@invisi-labs/sdk 1.1.5 → 1.1.7

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/explicit-preparation.ts","../src/PreparedTransaction.ts","../src/Invisi.ts","../src/AddressRegistry.ts","../src/index.ts","../src/ProtocolRpcClient.ts","../src/integrations/encrypted-codec.ts"],"sourcesContent":["import { getAddress } from \"ethers\";\nimport type { CreditInput, NoteInput } from \"./explicit-types\";\nimport { PreparedTransaction } from \"./PreparedTransaction\";\nimport { positiveAmount } from \"./session/prepare-common\";\nimport { TransactionPreparation } from \"./session/transaction-preparation\";\nimport type { PreparationInventory, WalletSessionOptions } from \"./session/operation-types\";\n\n/** Only explicitly supplied records participate. No store or automatic coin selection. */\nexport function explicitPreparation(\n    options: WalletSessionOptions,\n    data: {\n        inputs?: readonly NoteInput[];\n        creditInputs?: readonly CreditInput[];\n        changeAddress?: string;\n    },\n    tokenAddress: `0x${string}`\n) {\n    if (!options.chainReader) throw new Error(\"chain reader required\");\n    const inputs = structuredClone(data.inputs ?? []);\n    const credits = structuredClone(data.creditInputs ?? []);\n    const inventory: PreparationInventory = { notes: {}, credits: {}, reservations: {} };\n    const context = options.protocol.context;\n    function position(input: NoteInput | CreditInput) {\n        if (\n            typeof input.treeId !== \"bigint\" ||\n            input.treeId < 0n ||\n            input.treeId >= 1n << 256n ||\n            !Number.isInteger(input.leafIndex) ||\n            input.leafIndex < 0 ||\n            input.leafIndex >= 65536\n        )\n            throw new Error(\"invalid explicit input position\");\n    }\n    for (const input of inputs) {\n        position(input);\n        positiveAmount(input.note.amount);\n        if (inventory.notes[input.commitment]) throw new Error(\"duplicate explicit note input\");\n        if (\n            input.note.chainId !== context.chainId ||\n            input.note.protocolAddress !== BigInt(context.protocolAddress) ||\n            input.note.walletIdentity !== options.wallet.walletIdentity\n        )\n            throw new Error(\"explicit note identity or deployment mismatch\");\n        inventory.notes[input.commitment] = { ...input, spent: \"unspent\" };\n    }\n    for (const input of credits) {\n        position(input);\n        if (input.role !== \"owner\" && input.role !== \"spender\")\n            throw new Error(\"invalid explicit Credit role\");\n        const key = input.commitment + \":\" + input.role;\n        if (inventory.credits[key]) throw new Error(\"duplicate explicit Credit input\");\n        inventory.credits[key] = { ...input, spent: \"unspent\" };\n    }\n    const scope = {\n        ...context,\n        namespace: \"explicit\",\n        walletIdentity: options.wallet.walletIdentity,\n    };\n    const {\n        store: _store,\n        coinSelector: _selector,\n        authorization: _authorization,\n        viewing: _viewing,\n        signer: _signer,\n        fundingSigner: _fundingSigner,\n        ...capabilities\n    } = options;\n\n    if (inputs.some((input) => input.note.tokenAddress !== BigInt(getAddress(tokenAddress))))\n        throw new Error(\"explicit note token mismatch\");\n    const runtime = {\n        options: { ...capabilities, protocol: options.protocol.forToken(tokenAddress) },\n        reader: options.chainReader!,\n        scope,\n    };\n    return new TransactionPreparation<PreparedTransaction>({\n        ...runtime,\n        explicitInputs: true,\n        ...(data.changeAddress ? { changeAddress: data.changeAddress } : {}),\n        readInventory: async () => structuredClone(inventory),\n        complete: async (plan) => PreparedTransaction.prepare(runtime, plan),\n    });\n}\n","import { estimateGasReference } from \"./gas-estimation\";\nimport {\n    proveOperation,\n    walletSigningRequest,\n    acceptWalletSignature,\n    fundingSigningRequest,\n    acceptFundingSignature,\n} from \"./session/operation-execution\";\nimport { MissingCapabilityError, type AuthorizedStatement } from \"@invisi-labs/core\";\nimport { normalizeFunding, type TransactionCall } from \"@invisi-labs/protocol\";\nimport type { Prover, ProofBundle } from \"@invisi-labs/prover\";\nimport type {\n    OperationPlan,\n    OperationRuntime,\n    OperationAggregateMember,\n    SavedOperation,\n    TransactionProveOptions,\n} from \"./session/operation-types\";\nimport type { OperationStatus } from \"./session/state\";\nimport {\n    encodeOperation,\n    publicProof,\n    requiresAuthorization,\n    statement,\n} from \"./session/operation-protocol\";\nimport { sameStatement } from \"./session/proof-integrity\";\nimport { operationPreview } from \"./session/operation-preview\";\nfunction check(ok: unknown, message: string): asserts ok {\n    if (!ok) throw new Error(message);\n}\n\ntype Runtime = Omit<OperationRuntime, \"store\" | \"authorization\">;\ntype Lifecycle = { generation: number; busy: boolean };\n/** An immutable, local transaction handle. No wallet inventory, reservations or persistence. */\nexport class PreparedTransaction {\n    readonly #runtime: Runtime;\n    readonly #saved: SavedOperation;\n    readonly #authorization: AuthorizedStatement | undefined;\n    readonly #lifecycle: Lifecycle;\n    readonly status: OperationStatus;\n    private constructor(\n        runtime: Runtime,\n        saved: SavedOperation,\n        status: OperationStatus,\n        lifecycle: Lifecycle,\n        authorization?: AuthorizedStatement\n    ) {\n        this.#runtime = runtime;\n        this.#saved = structuredClone(saved);\n        this.#lifecycle = lifecycle;\n        this.#authorization = authorization;\n        this.status = status;\n        Object.freeze(this);\n    }\n    static prepare(runtime: Runtime, plan: OperationPlan): PreparedTransaction {\n        return new PreparedTransaction(\n            runtime,\n            { plan: structuredClone(plan), generation: 0 },\n            \"prepared\",\n            { generation: 0, busy: false }\n        );\n    }\n    get id() {\n        return this.#saved.plan.id;\n    }\n    get kind() {\n        return this.#saved.plan.kind;\n    }\n    estimateGas() {\n        return estimateGasReference(\n            this.#saved.plan,\n            this.#runtime.options.protocol,\n            this.#runtime.options.gasBenchmarks\n        );\n    }\n    preview() {\n        return operationPreview(this.#saved.plan, this.status);\n    }\n    private current() {\n        check(\n            !this.#lifecycle.busy && this.#lifecycle.generation === this.#saved.generation,\n            \"stale transaction handle or active worker\"\n        );\n    }\n    private async stage(\n        stage: string,\n        allowed: OperationStatus[],\n        work: (\n            saved: SavedOperation\n        ) => Promise<{ status: OperationStatus; authorization?: AuthorizedStatement }>,\n        signal?: AbortSignal\n    ): Promise<PreparedTransaction> {\n        signal?.throwIfAborted();\n        this.current();\n        check(allowed.includes(this.status), `invalid transaction stage for ${stage}`);\n        this.#lifecycle.busy = true;\n        const saved = structuredClone(this.#saved);\n        try {\n            const next = await work(saved);\n            signal?.throwIfAborted();\n            saved.generation++;\n            this.#lifecycle.generation = saved.generation;\n            return new PreparedTransaction(\n                this.#runtime,\n                saved,\n                next.status,\n                this.#lifecycle,\n                next.authorization ?? this.#authorization\n            );\n        } finally {\n            this.#lifecycle.busy = false;\n        }\n    }\n    /** Public EIP-712 request; signing transport and key custody belong to the caller. */\n    async exportWalletAuthorization(options: { signal?: AbortSignal } = {}) {\n        options.signal?.throwIfAborted();\n        this.current();\n        check(\n            requiresAuthorization(this.#saved.plan),\n            \"operation does not require wallet authorization\"\n        );\n        check(\n            [\"prepared\", \"authorized\"].includes(this.status),\n            \"operation is not awaiting wallet authorization\"\n        );\n        return walletSigningRequest(this.#saved.plan);\n    }\n\n    /** Attach an external EOA signature, retaining its witness only at the private proving boundary. */\n    async withWalletSignature(\n        signature: string,\n        options: { signal?: AbortSignal } = {}\n    ): Promise<PreparedTransaction> {\n        options.signal?.throwIfAborted();\n        this.current();\n        check(\n            requiresAuthorization(this.#saved.plan),\n            \"operation does not require wallet authorization\"\n        );\n        check(\n            [\"prepared\", \"authorized\"].includes(this.status),\n            \"operation is not awaiting wallet authorization\"\n        );\n        const authorization = await acceptWalletSignature(this.#saved.plan, signature);\n        return this.stage(\n            \"wallet authorization\",\n            [\"prepared\", \"authorized\"],\n            async () => ({ status: \"authorized\", authorization }),\n            options.signal\n        );\n    }\n\n    /** Export only after proving when the funding authorization binds an actual proof hash. */\n    async exportFundingAuthorization(options: { signal?: AbortSignal } = {}) {\n        options.signal?.throwIfAborted();\n        this.current();\n        check(\n            this.status === (this.kind === \"shield\" ? \"prepared\" : \"proved\"),\n            \"operation is not awaiting funding authorization or proof\"\n        );\n        const request = await fundingSigningRequest(this.#saved, this.#runtime);\n        options.signal?.throwIfAborted();\n        this.current();\n        return request;\n    }\n\n    /** Verify an external signature against this handle's own frozen operation. */\n    async withFundingSignature(\n        signature: string,\n        options: { signal?: AbortSignal } = {}\n    ): Promise<PreparedTransaction> {\n        options.signal?.throwIfAborted();\n        this.current();\n        check(\n            this.status === (this.kind === \"shield\" ? \"prepared\" : \"proved\"),\n            \"operation is not awaiting funding authorization or proof\"\n        );\n        const verified = await acceptFundingSignature(this.#saved, signature, this.#runtime);\n        return this.stage(\n            \"funding authorization\",\n            this.kind === \"shield\" ? [\"prepared\"] : [\"proved\"],\n            async (saved) => {\n                saved.plan.funding.signature = verified;\n                if (saved.plan.statement?.target !== \"noir-recursive\") {\n                    saved.call = await this.encode(saved);\n                }\n                return { status: \"ready\" };\n            },\n            options.signal\n        );\n    }\n\n    async prove(options?: TransactionProveOptions): Promise<PreparedTransaction>;\n    async prove(backend: Prover, options?: TransactionProveOptions): Promise<PreparedTransaction>;\n    async prove(\n        backendOrOptions: Prover | TransactionProveOptions = {},\n        suppliedOptions: TransactionProveOptions = {}\n    ): Promise<PreparedTransaction> {\n        const options = { ...(\"prove\" in backendOrOptions ? suppliedOptions : backendOrOptions) };\n        const plan = this.#saved.plan;\n        check(plan.kind !== \"shield\", \"shield requires no proof\");\n        if (requiresAuthorization(plan)) {\n            check(\n                this.#authorization,\n                \"local wallet authorization required; authorize again after recovery\"\n            );\n        }\n        const prover =\n            \"prove\" in backendOrOptions ? backendOrOptions : this.#runtime.options.prover;\n        if (!prover) {\n            throw new MissingCapabilityError(\"prover\");\n        }\n        return this.stage(\n            \"proof\",\n            requiresAuthorization(plan) ? [\"authorized\"] : [\"prepared\"],\n            async (saved) => {\n                const p = saved.plan;\n                saved.proof = await proveOperation(\n                    this.#runtime.options.protocol,\n                    p,\n                    this.#authorization,\n                    prover,\n                    options\n                );\n                if (p.fundingMode === \"signature\") {\n                    return { status: \"proved\" };\n                }\n                if (p.statement?.target !== \"noir-recursive\") {\n                    saved.call = await this.encode(saved);\n                }\n                return { status: \"ready\" };\n            },\n            options.signal\n        );\n    }\n\n    private encode(saved: SavedOperation): Promise<TransactionCall> {\n        return encodeOperation(saved);\n    }\n\n    /** Shield caller funding needs no wallet signing or proof; this step only encodes its frozen request. */\n    async ready(): Promise<PreparedTransaction> {\n        check(\n            this.kind === \"shield\" && this.#saved.plan.fundingMode === \"caller\",\n            \"operation needs authorization or proof first\"\n        );\n        return this.stage(\"encoding\", [\"prepared\"], async (saved) => {\n            saved.call = await this.encode(saved);\n            return { status: \"ready\" };\n        });\n    }\n\n    async exportTransaction(): Promise<TransactionCall> {\n        this.current();\n        check(\n            this.#saved.plan.statement?.target !== \"noir-recursive\",\n            \"recursive operations must be exported as aggregate members\"\n        );\n        check(this.status === \"ready\" && this.#saved.call, \"transaction is not ready\");\n        return structuredClone(this.#saved.call);\n    }\n    exportProof(): ProofBundle {\n        this.current();\n        check(this.#saved.proof, \"transaction has no proof\");\n        return publicProof(this.#saved.proof);\n    }\n    exportAggregateMember(): OperationAggregateMember {\n        this.current();\n        const saved = this.