@invisi-labs/sdk 1.1.6 → 1.2.0

package/dist/chunk-HLH5JZD4.js

@@ -0,0 +1,287 @@
+import {
+  statement
+} from "./chunk-THMD5QO2.js";
+import {
+  Preparation,
+  positiveAmount,
+  positiveOutputAmount
+} from "./chunk-RY4M2CIQ.js";
+import {
+  resolvedOutputSnapshot
+} from "./chunk-GUD3LAUO.js";
+
+// src/broadcaster/intent.ts
+import { normalizeFunding } from "@invisi-labs/protocol";
+import { invisiProtocolAbi } from "@invisi-labs/protocol/contracts";
+import { Interface } from "ethers";
+function exportBroadcasterIntent(plan) {
+  if (plan.statement && plan.statement.target !== "evm")
+    throw new Error("unsupported broadcaster operation");
+  if (plan.statement) statement(plan);
+  const feeDefaults = (params) => ({
+    ...params,
+    feeRecipient: params.feeRecipient ?? "0x0000000000000000000000000000000000000000",
+    feeAmount: params.feeAmount ?? 0n
+  });
+  const funding = { ...normalizeFunding(plan.funding), signature: "0x" };
+  let method;
+  let args;
+  if (plan.params) {
+    method = "transact";
+    args = [
+      "0x",
+      {
+        params: feeDefaults(plan.params),
+        deliveries: plan.outputs.map((o) => o.delivery),
+        funding
+      }
+    ];
+  } else if (plan.shieldParams) {
+    method = "shield";
+    args = [
+      feeDefaults(plan.shieldParams),
+      plan.shieldOutputs,
+      plan.outputs.map((o) => o.delivery),
+      funding
+    ];
+  } else if (plan.credit?.creation) {
+    method = "createCredit";
+    args = ["0x", plan.credit.creation, plan.credit.deliveries];
+  } else if (plan.credit?.draw) {
+    method = "creditDraw";
+    args = ["0x", plan.credit.draw, plan.credit.deliveries];
+  } else if (plan.credit?.update) {
+    method = "updateCredit";
+    args = ["0x", plan.credit.update, plan.credit.deliveries];
+  } else if (plan.credit?.revocation) {
+    const p = plan.credit.revocation;
+    method = "revokeCredit";
+    args = [
+      p.token,
+      p.owner,
+      p.shard,
+      p.slot,
+      p.deadline,
+      p.feeRecipient ?? "0x0000000000000000000000000000000000000000",
+      p.feeAmount ?? 0n,
+      "0x"
+    ];
+  } else throw new Error("unsupported broadcaster operation");
+  const abi = invisiProtocolAbi.filter(
+    (item) => item.type === "function" && item.name === method && (method !== "transact" || item.inputs[1]?.type === "tuple")
+  );
+  return {
+    sendable: false,
+    data: new Interface(abi).encodeFunctionData(method, args)
+  };
+}
+
+// src/transactions/preparation/transaction-preparation.ts
+import {
+  normalizeTransactRequest,
+  transactUserPublicInputs,
+  ZERO_ADDRESS
+} from "@invisi-labs/protocol";
+import { WitnessBuilder } from "@invisi-labs/prover";
+import { getAddress } from "ethers";
+var TransactionPreparation = class {
+  constructor(context) {
+    this.context = context;
+    const complete = context.complete;
+    this.context = {
+      ...context,
+      complete: (plan) => {
+        const intent = this.#intent ? structuredClone(this.#intent) : void 0;
+        if (intent && (intent.kind === "transfer" || intent.kind === "shield")) {
+          const businessOutputs = plan.outputs.filter((output) => !output.change);
+          intent.options.outputs = intent.options.outputs.map(
+            (payment, index) => resolvedOutputSnapshot(payment, businessOutputs[index])
+          );
+        }
+        return complete({ ...plan, ...intent ? { intent } : {} });
+      }
+    };
+  }
+  #intent;
+  runtime(tokenAddress) {
+    if (getAddress(tokenAddress) !== getAddress(this.context.options.protocol.context.tokenAddress))
+      throw new Error("preparation token mismatch");
+    return this.context;
+  }
+  get scope() {
+    return this.context.scope;
+  }
+  async prepareTransfer(options) {
+    this.#intent = { kind: "transfer", options: structuredClone(options) };
