@invisi-labs/sdk 1.1.6 → 1.2.0

package/dist/index.js

@@ -1,807 +1,188 @@
 import {
-  DisclosureVerifier,
-  Operation,
-  WalletSession,
-  acceptFundingSignature,
-  acceptWalletSignature,
-  copyGasBenchmarks,
+  AddressRegistry,
+  Invisi,
+  PreparedTransaction,
   decryptCandidates,
-  defineGasBenchmarks,
-  deserializeState,
-  estimateGasReference,
-  fundingSigningRequest,
-  operationPreview,
-  proveOperation,
-  readProtocolLogs,
-  sameStatement,
-  serializeState,
-  walletSigningRequest
-} from "./chunk-4SD3MW6N.js";
+  extractDeliveryCandidates,
+  readProtocolLogs
+} from "./chunk-4H4FARQK.js";
+import "./chunk-HLH5JZD4.js";
+import "./chunk-THMD5QO2.js";
+import {
+  TransactionOutput
+} from "./chunk-DGMVGFKM.js";
+import {
+  BroadcasterClient,
+  BroadcasterRpcError,
+  broadcasterQuoteDomain,
+  broadcasterQuoteTypes,
+  broadcasterRequestHash,
+  broadcasterTransactInterface,
+  decodeBroadcasterIntent,
+  verifyBroadcasterQuote
+} from "./chunk-R5YAOJKB.js";
+import "./chunk-RY4M2CIQ.js";
 import {
   InvisiError,
   NoteOutput,
-  TransactionPreparation,
-  configureRecipientInfrastructure,
-  encodeOperation,
-  exportBroadcasterIntent,
-  positiveAmount,
-  prepareWithErrors,
-  publicProof,
-  requiresAuthorization,
-  statement,
-  walletBalance
-} from "./chunk-FL4TIGWW.js";
+  decodePaymentNote,
+  decodePaymentRequest,
+  encodePaymentNote,
+  encodePaymentRequest
+} from "./chunk-GUD3LAUO.js";
 import {
-  EthersChainReader,
-  EthersFundingVerifier
-} from "./chunk-QC6TQR3R.js";
+  EthersChainReader
+} from "./chunk-4VI6LYGH.js";
 
-// src/explicit-preparation.ts
-import { getAddress } from "ethers";
+// src/index.ts
+import {
+  Detector,
+  Disclosure,
+  MAX_MEMO_BYTES,
+  MissingCapabilityError,
+  NullifierCapability,
+  ViewingCapability,
+  Wallet as Wallet2,
+  computeCreditNullifier,
+  creditPeriods,
+  creditV1,
+  decodeDeliveryHeader,
+  decodeMemoText,
+  encodeMemo,
+  fundsV1
+} from "@invisi-labs/primitives";
+import { RegistrationOperation } from "@invisi-labs/rpc";
 
-// src/PreparedTransaction.ts
-import { MissingCapabilityError } from "@invisi-labs/core";
-import { normalizeFunding } from "@invisi-labs/protocol";
-function check(ok, message) {
-  if (!ok) throw new Error(message);
+// src/disclosure/DisclosureVerifier.ts
+function check(value, message) {
+  if (!value) throw new Error(message);
 }
-var PreparedTransaction = class _PreparedTransaction {
-  #runtime;
-  #saved;
-  #authorization;
-  #lifecycle;
-  status;
-  constructor(runtime, saved, status, lifecycle, authorization) {
-    this.#runtime = runtime;
-    this.#saved = structuredClone(saved);
-    this.#lifecycle = lifecycle;
-    this.#authorization = authorization;
-    this.status = status;
-    Object.freeze(this);
-  }
-  static prepare(runtime, plan) {
-    return new _PreparedTransaction(
-      runtime,
-      { plan: structuredClone(plan), generation: 0 },
-      "prepared",
-      { generation: 0, busy: false }
-    );
-  }
-  broadcasterQuote() {
-    return this.#saved.broadcasterQuote ? structuredClone(this.#saved.broadcasterQuote) : void 0;
-  }
-  async withBroadcaster(client, options) {
-    this.current();
-    check(
-      this.status === "prepared" && this.#runtime.reprepare,
-      "broadcaster must attach to an unsigned prepared transaction"
-    );
-    const { prepareBroadcasterPlan } = await import("./broadcaster-preparation-QVL62KM6.js");
-    const selected = await prepareBroadcasterPlan(
-      this.#saved.plan,
-      this.#runtime.reprepare,
-      client,
-      options
-    );
-    return new _PreparedTransaction(
-      this.#runtime,
-      { plan: selected.plan, broadcasterQuote: selected.quote, generation: 0 },
-      "prepared",
-      { generation: 0, busy: false }
-    );
-  }
-  get id() {
-    return this.#saved.plan.id;
-  }
-  get kind() {
-    return this.#saved.plan.kind;
-  }
-  estimateGas() {
-    return estimateGasReference(
-      this.#saved.plan,
-      this.#runtime.options.protocol,
-      this.#runtime.options.gasBenchmarks
-    );
-  }
-  preview() {
-    return operationPreview(this.#saved.plan, this.status);
-  }
-  /** Obtain a firm quote before signing. This intent contains no private inputs or witness. */
-  async exportBroadcasterIntent() {
-    this.current();
-    check(
-      ["prepared", "authorized"].includes(this.status),
-      "quote intent requires a prepared transaction"
-    );
-    return exportBroadcasterIntent(this.#saved.plan);
-  }
-  current() {
-    check(
-      !this.#lifecycle.busy && this.#lifecycle.generation === this.#saved.generation,
-      "stale transaction handle or active worker"
-    );
-  }
-  async stage(stage, allowed, work, signal) {
-    signal?.throwIfAborted();
-    this.current();
-    check(allowed.includes(this.status), `invalid transaction stage for ${stage}`);
-    this.#lifecycle.busy = true;
-    const saved = structuredClone(this.#saved);
-    try {
-      const next = await work(saved);
-      signal?.throwIfAborted();
-      saved.generation++;
-      this.#lifecycle.generation = saved.generation;
-      return new _PreparedTransaction(
-        this.#runtime,
-        saved,
-        next.status,
-        this.#lifecycle,
-        next.authorization ?? this.#authorization
-      );
-    } finally {
-      this.#lifecycle.busy = false;
-    }
-  }
-  /** Public EIP-712 request; signing transport and key custody belong to the caller. */
-  async exportWalletAuthorization(options = {}) {
-    options.signal?.throwIfAborted();
-    this.current();
-    check(
-      requiresAuthorization(this.#saved.plan),
-      "operation does not require wallet authorization"
-    );
-    check(
-      ["prepared", "authorized"].includes(this.status),
-      "operation is not awaiting wallet authorization"
-    );
-    return walletSigningRequest(this.#saved.plan);
-  }
-  /** Attach an external EOA signature, retaining its witness only at the private proving boundary. */
-  async withWalletSignature(signature, options = {}) {
-    options.signal?.throwIfAborted();
-    this.current();
-    check(
-      requiresAuthorization(this.#saved.plan),
-      "operation does not require wallet authorization"
-    );
+function reference(value) {
+  check(/^0x[0-9a-fA-F]{64}$/.test(value.transactionHash), "invalid disclosure transaction hash");
+  check(
+    typeof value.treeId === "bigint" && value.treeId > 0n && value.treeId < 1n << 64n,
+    "invalid disclosure tree ID"
+  );
+  check(
+    Number.isSafeInteger(value.leafIndex) && value.leafIndex >= 0 && value.leafIndex < 65536,
+    "invalid disclosure leaf index"
+  );
+  check(["funds", "owner", "spender"].includes(value.role), "invalid disclosure reference role");
