@invisi-labs/sdk 1.1.6 → 1.2.0

package/dist/index.d.cts

@@ -1,318 +1,23 @@
-import { O as OperationRuntime, P as PreparationIntent, a as OperationPlan, W as WithBroadcasterOptions, G as GasReference, T as TransactionProveOptions, b as OperationAggregateMember, C as CancelCreditPreparation, c as CreateCreditPreparation, D as DrawCreditPreparation, S as ShieldPreparation, d as TopUpCreditPreparation, e as TransferPreparation, f as WalletSessionOptions, g as WalletSessionInfrastructure } from './NoteOutput-DRkVnwlx.cjs';
-export { B as BroadcasterFeeSource, h as CoinSelector, F as FundingAuthorizationVerifier, i as FundingSigner, j as FundingSource, k as FundingTypedData, l as GasBenchmarkCircuit, m as GasBenchmarkDeployment, n as GasBenchmarkProfile, o as GasBenchmarkSample, p as GasBenchmarkShape, N as NoteOutput, q as NoteOutputContext, r as NoteOutputOptions, s as NoteOutputRecipient, t as TransactionExecution, u as defineGasBenchmarks } from './NoteOutput-DRkVnwlx.cjs';
-import * as _invisi_labs_core from '@invisi-labs/core';
-import { CreditDeliveryState, PublicWallet, Note, DisclosureOutput, Disclosure, DisclosureResult, ViewingCapability } from '@invisi-labs/core';
-export { Address, CreditDataV1, CreditDeliveryState, CreditNote, CreditOpening, CreditPolicy, Detector, Disclosure, DisclosureExport, DisclosureOutput, DisclosureResult, FundsDataV1, Hex, MAX_MEMO_BYTES, Memo, MissingCapabilityError, Note, NullifierCapability, PublicWallet, ReceivingKeys, SigningRequest, ViewingCapability, Wallet, WalletAuthorization, WalletAuthorizationProvider, computeCreditNullifier, creditPeriods, creditV1, decodeDeliveryHeader, decodeMemoText, encodeMemo, fundsV1 } from '@invisi-labs/core';
-import * as ethers from 'ethers';
-import { Interface, Provider, TransactionRequest, TransactionResponse } from 'ethers';
-import * as _invisi_labs_protocol from '@invisi-labs/protocol';
-import { TransactionCall, Protocol as Protocol$1, CanonicalBlock, ChainReader, TokenProtocol, RegistrationPreparation, RegistrationOperation, AddressRegistry as AddressRegistry$1, CanonicalReceipt } from '@invisi-labs/protocol';
-export { AddressRegistryOptions, CanonicalBlock, CanonicalReceipt, ChainReader, FactoryReader, Membership, ProtocolDataProvider, ProtocolDataStatus, ProtocolOptions, ProtocolUpdateRange, ProtocolUpdates, RegistrationOperation, RegistryContext, RegistryReader, TokenProtocol, TokenProtocolOptions, TransactionCall, TransactionContext } from '@invisi-labs/protocol';
-import { Prover, ProofBundle } from '@invisi-labs/prover';
+import { DisclosureOutput, Disclosure, DisclosureResult, Wallet } from '@invisi-labs/primitives';
+export { Address, CreditDataV1, CreditDeliveryState, CreditOpening, CreditPolicy, CreditState, DeliveryDecryptionError, DeliveryDecryptor, Detector, Disclosure, DisclosureExport, DisclosureOutput, DisclosureResult, FundsDataV1, Hex, MAX_MEMO_BYTES, Memo, MissingCapabilityError, Note, NullifierCapability, ReceivingKeys, SigningRequest, ViewingCapability, Wallet, authenticatedDecryptor, computeCreditNullifier, creditPeriods, creditV1, decodeDeliveryHeader, decodeMemoText, encodeMemo, fundsV1 } from '@invisi-labs/primitives';
+import * as _invisi_labs_rpc from '@invisi-labs/rpc';
+import { TokenProtocol, Protocol as Protocol$1, ProtocolRpcClient as ProtocolRpcClient$1, AddressRegistry as AddressRegistry$1, RegistrationPreparation } from '@invisi-labs/rpc';
+export { AddressRegistryOptions, IndexedCreditState, MAX_UPDATE_BLOCKS, ProtocolCreditTransition, ProtocolDeployment, ProtocolNoteOutput, ProtocolOptions, ProtocolRpcChain, ProtocolRpcClientOptions, ProtocolRpcConnectionOptions, ProtocolRpcError, ProtocolRpcReader, ProtocolTransactionCreditUpdates, ProtocolTransactionNoteUpdates, RegisteredReceivingAddress, RegistrationOperation, RegistryReader, TokenProtocol, TokenProtocolOptions } from '@invisi-labs/rpc';
+import { CanonicalBlock, ChainReader, TransactionCall, Membership } from '@invisi-labs/protocol';
+export { CanonicalBlock, CanonicalReceipt, ChainReader, DocumentedGasReference, DocumentedGasShape, FactoryReader, Membership, ProtocolDataProvider, ProtocolDataStatus, ProtocolUpdateRange, RegistryContext, TransactionCall, TransactionContext, getDocumentedGasReference } from '@invisi-labs/protocol';
 export { AggregateMember, AggregatorCapability, ProofBundle, ProofStatement, Prover, ProverOptions } from '@invisi-labs/prover';
-import { O as OperationStatus, B as BalanceSnapshot, R as ReceiptPosition, S as SpentState, C as Checkpoint, W as WalletScope, a as WalletState } from './state-C4HZFotm.cjs';
-export { b as WalletStore, w as walletBalance } from './state-C4HZFotm.cjs';
