrelated future wallet codecs. */
-declare function normalizeOpaqueDelivery(value: Delivery, options?: {
-    empty?: boolean;
-    allowEmpty?: boolean;
-}): Delivery;
-declare const deliveriesHash: (v: readonly Delivery[]) => Hex;
-declare function normalizeFunding(input?: FundingInput): FundingParams;
-declare function validateFundingSubmission(f: FundingParams, caller?: Address, now?: bigint): void;
-declare const getEIP712Domain: (c: TransactionContext) => {
-    name: string;
-    version: string;
-    chainId: bigint;
-    verifyingContract: Hex;
-};
-declare const fundingFields: readonly [{
-    readonly name: "requestHash";
-    readonly type: "bytes32";
-}, {
-    readonly name: "payer";
-    readonly type: "address";
-}, {
-    readonly name: "amount";
-    readonly type: "uint256";
-}, {
-    readonly name: "sigNonce";
-    readonly type: "uint256";
-}, {
-    readonly name: "deadline";
-    readonly type: "uint256";
-}];
+/** Full active user-circuit public inputs: business statement followed by EIP-712 digest limbs. */
+declare function transactUserPublicInputs(c: TransactionContext, p: TransactRequestParams, cs: readonly Delivery[], f?: FundingInput): `0x${string}`[];
 
 interface ProtocolLog {
     address: Address;
@@ -150,6 +25,11 @@ interface CanonicalReceipt {
     status?: "success" | "reverted";
 }
 interface ChainReader {
+    getCreditAllocation?(context: DeploymentContext, owner: Address, token: Address, block: CanonicalBlock): Promise<{
+        shard: bigint;
+        slot: number;
+    }>;
+    getCreditRevocationBitmap?(context: DeploymentContext, owner: Address, token: Address, shard: bigint, word: number, block: CanonicalBlock): Promise<bigint>;
     getChainId(): Promise<bigint>;
     /** Required when a selected deployment includes a receiving-key registry. */
     getProtocolAddressRegistry?(address: Address): Promise<Address>;
@@ -178,735 +58,64 @@ interface FactoryReader {
     getInstanceFactory(instance: Address): Promise<Address>;
 }
 
-interface RegistryReader extends Pick<ChainReader, "getChainId" | "getCode" | "getBlock" | "getLatestBlockNumber" | "getTransaction" | "getReceipt"> {
-    /** Validate arbitrary ERC-1271 bytes for a contract owner; transport errors propagate. */
-    isValidRegistrationSignature?(owner: Address, digest: Hex, signature: Hex): Promise<boolean>;
-    getRegistryNonce(context: RegistryContext, ownerAddress: Hex, block: CanonicalBlock): Promise<bigint>;
-}
-interface RegistrationPreparation {
-    wallet: PublicWallet;
-    reader: RegistryReader;
-    deadline?: bigint;
-    update?: boolean;
-}
-type RegistrationStatus = "prepared" | "ready" | "submitted" | "confirmed" | "uncertain" | "failed" | "expired" | "reorged";
-declare class RegistrationOperation {
-    #private;
-    readonly status: RegistrationStatus;
-    private constructor();
-    static prepare(registry: AddressRegistry, options: RegistrationPreparation): Promise<RegistrationOperation>;
-    get id(): string;
-    preview(): {
-        update: boolean;
-        ownerAddress: Hex;
-        keys: RegistryReceivingKeys;
-        nonce: bigint;
-        deadline: bigint;
-        id: string;
-        status: RegistrationStatus;
-        chainId: bigint;
-        registryAddress: `0x${string}`;
-    };
-    /** Export portable EIP-712 data for external signing. */
-    exportRegistrationAuthorization(options?: {
-        signal?: AbortSignal;
-    }): Promise<_invisi_labs_core.SigningRequest>;
-    /** Validate and attach an independently obtained EOA or ERC-1271 signature. */
-    withSignature(signature: string, options?: {
-        signal?: AbortSignal;
-    }): Promise<RegistrationOperation>;
-    /** Empty signatures require the transaction sender to be the wallet owner. */
-    authorizeDirect(): Promise<RegistrationOperation>;
-    typedData(): {
-        domain: {
-            name: string;
-            version: string;
-            chainId: bigint;
-            verifyingContract: `0x${string}`;
-        };
-        primaryType: string;
-        types: {
-            [x: string]: {
-                name: string;
-                type: string;
-            }[];
-        };
-        message: {
-            nonce: bigint;
-            deadline: bigint;
-            viewingPublicKey: Hex;
-            clueKey: Hex;
-            walletIdentity: string;
-        };
-    };
-    private call;
-    exportTransaction(): Promise<TransactionCall>;
-    private validateFreshness;
-    /** Associate a signed/broadcast transaction; ethers owns sending and receipt waiting. */
-    trackTransaction(transactionHash: string): RegistrationOperation;
-    reconcile(options?: {
-        transactionHash?: Hex;
-        signal?: AbortSignal;
-    }): Promise<RegistrationOperation>;
-    toJSON(): {
-        id: string;
-        kind: string;
-        status: RegistrationStatus;
-    };
-}
-
-interface AddressRegistryOptions {
-    lookup?: ReceivingKeyLookup;
-    expectedRuntimeCodeHash?: Hex;
-}
-/** Independent registry deployment and nonce domain, selected by the application. */