+  return {
+    transactionHash: value.transactionHash.toLowerCase(),
+    treeId: value.treeId,
+    leafIndex: value.leafIndex,
+    role: value.role
+  };
+}
+var DisclosureVerifier = class {
+  #protocol;
+  #reader;
+  #confirmations;
+  constructor(options) {
+    const confirmations = options.confirmations ?? 1;
     check(
-      ["prepared", "authorized"].includes(this.status),
-      "operation is not awaiting wallet authorization"
-    );
-    const authorization = await acceptWalletSignature(this.#saved.plan, signature);
-    return this.stage(
-      "wallet authorization",
-      ["prepared", "authorized"],
-      async () => ({ status: "authorized", authorization }),
-      options.signal
+      Number.isSafeInteger(confirmations) && confirmations >= 1,
+      "invalid disclosure confirmations"
     );
+    this.#protocol = options.protocol;
+    this.#reader = "provider" in options ? new EthersChainReader(options.provider) : options.reader;
+    this.#confirmations = BigInt(confirmations);
+    Object.freeze(this);
   }
-  /** Export only after proving when the funding authorization binds an actual proof hash. */
-  async exportFundingAuthorization(options = {}) {
-    options.signal?.throwIfAborted();
-    this.current();
+  async barrier(block) {
+    await this.#protocol.validateDeployment(this.#reader);
+    const canonical = await this.#reader.getBlock(block.number);
     check(
-      this.status === (this.kind === "shield" ? "prepared" : "proved"),
-      "operation is not awaiting funding authorization or proof"
+      canonical.number === block.number && canonical.hash.toLowerCase() === block.hash.toLowerCase(),
+      "disclosure canonical block changed; reorg verification required"
     );
-    const request = await fundingSigningRequest(this.#saved, this.#runtime);
-    options.signal?.throwIfAborted();
-    this.current();
-    return request;
-  }
-  /** Verify an external signature against this handle's own frozen operation. */
-  async withFundingSignature(signature, options = {}) {
-    options.signal?.throwIfAborted();
-    this.current();
+    const head = await this.#reader.getLatestBlockNumber();
     check(
-      this.status === (this.kind === "shield" ? "prepared" : "proved"),
-      "operation is not awaiting funding authorization or proof"
-    );
-    const verified = await acceptFundingSignature(this.#saved, signature, this.#runtime);
-    return this.stage(
-      "funding authorization",
-      this.kind === "shield" ? ["prepared"] : ["proved"],
-      async (saved) => {
-        saved.plan.funding.signature = verified;
-        if (saved.plan.statement?.target !== "noir-recursive") {
-          saved.call = await this.encode(saved);
-        }
-        return { status: "ready" };
-      },
-      options.signal
+      head >= block.number && head - block.number + 1n >= this.#confirmations,
+      "insufficient disclosure confirmations"
     );
-  }
-  async prove(backendOrOptions = {}, suppliedOptions = {}) {
-    const options = { ..."prove" in backendOrOptions ? suppliedOptions : backendOrOptions };
     check(
-      !this.#saved.broadcasterQuote || options.execution !== "aggregate",
-      "a broadcaster quote requires direct execution"
+      await this.#reader.getChainId() === this.#protocol.context.chainId,
+      "disclosure chain changed during verification"
     );
-    const plan = this.#saved.plan;
-    check(plan.kind !== "shield", "shield requires no proof");
-    if (requiresAuthorization(plan)) {
-      check(
-        this.#authorization,
-        "local wallet authorization required; authorize again after recovery"
-      );
-    }
-    const prover = "prove" in backendOrOptions ? backendOrOptions : this.#runtime.options.prover;
-    if (!prover) {
-      throw new MissingCapabilityError("prover");
-    }
-    return this.stage(
-      "proof",
-      requiresAuthorization(plan) ? ["authorized"] : ["prepared"],
-      async (saved) => {
-        const p = saved.plan;
-        saved.proof = await proveOperation(
-          this.#runtime.options.protocol,
-          p,
-          this.#authorization,
-          prover,
-          options
-        );
-        if (p.fundingMode === "signature") {
-          return { status: "proved" };
-        }
-        if (p.statement?.target !== "noir-recursive") {
-          saved.call = await this.encode(saved);
-        }
-        return { status: "ready" };
-      },
-      options.signal
-    );
-  }
-  encode(saved) {
-    return encodeOperation(saved);
-  }
-  /** Shield caller funding needs no wallet signing or proof; this step only encodes its frozen request. */
-  async ready() {
+    return head - block.number + 1n;
+  }
+  /** Resolve the exact inserted output and its delivery from a successful canonical receipt. */
+  async readOutput(value) {
+    const selected = reference(value);
+    await this.#protocol.validateDeployment(this.#reader);
+    const received = await this.#reader.getReceipt(selected.transactionHash);
+    check(received, "disclosure transaction receipt is unavailable");
+    const receipt = structuredClone(received);
+    check(receipt.status === "success", "disclosure requires a successful transaction receipt");
     check(
-      this.kind === "shield" && this.#saved.plan.fundingMode === "caller",
-      "operation needs authorization or proof first"
+      receipt.transactionHash.toLowerCase() === selected.transactionHash,
+      "disclosure receipt transaction mismatch"
     );
-    return this.stage("encoding", ["prepared"], async (saved) => {
-      saved.call = await this.encode(saved);
-      return { status: "ready" };
-    });
-  }
-  async exportTransaction() {
-    this.current();
     check(
-      this.#saved.plan.statement?.target !== "noir-recursive",
-      "recursive operations must be exported as aggregate members"
+      typeof receipt.block.number === "bigint" && receipt.block.number >= 0n && /^0x[0-9a-fA-F]{64}$/.test(receipt.block.hash),
+      "invalid disclosure receipt block"
     );
-    check(this.status === "ready" && this.#saved.call, "transaction is not ready");
-    return structuredClone(this.#saved.call);
-  }
-  exportProof() {
-    this.current();
-    check(this.#saved.proof, "transaction has no proof");
-    return publicProof(this.#saved.proof);
-  }
-  exportAggregateMember() {
-    this.current();
-    const saved = this.#saved, plan = saved.plan;
-    check(
-      this.status === "ready" && plan.params && saved.proof && plan.statement?.target === "noir-recursive" && plan.statement.circuitName === "transact_user_slots14",
-      "ready recursive slots14 transaction required"
+    const { context } = this.#protocol;