+export { D as DeliveryEventLog, a as DiscoveredCredit, b as DiscoveredNote, I as Invisi, c as InvisiError, d as InvisiErrorCode, e as InvisiErrorDetails, f as InvisiOptions, P as PreparedTransaction, R as RegistrationPreparationOptions, g as decryptCandidates, r as readProtocolLogs } from './receipt-logs-DWG4In8N.cjs';
 import { Hex, Address } from '@invisi-labs/protocol/contracts';
-import { ProtocolRpcClient as ProtocolRpcClient$1 } from '@invisi-labs/rpc';
-export { MAX_UPDATE_BLOCKS, ProtocolCreditTransition, ProtocolDeployment, ProtocolOutput, ProtocolRpcChain, ProtocolRpcClientOptions, ProtocolRpcConnectionOptions, ProtocolRpcError, ProtocolRpcReader, ProtocolTransactionUpdates, RegisteredReceivingAddress } from '@invisi-labs/rpc';
-import { W as WalletRecordCodec } from './store-YrbXb6CY.cjs';
-
-declare const broadcasterQuoteTypes: {
-    Quote: {
-        name: string;
-        type: string;
-    }[];
-};
-interface BroadcasterQuote {
-    token: string;
-    feeRecipient: string;
-    feeAmount: string;
-    deadline: string;
-    maxGas: string;
-    requestHash: string;
-}
-interface SignedBroadcasterQuote {
-    quote: BroadcasterQuote;
-    signature: string;
-    context?: {
-        chainId: bigint;
-        protocol: string;
-    };
-}
-interface BroadcasterTrust {
-    chainId: bigint;
-    protocol: string;
-    signer: string;
-}
-declare function broadcasterQuoteDomain(trust: BroadcasterTrust): {
-    name: string;
-    version: string;
-    chainId: bigint;
-    verifyingContract: string;
-};
-declare const broadcasterTransactInterface: Interface;
-/** Decode a canonical supported direct public intent. Draw, registry and aggregates are excluded. */
-declare function decodeBroadcasterIntent(data: string): {
-    fragment: ethers.FunctionFragment;
-    method: string;
-    args: ethers.Result;
-    proof: string;
-    request: {
-        params: any;
-        funding: any;
-        deliveries: any;
-    };
-};
-/** Domain-separated final public intent: omit only proof bytes and funding.signature. */
-declare function broadcasterRequestHash(data: string): string;
-declare function verifyBroadcasterQuote(signed: SignedBroadcasterQuote, trust: BroadcasterTrust, data: string, now?: bigint): BroadcasterQuote;
-interface BroadcasterStatus {
-    id: string;
-    state: "pending" | "submitted" | "confirmed" | "reverted" | "uncertain";
-    transactionHash?: string;
-}
-type BroadcasterTransport = (request: {
-    jsonrpc: "2.0";
-    id: number;
-    method: string;
-    params: unknown;
-}) => Promise<unknown>;
-interface BroadcasterConfiguration {
-    endpoint: string;
-    quoteSigner: string;
-    feeRecipient: string;
-}
-declare class BroadcasterClient {
-    readonly configuration: Readonly<BroadcasterConfiguration>;
-    readonly url: string;
-    readonly transport: BroadcasterTransport;
-    private requestId;
-    constructor(configuration: BroadcasterConfiguration, transport?: BroadcasterTransport);
-    private call;
-    fee(token: string, data?: string): Promise<{
-        feeRecipient: string;
-        feeAmount: string;
-        maxGas: string;
-    }>;
-    quote(data: string, context: {
-        chainId: bigint;
-        protocol: string;
-    }): Promise<SignedBroadcasterQuote>;
-    submit(data: string, signed: SignedBroadcasterQuote, idempotencyKey: string): Promise<BroadcasterStatus>;
-    status(id: string): Promise<BroadcasterStatus>;
-}
-declare class BroadcasterRpcError extends Error {
-    readonly code: number;
-    constructor(code: number, message: string);
-}
-
-/** Stable codes returned by public SDK prepare* methods; inspect details instead of matching messages. */
-type InvisiErrorCode = 
-/**
- * Other preparation failure, such as invalid amounts, expired deadlines,
- * or conflicting registration state. Inspect message and cause.
- */
-"PREPARATION_FAILED"
-/**
- * Required infrastructure or permissions were not supplied.
- * The capability field identifies what is missing.
- */
- | "MISSING_CAPABILITY"
-/**
- * The recipient string is not a valid full 0i address or nonzero EVM owner address.
- * No registration lookup is attempted for this invalid string.
- */
- | "INVALID_RECIPIENT"
-/**
- * A successful lookup found no receiving keys for this short 0x owner
- * at the queried state. Indexed data may lag behind the latest chain state.
- * Full 0i addresses contain receiving keys and do not require registration.
- */
- | "EVM_ADDRESS_NOT_REGISTERED"
-/**
- * Recipient lookup failed or returned invalid keys. Inspect cause.
- * Registration status is unknown; this does not mean the owner is unregistered.