+    if (Object.hasOwn(options, "target") || Object.hasOwn(options, "execution")) {
+      throw new Error(
+        "prepareTransfer accepts no target or execution; choose execution in prove()"
+      );
+    }
+    const copied = structuredClone(options);
+    const runtime = this.runtime(copied.tokenAddress);
+    if (copied.commitments !== void 0 && copied.commitments.length === 0)
+      throw new Error("empty explicit input selection");
+    const preparation = new Preparation({
+      ...runtime,
+      ...copied.commitments !== void 0 ? { inputSelection: copied.commitments } : {}
+    });
+    const frame = await preparation.frame(copied.deadline);
+    if (copied.outputs.length > 190) throw new Error("transfer supports at most 190 outputs");
+    let withdrawalAddress = ZERO_ADDRESS;
+    let withdrawalAmount = 0n;
+    if (copied.withdrawal !== void 0) {
+      withdrawalAddress = getAddress(copied.withdrawal.to);
+      positiveAmount(copied.withdrawal.amount);
+      if (BigInt(withdrawalAddress) === 0n)
+        throw new Error("withdrawal destination must be nonzero");
+      withdrawalAmount = copied.withdrawal.amount;
+    }
+    if (copied.outputs.length === 0 && withdrawalAmount === 0n)
+      throw new Error("transfer requires a private output or public withdrawal");
+    const feeRecipient = copied.fee ? getAddress(copied.fee.recipient) : ZERO_ADDRESS;
+    const feeAmount = copied.fee?.amount ?? 0n;
+    if (copied.fee) {
+      positiveAmount(feeAmount);
+      if (BigInt(feeRecipient) === 0n) throw new Error("fee recipient must be nonzero");
+    }
+    const total = copied.outputs.reduce(
+      (sum, output, index) => sum + positiveOutputAmount(output, index),
+      withdrawalAmount + feeAmount
+    );
+    const funding = await preparation.funding(copied.funding, frame);
+    return this.funds(
+      copied.outputs,
+      total,
+      withdrawalAddress,
+      withdrawalAmount,
+      { recipient: feeRecipient, amount: feeAmount },
+      frame,
+      funding,
+      preparation
+    );
+  }
+  async funds(payments, total, withdrawalAddress, withdrawalAmount, fee, frame, funding, preparation) {
+    if (total >= 1n << 135n) {
+      throw new Error("transaction sum exceeds uint135");
+    }
+    const { context, block, deadline } = frame;
+    const selection = await preparation.selectFunds(
+      total - (funding.funding.amount ?? 0n),
+      frame
+    );
+    const outputs = await Promise.all(
+      payments.map((payment, index) => preparation.output(payment, context, false, index))
+    );
+    const change = selection.amount + (funding.funding.amount ?? 0n) - total;
+    if (change > 0n) {
+      outputs.push(await preparation.change(change, context));
+    }
+    const params = {
+      token: context.tokenAddress,
+      sources: selection.sources,
+      nullifiers: selection.nullifiers,
+      noteCommitments: outputs.map((output) => output.commitment),
+      withdrawalAddress,
+      withdrawalAmount,
+      deadline,
+      feeRecipient: fee.recipient,
+      feeAmount: fee.amount
+    };
+    const deliveries = outputs.map((output) => output.delivery);
+    const normalized = normalizeTransactRequest(context, params, deliveries, funding.funding);
+    const statement2 = WitnessBuilder.statement(
+      `transact_user_slots${normalized.capacity}`,
+      transactUserPublicInputs(context, params, deliveries, funding.funding),
+      "evm"
+    );
+    await preparation.assertBlock(frame);
+    return preparation.runtime.complete({
+      version: 1,
+      id: crypto.randomUUID(),
+      kind: "transfer",
+      context,
+      scope: this.scope,
+      preparedAt: block,
+      deadline,
+      outputs,
+      inputs: selection.inputs,
+      ...funding,
+      params,
+      capacity: normalized.capacity,
+      statement: statement2
+    });
+  }
+  async prepareShield(options) {