+    const logs = readProtocolLogs(receipt, context.protocolAddress);
+    const candidates = extractDeliveryCandidates(logs, context, receipt.block.number).filter(
+      (candidate2) => candidate2.treeId === selected.treeId && candidate2.leafIndex === selected.leafIndex && candidate2.role === selected.role && candidate2.tokenAddress.toLowerCase() === context.tokenAddress.toLowerCase()
     );
-    sameStatement(saved.proof, statement(plan));
     check(
-      saved.proof.proofHex.length === 2 + 458 * 64,
-      "recursive member proof must have 458 fields"
+      candidates.length === 1,
+      "disclosure output has no unique canonical insertion and delivery"
     );
-    return {
-      bundle: publicProof(saved.proof),
-      statement: structuredClone(plan.statement),
-      context: { ...plan.context },
-      request: {
-        params: structuredClone(plan.params),
-        deliveries: plan.outputs.map((output) => structuredClone(output.delivery)),
-        funding: normalizeFunding(plan.funding)
-      }
-    };
-  }
-  toJSON() {
-    return { transaction: true, id: this.id, kind: this.kind, status: this.status };
-  }
-  [/* @__PURE__ */ Symbol.for("nodejs.util.inspect.custom")]() {
-    return this.toJSON();
-  }
-};
-
-// src/explicit-preparation.ts
-function explicitPreparation(options, data, tokenAddress) {
-  if (!options.chainReader) throw new Error("chain reader required");
-  const inputs = structuredClone(data.inputs ?? []);
-  const credits = structuredClone(data.creditInputs ?? []);
-  const inventory = { notes: {}, credits: {}, reservations: {} };
-  const context = options.protocol.context;
-  function position(input) {
-    if (typeof input.treeId !== "bigint" || input.treeId < 0n || input.treeId >= 1n << 256n || !Number.isInteger(input.leafIndex) || input.leafIndex < 0 || input.leafIndex >= 65536)
-      throw new Error("invalid explicit input position");
-  }
-  for (const input of inputs) {
-    position(input);
-    positiveAmount(input.note.amount);
-    if (inventory.notes[input.commitment]) throw new Error("duplicate explicit note input");
-    if (input.note.chainId !== context.chainId || input.note.protocolAddress !== BigInt(context.protocolAddress) || input.note.ownerAddress !== options.wallet.ownerAddress)
-      throw new Error("explicit note identity or deployment mismatch");
-    inventory.notes[input.commitment] = { ...input, spent: "unspent" };
-  }
-  for (const input of credits) {
-    position(input);
-    if (input.role !== "owner" && input.role !== "spender")
-      throw new Error("invalid explicit Credit role");
-    const key = input.commitment + ":" + input.role;
-    if (inventory.credits[key]) throw new Error("duplicate explicit Credit input");
-    inventory.credits[key] = { ...input, spent: "unspent" };
-  }
-  const scope = {
-    ...context,
-    namespace: "explicit",
-    ownerAddress: options.wallet.ownerAddress
-  };
-  const {
-    store: _store,
-    coinSelector: _selector,
-    authorization: _authorization,
-    viewing: _viewing,
-    signer: _signer,
-    fundingSigner: _fundingSigner,
-    ...capabilities
-  } = options;
-  if (inputs.some((input) => input.note.tokenAddress !== BigInt(getAddress(tokenAddress))))
-    throw new Error("explicit note token mismatch");
-  const runtime = {
-    options: { ...capabilities, protocol: options.protocol.forToken(tokenAddress) },
-    reader: options.chainReader,
-    scope
-  };
-  const reprepare = (intent) => import("./broadcaster-preparation-QVL62KM6.js").then(
-    ({ prepareIntent }) => prepareIntent(
-      {
-        ...runtime,
-        explicitInputs: true,
-        ...data.changeAddress ? { changeAddress: data.changeAddress } : {},
-        readInventory: async () => structuredClone(inventory),
-        complete: async (plan) => plan
-      },
-      intent
-    )
-  );
-  return new TransactionPreparation({
-    ...runtime,
-    explicitInputs: true,
-    ...data.changeAddress ? { changeAddress: data.changeAddress } : {},
-    readInventory: async () => structuredClone(inventory),
-    complete: async (plan) => PreparedTransaction.prepare({ ...runtime, reprepare }, plan)
-  });
-}
-
-// src/Invisi.ts
-import { ProtocolRpcClient } from "@invisi-labs/rpc";
-import { MissingCapabilityError as MissingCapabilityError2, PublicWallet } from "@invisi-labs/core";
-
-// src/AddressRegistry.ts
-import { AddressRegistry as Registry } from "@invisi-labs/protocol";
-var AddressRegistry = class extends Registry {
-  prepareRegistration(options) {
-    return prepareWithErrors("prepareRegistration", async () => {
-      if ("provider" in options) {
-        const { provider, ...preparation } = options;
-        return super.prepareRegistration({
-          ...preparation,
-          reader: new EthersChainReader(provider)
-        });
-      }
-      return super.prepareRegistration(options);
+    const candidate = candidates[0];
+    const confirmations = await this.barrier(receipt.block);
+    return Object.freeze({
+      reference: Object.freeze(selected),
+      block: Object.freeze({ ...receipt.block }),
+      confirmations,
+      output: Object.freeze({
+        chainId: context.chainId,
+        protocolAddress: BigInt(context.protocolAddress),
+        tokenAddress: BigInt(context.tokenAddress),
+        outputCommitment: candidate.commitment,
+        role: selected.role,
+        ciphertext: candidate.delivery.ciphertext
+      })
     });
   }
-};
-
-// src/Invisi.ts
-var Invisi = class {
-  #options;
-  constructor(options = {}) {
-    if ("addressLookup" in options || "addressResolver" in options)
-      throw new TypeError(
-        "Recipient lookup belongs to each EVM output; caller resolver injection is not supported"
-      );
-    if ("ciphertextCodecs" in options || "envelopeVersion" in options) {
-      throw new Error(
-        "SDK envelope versions are fixed; encode application payload bytes externally"
-      );
-    }
-    if ("signer" in options || "fundingSigner" in options) {
-      throw new Error(
-        "Invisi does not accept signer defaults; export a signing request and attach the external signature"
-      );
-    }
-    this.#options = {
-      ...options,
-      ...options.gasBenchmarks ? { gasBenchmarks: copyGasBenchmarks(options.gasBenchmarks) } : {}
-    };
-    Object.freeze(this);
-  }
-  async connect(options) {
-    return new WalletSession(await this.resolve(options));
-  }
-  async resolve(options) {
-    const allowed = [
-      "wallet",
-      "protocol",
-      "namespace",
-      "viewing",
-      "authorization",
-      "signer",
-      "fundingSigner"
-    ];
-    for (const key of Object.keys(options)) {
-      if (!allowed.includes(key))