- */
- | "RECIPIENT_LOOKUP_FAILED";
-interface InvisiErrorDetails {
-    operation?: string;
-    address?: string;
-    /** Zero-based index into the caller's outputs array, excluding automatic change. */
-    outputIndex?: number;
-    field?: string;
-    capability?: string;
-    cause?: unknown;
-}
-/** Stable application-facing preparation failure with the original cause. */
-declare class InvisiError extends Error {
-    readonly code: InvisiErrorCode;
-    readonly operation: string | undefined;
-    readonly address: string | undefined;
-    readonly outputIndex: number | undefined;
-    readonly field: string | undefined;
-    readonly capability: string | undefined;
-    constructor(code: InvisiErrorCode, message: string, details?: InvisiErrorDetails);
-}
-
-type Runtime = Omit<OperationRuntime, "store" | "authorization"> & {
-    reprepare?: (intent: PreparationIntent) => Promise<OperationPlan>;
-};
-/** An immutable, local transaction handle. No wallet inventory, reservations or persistence. */
-declare class PreparedTransaction {
-    #private;
-    readonly status: OperationStatus;
-    private constructor();
-    static prepare(runtime: Runtime, plan: OperationPlan): PreparedTransaction;
-    broadcasterQuote(): SignedBroadcasterQuote | undefined;
-    withBroadcaster(client: BroadcasterClient, options: WithBroadcasterOptions): Promise<PreparedTransaction>;
-    get id(): string;
-    get kind(): "shield" | "transfer" | "create-credit" | "draw-credit" | "top-up-credit" | "cancel-credit";
-    estimateGas(): GasReference;
-    preview(): {
-        id: string;
-        kind: "shield" | "transfer" | "create-credit" | "draw-credit" | "top-up-credit" | "cancel-credit";
-        status: OperationStatus;
-        context: {
-            tokenAddress: _invisi_labs_core.Address;
-            now?: bigint;
-            timestamp?: bigint;
-            chainId: bigint;
-            protocolAddress: _invisi_labs_core.Address;
-        };
-        inputs: number;
-        inputDetails: ({
-            kind: "notes";
-            commitment: `0x${string}`;
-            amount: bigint;
-            owner: `0x${string}`;
-            treeId: bigint;
-            leafIndex: number;
-        } | {
-            kind: "credits";
-            commitment: `0x${string}`;
-            amount: bigint;
-            owner: `0x${string}`;
-            spender: `0x${string}`;
-            expiry: bigint;
-            role: "owner" | "spender";
-            treeId: bigint;
-            leafIndex: number;
-        })[];
-        funding: {
-            payer: `0x${string}`;
-            amount: bigint;
-            authorization: "signature" | "none" | "caller";
-            sigNonce: bigint;
-            deadline: bigint;
-            permit: {
-                deadline: bigint;
-            };
-        };
-        creditOutputs: {
-            commitment: `0x${string}`;
-            amount: bigint;
-            expiry: bigint;
-            owner: `0x${string}`;
-            spender: `0x${string}`;
-            ownerPayout: bigint;
-            spenderPayout: bigint;
-        }[] | undefined;
-        outputs: {
-            commitment: `0x${string}`;
-            to: string;
-            amount: bigint;
-            change: boolean;
-        }[];
-        capacity: number | undefined;
-        deadline: bigint;
-        feeRecipient: `0x${string}` | undefined;
-        feeAmount: bigint;
-        fundingAmount: bigint;
-        fundingPayer: `0x${string}` | undefined;
-        withdrawalAmount: bigint;
-        withdrawalAddress: `0x${string}` | undefined;
-        permissions: {
-            walletAuthorization: boolean;
-            proof: boolean;
-            fundingAuthorization: boolean;
-        };
-    };
-    /** Obtain a firm quote before signing. This intent contains no private inputs or witness. */
-    exportBroadcasterIntent(): Promise<{
-        sendable: false;
-        data: _invisi_labs_core.Hex;
-    }>;
-    private current;
-    private stage;
-    /** Public EIP-712 request; signing transport and key custody belong to the caller. */
-    exportWalletAuthorization(options?: {
-        signal?: AbortSignal;
-    }): Promise<_invisi_labs_core.SigningRequest>;
-    /** Attach an external EOA signature, retaining its witness only at the private proving boundary. */
-    withWalletSignature(signature: string, options?: {
-        signal?: AbortSignal;
-    }): Promise<PreparedTransaction>;
-    /** Export only after proving when the funding authorization binds an actual proof hash. */
-    exportFundingAuthorization(options?: {
-        signal?: AbortSignal;
-    }): Promise<_invisi_labs_core.SigningRequest>;
-    /** Verify an external signature against this handle's own frozen operation. */
-    withFundingSignature(signature: string, options?: {
-        signal?: AbortSignal;
-    }): Promise<PreparedTransaction>;
-    prove(options?: TransactionProveOptions): Promise<PreparedTransaction>;
-    prove(backend: Prover, options?: TransactionProveOptions): Promise<PreparedTransaction>;
-    private encode;
