@invisi-labs/sdk 1.1.6 → 1.2.0

package/dist/chunk-MA2QZEF5.cjs

@@ -0,0 +1,399 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+
+
+var _chunk4SDP53YQcjs = require('./chunk-4SDP53YQ.cjs');
+
+
+var _chunkLOR6PYH5cjs = require('./chunk-LOR6PYH5.cjs');
+
+// src/credit/state.ts
+
+
+
+var _primitives = require('@invisi-labs/primitives');
+async function creditLeaf(state) {
+  return _primitives.computeCreditCommitment.call(void 0, state.note);
+}
+async function assertCreditUpdatePlan(plan) {
+  const credit = plan.credit;
+  if (!_optionalChain([credit, 'optionalAccess', _ => _.update])) return;
+  const input = credit.inputs[0], output = credit.outputs[0], changes = credit.updateChanges;
+  if (!input || !output || !changes)
+    throw Error("Credit update input, output and adjustment required");
+  const derived = await _primitives.deriveCreditUpdate.call(void 0, input.state.note, changes, plan.deadline);
+  if (derived.nullifier !== credit.update.nullifier || derived.stateCommitment !== credit.update.creditCommitment || output.commitment !== derived.stateCommitment || await _primitives.computeCreditCommitment.call(void 0, output.state.note) !== derived.stateCommitment)
+    throw Error("Credit update adjustment does not match frozen successor");
+}
+
+// src/notes/recipient-infrastructure.ts
+
+
+
+
+var _rpc = require('@invisi-labs/rpc');
+var recipientInfrastructure = /* @__PURE__ */ Symbol("SDK recipient infrastructure");
+function configureRecipientInfrastructure(options) {
+  const { provider, protocolRpc, chainReader } = options;
+  const registry = options.protocol.deployment.registry;
+  const deployment = options.protocol.deployment;
+  const lookup = (source) => async (ownerAddress) => {
+    if (!registry) throw new (0, _primitives.MissingCapabilityError)("receiving-key registry deployment");
+    if (source === "chain") {
+      if (!provider)
+        throw new (0, _primitives.MissingCapabilityError)("ethers provider for registry lookup");
+      return new (0, _chunkLOR6PYH5cjs.EthersAddressResolver)(
+        provider,
+        {
+          chainId: deployment.chainId,
+          registryAddress: registry.address
+        },
+        registry.runtimeCodeHash
+      ).lookup(ownerAddress);
+    }
+    if (!(protocolRpc instanceof _rpc.ProtocolRpcClient))
+      throw new (0, _primitives.MissingCapabilityError)("Protocol RPC recipient discovery");
+    const rpc = chainReader ? protocolRpc.withReader(chainReader) : protocolRpc;
+    const discovered = await rpc.getDeployment(deployment.chainId);
+    if (discovered.protocol.address !== deployment.protocol.address || discovered.protocol.runtimeCodeHash !== deployment.protocol.runtimeCodeHash || discovered.protocol.fromBlock !== deployment.protocol.fromBlock || _optionalChain([discovered, 'access', _2 => _2.registry, 'optionalAccess', _3 => _3.address]) !== registry.address || discovered.registry.runtimeCodeHash !== registry.runtimeCodeHash || discovered.registry.fromBlock !== registry.fromBlock)
+      throw new Error("Recipient registry deployment pins mismatch");
+    const registration = await rpc.getReceivingAddress(ownerAddress);
+    return registration ? _primitives.ReceivingAddress.parse(registration.receivingAddress).getReceivingKeys() : null;
+  };
+  return { ...options, [recipientInfrastructure]: lookup };
+}
+function recipientLookup(options, source = "protocol-rpc") {
+  return async (ownerAddress) => {
+    const lookup = options[recipientInfrastructure];
+    if (!lookup) throw new (0, _primitives.MissingCapabilityError)("recipient infrastructure");
+    return lookup(source)(ownerAddress);
+  };
+}
+
+// src/discovery/membership.ts
+
+async function verifyMembership(reader, context, block, input, proof) {
+  if (proof.block.hash !== block.hash || proof.block.number !== block.number || proof.leaf !== input.commitment || proof.treeId !== input.treeId || proof.leafIndex !== input.leafIndex || proof.path.length !== 16 || !Number.isInteger(input.leafIndex) || input.leafIndex < 0 || input.leafIndex >= 65536 || !await reader.isKnownRoot(context, input.treeId, proof.root, block))
+    throw new Error("membership context/root mismatch");
+  let root = BigInt(input.commitment);
+  for (let i = 0; i < 16; i++) {
+    const sibling = proof.path[i];
+    if (typeof sibling !== "bigint" || sibling < 0n || sibling >= _primitives.FIELD_MODULUS)
+      throw new Error("noncanonical membership path");
+    root = BigInt(
+      await _primitives.poseidonHash.call(void 0, input.leafIndex >> i & 1 ? [sibling, root] : [root, sibling])
+    );
+  }
+  if (root !== BigInt(proof.root))
+    throw new Error("membership path does not produce canonical root");
+}
+
+// src/transactions/preparation/prepare-common.ts
+var _ethers = require('ethers');
+
+
+
+
+
+
+
+var _protocol = require('@invisi-labs/protocol');
+
+// src/transactions/preparation/selection.ts
+function selectNotes(notes, target, reserved) {
+  if (typeof target !== "bigint" || target < 0n)
+    throw new Error("selection target must be a nonnegative amount");
+  if (target === 0n) return [];
+  const eligible = notes.filter(
+    (note) => note.spent === "unspent" && !reserved.has(note.commitment)
+  );
+  for (const record of eligible)
+    if (typeof record.note.amount !== "bigint" || record.note.amount <= 0n || record.note.amount >= 1n << 128n)
+      throw new Error("invalid verified note amount");
+  eligible.sort(
+    (a, b) => a.note.amount > b.note.amount ? -1 : a.note.amount < b.note.amount ? 1 : a.treeId < b.treeId ? -1 : a.treeId > b.treeId ? 1 : a.leafIndex - b.leafIndex || a.commitment.localeCompare(b.commitment)
+  );
+  const selected = [];
+  let total = 0n;
+  for (const record of eligible) {
+    selected.push(structuredClone(record));
+    total += record.note.amount;
+    if (total >= target) return selected;
+  }
+  throw new Error("insufficient verified available funds");
+}
+
+// src/transactions/preparation/prepare-common.ts
+function positiveAmount(value, bits = 128) {
+  if (typeof value !== "bigint" || value <= 0n || value >= 1n << BigInt(bits)) {
+    throw new Error(`amount must be a positive uint${bits}`);
+  }
+  return value;
+}
+function copyApplicationPayload(value) {
+  if (value === void 0) return new Uint8Array();
+  if (!(value instanceof Uint8Array)) throw new TypeError("payload must be Uint8Array");
+  return Uint8Array.from(value);
+}
+function positiveOutputAmount(payment, outputIndex) {
+  try {
+    return positiveAmount(payment.amount);
+  } catch (cause) {
+    throw new (0, _chunk4SDP53YQcjs.InvisiError)(
+      "PREPARATION_FAILED",
+      cause instanceof Error ? cause.message : "Invalid output amount",
+      {
+        address: payment.to,
+        field: "amount",
+        ...outputIndex === void 0 ? {} : { outputIndex },
+        cause
+      }
+    );
+  }
+}
+var Preparation = class {
+  constructor(runtime) {
+    this.runtime = runtime;
+  }
+  #roots = /* @__PURE__ */ new Map();
+  async frame(requested) {
+    const { reader, options } = this.runtime;
+    await options.protocol.validateDeployment(reader);
+    const block = await reader.getBlock(await reader.getLatestBlockNumber());
+    const deadline = _nullishCoalesce(requested, () => ( block.timestamp + (_nullishCoalesce(options.transactionTTL, () => ( 300n)))));
+    if (typeof deadline !== "bigint" || deadline < block.timestamp || deadline >= 1n << 64n) {
+      throw new Error("invalid transaction deadline");
+    }
+    const state = await this.runtime.readInventory();
+    if (state.invalidated) {
+      throw new Error("wallet requires canonical resync");
+    }
+    for (const point of [state.observedThrough]) {
+      if (point && (await reader.getBlock(point.number)).hash !== point.hash) {
