@invisi-labs/protocol 1.1.7 → 1.2.1

package/dist/provenance.js

@@ -0,0 +1,499 @@
+// src/provenance/index.ts
+import { sha256 as sha2562 } from "@noble/hashes/sha256";
+import { ed25519 as ed255192 } from "@noble/curves/ed25519";
+import { AbiCoder, keccak256, getBytes as getBytes2, hexlify as hexlify2, concat as concat2 } from "ethers";
+import { poseidonHash as poseidonHash2 } from "@invisi-labs/primitives";
+
+// src/provenance/rotation.ts
+import { sha256 } from "@noble/hashes/sha256";
+import { ed25519 } from "@noble/curves/ed25519";
+import { getBytes, hexlify, concat } from "ethers";
+var bytes32 = (v) => {
+  if (!/^0x[0-9a-fA-F]{64}$/.test(v)) throw new Error("Rotation field must be32-byte hex");
+  return getBytes(v);
+};
+var time = (v) => {
+  if (!/^(0|[1-9][0-9]*)$/.test(v)) throw new Error("Rotation time must be decimal");
+  return uint(v, 64);
+};
+function rotationPayload(r) {
+  if (r.version !== "1") throw new Error("Unsupported rotation version");
+  const pub = bytes32(r.newPublicKey), id = bytes32(r.newKeyId);
+  if (hexlify(sha256(pub)) !== hexlify(id)) throw new Error("Rotation key ID mismatch");
+  return getBytes(
+    concat([
+      new Uint8Array([1]),
+      bytes32(r.providerId),
+      bytes32(r.oldKeyId),
+      id,
+      pub,
+      getBytes("0x" + time(r.activatedAt).toString(16).padStart(16, "0")),
+      bytes32(r.previousRotationHash)
+    ])
+  );
+}
+var rotationMessage = (r) => sha256(
+  getBytes(
+    concat([
+      new TextEncoder().encode("Invisi.Provenance.KeyRotation.v1"),
+      rotationPayload(r)
+    ])
+  )
+);
+var rotationHash = (r) => hexlify(sha256(rotationPayload(r)));
+function verifyRotationChain(initial, records) {
+  const provider = hexlify(bytes32(initial.providerId)), now = time(initial.now);
+  let previous = hexlify(bytes32(initial.previousRotationHash)), last = time(initial.lastActivatedAt);
+  if (last > now) throw new Error("Rotation checkpoint is in the future");
+  const keys = {}, validity = {};
+  for (const [id, key] of Object.entries(initial.keys)) {
+    const canonical = hexlify(bytes32(id));
+    if (key.length !== 32) throw new Error("Invalid trusted signing key");
+    keys[canonical] = new Uint8Array(key);
+    validity[canonical] = { ...initial.validity?.[canonical] ?? { activatedAt: "0" } };
+  }
+  for (const r of records) {
+    rotationPayload(r);
+    const old = hexlify(bytes32(r.oldKeyId)), next = hexlify(bytes32(r.newKeyId)), at = time(r.activatedAt), oldKey = keys[old], interval = validity[old];
+    if (hexlify(bytes32(r.providerId)) !== provider || hexlify(bytes32(r.previousRotationHash)) !== previous || at <= last || at > now || !oldKey || !interval || interval.retiredAt !== void 0 || at < time(interval.activatedAt) || keys[next])
+      throw new Error("Untrusted or out-of-order key rotation");
+    if (!/^0x[0-9a-fA-F]{128}$/.test(r.signature) || !ed25519.verify(getBytes(r.signature), rotationMessage(r), oldKey, { zip215: false }))
+      throw new Error("Invalid key rotation signature");
+    validity[old] = { ...interval, retiredAt: r.activatedAt };
+    keys[next] = bytes32(r.newPublicKey);
+    validity[next] = { activatedAt: r.activatedAt };
+    previous = rotationHash(r);
+    last = at;
+  }
+  return {
+    providerId: provider,
+    keys,
+    validity,
+    rotationHash: previous,
+    lastActivatedAt: last.toString()
+  };
+}
+function withRotationHistory(trust, keyring) {
+  if (word(trust.providerId) !== keyring.providerId)
+    throw new Error("Rotation provider mismatch");
+  return { ...trust, signingKeys: keyring.keys, signingKeyValidity: keyring.validity };
+}
+
+// src/provenance/tracking.ts
+var TrackingStaleGenerationError = class extends Error {
+  constructor() {
+    super("TRACKING_STALE_GENERATION");
+  }
+};
+function validateTracking(value, expectedId) {
+  if (!value || typeof value !== "object") throw Error("Missing tracking");
+  const t = value;
+  if (Object.keys(t).some(
+    (k) => ![
+      "id",
+      "status",
+      "expiresAt",
+      "operationDigest",
+      "matched",
+      "reasonCode",
+      "checkpointSequence"
+    ].includes(k)
+  ) || typeof t.id !== "string" || !/^([a-f0-9]{48})$/.test(t.id) || expectedId !== void 0 && t.id !== expectedId || typeof t.operationDigest !== "string" || word(t.operationDigest) !== t.operationDigest || typeof t.expiresAt !== "string" || !/^(0|[1-9][0-9]*)$/.test(t.expiresAt))
+    throw Error("Invalid tracking identity");
+  uint(t.expiresAt, 64);
+  if (![
+    "pending_confirmation",
+    "pending_source",
+    "recognized",
+    "expired",
+    "superseded",
+    "stale_generation"
+  ].includes(t.status))
+    throw Error("Unknown tracking status");
+  if (t.status === "stale_generation") throw new TrackingStaleGenerationError();
+  if (BigInt(t.expiresAt) < 1n) throw Error("Invalid tracking expiry");
+  if (["pending_source", "recognized"].includes(t.status) && !t.matched)
+    throw Error("Tracking locator required");
+  if (t.matched) {
+    const m = t.matched;
+    if (Object.keys(m).some((k) => !["txHash", "blockHash", "operationIndex"].includes(k)) || typeof m.txHash !== "string" || word(m.txHash) !== m.txHash || typeof m.blockHash !== "string" || word(m.blockHash) !== m.blockHash || typeof m.operationIndex !== "string" || !/^(0|[1-9][0-9]*)$/.test(m.operationIndex))
+      throw Error("Invalid tracking locator");
+    uint(m.operationIndex, 32);
+  }
+  if (t.reasonCode !== void 0 && typeof t.reasonCode !== "string")
+    throw Error("Invalid tracking reason");
+  return t;
+}
+function preflightTracking(result, operationIndex, operationDigest2) {
+  const member = Array.isArray(result.operations) ? result.operations.find(
+    (v) => String(v.operationIndex) === operationIndex
+  ) : result;
+  if (!member || result.broadcastDecision !== "allow" || member.broadcastDecision !== "allow" || word(String(member.operationDigest)) !== word(operationDigest2))
+    throw Error("Preflight candidate was not allowed");
+  const tracking = validateTracking(member.tracking);
+  if (!["pending_confirmation", "pending_source", "recognized"].includes(tracking.status))
+    throw Error("Tracking no longer permits broadcast");
+  if (tracking.operationDigest !== word(operationDigest2))
+    throw Error("Tracking statement mismatch");
+  return tracking;
+}
+
+// src/provenance/release.ts
+var PROVENANCE_MANIFEST_SHA256 = "6107789c5c0d24c4130bff05da6d389336feb5ccb247c4030eae5198ab05d762";
+
+// src/provenance/tree.ts
+import { poseidonHash } from "@invisi-labs/primitives";
+var hash = async (v) => BigInt(await poseidonHash(v.map(field)));
+var RecognizedTree = class {
+  leaves = [];
+  get leafCount() {
+    return this.leaves.length;
+  }
+  append(value) {
+    const leaf = field(value);
+    if (!leaf || this.leaves.length >= 2 ** 32) throw new Error("Invalid leaf or full tree");
+    this.leaves.push(leaf);
+    return this.leaves.length - 1;
+  }
+  async appendCommitment(scope, commitment) {
+    return this.append(await recognizedLeaf(await scopeHash(scope), commitment));
+  }
+  async membershipForCommitment(scope, commitment) {
+    const leaf = await recognizedLeaf(await scopeHash(scope), commitment), index = this.leaves.indexOf(leaf);
+    if (index < 0) return void 0;
+    return { leafIndex: index, ...await this.path(index) };
+  }
+  async root() {
+    if (this.leaves.length) return (await this.path(0)).root;
+    let zero = 0n;
+    for (let i = 0; i < 32; i++) zero = await hash([zero, zero]);
+    return zero;
+  }
+  async path(index) {
+    if (!Number.isInteger(index) || index < 0 || index >= this.leaves.length)
+      throw new Error("Leaf index");
+    let zero = 0n, nodes = new Map(this.leaves.map((v, i) => [i, v])), cursor = index;
+    const path = [];