-declare class AddressRegistry {
-    #private;
-    readonly context: Readonly<RegistryContext>;
-    readonly expectedRuntimeCodeHash: Hex | undefined;
-    constructor(context: RegistryContext, options?: AddressRegistryOptions);
-    validateDeployment(reader: Pick<RegistryReader, "getChainId" | "getCode">): Promise<void>;
-    prepareRegistration(options: RegistrationPreparation): Promise<RegistrationOperation>;
-    resolve(address: string): Promise<string>;
-    typedData(registration: AddressRegistration, options?: RegistrationOptions): {
-        domain: {
-            name: string;
-            version: string;
-            chainId: bigint;
-            verifyingContract: `0x${string}`;
-        };
-        primaryType: string;
-        types: {
-            [x: string]: {
-                name: string;
-                type: string;
-            }[];
-        };
-        message: {
-            nonce: bigint;
-            deadline: bigint;
-            viewingPublicKey: Hex;
-            clueKey: Hex;
-            walletIdentity: string;
-        };
-    };
-    digest(registration: AddressRegistration, options?: RegistrationOptions): `0x${string}`;
-    buildCall(registration: AddressRegistration, signature: `0x${string}`, options?: RegistrationOptions): RegistrationCalldata;
-}
-
-declare const CREATE_CREDIT_FIELDS: readonly ["token", "sources", "nullifiers", "creditCommitment", "changeCommitment", "owner", "expiry", "deadline", "feeRecipient", "feeAmount"];
-/** Public checks cannot establish ownership or conservation: those are enforced by the proof. */
-declare function validateCreateCreditRequest(c: TransactionContext, p: CreateCreditParams, cs: readonly Delivery[], funding?: FundingInput): {
-    sources: {
-        treeId: bigint;
-        merkleRoot: `0x${string}`;
-    }[];
-    nullifiers: `0x${string}`[];
-    actualCount: number;
-    sourceCount: number;
-    creditCommitment: `0x${string}`;
-    changeCommitment: `0x${string}`;
-    owner: `0x${string}`;
-    expiry: bigint;
-    deadline: bigint;
-    deliveries: Delivery[];
-    funding: FundingParams;
-    feeRecipient: `0x${string}`;
-    feeAmount: bigint;
-    chainId: bigint;
-    protocolAddress: Hex;
-    tokenAddress: Hex;
-    now?: bigint;
-    timestamp?: bigint;
-};
-declare function createCreditBaseInputs(c: TransactionContext, p: CreateCreditParams, cs: readonly Delivery[], f?: FundingInput): `0x${string}`[];
-declare function createCreditPublicInputs(c: TransactionContext, p: CreateCreditParams, deliveries: readonly Delivery[], funding?: FundingInput): `0x${string}`[];
-declare function createCreditRequestHash(p: CreateCreditParams, cs: readonly Delivery[], f?: FundingInput): Hex;
-declare function encodeCreateCreditTypedData(c: TransactionContext, p: CreateCreditParams, deliveries: readonly Delivery[], funding?: FundingInput): {
-    domain: {
-        name: string;
-        version: string;
-        chainId: bigint;
-        verifyingContract: `0x${string}`;
-    };
-    types: {
-        readonly WalletAuthorization: readonly [{
-            readonly name: "operation";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "statementHash";
-            readonly type: "bytes32";
-        }];
-    };
-    primaryType: "WalletAuthorization";
-    message: {
-        operation: `0x${string}`;
-        statementHash: `0x${string}`;
-    };
-};
-declare function encodeCreateCreditFundingTypedData(c: TransactionContext, p: CreateCreditParams, cs: readonly Delivery[], f: FundingInput): {
-    domain: {
-        name: string;
-        version: string;
-        chainId: bigint;
-        verifyingContract: Hex;
-    };
-    primaryType: "FundTransact";
-    types: {
-        FundTransact: readonly [{
-            readonly name: "requestHash";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "payer";
-            readonly type: "address";
-        }, {
-            readonly name: "amount";
-            readonly type: "uint256";
-        }, {
-            readonly name: "sigNonce";
-            readonly type: "uint256";
-        }, {
-            readonly name: "deadline";
-            readonly type: "uint256";
-        }];
-    };
-    message: {
-        requestHash: `0x${string}`;
-        payer: `0x${string}`;
-        amount: bigint;
-        sigNonce: bigint;
-        deadline: bigint;
-    };
-};
-interface BuildCreateCreditCalldataParams {
-    context: TransactionContext;
-    proof: Hex;
-    params: CreateCreditParams;
-    deliveries: readonly Delivery[];
-    funding?: FundingInput;
-    caller?: Address;
-}
-declare function buildCreateCreditCalldata(p: BuildCreateCreditCalldataParams): {
-    data: Hex;
-    approveAmount: bigint;
-};
-/** Frame a raw direct proof from the proving backend for the Credit verifier adapter. */
-declare function encodeCreditProof(proof: Hex): Hex;
-
-declare const CREDIT_DRAW_CAPACITIES: readonly [1, 12, 50, 120];
-declare function selectCreditDrawCircuit(count: number): {
-    name: string;
-    maxSize: 1 | 12 | 50 | 120;
-    publicInputCount: number;
-    totalBits: number;