+        throw new Error("canonical wallet checkpoint changed; resync required");
+      }
+    }
+    return {
+      context: {
+        ...options.protocol.context,
+        now: block.timestamp,
+        timestamp: block.timestamp
+      },
+      block,
+      deadline
+    };
+  }
+  async assertBlock(frame) {
+    if ((await this.runtime.reader.getBlock(frame.block.number)).hash !== frame.block.hash) {
+      throw new Error("canonical block changed while preparing");
+    }
+  }
+  async funding(source, frame) {
+    if (!source) {
+      return { funding: {}, fundingMode: "none" };
+    }
+    positiveAmount(source.amount);
+    const payer = _ethers.getAddress.call(void 0, source.payer);
+    const mode = _nullishCoalesce(source.authorization, () => ( "signature"));
+    if (BigInt(payer) === 0n) {
+      throw new Error("funding payer must be nonzero");
+    }
+    if (mode !== "signature" && mode !== "caller") {
+      throw new Error("invalid funding authorization mode");
+    }
+    if (mode === "caller" && (source.sigNonce || source.deadline)) {
+      throw new Error("caller funding uses zero nonce/deadline");
+    }
+    const funding = _protocol.normalizeFunding.call(void 0, {
+      payer,
+      amount: source.amount,
+      sigNonce: mode === "caller" ? 0n : await _asyncNullishCoalesce(source.sigNonce, async () => ( await this.runtime.reader.getFundingNonce(
+        frame.context,
+        payer,
+        frame.block
+      ))),
+      deadline: mode === "caller" ? 0n : _nullishCoalesce(source.deadline, () => ( frame.deadline)),
+      ...source.permit ? { permit: structuredClone(source.permit) } : {}
+    });
+    if (mode === "signature" && funding.deadline < frame.block.timestamp) {
+      throw new Error("funding authorization deadline has expired");
+    }
+    return { funding, fundingMode: mode };
+  }
+  async change(amount, context) {
+    const address = _nullishCoalesce(this.runtime.changeAddress, () => ( this.runtime.options.wallet.getReceivingAddress().toString()));
+    try {
+      const output = await _chunk4SDP53YQcjs.NoteOutput.create({
+        chainId: context.chainId,
+        protocolAddress: context.protocolAddress,
+        tokenAddress: context.tokenAddress,
+        amount,
+        recipient: address.startsWith("0i") ? { type: "invisi", address } : { type: "evm", address }
+      });
+      return await this.output(output, context, true);
+    } catch (cause) {
+      if (cause instanceof _chunk4SDP53YQcjs.InvisiError)
+        throw new (0, _chunk4SDP53YQcjs.InvisiError)(cause.code, cause.message, {
+          address,
+          field: "changeAddress",
+          ...cause.capability ? { capability: cause.capability } : {},
+          cause: _nullishCoalesce(cause.cause, () => ( cause))
+        });
+      throw new (0, _chunk4SDP53YQcjs.InvisiError)(
+        "PREPARATION_FAILED",
+        cause instanceof Error ? cause.message : "Change output preparation failed",
+        { address, field: "changeAddress", cause }
+      );
+    }
+  }
+  async output(payment, context, change = false, outputIndex) {
+    try {
+      positiveOutputAmount(payment, outputIndex);
+      const output = await _chunk4SDP53YQcjs.materializeNoteOutput.call(void 0, 
+        payment,
+        context,
+        (source) => recipientLookup(this.runtime.options, source)
+      );
+      return { ...output, change };
+    } catch (cause) {
+      if (cause instanceof _chunk4SDP53YQcjs.InvisiError) {
+        throw new (0, _chunk4SDP53YQcjs.InvisiError)(cause.code, cause.message, {
+          address: _nullishCoalesce(cause.address, () => ( payment.to)),
+          field: change ? "changeAddress" : _nullishCoalesce(cause.field, () => ( "to")),
+          ...outputIndex === void 0 ? {} : { outputIndex },
+          ...cause.capability ? { capability: cause.capability } : {},
+          cause: _nullishCoalesce(cause.cause, () => ( cause))
+        });
+      }
+      throw new (0, _chunk4SDP53YQcjs.InvisiError)(
+        "PREPARATION_FAILED",
+        cause instanceof Error ? cause.message : "Output preparation failed",
+        {
+          address: payment.to,
+          field: change ? "changeAddress" : "to",
+          ...outputIndex === void 0 ? {} : { outputIndex },
+          cause
+        }
+      );
+    }
+  }
+  async membership(input, frame) {
+    const { options, reader } = this.runtime;
+    if (!options.protocolRpc)
+      throw new (0, _primitives.MissingCapabilityError)("Protocol RPC membership provider");
+    const root = this.#roots.get(input.treeId);
+    const proof = await options.protocolRpc.getMembership(
+      frame.context,
+      {
+        ...input,
+        ...root ? { root } : {}
+      },
+      frame.block
+    );
+    if (root && proof.root !== root)
+      throw new Error("membership provider changed the pinned source root");
+    await verifyMembership(reader, frame.context, frame.block, input, proof);
+    this.#roots.set(input.treeId, proof.root);
+    return { ...proof, path: [...proof.path] };
+  }
+  async selectFunds(target, frame, maxInputs = 190) {
+    const { scope, options, reader } = this.runtime;
+    const state = await this.runtime.readInventory();
+    if (state.invalidated) {
+      throw new Error("wallet requires canonical resync");
+    }
+    const need = target > 0n ? target : 0n;
+    const nullifier = options.wallet.exportNullifier();
+    const reserved = new Set(Object.keys(state.reservations));
+    const eligible = Object.values(state.notes).filter(
+      (note) => note.note.tokenAddress === BigInt(frame.context.tokenAddress) && note.spent === "unspent" && !reserved.has(note.commitment)
+    );
+    const byId = new Map(eligible.map((note) => [note.commitment, note]));
+    const choices = this.runtime.inputSelection ? [...this.runtime.inputSelection] : this.runtime.explicitInputs ? eligible.map((note) => note.commitment) : need > 0n && options.coinSelector ? await options.coinSelector.select(storedCandidates(eligible), need) : selectNotes(eligible, need, reserved).map((note) => note.commitment);
+    if (!Array.isArray(choices) || new Set(choices).size !== choices.length || choices.some((id) => !byId.has(id))) {
+      throw new Error("invalid or duplicate coin selection");
+    }
+    const selected = choices.map((id) => structuredClone(byId.get(id)));
+    const amount = selected.reduce((sum, input) => sum + input.note.amount, 0n);
+    if (amount < need) {
+      throw new Error("coin selection has insufficient verified funds");
+    }
+    if (selected.length > maxInputs || amount >= 1n << 135n) {
+      throw new Error("coin selection exceeds transaction capacity");
+    }
+    const inputs = [];
+    const sources = /* @__PURE__ */ new Map();
+    const nullifiers = [];
+    for (const input of selected) {
+      const note = input.note;
+      const c = frame.context;
+      if (note.ownerAddress !== scope.ownerAddress || note.chainId !== c.chainId || note.protocolAddress !== BigInt(c.protocolAddress) || note.tokenAddress !== BigInt(c.tokenAddress) || await _primitives.computeNoteCommitment.call(void 0, 
+        c.chainId,
+        BigInt(c.protocolAddress),
+        await _primitives.computeNoteIdentity.call(void 0, BigInt(note.ownerAddress), note.nonce),
+        note.tokenAddress,
+        note.amount
+      ) !== input.commitment) {
+        throw new Error("selected input preimage/context mismatch");
+      }
+      const proof = await this.membership(input, frame);
+      const path = [...proof.path];
+      const root = proof.root;
+      if (sources.has(input.treeId) && sources.get(input.treeId) !== root) {
+        throw new Error("source roots do not share a canonical snapshot");
+      }
+      sources.set(input.treeId, root);