+    for (let l = 0; l < 32; l++) {
+      path.push(nodes.get(cursor % 2 === 0 ? cursor + 1 : cursor - 1) ?? zero);
+      const next = /* @__PURE__ */ new Map();
+      for (const i of nodes.keys()) {
+        const p = Math.floor(i / 2);
+        if (!next.has(p))
+          next.set(
+            p,
+            await hash([nodes.get(p * 2) ?? zero, nodes.get(p * 2 + 1) ?? zero])
+          );
+      }
+      zero = await hash([zero, zero]);
+      nodes = next;
+      cursor = Math.floor(cursor / 2);
+    }
+    return { path, root: nodes.get(0) ?? zero };
+  }
+};
+
+// src/provenance/index.ts
+import { provenanceIntentHash } from "@invisi-labs/primitives";
+var DEFAULT_PROVENANCE_ENDPOINT = "https://provenance.invisipay.fi";
+var FIELD_MODULUS = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
+var CAPACITIES = Object.freeze([10, 20, 40, 80, 120, 160, 190]);
+var PUBLIC_INPUTS = Object.freeze([
+  "chain_id",
+  "protocol_address",
+  "token_address",
+  "chain_generation",
+  "source_count",
+  "sources_digest",
+  "input_count",
+  "operation_digest_hi",
+  "operation_digest_lo",
+  "input_digest",
+  "binding"
+]);
+var utf8 = (s) => new TextEncoder().encode(s);
+function uint(value, bits) {
+  if (typeof value === "number" && !Number.isSafeInteger(value))
+    throw new Error("Unsafe integer");
+  if (typeof value === "string" && !/^(0|[1-9][0-9]*|0x[0-9a-fA-F]+)$/.test(value))
+    throw new Error("Invalid integer encoding");
+  const n = BigInt(value);
+  if (n < 0n || n >= 1n << BigInt(bits)) throw new Error(`Integer exceeds u${bits}`);
+  return n;
+}
+function field(value) {
+  const n = uint(value, 256);
+  if (n >= FIELD_MODULUS) throw new Error("Noncanonical field");
+  return n;
+}
+var word = (value) => "0x" + uint(value, 256).toString(16).padStart(64, "0");
+var DOMAINS = Object.freeze(
+  Object.fromEntries(
+    Object.entries({
+      SCOPE: "Scope",
+      NOTE: "Note",
+      INPUTS: "Inputs",
+      STEP: "Step",
+      SOURCES: "Sources",
+      SOURCE_STEP: "SourceStep",
+      BIND: "Bind"
+    }).map(([k, v]) => [
+      k,
+      BigInt(hexlify2(sha2562(utf8(`Invisi.Provenance.${v}.v1`)))) % FIELD_MODULUS
+    ])
+  )
+);
+var hash2 = async (values) => BigInt(await poseidonHash2(values.map(field)));
+var limbs = (value) => {
+  const n = uint(value, 256);
+  return [n >> 128n, n & (1n << 128n) - 1n];
+};
+async function scopeHash(s) {
+  const protocol = uint(s.protocolAddress, 160);
+  if (!protocol) throw new Error("Zero protocol");
+  return hash2([DOMAINS.SCOPE, uint(s.chainId, 64), protocol]);
+}
+var recognizedLeaf = (scope, commitment) => {
+  if (field(commitment) === 0n) throw new Error("Zero commitment");
+  return hash2([DOMAINS.NOTE, scope, commitment]);
+};
+async function noteOpening(s) {
+  const owner = uint(s.owner, 160), amount = uint(s.amount, 128), chain = uint(s.chainId, 64), protocol = uint(s.protocolAddress, 160), token = uint(s.tokenAddress, 160), nonce = field(s.nonce);
+  if (!owner || !amount || !protocol || !token)
+    throw new Error("Zero note owner, protocol, token or amount");
+  const identity = await hash2([2n, owner, nonce]);
+  const commitment = await hash2([3n, chain, protocol, identity, token, amount]);
+  return { commitment, nullifier: await hash2([4n, chain, protocol, nonce, commitment]) };
+}
+async function inputDigest(nullifiers) {
+  let d = await hash2([DOMAINS.INPUTS, nullifiers.length]);
+  for (const n of nullifiers) d = await hash2([DOMAINS.STEP, d, n]);
+  return d;
+}
+async function sourcesDigest(generation, sources) {
+  let d = await hash2([DOMAINS.SOURCES, uint(generation, 64), sources.length]), prior = 0n;
+  for (const s of sources) {
+    const id = uint(s.treeId, 64), count = uint(s.leafCount, 64);
+    if (id <= prior || count < 1n || count > 2n ** 32n)
+      throw new Error("Invalid source order or count");
+    prior = id;
+    d = await hash2([DOMAINS.SOURCE_STEP, d, id, s.root, count]);
+  }
+  return d;
+}
+async function bindingDigest(s) {
+  return hash2([
+    DOMAINS.BIND,
+    s.scope,
+    (() => {
+      const token = uint(s.tokenAddress, 160);
+      if (!token) throw new Error("Zero token");
+      return token;
+    })(),
+    uint(s.chainGeneration, 64),
+    s.sourceCount,
+    s.sourcesDigest,
+    s.inputCount,
+    ...limbs(s.operationDigest),
+    s.inputDigest
+  ]);
+}
+function operationDigest(s) {
+  const chain = uint(s.chainId, 64), protocol = uint(s.protocolAddress, 160), capacity = Number(uint(s.mainCircuitCapacity, 32));
+  if (!protocol || !Number.isInteger(capacity) || capacity < 1 || capacity > 190 || s.publicInputs.length !== 17 + 3 * capacity || (s.operationKind ?? 2) !== 2)
+    throw new Error("Invalid authenticated transact statement");
+  return keccak256(
+    AbiCoder.defaultAbiCoder().encode(
+      ["string", "uint64", "address", "uint8", "uint32", "bytes32[]"],
+      [
+        "Invisi.Provenance.Operation.v1",
+        chain,
+        "0x" + protocol.toString(16).padStart(40, "0"),
+        2,
+        capacity,
+        s.publicInputs.map((x) => word(field(x)))
+      ]
+    )
+  );
+}
+var CERT_LAYOUT = [
+  ["certificateVersion", 1],
+  ["providerId", 32],
+  ["signingKeyId", 32],
+  ["chainId", 8],
+  ["protocolAddress", 20],
+  ["chainGeneration", 8],
+  ["rootSequence", 8],
+  ["treeId", 8],
+  ["leafCount", 8],
+  ["root", 32],
+  ["confirmedBlockNumber", 8],
+  ["confirmedBlockHash", 32],
+  ["decisionLogHash", 32],
+  ["previousCheckpointHash", 32],
+  ["issuedAt", 8]
+];
+function rootCertificatePayload(c) {
+  if (uint(c.certificateVersion, 8) !== 1n || uint(c.treeId, 64) < 1n || uint(c.leafCount, 64) > 2n ** 32n)
+    throw new Error("Invalid certificate version or tree");
+  field(c.root);
+  return getBytes2(
+    concat2(
+      CERT_LAYOUT.map(
+        ([k, w]) => "0x" + uint(c[k], w * 8).toString(16).padStart(w * 2, "0")
+      )
+    )
+  );
+}
+var checkpointHash = (c) => hexlify2(sha2562(rootCertificatePayload(c))).slice(2);
+var rootCertificateMessage = (c) => sha2562(getBytes2(concat2([utf8("Invisi.Provenance.Root.v1"), rootCertificatePayload(c)])));
+function verifyRootCertificate(c, key) {
+  if (!/^0x[0-9a-fA-F]{128}$/.test(c.signature) || key.length !== 32) return false;
+  try {
+    return ed255192.verify(getBytes2(c.signature), rootCertificateMessage(c), key, {
+      zip215: false
+    });
+  } catch {
+    return false;
+  }
+}
+function assertCertificateTrust(c, trust) {
+  if (Object.keys(c).some((k) => k !== "signature" && !CERT_LAYOUT.some(([name]) => name === k)))
+    throw Error("Unknown root certificate field");
+  for (const k of ["chainId", "protocolAddress", "chainGeneration", "providerId"])
+    if (BigInt(c[k]) !== BigInt(trust[k])) throw new Error("Certificate deployment mismatch");
+  const key = trust.signingKeys[word(c.signingKeyId)];
+  const validity = trust.signingKeyValidity?.[word(c.signingKeyId)], issuedAt = uint(c.issuedAt, 64);
+  if (validity && (issuedAt < BigInt(validity.activatedAt) || validity.retiredAt !== void 0 && issuedAt >= BigInt(validity.retiredAt)))
+    throw new Error("Certificate outside signing key validity");
+  if (!key || !verifyRootCertificate(c, key)) throw new Error("Untrusted certificate signature");
+}
+function certificateToWire(c) {
+  if (Object.keys(c).some((k) => k !== "signature" && !CERT_LAYOUT.some(([name]) => name === k)))
+    throw Error("Unknown root certificate field");
+  rootCertificatePayload(c);
+  const out = {};
+  for (const [key, width] of CERT_LAYOUT) {
+    const n = uint(c[key], width * 8);
+    out[key] = width === 32 || key === "protocolAddress" ? "0x" + n.toString(16).padStart(width * 2, "0") : n.toString();
+  }
+  if (!/^0x[0-9a-fA-F]{128}$/.test(c.signature))
+    throw new Error("Certificate signature encoding");