-        throw new Error(
-          `Unknown connection option: ${key}; configure infrastructure on Invisi`
-        );
-    }
-    const selected = { ...options };
-    const combined = { ...this.#options, ...selected };
-    const { provider, ...runtime } = combined;
-    const reader = combined.chainReader ?? (provider ? new EthersChainReader(provider) : void 0);
-    if (!reader) throw new MissingCapabilityError2("chain reader");
-    if (provider && (await provider.getNetwork()).chainId !== selected.protocol.context.chainId)
-      throw new Error("provider deployment chain mismatch");
-    await selected.protocol.validateDeployment(reader);
-    if (runtime.protocolRpc instanceof ProtocolRpcClient) {
-      runtime.protocolRpc = runtime.protocolRpc.withReader(reader);
-    }
-    const fundingVerifier = combined.fundingVerifier ?? (provider ? new EthersFundingVerifier(provider, selected.protocol.context.chainId) : void 0);
-    return configureRecipientInfrastructure({
-      ...runtime,
-      ...provider ? { provider } : {},
-      chainReader: reader,
-      ...fundingVerifier ? { fundingVerifier } : {},
-      protocol: selected.protocol
-    });
-  }
-  /** Discover the selected chain's registry and prepare an independent signing request. */
-  async prepareRegistration(options) {
-    return prepareWithErrors("prepareRegistration", async () => {
-      for (const key of Object.keys(options)) {
-        if (!["wallet", "update", "deadline"].includes(key)) {
-          throw new Error(`Unknown registration option: ${key}`);
-        }
-      }
-      this.assertPublicIdentity(options);
-      const selected = { ...options };
-      const { provider, protocolRpc } = this.#options;
-      if (!provider) throw new MissingCapabilityError2("ethers provider");
-      if (!(protocolRpc instanceof ProtocolRpcClient)) {
-        throw new MissingCapabilityError2("Protocol RPC deployment discovery");
-      }
-      const chainId = (await provider.getNetwork()).chainId;
-      const deployment = await protocolRpc.getDeployment(chainId);
-      if (!deployment.registry) {
-        throw new MissingCapabilityError2("receiving-key registry deployment");
-      }
-      const registry = new AddressRegistry(
-        { chainId, registryAddress: deployment.registry.address },
-        { expectedRuntimeCodeHash: deployment.registry.runtimeCodeHash }
-      );
-      return registry.prepareRegistration({ ...selected, provider });
-    });
-  }
-  assertPublicIdentity(options) {
-    const { wallet } = options;
-    if (!(wallet instanceof PublicWallet) || ["getViewer", "getDetector", "exportAuthorization"].some((key) => key in wallet)) {
-      throw new Error(
-        "Independent preparation requires a PublicWallet without private capabilities"
-      );
-    }
-    for (const key of ["authorization", "signer", "fundingSigner", "viewing"]) {
-      if (key in options)
-        throw new Error(`Independent preparation does not accept capability: ${key}`);
-    }
-  }
-  resolveExplicit(options) {
-    this.assertPublicIdentity(options);
-    return this.resolve({ wallet: options.wallet, protocol: options.protocol });
-  }
-  async prepareTransfer(options) {
-    return prepareWithErrors("prepareTransfer", async () => {
-      const { wallet, protocol, ...input } = options;
-      const request = structuredClone(input);
-      const runtime = await this.resolveExplicit(options);
-      const preparation = explicitPreparation(runtime, request, request.tokenAddress);
-      return preparation.prepareTransfer(request);
-    });
-  }
-  async prepareShield(options) {
-    return prepareWithErrors("prepareShield", async () => {
-      const { wallet, protocol, ...input } = options;
-      const request = structuredClone(input);
-      const runtime = await this.resolveExplicit(options);
-      const preparation = explicitPreparation(runtime, {}, request.tokenAddress);
-      return preparation.prepareShield(request);
-    });
-  }
-  async prepareCreateCredit(options) {
-    return prepareWithErrors("prepareCreateCredit", async () => {
-      const { wallet, protocol, ...input } = options;
-      const request = structuredClone(input);
-      const runtime = await this.resolveExplicit(options);
-      const preparation = explicitPreparation(runtime, request, request.tokenAddress);
-      return preparation.prepareCreateCredit(request);
-    });
-  }
-  async prepareDrawCredit(options) {
-    return prepareWithErrors("prepareDrawCredit", async () => {
-      const { wallet, protocol, ...input } = options;
-      const request = structuredClone(input);
-      const runtime = await this.resolveExplicit(options);
-      const preparation = explicitPreparation(runtime, request, request.tokenAddress);
-      return preparation.prepareDrawCredit(request);
-    });
-  }
-  async prepareTopUpCredit(options) {
-    return prepareWithErrors("prepareTopUpCredit", async () => {
-      const { wallet, protocol, ...input } = options;
-      const request = structuredClone(input);
-      const runtime = await this.resolveExplicit(options);
-      const preparation = explicitPreparation(runtime, request, request.tokenAddress);
-      return preparation.prepareTopUpCredit(request);
-    });
-  }
-  async prepareCancelCredit(options) {
-    return prepareWithErrors("prepareCancelCredit", async () => {
-      const { wallet, protocol, ...input } = options;
-      const request = structuredClone(input);
-      const runtime = await this.resolveExplicit(options);
-      const preparation = explicitPreparation(runtime, request, request.tokenAddress);
-      return preparation.prepareCancelCredit(request);
+  async verify(disclosure, value) {
+    const evidence = await this.readOutput(value);
+    const result = await disclosure.verify(evidence.output);
+    const confirmations = await this.barrier(evidence.block);
+    return Object.freeze({
+      result: Object.freeze(result),
+      block: evidence.block,
+      confirmations,
+      output: Object.freeze({
+        ...evidence.reference,
+        commitment: evidence.output.outputCommitment
+      })
     });
   }
   toJSON() {
-    return { invisi: true };
+    return { disclosureVerifier: true, confirmations: this.#confirmations.toString() };
   }
   [/* @__PURE__ */ Symbol.for("nodejs.util.inspect.custom")]() {
     return this.toJSON();
   }
 };
 
-// src/index.ts
-import {
-  fundsV1,
-  creditV1,
-  decodeDeliveryHeader,
-  Wallet,
-  PublicWallet as PublicWallet2,
-  ViewingCapability,
-  Detector,
-  NullifierCapability,
-  WalletAuthorization,
-  MissingCapabilityError as MissingCapabilityError3,
-  Disclosure,
-  encodeMemo,
-  decodeMemoText,
-  MAX_MEMO_BYTES,
-  computeCreditNullifier,