+    this.#intent = { kind: "shield", options: structuredClone(options) };
+    const copied = structuredClone(options);
+    const preparation = new Preparation(this.runtime(copied.tokenAddress));
+    const frame = await preparation.frame(copied.deadline);
+    const funding = await preparation.funding(copied.funding, frame);
+    if (copied.outputs.length < 1 || copied.outputs.length > 10) {
+      throw new Error("shield requires 1..10 outputs");
+    }
+    const outputs = await Promise.all(
+      copied.outputs.map(
+        (output, index) => preparation.output(output, frame.context, false, index)
+      )
+    );
+    if (outputs.reduce((sum, output) => sum + output.amount, 0n) !== (funding.funding.amount ?? 0n) - (copied.fee?.amount ?? 0n)) {
+      throw new Error("shield funding must equal output total");
+    }
+    await preparation.assertBlock(frame);
+    return preparation.runtime.complete({
+      version: 1,
+      id: crypto.randomUUID(),
+      kind: "shield",
+      context: frame.context,
+      scope: this.scope,
+      preparedAt: frame.block,
+      deadline: frame.deadline,
+      outputs,
+      inputs: [],
+      ...funding,
+      shieldParams: {
+        token: frame.context.tokenAddress,
+        feeRecipient: copied.fee?.recipient ?? ZERO_ADDRESS,
+        feeAmount: copied.fee?.amount ?? 0n,
+        noteCommitments: outputs.map((output) => output.commitment),
+        deadline: frame.deadline
+      },
+      shieldOutputs: outputs.map((output) => ({
+        identity: output.identity,
+        amount: output.amount
+      }))
+    });
+  }
+  async prepareCreateCredit(options) {
+    const copied = structuredClone(options);
+    this.#intent = { kind: "create-credit", options: structuredClone(copied) };
+    const { CreditPreparation } = await import("./preparation-HUBTVCZE.js");
+    return new CreditPreparation(this.runtime(copied.tokenAddress)).create(copied);
+  }
+  async prepareDrawCredit(options) {
+    const copied = structuredClone(options);
+    this.#intent = { kind: "draw-credit", options: structuredClone(copied) };
+    const { CreditPreparation } = await import("./preparation-HUBTVCZE.js");
+    return new CreditPreparation(this.runtime(copied.tokenAddress)).draw(copied);
+  }
+  async prepareUpdateCredit(options) {
+    const copied = structuredClone(options);
+    this.#intent = { kind: "update-credit", options: structuredClone(copied) };
+    const { CreditPreparation } = await import("./preparation-HUBTVCZE.js");
+    return new CreditPreparation(this.runtime(copied.tokenAddress)).update(copied);
+  }
+  async prepareRevokeCredit(options) {
+    const copied = structuredClone(options);
+    this.#intent = { kind: "revoke-credit", options: structuredClone(copied) };
+    const { CreditPreparation } = await import("./preparation-HUBTVCZE.js");
+    return new CreditPreparation(this.runtime(copied.tokenAddress)).revoke(copied);
+  }
+};
+
+export {
+  exportBroadcasterIntent,
+  TransactionPreparation
+};
+//# sourceMappingURL=chunk-HLH5JZD4.js.map

package/dist/chunk-HLH5JZD4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/broadcaster/intent.ts","../src/transactions/preparation/transaction-preparation.ts"],"sourcesContent":["import { normalizeFunding } from \"@invisi-labs/protocol\";\nimport type { Hex } from \"@invisi-labs/protocol/contracts\";\nimport { invisiProtocolAbi } from \"@invisi-labs/protocol/contracts\";\nimport { Interface } from \"ethers\";\nimport type { OperationPlan } from \"../transactions/operation-types\";\nimport { statement } from \"../transactions/signing/statement\";\n\n/** Quote-only export; callers still need the operation-specific proof or owner authorization. */\nexport function exportBroadcasterIntent(plan: OperationPlan) {\n    if (plan.statement && plan.statement.target !