-};
-declare function validateCreditDrawRequest(c: TransactionContext, p: CreditDrawParams, cs: readonly Delivery[]): {
-    sources: {
-        treeId: bigint;
-        merkleRoot: `0x${string}`;
-    }[];
-    nullifiers: `0x${string}`[];
-    remainderCommitments: `0x${string}`[];
-    recoveryAmounts: `0x${string}`[];
-    expiries: bigint[];
-    spender: `0x${string}`;
-    totalAmount: bigint;
-    deadline: bigint;
-    deliveries: Delivery[];
-    profile: {
-        name: string;
-        maxSize: 1 | 12 | 50 | 120;
-        publicInputCount: number;
-        totalBits: number;
-    };
-    periods: {
-        currentDay: bigint;
-        currentMonth: bigint;
-    };
-    chainId: bigint;
-    protocolAddress: Hex;
-    tokenAddress: Hex;
-    now?: bigint;
-    timestamp?: bigint;
-};
-declare function creditDrawBaseInputs(c: TransactionContext, p: CreditDrawParams, cs: readonly Delivery[]): `0x${string}`[];
-declare function validateCancelCreditRequest(c: TransactionContext, p: CancelCreditParams): {
-    source: {
-        treeId: bigint;
-        merkleRoot: `0x${string}`;
-    };
-    nullifier: `0x${string}`;
-    owner: `0x${string}`;
-    amount: bigint;
-    deadline: bigint;
-    feeRecipient: `0x${string}`;
-    feeAmount: bigint;
+interface RegistryContext {
     chainId: bigint;
-    protocolAddress: Hex;
-    tokenAddress: Hex;
+    registryAddress: Address;
+    /** Optional explicit wall-clock value in seconds. Equality with deadline is valid. */
     now?: bigint;
-    timestamp?: bigint;
-};
-declare function cancelCreditBaseInputs(c: TransactionContext, p: CancelCreditParams): `0x${string}`[];
-declare function validateTopUpCreditRequest(c: TransactionContext, p: TopUpCreditParams, cs: readonly Delivery[], funding?: FundingInput): {
-    creation: {
-        sources: {
-            treeId: bigint;
-            merkleRoot: `0x${string}`;
-        }[];
-        nullifiers: `0x${string}`[];
-        actualCount: number;
-        sourceCount: number;
-        creditCommitment: `0x${string}`;
-        changeCommitment: `0x${string}`;
-        owner: `0x${string}`;
-        expiry: bigint;
-        deadline: bigint;
-        deliveries: Delivery[];
-        funding: FundingParams;
-        feeRecipient: `0x${string}`;
-        feeAmount: bigint;
-        chainId: bigint;
-        protocolAddress: Hex;
-        tokenAddress: Hex;
-        now?: bigint;
-        timestamp?: bigint;
-    };
-    creditSource: {
-        treeId: bigint;
-        merkleRoot: `0x${string}`;
-    };
-    creditNullifier: `0x${string}`;
-    previousExpiry: bigint;
-};
-declare function topUpCreditBaseInputs(c: TransactionContext, p: TopUpCreditParams, cs: readonly Delivery[], f?: FundingInput): `0x${string}`[];
-declare function cancelCreditRequestHash(p: CancelCreditParams): Hex;
-declare function topUpCreditRequestHash(p: TopUpCreditParams, cs: readonly Delivery[], f?: FundingInput): Hex;
-declare function encodeCancelCreditTypedData(c: TransactionContext, p: CancelCreditParams): {
-    domain: {
-        name: string;
-        version: string;
-        chainId: bigint;
-        verifyingContract: `0x${string}`;
-    };
-    types: {
-        readonly WalletAuthorization: readonly [{
-            readonly name: "operation";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "statementHash";
-            readonly type: "bytes32";
-        }];
-    };
-    primaryType: "WalletAuthorization";
-    message: {
-        operation: `0x${string}`;
-        statementHash: `0x${string}`;
-    };
-};
-declare function encodeTopUpCreditTypedData(c: TransactionContext, p: TopUpCreditParams, deliveries: readonly Delivery[], funding?: FundingInput): {
-    domain: {
-        name: string;
-        version: string;
-        chainId: bigint;
-        verifyingContract: `0x${string}`;
-    };
-    types: {
-        readonly WalletAuthorization: readonly [{
-            readonly name: "operation";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "statementHash";
-            readonly type: "bytes32";
-        }];
-    };
-    primaryType: "WalletAuthorization";
-    message: {
-        operation: `0x${string}`;
-        statementHash: `0x${string}`;
-    };
-};
-declare function encodeCreditDrawTypedData(c: TransactionContext, p: CreditDrawParams, deliveries: readonly Delivery[]): {
-    domain: {
-        name: string;
-        version: string;
-        chainId: bigint;
-        verifyingContract: `0x${string}`;
-    };
-    types: {
-        readonly WalletAuthorization: readonly [{
-            readonly name: "operation";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "statementHash";
-            readonly type: "bytes32";
-        }];
-    };
-    primaryType: "WalletAuthorization";
-    message: {
-        operation: `0x${string}`;
-        statementHash: `0x${string}`;
-    };
-};
-declare function creditDrawPublicInputs(c: TransactionContext, p: CreditDrawParams, deliveries: readonly Delivery[]): `0x${string}`[];
-declare function cancelCreditPublicInputs(c: TransactionContext, p: CancelCreditParams): `0x${string}`[];