#saved,\n            plan = saved.plan;\n        check(\n            this.status === \"ready\" &&\n                plan.params &&\n                saved.proof &&\n                plan.statement?.target === \"noir-recursive\" &&\n                plan.statement.circuitName === \"transact_user_slots14\",\n            \"ready recursive slots14 transaction required\"\n        );\n        sameStatement(saved.proof, statement(plan));\n        check(\n            saved.proof.proofHex.length === 2 + 458 * 64,\n            \"recursive member proof must have 458 fields\"\n        );\n        return {\n            bundle: publicProof(saved.proof),\n            statement: structuredClone(plan.statement),\n            context: { ...plan.context },\n            request: {\n                params: structuredClone(plan.params),\n                deliveries: plan.outputs.map((output) => structuredClone(output.delivery)),\n                funding: normalizeFunding(plan.funding),\n            },\n        };\n    }\n    toJSON() {\n        return { transaction: true, id: this.id, kind: this.kind, status: this.status };\n    }\n    [Symbol.for(\"nodejs.util.inspect.custom\")]() {\n        return this.toJSON();\n    }\n}\n","import type { WalletSessionInfrastructure } from \"./session/operation-types\";\nimport { prepareWithErrors } from \"./errors\";\nimport { copyGasBenchmarks } from \"./gas-estimation\";\nimport { explicitPreparation } from \"./explicit-preparation\";\nimport type { PreparedTransaction } from \"./PreparedTransaction\";\nimport type {\n    TransactionIdentity,\n    ExplicitTransferPreparation,\n    ExplicitShieldPreparation,\n    ExplicitCreateCreditPreparation,\n    ExplicitDrawCreditPreparation,\n    ExplicitTopUpCreditPreparation,\n    ExplicitCancelCreditPreparation,\n} from \"./explicit-types\";\nimport { ProtocolRpcClient } from \"@invisi-labs/rpc\";\nimport type { Provider } from \"ethers\";\nimport {\n    EthersChainReader,\n    EthersFundingVerifier,\n    EthersAddressResolver,\n} from \"./integrations/ethers\";\nimport { MissingCapabilityError, PublicWallet, ReceivingAddress } from \"@invisi-labs/core\";\nimport { AddressRegistry } from \"./AddressRegistry\";\nimport type { RegistrationPreparation, RegistrationOperation } from \"@invisi-labs/protocol\";\nimport { Protocol, type ChainReader } from \"@invisi-labs/protocol\";\nimport { WalletSession, type WalletSessionOptions } from \"./session\";\n\n/** Compose independent Chain RPC and indexed Protocol RPC with local wallet capabilities. */\ntype InvisiInfrastructure = Omit<\n    WalletSessionInfrastructure,\n    | \"wallet\"\n    | \"protocol\"\n    | \"namespace\"\n    | \"viewing\"\n    | \"authorization\"\n    | \"chainReader\"\n    | \"signer\"\n    | \"fundingSigner\"\n> & {\n    /** Recipient discovery source; defaults to protocol-rpc. An explicit addressResolver takes precedence. */\n    addressLookup?: \"chain\" | \"protocol-rpc\";\n    provider?: Provider;\n    chainReader?: ChainReader;\n};\n\nexport type InvisiOptions = InvisiInfrastructure;\n\n/** Public wallet and registry-specific inputs; signing remains external. */\nexport type RegistrationPreparationOptions = Pick<RegistrationPreparation, \"update\" | \"deadline\"> &\n    Pick<TransactionIdentity, \"wallet\">;\n\n/** Wallet identity and session permissions; shared infrastructure belongs to InvisiOptions. */\nexport type ConnectionOptions = Pick<\n    WalletSessionOptions,\n    \"wallet\" | \"protocol\" | \"namespace\" | \"viewing\" | \"authorization\" | \"signer\" | \"fundingSigner\"\n>;\n\n/** A neutral composition entry point; every resolved instance owns an independent session. */\nexport class Invisi {\n    readonly #options: InvisiInfrastructure;\n\n    constructor(options: InvisiOptions = {}) {\n        if (\"ciphertextCodecs\" in options || \"envelopeVersion\" in options) {\n            throw new Error(\n                \"SDK envelope versions are fixed; encode application payload bytes externally\"\n            );\n        }\n        if (\"signer\" in options || \"fundingSigner\" in options) {\n            throw new Error(\n                \"Invisi does not accept signer defaults; export a signing request and attach the external signature\"\n            );\n        }\n        this.#options = {\n            ...options,\n            ...(options.gasBenchmarks\n                ? { gasBenchmarks: copyGasBenchmarks(options.gasBenchmarks) }\n                : {}),\n        };\n        Object.freeze(this);\n    }\n\n    async connect(options: ConnectionOptions): Promise<WalletSession> {\n        return new WalletSession(await this.resolve(options));\n    }\n    private async resolve(options: ConnectionOptions): Promise<WalletSessionOptions> {\n        // Snapshot session permissions before the first network request.\n        const allowed = [\n            \"wallet\",\n            \"protocol\",\n            \"namespace\",\n            \"viewing\",\n            \"authorization\",\n            \"signer\",\n            \"fundingSigner\",\n        ];\n        for (const key of Object.keys(options)) {\n            if (!allowed.includes(key))\n                throw new Error(\n                    `Unknown connection option: ${key}; configure infrastructure on Invisi`\n                );\n        }\n        const selected = { ...options };\n        const combined = { ...this.#options, ...selected };\n        const { provider, addressLookup = \"protocol-rpc\", ...runtime } = combined;\n        if (\n            addressLookup !== undefined &&\n            addressLookup !== \"chain\" &&\n            addressLookup !== \"protocol-rpc\"\n        ) {\n            throw new Error(\"Invalid recipient address lookup source\");\n        }\n        const reader =\n            combined.chainReader ?? (provider ? new EthersChainReader(provider) : undefined);\n        if (!reader) throw new MissingCapabilityError(\"chain reader\");\n        if (provider && (await provider.getNetwork()).chainId !== selected.protocol.context.chainId)\n            throw new Error(\"provider deployment chain mismatch\");\n        await selected.protocol.validateDeployment(reader);\n        if (runtime.protocolRpc instanceof ProtocolRpcClient) {\n            runtime.protocolRpc = runtime.protocolRpc.withReader(reader);\n        }\n        const registry = selected.protocol.deployment.registry;\n        const fundingVerifier =\n            combined.fundingVerifier ??\n            (provider\n                ? new EthersFundingVerifier(provider, selected.protocol.context.chainId)\n                : undefined);\n        let addressResolver = combined.addressResolver;\n        if (!addressResolver && registry) {\n            if (addressLookup === \"protocol-rpc\") {\n                const rpc = runtime.protocolRpc;\n                addressResolver = async (identity) => {\n                    if (!(rpc instanceof ProtocolRpcClient)) {\n                        throw new MissingCapabilityError(\"Protocol RPC recipient discovery\");\n                    }\n                    const discovered = await rpc.getDeployment(selected.protocol.context.chainId);\n                    const expected = selected.protocol.deployment;\n                    if (\n                        discovered.protocol.address !== expected.protocol.address ||\n                        discovered.protocol.runtimeCodeHash !== expected.protocol.runtimeCodeHash ||\n                        discovered.protocol.fromBlock !== expected.protocol.fromBlock ||\n                        discovered.registry?.address !== registry.address ||\n                        discovered.registry.runtimeCodeHash !== registry.runtimeCodeHash ||\n                        discovered.registry.fromBlock !== registry.fromBlock\n                    )\n                        throw new Error(\"Recipient registry deployment pins mismatch\");\n                    const registration = await rpc.getReceivingAddress(identity);\n                    return registration\n                        ? ReceivingAddress.parse(registration.receivingAddress).getReceivingKeys()\n                        : null;\n                };\n            } else if (provider) {\n                addressResolver = new EthersAddressResolver(\n                    provider,\n                    {\n                        chainId: selected.protocol.context.chainId,\n                        registryAddress: registry.address,\n                    },\n                    registry.runtimeCodeHash\n                ).lookup;\n            }\n        }\n        return {\n            ...runtime,\n            chainReader: reader,\n            ...(fundingVerifier ? { fundingVerifier } : {}),\n            ...(addressResolver ? { addressResolver } : {}),\n            protocol: selected.protocol,\n        } as WalletSessionOptions;\n    }\n\n    /** Discover the selected chain's registry and prepare an independent signing request. */\n    async prepareRegistration(\n        options: RegistrationPreparationOptions\n    ): Promise<RegistrationOperation> {\n        return prepareWithErrors(\"prepareRegistration\", async () => {\n            for (const key of Object.keys(options)) {\n                if (![\"wallet\", \"update\", \"deadline\"].includes(key)) {\n                    throw new Error(`Unknown registration option: ${key}`);\n                }\n            }\n            this.assertPublicIdentity(options);\n            const selected = { ...options };\n            const { provider, protocolRpc } = this.#options;\n            if (!provider) throw new MissingCapabilityError(\"ethers provider\");\n            if (!(protocolRpc instanceof ProtocolRpcClient)) {\n                throw new MissingCapabilityError(\"Protocol RPC deployment discovery\");\n            }\n            const chainId = (await provider.getNetwork()).chainId;\n            const deployment = await protocolRpc.getDeployment(chainId);\n            if (!deployment.registry) {\n                throw new MissingCapabilityError(\"receiving-key registry deployment\");\n            }\n            const registry = new AddressRegistry(\n                { chainId, registryAddress: deployment.registry.address },\n                { expectedRuntimeCodeHash: deployment.registry.runtimeCodeHash }\n            );\n            return registry.prepareRegistration({ ...selected, provider });\n        });\n    }\n\n    private assertPublicIdentity(options: Pick<TransactionIdentity, \"wallet\">): void {\n        const { wallet } = options;\n        if (\n            !(wallet instanceof PublicWallet) ||\n            [\"getViewer\", \"getDetector\", \"exportAuthorization\"].some((key) => key in wallet)\n        ) {\n            throw new Error(\n                \"Independent preparation requires a PublicWallet without private capabilities\"\n            );\n        }\n        for (const key of [\"authorization\", \"signer\", \"fundingSigner\", \"viewing\"]) {\n            if (key in options)\n                throw new Error(`Independent preparation does not accept capability: ${key}`);\n        }\n    }\n\n    private resolveExplicit(options: TransactionIdentity): Promise<WalletSessionOptions> {\n        this.assertPublicIdentity(options);\n        return this.resolve({ wallet: options.wallet, protocol: options.protocol });\n    }\n\n    async prepareTransfer(options: ExplicitTransferPreparation): Promise<PreparedTransaction> {\n        return prepareWithErrors(\"prepareTransfer\", async () => {\n            const { wallet, protocol, ...input } = options;\n            const request = structuredClone(input);\n            const runtime = await this.resolveExplicit(options);\n            const preparation = explicitPreparation(runtime, request, request.tokenAddress);\n            return preparation.prepareTransfer(request);\n        });\n    }\n    async prepareShield(options: ExplicitShieldPreparation): Promise<PreparedTransaction> {\n        return prepareWithErrors(\"prepareShield\", async () => {\n            const { wallet, protocol, ...input } = options;\n            const request = structuredClone(input);\n            const runtime = await this.resolveExplicit(options);\n            const preparation = explicitPreparation(runtime, {}, request.tokenAddress);\n            return preparation.prepareShield(request);\n        });\n    }\n    async prepareCreateCredit(\n        options: ExplicitCreateCreditPreparation\n    ): Promise<PreparedTransaction> {\n        return prepareWithErrors(\"prepareCreateCredit\", async () => {\n            const { wallet, protocol, ...input } = options;\n            const request = structuredClone(input);\n            const runtime = await this.resolveExplicit(options);\n            const preparation = explicitPreparation(runtime, request, request.tokenAddress);\n            return preparation.prepareCreateCredit(request);\n        });\n    }\n    async prepareDrawCredit(options: ExplicitDrawCreditPreparation): Promise<PreparedTransaction> {\n        return prepareWithErrors(\"prepareDrawCredit\", async () => {\n            const { wallet, protocol, ...input } = options;\n            const request = structuredClone(input);\n            const runtime = await this.resolveExplicit(options);\n            const preparation = explicitPreparation(runtime, request, request.tokenAddress);\n            return preparation.prepareDrawCredit(request);\n        });\n    }\n    async prepareTopUpCredit(\n        options: ExplicitTopUpCreditPreparation\n    ): Promise<PreparedTransaction> {\n        return prepareWithErrors(\"prepareTopUpCredit\", async () => {\n            const { wallet, protocol, ...input } = options;\n            const request = structuredClone(input);\n            const runtime = await this.resolveExplicit(options);\n            const preparation = explicitPreparation(runtime, request, request.tokenAddress);\n            return preparation.prepareTopUpCredit(request);\n        });\n    }\n    async prepareCancelCredit(\n        options: ExplicitCancelCreditPreparation\n    ): Promise<PreparedTransaction> {\n        return prepareWithErrors(\"prepareCancelCredit\", async () => {\n            const { wallet, protocol, ...input } = options;\n            const request = structuredClone(input);\n            const runtime = await this.resolveExplicit(options);\n            const preparation = explicitPreparation(runtime, request, request.tokenAddress);\n            return preparation.prepareCancelCredit(request);\n        });\n    }\n\n    toJSON() {\n        return { invisi: true };\n    }\n    [Symbol.for(\"nodejs.util.inspect.custom\")]() {\n        return this.toJSON();\n    }\n}\n","import { prepareWithErrors } from \"./errors\";\nimport type { Provider } from \"ethers\";\nimport { AddressRegistry as Registry, type RegistrationPreparation } from \"@invisi-labs/protocol\";\nimport { EthersChainReader } from \"./integrations/ethers\";\n\n/** Registry operations accept the