== \"evm\")\n        throw new Error(\"unsupported broadcaster operation\");\n    if (plan.statement) statement(plan);\n    const feeDefaults = <T extends { feeRecipient?: string; feeAmount?: bigint }>(params: T) => ({\n        ...params,\n        feeRecipient: params.feeRecipient ?? \"0x0000000000000000000000000000000000000000\",\n        feeAmount: params.feeAmount ?? 0n,\n    });\n    const funding = { ...normalizeFunding(plan.funding), signature: \"0x\" };\n    let method: string;\n    let args: unknown[];\n    if (plan.params) {\n        method = \"transact\";\n        args = [\n            \"0x\",\n            {\n                params: feeDefaults(plan.params),\n                deliveries: plan.outputs.map((o) => o.delivery),\n                funding,\n            },\n        ];\n    } else if (plan.shieldParams) {\n        method = \"shield\";\n        args = [\n            feeDefaults(plan.shieldParams),\n            plan.shieldOutputs,\n            plan.outputs.map((o) => o.delivery),\n            funding,\n        ];\n    } else if (plan.credit?.creation) {\n        method = \"createCredit\";\n        args = [\"0x\", plan.credit.creation, plan.credit.deliveries];\n    } else if (plan.credit?.draw) {\n        method = \"creditDraw\";\n        args = [\"0x\", plan.credit.draw, plan.credit.deliveries];\n    } else if (plan.credit?.update) {\n        method = \"updateCredit\";\n        args = [\"0x\", plan.credit.update, plan.credit.deliveries];\n    } else if (plan.credit?.revocation) {\n        const p = plan.credit.revocation;\n        method = \"revokeCredit\";\n        args = [\n            p.token,\n            p.owner,\n            p.shard,\n            p.slot,\n            p.deadline,\n            p.feeRecipient ?? \"0x0000000000000000000000000000000000000000\",\n            p.feeAmount ?? 0n,\n            \"0x\",\n        ];\n    } else throw new Error(\"unsupported broadcaster operation\");\n    const abi = invisiProtocolAbi.filter(\n        (item) =>\n            item.type === \"function\" &&\n            item.name === method &&\n            (method !== \"transact\" || item.inputs[1]?.type === \"tuple\")\n    );\n    return {\n        sendable: false as const,\n        data: new Interface(abi).encodeFunctionData(method, args) as Hex,\n    };\n}\n","import {\n    normalizeTransactRequest,\n    transactUserPublicInputs,\n    ZERO_ADDRESS,\n} from \"@invisi-labs/protocol\";\nimport { WitnessBuilder } from \"@invisi-labs/prover\";\nimport type { Hex } from \"@invisi-labs/protocol/contracts\";\nimport { getAddress } from \"ethers\";\nimport { NoteOutput, resolvedOutputSnapshot } from \"../../notes/NoteOutput\";\nimport type {\n    RevokeCreditPreparation,\n    CreateCreditPreparation,\n    DrawCreditPreparation,\n    OperationPlan,\n    PreparationRuntime,\n    ShieldPreparation,\n    UpdateCreditPreparation,\n    TransferPreparation,\n} from \"../operation-types\";\nimport {\n    positiveAmount,\n    positiveOutputAmount,\n    Preparation,\n    type PreparationFrame,\n} from \"./prepare-common\";\n\n/** Shared preparation engine for managed sessions and explicitly supplied inputs. */\nexport class TransactionPreparation<Result> {\n    #intent: import(\"../../broadcaster/broadcaster-preparation\").PreparationIntent | undefined;\n    constructor(readonly context: PreparationRuntime<Result>) {\n        const complete = context.complete;\n        this.context = {\n            ...context,\n            complete: (plan) => {\n                const intent = this.#intent ? structuredClone(this.#intent) : undefined;\n                if (intent && (intent.kind === \"transfer\" || intent.kind === \"shield\")) {\n                    const businessOutputs = plan.outputs.filter((output) => !output.change);\n                    intent.options.outputs = intent.options.outputs.map((payment, index) =>\n                        resolvedOutputSnapshot(payment, businessOutputs[index]!)