-declare function topUpCreditPublicInputs(c: TransactionContext, p: TopUpCreditParams, deliveries: readonly Delivery[], funding?: FundingInput): `0x${string}`[];
-declare function encodeTopUpCreditFundingTypedData(c: TransactionContext, p: TopUpCreditParams, cs: readonly Delivery[], f: FundingInput): {
-    domain: {
-        name: string;
-        version: string;
-        chainId: bigint;
-        verifyingContract: Hex;
-    };
-    primaryType: "FundTransact";
-    types: {
-        FundTransact: readonly [{
-            readonly name: "requestHash";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "payer";
-            readonly type: "address";
-        }, {
-            readonly name: "amount";
-            readonly type: "uint256";
-        }, {
-            readonly name: "sigNonce";
-            readonly type: "uint256";
-        }, {
-            readonly name: "deadline";
-            readonly type: "uint256";
-        }];
-    };
-    message: {
-        requestHash: `0x${string}`;
-        payer: `0x${string}`;
-        amount: bigint;
-        sigNonce: bigint;
-        deadline: bigint;
-    };
-};
-interface BuildCreditDrawCalldataParams {
-    context: TransactionContext;
-    proof: Hex;
-    params: CreditDrawParams;
-    deliveries: readonly Delivery[];
 }
-declare function buildCreditDrawCalldata(p: BuildCreditDrawCalldataParams): {
-    data: Hex;
-    nullifiers: readonly `0x${string}`[];
-    totalAmount: bigint;
-};
-interface BuildCancelCreditCalldataParams {
-    context: TransactionContext;
-    proof: Hex;
-    params: CancelCreditParams;
-}
-declare function buildCancelCreditCalldata(p: BuildCancelCreditCalldataParams): {
-    data: Hex;
-};
-interface BuildTopUpCreditCalldataParams {
-    context: TransactionContext;
-    proof: Hex;
-    params: TopUpCreditParams;
-    deliveries: readonly Delivery[];
-    funding?: FundingInput;
-    caller?: Address;
+interface RegistryReceivingKeys {
+    viewingPublicKey: Hex;
+    clueKey: Hex;
 }
-declare function buildTopUpCreditCalldata(p: BuildTopUpCreditCalldataParams): {
-    data: Hex;
-    approveAmount: bigint;
-};
-
-declare const TRANSACT_CAPACITIES: readonly [14, 56, 112, 168];
-type TransactCapacity = (typeof TRANSACT_CAPACITIES)[number];
-declare function selectTransactCapacity(inputs: number, outputs: number): TransactCapacity;
-type TransactRequestParams = CrossTreeTransactParams;
-declare function normalizeTransactRequest(c: TransactionContext, p: TransactRequestParams, cs: readonly Delivery[], funding?: FundingInput): {
-    capacity: 14 | 56 | 112 | 168;
-    sources: {
-        treeId: bigint;
-        merkleRoot: `0x${string}`;
-    }[];
-    nullifiers: `0x${string}`[];
-    outputCommitments: `0x${string}`[];
-    inputCount: number;
-    outputCount: number;
-    sourceCount: number;
-    inputTreeIds: bigint[];
-    merkleRoots: bigint[];
-    slotValues: bigint[];
-    deliveries: Delivery[];
-    deliveriesHash: `0x${string}`;
-    withdrawalAddress: `0x${string}`;
-    withdrawalAmount: bigint;
-    feeRecipient: `0x${string}`;
-    feeAmount: bigint;
+interface AddressRegistration {
+    /** Nonzero EVM owner: 20 bytes or canonical zero-padded bytes32. */
+    ownerAddress: Hex;
+    keys: RegistryReceivingKeys;
+    /** The current registry nonce expected for this operation. */
+    nonce: bigint;
     deadline: bigint;
-    depositAmount: bigint;
-    depositPayer: `0x${string}`;
-    funding: FundingParams;
-    chainId: bigint;
-    protocolAddress: Hex;
-    tokenAddress: Hex;
-    now?: bigint;
-    timestamp?: bigint;
-};
-declare function transactPublicInputs(c: TransactionContext, p: TransactRequestParams, cs: readonly Delivery[], f?: FundingInput): `0x${string}`[];
-declare function encodeTransactTypedData(c: TransactionContext, p: TransactRequestParams, deliveries: readonly Delivery[], f?: FundingInput): {
-    domain: {
-        name: string;
-        version: string;
-        chainId: bigint;
-        verifyingContract: `0x${string}`;
-    };
-    types: {
-        readonly WalletAuthorization: readonly [{
-            readonly name: "operation";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "statementHash";
-            readonly type: "bytes32";
-        }];
-    };
-    primaryType: "WalletAuthorization";
-    message: {
-        operation: `0x${string}`;
-        statementHash: `0x${string}`;
-    };
-};
-declare function transactFundingRequestHash(proof: Hex, p: TransactRequestParams, cs: readonly Delivery[]): `0x${string}`;
-declare function encodeTransactFundingTypedData(c: TransactionContext, proof: Hex, p: TransactRequestParams, cs: readonly Delivery[], funding: FundingInput): {
-    domain: {
-        name: string;
-        version: string;
-        chainId: bigint;
-        verifyingContract: Hex;
-    };
-    primaryType: "FundTransact";
-    types: {
-        FundTransact: readonly [{
-            readonly name: "requestHash";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "payer";
-            readonly type: "address";
-        }, {