application's existing ethers provider. */\nexport class AddressRegistry extends Registry {\n    override prepareRegistration(\n        options:\n            | RegistrationPreparation\n            | (Omit<RegistrationPreparation, \"reader\"> & { provider: Provider })\n    ) {\n        return prepareWithErrors(\"prepareRegistration\", async () => {\n            if (\"provider\" in options) {\n                const { provider, ...preparation } = options;\n                return super.prepareRegistration({\n                    ...preparation,\n                    reader: new EthersChainReader(provider),\n                });\n            }\n            return super.prepareRegistration(options);\n        });\n    }\n}\n","export { InvisiError } from \"./errors\";\nexport type { InvisiErrorCode, InvisiErrorDetails } from \"./errors\";\nexport { Invisi } from \"./Invisi\";\nexport type { InvisiOptions, ConnectionOptions, RegistrationPreparationOptions } from \"./Invisi\";\nexport {\n    fundsV1,\n    creditV1,\n    decodeDeliveryHeader,\n    Wallet,\n    PublicWallet,\n    ViewingCapability,\n    Detector,\n    NullifierCapability,\n    WalletAuthorization,\n    MissingCapabilityError,\n    Disclosure,\n    encodeMemo,\n    decodeMemoText,\n    MAX_MEMO_BYTES,\n    computeCreditNullifier,\n    creditPeriods,\n} from \"@invisi-labs/core\";\nexport type {\n    Address,\n    Hex,\n    Memo,\n    FundsDataV1,\n    CreditDataV1,\n    Note,\n    CreditNote,\n    CreditPolicy,\n    CreditDeliveryState,\n    ReceivingKeys,\n    WalletAuthorizationProvider,\n    CreditOpening,\n    DisclosureOutput,\n    DisclosureExport,\n    DisclosureResult,\n} from \"@invisi-labs/core\";\nexport { Protocol, RegistrationOperation } from \"@invisi-labs/protocol\";\nexport type {\n    ChainReader,\n    ProtocolDataProvider,\n    ProtocolDataStatus,\n    ProtocolUpdates,\n    ProtocolUpdateRange,\n    TransactionCall,\n    CanonicalBlock,\n    CanonicalReceipt,\n    Membership,\n    RegistryReader,\n    ProtocolOptions,\n    TokenProtocol,\n    TokenProtocolOptions,\n    FactoryReader,\n    AddressRegistryOptions,\n    RegistryContext,\n    TransactionContext,\n} from \"@invisi-labs/protocol\";\nexport { WalletSession, Operation, walletBalance, DisclosureVerifier } from \"./session\";\nexport type {\n    WalletHistory,\n    HistoryOptions,\n    OutgoingHistoryEntry,\n    IncomingHistoryEntry,\n    RefreshOptions,\n    RefreshResult,\n    WalletStore,\n    WalletScope,\n    WalletState,\n    BalanceSnapshot,\n    WalletSessionOptions,\n    PaymentOutput,\n    TransferPreparation,\n    TransactionExecution,\n    TransactionProveOptions,\n    ShieldPreparation,\n    CreateCreditPreparation,\n    DrawCreditPreparation,\n    TopUpCreditPreparation,\n    CancelCreditPreparation,\n    FundingSigner,\n    FundingAuthorizationVerifier,\n    FundingTypedData,\n    FundingSource,\n    CoinSelector,\n    OperationStatus,\n    OperationAggregateMember,\n    DisclosureReference,\n    DisclosureReader,\n    DisclosureVerifierOptions,\n    DisclosureEvidence,\n    VerifiedDisclosure,\n} from \"./session\";\nexport type {\n    Prover,\n    ProverOptions,\n    ProofBundle,\n    ProofStatement,\n    AggregatorCapability,\n    AggregateMember,\n} from \"@invisi-labs/prover\";\n\nexport { ProtocolRpcError } from \"@invisi-labs/rpc\";\nexport type { ProtocolDeployment, RegisteredReceivingAddress } from \"@invisi-labs/rpc\";\nexport { ProtocolRpcClient } from \"./ProtocolRpcClient\";\nexport { AddressRegistry } from \"./AddressRegistry\";\nexport type {\n    ProtocolRpcClientOptions,\n    ProtocolRpcReader,\n    ProtocolRpcConnectionOptions,\n    ProtocolRpcChain,\n} from \"@invisi-labs/rpc\";\n\nexport { EncryptedWalletCodec } from \"./integrations/encrypted-codec\";\n\nexport { PreparedTransaction } from \"./PreparedTransaction\";\nexport type {\n    NoteInput,\n    CreditInput,\n    TransactionIdentity,\n    ExplicitTransferPreparation,\n    ExplicitShieldPreparation,\n    ExplicitCreateCreditPreparation,\n    ExplicitDrawCreditPreparation,\n    ExplicitTopUpCreditPreparation,\n    ExplicitCancelCreditPreparation,\n} from \"./explicit-types\";\n\nexport type { SessionTransactionOptions } from \"./session/WalletSession\";\n\nexport type {\n    GasBenchmarkProfile,\n    GasBenchmarkShape,\n    GasBenchmarkDeployment,\n    GasBenchmarkCircuit,\n    GasBenchmarkSample,\n    GasReference,\n} from \"./gas-estimation\";\n\nexport { defineGasBenchmarks } from \"./gas-estimation\";\n\nexport type { SigningRequest } from \"@invisi-labs/core\";\n\n// Stateless recovery for applications that supply canonical receipts without a wallet store.\nexport { readProtocolLogs } from \"./session/receipt-logs\";\nexport { decryptCandidates } from \"./session/discovery\";\nexport type { DeliveryEventLog, DiscoveredNote, DiscoveredCredit } from \"./session/discovery\";\n\nexport type {\n    ProtocolOutput,\n    ProtocolTransactionUpdates,\n    ProtocolCreditTransition,\n} from \"@invisi-labs/rpc\";\n","import type { Provider } from \"ethers\";\nimport { ProtocolRpcClient as RpcClient } from \"@invisi-labs/rpc\";\nimport { EthersChainReader } from \"./integrations/ethers\";\n\n/** Protocol RPC transport with ethers provider integration for independent chain checks. */\nexport class ProtocolRpcClient extends RpcClient {\n    withProvider(provider: Provider): RpcClient {\n        return this.withReader(new EthersChainReader(provider));\n    }\n}\n","import {\n    serializeState,\n    deserializeState,\n    type WalletState,\n    type WalletRecordCodec,\n} from \"../session\";\n/** Caller-owned, nonextractable AES-GCM key. The SDK does not persist the key. */\nexport class EncryptedWalletCodec implements WalletRecordCodec {\n    readonly #key: CryptoKey;\n    private constructor(key: CryptoKey) {\n        this.#key = key;\n    }\n    static fromKey(key: CryptoKey): EncryptedWalletCodec {\n        if (\n            key.type !== \"secret\" ||\n            key.algorithm.name !== \"AES-GCM\" ||\n            (key.algorithm as AesKeyAlgorithm).length !== 256 ||\n            !key.usages.includes(\"encrypt\") ||\n            !key.usages.includes(\"decrypt\")\n        )\n            throw new Error(\"wallet record key must support AES-256-GCM encryption and decryption\");\n        return new EncryptedWalletCodec(key);\n    }\n    static async fromBytes(key: Uint8Array): Promise<EncryptedWalletCodec> {\n        if (key.length !== 32) throw new Error(\"wallet record encryption requires 32 key bytes\");\n        const copy = Uint8Array.from(key);\n        try {\n            return EncryptedWalletCodec.fromKey(\n                await crypto.subtle.importKey(\"raw\", copy, { name: \"AES-GCM\" }, false, [\n                    \"encrypt\",\n                    \"decrypt\",\n                ])\n            );\n        } finally {\n            copy.fill(0);\n        }\n    }\n    private aad(context: { key: string; revision: number }): Uint8Array<ArrayBuffer> {\n        if (!Number.isSafeInteger(context.revision) || context.revision < 1)\n            throw new Error(\"invalid encrypted record revision\");\n        return new TextEncoder().encode(\n            `Invisi.WalletRecord.v1\\0${context.revision}\\0${context.key}`\n        );\n    }\n    async encode(\n        state: WalletState,\n        context: { key: string; revision: number }\n    ): Promise<Uint8Array> {\n        const iv = crypto.getRandomValues(new Uint8Array(12)),\n            plain = Uint8Array.from(serializeState(state));\n        try {\n            const encrypted = new Uint8Array(\n                await crypto.subtle.encrypt(\n                    { name: \"AES-GCM\", iv, additionalData: this.aad(context) },\n                    this.#key,\n                    plain\n                )\n            );\n            const out = new Uint8Array(13 + encrypted.length);\n            out[0] = 1;\n            out.set(iv, 1);\n            out.set(encrypted, 13);\n            return out;\n        } finally {\n            plain.fill(0);\n        }\n    }\n    async decode(\n        data: Uint8Array,\n        context: { key: string; revision: number }\n    ): Promise<WalletState> {\n        if (data.length < 29 || data[0] !== 1)\n            throw new Error(\"wallet record authentication failed\");\n        let plain: Uint8Array;\n        try {\n            plain = new Uint8Array(\n                await crypto.subtle.decrypt(\n                    {\n                        name: \"AES-GCM\",\n                        iv: Uint8Array.from(data.subarray(1, 13)),\n                        additionalData: this.aad(context),\n                    },\n                    this.#key,\n                    Uint8Array.from(data.subarray(13))\n                )\n            );\n        } catch {\n            throw new Error(\"wallet record authentication failed\");\n        }\n        try {\n            return deserializeState(plain);\n        } finally {\n            plain.fill(0);\n        }\n    }\n    toJSON() {\n        return { walletRecordCodec: \"AES-256-GCM\" };\n    }\n    [Symbol.for(\"nodejs.util.inspect.custom\")]() {\n        return this.toJSON();\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,kBAAkB;;;ACQ3B,SAAS,8BAAwD;AACjE,SAAS,wBAA8C;AAkBvD,SAAS,MAAM,IAAa,SAA6B;AACrD,MAAI,CAAC,GAAI,OAAM,IAAI,MAAM,OAAO;AACpC;AAKO,IAAM,sBAAN,MAAM,qBAAoB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACD,YACJ,SACA,OACA,QACA,WACA,eACF;AACE,SAAK,WAAW;AAChB,SAAK,SAAS,gBAAgB,KAAK;AACnC,SAAK,aAAa;AAClB,SAAK,iBAAiB;AACtB,SAAK,SAAS;AACd,WAAO,OAAO,IAAI;AAAA,EACtB;AAAA,EACA,OAAO,QAAQ,SAAkB,MAA0C;AACvE,WAAO,IAAI;AAAA,MACP;AAAA,MACA,EAAE,MAAM,gBAAgB,IAAI,GAAG,YAAY,EAAE;AAAA,MAC7C;AAAA,MACA,EAAE,YAAY,GAAG,MAAM,MAAM;AAAA,IACjC;AAAA,EACJ;AAAA,EACA,IAAI,KAAK;AACL,WAAO,KAAK,OAAO,KAAK;AAAA,EAC5B;AAAA,EACA,IAAI,OAAO;AACP,WAAO,KAAK,OAAO,KAAK;AAAA,EAC5B;AAAA,EACA,cAAc;AACV,WAAO;AAAA,MACH,KAAK,OAAO;AAAA,MACZ,KAAK,SAAS,QAAQ;AAAA,MACtB,KAAK,SAAS,QAAQ;AAAA,IAC1B;AAAA,EACJ;AAAA,EACA,UAAU;AACN,WAAO,iBAAiB,KAAK,OAAO,MAAM,KAAK,MAAM;AAAA,EACzD;AAAA,EACQ,UAAU;AACd;AAAA,MACI,CAAC,KAAK,WAAW,QAAQ,KAAK,WAAW,eAAe,KAAK,OAAO;AAAA,MACpE;AAAA,IACJ;AAAA,EACJ;AAAA,EACA,MAAc,MACV,OACA,SACA,MAGA,QAC4B;AAC5B,YAAQ,eAAe;AACvB,SAAK,QAAQ;AACb,UAAM,QAAQ,SAAS,KAAK,MAAM,GAAG,iCAAiC,KAAK,EAAE;AAC7E,SAAK,WAAW,OAAO;AACvB,UAAM,QAAQ,gBAAgB,KAAK,MAAM;AACzC,QAAI;AACA,YAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,cAAQ,eAAe;AACvB,YAAM;AACN,WAAK,WAAW,aAAa,MAAM;AACnC,aAAO,IAAI;AAAA,QACP,KAAK;AAAA,QACL;AAAA,QACA,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK,iBAAiB,KAAK;AAAA,MAC/B;AAAA,IACJ,UAAE;AACE,WAAK,WAAW,OAAO;AAAA,IAC3B;AAAA,EACJ;AAAA;AAAA,EAEA,MAAM,0BAA0B,UAAoC,CAAC,GAAG;AACpE,YAAQ,QAAQ,eAAe;AAC/B,SAAK,QAAQ;AACb;AAAA,MACI,sBAAsB,KAAK,OAAO,IAAI;AAAA,MACtC;AAAA,IACJ;AACA;AAAA,MACI,CAAC,YAAY,YAAY,EAAE,SAAS,KAAK,MAAM;AAAA,MAC/C;AAAA,IACJ;AACA,WAAO,qBAAqB,KAAK,OAAO,IAAI;AAAA,EAChD;AAAA;AAAA,EAGA,MAAM,oBACF,WACA,UAAoC,CAAC,GACT;AAC5B,YAAQ,QAAQ,eAAe;AAC/B,SAAK,QAAQ;AACb;AAAA,MACI,sBAAsB,KAAK,OAAO,IAAI;AAAA,MACtC;AAAA,IACJ;AACA;AAAA,MACI,CAAC,YAAY,YAAY,EAAE,SAAS,KAAK,MAAM;AAAA,MAC/C;AAAA,IACJ;AACA,UAAM,gBAAgB,MAAM,sBAAsB,KAAK,OAAO,MAAM,SAAS;AAC7E,WAAO,KAAK;AAAA,MACR;AAAA,MACA,CAAC,YAAY,YAAY;AAAA,MACzB,aAAa,EAAE,QAAQ,cAAc,cAAc;AAAA,MACnD,QAAQ;AAAA,IACZ;AAAA,EACJ;AAAA;AAAA,EAGA,MAAM,2BAA2B,UAAoC,CAAC,GAAG;AACrE,YAAQ,QAAQ,eAAe;AAC/B,SAAK,QAAQ;AACb;AAAA,MACI,KAAK,YAAY,KAAK,SAAS,WAAW,aAAa;AAAA,MACvD;AAAA,IACJ;AACA,UAAM,UAAU,MAAM,sBAAsB,KAAK,QAAQ,KAAK,QAAQ;AACtE,YAAQ,QAAQ,eAAe;AAC/B,SAAK,QAAQ;AACb,WAAO;AAAA,EACX;AAAA;AAAA,EAGA,MAAM,qBACF,WACA,UAAoC,CAAC,GACT;AAC5B,YAAQ,QAAQ,eAAe;AAC/B,SAAK,QAAQ;AACb;AAAA,MACI,KAAK,YAAY,KAAK,SAAS,WAAW,aAAa;AAAA,MACvD;AAAA,IACJ;AACA,UAAM,WAAW,MAAM,uBAAuB,KAAK,QAAQ,WAAW,KAAK,QAAQ;AACnF,WAAO,KAAK;AAAA,MACR;AAAA,MACA,KAAK,SAAS,WAAW,CAAC,UAAU,IAAI,CAAC,QAAQ;AAAA,MACjD,OAAO,UAAU;AACb,cAAM,KAAK,QAAQ,YAAY;AAC/B,YAAI,MAAM,KAAK,WAAW,WAAW,kBAAkB;AACnD,gBAAM,OAAO,MAAM,KAAK,OAAO,KAAK;AAAA,QACxC;AACA,eAAO,EAAE,QAAQ,QAAQ;AAAA,MAC7B;AAAA,MACA,QAAQ;AAAA,IACZ;AAAA,EACJ;AAAA,EAIA,MAAM,MACF,mBAAqD,CAAC,GACtD,kBAA2C,CAAC,GAChB;AAC5B,UAAM,UAAU,EAAE,GAAI,WAAW,mBAAmB,kBAAkB,iBAAkB;AACxF,UAAM,OAAO,KAAK,OAAO;AACzB,UAAM,KAAK,SAAS,UAAU,0BAA0B;AACxD,QAAI,sBAAsB,IAAI,GAAG;AAC7B;AAAA,QACI,KAAK;AAAA,QACL;AAAA,MACJ;AAAA,IACJ;AACA,UAAM,SACF,WAAW,mBAAmB,mBAAmB,KAAK,SAAS,QAAQ;AAC3E,QAAI,CAAC,QAAQ;AACT,YAAM,IAAI,uBAAuB,QAAQ;AAAA,IAC7C;AACA,WAAO,KAAK;AAAA,MACR;AAAA,MACA,sBAAsB,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU;AAAA,MAC1D,OAAO,UAAU;AACb,cAAM,IAAI,MAAM;AAChB,cAAM,QAAQ,MAAM;AAAA,UAChB,KAAK,SAAS,QAAQ;AAAA,UACtB;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA;AAAA,QACJ;AACA,YAAI,EAAE,gBAAgB,aAAa;AAC/B,iBAAO,EAAE,QAAQ,SAAS;AAAA,QAC9B;AACA,YAAI,EAAE,WAAW,WAAW,kBAAkB;AAC1C,gBAAM,OAAO,MAAM,KAAK,OAAO,KAAK;AAAA,QACxC;AACA,eAAO,EAAE,QAAQ,QAAQ;AAAA,MAC7B;AAAA,MACA,QAAQ;AAAA,IACZ;AAAA,EACJ;AAAA,EAEQ,OAAO,OAAiD;AAC5D,WAAO,gBAAgB,KAAK;AAAA,EAChC;AAAA;AAAA,EAGA,MAAM,QAAsC;AACxC;AAAA,MACI,KAAK,SAAS,YAAY,KAAK,OAAO,KAAK,gBAAgB;AAAA,MAC3D;AAAA,IACJ;AACA,WAAO,KAAK,MAAM,YAAY,CAAC,UAAU,GAAG,OAAO,UAAU;AACzD,YAAM,OAAO,MAAM,KAAK,OAAO,KAAK;AACpC,aAAO,EAAE,QAAQ,QAAQ;AAAA,IAC7B,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,oBAA8C;AAChD,SAAK,QAAQ;AACb;AAAA,MACI,KAAK,OAAO,KAAK,WAAW,WAAW;AAAA,MACvC;AAAA,IACJ;AACA,UAAM,KAAK,WAAW,WAAW,KAAK,OAAO,MAAM,0BAA0B;AAC7E,WAAO,gBAAgB,KAAK,OAAO,IAAI;AAAA,EAC3C;AAAA,EACA,cAA2B;AACvB,SAAK,QAAQ;AACb,UAAM,KAAK,OAAO,OAAO,0BAA0B;AACnD,WAAO,YAAY,KAAK,OAAO,KAAK;AAAA,EACxC;AAAA,EACA,wBAAkD;AAC9C,SAAK,QAAQ;AACb,UAAM,QAAQ,KAAK,QACf,OAAO,MAAM;AACjB;AAAA,MACI,KAAK,WAAW,WACZ,KAAK,UACL,MAAM,SACN,KAAK,WAAW,WAAW,oBAC3B,KAAK,UAAU,gBAAgB;AAAA,MACnC;AAAA,IACJ;AACA,kBAAc,MAAM,OAAO,UAAU,IAAI,CAAC;AAC1C;AAAA,MACI,MAAM,MAAM,SAAS,WAAW,IAAI,MAAM;AAAA,MAC1C;AAAA,IACJ;AACA,WAAO;AAAA,MACH,QAAQ,YAAY,MAAM,KAAK;AAAA,MAC/B,WAAW,gBAAgB,KAAK,SAAS;AAAA,MACzC,SAAS,EAAE,GAAG,KAAK,QAAQ;AAAA,MAC3B,SAAS;AAAA,QACL,QAAQ,gBAAgB,KAAK,MAAM;AAAA,QACnC,YAAY,KAAK,QAAQ,IAAI,CAAC,WAAW,gBAAgB,OAAO,QAAQ,CAAC;AAAA,QACzE,SAAS,iBAAiB,KAAK,OAAO;AAAA,MAC1C;AAAA,IACJ;AAAA,EACJ;AAAA,EACA,SAAS;AACL,WAAO,EAAE,aAAa,MAAM,IAAI,KAAK,IAAI,MAAM,KAAK,MAAM,QAAQ,KAAK,OAAO;AAAA,EAClF;AAAA,EACA,CAAC,uBAAO,IAAI,4BAA4B,CAAC,IAAI;AACzC,WAAO,KAAK,OAAO;AAAA,EACvB;AACJ;;;ADpSO,SAAS,oBACZ,SACA,MAKA,cACF;AACE,MAAI,CAAC,QAAQ,YAAa,OAAM,IAAI,MAAM,uBAAuB;AACjE,QAAM,SAAS,gBAAgB,KAAK,UAAU,CAAC,CAAC;AAChD,QAAM,UAAU,gBAAgB,KAAK,gBAAgB,CAAC,CAAC;AACvD,QAAM,YAAkC,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,GAAG,cAAc,CAAC,EAAE;AACnF,QAAM,UAAU,QAAQ,SAAS;AACjC,WAAS,SAAS,OAAgC;AAC9C,QACI,OAAO,MAAM,WAAW,YACxB,MAAM,SAAS,MACf,MAAM,UAAU,MAAM,QACtB,CAAC,OAAO,UAAU,MAAM,SAAS,KACjC,MAAM,YAAY,KAClB,MAAM,aAAa;AAEnB,YAAM,IAAI,MAAM,iCAAiC;AAAA,EACzD;AACA,aAAW,SAAS,QAAQ;AACxB,aAAS,KAAK;AACd,mBAAe,MAAM,KAAK,MAAM;AAChC,QAAI,UAAU,MAAM,MAAM,UAAU,EAAG,OAAM,IAAI,MAAM,+BAA+B;AACtF,QACI,MAAM,KAAK,YAAY,QAAQ,WAC/B,MAAM,KAAK,oBAAoB,OAAO,QAAQ,eAAe,KAC7D,MAAM,KAAK,mBAAmB,QAAQ,OAAO;AAE7C,YAAM,IAAI,MAAM,+CAA+C;AACnE,cAAU,MAAM,MAAM,UAAU,IAAI,EAAE,GAAG,OAAO,OAAO,UAAU;AAAA,EACrE;AACA,aAAW,SAAS,SAAS;AACzB,aAAS,KAAK;AACd,QAAI,MAAM,SAAS,WAAW,MAAM,SAAS;AACzC,YAAM,IAAI,MAAM,8BAA8B;AAClD,UAAM,MAAM,MAAM,aAAa,MAAM,MAAM;AAC3C,QAAI,UAAU,QAAQ,GAAG,EAAG,OAAM,IAAI,MAAM,iCAAiC;AAC7E,cAAU,QAAQ,GAAG,IAAI,EAAE,GAAG,OAAO,OAAO,UAAU;AAAA,EAC1D;AACA,QAAM,QAAQ;AAAA,IACV,GAAG;AAAA,IACH,WAAW;AAAA,IACX,gBAAgB,QAAQ,OAAO;AAAA,EACnC;AACA,QAAM;AAAA,IACF,OAAO;AAAA,IACP,cAAc;AAAA,IACd,eAAe;AAAA,IACf,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,GAAG;AAAA,EACP,IAAI;AAEJ,MAAI,OAAO,KAAK,CAAC,UAAU,MAAM,KAAK,iBAAiB,OAAO,WAAW,YAAY,CAAC,CAAC;AACnF,UAAM,IAAI,MAAM,8BAA8B;AAClD,QAAM,UAAU;AAAA,IACZ,SAAS,EAAE,GAAG,cAAc,UAAU,QAAQ,SAAS,SAAS,YAAY,EAAE;AAAA,IAC9E,QAAQ,QAAQ;AAAA,IAChB;AAAA,EACJ;AACA,SAAO,IAAI,uBAA4C;AAAA,IACnD,GAAG;AAAA,IACH,gBAAgB;AAAA,IAChB,GAAI,KAAK,gBAAgB,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;AAAA,IAClE,eAAe,YAAY,gBAAgB,SAAS;AAAA,IACpD,UAAU,OAAO,SAAS,oBAAoB,QAAQ,SAAS,IAAI;AAAA,EACvE,CAAC;AACL;;;AEpEA,SAAS,yBAAyB;AAOlC,SAAS,0BAAAA,yBAAwB,cAAc,wBAAwB;;;ACnBvE,SAAS,mBAAmB,gBAA8C;AAInE,IAAM,kBAAN,cAA8B,SAAS;AAAA,EACjC,oBACL,SAGF;AACE,WAAO,kBAAkB,uBAAuB,YAAY;AACxD,UAAI,cAAc,SAAS;AACvB,cAAM,EAAE,UAAU,GAAG,YAAY,IAAI;AACrC,eAAO,MAAM,oBAAoB;AAAA,UAC7B,GAAG;AAAA,UACH,QAAQ,IAAI,kBAAkB,QAAQ;AAAA,QAC1C,CAAC;AAAA,MACL;AACA,aAAO,MAAM,oBAAoB,OAAO;AAAA,IAC5C,CAAC;AAAA,EACL;AACJ;;;ADmCO,IAAM,SAAN,MAAa;AAAA,EACP;AAAA,EAET,YAAY,UAAyB,CAAC,GAAG;AACrC,QAAI,sBAAsB,WAAW,qBAAqB,SAAS;AAC/D,YAAM,IAAI;AAAA,QACN;AAAA,MACJ;AAAA,IACJ;AACA,QAAI,YAAY,WAAW,mBAAmB,SAAS;AACnD,YAAM,IAAI;AAAA,QACN;AAAA,MACJ;AAAA,IACJ;AACA,SAAK,WAAW;AAAA,MACZ,GAAG;AAAA,MACH,GAAI,QAAQ,gBACN,EAAE,eAAe,kBAAkB,QAAQ,aAAa,EAAE,IAC1D,CAAC;AAAA,IACX;AACA,WAAO,OAAO,IAAI;AAAA,EACtB;AAAA,EAEA,MAAM,QAAQ,SAAoD;AAC9D,WAAO,IAAI,cAAc,MAAM,KAAK,QAAQ,OAAO,CAAC;AAAA,EACxD;AAAA,EACA,MAAc,QAAQ,SAA2D;AAE7E,UAAM,UAAU;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AACA,eAAW,OAAO,OAAO,KAAK,OAAO,GAAG;AACpC,UAAI,CAAC,QAAQ,SAAS,GAAG;AACrB,cAAM,IAAI;AAAA,UACN,8BAA8B,GAAG;AAAA,QACrC;AAAA,IACR;AACA,UAAM,WAAW,EAAE,GAAG,QAAQ;AAC9B,UAAM,WAAW,EAAE,GAAG,KAAK,UAAU,GAAG,SAAS;AACjD,UAAM,EAAE,UAAU,gBAAgB,gBAAgB,GAAG,QAAQ,IAAI;AACjE,QACI,kBAAkB,UAClB,kBAAkB,WAClB,kBAAkB,gBACpB;AACE,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC7D;AACA,UAAM,SACF,SAAS,gBAAgB,WAAW,IAAI,kBAAkB,QAAQ,IAAI;AAC1E,QAAI,CAAC,OAAQ,OAAM,IAAIC,wBAAuB,cAAc;AAC5D,QAAI,aAAa,MAAM,SAAS,WAAW,GAAG,YAAY,SAAS,SAAS,QAAQ;AAChF,YAAM,IAAI,MAAM,oCAAoC;AACxD,UAAM,SAAS,SAAS,mBAAmB,MAAM;AACjD,QAAI,QAAQ,uBAAuB,mBAAmB;AAClD,cAAQ,cAAc,QAAQ,YAAY,WAAW,MAAM;AAAA,IAC/D;AACA,UAAM,WAAW,SAAS,SAAS,WAAW;AAC9C,UAAM,kBACF,SAAS,oBACR,WACK,IAAI,sBAAsB,UAAU,SAAS,SAAS,QAAQ,OAAO,IACrE;AACV,QAAI,kBAAkB,SAAS;AAC/B,QAAI,CAAC,mBAAmB,UAAU;AAC9B,UAAI,kBAAkB,gBAAgB;AAClC,cAAM,MAAM,QAAQ;AACpB,0BAAkB,OAAO,aAAa;AAClC,cAAI,EAAE,eAAe,oBAAoB;AACrC,kBAAM,IAAIA,wBAAuB,kCAAkC;AAAA,UACvE;AACA,gBAAM,aAAa,MAAM,IAAI,cAAc,SAAS,SAAS,QAAQ,OAAO;AAC5E,gBAAM,WAAW,SAAS,SAAS;AACnC,cACI,WAAW,SAAS,YAAY,SAAS,SAAS,WAClD,WAAW,SAAS,oBAAoB,SAAS,SAAS,mBAC1D,WAAW,SAAS,cAAc,SAAS,SAAS,aACpD,WAAW,UAAU,YAAY,SAAS,WAC1C,WAAW,SAAS,oBAAoB,SAAS,mBACjD,WAAW,SAAS,cAAc,SAAS;AAE3C,kBAAM,IAAI,MAAM,6CAA6C;AACjE,gBAAM,eAAe,MAAM,IAAI,oBAAoB,QAAQ;AAC3D,iBAAO,eACD,iBAAiB,MAAM,aAAa,gBAAgB,EAAE,iBAAiB,IACvE;AAAA,QACV;AAAA,MACJ,WAAW,UAAU;AACjB,0BAAkB,IAAI;AAAA,UAClB;AAAA,UACA;AAAA,YACI,SAAS,SAAS,SAAS,QAAQ;AAAA,YACnC,iBAAiB,SAAS;AAAA,UAC9B;AAAA,UACA,SAAS;AAAA,QACb,EAAE;AAAA,MACN;AAAA,IACJ;AACA,WAAO;AAAA,MACH,GAAG;AAAA,MACH,aAAa;AAAA,MACb,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;AAAA,MAC7C,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;AAAA,MAC7C,UAAU,SAAS;AAAA,IACvB;AAAA,EACJ;AAAA;AAAA,EAGA,MAAM,oBACF,SAC8B;AAC9B,WAAO,kBAAkB,uBAAuB,YAAY;AACxD,iBAAW,OAAO,OAAO,KAAK,OAAO,GAAG;AACpC,YAAI,CAAC,CAAC,UAAU,UAAU,UAAU,EAAE,SAAS,GAAG,GAAG;AACjD,gBAAM,IAAI,MAAM,gCAAgC,GAAG,EAAE;AAAA,QACzD;AAAA,MACJ;AACA,WAAK,qBAAqB,OAAO;AACjC,YAAM,WAAW,EAAE,GAAG,QAAQ;AAC9B,YAAM,EAAE,UAAU,YAAY,IAAI,KAAK;AACvC,UAAI,CAAC,SAAU,OAAM,IAAIA,wBAAuB,iBAAiB;AACjE,UAAI,EAAE,uBAAuB,oBAAoB;AAC7C,cAAM,IAAIA,wBAAuB,mCAAmC;AAAA,MACxE;AACA,YAAM,WAAW,MAAM,SAAS,WAAW,GAAG;AAC9C,YAAM,aAAa,MAAM,YAAY,cAAc,OAAO;AAC1D,UAAI,CAAC,WAAW,UAAU;AACtB,cAAM,IAAIA,wBAAuB,mCAAmC;AAAA,MACxE;AACA,YAAM,WAAW,IAAI;AAAA,QACjB,EAAE,SAAS,iBAAiB,WAAW,SAAS,QAAQ;AAAA,QACxD,EAAE,yBAAyB,WAAW,SAAS,gBAAgB;AAAA,MACnE;AACA,aAAO,SAAS,oBAAoB,EAAE,GAAG,UAAU,SAAS,CAAC;AAAA,IACjE,CAAC;AAAA,EACL;AAAA,EAEQ,qBAAqB,SAAoD;AAC7E,UAAM,EAAE,OAAO,IAAI;AACnB,QACI,EAAE,kBAAkB,iBACpB,CAAC,aAAa,eAAe,qBAAqB,EAAE,KAAK,CAAC,QAAQ,OAAO,MAAM,GACjF;AACE,YAAM,IAAI;AAAA,QACN;AAAA,MACJ;AAAA,IACJ;AACA,eAAW,OAAO,CAAC,iBAAiB,UAAU,iBAAiB,SAAS,GAAG;AACvE,UAAI,OAAO;AACP,cAAM,IAAI,MAAM,uDAAuD,GAAG,EAAE;AAAA,IACpF;AAAA,EACJ;AAAA,EAEQ,gBAAgB,SAA6D;AACjF,SAAK,qBAAqB,OAAO;AACjC,WAAO,KAAK,QAAQ,EAAE,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,SAAS,CAAC;AAAA,EAC9E;AAAA,EAEA,MAAM,gBAAgB,SAAoE;AACtF,WAAO,kBAAkB,mBAAmB,YAAY;AACpD,YAAM,EAAE,QAAQ,UAAU,GAAG,MAAM,IAAI;AACvC,YAAM,UAAU,gBAAgB,KAAK;AACrC,YAAM,UAAU,MAAM,KAAK,gBAAgB,OAAO;AAClD,YAAM,cAAc,oBAAoB,SAAS,SAAS,QAAQ,YAAY;AAC9E,aAAO,YAAY,gBAAgB,OAAO;AAAA,IAC9C,CAAC;AAAA,EACL;AAAA,EACA,MAAM,cAAc,SAAkE;AAClF,WAAO,kBAAkB,iBAAiB,YAAY;AAClD,YAAM,EAAE,QAAQ,UAAU,GAAG,MAAM,IAAI;AACvC,YAAM,UAAU,gBAAgB,KAAK;AACrC,YAAM,UAAU,MAAM,KAAK,gBAAgB,OAAO;AAClD,YAAM,cAAc,oBAAoB,SAAS,CAAC,GAAG,QAAQ,YAAY;AACzE,aAAO,YAAY,cAAc,OAAO;AAAA,IAC5C,CAAC;AAAA,EACL;AAAA,EACA,MAAM,oBACF,SAC4B;AAC5B,WAAO,kBAAkB,uBAAuB,YAAY;AACxD,YAAM,EAAE,QAAQ,UAAU,GAAG,MAAM,IAAI;AACvC,YAAM,UAAU,gBAAgB,KAAK;AACrC,YAAM,UAAU,MAAM,KAAK,gBAAgB,OAAO;AAClD,YAAM,cAAc,oBAAoB,SAAS,SAAS,QAAQ,YAAY;AAC9E,aAAO,YAAY,oBAAoB,OAAO;AAAA,IAClD,CAAC;AAAA,EACL;AAAA,EACA,MAAM,kBAAkB,SAAsE;AAC1F,WAAO,kBAAkB,qBAAqB,YAAY;AACtD,YAAM,EAAE,QAAQ,UAAU,GAAG,MAAM,IAAI;AACvC,YAAM,UAAU,gBAAgB,KAAK;AACrC,YAAM,UAAU,MAAM,KAAK,gBAAgB,OAAO;AAClD,YAAM,cAAc,oBAAoB,SAAS,SAAS,QAAQ,YAAY;AAC9E,aAAO,YAAY,kBAAkB,OAAO;AAAA,IAChD,CAAC;AAAA,EACL;AAAA,EACA,MAAM,mBACF,SAC4B;AAC5B,WAAO,kBAAkB,sBAAsB,YAAY;AACvD,YAAM,EAAE,QAAQ,UAAU,GAAG,MAAM,IAAI;AACvC,YAAM,UAAU,gBAAgB,KAAK;AACrC,YAAM,UAAU,MAAM,KAAK,gBAAgB,OAAO;AAClD,YAAM,cAAc,oBAAoB,SAAS,SAAS,QAAQ,YAAY;AAC9E,aAAO,YAAY,mBAAmB,OAAO;AAAA,IACjD,CAAC;AAAA,EACL;AAAA,EACA,MAAM,oBACF,SAC4B;AAC5B,WAAO,kBAAkB,uBAAuB,YAAY;AACxD,YAAM,EAAE,QAAQ,UAAU,GAAG,MAAM,IAAI;AACvC,YAAM,UAAU,gBAAgB,KAAK;AACrC,YAAM,UAAU,MAAM,KAAK,gBAAgB,OAAO;AAClD,YAAM,cAAc,oBAAoB,SAAS,SAAS,QAAQ,YAAY;AAC9E,aAAO,YAAY,oBAAoB,OAAO;AAAA,IAClD,CAAC;AAAA,EACL;AAAA,EAEA,SAAS;AACL,WAAO,EAAE,QAAQ,KAAK;AAAA,EAC1B;AAAA,EACA,CAAC,uBAAO,IAAI,4BAA4B,CAAC,IAAI;AACzC,WAAO,KAAK,OAAO;AAAA,EACvB;AACJ;;;AE5RA;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,gBAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,0BAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AAkBP,SAAS,UAAU,6BAA6B;AAgEhD,SAAS,wBAAwB;;;ACtGjC,SAAS,qBAAqB,iBAAiB;AAIxC,IAAMC,qBAAN,cAAgC,UAAU;AAAA,EAC7C,aAAa,UAA+B;AACxC,WAAO,KAAK,WAAW,IAAI,kBAAkB,QAAQ,CAAC;AAAA,EAC1D;AACJ;;;ACFO,IAAM,uBAAN,MAAM,sBAAkD;AAAA,EAClD;AAAA,EACD,YAAY,KAAgB;AAChC,SAAK,OAAO;AAAA,EAChB;AAAA,EACA,OAAO,QAAQ,KAAsC;AACjD,QACI,IAAI,SAAS,YACb,IAAI,UAAU,SAAS,aACtB,IAAI,UAA8B,WAAW,OAC9C,CAAC,IAAI,OAAO,SAAS,SAAS,KAC9B,CAAC,IAAI,OAAO,SAAS,SAAS;AAE9B,YAAM,IAAI,MAAM,sEAAsE;AAC1F,WAAO,IAAI,sBAAqB,GAAG;AAAA,EACvC;AAAA,EACA,aAAa,UAAU,KAAgD;AACnE,QAAI,IAAI,WAAW,GAAI,OAAM,IAAI,MAAM,gDAAgD;AACvF,UAAM,OAAO,WAAW,KAAK,GAAG;AAChC,QAAI;AACA,aAAO,sBAAqB;AAAA,QACxB,MAAM,OAAO,OAAO,UAAU,OAAO,MAAM,EAAE,MAAM,UAAU,GAAG,OAAO;AAAA,UACnE;AAAA,UACA;AAAA,QACJ,CAAC;AAAA,MACL;AAAA,IACJ,UAAE;AACE,WAAK,KAAK,CAAC;AAAA,IACf;AAAA,EACJ;AAAA,EACQ,IAAI,SAAqE;AAC7E,QAAI,CAAC,OAAO,cAAc,QAAQ,QAAQ,KAAK,QAAQ,WAAW;AAC9D,YAAM,IAAI,MAAM,mCAAmC;AACvD,WAAO,IAAI,YAAY,EAAE;AAAA,MACrB,2BAA2B,QAAQ,QAAQ,KAAK,QAAQ,GAAG;AAAA,IAC/D;AAAA,EACJ;AAAA,EACA,MAAM,OACF,OACA,SACmB;AACnB,UAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,GAChD,QAAQ,WAAW,KAAK,eAAe,KAAK,CAAC;AACjD,QAAI;AACA,YAAM,YAAY,IAAI;AAAA,QAClB,MAAM,OAAO,OAAO;AAAA,UAChB,EAAE,MAAM,WAAW,IAAI,gBAAgB,KAAK,IAAI,OAAO,EAAE;AAAA,UACzD,KAAK;AAAA,UACL;AAAA,QACJ;AAAA,MACJ;AACA,YAAM,MAAM,IAAI,WAAW,KAAK,UAAU,MAAM;AAChD,UAAI,CAAC,IAAI;AACT,UAAI,IAAI,IAAI,CAAC;AACb,UAAI,IAAI,WAAW,EAAE;AACrB,aAAO;AAAA,IACX,UAAE;AACE,YAAM,KAAK,CAAC;AAAA,IAChB;AAAA,EACJ;AAAA,EACA,MAAM,OACF,MACA,SACoB;AACpB,QAAI,KAAK,SAAS,MAAM,KAAK,CAAC,MAAM;AAChC,YAAM,IAAI,MAAM,qCAAqC;AACzD,QAAI;AACJ,QAAI;AACA,cAAQ,IAAI;AAAA,QACR,MAAM,OAAO,OAAO;AAAA,UAChB;AAAA,YACI,MAAM;AAAA,YACN,IAAI,WAAW,KAAK,KAAK,SAAS,GAAG,EAAE,CAAC;AAAA,YACxC,gBAAgB,KAAK,IAAI,OAAO;AAAA,UACpC;AAAA,UACA,KAAK;AAAA,UACL,WAAW,KAAK,KAAK,SAAS,EAAE,CAAC;AAAA,QACrC;AAAA,MACJ;AAAA,IACJ,QAAQ;AACJ,YAAM,IAAI,MAAM,qCAAqC;AAAA,IACzD;AACA,QAAI;AACA,aAAO,iBAAiB,KAAK;AAAA,IACjC,UAAE;AACE,YAAM,KAAK,CAAC;AAAA,IAChB;AAAA,EACJ;AAAA,EACA,SAAS;AACL,WAAO,EAAE,mBAAmB,cAAc;AAAA,EAC9C;AAAA,EACA,CAAC,uBAAO,IAAI,4BAA4B,CAAC,IAAI;AACzC,WAAO,KAAK,OAAO;AAAA,EACvB;AACJ;","names":["MissingCapabilityError","MissingCapabilityError","PublicWallet","MissingCapabilityError","ProtocolRpcClient"]}
+{"version":3,"sources":["../src/index.ts","../src/disclosure/DisclosureVerifier.ts","../src/protocol/connections.ts","../src/protocol/Protocol.ts","../src/protocol/BroadcasterRegistry.ts","../src/protocol/ProtocolRpcClient.ts","../src/payment-note/PaymentNote.ts","../src/payment-note/verification.ts"],"sourcesContent":["export {\n    Detector,\n    Disclosure,\n    MAX_MEMO_BYTES,\n    MissingCapabilityError,\n    NullifierCapability,\n    PublicWallet,\n    ViewingCapability,\n    Wallet,\n    WalletAuthorization,\n    computeCreditNullifier,\n    creditPeriods,\n    creditV1,\n    decodeDeliveryHeader,\n    decodeMemoText,\n    encodeMemo,\n    fundsV1,\n} from \"@invisi-labs/core\";\nexport type {\n    Address,\n    CreditDataV1,\n    CreditDeliveryState,\n    CreditNote,\n    CreditOpening,\n    CreditPolicy,\n    DisclosureExport,\n    DisclosureOutput,\n    DisclosureResult,\n    FundsDataV1,\n    Hex,\n    Memo,\n    Note,\n    ReceivingKeys,\n    WalletAuthorizationProvider,\n} from \"@invisi-labs/core\";\nexport { RegistrationOperation } from \"@invisi-labs/protocol\";\nexport type {\n    AddressRegistryOptions,\n    CanonicalBlock,\n    CanonicalReceipt,\n    ChainReader,\n    FactoryReader,\n    Membership,\n    ProtocolDataProvider,\n    ProtocolDataStatus,\n    ProtocolOptions,\n    ProtocolUpdateRange,\n    ProtocolUpdates,\n    RegistryContext,\n    RegistryReader,\n    TokenProtocol,\n    TokenProtocolOptions,\n    TransactionCall,\n    TransactionContext,\n} from \"@invisi-labs/protocol\";\nexport type {\n    AggregateMember,\n    AggregatorCapability,\n    ProofBundle,\n    ProofStatement,\n    Prover,\n    ProverOptions,\n} from \"@invisi-labs/prover\";\nexport { Invisi } from \"./client/Invisi\";\nexport type { InvisiOptions, RegistrationPreparationOptions } from \"./client/Invisi\";\nexport { DisclosureVerifier } from \"./disclosure/DisclosureVerifier\";\nexport type {\n    DisclosureEvidence,\n    DisclosureReader,\n    DisclosureReference,\n    DisclosureVerifierOptions,\n    VerifiedDisclosure,\n} from \"./disclosure/DisclosureVerifier\";\nexport { InvisiError } from \"./errors\";\nexport type { InvisiErrorCode, InvisiErrorDetails } from \"./errors\";\nexport { NoteOutput } from \"./notes/NoteOutput\";\nexport type { NoteOutputContext, PaymentRequest, NoteOutputRecipient } from \"./notes/NoteOutput\";\nexport { Protocol } from \"./protocol/Protocol\";\nexport type {\n    CancelCreditPreparation,\n    CreateCreditPreparation,\n    DrawCreditPreparation,\n    FundingAuthorizationVerifier,\n    FundingSigner,\n    FundingSource,\n    FundingTypedData,\n    OperationAggregateMember,\n    ShieldPreparation,\n    TopUpCreditPreparation,\n    TransactionExecution,\n    TransactionProveOptions,\n    TransferPreparation,\n} from \"./transactions/operation-types\";\n\nexport { MAX_UPDATE_BLOCKS, ProtocolRpcError } from \"@invisi-labs/rpc\";\nexport type {\n    ProtocolDeployment,\n    ProtocolRpcChain,\n    ProtocolRpcClientOptions,\n    ProtocolRpcConnectionOptions,\n    ProtocolRpcReader,\n    RegisteredReceivingAddress,\n} from \"@invisi-labs/rpc\";\nexport { AddressRegistry } from \"./protocol/AddressRegistry\";\nexport { BroadcasterRegistry } from \"./protocol/BroadcasterRegistry\";\nexport type {\n    BroadcasterRegistration,\n    BroadcasterRegistryOptions,\n    RegisteredBroadcaster,\n} from \"./protocol/BroadcasterRegistry\";\nexport { ProtocolRpcClient } from \"./protocol/ProtocolRpcClient\";\n\nexport { PreparedTransaction } from \"./transactions/execution/PreparedTransaction\";\nexport type {\n    CreditInput,\n    ExplicitCancelCreditPreparation,\n    ExplicitCreateCreditPreparation,\n    ExplicitDrawCreditPreparation,\n    ExplicitShieldPreparation,\n    ExplicitTopUpCreditPreparation,\n    ExplicitTransferPreparation,\n    NoteInput,\n    TransactionIdentity,\n} from \"./transactions/explicit-types\";\n\nexport type {\n    GasBenchmarkCircuit,\n    GasBenchmarkDeployment,\n    GasBenchmarkProfile,\n    GasBenchmarkSample,\n    GasBenchmarkShape,\n    GasReference,\n} from \"./gas/gas-estimation\";\n\nexport { defineGasBenchmarks } from \"./gas/gas-estimation\";\n\nexport type { SigningRequest } from \"@invisi-labs/core\";\n\n// Stateless recovery for applications that supply canonical receipts without a wallet store.