+      inputs.push({
+        note,
+        commitment: input.commitment,
+        treeId: input.treeId,
+        leafIndex: input.leafIndex,
+        path
+      });
+      nullifiers.push(
+        await nullifier.compute(
+          c.chainId,
+          BigInt(c.protocolAddress),
+          input.commitment,
+          input.note.nonce
+        )
+      );
+    }
+    await this.assertUnspent(nullifiers, frame);
+    return {
+      inputs,
+      sources: [...sources].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([treeId, merkleRoot]) => ({ treeId, merkleRoot })),
+      nullifiers,
+      amount
+    };
+  }
+  async assertUnspent(nullifiers, frame) {
+    if (nullifiers.length) {
+      const spent = await this.runtime.reader.isSpent(frame.context, nullifiers, frame.block);
+      if (spent.length !== nullifiers.length || spent.some((value) => value !== false)) {
+        throw new Error("selected input spent or invalid spent-state response");
+      }
+    }
+  }
+};
+function storedCandidates(inputs) {
+  const records = inputs.filter(
+    (input) => "blockNumber" in input && typeof input.blockNumber === "bigint" && "blockHash" in input && typeof input.blockHash === "string"
+  );
+  if (records.length !== inputs.length)
+    throw new Error("custom coin selection requires stored receipt metadata");
+  return structuredClone(records);
+}
+
+
+
+
+
+
+
+
+
+
+
+exports.creditLeaf = creditLeaf; exports.assertCreditUpdatePlan = assertCreditUpdatePlan; exports.configureRecipientInfrastructure = configureRecipientInfrastructure; exports.recipientLookup = recipientLookup; exports.verifyMembership = verifyMembership; exports.positiveAmount = positiveAmount; exports.copyApplicationPayload = copyApplicationPayload; exports.positiveOutputAmount = positiveOutputAmount; exports.Preparation = Preparation;
+//# sourceMappingURL=chunk-MA2QZEF5.cjs.map

package/dist/chunk-MA2QZEF5.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/wx/Workspace/invisi-lab/invisi-sdk-ts/packages/sdk/dist/chunk-MA2QZEF5.cjs","../src/credit/state.ts","../src/notes/recipient-infrastructure.ts","../src/discovery/membership.ts","../src/transactions/preparation/prepare-common.ts","../src/transactions/preparation/selection.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACPA;AACI;AACA;AAAA,qDAEG;AACP,MAAA,SAAsB,UAAA,CAAW,KAAA,EAA0C;AACvE,EAAA,OAAO,iDAAA,KAAwB,CAAM,IAAI,CAAA;AAC7C;AAGA,MAAA,SAAsB,sBAAA,CAClB,IAAA,EACa;AACb,EAAA,MAAM,OAAA,EAAS,IAAA,CAAK,MAAA;AACpB,EAAA,GAAA,CAAI,iBAAC,MAAA,2BAAQ,QAAA,EAAQ,MAAA;AACrB,EAAA,MAAM,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA,EACzB,OAAA,EAAS,MAAA,CAAO,OAAA,CAAQ,CAAC,CAAA,EACzB,QAAA,EAAU,MAAA,CAAO,aAAA;AACrB,EAAA,GAAA,CAAI,CAAC,MAAA,GAAS,CAAC,OAAA,GAAU,CAAC,OAAA;AACtB,IAAA,MAAM,KAAA,CAAM,qDAAqD,CAAA;AACrE,EAAA,MAAM,QAAA,EAAU,MAAM,4CAAA,KAAmB,CAAM,KAAA,CAAM,IAAA,EAAM,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAA;AACjF,EAAA,GAAA,CACI,OAAA,CAAQ,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,UAAA,GACpC,OAAA,CAAQ,gBAAA,IAAoB,MAAA,CAAO,MAAA,CAAO,iBAAA,GAC1C,MAAA,CAAO,WAAA,IAAe,OAAA,CAAQ,gBAAA,GAC7B,MAAM,iDAAA,MAAwB,CAAO,KAAA,CAAM,IAAI,EAAA,IAAO,OAAA,CAAQ,eAAA;AAE/D,IAAA,MAAM,KAAA,CAAM,0DAA0D,CAAA;AAC9E;ADHA;AACA;AE5BA;AACI;AACA;AAAA;AAGJ,uCAAkC;AAKlC,IAAM,wBAAA,kBAA0B,MAAA,CAAO,8BAA8B,CAAA;AAM9D,SAAS,gCAAA,CACZ,OAAA,EACC;AACD,EAAA,MAAM,EAAE,QAAA,EAAU,WAAA,EAAa,YAAY,EAAA,EAAI,OAAA;AAC/C,EAAA,MAAM,SAAA,EAAW,OAAA,CAAQ,QAAA,CAAS,UAAA,CAAW,QAAA;AAC7C,EAAA,MAAM,WAAA,EAAa,OAAA,CAAQ,QAAA,CAAS,UAAA;AACpC,EAAA,MAAM,OAAA,EACF,CAAC,MAAA,EAAA,GACD,MAAA,CAAO,YAAA,EAAA,GAAiB;AACpB,IAAA,GAAA,CAAI,CAAC,QAAA,EAAU,MAAM,IAAI,uCAAA,CAAuB,mCAAmC,CAAA;AACnF,IAAA,GAAA,CAAI,OAAA,IAAW,OAAA,EAAS;AACpB,MAAA,GAAA,CAAI,CAAC,QAAA;AACD,QAAA,MAAM,IAAI,uCAAA,CAAuB,qCAAqC,CAAA;AAC1E,MAAA,OAAO,IAAI,4CAAA;AAAA,QACP,QAAA;AAAA,QACA;AAAA,UACI,OAAA,EAAS,UAAA,CAAW,OAAA;AAAA,UACpB,eAAA,EAAiB,QAAA,CAAS;AAAA,QAC9B,CAAA;AAAA,QACA,QAAA,CAAS;AAAA,MACb,CAAA,CAAE,MAAA,CAAO,YAAY,CAAA;AAAA,IACzB;AACA,IAAA,GAAA,CAAI,CAAA,CAAE,YAAA,WAAuB,sBAAA,CAAA;AACzB,MAAA,MAAM,IAAI,uCAAA,CAAuB,kCAAkC,CAAA;AACvE,IAAA,MAAM,IAAA,EAAM,YAAA,EAAc,WAAA,CAAY,UAAA,CAAW,WAAW,EAAA,EAAI,WAAA;AAChE,IAAA,MAAM,WAAA,EAAa,MAAM,GAAA,CAAI,aAAA,CAAc,UAAA,CAAW,OAAO,CAAA;AAC7D,IAAA,GAAA,CACI,UAAA,CAAW,QAAA,CAAS,QAAA,IAAY,UAAA,CAAW,QAAA,CAAS,QAAA,GACpD,UAAA,CAAW,QAAA,CAAS,gBAAA,IAAoB,UAAA,CAAW,QAAA,CAAS,gBAAA,GAC5D,UAAA,CAAW,QAAA,CAAS,UAAA,IAAc,UAAA,CAAW,QAAA,CAAS,UAAA,mBACtD,UAAA,qBAAW,QAAA,6BAAU,UAAA,IAAY,QAAA,CAAS,QAAA,GAC1C,UAAA,CAAW,QAAA,CAAS,gBAAA,IAAoB,QAAA,CAAS,gBAAA,GACjD,UAAA,CAAW,QAAA,CAAS,UAAA,IAAc,QAAA,CAAS,SAAA;AAE3C,MAAA,MAAM,IAAI,KAAA,CAAM,6CAA6C,CAAA;AACjE,IAAA,MAAM,aAAA,EAAe,MAAM,GAAA,CAAI,mBAAA,CAAoB,YAAY,CAAA;AAC/D,IAAA,OAAO,aAAA,EACD,4BAAA,CAAiB,KAAA,CAAM,YAAA,CAAa,gBAAgB,CAAA,CAAE,gBAAA,CAAiB,EAAA,EACvE,IAAA;AAAA,EACV,CAAA;AACJ,EAAA,OAAO,EAAE,GAAG,OAAA,EAAS,CAAC,uBAAuB,CAAA,EAAG,OAAO,CAAA;AAC3D;AAGO,SAAS,eAAA,CACZ,OAAA,EACA,OAAA,EAAwB,cAAA,EACN;AAClB,EAAA,OAAO,MAAA,CAAO,YAAA,EAAA,GAAiB;AAC3B,IAAA,MAAM,OAAA,EAAU,OAAA,CAAmC,uBAAuB,CAAA;AAC1E,IAAA,GAAA,CAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,uCAAA,CAAuB,0BAA0B,CAAA;AACxE,IAAA,OAAO,MAAA,CAAO,MAAM,CAAA,CAAE,YAAY,CAAA;AAAA,EACtC,CAAA;AACJ;AFEA;AACA;AGtEA;AAOA,MAAA,SAAsB,gBAAA,CAClB,MAAA,EACA,OAAA,EACA,KAAA,EACA,KAAA,EACA,KAAA,EACa;AACb,EAAA,GAAA,CACI,KAAA,CAAM,KAAA,CAAM,KAAA,IAAS,KAAA,CAAM,KAAA,GAC3B,KAAA,CAAM,KAAA,CAAM,OAAA,IAAW,KAAA,CAAM,OAAA,GAC7B,KAAA,CAAM,KAAA,IAAS,KAAA,CAAM,WAAA,GACrB,KAAA,CAAM,OAAA,IAAW,KAAA,CAAM,OAAA,GACvB,KAAA,CAAM,UAAA,IAAc,KAAA,CAAM,UAAA,GAC1B,KAAA,CAAM,IAAA,CAAK,OAAA,IAAW,GAAA,GACtB,CAAC,MAAA,CAAO,SAAA,CAAU,KAAA,CAAM,SAAS,EAAA,GACjC,KAAA,CAAM,UAAA,EAAY,EAAA,GAClB,KAAA,CAAM,UAAA,GAAa,MAAA,GACnB,CAAE,MAAM,MAAA,CAAO,WAAA,CAAY,OAAA,EAAS,KAAA,CAAM,MAAA,EAAQ,KAAA,CAAM,IAAA,EAAM,KAAK,CAAA;AAEnE,IAAA,MAAM,IAAI,KAAA,CAAM,kCAAkC,CAAA;AACtD,EAAA,IAAI,KAAA,EAAO,MAAA,CAAO,KAAA,CAAM,UAAU,CAAA;AAClC,EAAA,IAAA,CAAA,IAAS,EAAA,EAAI,CAAA,EAAG,EAAA,EAAI,EAAA,EAAI,CAAA,EAAA,EAAK;AACzB,IAAA,MAAM,QAAA,EAAU,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA;AAC5B,IAAA,GAAA,CAAI,OAAO,QAAA,IAAY,SAAA,GAAY,QAAA,EAAU,GAAA,GAAM,QAAA,GAAW,yBAAA;AAC1D,MAAA,MAAM,IAAI,KAAA,CAAM,8BAA8B,CAAA;AAClD,IAAA,KAAA,EAAO,MAAA;AAAA,MACH,MAAM,sCAAA,KAAc,CAAM,UAAA,GAAa,EAAA,EAAK,EAAA,EAAI,CAAC,OAAA,EAAS,IAAI,EAAA,EAAI,CAAC,IAAA,EAAM,OAAO,CAAC;AAAA,IACrF,CAAA;AAAA,EACJ;AACA,EAAA,GAAA,CAAI,KAAA,IAAS,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAC1B,IAAA,MAAM,IAAI,KAAA,CAAM,iDAAiD,CAAA;AACzE;AHiDA;AACA;AIzFA,gCAA2B;AAK3B;AACI;AACA;AACA;AAAA;AAEJ;AACI;AAAA,iDAKG;AJmFP;AACA;AK/FO,SAAS,WAAA,CACZ,KAAA,EACA,MAAA,EACA,QAAA,EACG;AACH,EAAA,GAAA,CAAI,OAAO,OAAA,IAAW,SAAA,GAAY,OAAA,EAAS,EAAA;AACvC,IAAA,MAAM,IAAI,KAAA,CAAM,+CAA+C,CAAA;AACnE,EAAA,GAAA,CAAI,OAAA,IAAW,EAAA,EAAI,OAAO,CAAC,CAAA;AAC3B,EAAA,MAAM,SAAA,EAAW,KAAA,CAAM,MAAA;AAAA,IACnB,CAAC,IAAA,EAAA,GAAS,IAAA,CAAK,MAAA,IAAU,UAAA,GAAa,CAAC,QAAA,CAAS,GAAA,CAAI,IAAA,CAAK,UAAU;AAAA,EACvE,CAAA;AACA,EAAA,IAAA,CAAA,MAAW,OAAA,GAAU,QAAA;AACjB,IAAA,GAAA,CACI,OAAO,MAAA,CAAO,IAAA,CAAK,OAAA,IAAW,SAAA,GAC9B,MAAA,CAAO,IAAA,CAAK,OAAA,GAAU,GAAA,GACtB,MAAA,CAAO,IAAA,CAAK,OAAA,GAAU,GAAA,GAAM,IAAA;AAE5B,MAAA,MAAM,IAAI,KAAA,CAAM,8BAA8B,CAAA;AACtD,EAAA,QAAA,CAAS,IAAA;AAAA,IAAK,CAAC,CAAA,EAAG,CAAA,EAAA,GACd,CAAA,CAAE,IAAA,CAAK,OAAA,EAAS,CAAA,CAAE,IAAA,CAAK,OAAA,EACjB,CAAA,EAAA,EACA,CAAA,CAAE,IAAA,CAAK,OAAA,EAAS,CAAA,CAAE,IAAA,CAAK,OAAA,EACrB,EAAA,EACA,CAAA,CAAE,OAAA,EAAS,CAAA,CAAE,OAAA,EACX,CAAA,EAAA,EACA,CAAA,CAAE,OAAA,EAAS,CAAA,CAAE,OAAA,EACX,EAAA,EACA,CAAA,CAAE,UAAA,EAAY,CAAA,CAAE,UAAA,GAAa,CAAA,CAAE,UAAA,CAAW,aAAA,CAAc,CAAA,CAAE,UAAU;AAAA,EACpF,CAAA;AACA,EAAA,MAAM,SAAA,EAAgB,CAAC,CAAA;AACvB,EAAA,IAAI,MAAA,EAAQ,EAAA;AACZ,EAAA,IAAA,CAAA,MAAW,OAAA,GAAU,QAAA,EAAU;AAC3B,IAAA,QAAA,CAAS,IAAA,CAAK,eAAA,CAAgB,MAAM,CAAC,CAAA;AACrC,IAAA,MAAA,GAAS,MAAA,CAAO,IAAA,CAAK,MAAA;AACrB,IAAA,GAAA,CAAI,MAAA,GAAS,MAAA,EAAQ,OAAO,QAAA;AAAA,EAChC;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,uCAAuC,CAAA;AAC3D;ALiFA;AACA;AI1FO,SAAS,cAAA,CAAe,KAAA,EAAe,KAAA,EAAO,GAAA,EAAa;AAC9D,EAAA,GAAA,CAAI,OAAO,MAAA,IAAU,SAAA,GAAY,MAAA,GAAS,GAAA,GAAM,MAAA,GAAS,GAAA,GAAM,MAAA,CAAO,IAAI,CAAA,EAAG;AACzE,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8BAAA,EAAiC,IAAI,CAAA,CAAA;AACzD,EAAA;AACO,EAAA;AACX;AAGuE;AACpB,EAAA;AACS,EAAA;AAC5B,EAAA;AAChC;AAGwF;AAChF,EAAA;AACoC,IAAA;AACxB,EAAA;AACF,IAAA;AACN,MAAA;AACyC,MAAA;AACzC,MAAA;AACqB,QAAA;AACV,QAAA;AAC4C,QAAA;AACnD,QAAA;AACJ,MAAA;AACJ,IAAA;AACJ,EAAA;AACJ;AAGiC;AAE6B,EAAA;AAArC,IAAA;AAAsC,EAAA;AADpB,EAAA;AAGoB,EAAA;AACtB,IAAA;AACe,IAAA;AACC,IAAA;AACA,IAAA;AACI,IAAA;AACH,MAAA;AAClD,IAAA;AAC+C,IAAA;AACxB,IAAA;AAC+B,MAAA;AACtD,IAAA;AAC6C,IAAA;AACU,MAAA;AAC/B,QAAA;AACpB,MAAA;AACJ,IAAA;AACO,IAAA;AACM,MAAA;AACe,QAAA;AACT,QAAA;AACM,QAAA;AACrB,MAAA;AACA,MAAA;AACA,MAAA;AACJ,IAAA;AACJ,EAAA;AAE0D,EAAA;AACF,IAAA;AAChC,MAAA;AACpB,IAAA;AACJ,EAAA;AAKiF,EAAA;AAChE,IAAA;AACiC,MAAA;AAC9C,IAAA;AAC4B,IAAA;AACS,IAAA;AACA,IAAA;AACX,IAAA;AACyB,MAAA;AACnD,IAAA;AAC+C,IAAA;AACS,MAAA;AACxD,IAAA;AACoD,IAAA;AAChC,MAAA;AACpB,IAAA;AACiC,IAAA;AAC7B,MAAA;AACe,MAAA;AAIG,MAAA;AAEE,QAAA;AACN,QAAA;AACM,QAAA;AACV,MAAA;AACiC,MAAA;AACU,MAAA;AACxD,IAAA;AACoD,IAAA;AACjC,MAAA;AACpB,IAAA;AACoC,IAAA;AACxC,EAAA;AAEmF,EAAA;AAGtE,IAAA;AACL,IAAA;AACuC,MAAA;AAClB,QAAA;AACQ,QAAA;AACH,QAAA;AACtB,QAAA;AAEc,QAAA;AAEjB,MAAA;AAC6C,MAAA;AAClC,IAAA;AACS,MAAA;AACgC,QAAA;AAC7C,UAAA;AACO,UAAA;AACoC,UAAA;AACrB,UAAA;AACzB,QAAA;AACK,MAAA;AACN,QAAA;AACyC,QAAA;AACA,QAAA;AAC7C,MAAA;AACJ,IAAA;AACJ,EAAA;AAMI,EAAA;AAEI,IAAA;AACyC,MAAA;AACpB,MAAA;AAAsB,QAAA;AAAS,QAAA;AACV,QAAA;AAC1C,MAAA;AAC2B,MAAA;AACf,IAAA;AACsB,MAAA;AACmB,QAAA;AACX,UAAA;AACO,UAAA;AACU,UAAA;AACR,UAAA;AACrB,UAAA;AACzB,QAAA;AACL,MAAA;AACU,MAAA;AACN,QAAA;AACyC,QAAA;AACzC,QAAA;AACqB,UAAA;AACiB,UAAA;AACiB,UAAA;AACnD,UAAA;AACJ,QAAA;AACJ,MAAA;AACJ,IAAA;AACJ,EAAA;AAKuB,EAAA;AACc,IAAA;AACpB,IAAA;AACwB,MAAA;AACI,IAAA;AACD,IAAA;AAC9B,MAAA;AACN,MAAA;AACO,QAAA;AACoB,QAAA;AAC3B,MAAA;AACM,MAAA;AACV,IAAA;AAC2B,IAAA;AACP,MAAA;AACgC,IAAA;AACZ,IAAA;AACC,IAAA;AAC7C,EAAA;AAE4E,EAAA;AAChC,IAAA;AACO,IAAA;AACxB,IAAA;AAC+B,MAAA;AACtD,IAAA;AACoC,IAAA;AACa,IAAA;AACN,IAAA;AACC,IAAA;AAEI,MAAA;AAGhD,IAAA;AACkD,IAAA;AAExC,IAAA;AAQW,IAAA;AAGD,MAAA;AACpB,IAAA;AACqD,IAAA;AACA,IAAA;AAClC,IAAA;AACC,MAAA;AACpB,IAAA;AACmD,IAAA;AAC/B,MAAA;AACpB,IAAA;AAC6D,IAAA;AACxB,IAAA;AACV,IAAA;AACG,IAAA;AACP,MAAA;AACH,MAAA;AAGZ,MAAA;AAIM,QAAA;AACsB,QAAA;AAC0B,QAAA;AAC7C,QAAA;AACA,QAAA;AAEX,MAAA;AACkB,QAAA;AACpB,MAAA;AACgD,MAAA;AACrB,MAAA;AACR,MAAA;AACgC,MAAA;AAC/B,QAAA;AACpB,MAAA;AAC8B,MAAA;AAClB,MAAA;AACR,QAAA;AACkB,QAAA;AACJ,QAAA;AACG,QAAA;AACjB,QAAA;AACH,MAAA;AACU,MAAA;AACU,QAAA;AACX,UAAA;AACsB,UAAA;AAClB,UAAA;AACK,UAAA;AACf,QAAA;AACJ,MAAA;AACJ,IAAA;AAC0C,IAAA;AACnC,IAAA;AACH,MAAA;AAEiC,MAAA;AAEjC,MAAA;AACA,MAAA;AACJ,IAAA;AACJ,EAAA;AAEwF,EAAA;AAC7D,IAAA;AAC6B,MAAA;AACA,MAAA;AAC5B,QAAA;AACpB,MAAA;AACJ,IAAA;AACJ,EAAA;AACJ;AAI2E;AAChD,EAAA;AAGF,IAAA;AAGrB,EAAA;AAC8B,EAAA;AACV,IAAA;AACU,EAAA;AAClC;AJmC0D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/wx/Workspace/invisi-lab/invisi-sdk-ts/packages/sdk/dist/chunk-MA2QZEF5.cjs","sourcesContent":[null,"import type { Hex } from \"@invisi-labs/protocol/contracts\";\n\nimport {\n    computeCreditCommitment,\n    deriveCreditUpdate,\n    type CreditDeliveryState,\n} from \"@invisi-labs/primitives\";\nexport async function creditLeaf(state: CreditDeliveryState): Promise<Hex> {\n    return computeCreditCommitment(state.note);\n}\n\n/** Rebuild from the original input and delta; cached output balances are never update intent. */\nexport async function assertCreditUpdatePlan(\n    plan: import(\"../transactions/operation-types\").OperationPlan\n): Promise<void> {\n    const credit = plan.credit;\n    if (!credit?.update) return;\n    const input = credit.inputs[0],\n        output = credit.outputs[0],\n        changes = credit.updateChanges;\n    if (!input || !output || !changes)\n        throw Error(\"Credit update input, output and adjustment required\");\n    const derived = await deriveCreditUpdate(input.state.note, changes, plan.deadline);\n    if (\n        derived.nullifier !== credit.update.nullifier ||\n        derived.stateCommitment !== credit.update.creditCommitment ||\n        output.commitment !== derived.stateCommitment ||\n        (await computeCreditCommitment(output.state.note)) !== derived.stateCommitment\n    )\n        throw Error(\"Credit update adjustment does not match frozen successor\");\n}\n","import {\n    MissingCapabilityError,\n    ReceivingAddress,\n    type ReceivingKeyLookup,\n} from \"@invisi-labs/primitives\";\nimport { ProtocolRpcClient } from \"@invisi-labs/rpc\";\nimport { EthersAddressResolver } from \"../integrations/ethers\";\nimport type { TransactionInfrastructure } from \"../transactions/operation-types\";\n\nexport type AddressLookup = \"chain\" | \"protocol-rpc\";\nconst recipientInfrastructure = Symbol(\"SDK recipient infrastructure\");\ntype InternalInfrastructure = {\n    [recipientInfrastructure]?: (source: AddressLookup) => ReceivingKeyLookup;\n};\n\n/** Capture deployment pins before a Protocol is bound to an operation's token. */\nexport function configureRecipientInfrastructure<T extends TransactionInfrastructure>(\n    options: T\n): T {\n    const { provider, protocolRpc, chainReader } = options;\n    const registry = options.protocol.deployment.registry;\n    const deployment = options.protocol.deployment;\n    const lookup =\n        (source: AddressLookup): ReceivingKeyLookup =>\n        async (ownerAddress) => {\n            if (!registry) throw new MissingCapabilityError(\"receiving-key registry deployment\");\n            if (source === \"chain\") {\n                if (!provider)\n                    throw new MissingCapabilityError(\"ethers provider for registry lookup\");\n                return new EthersAddressResolver(\n                    provider,\n                    {\n                        chainId: deployment.chainId,\n                        registryAddress: registry.address,\n                    },\n                    registry.runtimeCodeHash\n                ).lookup(ownerAddress);\n            }\n            if (!(protocolRpc instanceof ProtocolRpcClient))\n                throw new MissingCapabilityError(\"Protocol RPC recipient discovery\");\n            const rpc = chainReader ? protocolRpc.withReader(chainReader) : protocolRpc;\n            const discovered = await rpc.getDeployment(deployment.chainId);\n            if (\n                discovered.protocol.address !== deployment.protocol.address ||\n                discovered.protocol.runtimeCodeHash !== deployment.protocol.runtimeCodeHash ||\n                discovered.protocol.fromBlock !== deployment.protocol.fromBlock ||\n                discovered.registry?.address !== registry.address ||\n                discovered.registry.runtimeCodeHash !== registry.runtimeCodeHash ||\n                discovered.registry.fromBlock !== registry.fromBlock\n            )\n                throw new Error(\"Recipient registry deployment pins mismatch\");\n            const registration = await rpc.getReceivingAddress(ownerAddress);\n            return registration\n                ? ReceivingAddress.parse(registration.receivingAddress).getReceivingKeys()\n                : null;\n        };\n    return { ...options, [recipientInfrastructure]: lookup };\n}\n\n/** Internal lookup plumbing; public APIs never accept resolver functions. */\nexport function recipientLookup(\n    options: object,\n    source: AddressLookup = \"protocol-rpc\"\n): ReceivingKeyLookup {\n    return async (ownerAddress) => {\n        const lookup = (options as InternalInfrastructure)[recipientInfrastructure];\n        if (!lookup) throw new MissingCapabilityError(\"recipient infrastructure\");\n        return lookup(source)(ownerAddress);\n    };\n}\n","import type { Hex } from \"@invisi-labs/protocol/contracts\";\n\nimport { FIELD_MODULUS, poseidonHash } from \"@invisi-labs/primitives\";\nimport type {\n    CanonicalBlock,\n    ChainReader,\n    Membership,\n    TransactionContext,\n} from \"@invisi-labs/protocol\";\nexport async function verifyMembership(\n    reader: ChainReader,\n    context: TransactionContext,\n    block: CanonicalBlock,\n    input: { treeId: bigint; leafIndex: number; commitment: Hex },\n    proof: Membership\n): Promise<void> {\n    if (\n        proof.block.hash !