-  creditPeriods
-} from "@invisi-labs/core";
-import { RegistrationOperation } from "@invisi-labs/protocol";
-
-// src/Protocol.ts
-import { Protocol as BaseProtocol } from "@invisi-labs/protocol";
-import { getAddress as getAddress3 } from "ethers";
-
-// src/broadcaster/index.ts
-import { AbiCoder, getAddress as getAddress2, Interface, keccak256, verifyTypedData } from "ethers";
-import { invisiProtocolAbi } from "@invisi-labs/protocol/contracts";
-var broadcasterQuoteTypes = {
-  Quote: [
-    { name: "token", type: "address" },
-    { name: "feeRecipient", type: "address" },
-    { name: "feeAmount", type: "uint256" },
-    { name: "deadline", type: "uint256" },
-    { name: "maxGas", type: "uint256" },
-    { name: "requestHash", type: "bytes32" }
-  ]
-};
-function broadcasterQuoteDomain(trust) {
-  return {
-    name: "InvisiBroadcaster",
-    version: "1",
-    chainId: trust.chainId,
-    verifyingContract: getAddress2(trust.protocol)
-  };
-}
-var supportedMethods = ["transact", "shield", "createCredit", "topUpCredit", "cancelCredit"];
-var intentAbi = invisiProtocolAbi.filter(
-  (item) => item.type === "function" && supportedMethods.includes(item.name) && (item.name !== "transact" || item.inputs[1]?.type === "tuple")
-);
-var broadcasterTransactInterface = new Interface(intentAbi);
-function decodeBroadcasterIntent(data) {
-  const parsed = broadcasterTransactInterface.parseTransaction({ data });
-  if (!parsed || !supportedMethods.includes(parsed.name))
-    throw new Error("unsupported broadcaster method");
-  const fragment = parsed.fragment;
-  const decoded = parsed.args;
-  if (broadcasterTransactInterface.encodeFunctionData(fragment, decoded).toLowerCase() !== data.toLowerCase())
-    throw new Error("noncanonical broadcaster calldata");
-  const method = parsed.name;
-  const raw = method === "transact" ? decoded[1] : void 0;
-  const params = raw?.params ?? (method === "shield" ? decoded[0] : method === "topUpCredit" ? decoded[1].creation : decoded[1]);
-  const funding = raw?.funding ?? (method === "shield" ? decoded[3] : ["createCredit", "topUpCredit"].includes(method) ? decoded[3] : void 0);
-  const deliveries = raw?.deliveries ?? (method === "shield" ? decoded[2] : ["createCredit", "topUpCredit"].includes(method) ? decoded[2] : []);
-  return {
-    fragment,
-    method,
-    args: decoded,
-    proof: method === "shield" ? "0x" : decoded[0],
-    request: { params, funding, deliveries }
-  };
-}
-function broadcasterRequestHash(data) {
-  const { fragment, method, args } = decodeBroadcasterIntent(data);
-  const copy = (value) => Array.isArray(value) ? value.map(copy) : value;
-  const canonical = copy(args);
-  if (method !== "shield") canonical[0] = "0x";
-  if (method === "transact") canonical[1][2][4] = "0x";
-  else if (method !== "cancelCredit") canonical[3][4] = "0x";
-  const calldata = broadcasterTransactInterface.encodeFunctionData(fragment, canonical);
-  return keccak256(
-    AbiCoder.defaultAbiCoder().encode(
-      ["string", "string", "bytes"],
-      ["InvisiBroadcasterIntentV1", method, calldata]
-    )
-  );
-}
-function verifyBroadcasterQuote(signed, trust, data, now = BigInt(Math.floor(Date.now() / 1e3))) {
-  const { quote } = signed;
-  const { request } = decodeBroadcasterIntent(data);
-  const p = request.params;
-  if (quote.requestHash !== broadcasterRequestHash(data) || getAddress2(quote.token) !== getAddress2(p.token) || getAddress2(quote.feeRecipient) !== getAddress2(p.feeRecipient) || BigInt(quote.feeAmount) !== p.feeAmount || BigInt(quote.deadline) > p.deadline || BigInt(quote.deadline) < now || BigInt(quote.maxGas) <= 0n || BigInt(quote.feeAmount) <= 0n || BigInt(quote.feeAmount) >= 1n << 128n)
-    throw new Error("quote does not match final intent or bounds");
-  if (getAddress2(
-    verifyTypedData(
-      broadcasterQuoteDomain(trust),
-      broadcasterQuoteTypes,
-      quote,
-      signed.signature
-    )
-  ) !== getAddress2(trust.signer))
-    throw new Error("untrusted quote signature");
-  return quote;
+// src/protocol/connections.ts
+var connections = /* @__PURE__ */ new WeakMap();
+function rememberProtocolConnection(protocol, provider, protocolRpc) {
+  connections.set(protocol, { provider, protocolRpc });
 }
-function checkedStatus(value, id) {
-  const status = value;
-  if (!status || status.id !== id || !["pending", "submitted", "confirmed", "reverted", "uncertain"].includes(status.state) || status.transactionHash !== void 0 && !/^0x[0-9a-fA-F]{64}$/.test(status.transactionHash))
-    throw new Error("invalid broadcaster status");
-  return status;
+function protocolConnection(protocol) {
+  return connections.get(protocol);
 }
-var BroadcasterClient = class {
-  configuration;
-  url;
-  transport;
-  requestId = 0;
-  constructor(configuration, transport) {
-    this.configuration = Object.freeze({
-      endpoint: configuration.endpoint,
-      quoteSigner: getAddress2(configuration.quoteSigner),
-      feeRecipient: getAddress2(configuration.feeRecipient)
-    });
-    if (BigInt(this.configuration.quoteSigner) === 0n || BigInt(this.configuration.feeRecipient) === 0n)
-      throw new Error("invalid broadcaster configuration");
-    this.url = configuration.endpoint;
-    const base = new URL(this.url);
-    if (base.protocol !== "https:" || base.username || base.password)
-      throw new Error("broadcaster requires HTTPS");
-    this.transport = transport ?? (async (request) => {
-      const response = await fetch(base, {
-        redirect: "error",
-        method: "POST",
-        body: JSON.stringify(request),
-        headers: { "content-type": "application/json" },
-        signal: AbortSignal.timeout(3e4)
-      });
-      if (!response.ok) throw new Error(`Broadcaster HTTP ${response.status}`);
-      if (!response.body) throw new Error("empty broadcaster response");
-      const reader = response.body.getReader();
-      const chunks = [];
-      let size = 0;
-      try {
-        while (true) {
-          const result = await reader.read();
-          if (result.done) break;
-          size += result.value.length;
-          if (size > 65536) throw new Error("broadcaster response too large");
-          chunks.push(result.value);
-        }
-      } finally {
-        await reader.cancel();
-      }
-      const bytes = new Uint8Array(size);
-      let offset = 0;
-      for (const chunk of chunks) {
-        bytes.set(chunk, offset);
-        offset += chunk.length;
-      }
-      return JSON.parse(new TextDecoder().decode(bytes));
-    });
-  }
-  async call(method, params) {
-    const id = ++this.requestId;
-    const response = await this.transport({
-      jsonrpc: "2.0",
-      id,
-      method,