\nexport { decryptCandidates } from \"./discovery/discovery\";\nexport type { DeliveryEventLog, DiscoveredCredit, DiscoveredNote } from \"./discovery/discovery\";\nexport { readProtocolLogs } from \"./discovery/receipt-logs\";\n\nexport type {\n    ProtocolCreditTransition,\n    ProtocolOutput,\n    ProtocolTransactionUpdates,\n} from \"@invisi-labs/rpc\";\n\nexport * from \"./broadcaster/index\";\n\nexport type {\n    BroadcasterFeeSource,\n    WithBroadcasterOptions,\n} from \"./broadcaster/broadcaster-preparation\";\n\nexport { encodePaymentRequest, decodePaymentRequest } from \"./payment-request/codec\";\nexport type { NoteOutputExecutionOptions } from \"./payment-request/types\";\n\nexport { PaymentNote, VerifiedPaymentNote, SpendablePaymentNote } from \"./payment-note/PaymentNote\";\nexport { encodePaymentNote, decodePaymentNote } from \"./payment-note/codec\";\nexport type { PaymentNoteData } from \"./payment-note/types\";\nexport type {\n    PaymentNoteVerificationOptions,\n    PaymentNoteVerificationSettings,\n} from \"./payment-note/verification\";\nexport { TransactionOutput } from \"./notes/TransactionOutput\";\n","import type { Hex } from \"@invisi-labs/protocol/contracts\";\nimport type { Provider } from \"ethers\";\nimport { readProtocolLogs } from \"../discovery/receipt-logs\";\nimport { EthersChainReader } from \"../integrations/ethers\";\n\nimport { Disclosure, type DisclosureOutput, type DisclosureResult } from \"@invisi-labs/core\";\nimport { TokenProtocol, type CanonicalBlock, type ChainReader } from \"@invisi-labs/protocol\";\nimport { extractDeliveryCandidates } from \"../discovery/discovery\";\n\nexport interface DisclosureReference {\n    transactionHash: Hex;\n    treeId: bigint;\n    leafIndex: number;\n    role: \"funds\" | \"owner\" | \"spender\";\n}\n\nexport type DisclosureReader = Pick<\n    ChainReader,\n    \"getChainId\" | \"getCode\" | \"getReceipt\" | \"getBlock\" | \"getLatestBlockNumber\"\n>;\n\nexport interface DisclosureVerifierOptions {\n    protocol: TokenProtocol;\n    reader: DisclosureReader;\n    /** Minimum confirmations including the inclusion block; defaults to one. */\n    confirmations?: number;\n}\n\nexport interface DisclosureEvidence {\n    reference: Readonly<DisclosureReference>;\n    block: Readonly<CanonicalBlock>;\n    confirmations: bigint;\n    output: Readonly<DisclosureOutput>;\n}\n\nexport interface VerifiedDisclosure {\n    result: DisclosureResult;\n    block: Readonly<CanonicalBlock>;\n    confirmations: bigint;\n    output: Readonly<DisclosureReference & { commitment: Hex }>;\n}\n\nfunction check(value: unknown, message: string): asserts value {\n    if (!value) throw new Error(message);\n}\n\nfunction reference(value: DisclosureReference): DisclosureReference {\n    check(/^0x[0-9a-fA-F]{64}$/.test(value.transactionHash), \"invalid disclosure transaction hash\");\n    check(\n        typeof value.treeId === \"bigint\" && value.treeId > 0n && value.treeId < 1n << 64n,\n        \"invalid disclosure tree ID\"\n    );\n    check(\n        Number.isSafeInteger(value.leafIndex) && value.leafIndex >= 0 && value.leafIndex < 65536,\n        \"invalid disclosure leaf index\"\n    );\n    check([\"funds\", \"owner\", \"spender\"].includes(value.role), \"invalid disclosure reference role\");\n    return {\n        transactionHash: value.transactionHash.toLowerCase() as Hex,\n        treeId: value.treeId,\n        leafIndex: value.leafIndex,\n        role: value.role,\n    };\n}\n\n/** Read-only verification against a trusted RPC and authenticated protocol deployment.\n * Results establish output content/inclusion at a block, not payer identity, spent state or wallet completeness.\n */\nexport class DisclosureVerifier {\n    readonly #protocol: TokenProtocol;\n    readonly #reader: DisclosureReader;\n    readonly #confirmations: bigint;\n\n    constructor(\n        options:\n            | DisclosureVerifierOptions\n            | (Omit<DisclosureVerifierOptions, \"reader\"> & { provider: Provider })\n    ) {\n        const confirmations = options.confirmations ?? 1;\n        check(\n            Number.isSafeInteger(confirmations) && confirmations >= 1,\n            \"invalid disclosure confirmations\"\n        );\n        this.#protocol = options.protocol;\n        this.#reader =\n            \"provider\" in options ? new EthersChainReader(options.provider) : options.reader;\n        this.#confirmations = BigInt(confirmations);\n        Object.freeze(this);\n    }\n\n    private async barrier(block: Readonly<CanonicalBlock>): Promise<bigint> {\n        await this.#protocol.validateDeployment(this.#reader);\n        const canonical = await this.#reader.getBlock(block.number);\n        check(\n            canonical.number === block.number &&\n                canonical.hash.toLowerCase() === block.hash.toLowerCase(),\n            \"disclosure canonical block changed; reorg verification required\"\n        );\n        const head = await this.#reader.getLatestBlockNumber();\n        check(\n            head >= block.number && head - block.number + 1n >= this.#confirmations,\n            \"insufficient disclosure confirmations\"\n        );\n        check(\n            (await this.#reader.getChainId()) === this.#protocol.context.chainId,\n            \"disclosure chain changed during verification\"\n        );\n        return head - block.number + 1n;\n    }\n\n    /** Resolve the exact inserted output and its delivery from a successful canonical receipt. */\n    async readOutput(value: DisclosureReference): Promise<DisclosureEvidence> {\n        const selected = reference(value);\n        await this.#protocol.validateDeployment(this.#reader);\n        const received = await this.#reader.getReceipt(selected.transactionHash);\n        check(received, \"disclosure transaction receipt is unavailable\");\n        const receipt = structuredClone(received);\n        check(receipt.status === \"success\", \"disclosure requires a successful transaction receipt\");\n        check(\n            receipt.transactionHash.toLowerCase() === selected.transactionHash,\n            \"disclosure receipt transaction mismatch\"\n        );\n        check(\n            typeof receipt.block.number === \"bigint\" &&\n                receipt.block.number >= 0n &&\n                /^0x[0-9a-fA-F]{64}$/.test(receipt.block.hash),\n            \"invalid disclosure receipt block\"\n        );\n        const { context } = this.#protocol;\n        const logs = readProtocolLogs(receipt, context.protocolAddress);\n        const candidates = extractDeliveryCandidates(logs, context, receipt.block.number).filter(\n            (candidate) =>\n                candidate.treeId === selected.treeId &&\n                candidate.leafIndex === selected.leafIndex &&\n                candidate.role === selected.role &&\n                candidate.tokenAddress.toLowerCase() === context.tokenAddress.toLowerCase()\n        );\n        check(\n            candidates.length === 1,\n            \"disclosure output has no unique canonical insertion and delivery\"\n        );\n        const candidate = candidates[0]!;\n        const confirmations = await this.barrier(receipt.block);\n        return Object.freeze({\n            reference: Object.freeze(selected),\n            block: Object.freeze({ ...receipt.block }),\n            confirmations,\n            output: Object.freeze({\n                chainId: context.chainId,\n                protocolAddress: BigInt(context.protocolAddress),\n                tokenAddress: BigInt(context.tokenAddress),\n                outputCommitment: candidate.commitment,\n                role: selected.role,\n                ciphertext: candidate.delivery.ciphertext,\n            }),\n        });\n    }\n\n    async verify(disclosure: Disclosure, value: DisclosureReference): Promise<VerifiedDisclosure> {\n        const evidence = await this.readOutput(value);\n        const result = await disclosure.verify(evidence.output);\n        const confirmations = await this.barrier(evidence.block);\n        return Object.freeze({\n            result: Object.freeze(result),\n            block: evidence.block,\n            confirmations,\n            output: Object.freeze({\n                ...evidence.reference,\n                commitment: evidence.output.outputCommitment,\n            }),\n        });\n    }\n\n    toJSON() {\n        return { disclosureVerifier: true, confirmations: this.#confirmations.toString() };\n    }\n\n    [Symbol.for(\"nodejs.util.inspect.custom\")]() {\n        return this.toJSON();\n    }\n}\n","import type { Protocol } from \"@invisi-labs/protocol\";\nimport type { ProtocolRpcClient } from \"@invisi-labs/rpc\";\nimport type { Provider } from \"ethers\";\n\n/** Public network connections only; never holds wallet keys or a signer. */\nconst connections = new WeakMap<\n    Protocol,\n    { provider: Provider; protocolRpc: Pick<ProtocolRpcClient, \"withReader\"> }\n>();\nexport function rememberProtocolConnection(\n    protocol: Protocol,\n    provider: Provider,\n    protocolRpc: Pick<ProtocolRpcClient, \"withReader\">\n): void {\n    connections.set(protocol, { provider, protocolRpc });\n}\nexport function protocolConnection(protocol: Protocol) {\n    return connections.get(protocol);\n}\n","import { rememberProtocolConnection } from \"./connections\";\nimport { Protocol as BaseProtocol } from \"@invisi-labs/protocol\";\nimport type { ProtocolRpcClient } from \"@invisi-labs/rpc\";\nimport { getAddress, type Provider } from \"ethers\";\nimport { BroadcasterClient } from \"../broadcaster/index\";\n\nconst sources = new WeakMap<Protocol, Pick<ProtocolRpcClient, \"getBroadcasters\">>();\n\n/** Deployment operations and token-compatible broadcaster discovery. */\nexport class Protocol extends BaseProtocol {\n    static override async fromRpc(\n        rpc: Pick<ProtocolRpcClient, \"getDeployment\"> &\n            Partial<Pick<ProtocolRpcClient, \"getBroadcasters\" | \"withReader\">>,\n        provider: Provider,\n        options: { signal?: AbortSignal } = {}\n    ): Promise<Protocol> {\n        const verified = await BaseProtocol.fromRpc(rpc, provider, options);\n        const protocol = new Protocol({ deployment: verified.deployment });\n        if (rpc.getBroadcasters)\n            sources.set(protocol, rpc as Pick<ProtocolRpcClient, \"getBroadcasters\">);\n        if (rpc.withReader)\n            rememberProtocolConnection(\n                protocol,\n                provider,\n                rpc as Pick<ProtocolRpcClient, \"withReader\">\n            );\n        return protocol;\n    }\n\n    /** Returns enabled services that answer a token fee probe; final quotes are checked by prepared. */\n    async getBroadcasters(options: { tokenAddress: string }): Promise<BroadcasterClient[]> {\n        const token = getAddress(options.tokenAddress);\n        if (!this.deployment.broadcasterRegistry)\n            throw new Error(\"broadcaster registry is not configured\");\n        const rpc = sources.get(this);\n        if (!rpc) throw new Error(\"broadcaster discovery requires Protocol.fromRpc\");\n        const clients: BroadcasterClient[] = [];\n        let after: `0x${string}` | undefined;\n        let block: Awaited<ReturnType<ProtocolRpcClient[\"getBroadcasters\"]>>[\"block\"] | undefined;\n        const seen = new Set<string>();\n        do {\n            const page = await rpc.getBroadcasters({\n                enabled: true,\n                limit: 100,\n                ...(after ? { after } : {}),\n                ...(block ? { block } : {}),\n            });\n            block ??= page.block;\n            const compatible = await Promise.all(\n                page.broadcasters.map(async (entry) => {\n                    if (!entry.enabled) return undefined;\n                    try {\n                        const client = new BroadcasterClient(entry);\n                        await client.fee(token);\n                        return client;\n                    } catch {\n                        return undefined;\n                    }\n                })\n            );\n            clients.push(\n                ...compatible.filter((client): client is BroadcasterClient => client !== undefined)\n            );\n            after = page.next;\n            if (after && seen.has(after)) throw new Error(\"repeated broadcaster pagination cursor\");\n            if (after) seen.add(after);\n        } while (after);\n        return clients;\n    }\n}\n","import type { TransactionCall } from \"@invisi-labs/protocol\";\nimport { broadcasterRegistryAbi, type Address, type Hex } from \"@invisi-labs/protocol/contracts\";\nimport { getAddress, Interface, keccak256, type Provider } from \"ethers\";\n\nexport interface BroadcasterRegistration {\n    endpoint: string;\n    metadataURI?: string;\n    quoteSigner: Address;\n    feeRecipient: Address;\n}\n\nexport interface RegisteredBroadcaster extends Required<BroadcasterRegistration> {\n    operator: Address;\n    enabled: boolean;\n}\n\nexport interface BroadcasterRegistryOptions {\n    provider: Provider;\n    address: Address;\n    chainId: bigint;\n    fromBlock: number;\n    runtimeCodeHash: string;\n    /** Maximum blocks per getLogs request. Defaults to 2,000. */\n    blockRange?: number;\n}\n\nconst abi = new Interface(broadcasterRegistryAbi);\n\nfunction address(value: string): Address {\n    const normalized = getAddress(value) as Address;\n    if (BigInt(normalized) === 0n) throw new Error(\"zero broadcaster address\");\n    return normalized;\n}\n\n/** Optional on-chain discovery. Registry entries do not authorize spending or endorse operators. */\nexport class BroadcasterRegistry {\n    readonly address: Address;\n    readonly #options: Readonly<BroadcasterRegistryOptions>;\n\n    constructor(options: BroadcasterRegistryOptions) {\n        this.address = address(options.address);\n        const blockRange = options.blockRange ?? 2_000;\n        if (\n            options.chainId <= 0n ||\n            !Number.isSafeInteger(options.fromBlock) ||\n            options.fromBlock < 0 ||\n            !Number.isSafeInteger(blockRange) ||\n            blockRange < 1 ||\n            blockRange > 100_000 ||\n            !/^0x[0-9a-fA-F]{64}$/.test(options.runtimeCodeHash)\n        )\n            throw new Error(\"invalid broadcaster registry configuration\");\n        this.#options = Object.freeze({ ...options, blockRange });\n    }\n\n    prepareRegistration(registration: BroadcasterRegistration): TransactionCall {\n        const { endpoint, metadataURI = \"\" } = registration;\n        if (\n            !endpoint.startsWith(\"https://\") ||\n            endpoint.length <= 8 ||\n            endpoint.length > 2048 ||\n            /[^\\x21-\\x7e]/.test(endpoint)\n        )\n            throw new Error(\"broadcaster endpoint must be a printable HTTPS URI\");\n        // Parse locally for a useful error; the registry additionally enforces its byte limits.\n        const url = new URL(endpoint);\n        if (!url.hostname || url.username || url.password) {\n            throw new Error(\"broadcaster HTTPS endpoint must not include credentials\");\n        }\n        if (metadataURI.length > 2048 || /[^\\x21-\\x7e]/.test(metadataURI)) {\n            throw new Error(\"invalid broadcaster metadata URI\");\n        }\n        return this.call(\"setBroadcaster\", [\n            endpoint,\n            metadataURI,\n            address(registration.quoteSigner),\n            address(registration.feeRecipient),\n        ]);\n    }\n\n    prepareAvailability(enabled: boolean): TransactionCall {\n        return this.call(\"setEnabled\", [enabled]);\n    }\n\n    private call(name: string, args: readonly unknown[]): TransactionCall {\n        return { to: this.address, data: abi.encodeFunctionData(name, args) as Hex, value: 0n };\n    }\n\n    private async validate(): Promise<void> {\n        const { provider, chainId, runtimeCodeHash } = this.