== block.hash ||\n        proof.block.number !== block.number ||\n        proof.leaf !== input.commitment ||\n        proof.treeId !== input.treeId ||\n        proof.leafIndex !== input.leafIndex ||\n        proof.path.length !== 16 ||\n        !Number.isInteger(input.leafIndex) ||\n        input.leafIndex < 0 ||\n        input.leafIndex >= 65536 ||\n        !(await reader.isKnownRoot(context, input.treeId, proof.root, block))\n    )\n        throw new Error(\"membership context/root mismatch\");\n    let root = BigInt(input.commitment);\n    for (let i = 0; i < 16; i++) {\n        const sibling = proof.path[i]!;\n        if (typeof sibling !== \"bigint\" || sibling < 0n || sibling >= FIELD_MODULUS)\n            throw new Error(\"noncanonical membership path\");\n        root = BigInt(\n            await poseidonHash((input.leafIndex >> i) & 1 ? [sibling, root] : [root, sibling])\n        );\n    }\n    if (root !== BigInt(proof.root))\n        throw new Error(\"membership path does not produce canonical root\");\n}\n","import type { Hex } from \"@invisi-labs/protocol/contracts\";\nimport { getAddress } from \"ethers\";\nimport { InvisiError } from \"../../errors\";\nimport { NoteOutput, materializeNoteOutput } from \"../../notes/NoteOutput\";\nimport { recipientLookup } from \"../../notes/recipient-infrastructure\";\n\nimport {\n    MissingCapabilityError,\n    computeNoteCommitment,\n    computeNoteIdentity,\n} from \"@invisi-labs/primitives\";\nimport {\n    normalizeFunding,\n    type CanonicalBlock,\n    type FundingInput,\n    type Membership,\n    type TransactionContext,\n} from \"@invisi-labs/protocol\";\nimport { type NoteMembership } from \"@invisi-labs/prover\";\nimport { verifyMembership } from \"../../discovery/membership\";\nimport type {\n    FundingSource,\n    OperationPlan,\n    PreparationRuntime,\n    PreparedOutput,\n} from \"../operation-types\";\nimport type { NoteRecord } from \"../records\";\nimport { selectNotes, type SelectableNote } from \"./selection\";\n\nexport interface PreparationFrame {\n    context: TransactionContext;\n    block: CanonicalBlock;\n    deadline: bigint;\n}\n\nexport function positiveAmount(value: bigint, bits = 128): bigint {\n    if (typeof value !== \"bigint\" || value <= 0n || value >= 1n << BigInt(bits)) {\n        throw new Error(`amount must be a positive uint${bits}`);\n    }\n    return value;\n}\n\n/** Reject non-byte JavaScript inputs before copying; empty bytes explicitly clear metadata. */\nexport function copyApplicationPayload(value?: Uint8Array): Uint8Array {\n    if (value === undefined) return new Uint8Array();\n    if (!(value instanceof Uint8Array)) throw new TypeError(\"payload must be Uint8Array\");\n    return Uint8Array.from(value);\n}\n\n/** Preserve the offending payment position even when summing transfer amounts first. */\nexport function positiveOutputAmount(payment: NoteOutput, outputIndex?: number): bigint {\n    try {\n        return positiveAmount(payment.amount);\n    } catch (cause) {\n        throw new InvisiError(\n            \"PREPARATION_FAILED\",\n            cause instanceof Error ? cause.message : \"Invalid output amount\",\n            {\n                address: payment.to,\n                field: \"amount\",\n                ...(outputIndex === undefined ? {} : { outputIndex }),\n                cause,\n            }\n        );\n    }\n}\n\n/** Shared local preparation checks; private witnesses never enter this object's public records. */\nexport class Preparation<Result> {\n    readonly #roots = new Map<bigint, Hex>();\n    constructor(readonly runtime: PreparationRuntime<Result>) {}\n\n    async frame(requested?: bigint): Promise<PreparationFrame> {\n        const { reader, options } = this.runtime;\n        await options.protocol.validateDeployment(reader);\n        const block = await reader.getBlock(await reader.getLatestBlockNumber());\n        const deadline = requested ?? block.timestamp + (options.transactionTTL ?? 300n);\n        if (typeof deadline !== \"bigint\" || deadline < block.timestamp || deadline >= 1n << 64n) {\n            throw new Error(\"invalid transaction deadline\");\n        }\n        const state = await this.runtime.readInventory();\n        if (state.invalidated) {\n            throw new Error(\"wallet requires canonical resync\");\n        }\n        for (const point of [state.observedThrough]) {\n            if (point && (await reader.getBlock(point.number)).hash !== point.hash) {\n                throw new Error(\"canonical wallet checkpoint changed; resync required\");\n            }\n        }\n        return {\n            context: {\n                ...options.protocol.context,\n                now: block.timestamp,\n                timestamp: block.timestamp,\n            },\n            block,\n            deadline,\n        };\n    }\n\n    async assertBlock(frame: PreparationFrame): Promise<void> {\n        if ((await this.runtime.reader.getBlock(frame.block.number)).hash !== frame.block.hash) {\n            throw new Error(\"canonical block changed while preparing\");\n        }\n    }\n\n    async funding(\n        source: FundingSource | undefined,\n        frame: PreparationFrame\n    ): Promise<{ funding: FundingInput; fundingMode: OperationPlan[\"fundingMode\"] }> {\n        if (!source) {\n            return { funding: {}, fundingMode: \"none\" };\n        }\n        positiveAmount(source.amount);\n        const payer = getAddress(source.payer) as Hex;\n        const mode = source.authorization ?? \"signature\";\n        if (BigInt(payer) === 0n) {\n            throw new Error(\"funding payer must be nonzero\");\n        }\n        if (mode !== \"signature\" && mode !== \"caller\") {\n            throw new Error(\"invalid funding authorization mode\");\n        }\n        if (mode === \"caller\" && (source.sigNonce || source.deadline)) {\n            throw new Error(\"caller funding uses zero nonce/deadline\");\n        }\n        const funding = normalizeFunding({\n            payer,\n            amount: source.amount,\n            sigNonce:\n                mode === \"caller\"\n                    ? 0n\n                    : (source.sigNonce ??\n                      (await this.runtime.reader.getFundingNonce(\n                          frame.context,\n                          payer,\n                          frame.block\n                      ))),\n            deadline: mode === \"caller\" ? 0n : (source.deadline ?? frame.deadline),\n            ...(source.permit ? { permit: structuredClone(source.permit) } : {}),\n        });\n        if (mode === \"signature\" && funding.deadline < frame.block.timestamp) {\n            throw new Error(\"funding authorization deadline has expired\");\n        }\n        return { funding, fundingMode: mode };\n    }\n\n    async change(amount: bigint, context: TransactionContext): Promise<PreparedOutput> {\n        const address =\n            this.runtime.changeAddress ??