-    /** Shield caller funding needs no wallet signing or proof; this step only encodes its frozen request. */
-    ready(): Promise<PreparedTransaction>;
-    exportTransaction(): Promise<TransactionCall>;
-    exportProof(): ProofBundle;
-    exportAggregateMember(): OperationAggregateMember;
-    toJSON(): {
-        transaction: boolean;
-        id: string;
-        kind: "shield" | "transfer" | "create-credit" | "draw-credit" | "top-up-credit" | "cancel-credit";
-        status: OperationStatus;
-    };
-}
-
-interface NoteInput {
-    note: Note;
-    commitment: Hex;
-    treeId: bigint;
-    leafIndex: number;
-}
-interface CreditInput {
-    state: CreditDeliveryState;
-    commitment: Hex;
-    treeId: bigint;
-    leafIndex: number;
-    role: "owner" | "spender";
-}
-interface TransactionIdentity {
-    wallet: PublicWallet & {
-        getViewer?: never;
-        getDetector?: never;
-        exportAuthorization?: never;
-    };
-    protocol: Protocol$1;
-}
-interface ExplicitFunds {
-    inputs: readonly NoteInput[];
-    changeAddress?: string;
-}
-type ExplicitTransferPreparation = TransactionIdentity & TransferPreparation & ExplicitFunds;
-type ExplicitShieldPreparation = TransactionIdentity & ShieldPreparation;
-type ExplicitCreateCreditPreparation = TransactionIdentity & CreateCreditPreparation & ExplicitFunds;
-type ExplicitDrawCreditPreparation = TransactionIdentity & DrawCreditPreparation & {
-    creditInputs: readonly CreditInput[];
-};
-type ExplicitTopUpCreditPreparation = TransactionIdentity & TopUpCreditPreparation & ExplicitFunds & {
-    creditInputs: readonly CreditInput[];
-};
-type ExplicitCancelCreditPreparation = TransactionIdentity & CancelCreditPreparation & {
-    creditInputs: readonly CreditInput[];
-};
+import { Provider } from 'ethers';
+import { i as BroadcasterClient, j as PaymentRequest } from './operation-bridge-CoECSxfi.cjs';
+export { k as BroadcasterFeeSource, l as BroadcasterQuoteOptions, B as BroadcasterTransaction, C as CreateCreditPreparation, D as DrawCreditPreparation, c as FundingAuthorizationVerifier, F as FundingSigner, m as FundingSource, b as FundingTypedData, N as NoteOutput, n as NoteOutputContext, o as NoteOutputExecutionOptions, p as NoteOutputRecipient, g as OperationAggregateMember, a as PreparedProvenanceCapability, R as RevokeCreditPreparation, S as ShieldPreparation, q as TransactionExecution, f as TransactionProveOptions, r as TransferPreparation, U as UpdateCreditPreparation } from './operation-bridge-CoECSxfi.cjs';
+import { N as NoteInput } from './index-CLhGwLxZ.cjs';
+export { C as CreditInput, b as ExplicitCreateCreditPreparation, c as ExplicitDrawCreditPreparation, e as ExplicitRevokeCreditPreparation, a as ExplicitShieldPreparation, E as ExplicitTransferPreparation, d as ExplicitUpdateCreditPreparation, T as TransactionIdentity } from './index-CLhGwLxZ.cjs';
+export { TransactionOutput } from './note.cjs';
+export { BroadcasterConfiguration, BroadcasterEstimate, BroadcasterQuote, BroadcasterRpcError, BroadcasterStatus, BroadcasterTransport, BroadcasterTrust, SignedBroadcasterQuote, broadcasterQuoteDomain, broadcasterQuoteTypes, broadcasterRequestHash, broadcasterTransactInterface, decodeBroadcasterIntent, verifyBroadcasterQuote } from '@invisi-labs/rpc/broadcaster';
+import '@invisi-labs/protocol/provenance';
+import '@invisi-labs/prover/provenance-witness';
+import '@invisi-labs/rpc/provenance';
 
 interface DisclosureReference {
     transactionHash: Hex;
@@ -359,396 +64,23 @@ declare class DisclosureVerifier {
     };
 }
 
-/** Immutable operation handle. No private plan, witness, or transaction is logged implicitly. */
-declare class Operation {
-    #private;
-    readonly status: OperationStatus;
-    private constructor();
-    static prepare(runtime: OperationRuntime, plan: OperationPlan): Promise<Operation>;
-    static resume(runtime: OperationRuntime, id: string): Promise<Operation>;
-    /** Public non-sendable intent for a firm quote before wallet authorization. */
-    exportBroadcasterIntent(): Promise<{
-        sendable: false;
-        data: Hex;
-    }>;
-    broadcasterQuote(): SignedBroadcasterQuote | undefined;
-    withBroadcaster(client: BroadcasterClient, options: WithBroadcasterOptions): Promise<Operation>;
-    get id(): string;
-    get kind(): OperationPlan["kind"];
-    estimateGas(): GasReference;
-    preview(): {
-        id: string;
-        kind: "shield" | "transfer" | "create-credit" | "draw-credit" | "top-up-credit" | "cancel-credit";
-        status: OperationStatus;
-        context: {
-            tokenAddress: _invisi_labs_core.Address;
-            now?: bigint;
-            timestamp?: bigint;
-            chainId: bigint;
-            protocolAddress: _invisi_labs_core.Address;
-        };
-        inputs: number;
-        inputDetails: ({
-            kind: "notes";
-            commitment: `0x${string}`;
-            amount: bigint;
-            owner: `0x${string}`;
-            treeId: bigint;
-            leafIndex: number;
-        } | {
-            kind: "credits";