-            readonly name: "amount";
-            readonly type: "uint256";
-        }, {
-            readonly name: "sigNonce";
-            readonly type: "uint256";
-        }, {
-            readonly name: "deadline";
-            readonly type: "uint256";
-        }];
-    };
-    message: {
-        requestHash: `0x${string}`;
-        payer: `0x${string}`;
-        amount: bigint;
-        sigNonce: bigint;
-        deadline: bigint;
-    };
-};
-interface BuildTransactCalldataParams {
-    context: TransactionContext;
-    proof: Hex;
-    params: TransactRequestParams;
-    deliveries: readonly Delivery[];
-    funding?: FundingInput;
-    caller?: Address;
 }
-declare function buildTransactCalldata(p: BuildTransactCalldataParams): {
-    data: `0x${string}`;
-    capacity: 14 | 56 | 112 | 168;
-    approveAmount: bigint;
-};
-interface BuildTransactAggregateCalldataParams {
-    context: DeploymentContext & {
-        now?: bigint;
-    };
-    proof: Hex;
-    requests: readonly TransactRequest[];
-    caller?: Address;
+interface RegistrationOptions {
+    update?: boolean;
+    /** Check a separately obtained current nonce before authorizing or encoding. */
+    expectedNonce?: bigint;
 }
-declare function buildTransactAggregateCalldata(p: BuildTransactAggregateCalldataParams): {
-    data: Hex;
-    capacity: 14;
-};
-interface BuildShieldCalldataParams {
-    context: TransactionContext;
-    params: ShieldParams;
-    outputs: readonly ShieldOutput[];
-    deliveries: readonly Delivery[];
-    funding: FundingInput;
-    caller?: Address;
+interface RegistrationCalldata {
+    to: Address;
+    callData: Hex;
+    value: 0n;
 }
-declare function validateShieldRequest(p: BuildShieldCalldataParams): Promise<FundingParams>;
-declare function shieldFundingRequestHash(params: ShieldParams, outputs: readonly ShieldOutput[], cs: readonly Delivery[]): Hex;
-declare function encodeShieldFundingTypedData(p: BuildShieldCalldataParams): Promise<{
-    domain: {
-        name: string;
-        version: string;
-        chainId: bigint;
-        verifyingContract: Hex;
-    };
-    primaryType: "FundShield";
-    types: {
-        FundShield: readonly [{
-            readonly name: "requestHash";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "payer";
-            readonly type: "address";
-        }, {
-            readonly name: "amount";
-            readonly type: "uint256";
-        }, {
-            readonly name: "sigNonce";
-            readonly type: "uint256";
-        }, {
-            readonly name: "deadline";
-            readonly type: "uint256";
-        }];
-    };
-    message: {
-        requestHash: `0x${string}`;
-        payer: `0x${string}`;
-        amount: bigint;
-        sigNonce: bigint;
-        deadline: bigint;
-    };
-}>;
-declare function buildShieldCalldata(p: BuildShieldCalldataParams): Promise<{
-    data: Hex;
-    approveAmount: bigint;
-}>;
-/** Full active user-circuit public inputs: business statement followed by EIP-712 digest limbs. */
-declare function transactUserPublicInputs(c: TransactionContext, p: TransactRequestParams, cs: readonly Delivery[], f?: FundingInput): `0x${string}`[];
-type AggregateMemberInput = Pick<TransactRequest, "params" | "deliveries"> & {
-    funding?: FundingInput;
-};
-/** Atomic aggregate funding binds the member statement rather than the aggregate proof bytes. */
-declare function aggregateMemberRequestHash(c: TransactionContext, r: AggregateMemberInput): Hex;
-/** Router adapter business words (58 per member), not the aggregate circuit statement. */
-declare function aggregatePublicInputs(c: TransactionContext, requests: readonly AggregateMemberInput[]): `0x${string}`[];
-declare function encodeAggregateFundingTypedData(c: TransactionContext, r: AggregateMemberInput): {
+/** Standard registry EIP-712 data, independent of private WalletAuthorization. */
+declare function registrationTypedData(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): {
     domain: {
         name: string;
         version: string;
         chainId: bigint;
-        verifyingContract: Hex;
+        verifyingContract: `0x${string}`;
     };
-    primaryType: "FundTransact";
+    primaryType: string;
     types: {
-        FundTransact: readonly [{
-            readonly name: "requestHash";
-            readonly type: "bytes32";
-        }, {
-            readonly name: "payer";
-            readonly type: "address";
-        }, {
-            readonly name: "amount";
-            readonly type: "uint256";
-        }, {
-            readonly name: "sigNonce";
-            readonly type: "uint256";
-        }, {
-            readonly name: "deadline";
-            readonly type: "uint256";
-        }];
+        [x: string]: {
+            name: string;
+            type: string;
+        }[];
     };
     message: {
-        requestHash: `0x${string}`;
-        payer: `0x${string}`;
-        amount: bigint;
-        sigNonce: bigint;
+        nonce: bigint;
         deadline: bigint;
+        viewingPublicKey: Hex;
+        clueKey: Hex;