#options;\n        if ((await provider.getNetwork()).chainId !== chainId) {\n            throw new Error(\"broadcaster registry chain mismatch\");\n        }\n        if (\n            keccak256(await provider.getCode(this.address)).toLowerCase() !==\n            runtimeCodeHash.toLowerCase()\n        ) {\n            throw new Error(\"broadcaster registry runtime code mismatch\");\n        }\n    }\n\n    async get(operator: Address): Promise<RegisteredBroadcaster> {\n        await this.validate();\n        return this.read(address(operator));\n    }\n\n    private async read(operator: Address): Promise<RegisteredBroadcaster> {\n        const result = await this.#options.provider.call(this.call(\"broadcasterOf\", [operator]));\n        const [entry] = abi.decodeFunctionResult(\"broadcasterOf\", result);\n        return {\n            operator,\n            endpoint: entry.endpoint,\n            metadataURI: entry.metadataURI,\n            quoteSigner: address(entry.quoteSigner),\n            feeRecipient: address(entry.feeRecipient),\n            enabled: entry.enabled,\n        };\n    }\n\n    /** Discover event operators, then read their latest entry; disabled services remain explicit. */\n    async discover(\n        options: { toBlock?: number; signal?: AbortSignal } = {}\n    ): Promise<RegisteredBroadcaster[]> {\n        const { provider, fromBlock, blockRange } = this.#options;\n        options.signal?.throwIfAborted();\n        await this.validate();\n        const toBlock = options.toBlock ?? (await provider.getBlockNumber());\n        if (!Number.isSafeInteger(toBlock) || toBlock < fromBlock) {\n            throw new Error(\"invalid broadcaster discovery block range\");\n        }\n        const operators = new Set<Address>();\n        for (let start = fromBlock; start <= toBlock;) {\n            options.signal?.throwIfAborted();\n            const end = Math.min(start + blockRange! - 1, toBlock);\n            const logs = await provider.getLogs({\n                address: this.address,\n                topics: [abi.getEvent(\"BroadcasterSet\")!.topicHash],\n                fromBlock: start,\n                toBlock: end,\n            });\n            for (const log of logs) {\n                if (getAddress(log.address) !== this.address)\n                    throw new Error(\"registry event address mismatch\");\n                const event = abi.parseLog(log);\n                if (!event || event.name !== \"BroadcasterSet\")\n                    throw new Error(\"invalid registry event\");\n                operators.add(address(event.args.operator));\n            }\n            start = end + 1;\n        }\n        const entries: RegisteredBroadcaster[] = [];\n        for (const operator of operators) {\n            options.signal?.throwIfAborted();\n            entries.push(await this.read(operator));\n        }\n        return entries;\n    }\n}\n","import { ProtocolRpcClient as RpcClient } from \"@invisi-labs/rpc\";\nimport type { Provider } from \"ethers\";\nimport { EthersChainReader } from \"../integrations/ethers\";\n\n/** Protocol RPC transport with ethers provider integration for independent chain checks. */\nexport class ProtocolRpcClient extends RpcClient {\n    withProvider(provider: Provider): RpcClient {\n        return this.withReader(new EthersChainReader(provider));\n    }\n}\n","import { computeNoteIdentity, computeNoteCommitment, Wallet } from \"@invisi-labs/core\";\nimport type { Protocol, Membership, CanonicalBlock } from \"@invisi-labs/protocol\";\nimport type { NoteInput } from \"../transactions/explicit-types\";\nimport { decodePaymentNote, encodePaymentNote } from \"./codec\";\nimport type { PaymentNoteData } from \"./types\";\nimport {\n    verifyPaymentNote,\n    verificationOptions,\n    type PaymentNoteVerificationSettings,\n    type PaymentNoteVerificationOptions,\n} from \"./verification\";\n\nconst verification = Symbol(\"PaymentNote verification\");\nexport class VerifiedPaymentNote {\n    readonly #membership: Membership;\n    readonly #checkedAt: CanonicalBlock;\n    constructor(token: symbol, membership: Membership, checkedAt: CanonicalBlock) {\n        if (token !== verification) throw new Error(\"Payment note verification required\");\n        this.#membership = structuredClone(membership);\n        this.#checkedAt = structuredClone(checkedAt);\n    }\n    get membership(): Membership {\n        return structuredClone(this.#membership);\n    }\n    get checkedAt(): CanonicalBlock {\n        return structuredClone(this.#checkedAt);\n    }\n}\nexport class SpendablePaymentNote extends VerifiedPaymentNote {\n    readonly #input: NoteInput;\n    readonly #spendabilityCheckedAt: CanonicalBlock;\n    constructor(\n        token: symbol,\n        input: NoteInput,\n        membership: Membership,\n        checkedAt: CanonicalBlock,\n        spendabilityCheckedAt: CanonicalBlock\n    ) {\n        super(token, membership, checkedAt);\n        this.#input = structuredClone(input);\n        this.#spendabilityCheckedAt = structuredClone(spendabilityCheckedAt);\n        Object.freeze(this);\n    }\n    get spendabilityCheckedAt(): CanonicalBlock {\n        return structuredClone(this.#spendabilityCheckedAt);\n    }\n    toInput(): NoteInput {\n        return structuredClone(this.#input);\n    }\n}\n/** A validated Note opening, independent of an indexed wallet store. */\nexport class PaymentNote implements PaymentNoteData {\n    readonly chainId: bigint;\n    readonly protocolAddress: PaymentNoteData[\"protocolAddress\"];\n    readonly tokenAddress: PaymentNoteData[\"tokenAddress\"];\n    readonly amount: bigint;\n    readonly ownerAddress: PaymentNoteData[\"ownerAddress\"];\n    readonly nonce: bigint;\n    readonly commitment: PaymentNoteData[\"commitment\"];\n    readonly ipn: string;\n    private constructor(data: PaymentNoteData, ipn: string) {\n        this.chainId = data.chainId;\n        this.protocolAddress = data.protocolAddress;\n        this.tokenAddress = data.tokenAddress;\n        this.amount = data.amount;\n        this.ownerAddress = data.ownerAddress;\n        this.nonce = data.nonce;\n        this.commitment = data.commitment;\n        this.ipn = ipn;\n        Object.freeze(this);\n    }\n    static async from(ipn: string): Promise<PaymentNote> {\n        const data = decodePaymentNote(ipn);\n        const identity = await computeNoteIdentity(BigInt(data.ownerAddress), data.nonce);\n        const commitment = await computeNoteCommitment(\n            data.chainId,\n            identity,\n            BigInt(data.tokenAddress),\n            data.amount\n        );\n        if (commitment !== data.commitment) throw new Error(\"Payment note commitment mismatch\");\n        return new PaymentNote(data, encodePaymentNote(data));\n    }\n    async verify(\n        protocol: Protocol,\n        options: PaymentNoteVerificationOptions | PaymentNoteVerificationSettings = {}\n    ): Promise<VerifiedPaymentNote> {\n        const result = await verifyPaymentNote(\n            this.data(),\n            protocol,\n            verificationOptions(protocol, options)\n        );\n        const verified = new VerifiedPaymentNote(verification, result.membership, result.checkedAt);\n        Object.freeze(verified);\n        return verified;\n    }\n    async verifySpendable(\n        protocol: Protocol,\n        wallet: Wallet,\n        options: PaymentNoteVerificationOptions | PaymentNoteVerificationSettings = {}\n    ): Promise<SpendablePaymentNote> {\n        if (!(wallet instanceof Wallet))\n            throw new Error(\"Wallet spending authorization capability required\");\n        const result = await verifyPaymentNote(\n            this.data(),\n            protocol,\n            verificationOptions(protocol, options),\n            wallet\n        );\n        return new SpendablePaymentNote(\n            verification,\n            result.input,\n            result.membership,\n            result.checkedAt,\n            result.spendabilityCheckedAt!\n        );\n    }\n    private data(): PaymentNoteData {\n        const { chainId, protocolAddress, tokenAddress, amount, ownerAddress, nonce, commitment } =\n            this;\n        return { chainId, protocolAddress, tokenAddress, amount, ownerAddress, nonce, commitment };\n    }\n}\n","import { protocolConnection } from \"../protocol/connections\";\nimport {\n    poseidonHash,\n    TREE_DEPTH,\n    type Wallet,\n    type Note,\n    computeNoteNullifier,\n} from \"@invisi-labs/core\";\nimport type { CanonicalBlock, ChainReader, Membership, Protocol } from \"@invisi-labs/protocol\";\nimport type { ProtocolRpcClient } from \"@invisi-labs/rpc\";\nimport { getAddress, type Provider } from \"ethers\";\nimport { EthersChainReader } from \"../integrations/ethers\";\nimport type { NoteInput } from \"../transactions/explicit-types\";\nimport type { PaymentNoteData } from \"./types\";\n\n/** Supply connections for manually constructed Protocols; fromRpc connections are reused. */\nexport type PaymentNoteVerificationOptions = {\n    protocolRpc: Pick<ProtocolRpcClient, \"withReader\">;\n    confirmations?: number;\n} & ({ provider: Provider; chainReader?: never } | { chainReader: ChainReader; provider?: never });\n\nexport type PaymentNoteVerificationSettings = { confirmations?: number };\nexport function verificationOptions(\n    protocol: Protocol,\n    options: PaymentNoteVerificationOptions | PaymentNoteVerificationSettings = {}\n): PaymentNoteVerificationOptions {\n    const connected = protocolConnection(protocol);\n    const resolved = { ...connected, ...options };\n    if (\n        !(\"protocolRpc\" in resolved) ||\n        !resolved.protocolRpc ||\n        (!(\"chainReader\" in resolved) && !(\"provider\" in resolved))\n    )\n        throw new Error(\n            \"Payment note verification requires Protocol.fromRpc or explicit chain and Protocol RPC connections\"\n        );\n    return resolved as PaymentNoteVerificationOptions;\n}\n\nfunction sameBlock(a: CanonicalBlock, b: CanonicalBlock): boolean {\n    return (\n        a.number === b.number &&\n        a.hash === b.hash &&\n        a.parentHash === b.parentHash &&\n        a.timestamp === b.timestamp\n    );\n}\nexport function asNote(data: PaymentNoteData): Note {\n    return {\n        chainId: data.chainId,\n        protocolAddress: BigInt(data.protocolAddress),\n        tokenAddress: BigInt(data.tokenAddress),\n        amount: data.amount,\n        ownerAddress: data.ownerAddress,\n        nonce: data.nonce,\n    };\n}\nexport async function verifyPaymentNote(\n    data: PaymentNoteData,\n    protocol: Protocol,\n    options: PaymentNoteVerificationOptions,\n    wallet?: Wallet\n): Promise<{\n    input: NoteInput;\n    membership: Membership;\n    checkedAt: CanonicalBlock;\n    spendabilityCheckedAt?: CanonicalBlock;\n}> {\n    if (\n        data.chainId !== protocol.context.chainId ||\n        getAddress(data.protocolAddress) !== getAddress(protocol.context.protocolAddress)\n    )\n        throw new Error(\"Payment note protocol context mismatch\");\n    const confirmations = options.confirmations ?? 1;\n    if (!Number.isSafeInteger(confirmations) || confirmations < 1)\n        throw new RangeError(\"confirmations must be positive\");\n    const reader = options.chainReader ?? new EthersChainReader(options.provider!);\n    await protocol.validateDeployment(reader);\n    if (wallet && getAddress(wallet.ownerAddress) !== getAddress(data.ownerAddress))\n        throw new Error(\"Payment note owner mismatch\");\n    if (wallet) {\n        if (typeof wallet.exportAuthorization !== \"function\")\n            throw new Error(\"Wallet spending authorization capability required\");\n        const authorization = wallet.exportAuthorization();\n        if (getAddress(authorization.ownerAddress) !== getAddress(data.ownerAddress))\n            throw new Error(\"Wallet authorization owner mismatch\");\n    }\n    const latest = await reader.getLatestBlockNumber();\n    const number = latest - BigInt(confirmations - 1);\n    if (number < protocol.deployment.protocol.fromBlock)\n        throw new Error(\"Insufficient confirmed blocks\");\n    const rpc = options.protocolRpc.withReader(reader);\n    const status = await rpc.getStatus(protocol.context);\n    if (!status.indexedHead) throw new Error(\"Protocol RPC has no indexed blocks\");\n    const indexedNumber = status.indexedHead.number < number ? status.indexedHead.number : number;\n    if (indexedNumber < protocol.deployment.protocol.fromBlock)\n        throw new Error(\"Protocol RPC has not reached the deployment\");\n    const checkedAt = await reader.getBlock(indexedNumber);\n    if (checkedAt.number !== indexedNumber)\n        throw new Error(\"Payment note confirmation block mismatch\");\n    const result = await rpc.getNote(protocol.context, data.commitment, checkedAt);\n    if (!result) throw new Error(\"Payment note is not indexed at the requested confirmed block\");\n    const { output, membership } = result;\n    if (\n        output.commitment !== data.commitment ||\n        getAddress(output.tokenAddress) !== getAddress(data.tokenAddress) ||\n        membership.leaf !== data.commitment ||\n        membership.treeId !== output.treeId ||\n        membership.leafIndex !== output.leafIndex ||\n        membership.block.number > checkedAt.number ||\n        output.block.number > checkedAt.number ||\n        membership.path.length !== TREE_DEPTH ||\n        !Number.isSafeInteger(output.leafIndex) ||\n        output.leafIndex < 0 ||\n        output.leafIndex >= 2 ** TREE_DEPTH\n    )\n        throw new Error(\"Payment note membership metadata mismatch\");\n    let root = BigInt(data.commitment);\n    for (let level = 0; level < membership.path.length; level++) {\n        const sibling = membership.path[level]!;\n        root = BigInt(\n            await poseidonHash((output.leafIndex >> level) & 1 ? [sibling, root] : [root, sibling])\n        );\n    }\n    if (\n        root !== BigInt(membership.root) ||\n        !(await reader.isKnownRoot(protocol.context, membership.treeId, membership.root, checkedAt))\n    )\n        throw new Error(\"Payment note membership root is not accepted on chain\");\n    if (\n        !sameBlock(output.block, await reader.getBlock(output.block.number)) ||\n        !sameBlock(membership.block, await reader.getBlock(membership.block.number))\n    )\n        throw new Error(\"Payment note block is no longer canonical\");\n    let spendabilityCheckedAt: CanonicalBlock | undefined;\n    if (wallet) {\n        // Spendability concerns current state, not just the confirmed historical anchor.