-      params: [params]
-    });
-    if (!response || response.jsonrpc !== "2.0" || response.id !== id || Object.hasOwn(response, "result") === Object.hasOwn(response, "error"))
-      throw new Error("invalid broadcaster JSON-RPC response");
-    if (response.error) {
-      if (!Number.isInteger(response.error.code) || typeof response.error.message !== "string")
-        throw new Error("invalid broadcaster JSON-RPC error");
-      throw new BroadcasterRpcError(response.error.code, response.error.message);
-    }
-    return response.result;
-  }
-  async fee(token, data) {
-    const fee = await this.call("broadcaster_getFee", {
-      token: getAddress2(token),
-      ...data ? { data } : {}
-    });
-    if (!fee || getAddress2(fee.feeRecipient) !== this.configuration.feeRecipient || !/^\d+$/.test(fee.feeAmount) || BigInt(fee.feeAmount) <= 0n || BigInt(fee.feeAmount) >= 1n << 128n || !/^\d+$/.test(fee.maxGas) || BigInt(fee.maxGas) <= 0n)
-      throw new Error("invalid broadcaster fee");
-    return fee;
-  }
-  async quote(data, context) {
-    const signed = await this.call("broadcaster_getQuote", {
-      data
-    });
-    verifyBroadcasterQuote(
-      signed,
-      { ...context, signer: this.configuration.quoteSigner },
-      data
-    );
-    if (getAddress2(signed.quote.feeRecipient) !== this.configuration.feeRecipient)
-      throw new Error("unregistered fee recipient");
-    return { quote: signed.quote, signature: signed.signature, context: { ...context } };
-  }
-  async submit(data, signed, idempotencyKey) {
-    if (!signed.context) throw new Error("missing verified quote context");
-    verifyBroadcasterQuote(
-      signed,
-      { ...signed.context, signer: this.configuration.quoteSigner },
-      data,
-      0n
-    );
-    if (getAddress2(signed.quote.feeRecipient) !== this.configuration.feeRecipient)
-      throw new Error("unregistered fee recipient");
-    return checkedStatus(
-      await this.call("broadcaster_submitTransaction", {
-        data,
-        quote: signed.quote,
-        signature: signed.signature,
-        idempotencyKey
-      }),
-      idempotencyKey
-    );
-  }
-  async status(id) {
-    return checkedStatus(await this.call("broadcaster_getTransactionStatus", { id }), id);
-  }
-};
-var BroadcasterRpcError = class extends Error {
-  constructor(code, message) {
-    super(message);
-    this.code = code;
-    this.name = "BroadcasterRpcError";
-  }
-};
 
-// src/Protocol.ts
+// src/protocol/Protocol.ts
+import { Protocol as BaseProtocol } from "@invisi-labs/rpc";
+import { getAddress } from "ethers";
 var sources = /* @__PURE__ */ new WeakMap();
 var Protocol = class _Protocol extends BaseProtocol {
   static async fromRpc(rpc, provider, options = {}) {
@@ -809,11 +190,19 @@ var Protocol = class _Protocol extends BaseProtocol {
     const protocol = new _Protocol({ deployment: verified.deployment });
     if (rpc.getBroadcasters)
       sources.set(protocol, rpc);
+    if (rpc.withReader)
+      rememberProtocolConnection(
+        protocol,
+        provider,
+        rpc
+      );
     return protocol;
   }
-  /** Returns enabled services that answer a token fee probe; final quotes are checked by prepared. */
+  /** Discover token support without disclosing a transaction or requesting a price. */
   async getBroadcasters(options) {
-    const token = getAddress3(options.tokenAddress);
+    options.signal?.throwIfAborted();
+    const token = getAddress(options.tokenAddress);
+    if (BigInt(token) === 0n) throw Error("Invalid Broadcaster token address");
     if (!this.deployment.broadcasterRegistry)
       throw new Error("broadcaster registry is not configured");
     const rpc = sources.get(this);
@@ -823,9 +212,11 @@ var Protocol = class _Protocol extends BaseProtocol {
     let block;
     const seen = /* @__PURE__ */ new Set();
     do {
+      options.signal?.throwIfAborted();
       const page = await rpc.getBroadcasters({
         enabled: true,
         limit: 100,
+        ...options.signal ? { signal: options.signal } : {},
         ...after ? { after } : {},
         ...block ? { block } : {}
       });
@@ -834,14 +225,28 @@ var Protocol = class _Protocol extends BaseProtocol {
         page.broadcasters.map(async (entry) => {
           if (!entry.enabled) return void 0;
           try {
-            const client = new BroadcasterClient(entry);
-            await client.fee(token);
+            const client = new BroadcasterClient({
+              endpoint: entry.endpoint,
+              quoteSigner: entry.quoteSigner,
+              feeRecipient: entry.feeRecipient
+            });
+            if (!await client.supportsToken(
+              token,
+              {
+                chainId: this.context.chainId,
+                protocol: this.context.protocolAddress
+              },
+              options
+            ))
+              return void 0;
             return client;
           } catch {
+            options.signal?.throwIfAborted();
             return void 0;
           }
         })
       );
+      options.signal?.throwIfAborted();
       clients.push(
         ...compatible.filter((client) => client !== void 0)
       );
@@ -854,22 +259,14 @@ var Protocol = class _Protocol extends BaseProtocol {
 };
 
 // src/index.ts
-import { ProtocolRpcError, MAX_UPDATE_BLOCKS } from "@invisi-labs/rpc";
+import { MAX_UPDATE_BLOCKS, ProtocolRpcError } from "@invisi-labs/rpc";
 
-// src/ProtocolRpcClient.ts
-import { ProtocolRpcClient as RpcClient } from "@invisi-labs/rpc";
-var ProtocolRpcClient2 = class extends RpcClient {
-  withProvider(provider) {
-    return this.withReader(new EthersChainReader(provider));
-  }
-};
-
-// src/BroadcasterRegistry.ts
-import { getAddress as getAddress4, Interface as Interface2, keccak256 as keccak2562 } from "ethers";
+// src/protocol/BroadcasterRegistry.ts
 import { broadcasterRegistryAbi } from "@invisi-labs/protocol/contracts";
-var abi = new Interface2(broadcasterRegistryAbi);
+import { getAddress as getAddress2, Interface, keccak256 } from "ethers";
+var abi = new Interface(broadcasterRegistryAbi);
 function address(value) {
-  const normalized = getAddress4(value);
+  const normalized = getAddress2(value);
   if (BigInt(normalized) === 0n) throw new Error("zero broadcaster address");
   return normalized;
 }
@@ -912,7 +309,7 @@ var BroadcasterRegistry = class {
     if ((await provider.getNetwork()).chainId !== chainId) {
       throw new Error("broadcaster registry chain mismatch");
     }
-    if (keccak2562(await provider.getCode(this.address)).toLowerCase() !== runtimeCodeHash.toLowerCase()) {
+    if (keccak256(await provider.getCode(this.address)).toLowerCase() !== runtimeCodeHash.toLowerCase()) {