+        walletIdentity: string;
     };
 };
-
-interface TokenProtocolOptions {
-    expectedRuntimeCodeHash?: Hex;
-}
-/** A token-specific operation binding within a multi-token deployment. Pure builders never sign or submit. */
-declare class TokenProtocol {
-    readonly context: Readonly<TransactionContext>;
-    readonly expectedRuntimeCodeHash: Hex | undefined;
-    constructor(context: TransactionContext, options?: TokenProtocolOptions);
-    validateDeployment(reader: Pick<ChainReader, "getChainId" | "getCode">, options?: {
-        requireRuntimeProfile?: boolean;
-    }): Promise<void>;
-    transact(request: Omit<BuildTransactCalldataParams, "context">): {
-        data: `0x${string}`;
-        capacity: 14 | 56 | 112 | 168;
-        approveAmount: bigint;
-        to: `0x${string}`;
-        value: bigint;
-    };
-    aggregate(request: Omit<BuildTransactAggregateCalldataParams, "context">): {
-        data: Hex;
-        capacity: 14;
-        to: `0x${string}`;
-        value: bigint;
-    };
-    shield(request: Omit<BuildShieldCalldataParams, "context">): Promise<{
-        data: Hex;
-        approveAmount: bigint;
-        to: `0x${string}`;
-        value: bigint;
-    }>;
-    createCredit(request: Omit<BuildCreateCreditCalldataParams, "context">): {
-        data: Hex;
-        approveAmount: bigint;
-        to: `0x${string}`;
-        value: bigint;
-    };
-    drawCredit(request: Omit<BuildCreditDrawCalldataParams, "context">): {
-        data: Hex;
-        nullifiers: readonly `0x${string}`[];
-        totalAmount: bigint;
-        to: `0x${string}`;
-        value: bigint;
-    };
-    cancelCredit(request: Omit<BuildCancelCreditCalldataParams, "context">): {
-        data: Hex;
-        to: `0x${string}`;
-        value: bigint;
-    };
-    topUpCredit(request: Omit<BuildTopUpCreditCalldataParams, "context">): {
-        data: Hex;
-        approveAmount: bigint;
-        to: `0x${string}`;
-        value: bigint;
-    };
-}
-
-interface ProtocolOptions {
-    deployment: ProtocolDeployment;
-}
-/** A multi-token deployment. Asset support is always read from the chain. */
-declare class Protocol {
-    readonly deployment: Readonly<ProtocolDeployment>;
-    readonly context: Readonly<DeploymentContext>;
-    constructor(options: ProtocolOptions);
-    /** Load the selected deployment and verify its contract against Chain RPC before returning. */
-    static fromRpc(rpc: Pick<ProtocolRpcClient, "getDeployment">, provider: Provider, options?: {
-        signal?: AbortSignal;
-    }): Promise<Protocol>;
-    validateDeployment(connection: Provider | (Pick<ChainReader, "getChainId" | "getCode"> & {
-        getProtocolVersion?(address: Address): Promise<bigint>;
-        getProtocolAddressRegistry?(address: Address): Promise<Address>;
-    })): Promise<void>;
-    aggregate(request: Omit<BuildTransactAggregateCalldataParams, "context">): {
-        data: Hex;
-        capacity: 14;
-        to: `0x${string}`;
-        value: bigint;
-    };
-    /** Build an operation context for one asset within this same deployment. */
-    forToken(tokenAddress: Address): TokenProtocol;
-}
+declare function registrationDigest(context: RegistryContext, registration: AddressRegistration, options?: RegistrationOptions): Hex;
+/** Encode an owner call (empty signature) or an EIP-712 / ERC-1271 authorized relay. */
+declare function buildRegistrationCalldata(context: RegistryContext, registration: AddressRegistration, signature: Hex, options?: RegistrationOptions): RegistrationCalldata;
+/** Ethers runner used for registry contract reads. */
+type RegistryReadClient = ContractRunner;
+/** One receivingKeysOf query per short address; RPC failures propagate unchanged. */
+declare function createRegistryReceivingKeyLookup(client: RegistryReadClient, registryAddress: Address): ReceivingKeyLookup;
 
 interface VerifyNoteCommitmentParams {
     ownerAddress: `0x${string}`;
@@ -915,96 +124,14 @@ interface VerifyNoteCommitmentParams {
     nonce: `0x${string}`;
     noteCommitment: `0x${string}`;
     chainId: bigint;
+    protocolAddress: `0x${string}`;
 }
 declare function verifyNoteCommitment(params: VerifyNoteCommitmentParams): Promise<boolean>;
-interface VerifyCreditCommitmentParams extends Partial<_invisi_labs_core.CreditPolicy> {
-    chainId: bigint;
-    spenderWalletIdentity: `0x${string}`;
-    ownerWalletIdentity: `0x${string}`;
-    spenderPayout: `0x${string}`;
-    ownerPayout: `0x${string}`;
-    tokenAddress: `0x${string}`;
-    amount: bigint;
-    nonce: bigint;
-    expiry: bigint;
-    creditSharedKey: bigint;
-    /** Server-returned value to verify against the locally recomputed commitment. */
+interface VerifyCreditCommitmentParams {
+    state: _invisi_labs_primitives.CreditState;
     creditCommitment: `0x${string}`;
 }
-/**
- * Hashes the received shared key locally, recomputes the Credit leaf and compares it to the
- * server-returned value. A mismatch means the server folded a wrong nonce
- * (or other parameter) — the caller MUST abort and not create a Credit.