\n                    );\n                }\n                return complete({ ...plan, ...(intent ? { intent } : {}) });\n            },\n        };\n    }\n    private runtime(tokenAddress: Hex): PreparationRuntime<Result> {\n        if (\n            getAddress(tokenAddress) !==\n            getAddress(this.context.options.protocol.context.tokenAddress)\n        )\n            throw new Error(\"preparation token mismatch\");\n        return this.context;\n    }\n    private get scope() {\n        return this.context.scope;\n    }\n    async prepareTransfer(options: TransferPreparation): Promise<Result> {\n        this.#intent = { kind: \"transfer\", options: structuredClone(options) };\n        if (Object.hasOwn(options, \"target\") || Object.hasOwn(options, \"execution\")) {\n            throw new Error(\n                \"prepareTransfer accepts no target or execution; choose execution in prove()\"\n            );\n        }\n        const copied = structuredClone(options);\n        const runtime = this.runtime(copied.tokenAddress);\n        if (copied.commitments !== undefined && copied.commitments.length === 0)\n            throw new Error(\"empty explicit input selection\");\n        const preparation = new Preparation({\n            ...runtime,\n            ...(copied.commitments !== undefined ? { inputSelection: copied.commitments } : {}),\n        });\n        const frame = await preparation.frame(copied.deadline);\n        if (copied.outputs.length > 190) throw new Error(\"transfer supports at most 190 outputs\");\n        let withdrawalAddress: Hex = ZERO_ADDRESS;\n        let withdrawalAmount = 0n;\n        if (copied.withdrawal !== undefined) {\n            withdrawalAddress = getAddress(copied.withdrawal.to) as Hex;\n            positiveAmount(copied.withdrawal.amount);\n            if (BigInt(withdrawalAddress) === 0n)\n                throw new Error(\"withdrawal destination must be nonzero\");\n            withdrawalAmount = copied.withdrawal.amount;\n        }\n        if (copied.outputs.length === 0 && withdrawalAmount === 0n)\n            throw new Error(\"transfer requires a private output or public withdrawal\");\n        const feeRecipient = copied.fee ? (getAddress(copied.fee.recipient) as Hex) : ZERO_ADDRESS;\n        const feeAmount = copied.fee?.amount ?? 0n;\n        if (copied.fee) {\n            positiveAmount(feeAmount);\n            if (BigInt(feeRecipient) === 0n) throw new Error(\"fee recipient must be nonzero\");\n        }\n        const total = copied.outputs.reduce(\n            (sum, output, index) => sum + positiveOutputAmount(output, index),\n            withdrawalAmount + feeAmount\n        );\n        const funding = await preparation.funding(copied.funding, frame);\n        return this.funds(\n            copied.outputs,\n            total,\n            withdrawalAddress,\n            withdrawalAmount,\n            { recipient: feeRecipient, amount: feeAmount },\n            frame,\n            funding,\n            preparation\n        );\n    }\n\n    private async funds(\n        payments: readonly NoteOutput[],\n        total: bigint,\n        withdrawalAddress: `0x${string}`,\n        withdrawalAmount: bigint,\n        fee: { recipient: Hex; amount: bigint },\n        frame: PreparationFrame,\n        funding: Pick<OperationPlan, \"funding\" | \"fundingMode\">,\n        preparation: Preparation<Result>\n    ): Promise<Result> {\n        if (total >= 1n << 135n) {\n            throw new Error(\"transaction sum exceeds uint135\");\n        }\n        const { context, block, deadline } = frame;\n        const selection = await preparation.selectFunds(\n            total - (funding.funding.amount ?? 0n),\n            frame\n        );\n        const outputs = await Promise.all(\n            payments.map((payment, index) => preparation.output(payment, context, false, index))\n        );\n        const change = selection.amount + (funding.funding.amount ?? 