       throw new Error("broadcaster registry runtime code mismatch");
     }
   }
@@ -952,7 +349,7 @@ var BroadcasterRegistry = class {
         toBlock: end
       });
       for (const log of logs) {
-        if (getAddress4(log.address) !== this.address)
+        if (getAddress2(log.address) !== this.address)
           throw new Error("registry event address mismatch");
         const event = abi.parseLog(log);
         if (!event || event.name !== "BroadcasterSet")
@@ -970,116 +367,254 @@ var BroadcasterRegistry = class {
   }
 };
 
-// src/integrations/encrypted-codec.ts
-var EncryptedWalletCodec = class _EncryptedWalletCodec {
-  #key;
-  constructor(key) {
-    this.#key = key;
-  }
-  static fromKey(key) {
-    if (key.type !== "secret" || key.algorithm.name !== "AES-GCM" || key.algorithm.length !== 256 || !key.usages.includes("encrypt") || !key.usages.includes("decrypt"))
-      throw new Error("wallet record key must support AES-256-GCM encryption and decryption");
-    return new _EncryptedWalletCodec(key);
+// src/protocol/ProtocolRpcClient.ts
+import { ProtocolRpcClient as RpcClient } from "@invisi-labs/rpc";
+var ProtocolRpcClient = class extends RpcClient {
+  withProvider(provider) {
+    return this.withReader(new EthersChainReader(provider));
   }
-  static async fromBytes(key) {
-    if (key.length !== 32) throw new Error("wallet record encryption requires 32 key bytes");
-    const copy = Uint8Array.from(key);
-    try {
-      return _EncryptedWalletCodec.fromKey(
-        await crypto.subtle.importKey("raw", copy, { name: "AES-GCM" }, false, [
-          "encrypt",
-          "decrypt"
-        ])
-      );
-    } finally {
-      copy.fill(0);
-    }
+};
+
+// src/index.ts
+import { getDocumentedGasReference } from "@invisi-labs/protocol";
+
+// src/payment-note/PaymentNote.ts
+import { computeNoteIdentity, computeNoteCommitment, Wallet } from "@invisi-labs/primitives";
+
+// src/payment-note/verification.ts
+import {
+  poseidonHash,
+  TREE_DEPTH,
+  computeNoteNullifier
+} from "@invisi-labs/primitives";
+import { getAddress as getAddress3 } from "ethers";
+function verificationOptions(protocol, options = {}) {
+  const connected = protocolConnection(protocol);
+  const resolved = { ...connected, ...options };
+  if (!("protocolRpc" in resolved) || !resolved.protocolRpc || !("chainReader" in resolved) && !("provider" in resolved))
+    throw new Error(
+      "Payment note verification requires Protocol.fromRpc or explicit chain and Protocol RPC connections"
+    );
+  return resolved;
+}
+function sameBlock(a, b) {
+  return a.number === b.number && a.hash === b.hash && a.parentHash === b.parentHash && a.timestamp === b.timestamp;
+}
+function asNote(data) {
+  return {
+    chainId: data.chainId,
+    protocolAddress: BigInt(data.protocolAddress),
+    tokenAddress: BigInt(data.tokenAddress),
+    amount: data.amount,
+    ownerAddress: data.ownerAddress,
+    nonce: data.nonce
+  };
+}
+async function verifyPaymentNote(data, protocol, options, wallet) {
+  if (data.chainId !== protocol.context.chainId || getAddress3(data.protocolAddress) !== getAddress3(protocol.context.protocolAddress))
+    throw new Error("Payment note protocol context mismatch");
+  const confirmations = options.confirmations ?? 1;
+  if (!Number.isSafeInteger(confirmations) || confirmations < 1)
+    throw new RangeError("confirmations must be positive");
+  const reader = options.chainReader ?? new EthersChainReader(options.provider);
+  await protocol.validateDeployment(reader);
+  if (wallet && getAddress3(wallet.ownerAddress) !== getAddress3(data.ownerAddress))
+    throw new Error("Payment note owner mismatch");
+  const latest = await reader.getLatestBlockNumber();
+  const number = latest - BigInt(confirmations - 1);
+  if (number < protocol.deployment.protocol.fromBlock)
+    throw new Error("Insufficient confirmed blocks");
+  const rpc = options.protocolRpc.withReader(reader);
+  const status = await rpc.getStatus(protocol.context);
+  if (!status.indexedHead) throw new Error("Protocol RPC has no indexed blocks");
+  const indexedNumber = status.indexedHead.number < number ? status.indexedHead.number : number;
+  if (indexedNumber < protocol.deployment.protocol.fromBlock)
+    throw new Error("Protocol RPC has not reached the deployment");
+  const checkedAt = await reader.getBlock(indexedNumber);
+  if (checkedAt.number !== indexedNumber)
+    throw new Error("Payment note confirmation block mismatch");
+  const result = await rpc.getNote(protocol.context, data.commitment, checkedAt);
+  if (!result) throw new Error("Payment note is not indexed at the requested confirmed block");
+  const { output, membership } = result;
+  if (output.commitment !== data.commitment || getAddress3(output.tokenAddress) !== getAddress3(data.tokenAddress) || membership.leaf !== data.commitment || membership.treeId !== output.treeId || membership.leafIndex !== output.leafIndex || membership.block.number > checkedAt.number || output.block.number > checkedAt.number || membership.path.length !== TREE_DEPTH || !Number.isSafeInteger(output.leafIndex) || output.leafIndex < 0 || output.leafIndex >= 2 ** TREE_DEPTH)
+    throw new Error("Payment note membership metadata mismatch");
+  let root = BigInt(data.commitment);
+  for (let level = 0; level < membership.path.length; level++) {
+    const sibling = membership.path[level];
+    root = BigInt(
+      await poseidonHash(output.leafIndex >> level & 1 ? [sibling, root] : [root, sibling])
+    );
   }
-  aad(context) {
-    if (!Number.isSafeInteger(context.revision) || context.revision < 1)
-      throw new Error("invalid encrypted record revision");
-    return new TextEncoder().encode(
-      `Invisi.WalletRecord.v1\0${context.revision}\0${context.key}`
+  if (root !== BigInt(membership.root) || !await reader.isKnownRoot(protocol.context, membership.treeId, membership.root, checkedAt))
+    throw new Error("Payment note membership root is not accepted on chain");
+  if (!sameBlock(output.block, await reader.getBlock(output.block.number)) || !sameBlock(membership.block, await reader.getBlock(membership.block.number)))
+    throw new Error("Payment note block is no longer canonical");
+  let spendabilityCheckedAt;
+  if (wallet) {
+    const current = await reader.getBlock(await reader.getLatestBlockNumber());
+    const nullifier = await computeNoteNullifier(
+      data.chainId,
+      BigInt(data.protocolAddress),
+      data.nonce,
+      data.commitment
     );
+    const spent = await reader.isSpent(protocol.context, [nullifier], current);
+    if (spent.length !== 1 || spent[0] !== false)
+      throw new Error("Payment note is already spent");