- */
-declare function verifyCreditCommitment(params: VerifyCreditCommitmentParams): Promise<boolean>;
-
-interface NoteMembership {
-    note: Note;
-    treeId: bigint;
-    leafIndex: number;
-    path: readonly bigint[];
-}
-interface CreditMembership {
-    state: CreditDeliveryState;
-    treeId: bigint;
-    leafIndex: number;
-    path: readonly bigint[];
-}
-interface TransactWitnessParams extends Omit<BuildTransactCalldataParams, "proof" | "context"> {
-    inputs: readonly NoteMembership[];
-    outputs: readonly (Note | {
-        identity: Hex;
-        amount: bigint;
-        note?: Note;
-    })[];
-    authorization?: AuthorizedStatement;
-    target?: ProofTarget;
-}
-interface CreateCreditWitnessParams {
-    params: CreateCreditParams;
-    deliveries: readonly Delivery[];
-    funding?: FundingInput;
-    inputs: readonly NoteMembership[];
-    state: CreditDeliveryState;
-    change?: Note;
-    authorization: AuthorizedStatement;
-}
-interface DrawCreditWitnessParams {
-    /** Explicit chain timestamp used to prepare this signed statement. */
-    timestamp: bigint;
-    params: CreditDrawParams;
-    deliveries: readonly Delivery[];
-    inputs: readonly CreditMembership[];
-    amounts: readonly bigint[];
-    authorization: AuthorizedStatement;
-}
-interface CancelCreditWitnessParams {
-    params: CancelCreditParams;
-    input: CreditMembership;
-    authorization: AuthorizedStatement;
-}
-interface TopUpCreditWitnessParams extends Omit<CreateCreditWitnessParams, "params"> {
-    params: TopUpCreditParams;
-    previous: CreditMembership;
-}
-/** Local typed assembly for authenticated circuit releases; no network or backend selection. */
-declare class WitnessBuilder {
-    #private;
-    constructor(protocol: TokenProtocol);
-    static statement(circuitName: CircuitName, expectedPublicInputs: readonly Hex[], target?: ProofTarget): ProofStatement;
-    private context;
-    private authority;
-    private membership;
-    private noteLeaf;
-    private creditLeaf;
-    private noteInputs;
-    transact(p: TransactWitnessParams): Promise<ProvingRequest>;
-    private creation;
-    createCredit(p: CreateCreditWitnessParams): Promise<ProvingRequest>;
-    cancelCredit(p: CancelCreditWitnessParams): Promise<ProvingRequest>;
-    drawCredit(p: DrawCreditWitnessParams): Promise<ProvingRequest>;
-    topUpCredit(p: TopUpCreditWitnessParams): Promise<ProvingRequest>;
-}
+declare function verifyCreditCommitment(p: VerifyCreditCommitmentParams): Promise<boolean>;
 
 /**
  * Query the selected factory. The caller still verifies the returned deployment profile.
@@ -1012,4 +139,72 @@ declare class WitnessBuilder {
  */
 declare function resolveInstanceAddress(client: ContractRunner, factoryAddress: `0x${string}`, salt: `0x${string}`): Promise<`0x${string}`>;
 
-export { type AddressRegistration, AddressRegistry, type AddressRegistryOptions, type AggregateMemberInput, type BuildCancelCreditCalldataParams, type BuildCreateCreditCalldataParams, type BuildCreditDrawCalldataParams, type BuildShieldCalldataParams, type BuildTopUpCreditCalldataParams, type BuildTransactAggregateCalldataParams, type BuildTransactCalldataParams, CREATE_CREDIT_FIELDS, CREDIT_DRAW_CAPACITIES, type CancelCreditWitnessParams, type CanonicalReceipt, type ChainReader, type CreateCreditWitnessParams, type CreditMembership, type DrawCreditWitnessParams, EMPTY_FUNDING, EMPTY_PERMIT, FIELD_MODULUS, type FactoryReader, type FundingInput, type NoteMembership, Protocol, type ProtocolLog, type ProtocolOptions, type RegistrationCalldata, RegistrationOperation, type RegistrationOptions, type RegistrationPreparation, type RegistrationStatus, type RegistryContext, type RegistryReadClient, type RegistryReader, type RegistryReceivingKeys, TRANSACT_CAPACITIES, TokenProtocol, type TokenProtocolOptions, type TopUpCreditWitnessParams, type TransactCapacity, type TransactRequestParams, type TransactWitnessParams, type TransactionCall, type TransactionContext, type VerifyCreditCommitmentParams, type