+  out.signature = c.signature.toLowerCase();
+  return out;
+}
+async function validateProofBundle(b, t) {
+  const keys = [
+    "format",
+    "circuitId",
+    "manifestSha256",
+    "target",
+    "publicInputs",
+    "proof",
+    "rootCertificates"
+  ];
+  if (Object.keys(b).some((k) => !keys.includes(k)) || b.format !== "invisi-provenance-proof-v1" || b.target !== "evm" || b.manifestSha256 !== t.manifestSha256 || !/^0x(?:[0-9a-fA-F]{2})+$/.test(b.proof) || b.proof.length > 131074)
+    throw new Error("Unsupported provenance proof bundle");
+  const match = /^provenance_k([1-9][0-9]*)$/.exec(b.circuitId), capacity = Number(match?.[1]);
+  if (!CAPACITIES.includes(capacity) || b.publicInputs.length !== 11)
+    throw new Error("Unsupported provenance circuit or ABI");
+  const p = b.publicInputs.map((v) => {
+    if (!/^0x[0-9a-fA-F]{64}$/.test(v))
+      throw new Error("Public inputs must be canonical words");
+    return field(v);
+  });
+  uint(p[7], 128);
+  uint(p[8], 128);
+  if (p[0] !== BigInt(t.chainId) || p[1] !== BigInt(t.protocolAddress) || p[3] !== BigInt(t.chainGeneration) || p[4] !== BigInt(b.rootCertificates.length) || p[6] < 1n || p[6] > BigInt(capacity) || p[4] < 1n || p[4] > p[6])
+    throw new Error("Proof bundle scope or shape mismatch");
+  const sources = b.rootCertificates.map((c) => {
+    if (Object.keys(c).some(
+      (k) => k !== "signature" && !CERT_LAYOUT.some(([name]) => name === k)
+    ))
+      throw new Error("Unknown root certificate field");
+    assertCertificateTrust(c, t);
+    return { treeId: c.treeId, root: c.root, leafCount: c.leafCount };
+  });
+  const sd = await sourcesDigest(t.chainGeneration, sources);
+  if (sd !== p[5]) throw new Error("Proof sources digest mismatch");
+  const binding = await bindingDigest({
+    scope: await scopeHash(t),
+    tokenAddress: p[2],
+    chainGeneration: t.chainGeneration,
+    sourceCount: p[4],
+    sourcesDigest: sd,
+    inputCount: p[6],
+    operationDigest: p[7] << 128n | p[8],
+    inputDigest: p[9]
+  });
+  if (binding !== p[10]) throw new Error("Proof binding mismatch");
+}
+function proofSidecarToWire(sidecar) {
+  if (Object.keys(sidecar).some((k) => !["operationIndex", "proofBundle"].includes(k)))
+    throw Error("Unknown proof sidecar field");
+  if (Object.keys(sidecar.proofBundle).some(
+    (k) => ![
+      "format",
+      "circuitId",
+      "manifestSha256",
+      "target",
+      "publicInputs",
+      "proof",
+      "rootCertificates"
+    ].includes(k)
+  ))
+    throw Error("Unknown proof bundle field");
+  const b = sidecar.proofBundle;
+  if (b.format !== "invisi-provenance-proof-v1" || b.target !== "evm" || !/^provenance_k[1-9][0-9]*$/.test(b.circuitId) || !/^([0-9a-f]{64})$/.test(b.manifestSha256) || b.publicInputs.length !== 11 || !/^0x(?:[0-9a-fA-F]{2})+$/.test(b.proof) || b.proof.length > 131074)
+    throw new Error("Invalid public proof sidecar");
+  return {
+    operationIndex: uint(sidecar.operationIndex, 32).toString(),
+    proofBundle: {
+      format: b.format,
+      target: b.target,
+      circuitId: b.circuitId,
+      manifestSha256: b.manifestSha256,
+      publicInputs: b.publicInputs.map((v) => word(field(v))),
+      proof: b.proof,
+      rootCertificates: b.rootCertificates.map(certificateToWire)
+    }
+  };
+}
+export {
+  CAPACITIES,
+  DEFAULT_PROVENANCE_ENDPOINT,
+  DOMAINS,
+  FIELD_MODULUS,
+  PROVENANCE_MANIFEST_SHA256,
+  PUBLIC_INPUTS,
+  RecognizedTree,
+  TrackingStaleGenerationError,
+  assertCertificateTrust,
+  bindingDigest,
+  certificateToWire,
+  checkpointHash,
+  field,
+  inputDigest,
+  limbs,
+  noteOpening,
+  operationDigest,
+  preflightTracking,
+  proofSidecarToWire,
+  provenanceIntentHash,
+  recognizedLeaf,
+  rootCertificateMessage,
+  rootCertificatePayload,
+  rotationHash,
+  rotationMessage,
+  rotationPayload,
+  scopeHash,
+  sourcesDigest,
+  uint,
+  validateProofBundle,
+  validateTracking,
+  verifyRootCertificate,
+  verifyRotationChain,
+  withRotationHistory,
+  word
+};
+//# sourceMappingURL=provenance.js.map

package/dist/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/provenance/index.ts","../src/provenance/rotation.ts","../src/provenance/tracking.ts","../src/provenance/release.ts","../src/provenance/tree.ts"],"sourcesContent":["import { sha256 } from \"@noble/hashes/sha256\";\nimport { ed25519 } from \"@noble/curves/ed25519\";\nimport { AbiCoder, keccak256, getBytes, hexlify, concat } from \"ethers\";\nimport { poseidonHash } from \"@invisi-labs/primitives\";\nexport const DEFAULT_PROVENANCE_ENDPOINT = \"https://provenance.invisipay.fi\";\n\nexport type Integer = bigint | string | number;\nexport const FIELD_MODULUS =\n    21888242871839275222246405745257275088548364400416034343698204186575808495617n;\nexport const CAPACITIES: readonly number[] = Object.freeze([10, 20, 40, 80, 120, 160, 190]);\nexport const PUBLIC_INPUTS = Object.freeze([\n    \"chain_id\",\n    \"protocol_address\",\n    \"token_address\",\n    \"chain_generation\",\n    \"source_count\",\n    \"sources_digest\",\n    \"input_count\",\n    \"operation_digest_hi\",\n    \"operation_digest_lo\",\n    \"input_digest\",\n    \"binding\",\n] as const);\nconst utf8 = (s: string) => new TextEncoder().encode(s);\nexport function uint(value: Integer, bits: number): bigint {\n    if (typeof value === \"number\" && !Number.isSafeInteger(value))\n        throw new Error(\"Unsafe integer\");\n    if (typeof value === \"string\" && !/^(0|[1-9][0-9]*|0x[0-9a-fA-F]+)$/.test(value))\n        throw new Error(\"Invalid integer encoding\");\n    const n = BigInt(value);\n    if (n < 0n || n >= 1n << BigInt(bits)) throw new Error(`Integer exceeds u${bits}`);\n    return n;\n}\nexport function field(value: Integer): bigint {\n    const n = uint(value, 256);\n    if (n >= FIELD_MODULUS) throw new Error(\"Noncanonical field\");\n    return n;\n}\nexport const word = (value: Integer): string =>\n    \"0x\" + uint(value, 256).toString(16).padStart(64, \"0\");\nexport const DOMAINS = Object.freeze(\n    Object.fromEntries(\n        Object.entries({\n            SCOPE: \"Scope\",\n            NOTE: \"Note\",\n            INPUTS: \"Inputs\",\n            STEP: \"Step\",\n            SOURCES: \"Sources\",\n            SOURCE_STEP: \"SourceStep\",\n            BIND: \"Bind\",\n        }).map(([k, v]) => [\n            k,\n            BigInt(hexlify(sha256(utf8(`Invisi.Provenance.${v}.v1`)))) % FIELD_MODULUS,\n        ])\n    ) as Record<\"SCOPE\" | \"NOTE\" | \"INPUTS\" | \"STEP\" | \"SOURCES\" | \"SOURCE_STEP\" | \"BIND\", bigint>\n);\nconst hash = async (values: Integer[]): Promise<bigint> =>\n    BigInt(await poseidonHash(values.map(field)));\nexport const limbs = (value: Integer): [bigint, bigint] => {\n    const n = uint(value, 256);\n    return [n >> 128n, n & ((1n << 128n) - 1n)];\n};\nexport interface Scope {\n    chainId: Integer;\n    protocolAddress: Integer;\n}\nexport async function scopeHash(s: Scope): Promise<bigint> {\n    const protocol = uint(s.protocolAddress, 160);\n    if (!protocol) throw new Error(\"Zero protocol\");\n    return hash([DOMAINS.SCOPE, uint(s.chainId, 64), protocol]);\n}\nexport const recognizedLeaf = (scope: Integer, commitment: Integer): Promise<bigint> => {\n    if (field(commitment) === 0n) throw new Error(\"Zero commitment\");\n    return hash([DOMAINS.NOTE, scope, commitment]);\n};\nexport interface Opening {\n    owner: Integer;\n    nonce: Integer;\n    amount: Integer;\n}\nexport async function noteOpening(\n    s: Pick<Scope, \"chainId\" | \"protocolAddress\"> & Opening & { tokenAddress: Integer }\n): Promise<{ commitment: bigint; nullifier: bigint }> {\n    const owner = uint(s.owner, 160),\n        amount = uint(s.amount, 128),\n        