-            commitment: `0x${string}`;
-            amount: bigint;
-            owner: `0x${string}`;
-            spender: `0x${string}`;
-            expiry: bigint;
-            role: "owner" | "spender";
-            treeId: bigint;
-            leafIndex: number;
-        })[];
-        funding: {
-            payer: `0x${string}`;
-            amount: bigint;
-            authorization: "signature" | "none" | "caller";
-            sigNonce: bigint;
-            deadline: bigint;
-            permit: {
-                deadline: bigint;
-            };
-        };
-        creditOutputs: {
-            commitment: `0x${string}`;
-            amount: bigint;
-            expiry: bigint;
-            owner: `0x${string}`;
-            spender: `0x${string}`;
-            ownerPayout: bigint;
-            spenderPayout: bigint;
-        }[] | undefined;
-        outputs: {
-            commitment: `0x${string}`;
-            to: string;
-            amount: bigint;
-            change: boolean;
-        }[];
-        capacity: number | undefined;
-        deadline: bigint;
-        feeRecipient: `0x${string}` | undefined;
-        feeAmount: bigint;
-        fundingAmount: bigint;
-        fundingPayer: `0x${string}` | undefined;
-        withdrawalAmount: bigint;
-        withdrawalAddress: `0x${string}` | undefined;
-        permissions: {
-            walletAuthorization: boolean;
-            proof: boolean;
-            fundingAuthorization: boolean;
-        };
-    };
-    private current;
-    private stage;
-    private signingCurrent;
-    /** Public EIP-712 request; signing transport and key custody belong to the caller. */
-    exportWalletAuthorization(options?: {
-        signal?: AbortSignal;
-    }): Promise<_invisi_labs_core.SigningRequest>;
-    /** Attach an external EOA signature, retaining its witness only at the private proving boundary. */
-    withWalletSignature(signature: string, options?: {
-        signal?: AbortSignal;
-    }): Promise<Operation>;
-    /** Export only after proving when the funding authorization binds an actual proof hash. */
-    exportFundingAuthorization(options?: {
-        signal?: AbortSignal;
-    }): Promise<_invisi_labs_core.SigningRequest>;
-    /** Verify an external signature against this handle's own frozen operation. */
-    withFundingSignature(signature: string, options?: {
-        signal?: AbortSignal;
-    }): Promise<Operation>;
-    authorize(options?: {
-        signal?: AbortSignal;
-    }): Promise<Operation>;
-    prove(suppliedOptions?: TransactionProveOptions): Promise<Operation>;
-    private encode;
-    authorizeFunding(options?: {
-        signal?: AbortSignal;
-    }): Promise<Operation>;
-    /** Shield caller funding needs no wallet signing or proof; this step only encodes its frozen request. */
-    ready(): Promise<Operation>;
-    private validateExport;
-    exportTransaction(options?: {
-        signal?: AbortSignal;
-    }): Promise<TransactionCall>;
-    exportAggregateMember(): Promise<OperationAggregateMember>;
-    abandon(): Promise<Operation>;
-    /** Record an application-owned signed/broadcast transaction. This never sends or waits. */
-    trackTransaction(transactionHash: string): Promise<Operation>;
-    reconcile(options?: {
-        transactionHash?: Hex;
-        signal?: AbortSignal;
-    }): Promise<Operation>;
-    toJSON(): {
-        id: string;
-        kind: "shield" | "transfer" | "create-credit" | "draw-credit" | "top-up-credit" | "cancel-credit";
-        status: OperationStatus;
-    };
-}
-
-interface DiscoveryContext {
-    chainId: bigint;
-    protocolAddress: Address;
-}
-/** Decoded logs from complete canonical transaction receipts, including insertion logs. */
-interface DeliveryEventLog {
-    address: string;
-    eventName: string;
-    args?: Record<string, unknown>;
-    blockNumber?: bigint | null;
-    blockHash?: Hex | null;
-    transactionHash?: Hex | null;
-    logIndex?: number | null;
-    removed?: boolean;
-}
-interface DeliveryCandidate {
-    tokenAddress: Address;
-    treeId: bigint;
-    leafIndex: number;
-    commitment: Hex;
-    role: "funds" | "owner" | "spender";
-    delivery: {
-        ciphertext: Hex;
-        clue: Hex;
-    };
-    blockNumber: bigint;
-    blockHash: Hex;
-    transactionHash: Hex;
-}
-interface DiscoveredNote extends Omit<DeliveryCandidate, "delivery" | "role"> {
-    note: Note;
-}
-interface DiscoveredCredit extends Omit<DeliveryCandidate, "delivery"> {
-    role: "owner" | "spender";
-    state: CreditDeliveryState;
-}
-/** Authenticate private deliveries from a single batch of canonical receipts. */
-declare function decryptCandidates(logs: readonly DeliveryEventLog[], options: {
-    context: DiscoveryContext;
-    viewing: Pick<ViewingCapability, "ownerAddress" | "decryptNote" | "decryptCredit">;
-    confirmedThrough: bigint;
-}): Promise<{
-    notes: DiscoveredNote[];
-    credits: DiscoveredCredit[];
-}>;
-
-interface RefreshResult {
-    block: CanonicalBlock;
-    notes: number;
-    credits: number;
-    balances: BalanceSnapshot[];