\n        const current = await reader.getBlock(await reader.getLatestBlockNumber());\n        const nullifier = await computeNoteNullifier(data.chainId, data.nonce, data.commitment);\n        const spent = await reader.isSpent(protocol.context, [nullifier], current);\n        if (spent.length !== 1 || spent[0] !== false)\n            throw new Error(\"Payment note is already spent\");\n        if (\n            !(await reader.isKnownRoot(\n                protocol.context,\n                membership.treeId,\n                membership.root,\n                current\n            ))\n        )\n            throw new Error(\"Payment note membership root is no longer spendable\");\n        if (!sameBlock(current, await reader.getBlock(current.number)))\n            throw new Error(\"Spendability block reorganized\");\n        spendabilityCheckedAt = current;\n    }\n    if (!sameBlock(checkedAt, await reader.getBlock(checkedAt.number)))\n        throw new Error(\"Payment note verification block reorganized\");\n    return {\n        input: {\n            note: asNote(data),\n            commitment: data.commitment,\n            treeId: output.treeId,\n            leafIndex: output.leafIndex,\n        },\n        membership,\n        checkedAt,\n        ...(spendabilityCheckedAt ? { spendabilityCheckedAt } : {}),\n    };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AAkBP,SAAS,6BAA6B;;;ACOtC,SAAS,MAAM,OAAgB,SAAgC;AAC3D,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,OAAO;AACvC;AAEA,SAAS,UAAU,OAAiD;AAChE,QAAM,sBAAsB,KAAK,MAAM,eAAe,GAAG,qCAAqC;AAC9F;AAAA,IACI,OAAO,MAAM,WAAW,YAAY,MAAM,SAAS,MAAM,MAAM,SAAS,MAAM;AAAA,IAC9E;AAAA,EACJ;AACA;AAAA,IACI,OAAO,cAAc,MAAM,SAAS,KAAK,MAAM,aAAa,KAAK,MAAM,YAAY;AAAA,IACnF;AAAA,EACJ;AACA,QAAM,CAAC,SAAS,SAAS,SAAS,EAAE,SAAS,MAAM,IAAI,GAAG,mCAAmC;AAC7F,SAAO;AAAA,IACH,iBAAiB,MAAM,gBAAgB,YAAY;AAAA,IACnD,QAAQ,MAAM;AAAA,IACd,WAAW,MAAM;AAAA,IACjB,MAAM,MAAM;AAAA,EAChB;AACJ;AAKO,IAAM,qBAAN,MAAyB;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EAET,YACI,SAGF;AACE,UAAM,gBAAgB,QAAQ,iBAAiB;AAC/C;AAAA,MACI,OAAO,cAAc,aAAa,KAAK,iBAAiB;AAAA,MACxD;AAAA,IACJ;AACA,SAAK,YAAY,QAAQ;AACzB,SAAK,UACD,cAAc,UAAU,IAAI,kBAAkB,QAAQ,QAAQ,IAAI,QAAQ;AAC9E,SAAK,iBAAiB,OAAO,aAAa;AAC1C,WAAO,OAAO,IAAI;AAAA,EACtB;AAAA,EAEA,MAAc,QAAQ,OAAkD;AACpE,UAAM,KAAK,UAAU,mBAAmB,KAAK,OAAO;AACpD,UAAM,YAAY,MAAM,KAAK,QAAQ,SAAS,MAAM,MAAM;AAC1D;AAAA,MACI,UAAU,WAAW,MAAM,UACvB,UAAU,KAAK,YAAY,MAAM,MAAM,KAAK,YAAY;AAAA,MAC5D;AAAA,IACJ;AACA,UAAM,OAAO,MAAM,KAAK,QAAQ,qBAAqB;AACrD;AAAA,MACI,QAAQ,MAAM,UAAU,OAAO,MAAM,SAAS,MAAM,KAAK;AAAA,MACzD;AAAA,IACJ;AACA;AAAA,MACK,MAAM,KAAK,QAAQ,WAAW,MAAO,KAAK,UAAU,QAAQ;AAAA,MAC7D;AAAA,IACJ;AACA,WAAO,OAAO,MAAM,SAAS;AAAA,EACjC;AAAA;AAAA,EAGA,MAAM,WAAW,OAAyD;AACtE,UAAM,WAAW,UAAU,KAAK;AAChC,UAAM,KAAK,UAAU,mBAAmB,KAAK,OAAO;AACpD,UAAM,WAAW,MAAM,KAAK,QAAQ,WAAW,SAAS,eAAe;AACvE,UAAM,UAAU,+CAA+C;AAC/D,UAAM,UAAU,gBAAgB,QAAQ;AACxC,UAAM,QAAQ,WAAW,WAAW,sDAAsD;AAC1F;AAAA,MACI,QAAQ,gBAAgB,YAAY,MAAM,SAAS;AAAA,MACnD;AAAA,IACJ;AACA;AAAA,MACI,OAAO,QAAQ,MAAM,WAAW,YAC5B,QAAQ,MAAM,UAAU,MACxB,sBAAsB,KAAK,QAAQ,MAAM,IAAI;AAAA,MACjD;AAAA,IACJ;AACA,UAAM,EAAE,QAAQ,IAAI,KAAK;AACzB,UAAM,OAAO,iBAAiB,SAAS,QAAQ,eAAe;AAC9D,UAAM,aAAa,0BAA0B,MAAM,SAAS,QAAQ,MAAM,MAAM,EAAE;AAAA,MAC9E,CAACC,eACGA,WAAU,WAAW,SAAS,UAC9BA,WAAU,cAAc,SAAS,aACjCA,WAAU,SAAS,SAAS,QAC5BA,WAAU,aAAa,YAAY,MAAM,QAAQ,aAAa,YAAY;AAAA,IAClF;AACA;AAAA,MACI,WAAW,WAAW;AAAA,MACtB;AAAA,IACJ;AACA,UAAM,YAAY,WAAW,CAAC;AAC9B,UAAM,gBAAgB,MAAM,KAAK,QAAQ,QAAQ,KAAK;AACtD,WAAO,OAAO,OAAO;AAAA,MACjB,WAAW,OAAO,OAAO,QAAQ;AAAA,MACjC,OAAO,OAAO,OAAO,EAAE,GAAG,QAAQ,MAAM,CAAC;AAAA,MACzC;AAAA,MACA,QAAQ,OAAO,OAAO;AAAA,QAClB,SAAS,QAAQ;AAAA,QACjB,iBAAiB,OAAO,QAAQ,eAAe;AAAA,QAC/C,cAAc,OAAO,QAAQ,YAAY;AAAA,QACzC,kBAAkB,UAAU;AAAA,QAC5B,MAAM,SAAS;AAAA,QACf,YAAY,UAAU,SAAS;AAAA,MACnC,CAAC;AAAA,IACL,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,OAAO,YAAwB,OAAyD;AAC1F,UAAM,WAAW,MAAM,KAAK,WAAW,KAAK;AAC5C,UAAM,SAAS,MAAM,WAAW,OAAO,SAAS,MAAM;AACtD,UAAM,gBAAgB,MAAM,KAAK,QAAQ,SAAS,KAAK;AACvD,WAAO,OAAO,OAAO;AAAA,MACjB,QAAQ,OAAO,OAAO,MAAM;AAAA,MAC5B,OAAO,SAAS;AAAA,MAChB;AAAA,MACA,QAAQ,OAAO,OAAO;AAAA,QAClB,GAAG,SAAS;AAAA,QACZ,YAAY,SAAS,OAAO;AAAA,MAChC,CAAC;AAAA,IACL,CAAC;AAAA,EACL;AAAA,EAEA,SAAS;AACL,WAAO,EAAE,oBAAoB,MAAM,eAAe,KAAK,eAAe,SAAS,EAAE;AAAA,EACrF;AAAA,EAEA,CAAC,uBAAO,IAAI,4BAA4B,CAAC,IAAI;AACzC,WAAO,KAAK,OAAO;AAAA,EACvB;AACJ;;;AC/KA,IAAM,cAAc,oBAAI,QAGtB;AACK,SAAS,2BACZ,UACA,UACA,aACI;AACJ,cAAY,IAAI,UAAU,EAAE,UAAU,YAAY,CAAC;AACvD;AACO,SAAS,mBAAmB,UAAoB;AACnD,SAAO,YAAY,IAAI,QAAQ;AACnC;;;ACjBA,SAAS,YAAY,oBAAoB;AAEzC,SAAS,kBAAiC;AAG1C,IAAM,UAAU,oBAAI,QAA8D;AAG3E,IAAM,WAAN,MAAM,kBAAiB,aAAa;AAAA,EACvC,aAAsB,QAClB,KAEA,UACA,UAAoC,CAAC,GACpB;AACjB,UAAM,WAAW,MAAM,aAAa,QAAQ,KAAK,UAAU,OAAO;AAClE,UAAM,WAAW,IAAI,UAAS,EAAE,YAAY,SAAS,WAAW,CAAC;AACjE,QAAI,IAAI;AACJ,cAAQ,IAAI,UAAU,GAAiD;AAC3E,QAAI,IAAI;AACJ;AAAA,QACI;AAAA,QACA;AAAA,QACA;AAAA,MACJ;AACJ,WAAO;AAAA,EACX;AAAA;AAAA,EAGA,MAAM,gBAAgB,SAAiE;AACnF,UAAM,QAAQ,WAAW,QAAQ,YAAY;AAC7C,QAAI,CAAC,KAAK,WAAW;AACjB,YAAM,IAAI,MAAM,wCAAwC;AAC5D,UAAM,MAAM,QAAQ,IAAI,IAAI;AAC5B,QAAI,CAAC,IAAK,OAAM,IAAI,MAAM,iDAAiD;AAC3E,UAAM,UAA+B,CAAC;AACtC,QAAI;AACJ,QAAI;AACJ,UAAM,OAAO,oBAAI,IAAY;AAC7B,OAAG;AACC,YAAM,OAAO,MAAM,IAAI,gBAAgB;AAAA,QACnC,SAAS;AAAA,QACT,OAAO;AAAA,QACP,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,QACzB,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,MAC7B,CAAC;AACD,gBAAU,KAAK;AACf,YAAM,aAAa,MAAM,QAAQ;AAAA,QAC7B,KAAK,aAAa,IAAI,OAAO,UAAU;AACnC,cAAI,CAAC,MAAM,QAAS,QAAO;AAC3B,cAAI;AACA,kBAAM,SAAS,IAAI,kBAAkB,KAAK;AAC1C,kBAAM,OAAO,IAAI,KAAK;AACtB,mBAAO;AAAA,UACX,QAAQ;AACJ,mBAAO;AAAA,UACX;AAAA,QACJ,CAAC;AAAA,MACL;AACA,cAAQ;AAAA,QACJ,GAAG,WAAW,OAAO,CAAC,WAAwC,WAAW,MAAS;AAAA,MACtF;AACA,cAAQ,KAAK;AACb,UAAI,SAAS,KAAK,IAAI,KAAK,EAAG,OAAM,IAAI,MAAM,wCAAwC;AACtF,UAAI,MAAO,MAAK,IAAI,KAAK;AAAA,IAC7B,SAAS;AACT,WAAO;AAAA,EACX;AACJ;;;AHyBA,SAAS,mBAAmB,wBAAwB;;;AI7FpD,SAAS,8BAAsD;AAC/D,SAAS,cAAAC,aAAY,WAAW,iBAAgC;AAwBhE,IAAM,MAAM,IAAI,UAAU,sBAAsB;AAEhD,SAAS,QAAQ,OAAwB;AACrC,QAAM,aAAaA,YAAW,KAAK;AACnC,MAAI,OAAO,UAAU,MAAM,GAAI,OAAM,IAAI,MAAM,0BAA0B;AACzE,SAAO;AACX;AAGO,IAAM,sBAAN,MAA0B;AAAA,EACpB;AAAA,EACA;AAAA,EAET,YAAY,SAAqC;AAC7C,SAAK,UAAU,QAAQ,QAAQ,OAAO;AACtC,UAAM,aAAa,QAAQ,cAAc;AACzC,QACI,QAAQ,WAAW,MACnB,CAAC,OAAO,cAAc,QAAQ,SAAS,KACvC,QAAQ,YAAY,KACpB,CAAC,OAAO,cAAc,UAAU,KAChC,aAAa,KACb,aAAa,OACb,CAAC,sBAAsB,KAAK,QAAQ,eAAe;AAEnD,YAAM,IAAI,MAAM,4CAA4C;AAChE,SAAK,WAAW,OAAO,OAAO,EAAE,GAAG,SAAS,WAAW,CAAC;AAAA,EAC5D;AAAA,EAEA,oBAAoB,cAAwD;AACxE,UAAM,EAAE,UAAU,cAAc,GAAG,IAAI;AACvC,QACI,CAAC,SAAS,WAAW,UAAU,KAC/B,SAAS,UAAU,KACnB,SAAS,SAAS,QAClB,eAAe,KAAK,QAAQ;AAE5B,YAAM,IAAI,MAAM,oDAAoD;AAExE,UAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAI,CAAC,IAAI,YAAY,IAAI,YAAY,IAAI,UAAU;AAC/C,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC7E;AACA,QAAI,YAAY,SAAS,QAAQ,eAAe,KAAK,WAAW,GAAG;AAC/D,YAAM,IAAI,MAAM,kCAAkC;AAAA,IACtD;AACA,WAAO,KAAK,KAAK,kBAAkB;AAAA,MAC/B;AAAA,MACA;AAAA,MACA,QAAQ,aAAa,WAAW;AAAA,MAChC,QAAQ,aAAa,YAAY;AAAA,IACrC,CAAC;AAAA,EACL;AAAA,EAEA,oBAAoB,SAAmC;AACnD,WAAO,KAAK,KAAK,cAAc,CAAC,OAAO,CAAC;AAAA,EAC5C;AAAA,EAEQ,KAAK,MAAc,MAA2C;AAClE,WAAO,EAAE,IAAI,KAAK,SAAS,MAAM,IAAI,mBAAmB,MAAM,IAAI,GAAU,OAAO,GAAG;AAAA,EAC1F;AAAA,EAEA,MAAc,WAA0B;AACpC,UAAM,EAAE,UAAU,SAAS,gBAAgB,IAAI,KAAK;AACpD,SAAK,MAAM,SAAS,WAAW,GAAG,YAAY,SAAS;AACnD,YAAM,IAAI,MAAM,qCAAqC;AAAA,IACzD;AACA,QACI,UAAU,MAAM,SAAS,QAAQ,KAAK,OAAO,CAAC,EAAE,YAAY,MAC5D,gBAAgB,YAAY,GAC9B;AACE,YAAM,IAAI,MAAM,4CAA4C;AAAA,IAChE;AAAA,EACJ;AAAA,EAEA,MAAM,IAAI,UAAmD;AACzD,UAAM,KAAK,SAAS;AACpB,WAAO,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,EACtC;AAAA,EAEA,MAAc,KAAK,UAAmD;AAClE,UAAM,SAAS,MAAM,KAAK,SAAS,SAAS,KAAK,KAAK,KAAK,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACvF,UAAM,CAAC,KAAK,IAAI,IAAI,qBAAqB,iBAAiB,MAAM;AAChE,WAAO;AAAA,MACH;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,aAAa,MAAM;AAAA,MACnB,aAAa,QAAQ,MAAM,WAAW;AAAA,MACtC,cAAc,QAAQ,MAAM,YAAY;AAAA,MACxC,SAAS,MAAM;AAAA,IACnB;AAAA,EACJ;AAAA;AAAA,EAGA,MAAM,SACF,UAAsD,CAAC,GACvB;AAChC,UAAM,EAAE,UAAU,WAAW,WAAW,IAAI,KAAK;AACjD,YAAQ,QAAQ,eAAe;AAC/B,UAAM,KAAK,SAAS;AACpB,UAAM,UAAU,QAAQ,WAAY,MAAM,SAAS,eAAe;AAClE,QAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,WAAW;AACvD,YAAM,IAAI,MAAM,2CAA2C;AAAA,IAC/D;AACA,UAAM,YAAY,oBAAI,IAAa;AACnC,aAAS,QAAQ,WAAW,SAAS,WAAU;AAC3C,cAAQ,QAAQ,eAAe;AAC/B,YAAM,MAAM,KAAK,IAAI,QAAQ,aAAc,GAAG,OAAO;AACrD,YAAM,OAAO,MAAM,SAAS,QAAQ;AAAA,QAChC,SAAS,KAAK;AAAA,QACd,QAAQ,CAAC,IAAI,SAAS,gBAAgB,EAAG,SAAS;AAAA,QAClD,WAAW;AAAA,QACX,SAAS;AAAA,MACb,CAAC;AACD,iBAAW,OAAO,MAAM;AACpB,YAAIA,YAAW,IAAI,OAAO,MAAM,KAAK;AACjC,gBAAM,IAAI,MAAM,iCAAiC;AACrD,cAAM,QAAQ,IAAI,SAAS,GAAG;AAC9B,YAAI,CAAC,SAAS,MAAM,SAAS;AACzB,gBAAM,IAAI,MAAM,wBAAwB;AAC5C,kBAAU,IAAI,QAAQ,MAAM,KAAK,QAAQ,CAAC;AAAA,MAC9C;AACA,cAAQ,MAAM;AAAA,IAClB;AACA,UAAM,UAAmC,CAAC;AAC1C,eAAW,YAAY,WAAW;AAC9B,cAAQ,QAAQ,eAAe;AAC/B,cAAQ,KAAK,MAAM,KAAK,KAAK,QAAQ,CAAC;AAAA,IAC1C;AACA,WAAO;AAAA,EACX;AACJ;;;AC7JA,SAAS,qBAAqB,iBAAiB;AAKxC,IAAM,oBAAN,cAAgC,UAAU;AAAA,EAC7C,aAAa,UAA+B;AACxC,WAAO,KAAK,WAAW,IAAI,kBAAkB,QAAQ,CAAC;AAAA,EAC1D;AACJ;;;ACTA,SAAS,qBAAqB,uBAAuB,cAAc;;;ACCnE;AAAA,EACI;AAAA,EACA;AAAA,EAGA;AAAA,OACG;AAGP,SAAS,cAAAC,mBAAiC;AAYnC,SAAS,oBACZ,UACA,UAA4E,CAAC,GAC/C;AAC9B,QAAM,YAAY,mBAAmB,QAAQ;AAC7C,QAAM,WAAW,EAAE,GAAG,WAAW,GAAG,QAAQ;AAC5C,MACI,EAAE,iBAAiB,aACnB,CAAC,SAAS,eACT,EAAE,iBAAiB,aAAa,EAAE,cAAc;AAEjD,UAAM,IAAI;AAAA,MACN;AAAA,IACJ;AACJ,SAAO;AACX;AAEA,SAAS,UAAU,GAAmB,GAA4B;AAC9D,SACI,EAAE,WAAW,EAAE,UACf,EAAE,SAAS,EAAE,QACb,EAAE,eAAe,EAAE,cACnB,EAAE,cAAc,EAAE;AAE1B;AACO,SAAS,OAAO,MAA6B;AAChD,SAAO;AAAA,IACH,SAAS,KAAK;AAAA,IACd,iBAAiB,OAAO,KAAK,eAAe;AAAA,IAC5C,cAAc,OAAO,KAAK,YAAY;AAAA,IACtC,QAAQ,KAAK;AAAA,IACb,cAAc,KAAK;AAAA,IACnB,OAAO,KAAK;AAAA,EAChB;AACJ;AACA,eAAsB,kBAClB,MACA,UACA,SACA,QAMD;AACC,MACI,KAAK,YAAY,SAAS,QAAQ,WAClCC,YAAW,KAAK,eAAe,MAAMA,YAAW,SAAS,QAAQ,eAAe;AAEhF,UAAM,IAAI,MAAM,wCAAwC;AAC5D,QAAM,gBAAgB,QAAQ,iBAAiB;AAC/C,MAAI,CAAC,OAAO,cAAc,aAAa,KAAK,gBAAgB;AACxD,UAAM,IAAI,WAAW,gCAAgC;AACzD,QAAM,SAAS,QAAQ,eAAe,IAAI,kBAAkB,QAAQ,QAAS;AAC7E,QAAM,SAAS,mBAAmB,MAAM;AACxC,MAAI,UAAUA,YAAW,OAAO,YAAY,MAAMA,YAAW,KAAK,YAAY;AAC1E,UAAM,IAAI,MAAM,6BAA6B;AACjD,MAAI,QAAQ;AACR,QAAI,OAAO,OAAO,wBAAwB;AACtC,YAAM,IAAI,MAAM,mDAAmD;AACvE,UAAM,gBAAgB,OAAO,oBAAoB;AACjD,QAAIA,YAAW,cAAc,YAAY,MAAMA,YAAW,KAAK,YAAY;AACvE,YAAM,IAAI,MAAM,qCAAqC;AAAA,EAC7D;AACA,QAAM,SAAS,MAAM,OAAO,qBAAqB;AACjD,QAAM,SAAS,SAAS,OAAO,gBAAgB,CAAC;AAChD,MAAI,SAAS,SAAS,WAAW,SAAS;AACtC,UAAM,IAAI,MAAM,+BAA+B;AACnD,QAAM,MAAM,QAAQ,YAAY,WAAW,MAAM;AACjD,QAAM,SAAS,MAAM,IAAI,UAAU,SAAS,OAAO;AACnD,MAAI,CAAC,OAAO,YAAa,OAAM,IAAI,MAAM,oCAAoC;AAC7E,QAAM,gBAAgB,OAAO,YAAY,SAAS,SAAS,OAAO,YAAY,SAAS;AACvF,MAAI,gBAAgB,SAAS,WAAW,SAAS;AAC7C,UAAM,IAAI,MAAM,6CAA6C;AACjE,QAAM,YAAY,MAAM,OAAO,SAAS,aAAa;AACrD,MAAI,UAAU,WAAW;AACrB,UAAM,IAAI,MAAM,0CAA0C;AAC9D,QAAM,SAAS,MAAM,IAAI,QAAQ,SAAS,SAAS,KAAK,YAAY,SAAS;AAC7E,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,8DAA8D;AAC3F,QAAM,EAAE,QAAQ,WAAW,IAAI;AAC/B,MACI,OAAO,eAAe,KAAK,cAC3BA,YAAW,OAAO,YAAY,MAAMA,YAAW,KAAK,YAAY,KAChE,WAAW,SAAS,KAAK,cACzB,WAAW,WAAW,OAAO,UAC7B,WAAW,cAAc,OAAO,aAChC,WAAW,MAAM,SAAS,UAAU,UACpC,OAAO,MAAM,SAAS,UAAU,UAChC,WAAW,KAAK,WAAW,cAC3B,CAAC,OAAO,cAAc,OAAO,SAAS,KACtC,OAAO,YAAY,KACnB,OAAO,aAAa,KAAK;AAEzB,UAAM,IAAI,MAAM,2CAA2C;AAC/D,MAAI,OAAO,OAAO,KAAK,UAAU;AACjC,WAAS,QAAQ,GAAG,QAAQ,WAAW,KAAK,QAAQ,SAAS;AACzD,UAAM,UAAU,WAAW,KAAK,KAAK;AACrC,WAAO;AAAA,MACH,MAAM,aAAc,OAAO,aAAa,QAAS,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC;AAAA,IAC1F;AAAA,EACJ;AACA,MACI,SAAS,OAAO,WAAW,IAAI,KAC/B,CAAE,MAAM,OAAO,YAAY,SAAS,SAAS,WAAW,QAAQ,WAAW,MAAM,SAAS;AAE1F,UAAM,IAAI,MAAM,uDAAuD;AAC3E,MACI,CAAC,UAAU,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,MAAM,MAAM,CAAC,KACnE,CAAC,UAAU,WAAW,OAAO,MAAM,OAAO,SAAS,WAAW,MAAM,MAAM,CAAC;AAE3E,UAAM,IAAI,MAAM,2CAA2C;AAC/D,MAAI;AACJ,MAAI,QAAQ;AAER,UAAM,UAAU,MAAM,OAAO,SAAS,MAAM,OAAO,qBAAqB,CAAC;AACzE,UAAM,YAAY,MAAM,qBAAqB,KAAK,SAAS,KAAK,OAAO,KAAK,UAAU;AACtF,UAAM,QAAQ,MAAM,OAAO,QAAQ,SAAS,SAAS,CAAC,SAAS,GAAG,OAAO;AACzE,QAAI,MAAM,WAAW,KAAK,MAAM,CAAC,MAAM;AACnC,YAAM,IAAI,MAAM,+BAA+B;AACnD,QACI,CAAE,MAAM,OAAO;AAAA,MACX,SAAS;AAAA,MACT,WAAW;AAAA,MACX,WAAW;AAAA,MACX;AAAA,IACJ;AAEA,YAAM,IAAI,MAAM,qDAAqD;AACzE,QAAI,CAAC,UAAU,SAAS,MAAM,OAAO,SAAS,QAAQ,MAAM,CAAC;AACzD,YAAM,IAAI,MAAM,gCAAgC;AACpD,4BAAwB;AAAA,EAC5B;AACA,MAAI,CAAC,UAAU,WAAW,MAAM,OAAO,SAAS,UAAU,MAAM,CAAC;AAC7D,UAAM,IAAI,MAAM,6CAA6C;AACjE,SAAO;AAAA,IACH,OAAO;AAAA,MACH,MAAM,OAAO,IAAI;AAAA,MACjB,YAAY,KAAK;AAAA,MACjB,QAAQ,OAAO;AAAA,MACf,WAAW,OAAO;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,wBAAwB,EAAE,sBAAsB,IAAI,CAAC;AAAA,EAC7D;AACJ;;;AD5JA,IAAM,eAAe,uBAAO,0BAA0B;AAC/C,IAAM,sBAAN,MAA0B;AAAA,EACpB;AAAA,EACA;AAAA,EACT,YAAY,OAAe,YAAwB,WAA2B;AAC1E,QAAI,UAAU,aAAc,OAAM,IAAI,MAAM,oCAAoC;AAChF,SAAK,cAAc,gBAAgB,UAAU;AAC7C,SAAK,aAAa,gBAAgB,SAAS;AAAA,EAC/C;AAAA,EACA,IAAI,aAAyB;AACzB,WAAO,gBAAgB,KAAK,WAAW;AAAA,EAC3C;AAAA,EACA,IAAI,YAA4B;AAC5B,WAAO,gBAAgB,KAAK,UAAU;AAAA,EAC1C;AACJ;AACO,IAAM,uBAAN,cAAmC,oBAAoB;AAAA,EACjD;AAAA,EACA;AAAA,EACT,YACI,OACA,OACA,YACA,WACA,uBACF;AACE,UAAM,OAAO,YAAY,SAAS;AAClC,SAAK,SAAS,gBAAgB,KAAK;AACnC,SAAK,yBAAyB,gBAAgB,qBAAqB;AACnE,WAAO,OAAO,IAAI;AAAA,EACtB;AAAA,EACA,IAAI,wBAAwC;AACxC,WAAO,gBAAgB,KAAK,sBAAsB;AAAA,EACtD;AAAA,EACA,UAAqB;AACjB,WAAO,gBAAgB,KAAK,MAAM;AAAA,EACtC;AACJ;AAEO,IAAM,cAAN,MAAM,aAAuC;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACD,YAAY,MAAuB,KAAa;AACpD,SAAK,UAAU,KAAK;AACpB,SAAK,kBAAkB,KAAK;AAC5B,SAAK,eAAe,KAAK;AACzB,SAAK,SAAS,KAAK;AACnB,SAAK,eAAe,KAAK;AACzB,SAAK,QAAQ,KAAK;AAClB,SAAK,aAAa,KAAK;AACvB,SAAK,MAAM;AACX,WAAO,OAAO,IAAI;AAAA,EACtB;AAAA,EACA,aAAa,KAAK,KAAmC;AACjD,UAAM,OAAO,kBAAkB,GAAG;AAClC,UAAM,WAAW,MAAM,oBAAoB,OAAO,KAAK,YAAY,GAAG,KAAK,KAAK;AAChF,UAAM,aAAa,MAAM;AAAA,MACrB,KAAK;AAAA,MACL;AAAA,MACA,OAAO,KAAK,YAAY;AAAA,MACxB,KAAK;AAAA,IACT;AACA,QAAI,eAAe,KAAK,WAAY,OAAM,IAAI,MAAM,kCAAkC;AACtF,WAAO,IAAI,aAAY,MAAM,kBAAkB,IAAI,CAAC;AAAA,EACxD;AAAA,EACA,MAAM,OACF,UACA,UAA4E,CAAC,GACjD;AAC5B,UAAM,SAAS,MAAM;AAAA,MACjB,KAAK,KAAK;AAAA,MACV;AAAA,MACA,oBAAoB,UAAU,OAAO;AAAA,IACzC;AACA,UAAM,WAAW,IAAI,oBAAoB,cAAc,OAAO,YAAY,OAAO,SAAS;AAC1F,WAAO,OAAO,QAAQ;AACtB,WAAO;AAAA,EACX;AAAA,EACA,MAAM,gBACF,UACA,QACA,UAA4E,CAAC,GAChD;AAC7B,QAAI,EAAE,kBAAkB;AACpB,YAAM,IAAI,MAAM,mDAAmD;AACvE,UAAM,SAAS,MAAM;AAAA,MACjB,KAAK,KAAK;AAAA,MACV;AAAA,MACA,oBAAoB,UAAU,OAAO;AAAA,MACrC;AAAA,IACJ;AACA,WAAO,IAAI;AAAA,MACP;AAAA,MACA,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IACX;AAAA,EACJ;AAAA,EACQ,OAAwB;AAC5B,UAAM,EAAE,SAAS,iBAAiB,cAAc,QAAQ,cAAc,OAAO,WAAW,IACpF;AACJ,WAAO,EAAE,SAAS,iBAAiB,cAAc,QAAQ,cAAc,OAAO,WAAW;AAAA,EAC7F;AACJ;","names":["Wallet","candidate","getAddress","getAddress","getAddress"]}