0n) - total;\n        if (change > 0n) {\n            outputs.push(await preparation.change(change, context));\n        }\n        const params = {\n            token: context.tokenAddress,\n            sources: selection.sources,\n            nullifiers: selection.nullifiers,\n            noteCommitments: outputs.map((output) => output.commitment),\n            withdrawalAddress,\n            withdrawalAmount,\n            deadline,\n            feeRecipient: fee.recipient,\n            feeAmount: fee.amount,\n        };\n        const deliveries = outputs.map((output) => output.delivery);\n        const normalized = normalizeTransactRequest(context, params, deliveries, funding.funding);\n        const statement = WitnessBuilder.statement(\n            `transact_user_slots${normalized.capacity}`,\n            transactUserPublicInputs(context, params, deliveries, funding.funding),\n            \"evm\"\n        );\n        await preparation.assertBlock(frame);\n        return preparation.runtime.complete({\n            version: 1,\n            id: crypto.randomUUID(),\n            kind: \"transfer\",\n            context,\n            scope: this.scope,\n            preparedAt: block,\n            deadline,\n            outputs,\n            inputs: selection.inputs,\n            ...funding,\n            params,\n            capacity: normalized.capacity,\n            statement,\n        });\n    }\n\n    async prepareShield(options: ShieldPreparation): Promise<Result> {\n        this.#intent = { kind: \"shield\", options: structuredClone(options) };\n        const copied = structuredClone(options);\n        const preparation = new Preparation(this.runtime(copied.tokenAddress));\n        const frame = await preparation.frame(copied.deadline);\n        const funding = await preparation.funding(copied.funding, frame);\n        if (copied.outputs.length < 1 || copied.outputs.length > 10) {\n            throw new Error(\"shield requires 1..10 outputs\");\n        }\n        const outputs = await Promise.all(\n            copied.outputs.map((output, index) =>\n                preparation.output(output, frame.context, false, index)\n            )\n        );\n        if (\n            outputs.reduce((sum, output) => sum + output.amount, 0n) !==\n            (funding.funding.amount ?? 0n) - (copied.fee?.amount ?? 0n)\n        ) {\n            throw new Error(\"shield funding must equal output total\");\n        }\n        await preparation.assertBlock(frame);\n        return preparation.runtime.complete({\n            version: 1,\n            id: crypto.randomUUID(),\n            kind: \"shield\",\n            context: frame.context,\n            scope: this.scope,\n            preparedAt: frame.block,\n            deadline: frame.deadline,\n            outputs,\n            inputs: [],\n            ...funding,\n            shieldParams: {\n                token: frame.context.tokenAddress,\n                feeRecipient: copied.fee?.recipient ?? ZERO_ADDRESS,\n                feeAmount: copied.fee?.amount ?? 0n,\n                noteCommitments: outputs.map((output) => output.commitment),\n                deadline: frame.deadline,\n            },\n            shieldOutputs: outputs.map((output) => ({\n                identity: output.identity,\n                amount: output.amount,\n            })),\n        });\n    }\n\n    async prepareCreateCredit(options: CreateCreditPreparation): Promise<Result> {\n        const copied = structuredClone(options);\n        this.#intent = { kind: \"create-credit\", options: structuredClone(copied) };\n        const { CreditPreparation } = await import(\"../../credit/preparation\");\n        return new CreditPreparation(this.runtime(copied.tokenAddress)).create(copied);\n    }\n\n    async prepareDrawCredit(options: DrawCreditPreparation): Promise<Result> {\n        const copied = structuredClone(options);\n        this.