chain = uint(s.chainId, 64),\n        protocol = uint(s.protocolAddress, 160),\n        token = uint(s.tokenAddress, 160),\n        nonce = field(s.nonce);\n    if (!owner || !amount || !protocol || !token)\n        throw new Error(\"Zero note owner, protocol, token or amount\");\n    const identity = await hash([2n, owner, nonce]);\n    const commitment = await hash([3n, chain, protocol, identity, token, amount]);\n    return { commitment, nullifier: await hash([4n, chain, protocol, nonce, commitment]) };\n}\nexport async function inputDigest(nullifiers: readonly Integer[]): Promise<bigint> {\n    let d = await hash([DOMAINS.INPUTS, nullifiers.length]);\n    for (const n of nullifiers) d = await hash([DOMAINS.STEP, d, n]);\n    return d;\n}\nexport interface Source {\n    treeId: Integer;\n    root: Integer;\n    leafCount: Integer;\n}\nexport async function sourcesDigest(\n    generation: Integer,\n    sources: readonly Source[]\n): Promise<bigint> {\n    let d = await hash([DOMAINS.SOURCES, uint(generation, 64), sources.length]),\n        prior = 0n;\n    for (const s of sources) {\n        const id = uint(s.treeId, 64),\n            count = uint(s.leafCount, 64);\n        if (id <= prior || count < 1n || count > 2n ** 32n)\n            throw new Error(\"Invalid source order or count\");\n        prior = id;\n        d = await hash([DOMAINS.SOURCE_STEP, d, id, s.root, count]);\n    }\n    return d;\n}\nexport async function bindingDigest(s: {\n    scope: Integer;\n    tokenAddress: Integer;\n    chainGeneration: Integer;\n    sourceCount: Integer;\n    sourcesDigest: Integer;\n    inputCount: Integer;\n    operationDigest: Integer;\n    inputDigest: Integer;\n}): Promise<bigint> {\n    return hash([\n        DOMAINS.BIND,\n        s.scope,\n        (() => {\n            const token = uint(s.tokenAddress, 160);\n            if (!token) throw new Error(\"Zero token\");\n            return token;\n        })(),\n        uint(s.chainGeneration, 64),\n        s.sourceCount,\n        s.sourcesDigest,\n        s.inputCount,\n        ...limbs(s.operationDigest),\n        s.inputDigest,\n    ]);\n}\nexport function operationDigest(s: {\n    chainId: Integer;\n    protocolAddress: Integer;\n    operationKind?: number;\n    mainCircuitCapacity: Integer;\n    publicInputs: readonly Integer[];\n}): string {\n    const chain = uint(s.chainId, 64),\n        protocol = uint(s.protocolAddress, 160),\n        capacity = Number(uint(s.mainCircuitCapacity, 32));\n    if (\n        !protocol ||\n        !Number.isInteger(capacity) ||\n        capacity < 1 ||\n        capacity > 190 ||\n        s.publicInputs.length !== 17 + 3 * capacity ||\n        (s.operationKind ?? 2) !== 2\n    )\n        throw new Error(\"Invalid authenticated transact statement\");\n    return keccak256(\n        AbiCoder.defaultAbiCoder().encode(\n            [\"string\", \"uint64\", \"address\", \"uint8\", \"uint32\", \"bytes32[]\"],\n            [\n                \"Invisi.Provenance.Operation.v1\",\n                chain,\n                \"0x\" + protocol.toString(16).padStart(40, \"0\"),\n                2,\n                capacity,\n                s.publicInputs.map((x) => word(field(x))),\n            ]\n        )\n    );\n}\nconst CERT_LAYOUT = [\n    [\"certificateVersion\", 1],\n    [\"providerId\", 32],\n    [\"signingKeyId\", 32],\n    [\"chainId\", 8],\n    [\"protocolAddress\", 20],\n    [\"chainGeneration\", 8],\n    [\"rootSequence\", 8],\n    [\"treeId\", 8],\n    [\"leafCount\", 8],\n    [\"root\", 32],\n    [\"confirmedBlockNumber\", 8],\n    [\"confirmedBlockHash\", 32],\n    [\"decisionLogHash\", 32],\n    [\"previousCheckpointHash\", 32],\n    [\"issuedAt\", 8],\n] as const;\nexport type RootCertificate = Record<(typeof CERT_LAYOUT)[number][0], Integer> & {\n    signature: string;\n};\nexport function rootCertificatePayload(c: Omit<RootCertificate, \"signature\">): Uint8Array {\n    if (\n        uint(c.certificateVersion, 8) !== 1n ||\n        uint(c.treeId, 64) < 1n ||\n        uint(c.leafCount, 64) > 2n ** 32n\n    )\n        throw new Error(\"Invalid certificate version or tree\");\n    field(c.root);\n    return getBytes(\n        concat(\n            CERT_LAYOUT.map(\n                ([k, w]) =>\n                    \"0x\" +\n                    uint(c[k], w * 8)\n                        .toString(16)\n                        .padStart(w * 2, \"0\")\n            )\n        )\n    );\n}\nexport const checkpointHash = (c: Omit<RootCertificate, \"signature\">): string =>\n    hexlify(sha256(rootCertificatePayload(c))).slice(2);\nexport const rootCertificateMessage = (c: Omit<RootCertificate, \"signature\">): Uint8Array =>\n    sha256(getBytes(concat([utf8(\"Invisi.Provenance.Root.v1\"), rootCertificatePayload(c)])));\nexport function verifyRootCertificate(c: RootCertificate, key: Uint8Array): boolean {\n    if (!/^0x[0-9a-fA-F]{128}$/.test(c.signature) || key.length !== 32) return false;\n    try {\n        return ed25519.verify(getBytes(c.signature), rootCertificateMessage(c), key, {\n            zip215: false,\n        });\n    } catch {\n        return false;\n    }\n}\nexport interface ProofBundle {\n    format: \"invisi-provenance-proof-v1\";\n    circuitId: string;\n    manifestSha256: string;\n    target: \"evm\";\n    publicInputs: string[];\n    proof: string;\n    rootCertificates: RootCertificate[];\n}\nexport interface ProofSidecar {\n    operationIndex: string;\n    proofBundle: ProofBundle;\n}\nexport interface TrustedManifest {\n    noirVersion: string;\n    bbVersion: string;\n    depth: number;\n    family: \"provenance\";\n    target: \"evm\";\n    publicInputs: readonly string[];\n    circuits: readonly {\n        capacity: number;\n        name?: string;\n        artifactSha256: string;\n        vkSha256: string;\n    }[];\n}\nexport interface ManifestIdentity {\n    manifest: TrustedManifest;\n    sha256: string;\n}\nexport interface TrustContext extends Scope {\n    chainGeneration: Integer;\n    providerId: Integer;\n    signingKeys: Readonly<Record<string, Uint8Array>>;\n    manifestSha256: string;\n    signingKeyValidity?: Readonly<Record<string, { activatedAt: string; retiredAt?: string }>>;\n}\nexport function assertCertificateTrust(c: RootCertificate, trust: TrustContext): void {\n    if (Object.keys(c).some((k) => k !== \"signature\" && !CERT_LAYOUT.some(([name]) => name === k)))\n        throw Error(\"Unknown root certificate field\");\n    for (const k of [\"chainId\", \"protocolAddress\", \"chainGeneration\", \"providerId\"] as const)\n        if (BigInt(c[k]) !== BigInt(trust[k])) throw new Error(\"Certificate deployment mismatch\");\n    const key = trust.signingKeys[word(c.signingKeyId)];\n    const validity = trust.signingKeyValidity?.[word(c.signingKeyId)],\n        issuedAt = uint(c.issuedAt, 64);\n    if (\n        validity &&\n        (issuedAt < BigInt(validity.activatedAt) ||\n            (validity.retiredAt !== undefined && issuedAt >= BigInt(validity.retiredAt)))\n    )\n        throw new Error(\"Certificate outside signing key validity\");\n    if (!key || !verifyRootCertificate(c, key)) throw new Error(\"Untrusted certificate signature\");\n}\nexport type PublicResult = Record<string, unknown> & { scope: Scope };\nexport function certificateToWire(c: RootCertificate): RootCertificate {\n    if (Object.keys(c).some((k) => k !== \"signature\" && !CERT_LAYOUT.some(([name]) => name === k)))\n        throw Error(\"Unknown root certificate field\");\n    rootCertificatePayload(c);\n    const out = {} as RootCertificate;\n    for (const [key, width] of CERT_LAYOUT) {\n        const n = uint(c[key], width * 8);\n        out[key] =\n            width === 32 || key === \"protocolAddress\"\n                ? \"0x\" + n.toString(16).padStart(width * 2, \"0\")\n                : n.toString();\n    }\n    if (!