-}
-interface RefreshOptions {
-    /** Explicit history range; retain the returned block to request the next page later. */
-    fromBlock: bigint;
-    /** Defaults to the Protocol RPC's indexed head, independently checked against Chain RPC. */
-    toBlock?: bigint;
-    /** Explicit permission to delegate detection; never provide a viewing or spending key. */
-    detectionKey?: Uint8Array;
-    /** Defaults to MAX_UPDATE_BLOCKS (10000 blocks) per service request. Reduce this on high-volume deployments. */
-    pageSize?: number;
-    signal?: AbortSignal;
-    /** Rebuild private inventory from these pages while retaining uncertain operations. */
-    reset?: boolean;
-}
-
-declare function operationPreview(plan: OperationPlan, status: OperationStatus): {
-    id: string;
-    kind: "shield" | "transfer" | "create-credit" | "draw-credit" | "top-up-credit" | "cancel-credit";
-    status: OperationStatus;
-    context: {
-        tokenAddress: _invisi_labs_core.Address;
-        now?: bigint;
-        timestamp?: bigint;
-        chainId: bigint;
-        protocolAddress: _invisi_labs_core.Address;
-    };
-    inputs: number;
-    inputDetails: ({
-        kind: "notes";
-        commitment: `0x${string}`;
-        amount: bigint;
-        owner: `0x${string}`;
-        treeId: bigint;
-        leafIndex: number;
-    } | {
-        kind: "credits";
-        commitment: `0x${string}`;
-        amount: bigint;
-        owner: `0x${string}`;
-        spender: `0x${string}`;
-        expiry: bigint;
-        role: "owner" | "spender";
-        treeId: bigint;
-        leafIndex: number;
-    })[];
-    funding: {
-        payer: `0x${string}`;
-        amount: bigint;
-        authorization: "signature" | "none" | "caller";
-        sigNonce: bigint;
-        deadline: bigint;
-        permit: {
-            deadline: bigint;
-        };
-    };
-    creditOutputs: {
-        commitment: `0x${string}`;
-        amount: bigint;
-        expiry: bigint;
-        owner: `0x${string}`;
-        spender: `0x${string}`;
-        ownerPayout: bigint;
-        spenderPayout: bigint;
-    }[] | undefined;
-    outputs: {
-        commitment: `0x${string}`;
-        to: string;
-        amount: bigint;
-        change: boolean;
-    }[];
-    capacity: number | undefined;
-    deadline: bigint;
-    feeRecipient: `0x${string}` | undefined;
-    feeAmount: bigint;
-    fundingAmount: bigint;
-    fundingPayer: `0x${string}` | undefined;
-    withdrawalAmount: bigint;
-    withdrawalAddress: `0x${string}` | undefined;
-    permissions: {
-        walletAuthorization: boolean;
-        proof: boolean;
-        fundingAuthorization: boolean;
-    };
-};
-
-/** Private application data. Never send this view to public analytics. */
-interface OutgoingHistoryEntry extends Omit<ReturnType<typeof operationPreview>, "outputs"> {
-    preparedAt: {
-        number: bigint;
-        hash: Hex;
-        timestamp: bigint;
-    };
-    transactionHash?: Hex;
-    outputs: {
-        to: string;
-        amount: bigint;
-        change: boolean;
-        commitment: Hex;
-        payload: Uint8Array;
-    }[];
-}
-interface IncomingHistoryEntry extends ReceiptPosition {
-    tokenAddress: Hex;
-    amount: bigint;
-    payload: Uint8Array;
-    spent: SpentState;
-}
-interface WalletHistory {
-    revision: number;
-    checkedThrough: Checkpoint | null;
-    invalidated: boolean;
-    /** Local construction records; not proof of a mined payment or funding identity. */
-    outgoing: OutgoingHistoryEntry[];
-    /** Authenticated incoming funds outputs, including already consumed ones. */
-    incoming: IncomingHistoryEntry[];
-}
-interface HistoryOptions {
-    tokenAddress?: Hex;
-}
-
-/** Native ethers transaction options; the exported business call and session chain remain fixed. */
-type SessionTransactionOptions = Omit<TransactionRequest, "to" | "from" | "data" | "value" | "chainId">;
-/** Wallet state and operations, with infrastructure and permissions explicitly injected. */
-declare class WalletSession {
-    #private;
-    readonly scope: WalletScope;
-    readonly protocol: Protocol$1;
-    constructor(options: WalletSessionOptions);
-    sendTransaction(call: TransactionCall, options?: SessionTransactionOptions): Promise<TransactionResponse>;
-    sendTransaction(operation: Operation, options?: SessionTransactionOptions): Promise<TransactionResponse>;
-    private runtime;
-    private updater;
-    /** Local session commits only. Host applications own cross-tab/store subscriptions. */
-    subscribe(listener: () => void): () => void;
-    /** Detached history for wallet UI; construction records do not imply chain success. */
-    getHistory(options?: HistoryOptions): Promise<WalletHistory>;
-    balance(tokenAddress: `0x${string}`): Promise<BalanceSnapshot>;
-    /** Pull explicitly selected indexed pages; no chain scanning or public tree reconstruction. */
-    refresh(options: RefreshOptions): Promise<RefreshResult>;
-    private preparation;
-    prepareTransfer(options: TransferPreparation): Promise<Operation>;