+    if (!await reader.isKnownRoot(
+      protocol.context,
+      membership.treeId,
+      membership.root,
+      current
+    ))
+      throw new Error("Payment note membership root is no longer spendable");
+    if (!sameBlock(current, await reader.getBlock(current.number)))
+      throw new Error("Spendability block reorganized");
+    spendabilityCheckedAt = current;
+  }
+  if (!sameBlock(checkedAt, await reader.getBlock(checkedAt.number)))
+    throw new Error("Payment note verification block reorganized");
+  return {
+    input: {
+      note: asNote(data),
+      commitment: data.commitment,
+      treeId: output.treeId,
+      leafIndex: output.leafIndex
+    },
+    membership,
+    checkedAt,
+    ...spendabilityCheckedAt ? { spendabilityCheckedAt } : {}
+  };
+}
+
+// src/payment-note/PaymentNote.ts
+var verification = /* @__PURE__ */ Symbol("PaymentNote verification");
+var VerifiedPaymentNote = class {
+  #membership;
+  #checkedAt;
+  constructor(token, membership, checkedAt) {
+    if (token !== verification) throw new Error("Payment note verification required");
+    this.#membership = structuredClone(membership);
+    this.#checkedAt = structuredClone(checkedAt);
+  }
+  get membership() {
+    return structuredClone(this.#membership);
+  }
+  get checkedAt() {
+    return structuredClone(this.#checkedAt);
   }
-  async encode(state, context) {
-    const iv = crypto.getRandomValues(new Uint8Array(12)), plain = Uint8Array.from(serializeState(state));
-    try {
-      const encrypted = new Uint8Array(
-        await crypto.subtle.encrypt(
-          { name: "AES-GCM", iv, additionalData: this.aad(context) },
-          this.#key,
-          plain
-        )
-      );
-      const out = new Uint8Array(13 + encrypted.length);
-      out[0] = 1;
-      out.set(iv, 1);
-      out.set(encrypted, 13);
-      return out;
-    } finally {
-      plain.fill(0);
-    }
+};
+var SpendablePaymentNote = class extends VerifiedPaymentNote {
+  #input;
+  #spendabilityCheckedAt;
+  constructor(token, input, membership, checkedAt, spendabilityCheckedAt) {
+    super(token, membership, checkedAt);
+    this.#input = structuredClone(input);
+    this.#spendabilityCheckedAt = structuredClone(spendabilityCheckedAt);
+    Object.freeze(this);
   }
-  async decode(data, context) {
-    if (data.length < 29 || data[0] !== 1)
-      throw new Error("wallet record authentication failed");
-    let plain;
-    try {
-      plain = new Uint8Array(
-        await crypto.subtle.decrypt(
-          {
-            name: "AES-GCM",
-            iv: Uint8Array.from(data.subarray(1, 13)),
-            additionalData: this.aad(context)
-          },
-          this.#key,
-          Uint8Array.from(data.subarray(13))
-        )
-      );
-    } catch {
-      throw new Error("wallet record authentication failed");
-    }
-    try {
-      return deserializeState(plain);
-    } finally {
-      plain.fill(0);
-    }
+  get spendabilityCheckedAt() {
+    return structuredClone(this.#spendabilityCheckedAt);
   }
-  toJSON() {
-    return { walletRecordCodec: "AES-256-GCM" };
+  toInput() {
+    return structuredClone(this.#input);
   }
-  [/* @__PURE__ */ Symbol.for("nodejs.util.inspect.custom")]() {
-    return this.toJSON();
+};
+var PaymentNote = class _PaymentNote {
+  chainId;
+  protocolAddress;
+  tokenAddress;
+  amount;
+  ownerAddress;
+  nonce;
+  commitment;
+  ipn;
+  constructor(data, ipn) {
+    this.chainId = data.chainId;
+    this.protocolAddress = data.protocolAddress;
+    this.tokenAddress = data.tokenAddress;
+    this.amount = data.amount;
+    this.ownerAddress = data.ownerAddress;
+    this.nonce = data.nonce;
+    this.commitment = data.commitment;
+    this.ipn = ipn;
+    Object.freeze(this);
+  }
+  static async from(ipn) {
+    const data = decodePaymentNote(ipn);
+    const identity = await computeNoteIdentity(BigInt(data.ownerAddress), data.nonce);
+    const commitment = await computeNoteCommitment(
+      data.chainId,
+      BigInt(data.protocolAddress),
+      identity,
+      BigInt(data.tokenAddress),
+      data.amount
+    );
+    if (commitment !== data.commitment) throw new Error("Payment note commitment mismatch");
+    return new _PaymentNote(data, encodePaymentNote(data));
+  }
+  async verify(protocol, options = {}) {
+    const result = await verifyPaymentNote(
+      this.data(),
+      protocol,
+      verificationOptions(protocol, options)
+    );
+    const verified = new VerifiedPaymentNote(verification, result.membership, result.checkedAt);
+    Object.freeze(verified);
+    return verified;
+  }
+  async verifySpendable(protocol, wallet, options = {}) {
+    if (!(wallet instanceof Wallet)) throw new Error("A public Wallet is required");
+    const result = await verifyPaymentNote(
+      this.data(),
+      protocol,
+      verificationOptions(protocol, options),
+      wallet
+    );
+    return new SpendablePaymentNote(
+      verification,
+      result.input,
+      result.membership,
+      result.checkedAt,
+      result.spendabilityCheckedAt
+    );
+  }
+  data() {
+    const { chainId, protocolAddress, tokenAddress, amount, ownerAddress, nonce, commitment } = this;
+    return { chainId, protocolAddress, tokenAddress, amount, ownerAddress, nonce, commitment };
   }
 };
+
+// src/index.ts
+import { authenticatedDecryptor, DeliveryDecryptionError } from "@invisi-labs/primitives";
 export {
   AddressRegistry,
   BroadcasterClient,
   BroadcasterRegistry,
   BroadcasterRpcError,
+  DeliveryDecryptionError,
   Detector,
   Disclosure,
   DisclosureVerifier,
-  EncryptedWalletCodec,
   Invisi,
   InvisiError,
   MAX_MEMO_BYTES,
   MAX_UPDATE_BLOCKS,
-  MissingCapabilityError3 as MissingCapabilityError,
+  MissingCapabilityError,
   NoteOutput,
   NullifierCapability,
-  Operation,
+  PaymentNote,
   PreparedTransaction,
   Protocol,
-  ProtocolRpcClient2 as ProtocolRpcClient,
+  ProtocolRpcClient,
   ProtocolRpcError,
-  PublicWallet2 as PublicWallet,
   RegistrationOperation,
+  SpendablePaymentNote,
+  TransactionOutput,
+  VerifiedPaymentNote,
   ViewingCapability,
-  Wallet,
-  WalletAuthorization,
-  WalletSession,
+  Wallet2 as Wallet,
+  authenticatedDecryptor,
   broadcasterQuoteDomain,
   broadcasterQuoteTypes,
   broadcasterRequestHash,
@@ -1090,12 +625,15 @@ export {
   decodeBroadcasterIntent,
   decodeDeliveryHeader,
   decodeMemoText,
+  decodePaymentNote,
+  decodePaymentRequest,
   decryptCandidates,
-  defineGasBenchmarks,
   encodeMemo,
+  encodePaymentNote,
+  encodePaymentRequest,
   fundsV1,
+  getDocumentedGasReference,
   readProtocolLogs,
-  verifyBroadcasterQuote,
-  walletBalance
+  verifyBroadcasterQuote
 };
 //# sourceMappingURL=index.js.map