\n            this.runtime.options.wallet.getReceivingAddress().toString();\n        try {\n            const output = await NoteOutput.create({\n                chainId: context.chainId,\n                protocolAddress: context.protocolAddress,\n                tokenAddress: context.tokenAddress,\n                amount,\n                recipient: address.startsWith(\"0i\")\n                    ? { type: \"invisi\", address }\n                    : { type: \"evm\", address },\n            });\n            return await this.output(output, context, true);\n        } catch (cause) {\n            if (cause instanceof InvisiError)\n                throw new InvisiError(cause.code, cause.message, {\n                    address,\n                    field: \"changeAddress\",\n                    ...(cause.capability ? { capability: cause.capability } : {}),\n                    cause: cause.cause ?? cause,\n                });\n            throw new InvisiError(\n                \"PREPARATION_FAILED\",\n                cause instanceof Error ? cause.message : \"Change output preparation failed\",\n                { address, field: \"changeAddress\", cause }\n            );\n        }\n    }\n\n    async output(\n        payment: NoteOutput,\n        context: TransactionContext,\n        change = false,\n        outputIndex?: number\n    ): Promise<PreparedOutput> {\n        try {\n            positiveOutputAmount(payment, outputIndex);\n            const output = await materializeNoteOutput(payment, context, (source) =>\n                recipientLookup(this.runtime.options, source)\n            );\n            return { ...output, change };\n        } catch (cause) {\n            if (cause instanceof InvisiError) {\n                throw new InvisiError(cause.code, cause.message, {\n                    address: cause.address ?? payment.to,\n                    field: change ? \"changeAddress\" : (cause.field ?? \"to\"),\n                    ...(outputIndex === undefined ? {} : { outputIndex }),\n                    ...(cause.capability ? { capability: cause.capability } : {}),\n                    cause: cause.cause ?? cause,\n                });\n            }\n            throw new InvisiError(\n                \"PREPARATION_FAILED\",\n                cause instanceof Error ? cause.message : \"Output preparation failed\",\n                {\n                    address: payment.to,\n                    field: change ? \"changeAddress\" : \"to\",\n                    ...(outputIndex === undefined ? {} : { outputIndex }),\n                    cause,\n                }\n            );\n        }\n    }\n\n    async membership(\n        input: { treeId: bigint; leafIndex: number; commitment: Hex },\n        frame: PreparationFrame\n    ): Promise<Membership> {\n        const { options, reader } = this.runtime;\n        if (!options.protocolRpc)\n            throw new MissingCapabilityError(\"Protocol RPC membership provider\");\n        const root = this.#roots.get(input.treeId);\n        const proof = await options.protocolRpc.getMembership(\n            frame.context,\n            {\n                ...input,\n                ...(root ? { root } : {}),\n            },\n            frame.block\n        );\n        if (root && proof.root !== root)\n            throw new Error(\"membership provider changed the pinned source root\");\n        await verifyMembership(reader, frame.context, frame.block, input, proof);\n        this.#roots.set(input.treeId, proof.root);\n        return { ...proof, path: [...proof.path] };\n    }\n\n    async selectFunds(target: bigint, frame: PreparationFrame, maxInputs = 190) {\n        const { scope, options, reader } = this.runtime;\n        const state = await this.runtime.readInventory();\n        if (state.invalidated) {\n            throw new Error(\"wallet requires canonical resync\");\n        }\n        const need = target > 0n ? target : 0n;\n        const nullifier = options.wallet.exportNullifier();\n        const reserved = new Set(Object.keys(state.reservations));\n        const eligible = Object.values(state.notes).filter(\n            (note) =>\n                note.note.tokenAddress === BigInt(frame.context.tokenAddress) &&\n                note.spent === \"unspent\" &&\n                !reserved.has(note.commitment)\n        );\n        const byId = new Map(eligible.map((note) => [note.commitment, note]));\n        const choices = this.runtime.inputSelection\n            ? [...this.runtime.inputSelection]\n            : this.runtime.explicitInputs\n              ? eligible.map((note) => note.commitment)\n              : need > 0n && options.coinSelector\n                ? await options.coinSelector.select(storedCandidates(eligible), need)\n                : selectNotes(eligible, need, reserved).map((note) => note.commitment);\n        if (\n            !Array.isArray(choices) ||\n            new Set(choices).size !== choices.length ||\n            choices.some((id) => !byId.has(id))\n        ) {\n            throw new Error(\"invalid or duplicate coin selection\");\n        }\n        const selected = choices.map((id) => structuredClone(byId.get(id)!));\n        const amount = selected.reduce((sum, input) => sum + input.note.amount, 0n);\n        if (amount < need) {\n            throw new Error(\"coin selection has insufficient verified funds\");\n        }\n        if (selected.length > maxInputs || amount >= 1n << 135n) {\n            throw new Error(\"coin selection exceeds transaction capacity\");\n        }\n        const inputs: Array<NoteMembership & { commitment: Hex }> = [];\n        const sources = new Map<bigint, Hex>();\n        const nullifiers: Hex[] = [];\n        for (const input of selected) {\n            const note = input.note;\n            const c = frame.context;\n            if (\n                note.ownerAddress !== scope.ownerAddress ||\n                note.chainId !== c.chainId ||\n                note.protocolAddress !== BigInt(c.protocolAddress) ||\n                note.tokenAddress !== BigInt(c.tokenAddress) ||\n                (await computeNoteCommitment(\n                    c.chainId,\n                    BigInt(c.protocolAddress),\n                    await computeNoteIdentity(BigInt(note.ownerAddress), note.nonce),\n                    note.tokenAddress,\n                    note.amount\n                )) !== input.commitment\n            ) {\n                throw new Error(\"selected input preimage/context mismatch\");\n            }\n            const proof = await this.membership(input, frame);\n            const path = [...proof.path];\n            const root = proof.root;\n            if (sources.has(input.treeId) && sources.get(input.treeId) !== root) {\n                throw new Error(\"source roots do not share a canonical snapshot\");\n            }\n            sources.set(input.treeId, root);\n            inputs.push({\n                note,\n                commitment: input.commitment,\n                treeId: input.treeId,\n                leafIndex: input.leafIndex,\n                path,\n            });\n            nullifiers.push(\n                await nullifier!.compute(\n                    c.chainId,\n                    BigInt(c.protocolAddress),\n                    input.commitment,\n                    input.note.nonce\n                )\n            );\n        }\n        await this.assertUnspent(nullifiers, frame);\n        return {\n            inputs,\n            sources: [...sources]\n                .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))\n                .map(([treeId, merkleRoot]) => ({ treeId, merkleRoot })),\n            nullifiers,\n            amount,\n        };\n    }\n\n    async assertUnspent(nullifiers: readonly Hex[], frame: PreparationFrame): Promise<void> {\n        if (nullifiers.length) {\n            const spent = await this.runtime.reader.isSpent(frame.context, nullifiers, frame.block);\n            if (spent.length !