-    prepareShield(options: ShieldPreparation): Promise<Operation>;
-    prepareCreateCredit(options: CreateCreditPreparation): Promise<Operation>;
-    prepareDrawCredit(options: DrawCreditPreparation): Promise<Operation>;
-    prepareTopUpCredit(options: TopUpCreditPreparation): Promise<Operation>;
-    prepareCancelCredit(options: CancelCreditPreparation): Promise<Operation>;
-    resume(operationId: string): Promise<Operation>;
-    toJSON(): {
-        walletSession: boolean;
-        ownerAddress: `0x${string}`;
-    };
-}
-
-/** Compose independent Chain RPC and indexed Protocol RPC with local wallet capabilities. */
-type InvisiInfrastructure = Omit<WalletSessionInfrastructure, "wallet" | "protocol" | "namespace" | "viewing" | "authorization" | "chainReader" | "signer" | "fundingSigner"> & {
-    provider?: Provider;
-    chainReader?: ChainReader;
-};
-type InvisiOptions = InvisiInfrastructure;
-/** Public wallet and registry-specific inputs; signing remains external. */
-type RegistrationPreparationOptions = Pick<RegistrationPreparation, "update" | "deadline"> & Pick<TransactionIdentity, "wallet">;
-/** Owner address and session permissions; shared infrastructure belongs to InvisiOptions. */
-type ConnectionOptions = Pick<WalletSessionOptions, "wallet" | "protocol" | "namespace" | "viewing" | "authorization" | "signer" | "fundingSigner">;
-/** A neutral composition entry point; every resolved instance owns an independent session. */
-declare class Invisi {
-    #private;
-    constructor(options?: InvisiOptions);
-    connect(options: ConnectionOptions): Promise<WalletSession>;
-    private resolve;
-    /** Discover the selected chain's registry and prepare an independent signing request. */
-    prepareRegistration(options: RegistrationPreparationOptions): Promise<RegistrationOperation>;
-    private assertPublicIdentity;
-    private resolveExplicit;
-    prepareTransfer(options: ExplicitTransferPreparation): Promise<PreparedTransaction>;
-    prepareShield(options: ExplicitShieldPreparation): Promise<PreparedTransaction>;
-    prepareCreateCredit(options: ExplicitCreateCreditPreparation): Promise<PreparedTransaction>;
-    prepareDrawCredit(options: ExplicitDrawCreditPreparation): Promise<PreparedTransaction>;
-    prepareTopUpCredit(options: ExplicitTopUpCreditPreparation): Promise<PreparedTransaction>;
-    prepareCancelCredit(options: ExplicitCancelCreditPreparation): Promise<PreparedTransaction>;
-    toJSON(): {
-        invisi: boolean;
-    };
-}
-
-/** Deployment operations and token-compatible broadcaster discovery. */
+/** Deployment operations and transaction-compatible broadcaster discovery. */
 declare class Protocol extends Protocol$1 {
-    static fromRpc(rpc: Pick<ProtocolRpcClient$1, "getDeployment"> & Partial<Pick<ProtocolRpcClient$1, "getBroadcasters">>, provider: Provider, options?: {
+    static fromRpc(rpc: Pick<ProtocolRpcClient$1, "getDeployment"> & Partial<Pick<ProtocolRpcClient$1, "getBroadcasters" | "withReader">>, provider: Provider, options?: {
         signal?: AbortSignal;
     }): Promise<Protocol>;
-    /** Returns enabled services that answer a token fee probe; final quotes are checked by prepared. */
+    /** Discover token support without disclosing a transaction or requesting a price. */
     getBroadcasters(options: {
         tokenAddress: string;
+        signal?: AbortSignal;
     }): Promise<BroadcasterClient[]>;
 }
 
-/** Protocol RPC transport with ethers provider integration for independent chain checks. */
-declare class ProtocolRpcClient extends ProtocolRpcClient$1 {
-    withProvider(provider: Provider): ProtocolRpcClient$1;
-}
-
 /** Registry operations accept the application's existing ethers provider. */
 declare class AddressRegistry extends AddressRegistry$1 {
     prepareRegistration(options: RegistrationPreparation | (Omit<RegistrationPreparation, "reader"> & {
         provider: Provider;
-    })): Promise<_invisi_labs_protocol.RegistrationOperation>;
+    })): Promise<_invisi_labs_rpc.RegistrationOperation>;
 }
 
 interface BroadcasterRegistration {
@@ -788,27 +120,72 @@ declare class BroadcasterRegistry {
     }): Promise<RegisteredBroadcaster[]>;
 }
 
-/** Caller-owned, nonextractable AES-GCM key. The SDK does not persist the key. */
-declare class EncryptedWalletCodec implements WalletRecordCodec {
+/** Protocol RPC transport with ethers provider integration for independent chain checks. */
+declare class ProtocolRpcClient extends ProtocolRpcClient$1 {
+    withProvider(provider: Provider): ProtocolRpcClient$1;
+}
+
+/** Encode only the request, never the current output nonce or local registry lookup choice. */
+declare function encodePaymentRequest(request: PaymentRequest): string;
+/** Decode a canonical Note request offline, with exact resource and byte-layout checks. */
+declare function decodePaymentRequest(encoded: string): PaymentRequest;
+
+/** Complete opening of one funds Note. Never contains wallet keys or application payload. */
+interface PaymentNoteData {
+    chainId: bigint;
+    protocolAddress: Hex;