/^0x[0-9a-fA-F]{128}$/.test(c.signature))\n        throw new Error(\"Certificate signature encoding\");\n    out.signature = c.signature.toLowerCase();\n    return out;\n}\n\nexport async function validateProofBundle(b: ProofBundle, t: TrustContext): Promise<void> {\n    const keys = [\n        \"format\",\n        \"circuitId\",\n        \"manifestSha256\",\n        \"target\",\n        \"publicInputs\",\n        \"proof\",\n        \"rootCertificates\",\n    ];\n    if (\n        Object.keys(b).some((k) => !keys.includes(k)) ||\n        b.format !== \"invisi-provenance-proof-v1\" ||\n        b.target !== \"evm\" ||\n        b.manifestSha256 !== t.manifestSha256 ||\n        !/^0x(?:[0-9a-fA-F]{2})+$/.test(b.proof) ||\n        b.proof.length > 131074\n    )\n        throw new Error(\"Unsupported provenance proof bundle\");\n    const match = /^provenance_k([1-9][0-9]*)$/.exec(b.circuitId),\n        capacity = Number(match?.[1]);\n    if (!CAPACITIES.includes(capacity) || b.publicInputs.length !== 11)\n        throw new Error(\"Unsupported provenance circuit or ABI\");\n    const p = b.publicInputs.map((v) => {\n        if (!/^0x[0-9a-fA-F]{64}$/.test(v))\n            throw new Error(\"Public inputs must be canonical words\");\n        return field(v);\n    });\n    uint(p[7]!, 128);\n    uint(p[8]!, 128);\n    if (\n        p[0] !== BigInt(t.chainId) ||\n        p[1] !== BigInt(t.protocolAddress) ||\n        p[3] !== BigInt(t.chainGeneration) ||\n        p[4] !== BigInt(b.rootCertificates.length) ||\n        p[6]! < 1n ||\n        p[6]! > BigInt(capacity) ||\n        p[4]! < 1n ||\n        p[4]! > p[6]!\n    )\n        throw new Error(\"Proof bundle scope or shape mismatch\");\n    const sources = b.rootCertificates.map((c) => {\n        if (\n            Object.keys(c).some(\n                (k) => k !== \"signature\" && !CERT_LAYOUT.some(([name]) => name === k)\n            )\n        )\n            throw new Error(\"Unknown root certificate field\");\n        assertCertificateTrust(c, t);\n        return { treeId: c.treeId, root: c.root, leafCount: c.leafCount };\n    });\n    const sd = await sourcesDigest(t.chainGeneration, sources);\n    if (sd !== p[5]) throw new Error(\"Proof sources digest mismatch\");\n    const binding = await bindingDigest({\n        scope: await scopeHash(t),\n        tokenAddress: p[2]!,\n        chainGeneration: t.chainGeneration,\n        sourceCount: p[4]!,\n        sourcesDigest: sd,\n        inputCount: p[6]!,\n        operationDigest: (p[7]! << 128n) | p[8]!,\n        inputDigest: p[9]!,\n    });\n    if (binding !== p[10]) throw new Error(\"Proof binding mismatch\");\n}\n\nexport function proofSidecarToWire(sidecar: ProofSidecar): ProofSidecar {\n    if (Object.keys(sidecar).some((k) => ![\"operationIndex\", \"proofBundle\"].includes(k)))\n        throw Error(\"Unknown proof sidecar field\");\n    if (\n        Object.keys(sidecar.proofBundle).some(\n            (k) =>\n                ![\n                    \"format\",\n                    \"circuitId\",\n                    \"manifestSha256\",\n                    \"target\",\n                    \"publicInputs\",\n                    \"proof\",\n                    \"rootCertificates\",\n                ].includes(k)\n        )\n    )\n        throw Error(\"Unknown proof bundle field\");\n    const b = sidecar.proofBundle;\n    if (\n        b.format !== \"invisi-provenance-proof-v1\" ||\n        b.target !== \"evm\" ||\n        !/^provenance_k[1-9][0-9]*$/.test(b.circuitId) ||\n        !/^([0-9a-f]{64})$/.test(b.manifestSha256) ||\n        b.publicInputs.length !== 11 ||\n        !/^0x(?:[0-9a-fA-F]{2})+$/.test(b.proof) ||\n        b.proof.length > 131074\n    )\n        throw new Error(\"Invalid public proof sidecar\");\n    return {\n        operationIndex: uint(sidecar.operationIndex, 32).toString(),\n        proofBundle: {\n            format: b.format,\n            target: b.target,\n            circuitId: b.circuitId,\n            manifestSha256: b.manifestSha256,\n            publicInputs: b.publicInputs.map((v) => word(field(v))),\n            proof: b.proof,\n            rootCertificates: b.rootCertificates.map(certificateToWire),\n        },\n    };\n}\n\nexport * from \"./rotation\";\nexport * from \"./tracking\";\nexport * from \"./release\";\nexport * from \"./tree\";\nexport { provenanceIntentHash } from \"@invisi-labs/primitives\";\n","import { sha256 } from \"@noble/hashes/sha256\";\nimport { ed25519 } from \"@noble/curves/ed25519\";\nimport { getBytes, hexlify, concat } from \"ethers\";\nimport { uint, word } from \"./index\";\nimport type { TrustContext } from \"./index\";\nexport interface RotationRecord {\n    version: \"1\";\n    providerId: string;\n    oldKeyId: string;\n    newKeyId: string;\n    newPublicKey: string;\n    activatedAt: string;\n    previousRotationHash: string;\n    signature: string;\n}\nexport interface KeyValidity {\n    activatedAt: string;\n    retiredAt?: string;\n}\nexport interface TrustedKeyring {\n    providerId: string;\n    keys: Record<string, Uint8Array>;\n    validity: Record<string, KeyValidity>;\n    rotationHash: string;\n    lastActivatedAt: string;\n}\nconst bytes32 = (v: string): Uint8Array => {\n    if (!/^0x[0-9a-fA-F]{64}$/.test(v)) throw new Error(\"Rotation field must be32-byte hex\");\n    return getBytes(v);\n};\nconst time = (v: string): bigint => {\n    if (!/^(0|[1-9][0-9]*)$/.test(v)) throw new Error(\"Rotation time must be decimal\");\n    return uint(v, 64);\n};\nexport function rotationPayload(r: RotationRecord): Uint8Array {\n    if (r.version !== \"1\") throw new Error(\"Unsupported rotation version\");\n    const pub = bytes32(r.newPublicKey),\n        id = bytes32(r.newKeyId);\n    if (hexlify(sha256(pub)) !== hexlify(id)) throw new Error(\"Rotation key ID mismatch\");\n    return getBytes(\n        concat([\n            new Uint8Array([1]),\n            bytes32(r.providerId),\n            bytes32(r.oldKeyId),\n            id,\n            pub,\n            getBytes(\"0x\" + time(r.activatedAt).toString(16).padStart(16, \"0\")),\n            bytes32(r.previousRotationHash),\n        ])\n    );\n}\nexport const rotationMessage = (r: RotationRecord): Uint8Array =>\n    sha256(\n        getBytes(\n            concat([\n                new TextEncoder().encode(\"Invisi.Provenance.KeyRotation.v1\"),\n                rotationPayload(r),\n            ])\n        )\n    );\nexport const rotationHash = (r: RotationRecord): string => hexlify(sha256(rotationPayload(r)));\nexport function verifyRotationChain(\n    initial: {\n        providerId: string;\n        keys: Readonly<Record<string, Uint8Array>>;\n        previousRotationHash: string;\n        lastActivatedAt: string;\n        now: string;\n        validity?: Readonly<Record<string, KeyValidity>>;\n    },\n    records: readonly RotationRecord[]\n): TrustedKeyring {\n    const provider = hexlify(bytes32(initial.providerId)),\n        now = time(initial.now);\n    let previous = hexlify(bytes32(initial.previousRotationHash)),\n        last = time(initial.lastActivatedAt);\n    if (last > now) throw new Error(\"Rotation checkpoint is in the future\");\n    const keys: Record<string, Uint8Array> = {},\n        validity: Record<string, KeyValidity> = {};\n    for (const [id, key] of Object.entries(initial.keys)) {\n        const canonical = hexlify(bytes32(id));\n        if (key.length !== 32) throw new Error(\"Invalid trusted signing key\");\n        keys[canonical] = new Uint8Array(key);\n        validity[canonical] = { ...(initial.validity?.