package/dist/receipt-logs-CvC951p7.d.cts

@@ -0,0 +1,318 @@
+import { m as GasBenchmarkProfile, a5 as PreparedOutput, q as NoteOutputContext, s as NoteOutputRecipient, Q as OperationStatus, M as TransactionRuntime, a1 as PreparationIntent, J as OperationPlan, t as SignedBroadcasterQuote, B as BroadcasterClient, W as WithBroadcasterOptions, p as GasReference, v as TransactionProveOptions, O as OperationAggregateMember, C as CancelCreditPreparation, h as CreateCreditPreparation, D as DrawCreditPreparation, S as ShieldPreparation, T as TopUpCreditPreparation, w as TransferPreparation, U as TransactionInfrastructure } from './broadcaster-preparation-DMxxZ_1Q.cjs';
+import { TransactionCall, Protocol, RegistrationPreparation, RegistrationOperation, CanonicalReceipt } from '@invisi-labs/protocol';
+import * as _invisi_labs_core from '@invisi-labs/core';
+import { CreditDeliveryState, PublicWallet, Note, ViewingCapability } from '@invisi-labs/core';
+import { Prover, ProofBundle } from '@invisi-labs/prover';
+import { Hex, Address } from '@invisi-labs/protocol/contracts';
+
+/** Copy trusted benchmark records; validation checks format, not their publisher's honesty. */
+declare function copyGasBenchmarks(profiles: readonly GasBenchmarkProfile[]): GasBenchmarkProfile[];
+/** Parse a trusted, JSON-compatible benchmark catalog. No network access or publisher authentication. */
+declare function defineGasBenchmarks(input: unknown): GasBenchmarkProfile[];
+
+/** Detached final output snapshot, including any generated change. Contains private Note data. */
+declare class TransactionOutput {
+    #private;
+    constructor(output: PreparedOutput);
+    get context(): NoteOutputContext;
+    get recipient(): NoteOutputRecipient;
+    get amount(): bigint;
+    get commitment(): `0x${string}`;
+    get identity(): `0x${string}`;
+    get nonce(): bigint | undefined;
+    get change(): boolean;
+    exportPaymentNote(): string;
+}
+
+type Runtime = TransactionRuntime & {
+    reprepare?: (intent: PreparationIntent) => Promise<OperationPlan>;
+};
+/** An immutable, local transaction handle. No wallet inventory, reservations or persistence. */
+declare class PreparedTransaction {
+    #private;
+    readonly status: OperationStatus;
+    private constructor();
+    static prepare(runtime: Runtime, plan: OperationPlan): PreparedTransaction;
+    broadcasterQuote(): SignedBroadcasterQuote | undefined;
+    withBroadcaster(client: BroadcasterClient, options: WithBroadcasterOptions): Promise<PreparedTransaction>;
+    get id(): string;
+    get kind(): "shield" | "transfer" | "create-credit" | "draw-credit" | "top-up-credit" | "cancel-credit";
+    estimateGas(): GasReference;
+    /** Final Note outputs, including change; Credit outputs are not exported as IPN. */
+    getOutputs(): readonly TransactionOutput[];
+    preview(): {
+        id: string;
+        kind: "shield" | "transfer" | "create-credit" | "draw-credit" | "top-up-credit" | "cancel-credit";
+        status: OperationStatus;
+        context: {
+            tokenAddress: _invisi_labs_core.Address;
+            now?: bigint;
+            timestamp?: bigint;
+            chainId: bigint;
+            protocolAddress: _invisi_labs_core.Address;
+        };
+        inputs: number;
+        inputDetails: ({
+            kind: "notes";
+            commitment: `0x${string}`;
+            amount: bigint;
+            owner: `0x${string}`;
+            treeId: bigint;
+            leafIndex: number;
+        } | {
+            kind: "credits";
+            commitment: `0x${string}`;
+            amount: bigint;
+            owner: `0x${string}`;
+            spender: `0x${string}`;
+            expiry: bigint;
+            role: "owner" | "spender";
+            treeId: bigint;
+            leafIndex: number;
+        })[];
+        funding: {
+            payer: `0x${string}`;
+            amount: bigint;
+            authorization: "signature" | "none" | "caller";
+            sigNonce: bigint;
+            deadline: bigint;
+            permit: {
+                deadline: bigint;
+            };
+        };
+        creditOutputs: {
+            commitment: `0x${string}`;
+            amount: bigint;
+            expiry: bigint;
+            owner: `0x${string}`;
+            spender: `0x${string}`;
+            ownerPayout: bigint;
+            spenderPayout: bigint;
+        }[] | undefined;
+        outputs: {
+            commitment: `0x${string}`;
+            to: string;
+            amount: bigint;
+            change: boolean;
+        }[];
+        capacity: number | undefined;
+        deadline: bigint;
+        feeRecipient: `0x${string}` | undefined;
+        feeAmount: bigint;
+        fundingAmount: bigint;
+        fundingPayer: `0x${string}` | undefined;
+        withdrawalAmount: bigint;
+        withdrawalAddress: `0x${string}` | undefined;
+        permissions: {
+            walletAuthorization: boolean;
+            proof: boolean;
+            fundingAuthorization: boolean;
+        };
+    };
+    /** Obtain a firm quote before signing. This intent contains no private inputs or witness. */
+    exportBroadcasterIntent(): Promise<{
+        sendable: false;
+        data: _invisi_labs_core.Hex;
+    }>;
+    private current;
+    private stage;
+    /** Public EIP-712 request; signing transport and key custody belong to the caller. */
+    exportWalletAuthorization(options?: {
+        signal?: AbortSignal;
+    }): Promise<_invisi_labs_core.SigningRequest>;
+    /** Attach an external EOA signature, retaining its witness only at the private proving boundary. */
+    withWalletSignature(signature: string, options?: {
+        signal?: AbortSignal;
+    }): Promise<PreparedTransaction>;
+    /** Export only after proving when the funding authorization binds an actual proof hash. */
+    exportFundingAuthorization(options?: {
+        signal?: AbortSignal;
+    }): Promise<_invisi_labs_core.SigningRequest>;
+    /** Verify an external signature against this handle's own frozen operation. */
+    withFundingSignature(signature: string, options?: {
+        signal?: AbortSignal;
+    }): Promise<PreparedTransaction>;
+    prove(options?: TransactionProveOptions): Promise<PreparedTransaction>;
+    prove(backend: Prover, options?: TransactionProveOptions): Promise<PreparedTransaction>;
+    private encode;
+    /** Shield caller funding needs no wallet signing or proof; this step only encodes its frozen request. */
+    ready(): Promise<PreparedTransaction>;
+    exportTransaction(): Promise<TransactionCall>;
+    exportProof(): ProofBundle;
+    exportAggregateMember(): OperationAggregateMember;
+    toJSON(): {
+        transaction: boolean;
+        id: string;
+        kind: "shield" | "transfer" | "create-credit" | "draw-credit" | "top-up-credit" | "cancel-credit";
+        status: OperationStatus;
+    };
+}
+
+interface NoteInput {
+    note: Note;
+    commitment: Hex;
+    treeId: bigint;
+    leafIndex: number;
+}
+interface CreditInput {
+    state: CreditDeliveryState;
+    commitment: Hex;
+    treeId: bigint;
+    leafIndex: number;
+    role: "owner" | "spender";
+}
+interface TransactionIdentity {
+    wallet: PublicWallet & {
+        getViewer?: never;
+        getDetector?: never;
+        exportAuthorization?: never;
+    };
+    protocol: Protocol;
+}
+interface ExplicitFunds {
+    inputs: readonly NoteInput[];
+    changeAddress?: string;
+}
+type ExplicitTransferPreparation = TransactionIdentity & TransferPreparation & ExplicitFunds;
+type ExplicitShieldPreparation = TransactionIdentity & ShieldPreparation;
+type ExplicitCreateCreditPreparation = TransactionIdentity & CreateCreditPreparation & ExplicitFunds;
+type ExplicitDrawCreditPreparation = TransactionIdentity & DrawCreditPreparation & {
+    creditInputs: readonly CreditInput[];
+};
+type ExplicitTopUpCreditPreparation = TransactionIdentity & TopUpCreditPreparation & ExplicitFunds & {
+    creditInputs: readonly CreditInput[];
+};
+type ExplicitCancelCreditPreparation = TransactionIdentity & CancelCreditPreparation & {
+    creditInputs: readonly CreditInput[];
+};
+
+/** Compose independent Chain RPC and indexed Protocol RPC with local wallet capabilities. */
+type InvisiOptions = Omit<TransactionInfrastructure, "wallet" | "protocol" | "coinSelector">;
+/** Public wallet and registry-specific inputs; signing remains external. */
+type RegistrationPreparationOptions = Pick<RegistrationPreparation, "update" | "deadline"> & Pick<TransactionIdentity, "wallet">;
+/** Stateless transaction preparation and independent infrastructure composition. */
+declare class Invisi {
+    #private;
+    constructor(options?: InvisiOptions);
+    /** A detached snapshot of shared infrastructure; wallet permissions and persistence stay external. */
+    getInfrastructure(): Readonly<InvisiOptions>;
+    private resolve;
+    /** Discover the selected chain's registry and prepare an independent signing request. */
+    prepareRegistration(options: RegistrationPreparationOptions): Promise<RegistrationOperation>;
+    private assertPublicIdentity;
+    private resolveExplicit;
+    prepareTransfer(options: ExplicitTransferPreparation): Promise<PreparedTransaction>;
+    prepareShield(options: ExplicitShieldPreparation): Promise<PreparedTransaction>;
+    prepareCreateCredit(options: ExplicitCreateCreditPreparation): Promise<PreparedTransaction>;
+    prepareDrawCredit(options: ExplicitDrawCreditPreparation): Promise<PreparedTransaction>;
+    prepareTopUpCredit(options: ExplicitTopUpCreditPreparation): Promise<PreparedTransaction>;
+    prepareCancelCredit(options: ExplicitCancelCreditPreparation): Promise<PreparedTransaction>;
+    toJSON(): {
+        invisi: boolean;
+    };
+}
+
+/** Stable codes returned by public SDK prepare* methods; inspect details instead of matching messages. */
+type InvisiErrorCode = 
+/**
+ * Other preparation failure, such as invalid amounts, expired deadlines,
+ * or conflicting registration state. Inspect message and cause.
+ */
+"PREPARATION_FAILED"
+/**
+ * Required infrastructure or permissions were not supplied.
+ * The capability field identifies what is missing.
+ */
+ | "MISSING_CAPABILITY"
+/**
+ * The recipient string is not a valid full 0i address or nonzero EVM owner address.
+ * No registration lookup is attempted for this invalid string.
+ */
+ | "INVALID_RECIPIENT"
+/**
+ * A successful lookup found no receiving keys for this short 0x owner
+ * at the queried state. Indexed data may lag behind the latest chain state.
+ * Full 0i addresses contain receiving keys and do not require registration.
+ */
+ | "EVM_ADDRESS_NOT_REGISTERED"
+/**
+ * Recipient lookup failed or returned invalid keys. Inspect cause.
+ * Registration status is unknown; this does not mean the owner is unregistered.
+ */
+ | "RECIPIENT_LOOKUP_FAILED";
+interface InvisiErrorDetails {
+    operation?: string;
+    address?: string;
+    /** Zero-based index into the caller's outputs array, excluding automatic change. */
+    outputIndex?: number;
+    field?: string;
+    capability?: string;
+    cause?: unknown;
+}
+/** Stable application-facing preparation failure with the original cause. */
+declare class InvisiError extends Error {
+    readonly code: InvisiErrorCode;
+    readonly operation: string | undefined;
+    readonly address: string | undefined;
+    readonly outputIndex: number | undefined;
+    readonly field: string | undefined;
+    readonly capability: string | undefined;
+    constructor(code: InvisiErrorCode, message: string, details?: InvisiErrorDetails);
+}
+/** Keep nested failures intact; do not infer business codes from English messages. */
+declare function prepareWithErrors<T>(operation: string, prepare: () => Promise<T>): Promise<T>;
+
+interface DiscoveryContext {
+    chainId: bigint;
+    protocolAddress: Address;
+}
+/** Decoded logs from complete canonical transaction receipts, including insertion logs. */
+interface DeliveryEventLog {
+    address: string;
+    eventName: string;
+    args?: Record<string, unknown>;
+    blockNumber?: bigint | null;
+    blockHash?: Hex | null;
+    transactionHash?: Hex | null;
+    logIndex?: number | null;
+    removed?: boolean;
+}
+interface DeliveryCandidate {
+    tokenAddress: Address;
+    treeId: bigint;
+    leafIndex: number;
+    commitment: Hex;
+    role: "funds" | "owner" | "spender";
+    delivery: {
+        ciphertext: Hex;
+        clue: Hex;
+    };
+    blockNumber: bigint;
+    blockHash: Hex;
+    transactionHash: Hex;
+}
+/** Correlate deliveries with canonical insertion events, never service-supplied balances or positions.
+ * The caller selects a confirmed chain/deployment and supplies complete decoded receipts.
+ */
+declare function extractDeliveryCandidates(logs: readonly DeliveryEventLog[], context: DiscoveryContext, confirmedThrough: bigint): DeliveryCandidate[];
+interface DiscoveredNote extends Omit<DeliveryCandidate, "delivery" | "role"> {
+    note: Note;
+}
+interface DiscoveredCredit extends Omit<DeliveryCandidate, "delivery"> {
+    role: "owner" | "spender";
+    state: CreditDeliveryState;
+}
+/** Authenticate private deliveries from a single batch of canonical receipts. */
+declare function decryptCandidates(logs: readonly DeliveryEventLog[], options: {
+    context: DiscoveryContext;
+    viewing: Pick<ViewingCapability, "ownerAddress" | "decryptNote" | "decryptCredit">;
+    confirmedThrough: bigint;
+}): Promise<{
+    notes: DiscoveredNote[];
+    credits: DiscoveredCredit[];
+}>;
+
+/** Decode independently fetched canonical receipt bytes, never normalized service events. */
+declare function readProtocolLogs(receipt: CanonicalReceipt, protocolAddress: Address): DeliveryEventLog[];
+
+export { type CreditInput as C, type DeliveryEventLog as D, type ExplicitCancelCreditPreparation as E, Invisi as I, type NoteInput as N, PreparedTransaction as P, type RegistrationPreparationOptions as R, type TransactionIdentity as T, type DiscoveredCredit as a, type DiscoveredNote as b, type ExplicitCreateCreditPreparation as c, type ExplicitDrawCreditPreparation as d, type ExplicitShieldPreparation as e, type ExplicitTopUpCreditPreparation as f, type ExplicitTransferPreparation as g, InvisiError as h, type InvisiErrorCode as i, type InvisiErrorDetails as j, type InvisiOptions as k, TransactionOutput as l, decryptCandidates as m, defineGasBenchmarks as n, type DeliveryCandidate as o, type DiscoveryContext as p, copyGasBenchmarks as q, readProtocolLogs as r, extractDeliveryCandidates as s, prepareWithErrors as t };