+    tokenAddress: Hex;
+    amount: bigint;
+    ownerAddress: Hex;
+    nonce: bigint;
+    commitment: Hex;
+}
+
+/** Supply connections for manually constructed Protocols; fromRpc connections are reused. */
+type PaymentNoteVerificationOptions = {
+    protocolRpc: Pick<ProtocolRpcClient$1, "withReader">;
+    confirmations?: number;
+} & ({
+    provider: Provider;
+    chainReader?: never;
+} | {
+    chainReader: ChainReader;
+    provider?: never;
+});
+type PaymentNoteVerificationSettings = {
+    confirmations?: number;
+};
+
+declare class VerifiedPaymentNote {
     #private;
+    constructor(token: symbol, membership: Membership, checkedAt: CanonicalBlock);
+    get membership(): Membership;
+    get checkedAt(): CanonicalBlock;
+}
+declare class SpendablePaymentNote extends VerifiedPaymentNote {
+    #private;
+    constructor(token: symbol, input: NoteInput, membership: Membership, checkedAt: CanonicalBlock, spendabilityCheckedAt: CanonicalBlock);
+    get spendabilityCheckedAt(): CanonicalBlock;
+    toInput(): NoteInput;
+}
+/** A validated Note opening, independent of an indexed wallet store. */
+declare class PaymentNote implements PaymentNoteData {
+    readonly chainId: bigint;
+    readonly protocolAddress: PaymentNoteData["protocolAddress"];
+    readonly tokenAddress: PaymentNoteData["tokenAddress"];
+    readonly amount: bigint;
+    readonly ownerAddress: PaymentNoteData["ownerAddress"];
+    readonly nonce: bigint;
+    readonly commitment: PaymentNoteData["commitment"];
+    readonly ipn: string;
     private constructor();
-    static fromKey(key: CryptoKey): EncryptedWalletCodec;
-    static fromBytes(key: Uint8Array): Promise<EncryptedWalletCodec>;
-    private aad;
-    encode(state: WalletState, context: {
-        key: string;
-        revision: number;
-    }): Promise<Uint8Array>;
-    decode(data: Uint8Array, context: {
-        key: string;
-        revision: number;
-    }): Promise<WalletState>;
-    toJSON(): {
-        walletRecordCodec: string;
-    };
+    static from(ipn: string): Promise<PaymentNote>;
+    verify(protocol: Protocol$1, options?: PaymentNoteVerificationOptions | PaymentNoteVerificationSettings): Promise<VerifiedPaymentNote>;
+    verifySpendable(protocol: Protocol$1, wallet: Wallet, options?: PaymentNoteVerificationOptions | PaymentNoteVerificationSettings): Promise<SpendablePaymentNote>;
+    private data;
 }
 
-/** Decode independently fetched canonical receipt bytes, never normalized service events. */
-declare function readProtocolLogs(receipt: CanonicalReceipt, protocolAddress: Address): DeliveryEventLog[];
+declare function encodePaymentNote(value: PaymentNoteData): string;
+declare function decodePaymentNote(encoded: string): PaymentNoteData;
 
-export { AddressRegistry, BalanceSnapshot, BroadcasterClient, type BroadcasterConfiguration, type BroadcasterQuote, type BroadcasterRegistration, BroadcasterRegistry, type BroadcasterRegistryOptions, BroadcasterRpcError, type BroadcasterStatus, type BroadcasterTransport, type BroadcasterTrust, CancelCreditPreparation, type ConnectionOptions, CreateCreditPreparation, type CreditInput, type DeliveryEventLog, type DisclosureEvidence, type DisclosureReader, type DisclosureReference, DisclosureVerifier, type DisclosureVerifierOptions, type DiscoveredCredit, type DiscoveredNote, DrawCreditPreparation, EncryptedWalletCodec, type ExplicitCancelCreditPreparation, type ExplicitCreateCreditPreparation, type ExplicitDrawCreditPreparation, type ExplicitShieldPreparation, type ExplicitTopUpCreditPreparation, type ExplicitTransferPreparation, GasReference, type HistoryOptions, type IncomingHistoryEntry, Invisi, InvisiError, type InvisiErrorCode, type InvisiErrorDetails, type InvisiOptions, type NoteInput, Operation, OperationAggregateMember, OperationStatus, type OutgoingHistoryEntry, PreparedTransaction, Protocol, ProtocolRpcClient, type RefreshOptions, type RefreshResult, type RegisteredBroadcaster, type RegistrationPreparationOptions, type SessionTransactionOptions, ShieldPreparation, type SignedBroadcasterQuote, TopUpCreditPreparation, type TransactionIdentity, TransactionProveOptions, TransferPreparation, type VerifiedDisclosure, type WalletHistory, WalletScope, WalletSession, WalletSessionOptions, WalletState, WithBroadcasterOptions, broadcasterQuoteDomain, broadcasterQuoteTypes, broadcasterRequestHash, broadcasterTransactInterface, decodeBroadcasterIntent, decryptCandidates, readProtocolLogs, verifyBroadcasterQuote };
+export { AddressRegistry, BroadcasterClient, type BroadcasterRegistration, BroadcasterRegistry, type BroadcasterRegistryOptions, type DisclosureEvidence, type DisclosureReader, type DisclosureReference, DisclosureVerifier, type DisclosureVerifierOptions, NoteInput, PaymentNote, type PaymentNoteData, type PaymentNoteVerificationOptions, type PaymentNoteVerificationSettings, PaymentRequest, Protocol, ProtocolRpcClient, type RegisteredBroadcaster, SpendablePaymentNote, type VerifiedDisclosure, VerifiedPaymentNote, decodePaymentNote, decodePaymentRequest, encodePaymentNote, encodePaymentRequest };