[canonical] ?? { activatedAt: \"0\" }) };\n    }\n    for (const r of records) {\n        rotationPayload(r);\n        const old = hexlify(bytes32(r.oldKeyId)),\n            next = hexlify(bytes32(r.newKeyId)),\n            at = time(r.activatedAt),\n            oldKey = keys[old],\n            interval = validity[old];\n        if (\n            hexlify(bytes32(r.providerId)) !== provider ||\n            hexlify(bytes32(r.previousRotationHash)) !== previous ||\n            at <= last ||\n            at > now ||\n            !oldKey ||\n            !interval ||\n            interval.retiredAt !== undefined ||\n            at < time(interval.activatedAt) ||\n            keys[next]\n        )\n            throw new Error(\"Untrusted or out-of-order key rotation\");\n        if (\n            !/^0x[0-9a-fA-F]{128}$/.test(r.signature) ||\n            !ed25519.verify(getBytes(r.signature), rotationMessage(r), oldKey, { zip215: false })\n        )\n            throw new Error(\"Invalid key rotation signature\");\n        validity[old] = { ...interval, retiredAt: r.activatedAt };\n        keys[next] = bytes32(r.newPublicKey);\n        validity[next] = { activatedAt: r.activatedAt };\n        previous = rotationHash(r);\n        last = at;\n    }\n    return {\n        providerId: provider,\n        keys,\n        validity,\n        rotationHash: previous,\n        lastActivatedAt: last.toString(),\n    };\n}\nexport function withRotationHistory(trust: TrustContext, keyring: TrustedKeyring): TrustContext {\n    if (word(trust.providerId) !== keyring.providerId)\n        throw new Error(\"Rotation provider mismatch\");\n    return { ...trust, signingKeys: keyring.keys, signingKeyValidity: keyring.validity };\n}\n","import { word, uint, type PublicResult } from \"./index\";\nexport type TrackingStatus =\n    | \"pending_confirmation\"\n    | \"pending_source\"\n    | \"recognized\"\n    | \"expired\"\n    | \"superseded\"\n    | \"stale_generation\";\nexport interface Tracking {\n    id: string;\n    status: TrackingStatus;\n    expiresAt: string;\n    operationDigest: string;\n    matched?: { txHash: string; blockHash: string; operationIndex: string };\n    reasonCode?: string;\n    checkpointSequence?: string;\n}\nexport type TrackingResult = PublicResult & { tracking: Tracking };\nexport class TrackingStaleGenerationError extends Error {\n    constructor() {\n        super(\"TRACKING_STALE_GENERATION\");\n    }\n}\nexport function validateTracking(value: unknown, expectedId?: string): Tracking {\n    if (!value || typeof value !== \"object\") throw Error(\"Missing tracking\");\n    const t = value as Tracking;\n    if (\n        Object.keys(t).some(\n            (k) =>\n                ![\n                    \"id\",\n                    \"status\",\n                    \"expiresAt\",\n                    \"operationDigest\",\n                    \"matched\",\n                    \"reasonCode\",\n                    \"checkpointSequence\",\n                ].includes(k)\n        ) ||\n        typeof t.id !== \"string\" ||\n        !/^([a-f0-9]{48})$/.test(t.id) ||\n        (expectedId !== undefined && t.id !== expectedId) ||\n        typeof t.operationDigest !== \"string\" ||\n        word(t.operationDigest) !== t.operationDigest ||\n        typeof t.expiresAt !== \"string\" ||\n        !/^(0|[1-9][0-9]*)$/.test(t.expiresAt)\n    )\n        throw Error(\"Invalid tracking identity\");\n    uint(t.expiresAt, 64);\n    if (\n        ![\n            \"pending_confirmation\",\n            \"pending_source\",\n            \"recognized\",\n            \"expired\",\n            \"superseded\",\n            \"stale_generation\",\n        ].includes(t.status)\n    )\n        throw Error(\"Unknown tracking status\");\n    if (t.status === \"stale_generation\") throw new TrackingStaleGenerationError();\n    if (BigInt(t.expiresAt) < 1n) throw Error(\"Invalid tracking expiry\");\n    if ([\"pending_source\", \"recognized\"].includes(t.status) && !t.matched)\n        throw Error(\"Tracking locator required\");\n    if (t.matched) {\n        const m = t.matched;\n        if (\n            Object.keys(m).some((k) => ![\"txHash\", \"blockHash\", \"operationIndex\"].includes(k)) ||\n            typeof m.txHash !== \"string\" ||\n            word(m.txHash) !== m.txHash ||\n            typeof m.blockHash !== \"string\" ||\n            word(m.blockHash) !== m.blockHash ||\n            typeof m.operationIndex !== \"string\" ||\n            !/^(0|[1-9][0-9]*)$/.test(m.operationIndex)\n        )\n            throw Error(\"Invalid tracking locator\");\n        uint(m.operationIndex, 32);\n    }\n    if (t.reasonCode !== undefined && typeof t.reasonCode !== \"string\")\n        throw Error(\"Invalid tracking reason\");\n    return t;\n}\n/** Single evaluation results are flat; aggregate members carry their own tracking records. */\nexport function preflightTracking(\n    result: PublicResult,\n    operationIndex: string,\n    operationDigest: string\n): Tracking {\n    const member = Array.isArray(result.operations)\n        ? result.operations.find(\n              (v: Record<string, unknown>) => String(v.operationIndex) === operationIndex\n          )\n        : result;\n    if (\n        !member ||\n        result.broadcastDecision !== \"allow\" ||\n        member.broadcastDecision !== \"allow\" ||\n        word(String(member.operationDigest)) !== word(operationDigest)\n    )\n        throw Error(\"Preflight candidate was not allowed\");\n    const tracking = validateTracking(member.tracking);\n    if (![\"pending_confirmation\", \"pending_source\", \"recognized\"].includes(tracking.status))\n        throw Error(\"Tracking no longer permits broadcast\");\n    if (tracking.operationDigest !== word(operationDigest))\n        throw Error(\"Tracking statement mismatch\");\n    return tracking;\n}\n","export const PROVENANCE_MANIFEST_SHA256 =\n    \"6107789c5c0d24c4130bff05da6d389336feb5ccb247c4030eae5198ab05d762\";\n","import { field, recognizedLeaf, scopeHash, type Integer, type Scope } from \"./index\";\nimport { poseidonHash } from \"@invisi-labs/primitives\";\nconst hash = async (v: Integer[]) => BigInt(await poseidonHash(v.map(field)));\nexport class RecognizedTree {\n    private readonly leaves: bigint[] = [];\n    get leafCount(): number {\n        return this.leaves.length;\n    }\n    append(value: Integer): number {\n        const leaf = field(value);\n        if (!leaf || this.leaves.length >= 2 ** 32) throw new Error(\"Invalid leaf or full tree\");\n        this.leaves.push(leaf);\n        return this.leaves.length - 1;\n    }\n    async appendCommitment(scope: Scope, commitment: Integer): Promise<number> {\n        return this.append(await recognizedLeaf(await scopeHash(scope), commitment));\n    }\n    async membershipForCommitment(\n        scope: Scope,\n        commitment: Integer\n    ): Promise<{ leafIndex: number; path: bigint[]; root: bigint } | undefined> {\n        const leaf = await recognizedLeaf(await scopeHash(scope), commitment),\n            index = this.leaves.indexOf(leaf);\n        if (index < 0) return undefined;\n        return { leafIndex: index, ...