VerifyNoteCommitmentParams, WitnessBuilder, ZERO_ADDRESS, ZERO_WORD, aggregateMemberRequestHash, aggregatePublicInputs, buildCancelCreditCalldata, buildCreateCreditCalldata, buildCreditDrawCalldata, buildRegistrationCalldata, buildShieldCalldata, buildTopUpCreditCalldata, buildTransactAggregateCalldata, buildTransactCalldata, cancelCreditBaseInputs, cancelCreditPublicInputs, cancelCreditRequestHash, checkDeadline, createCreditBaseInputs, createCreditPublicInputs, createCreditRequestHash, createRegistryReceivingKeyLookup, creditDrawBaseInputs, creditDrawPublicInputs, deliveriesHash, dense, encodeAggregateFundingTypedData, encodeCancelCreditTypedData, encodeCreateCreditFundingTypedData, encodeCreateCreditTypedData, encodeCreditDrawTypedData, encodeCreditProof, encodeShieldFundingTypedData, encodeTopUpCreditFundingTypedData, encodeTopUpCreditTypedData, encodeTransactFundingTypedData, encodeTransactTypedData, envelope, field, fundingFields, getEIP712Domain, known, normalizeContext, normalizeFunding, normalizeOpaqueDelivery, normalizeSources, normalizeTransactRequest, notes, pad, registrationDigest, registrationTypedData, resolveInstanceAddress, selectCreditDrawCircuit, selectTransactCapacity, shieldFundingRequestHash, topUpCreditBaseInputs, topUpCreditPublicInputs, topUpCreditRequestHash, transactFundingRequestHash, transactPublicInputs, transactUserPublicInputs, uint, validateCancelCreditRequest, validateCreateCreditRequest, validateCreditDrawRequest, validateFundingSubmission, validateShieldRequest, validateTopUpCreditRequest, verifyCreditCommitment, verifyNoteCommitment, word };
+/** Canonical optional public fee. Omitting both fields explicitly selects zero fee. */
+declare function normalizeFee(p: {
+    feeRecipient?: Address;
+    feeAmount?: bigint;
+}): {
+    feeRecipient: `0x${string}`;
+    feeAmount: bigint;
+};
+
+declare const CIRCUIT_RELEASE: {
+    readonly note: {
+        readonly version: 4;
+        readonly formatVersion: 7;
+        readonly aggregateFormatVersion: 10;
+    };
+    readonly credit: {
+        readonly version: 7;
+        readonly formatVersion: 8;
+        readonly manifestSha256: "c84fe8b0817f722428d9f888c0e38f2b1b48f15b670e74a75e8dd84776b14d66";
+    };
+};
+
+type DocumentedReleaseIdentity = {
+    creditManifestVersion: number;
+    creditFormatVersion: number;
+    creditManifestSha256?: string;
+} | {
+    userManifestVersion: number;
+    userFormatVersion: number;
+};
+type DocumentedGasShape = Readonly<Record<string, string | number | boolean>>;
+type DocumentedGasReference = {
+    source: "documented-reference";
+    available: false;
+    reason: "shape-not-covered" | "release-not-covered";
+} | {
+    source: "documented-reference";
+    available: true;
+    gasUnits: bigint;
+    statistic: "median";
+    sampleCount: number;
+    referenceId: string;
+    document: string;
+    sourceSha256: string;
+    docsCommit: string;
+    conditions: string;
+    assumptions: readonly string[];
+    releaseIdentity: DocumentedReleaseIdentity;
+};
+/** Exact documented workload lookup. This is neither a transaction gas limit nor an RPC estimate. */
+declare function getDocumentedGasReference(query: DocumentedGasShape): DocumentedGasReference;
+
+/** Runtime identity and indexing start for one deployed contract. */
+interface ContractDeployment {
+    readonly address: Address;
+    readonly runtimeCodeHash: Hex;
+    readonly fromBlock: bigint;
+}
+/** A deployment record supplied by the selected service or its publisher. */
+interface ProtocolDeployment {
+    readonly chainId: bigint;
+    readonly protocol: Readonly<ContractDeployment>;
+    readonly registry?: Readonly<ContractDeployment>;
+    readonly broadcasterRegistry?: Readonly<ContractDeployment>;
+}
+/** Validate and snapshot an object or JSON record. This does not authenticate its source. */
+declare function defineDeployment(value: unknown): Readonly<ProtocolDeployment>;
+
+export { type AddressRegistration, CIRCUIT_RELEASE, CanonicalBlock, type CanonicalReceipt, type ChainReader, type ContractDeployment, DeploymentContext, type DocumentedGasReference, type DocumentedGasShape, type DocumentedReleaseIdentity, type FactoryReader, FundingInput, type ProtocolDeployment, type ProtocolLog, type RegistrationCalldata, type RegistrationOptions, type RegistryContext, type RegistryReadClient, type RegistryReceivingKeys, TransactRequestParams, type TransactionCall, TransactionContext, type VerifyCreditCommitmentParams, type VerifyNoteCommitmentParams, buildRegistrationCalldata, createRegistryReceivingKeyLookup, defineDeployment, getDocumentedGasReference, normalizeFee, registrationDigest, registrationTypedData, resolveInstanceAddress, transactUserPublicInputs, verifyCreditCommitment, verifyNoteCommitment };