== nullifiers.length || spent.some((value) => value !== false)) {\n                throw new Error(\"selected input spent or invalid spent-state response\");\n            }\n        }\n    }\n}\n\n// Managed custom selectors retain access to receipt metadata. Explicit inputs\n// use their own exact selection and never pass fabricated metadata to a selector.\nfunction storedCandidates(inputs: readonly SelectableNote[]): NoteRecord[] {\n    const records = inputs.filter(\n        (input): input is NoteRecord =>\n            \"blockNumber\" in input &&\n            typeof input.blockNumber === \"bigint\" &&\n            \"blockHash\" in input &&\n            typeof input.blockHash === \"string\"\n    );\n    if (records.length !== inputs.length)\n        throw new Error(\"custom coin selection requires stored receipt metadata\");\n    return structuredClone(records);\n}\n","import type { NoteRecord } from \"../records\";\n/** Minimal input count by descending amount, with deterministic tree/position/commitment ties. */\nexport type SelectableNote = Pick<\n    NoteRecord,\n    \"note\" | \"commitment\" | \"treeId\" | \"leafIndex\" | \"spent\"\n>;\nexport function selectNotes<T extends SelectableNote>(\n    notes: readonly T[],\n    target: bigint,\n    reserved: ReadonlySet<string>\n): T[] {\n    if (typeof target !== \"bigint\" || target < 0n)\n        throw new Error(\"selection target must be a nonnegative amount\");\n    if (target === 0n) return [];\n    const eligible = notes.filter(\n        (note) => note.spent === \"unspent\" && !reserved.has(note.commitment)\n    );\n    for (const record of eligible)\n        if (\n            typeof record.note.amount !== \"bigint\" ||\n            record.note.amount <= 0n ||\n            record.note.amount >= 1n << 128n\n        )\n            throw new Error(\"invalid verified note amount\");\n    eligible.sort((a, b) =>\n        a.note.amount > b.note.amount\n            ? -1\n            : a.note.amount < b.note.amount\n              ? 1\n              : a.treeId < b.treeId\n                ? -1\n                : a.treeId > b.treeId\n                  ? 1\n                  : a.leafIndex - b.leafIndex || a.commitment.localeCompare(b.commitment)\n    );\n    const selected: T[] = [];\n    let total = 0n;\n    for (const record of eligible) {\n        selected.push(structuredClone(record));\n        total += record.note.amount;\n        if (total >= target) return selected;\n    }\n    throw new Error(\"insufficient verified available funds\");\n}\n"]}

package/dist/chunk-MI4IP4ZD.cjs

@@ -0,0 +1,86 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunk3KTQQZOWcjs = require('./chunk-3KTQQZOW.cjs');
+
+// src/provenance/proof-record.ts
+
+
+
+
+
+
+var _provenance = require('@invisi-labs/protocol/provenance');
+var _protocol = require('@invisi-labs/protocol');
+function keys(value, allowed) {
+  if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).some((key) => !allowed.includes(key)))
+    throw Error("Unknown Provenance packet field");
+}
+async function validateProvenanceProof(packet, trust) {
+  keys(packet, [
+    "format",
+    "data",
+    "context",
+    "mainCircuitCapacity",
+    "publicInputs",
+    "operationDigest",
+    "sidecars"
+  ]);
+  keys(packet.context, ["chainId", "protocolAddress", "tokenAddress"]);
+  if (packet.format !== "invisi-provenance-submission-v1" || typeof packet.context.chainId !== "string" || typeof packet.context.protocolAddress !== "string" || typeof packet.context.tokenAddress !== "string" || BigInt(packet.context.chainId) !== BigInt(trust.chainId) || BigInt(packet.context.protocolAddress) !== BigInt(trust.protocolAddress) || !Array.isArray(packet.sidecars) || packet.sidecars.length !== 1)
+    throw Error("Provenance packet deployment or shape mismatch");
+  const decoded = _chunk3KTQQZOWcjs.decodeBroadcasterIntent.call(void 0, packet.data);
+  if (decoded.method !== "transact") throw Error("Provenance requires private transact calldata");
+  const context = {
+    chainId: BigInt(packet.context.chainId),
+    protocolAddress: packet.context.protocolAddress,
+    tokenAddress: packet.context.tokenAddress
+  };
+  const raw = decoded.request.params;
+  const params = {
+    token: raw.token,
+    sources: Array.from(raw.sources, (source) => ({
+      treeId: source.treeId,
+      merkleRoot: source.merkleRoot
+    })),
+    nullifiers: [...raw.nullifiers],
+    noteCommitments: [...raw.noteCommitments],
+    withdrawalAddress: raw.withdrawalAddress,
+    withdrawalAmount: raw.withdrawalAmount,
+    deadline: raw.deadline,
+    feeRecipient: raw.feeRecipient,
+    feeAmount: raw.feeAmount
+  };
+  const deliveries = decoded.request.deliveries.map(
+    (d) => d.toObject(true)
+  );
+  const funding = decoded.request.funding.toObject(true);
+  funding.permit.v = Number(funding.permit.v);
+  const normalized = _protocol.normalizeTransactRequest.call(void 0, context, params, deliveries, funding);
+  const publicInputs = _protocol.transactUserPublicInputs.call(void 0, context, params, deliveries, funding);
+  if (!normalized.inputCount || normalized.capacity !== packet.mainCircuitCapacity || JSON.stringify(publicInputs) !== JSON.stringify(packet.publicInputs))
+    throw Error("Provenance native statement mismatch");
+  const digest = _provenance.operationDigest.call(void 0, {
+    ...context,
+    mainCircuitCapacity: normalized.capacity,
+    publicInputs
+  });
+  if (packet.operationDigest !== digest) throw Error("Provenance operation digest mismatch");
+  const sidecar = packet.sidecars[0];
+  const wire = _provenance.proofSidecarToWire.call(void 0, sidecar);
+  if (wire.operationIndex !== "0") throw Error("Unsupported Provenance operation index");
+  await _provenance.validateProofBundle.call(void 0, wire.proofBundle, trust);
+  const pi = wire.proofBundle.publicInputs.map(BigInt);
+  if (pi[2] !== BigInt(context.tokenAddress) || pi[6] !== BigInt(normalized.inputCount) || _provenance.word.call(void 0, pi[7] << 128n | pi[8]) !== digest || pi[9] !== await _provenance.inputDigest.call(void 0, normalized.nullifiers))
+    throw Error("Provenance proof statement mismatch");
+  return {
+    ...packet,
+    context: { ...packet.context },
+    publicInputs: [...publicInputs],
+    sidecars: [wire]
+  };
+}
+
+
+
+exports.validateProvenanceProof = validateProvenanceProof;
+//# sourceMappingURL=chunk-MI4IP4ZD.cjs.map

package/dist/chunk-MI4IP4ZD.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/wx/Workspace/invisi-lab/invisi-sdk-ts/packages/sdk/dist/chunk-MI4IP4ZD.cjs","../src/provenance/proof-record.