(await this.path(index)) };\n    }\n    async root(): Promise<bigint> {\n        if (this.leaves.length) return (await this.path(0)).root;\n        let zero = 0n;\n        for (let i = 0; i < 32; i++) zero = await hash([zero, zero]);\n        return zero;\n    }\n    async path(index: number): Promise<{ path: bigint[]; root: bigint }> {\n        if (!Number.isInteger(index) || index < 0 || index >= this.leaves.length)\n            throw new Error(\"Leaf index\");\n        let zero = 0n,\n            nodes = new Map(this.leaves.map((v, i) => [i, v])),\n            cursor = index;\n        const path: bigint[] = [];\n        for (let l = 0; l < 32; l++) {\n            path.push(nodes.get(cursor % 2 === 0 ? cursor + 1 : cursor - 1) ?? zero);\n            const next = new Map<number, bigint>();\n            for (const i of nodes.keys()) {\n                const p = Math.floor(i / 2);\n                if (!next.has(p))\n                    next.set(\n                        p,\n                        await hash([nodes.get(p * 2) ?? zero, nodes.get(p * 2 + 1) ?? zero])\n                    );\n            }\n            zero = await hash([zero, zero]);\n            nodes = next;\n            cursor = Math.floor(cursor / 2);\n        }\n        return { path, root: nodes.get(0) ?? zero };\n    }\n}\n"],"mappings":";AAAA,SAAS,UAAAA,eAAc;AACvB,SAAS,WAAAC,gBAAe;AACxB,SAAS,UAAU,WAAW,YAAAC,WAAU,WAAAC,UAAS,UAAAC,eAAc;AAC/D,SAAS,gBAAAC,qBAAoB;;;ACH7B,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,UAAU,SAAS,cAAc;AAwB1C,IAAM,UAAU,CAAC,MAA0B;AACvC,MAAI,CAAC,sBAAsB,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACvF,SAAO,SAAS,CAAC;AACrB;AACA,IAAM,OAAO,CAAC,MAAsB;AAChC,MAAI,CAAC,oBAAoB,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,+BAA+B;AACjF,SAAO,KAAK,GAAG,EAAE;AACrB;AACO,SAAS,gBAAgB,GAA+B;AAC3D,MAAI,EAAE,YAAY,IAAK,OAAM,IAAI,MAAM,8BAA8B;AACrE,QAAM,MAAM,QAAQ,EAAE,YAAY,GAC9B,KAAK,QAAQ,EAAE,QAAQ;AAC3B,MAAI,QAAQ,OAAO,GAAG,CAAC,MAAM,QAAQ,EAAE,EAAG,OAAM,IAAI,MAAM,0BAA0B;AACpF,SAAO;AAAA,IACH,OAAO;AAAA,MACH,IAAI,WAAW,CAAC,CAAC,CAAC;AAAA,MAClB,QAAQ,EAAE,UAAU;AAAA,MACpB,QAAQ,EAAE,QAAQ;AAAA,MAClB;AAAA,MACA;AAAA,MACA,SAAS,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG,CAAC;AAAA,MAClE,QAAQ,EAAE,oBAAoB;AAAA,IAClC,CAAC;AAAA,EACL;AACJ;AACO,IAAM,kBAAkB,CAAC,MAC5B;AAAA,EACI;AAAA,IACI,OAAO;AAAA,MACH,IAAI,YAAY,EAAE,OAAO,kCAAkC;AAAA,MAC3D,gBAAgB,CAAC;AAAA,IACrB,CAAC;AAAA,EACL;AACJ;AACG,IAAM,eAAe,CAAC,MAA8B,QAAQ,OAAO,gBAAgB,CAAC,CAAC,CAAC;AACtF,SAAS,oBACZ,SAQA,SACc;AACd,QAAM,WAAW,QAAQ,QAAQ,QAAQ,UAAU,CAAC,GAChD,MAAM,KAAK,QAAQ,GAAG;AAC1B,MAAI,WAAW,QAAQ,QAAQ,QAAQ,oBAAoB,CAAC,GACxD,OAAO,KAAK,QAAQ,eAAe;AACvC,MAAI,OAAO,IAAK,OAAM,IAAI,MAAM,sCAAsC;AACtE,QAAM,OAAmC,CAAC,GACtC,WAAwC,CAAC;AAC7C,aAAW,CAAC,IAAI,GAAG,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AAClD,UAAM,YAAY,QAAQ,QAAQ,EAAE,CAAC;AACrC,QAAI,IAAI,WAAW,GAAI,OAAM,IAAI,MAAM,6BAA6B;AACpE,SAAK,SAAS,IAAI,IAAI,WAAW,GAAG;AACpC,aAAS,SAAS,IAAI,EAAE,GAAI,QAAQ,WAAW,SAAS,KAAK,EAAE,aAAa,IAAI,EAAG;AAAA,EACvF;AACA,aAAW,KAAK,SAAS;AACrB,oBAAgB,CAAC;AACjB,UAAM,MAAM,QAAQ,QAAQ,EAAE,QAAQ,CAAC,GACnC,OAAO,QAAQ,QAAQ,EAAE,QAAQ,CAAC,GAClC,KAAK,KAAK,EAAE,WAAW,GACvB,SAAS,KAAK,GAAG,GACjB,WAAW,SAAS,GAAG;AAC3B,QACI,QAAQ,QAAQ,EAAE,UAAU,CAAC,MAAM,YACnC,QAAQ,QAAQ,EAAE,oBAAoB,CAAC,MAAM,YAC7C,MAAM,QACN,KAAK,OACL,CAAC,UACD,CAAC,YACD,SAAS,cAAc,UACvB,KAAK,KAAK,SAAS,WAAW,KAC9B,KAAK,IAAI;AAET,YAAM,IAAI,MAAM,wCAAwC;AAC5D,QACI,CAAC,uBAAuB,KAAK,EAAE,SAAS,KACxC,CAAC,QAAQ,OAAO,SAAS,EAAE,SAAS,GAAG,gBAAgB,CAAC,GAAG,QAAQ,EAAE,QAAQ,MAAM,CAAC;AAEpF,YAAM,IAAI,MAAM,gCAAgC;AACpD,aAAS,GAAG,IAAI,EAAE,GAAG,UAAU,WAAW,EAAE,YAAY;AACxD,SAAK,IAAI,IAAI,QAAQ,EAAE,YAAY;AACnC,aAAS,IAAI,IAAI,EAAE,aAAa,EAAE,YAAY;AAC9C,eAAW,aAAa,CAAC;AACzB,WAAO;AAAA,EACX;AACA,SAAO;AAAA,IACH,YAAY;AAAA,IACZ;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,iBAAiB,KAAK,SAAS;AAAA,EACnC;AACJ;AACO,SAAS,oBAAoB,OAAqB,SAAuC;AAC5F,MAAI,KAAK,MAAM,UAAU,MAAM,QAAQ;AACnC,UAAM,IAAI,MAAM,4BAA4B;AAChD,SAAO,EAAE,GAAG,OAAO,aAAa,QAAQ,MAAM,oBAAoB,QAAQ,SAAS;AACvF;;;AC7GO,IAAM,+BAAN,cAA2C,MAAM;AAAA,EACpD,cAAc;AACV,UAAM,2BAA2B;AAAA,EACrC;AACJ;AACO,SAAS,iBAAiB,OAAgB,YAA+B;AAC5E,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,OAAM,MAAM,kBAAkB;AACvE,QAAM,IAAI;AACV,MACI,OAAO,KAAK,CAAC,EAAE;AAAA,IACX,CAAC,MACG,CAAC;AAAA,MACG;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ,EAAE,SAAS,CAAC;AAAA,EACpB,KACA,OAAO,EAAE,OAAO,YAChB,CAAC,mBAAmB,KAAK,EAAE,EAAE,KAC5B,eAAe,UAAa,EAAE,OAAO,cACtC,OAAO,EAAE,oBAAoB,YAC7B,KAAK,EAAE,eAAe,MAAM,EAAE,mBAC9B,OAAO,EAAE,cAAc,YACvB,CAAC,oBAAoB,KAAK,EAAE,SAAS;AAErC,UAAM,MAAM,2BAA2B;AAC3C,OAAK,EAAE,WAAW,EAAE;AACpB,MACI,CAAC;AAAA,IACG;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,EAAE,SAAS,EAAE,MAAM;AAEnB,UAAM,MAAM,yBAAyB;AACzC,MAAI,EAAE,WAAW,mBAAoB,OAAM,IAAI,6BAA6B;AAC5E,MAAI,OAAO,EAAE,SAAS,IAAI,GAAI,OAAM,MAAM,yBAAyB;AACnE,MAAI,CAAC,kBAAkB,YAAY,EAAE,SAAS,EAAE,MAAM,KAAK,CAAC,EAAE;AAC1D,UAAM,MAAM,2BAA2B;AAC3C,MAAI,EAAE,SAAS;AACX,UAAM,IAAI,EAAE;AACZ,QACI,OAAO,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,UAAU,aAAa,gBAAgB,EAAE,SAAS,CAAC,CAAC,KACjF,OAAO,EAAE,WAAW,YACpB,KAAK,EAAE,MAAM,MAAM,EAAE,UACrB,OAAO,EAAE,cAAc,YACvB,KAAK,EAAE,SAAS,MAAM,EAAE,aACxB,OAAO,EAAE,mBAAmB,YAC5B,CAAC,oBAAoB,KAAK,EAAE,cAAc;AAE1C,YAAM,MAAM,0BAA0B;AAC1C,SAAK,EAAE,gBAAgB,EAAE;AAAA,EAC7B;AACA,MAAI,EAAE,eAAe,UAAa,OAAO,EAAE,eAAe;AACtD,UAAM,MAAM,yBAAyB;AACzC,SAAO;AACX;AAEO,SAAS,kBACZ,QACA,gBACAC,kBACQ;AACR,QAAM,SAAS,MAAM,QAAQ,OAAO,UAAU,IACxC,OAAO,WAAW;AAAA,IACd,CAAC,MAA+B,OAAO,EAAE,cAAc,MAAM;AAAA,EACjE,IACA;AACN,MACI,CAAC,UACD,OAAO,sBAAsB,WAC7B,OAAO,sBAAsB,WAC7B,KAAK,OAAO,OAAO,eAAe,CAAC,MAAM,KAAKA,gBAAe;AAE7D,UAAM,MAAM,qCAAqC;AACrD,QAAM,WAAW,iBAAiB,OAAO,QAAQ;AACjD,MAAI,CAAC,CAAC,wBAAwB,kBAAkB,YAAY,EAAE,SAAS,SAAS,MAAM;AAClF,UAAM,MAAM,sCAAsC;AACtD,MAAI,SAAS,oBAAoB,KAAKA,gBAAe;AACjD,UAAM,MAAM,6BAA6B;AAC7C,SAAO;AACX;;;AC1GO,IAAM,6BACT;;;ACAJ,SAAS,oBAAoB;AAC7B,IAAM,OAAO,OAAO,MAAiB,OAAO,MAAM,aAAa,EAAE,IAAI,KAAK,CAAC,CAAC;AACrE,IAAM,iBAAN,MAAqB;AAAA,EACP,SAAmB,CAAC;AAAA,EACrC,IAAI,YAAoB;AACpB,WAAO,KAAK,OAAO;AAAA,EACvB;AAAA,EACA,OAAO,OAAwB;AAC3B,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,CAAC,QAAQ,KAAK,OAAO,UAAU,KAAK,GAAI,OAAM,IAAI,MAAM,2BAA2B;AACvF,SAAK,OAAO,KAAK,IAAI;AACrB,WAAO,KAAK,OAAO,SAAS;AAAA,EAChC;AAAA,EACA,MAAM,iBAAiB,OAAc,YAAsC;AACvE,WAAO,KAAK,OAAO,MAAM,eAAe,MAAM,UAAU,KAAK,GAAG,UAAU,CAAC;AAAA,EAC/E;AAAA,EACA,MAAM,wBACF,OACA,YACwE;AACxE,UAAM,OAAO,MAAM,eAAe,MAAM,UAAU,KAAK,GAAG,UAAU,GAChE,QAAQ,KAAK,OAAO,QAAQ,IAAI;AACpC,QAAI,QAAQ,EAAG,QAAO;AACtB,WAAO,EAAE,WAAW,OAAO,GAAI,MAAM,KAAK,KAAK,KAAK,EAAG;AAAA,EAC3D;AAAA,EACA,MAAM,OAAwB;AAC1B,QAAI,KAAK,OAAO,OAAQ,SAAQ,MAAM,KAAK,KAAK,CAAC,GAAG;AACpD,QAAI,OAAO;AACX,aAAS,IAAI,GAAG,IAAI,IAAI,IAAK,QAAO,MAAM,KAAK,CAAC,MAAM,IAAI,CAAC;AAC3D,WAAO;AAAA,EACX;AAAA,EACA,MAAM,KAAK,OAA0D;AACjE,QAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,SAAS,KAAK,OAAO;AAC9D,YAAM,IAAI,MAAM,YAAY;AAChC,QAAI,OAAO,IACP,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GACjD,SAAS;AACb,UAAM,OAAiB,CAAC;AACxB,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AACzB,WAAK,KAAK,MAAM,IAAI,SAAS,MAAM,IAAI,SAAS,IAAI,SAAS,CAAC,KAAK,IAAI;AACvE,YAAM,OAAO,oBAAI,IAAoB;AACrC,iBAAW,KAAK,MAAM,KAAK,GAAG;AAC1B,cAAM,IAAI,KAAK,MAAM,IAAI,CAAC;AAC1B,YAAI,CAAC,KAAK,IAAI,CAAC;AACX,eAAK;AAAA,YACD;AAAA,YACA,MAAM,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,MAAM,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC;AAAA,UACvE;AAAA,MACR;AACA,aAAO,MAAM,KAAK,CAAC,MAAM,IAAI,CAAC;AAC9B,cAAQ;AACR,eAAS,KAAK,MAAM,SAAS,CAAC;AAAA,IAClC;AACA,WAAO,EAAE,MAAM,MAAM,MAAM,IAAI,CAAC,KAAK,KAAK;AAAA,EAC9C;AACJ;;;AJ4WA,SAAS,4BAA4B;AAha9B,IAAM,8BAA8B;AAGpC,IAAM,gBACT;AACG,IAAM,aAAgC,OAAO,OAAO,CAAC,IAAI,IAAI,IAAI,IAAI,KAAK,KAAK,GAAG,CAAC;AACnF,IAAM,gBAAgB,OAAO,OAAO;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAU;AACV,IAAM,OAAO,CAAC,MAAc,IAAI,YAAY,EAAE,OAAO,CAAC;AAC/C,SAAS,KAAK,OAAgB,MAAsB;AACvD,MAAI,OAAO,UAAU,YAAY,CAAC,OAAO,cAAc,KAAK;AACxD,UAAM,IAAI,MAAM,gBAAgB;AACpC,MAAI,OAAO,UAAU,YAAY,CAAC,mCAAmC,KAAK,KAAK;AAC3E,UAAM,IAAI,MAAM,0BAA0B;AAC9C,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,IAAI,MAAM,KAAK,MAAM,OAAO,IAAI,EAAG,OAAM,IAAI,MAAM,oBAAoB,IAAI,EAAE;AACjF,SAAO;AACX;AACO,SAAS,MAAM,OAAwB;AAC1C,QAAM,IAAI,KAAK,OAAO,GAAG;AACzB,MAAI,KAAK,cAAe,OAAM,IAAI,MAAM,oBAAoB;AAC5D,SAAO;AACX;AACO,IAAM,OAAO,CAAC,UACjB,OAAO,KAAK,OAAO,GAAG,EAAE,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AAClD,IAAM,UAAU,OAAO;AAAA,EAC1B,OAAO;AAAA,IACH,OAAO,QAAQ;AAAA,MACX,OAAO;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,MAAM;AAAA,IACV,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM;AAAA,MACf;AAAA,MACA,OAAOC,SAAQC,QAAO,KAAK,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;AAAA,IACjE,CAAC;AAAA,EACL;AACJ;AACA,IAAMC,QAAO,OAAO,WAChB,OAAO,MAAMC,cAAa,OAAO,IAAI,KAAK,CAAC,CAAC;AACzC,IAAM,QAAQ,CAAC,UAAqC;AACvD,QAAM,IAAI,KAAK,OAAO,GAAG;AACzB,SAAO,CAAC,KAAK,MAAM,KAAM,MAAM,QAAQ,EAAG;AAC9C;AAKA,eAAsB,UAAU,GAA2B;AACvD,QAAM,WAAW,KAAK,EAAE,iBAAiB,GAAG;AAC5C,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,eAAe;AAC9C,SAAOD,MAAK,CAAC,QAAQ,OAAO,KAAK,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;AAC9D;AACO,IAAM,iBAAiB,CAAC,OAAgB,eAAyC;AACpF,MAAI,MAAM,UAAU,MAAM,GAAI,OAAM,IAAI,MAAM,iBAAiB;AAC/D,SAAOA,MAAK,CAAC,QAAQ,MAAM,OAAO,UAAU,CAAC;AACjD;AAMA,eAAsB,YAClB,GACkD;AAClD,QAAM,QAAQ,KAAK,EAAE,OAAO,GAAG,GAC3B,SAAS,KAAK,EAAE,QAAQ,GAAG,GAC3B,QAAQ,KAAK,EAAE,SAAS,EAAE,GAC1B,WAAW,KAAK,EAAE,iBAAiB,GAAG,GACtC,QAAQ,KAAK,EAAE,cAAc,GAAG,GAChC,QAAQ,MAAM,EAAE,KAAK;AACzB,MAAI,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC;AACnC,UAAM,IAAI,MAAM,4CAA4C;AAChE,QAAM,WAAW,MAAMA,MAAK,CAAC,IAAI,OAAO,KAAK,CAAC;AAC9C,QAAM,aAAa,MAAMA,MAAK,CAAC,IAAI,OAAO,UAAU,UAAU,OAAO,MAAM,CAAC;AAC5E,SAAO,EAAE,YAAY,WAAW,MAAMA,MAAK,CAAC,IAAI,OAAO,UAAU,OAAO,UAAU,CAAC,EAAE;AACzF;AACA,eAAsB,YAAY,YAAiD;AAC/E,MAAI,IAAI,MAAMA,MAAK,CAAC,QAAQ,QAAQ,WAAW,MAAM,CAAC;AACtD,aAAW,KAAK,WAAY,KAAI,MAAMA,MAAK,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC;AAC/D,SAAO;AACX;AAMA,eAAsB,cAClB,YACA,SACe;AACf,MAAI,IAAI,MAAMA,MAAK,CAAC,QAAQ,SAAS,KAAK,YAAY,EAAE,GAAG,QAAQ,MAAM,CAAC,GACtE,QAAQ;AACZ,aAAW,KAAK,SAAS;AACrB,UAAM,KAAK,KAAK,EAAE,QAAQ,EAAE,GACxB,QAAQ,KAAK,EAAE,WAAW,EAAE;AAChC,QAAI,MAAM,SAAS,QAAQ,MAAM,QAAQ,MAAM;AAC3C,YAAM,IAAI,MAAM,+BAA+B;AACnD,YAAQ;AACR,QAAI,MAAMA,MAAK,CAAC,QAAQ,aAAa,GAAG,IAAI,EAAE,MAAM,KAAK,CAAC;AAAA,EAC9D;AACA,SAAO;AACX;AACA,eAAsB,cAAc,GAShB;AAChB,SAAOA,MAAK;AAAA,IACR,QAAQ;AAAA,IACR,EAAE;AAAA,KACD,MAAM;AACH,YAAM,QAAQ,KAAK,EAAE,cAAc,GAAG;AACtC,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,YAAY;AACxC,aAAO;AAAA,IACX,GAAG;AAAA,IACH,KAAK,EAAE,iBAAiB,EAAE;AAAA,IAC1B,EAAE;AAAA,IACF,EAAE;AAAA,IACF,EAAE;AAAA,IACF,GAAG,MAAM,EAAE,eAAe;AAAA,IAC1B,EAAE;AAAA,EACN,CAAC;AACL;AACO,SAAS,gBAAgB,GAMrB;AACP,QAAM,QAAQ,KAAK,EAAE,SAAS,EAAE,GAC5B,WAAW,KAAK,EAAE,iBAAiB,GAAG,GACtC,WAAW,OAAO,KAAK,EAAE,qBAAqB,EAAE,CAAC;AACrD,MACI,CAAC,YACD,CAAC,OAAO,UAAU,QAAQ,KAC1B,WAAW,KACX,WAAW,OACX,EAAE,aAAa,WAAW,KAAK,IAAI,aAClC,EAAE,iBAAiB,OAAO;AAE3B,UAAM,IAAI,MAAM,0CAA0C;AAC9D,SAAO;AAAA,IACH,SAAS,gBAAgB,EAAE;AAAA,MACvB,CAAC,UAAU,UAAU,WAAW,SAAS,UAAU,WAAW;AAAA,MAC9D;AAAA,QACI;AAAA,QACA;AAAA,QACA,OAAO,SAAS,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AAAA,QAC7C;AAAA,QACA;AAAA,QACA,EAAE,aAAa,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;AAAA,MAC5C;AAAA,IACJ;AAAA,EACJ;AACJ;AACA,IAAM,cAAc;AAAA,EAChB,CAAC,sBAAsB,CAAC;AAAA,EACxB,CAAC,cAAc,EAAE;AAAA,EACjB,CAAC,gBAAgB,EAAE;AAAA,EACnB,CAAC,WAAW,CAAC;AAAA,EACb,CAAC,mBAAmB,EAAE;AAAA,EACtB,CAAC,mBAAmB,CAAC;AAAA,EACrB,CAAC,gBAAgB,CAAC;AAAA,EAClB,CAAC,UAAU,CAAC;AAAA,EACZ,CAAC,aAAa,CAAC;AAAA,EACf,CAAC,QAAQ,EAAE;AAAA,EACX,CAAC,wBAAwB,CAAC;AAAA,EAC1B,CAAC,sBAAsB,EAAE;AAAA,EACzB,CAAC,mBAAmB,EAAE;AAAA,EACtB,CAAC,0BAA0B,EAAE;AAAA,EAC7B,CAAC,YAAY,CAAC;AAClB;AAIO,SAAS,uBAAuB,GAAmD;AACtF,MACI,KAAK,EAAE,oBAAoB,CAAC,MAAM,MAClC,KAAK,EAAE,QAAQ,EAAE,IAAI,MACrB,KAAK,EAAE,WAAW,EAAE,IAAI,MAAM;AAE9B,UAAM,IAAI,MAAM,qCAAqC;AACzD,QAAM,EAAE,IAAI;AACZ,SAAOE;AAAA,IACHC;AAAA,MACI,YAAY;AAAA,QACR,CAAC,CAAC,GAAG,CAAC,MACF,OACA,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EACX,SAAS,EAAE,EACX,SAAS,IAAI,GAAG,GAAG;AAAA,MAChC;AAAA,IACJ;AAAA,EACJ;AACJ;AACO,IAAM,iBAAiB,CAAC,MAC3BL,SAAQC,QAAO,uBAAuB,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;AAC/C,IAAM,yBAAyB,CAAC,MACnCA,QAAOG,UAASC,QAAO,CAAC,KAAK,2BAA2B,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;AACpF,SAAS,sBAAsB,GAAoB,KAA0B;AAChF,MAAI,CAAC,uBAAuB,KAAK,EAAE,SAAS,KAAK,IAAI,WAAW,GAAI,QAAO;AAC3E,MAAI;AACA,WAAOC,SAAQ,OAAOF,UAAS,EAAE,SAAS,GAAG,uBAAuB,CAAC,GAAG,KAAK;AAAA,MACzE,QAAQ;AAAA,IACZ,CAAC;AAAA,EACL,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;AAuCO,SAAS,uBAAuB,GAAoB,OAA2B;AAClF,MAAI,OAAO,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,MAAM,eAAe,CAAC,YAAY,KAAK,CAAC,CAAC,IAAI,MAAM,SAAS,CAAC,CAAC;AACzF,UAAM,MAAM,gCAAgC;AAChD,aAAW,KAAK,CAAC,WAAW,mBAAmB,mBAAmB,YAAY;AAC1E,QAAI,OAAO,EAAE,CAAC,CAAC,MAAM,OAAO,MAAM,CAAC,CAAC,EAAG,OAAM,IAAI,MAAM,iCAAiC;AAC5F,QAAM,MAAM,MAAM,YAAY,KAAK,EAAE,YAAY,CAAC;AAClD,QAAM,WAAW,MAAM,qBAAqB,KAAK,EAAE,YAAY,CAAC,GAC5D,WAAW,KAAK,EAAE,UAAU,EAAE;AAClC,MACI,aACC,WAAW,OAAO,SAAS,WAAW,KAClC,SAAS,cAAc,UAAa,YAAY,OAAO,SAAS,SAAS;AAE9E,UAAM,IAAI,MAAM,0CAA0C;AAC9D,MAAI,CAAC,OAAO,CAAC,sBAAsB,GAAG,GAAG,EAAG,OAAM,IAAI,MAAM,iCAAiC;AACjG;AAEO,SAAS,kBAAkB,GAAqC;AACnE,MAAI,OAAO,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,MAAM,eAAe,CAAC,YAAY,KAAK,CAAC,CAAC,IAAI,MAAM,SAAS,CAAC,CAAC;AACzF,UAAM,MAAM,gCAAgC;AAChD,yBAAuB,CAAC;AACxB,QAAM,MAAM,CAAC;AACb,aAAW,CAAC,KAAK,KAAK,KAAK,aAAa;AACpC,UAAM,IAAI,KAAK,EAAE,GAAG,GAAG,QAAQ,CAAC;AAChC,QAAI,GAAG,IACH,UAAU,MAAM,QAAQ,oBAClB,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,QAAQ,GAAG,GAAG,IAC7C,EAAE,SAAS;AAAA,EACzB;AACA,MAAI,CAAC,uBAAuB,KAAK,EAAE,SAAS;AACxC,UAAM,IAAI,MAAM,gCAAgC;AACpD,MAAI,YAAY,EAAE,UAAU,YAAY;AACxC,SAAO;AACX;AAEA,eAAsB,oBAAoB,GAAgB,GAAgC;AACtF,QAAM,OAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACA,MACI,OAAO,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,KAC5C,EAAE,WAAW,gCACb,EAAE,WAAW,SACb,EAAE,mBAAmB,EAAE,kBACvB,CAAC,0BAA0B,KAAK,EAAE,KAAK,KACvC,EAAE,MAAM,SAAS;AAEjB,UAAM,IAAI,MAAM,qCAAqC;AACzD,QAAM,QAAQ,8BAA8B,KAAK,EAAE,SAAS,GACxD,WAAW,OAAO,QAAQ,CAAC,CAAC;AAChC,MAAI,CAAC,WAAW,SAAS,QAAQ,KAAK,EAAE,aAAa,WAAW;AAC5D,UAAM,IAAI,MAAM,uCAAuC;AAC3D,QAAM,IAAI,EAAE,aAAa,IAAI,CAAC,MAAM;AAChC,QAAI,CAAC,sBAAsB,KAAK,CAAC;AAC7B,YAAM,IAAI,MAAM,uCAAuC;AAC3D,WAAO,MAAM,CAAC;AAAA,EAClB,CAAC;AACD,OAAK,EAAE,CAAC,GAAI,GAAG;AACf,OAAK,EAAE,CAAC,GAAI,GAAG;AACf,MACI,EAAE,CAAC,MAAM,OAAO,EAAE,OAAO,KACzB,EAAE,CAAC,MAAM,OAAO,EAAE,eAAe,KACjC,EAAE,CAAC,MAAM,OAAO,EAAE,eAAe,KACjC,EAAE,CAAC,MAAM,OAAO,EAAE,iBAAiB,MAAM,KACzC,EAAE,CAAC,IAAK,MACR,EAAE,CAAC,IAAK,OAAO,QAAQ,KACvB,EAAE,CAAC,IAAK,MACR,EAAE,CAAC,IAAK,EAAE,CAAC;AAEX,UAAM,IAAI,MAAM,sCAAsC;AAC1D,QAAM,UAAU,EAAE,iBAAiB,IAAI,CAAC,MAAM;AAC1C,QACI,OAAO,KAAK,CAAC,EAAE;AAAA,MACX,CAAC,MAAM,MAAM,eAAe,CAAC,YAAY,KAAK,CAAC,CAAC,IAAI,MAAM,SAAS,CAAC;AAAA,IACxE;AAEA,YAAM,IAAI,MAAM,gCAAgC;AACpD,2BAAuB,GAAG,CAAC;AAC3B,WAAO,EAAE,QAAQ,EAAE,QAAQ,MAAM,EAAE,MAAM,WAAW,EAAE,UAAU;AAAA,EACpE,CAAC;AACD,QAAM,KAAK,MAAM,cAAc,EAAE,iBAAiB,OAAO;AACzD,MAAI,OAAO,EAAE,CAAC,EAAG,OAAM,IAAI,MAAM,+BAA+B;AAChE,QAAM,UAAU,MAAM,cAAc;AAAA,IAChC,OAAO,MAAM,UAAU,CAAC;AAAA,IACxB,cAAc,EAAE,CAAC;AAAA,IACjB,iBAAiB,EAAE;AAAA,IACnB,aAAa,EAAE,CAAC;AAAA,IAChB,eAAe;AAAA,IACf,YAAY,EAAE,CAAC;AAAA,IACf,iBAAkB,EAAE,CAAC,KAAM,OAAQ,EAAE,CAAC;AAAA,IACtC,aAAa,EAAE,CAAC;AAAA,EACpB,CAAC;AACD,MAAI,YAAY,EAAE,EAAE,EAAG,OAAM,IAAI,MAAM,wBAAwB;AACnE;AAEO,SAAS,mBAAmB,SAAqC;AACpE,MAAI,OAAO,KAAK,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,kBAAkB,aAAa,EAAE,SAAS,CAAC,CAAC;AAC/E,UAAM,MAAM,6BAA6B;AAC7C,MACI,OAAO,KAAK,QAAQ,WAAW,EAAE;AAAA,IAC7B,CAAC,MACG,CAAC;AAAA,MACG;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ,EAAE,SAAS,CAAC;AAAA,EACpB;AAEA,UAAM,MAAM,4BAA4B;AAC5C,QAAM,IAAI,QAAQ;AAClB,MACI,EAAE,WAAW,gCACb,EAAE,WAAW,SACb,CAAC,4BAA4B,KAAK,EAAE,SAAS,KAC7C,CAAC,mBAAmB,KAAK,EAAE,cAAc,KACzC,EAAE,aAAa,WAAW,MAC1B,CAAC,0BAA0B,KAAK,EAAE,KAAK,KACvC,EAAE,MAAM,SAAS;AAEjB,UAAM,IAAI,MAAM,8BAA8B;AAClD,SAAO;AAAA,IACH,gBAAgB,KAAK,QAAQ,gBAAgB,EAAE,EAAE,SAAS;AAAA,IAC1D,aAAa;AAAA,MACT,QAAQ,EAAE;AAAA,MACV,QAAQ,EAAE;AAAA,MACV,WAAW,EAAE;AAAA,MACb,gBAAgB,EAAE;AAAA,MAClB,cAAc,EAAE,aAAa,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;AAAA,MACtD,OAAO,EAAE;AAAA,MACT,kBAAkB,EAAE,iBAAiB,IAAI,iBAAiB;AAAA,IAC9D;AAAA,EACJ;AACJ;","names":["sha256","ed25519","getBytes","hexlify","concat","poseidonHash","operationDigest","hexlify","sha256","hash","poseidonHash","getBytes","concat","ed25519"]}