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACA;ACJA;AACI;AACA;AACA;AACA;AACA;AAAA,8DAGG;AACP,iDAAmE;AAenE,SAAS,IAAA,CAAK,KAAA,EAAe,OAAA,EAAmB;AAC5C,EAAA,GAAA,CACI,CAAC,MAAA,GACD,OAAO,MAAA,IAAU,SAAA,GACjB,KAAA,CAAM,OAAA,CAAQ,KAAK,EAAA,GACnB,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,IAAA,CAAK,CAAC,GAAA,EAAA,GAAQ,CAAC,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAC,CAAA;AAEvD,IAAA,MAAM,KAAA,CAAM,iCAAiC,CAAA;AACrD;AAEA,MAAA,SAAsB,uBAAA,CAClB,MAAA,EACA,KAAA,EACwB;AACxB,EAAA,IAAA,CAAK,MAAA,EAAQ;AAAA,IACT,QAAA;AAAA,IACA,MAAA;AAAA,IACA,SAAA;AAAA,IACA,qBAAA;AAAA,IACA,cAAA;AAAA,IACA,iBAAA;AAAA,IACA;AAAA,EACJ,CAAC,CAAA;AACD,EAAA,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,CAAC,SAAA,EAAW,iBAAA,EAAmB,cAAc,CAAC,CAAA;AACnE,EAAA,GAAA,CACI,MAAA,CAAO,OAAA,IAAW,kCAAA,GAClB,OAAO,MAAA,CAAO,OAAA,CAAQ,QAAA,IAAY,SAAA,GAClC,OAAO,MAAA,CAAO,OAAA,CAAQ,gBAAA,IAAoB,SAAA,GAC1C,OAAO,MAAA,CAAO,OAAA,CAAQ,aAAA,IAAiB,SAAA,GACvC,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,OAAO,EAAA,IAAM,MAAA,CAAO,KAAA,CAAM,OAAO,EAAA,GACvD,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,eAAe,EAAA,IAAM,MAAA,CAAO,KAAA,CAAM,eAAe,EAAA,GACvE,CAAC,KAAA,CAAM,OAAA,CAAQ,MAAA,CAAO,QAAQ,EAAA,GAC9B,MAAA,CAAO,QAAA,CAAS,OAAA,IAAW,CAAA;AAE3B,IAAA,MAAM,KAAA,CAAM,gDAAgD,CAAA;AAChE,EAAA,MAAM,QAAA,EAAU,uDAAA,MAAwB,CAAO,IAAI,CAAA;AACnD,EAAA,GAAA,CAAI,OAAA,CAAQ,OAAA,IAAW,UAAA,EAAY,MAAM,KAAA,CAAM,+CAA+C,CAAA;AAC9F,EAAA,MAAM,QAAA,EAAU;AAAA,IACZ,OAAA,EAAS,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA;AAAA,IACtC,eAAA,EAAiB,MAAA,CAAO,OAAA,CAAQ,eAAA;AAAA,IAChC,YAAA,EAAc,MAAA,CAAO,OAAA,CAAQ;AAAA,EACjC,CAAA;AACA,EAAA,MAAM,IAAA,EAAM,OAAA,CAAQ,OAAA,CAAQ,MAAA;AAC5B,EAAA,MAAM,OAAA,EAAS;AAAA,IACX,KAAA,EAAO,GAAA,CAAI,KAAA;AAAA,IACX,OAAA,EAAS,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,CAAC,MAAA,EAAA,GAAA,CAAiB;AAAA,MAC/C,MAAA,EAAQ,MAAA,CAAO,MAAA;AAAA,MACf,UAAA,EAAY,MAAA,CAAO;AAAA,IACvB,CAAA,CAAE,CAAA;AAAA,IACF,UAAA,EAAY,CAAC,GAAG,GAAA,CAAI,UAAU,CAAA;AAAA,IAC9B,eAAA,EAAiB,CAAC,GAAG,GAAA,CAAI,eAAe,CAAA;AAAA,IACxC,iBAAA,EAAmB,GAAA,CAAI,iBAAA;AAAA,IACvB,gBAAA,EAAkB,GAAA,CAAI,gBAAA;AAAA,IACtB,QAAA,EAAU,GAAA,CAAI,QAAA;AAAA,IACd,YAAA,EAAc,GAAA,CAAI,YAAA;AAAA,IAClB,SAAA,EAAW,GAAA,CAAI;AAAA,EACnB,CAAA;AACA,EAAA,MAAM,WAAA,EAAa,OAAA,CAAQ,OAAA,CAAQ,UAAA,CAAW,GAAA;AAAA,IAAI,CAAC,CAAA,EAAA,GAC/C,CAAA,CAAE,QAAA,CAAS,IAAI;AAAA,EACnB,CAAA;AACA,EAAA,MAAM,QAAA,EAAU,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA;AACrD,EAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,EAAI,MAAA,CAAO,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA;AAC1C,EAAA,MAAM,WAAA,EAAa,gDAAA,OAAyB,EAAS,MAAA,EAAQ,UAAA,EAAY,OAAO,CAAA;AAChF,EAAA,MAAM,aAAA,EAAe,gDAAA,OAAyB,EAAS,MAAA,EAAQ,UAAA,EAAY,OAAO,CAAA;AAClF,EAAA,GAAA,CACI,CAAC,UAAA,CAAW,WAAA,GACZ,UAAA,CAAW,SAAA,IAAa,MAAA,CAAO,oBAAA,GAC/B,IAAA,CAAK,SAAA,CAAU,YAAY,EAAA,IAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,YAAY,CAAA;AAEnE,IAAA,MAAM,KAAA,CAAM,sCAAsC,CAAA;AACtD,EAAA,MAAM,OAAA,EAAS,yCAAA;AAAgB,IAC3B,GAAG,OAAA;AAAA,IACH,mBAAA,EAAqB,UAAA,CAAW,QAAA;AAAA,IAChC;AAAA,EACJ,CAAC,CAAA;AACD,EAAA,GAAA,CAAI,MAAA,CAAO,gBAAA,IAAoB,MAAA,EAAQ,MAAM,KAAA,CAAM,sCAAsC,CAAA;AACzF,EAAA,MAAM,QAAA,EAAU,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA;AACjC,EAAA,MAAM,KAAA,EAAO,4CAAA,OAA0B,CAAA;AACvC,EAAA,GAAA,CAAI,IAAA,CAAK,eAAA,IAAmB,GAAA,EAAK,MAAM,KAAA,CAAM,wCAAwC,CAAA;AACrF,EAAA,MAAM,6CAAA,IAAoB,CAAK,WAAA,EAAa,KAAK,CAAA;AACjD,EAAA,MAAM,GAAA,EAAK,IAAA,CAAK,WAAA,CAAY,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AACnD,EAAA,GAAA,CACI,EAAA,CAAG,CAAC,EAAA,IAAM,MAAA,CAAO,OAAA,CAAQ,YAAY,EAAA,GACrC,EAAA,CAAG,CAAC,EAAA,IAAM,MAAA,CAAO,UAAA,CAAW,UAAU,EAAA,GACtC,8BAAA,EAAM,CAAG,CAAC,EAAA,GAAM,KAAA,EAAQ,EAAA,CAAG,CAAC,CAAE,EAAA,IAAM,OAAA,GACpC,EAAA,CAAG,CAAC,EAAA,IAAO,MAAM,qCAAA,UAAY,CAAW,UAAU,CAAA;AAElD,IAAA,MAAM,KAAA,CAAM,qCAAqC,CAAA;AACrD,EAAA,OAAO;AAAA,IACH,GAAG,MAAA;AAAA,IACH,OAAA,EAAS,EAAE,GAAG,MAAA,CAAO,QAAQ,CAAA;AAAA,IAC7B,YAAA,EAAc,CAAC,GAAG,YAAY,CAAA;AAAA,IAC9B,QAAA,EAAU,CAAC,IAAI;AAAA,EACnB,CAAA;AACJ;ADrCA;AACA;AACE;AACF,0DAAC","file":"/Users/wx/Workspace/invisi-lab/invisi-sdk-ts/packages/sdk/dist/chunk-MI4IP4ZD.cjs","sourcesContent":[null,"import {\n    inputDigest,\n    operationDigest,\n    proofSidecarToWire,\n    validateProofBundle,\n    word,\n    type ProofSidecar,\n    type TrustContext,\n} from \"@invisi-labs/protocol/provenance\";\nimport { normalizeTransactRequest, transactUserPublicInputs } from \"@invisi-labs/protocol\";\nimport type { Hex } from \"@invisi-labs/protocol/contracts\";\nimport { decodeBroadcasterIntent } from \"../broadcaster/index\";\n\n/** Public recovery packet; persist encrypted Note openings separately if reproof is needed. */\nexport interface ProvenanceProof {\n    format: \"invisi-provenance-submission-v1\";\n    data: string;\n    context: { chainId: string; protocolAddress: string; tokenAddress: string };\n    mainCircuitCapacity: number;\n    publicInputs: string[];\n    operationDigest: string;\n    sidecars: ProofSidecar[];\n}\n\nfunction keys(value: object, allowed: string[]) {\n    if (\n        !value ||\n        typeof value !== \"object\" ||\n        Array.isArray(value) ||\n        Object.keys(value).some((key) => !allowed.includes(key))\n    )\n        throw Error(\"Unknown Provenance packet field\");\n}\n\nexport async function validateProvenanceProof(\n    packet: ProvenanceProof,\n    trust: TrustContext\n): Promise<ProvenanceProof> {\n    keys(packet, [\n        \"format\",\n        \"data\",\n        \"context\",\n        \"mainCircuitCapacity\",\n        \"publicInputs\",\n        \"operationDigest\",\n        \"sidecars\",\n    ]);\n    keys(packet.context, [\"chainId\", \"protocolAddress\", \"tokenAddress\"]);\n    if (\n        packet.format !== \"invisi-provenance-submission-v1\" ||\n        typeof packet.context.chainId !== \"string\" ||\n        typeof packet.context.protocolAddress !== \"string\" ||\n        typeof packet.context.tokenAddress !== \"string\" ||\n        BigInt(packet.context.chainId) !== BigInt(trust.chainId) ||\n        BigInt(packet.context.protocolAddress) !== BigInt(trust.protocolAddress) ||\n        !Array.isArray(packet.sidecars) ||\n        packet.sidecars.length !== 1\n    )\n        throw Error(\"Provenance packet deployment or shape mismatch\");\n    const decoded = decodeBroadcasterIntent(packet.data);\n    if (decoded.method !== \"transact\") throw Error(\"Provenance requires private transact calldata\");\n    const context = {\n        chainId: BigInt(packet.context.chainId),\n        protocolAddress: packet.context.protocolAddress as Hex,\n        tokenAddress: packet.context.tokenAddress as Hex,\n    };\n    const raw = decoded.request.params;\n    const params = {\n        token: raw.token,\n        sources: Array.from(raw.sources, (source: any) => ({\n            treeId: source.treeId,\n            merkleRoot: source.merkleRoot,\n        })),\n        nullifiers: [...raw.nullifiers],\n        noteCommitments: [...raw.noteCommitments],\n        withdrawalAddress: raw.withdrawalAddress,\n        withdrawalAmount: raw.withdrawalAmount,\n        deadline: raw.deadline,\n        feeRecipient: raw.feeRecipient,\n        feeAmount: raw.feeAmount,\n    };\n    const deliveries = decoded.request.deliveries.map((d: { toObject(deep: boolean): unknown }) =>\n        d.toObject(true)\n    );\n    const funding = decoded.request.funding.toObject(true);\n    funding.permit.v = Number(funding.permit.v);\n    const normalized = normalizeTransactRequest(context, params, deliveries, funding);\n    const publicInputs = transactUserPublicInputs(context, params, deliveries, funding);\n    if (\n        !normalized.inputCount ||\n        normalized.capacity !== packet.mainCircuitCapacity ||\n        JSON.stringify(publicInputs) !== JSON.stringify(packet.publicInputs)\n    )\n        throw Error(\"Provenance native statement mismatch\");\n    const digest = operationDigest({\n        ...context,\n        mainCircuitCapacity: normalized.capacity,\n        publicInputs,\n    });\n    if (packet.operationDigest !== digest) throw Error(\"Provenance operation digest mismatch\");\n    const sidecar = packet.sidecars[0]!;\n    const wire = proofSidecarToWire(sidecar);\n    if (wire.operationIndex !== \"0\") throw Error(\"Unsupported Provenance operation index\");\n    await validateProofBundle(wire.proofBundle, trust);\n    const pi = wire.proofBundle.publicInputs.map(BigInt);\n    if (\n        pi[2] !== BigInt(context.tokenAddress) ||\n        pi[6] !== BigInt(normalized.inputCount) ||\n        word((pi[7]! << 128n) | pi[8]!) !== digest ||\n        pi[9] !== (await inputDigest(normalized.nullifiers))\n    )\n        throw Error(\"Provenance proof statement mismatch\");\n    return {\n        ...packet,\n        context: { ...packet.context },\n        publicInputs: [...publicInputs],\n        sidecars: [wire],\n    };\n}\n"]}