#intent = { kind: \"draw-credit\", options: structuredClone(copied) };\n        const { CreditPreparation } = await import(\"../../credit/preparation\");\n        return new CreditPreparation(this.runtime(copied.tokenAddress)).draw(copied);\n    }\n\n    async prepareUpdateCredit(options: UpdateCreditPreparation): Promise<Result> {\n        const copied = structuredClone(options);\n        this.#intent = { kind: \"update-credit\", options: structuredClone(copied) };\n        const { CreditPreparation } = await import(\"../../credit/preparation\");\n        return new CreditPreparation(this.runtime(copied.tokenAddress)).update(copied);\n    }\n\n    async prepareRevokeCredit(options: RevokeCreditPreparation): Promise<Result> {\n        const copied = structuredClone(options);\n        this.#intent = { kind: \"revoke-credit\", options: structuredClone(copied) };\n        const { CreditPreparation } = await import(\"../../credit/preparation\");\n        return new CreditPreparation(this.runtime(copied.tokenAddress)).revoke(copied);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAAA,SAAS,wBAAwB;AAEjC,SAAS,yBAAyB;AAClC,SAAS,iBAAiB;AAKnB,SAAS,wBAAwB,MAAqB;AACzD,MAAI,KAAK,aAAa,KAAK,UAAU,WAAW;AAC5C,UAAM,IAAI,MAAM,mCAAmC;AACvD,MAAI,KAAK,UAAW,WAAU,IAAI;AAClC,QAAM,cAAc,CAA0D,YAAe;AAAA,IACzF,GAAG;AAAA,IACH,cAAc,OAAO,gBAAgB;AAAA,IACrC,WAAW,OAAO,aAAa;AAAA,EACnC;AACA,QAAM,UAAU,EAAE,GAAG,iBAAiB,KAAK,OAAO,GAAG,WAAW,KAAK;AACrE,MAAI;AACJ,MAAI;AACJ,MAAI,KAAK,QAAQ;AACb,aAAS;AACT,WAAO;AAAA,MACH;AAAA,MACA;AAAA,QACI,QAAQ,YAAY,KAAK,MAAM;AAAA,QAC/B,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,QAAQ;AAAA,QAC9C;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ,WAAW,KAAK,cAAc;AAC1B,aAAS;AACT,WAAO;AAAA,MACH,YAAY,KAAK,YAAY;AAAA,MAC7B,KAAK;AAAA,MACL,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,QAAQ;AAAA,MAClC;AAAA,IACJ;AAAA,EACJ,WAAW,KAAK,QAAQ,UAAU;AAC9B,aAAS;AACT,WAAO,CAAC,MAAM,KAAK,OAAO,UAAU,KAAK,OAAO,UAAU;AAAA,EAC9D,WAAW,KAAK,QAAQ,MAAM;AAC1B,aAAS;AACT,WAAO,CAAC,MAAM,KAAK,OAAO,MAAM,KAAK,OAAO,UAAU;AAAA,EAC1D,WAAW,KAAK,QAAQ,QAAQ;AAC5B,aAAS;AACT,WAAO,CAAC,MAAM,KAAK,OAAO,QAAQ,KAAK,OAAO,UAAU;AAAA,EAC5D,WAAW,KAAK,QAAQ,YAAY;AAChC,UAAM,IAAI,KAAK,OAAO;AACtB,aAAS;AACT,WAAO;AAAA,MACH,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE,gBAAgB;AAAA,MAClB,EAAE,aAAa;AAAA,MACf;AAAA,IACJ;AAAA,EACJ,MAAO,OAAM,IAAI,MAAM,mCAAmC;AAC1D,QAAM,MAAM,kBAAkB;AAAA,IAC1B,CAAC,SACG,KAAK,SAAS,cACd,KAAK,SAAS,WACb,WAAW,cAAc,KAAK,OAAO,CAAC,GAAG,SAAS;AAAA,EAC3D;AACA,SAAO;AAAA,IACH,UAAU;AAAA,IACV,MAAM,IAAI,UAAU,GAAG,EAAE,mBAAmB,QAAQ,IAAI;AAAA,EAC5D;AACJ;;;ACvEA;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,OACG;AACP,SAAS,sBAAsB;AAE/B,SAAS,kBAAkB;AAoBpB,IAAM,yBAAN,MAAqC;AAAA,EAExC,YAAqB,SAAqC;AAArC;AACjB,UAAM,WAAW,QAAQ;AACzB,SAAK,UAAU;AAAA,MACX,GAAG;AAAA,MACH,UAAU,CAAC,SAAS;AAChB,cAAM,SAAS,KAAK,UAAU,gBAAgB,KAAK,OAAO,IAAI;AAC9D,YAAI,WAAW,OAAO,SAAS,cAAc,OAAO,SAAS,WAAW;AACpE,gBAAM,kBAAkB,KAAK,QAAQ,OAAO,CAAC,WAAW,CAAC,OAAO,MAAM;AACtE,iBAAO,QAAQ,UAAU,OAAO,QAAQ,QAAQ;AAAA,YAAI,CAAC,SAAS,UAC1D,uBAAuB,SAAS,gBAAgB,KAAK,CAAE;AAAA,UAC3D;AAAA,QACJ;AACA,eAAO,SAAS,EAAE,GAAG,MAAM,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC,EAAG,CAAC;AAAA,MAC9D;AAAA,IACJ;AAAA,EACJ;AAAA,EAhBA;AAAA,EAiBQ,QAAQ,cAA+C;AAC3D,QACI,WAAW,YAAY,MACvB,WAAW,KAAK,QAAQ,QAAQ,SAAS,QAAQ,YAAY;AAE7D,YAAM,IAAI,MAAM,4BAA4B;AAChD,WAAO,KAAK;AAAA,EAChB;AAAA,EACA,IAAY,QAAQ;AAChB,WAAO,KAAK,QAAQ;AAAA,EACxB;AAAA,EACA,MAAM,gBAAgB,SAA+C;AACjE,SAAK,UAAU,EAAE,MAAM,YAAY,SAAS,gBAAgB,OAAO,EAAE;AACrE,QAAI,OAAO,OAAO,SAAS,QAAQ,KAAK,OAAO,OAAO,SAAS,WAAW,GAAG;AACzE,YAAM,IAAI;AAAA,QACN;AAAA,MACJ;AAAA,IACJ;AACA,UAAM,SAAS,gBAAgB,OAAO;AACtC,UAAM,UAAU,KAAK,QAAQ,OAAO,YAAY;AAChD,QAAI,OAAO,gBAAgB,UAAa,OAAO,YAAY,WAAW;AAClE,YAAM,IAAI,MAAM,gCAAgC;AACpD,UAAM,cAAc,IAAI,YAAY;AAAA,MAChC,GAAG;AAAA,MACH,GAAI,OAAO,gBAAgB,SAAY,EAAE,gBAAgB,OAAO,YAAY,IAAI,CAAC;AAAA,IACrF,CAAC;AACD,UAAM,QAAQ,MAAM,YAAY,MAAM,OAAO,QAAQ;AACrD,QAAI,OAAO,QAAQ,SAAS,IAAK,OAAM,IAAI,MAAM,uCAAuC;AACxF,QAAI,oBAAyB;AAC7B,QAAI,mBAAmB;AACvB,QAAI,OAAO,eAAe,QAAW;AACjC,0BAAoB,WAAW,OAAO,WAAW,EAAE;AACnD,qBAAe,OAAO,WAAW,MAAM;AACvC,UAAI,OAAO,iBAAiB,MAAM;AAC9B,cAAM,IAAI,MAAM,wCAAwC;AAC5D,yBAAmB,OAAO,WAAW;AAAA,IACzC;AACA,QAAI,OAAO,QAAQ,WAAW,KAAK,qBAAqB;AACpD,YAAM,IAAI,MAAM,yDAAyD;AAC7E,UAAM,eAAe,OAAO,MAAO,WAAW,OAAO,IAAI,SAAS,IAAY;AAC9E,UAAM,YAAY,OAAO,KAAK,UAAU;AACxC,QAAI,OAAO,KAAK;AACZ,qBAAe,SAAS;AACxB,UAAI,OAAO,YAAY,MAAM,GAAI,OAAM,IAAI,MAAM,+BAA+B;AAAA,IACpF;AACA,UAAM,QAAQ,OAAO,QAAQ;AAAA,MACzB,CAAC,KAAK,QAAQ,UAAU,MAAM,qBAAqB,QAAQ,KAAK;AAAA,MAChE,mBAAmB;AAAA,IACvB;AACA,UAAM,UAAU,MAAM,YAAY,QAAQ,OAAO,SAAS,KAAK;AAC/D,WAAO,KAAK;AAAA,MACR,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,WAAW,cAAc,QAAQ,UAAU;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAc,MACV,UACA,OACA,mBACA,kBACA,KACA,OACA,SACA,aACe;AACf,QAAI,SAAS,MAAM,MAAM;AACrB,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACrD;AACA,UAAM,EAAE,SAAS,OAAO,SAAS,IAAI;AACrC,UAAM,YAAY,MAAM,YAAY;AAAA,MAChC,SAAS,QAAQ,QAAQ,UAAU;AAAA,MACnC;AAAA,IACJ;AACA,UAAM,UAAU,MAAM,QAAQ;AAAA,MAC1B,SAAS,IAAI,CAAC,SAAS,UAAU,YAAY,OAAO,SAAS,SAAS,OAAO,KAAK,CAAC;AAAA,IACvF;AACA,UAAM,SAAS,UAAU,UAAU,QAAQ,QAAQ,UAAU,MAAM;AACnE,QAAI,SAAS,IAAI;AACb,cAAQ,KAAK,MAAM,YAAY,OAAO,QAAQ,OAAO,CAAC;AAAA,IAC1D;AACA,UAAM,SAAS;AAAA,MACX,OAAO,QAAQ;AAAA,MACf,SAAS,UAAU;AAAA,MACnB,YAAY,UAAU;AAAA,MACtB,iBAAiB,QAAQ,IAAI,CAAC,WAAW,OAAO,UAAU;AAAA,MAC1D;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,IAAI;AAAA,MAClB,WAAW,IAAI;AAAA,IACnB;AACA,UAAM,aAAa,QAAQ,IAAI,CAAC,WAAW,OAAO,QAAQ;AAC1D,UAAM,aAAa,yBAAyB,SAAS,QAAQ,YAAY,QAAQ,OAAO;AACxF,UAAMA,aAAY,eAAe;AAAA,MAC7B,sBAAsB,WAAW,QAAQ;AAAA,MACzC,yBAAyB,SAAS,QAAQ,YAAY,QAAQ,OAAO;AAAA,MACrE;AAAA,IACJ;AACA,UAAM,YAAY,YAAY,KAAK;AACnC,WAAO,YAAY,QAAQ,SAAS;AAAA,MAChC,SAAS;AAAA,MACT,IAAI,OAAO,WAAW;AAAA,MACtB,MAAM;AAAA,MACN;AAAA,MACA,OAAO,KAAK;AAAA,MACZ,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,MACA,QAAQ,UAAU;AAAA,MAClB,GAAG;AAAA,MACH;AAAA,MACA,UAAU,WAAW;AAAA,MACrB,WAAAA;AAAA,IACJ,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,cAAc,SAA6C;AAC7D,SAAK,UAAU,EAAE,MAAM,UAAU,SAAS,gBAAgB,OAAO,EAAE;AACnE,UAAM,SAAS,gBAAgB,OAAO;AACtC,UAAM,cAAc,IAAI,YAAY,KAAK,QAAQ,OAAO,YAAY,CAAC;AACrE,UAAM,QAAQ,MAAM,YAAY,MAAM,OAAO,QAAQ;AACrD,UAAM,UAAU,MAAM,YAAY,QAAQ,OAAO,SAAS,KAAK;AAC/D,QAAI,OAAO,QAAQ,SAAS,KAAK,OAAO,QAAQ,SAAS,IAAI;AACzD,YAAM,IAAI,MAAM,+BAA+B;AAAA,IACnD;AACA,UAAM,UAAU,MAAM,QAAQ;AAAA,MAC1B,OAAO,QAAQ;AAAA,QAAI,CAAC,QAAQ,UACxB,YAAY,OAAO,QAAQ,MAAM,SAAS,OAAO,KAAK;AAAA,MAC1D;AAAA,IACJ;AACA,QACI,QAAQ,OAAO,CAAC,KAAK,WAAW,MAAM,OAAO,QAAQ,EAAE,OACtD,QAAQ,QAAQ,UAAU,OAAO,OAAO,KAAK,UAAU,KAC1D;AACE,YAAM,IAAI,MAAM,wCAAwC;AAAA,IAC5D;AACA,UAAM,YAAY,YAAY,KAAK;AACnC,WAAO,YAAY,QAAQ,SAAS;AAAA,MAChC,SAAS;AAAA,MACT,IAAI,OAAO,WAAW;AAAA,MACtB,MAAM;AAAA,MACN,SAAS,MAAM;AAAA,MACf,OAAO,KAAK;AAAA,MACZ,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB;AAAA,MACA,QAAQ,CAAC;AAAA,MACT,GAAG;AAAA,MACH,cAAc;AAAA,QACV,OAAO,MAAM,QAAQ;AAAA,QACrB,cAAc,OAAO,KAAK,aAAa;AAAA,QACvC,WAAW,OAAO,KAAK,UAAU;AAAA,QACjC,iBAAiB,QAAQ,IAAI,CAAC,WAAW,OAAO,UAAU;AAAA,QAC1D,UAAU,MAAM;AAAA,MACpB;AAAA,MACA,eAAe,QAAQ,IAAI,CAAC,YAAY;AAAA,QACpC,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,MACnB,EAAE;AAAA,IACN,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,oBAAoB,SAAmD;AACzE,UAAM,SAAS,gBAAgB,OAAO;AACtC,SAAK,UAAU,EAAE,MAAM,iBAAiB,SAAS,gBAAgB,MAAM,EAAE;AACzE,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,2BAA0B;AACrE,WAAO,IAAI,kBAAkB,KAAK,QAAQ,OAAO,YAAY,CAAC,EAAE,OAAO,MAAM;AAAA,EACjF;AAAA,EAEA,MAAM,kBAAkB,SAAiD;AACrE,UAAM,SAAS,gBAAgB,OAAO;AACtC,SAAK,UAAU,EAAE,MAAM,eAAe,SAAS,gBAAgB,MAAM,EAAE;AACvE,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,2BAA0B;AACrE,WAAO,IAAI,kBAAkB,KAAK,QAAQ,OAAO,YAAY,CAAC,EAAE,KAAK,MAAM;AAAA,EAC/E;AAAA,EAEA,MAAM,oBAAoB,SAAmD;AACzE,UAAM,SAAS,gBAAgB,OAAO;AACtC,SAAK,UAAU,EAAE,MAAM,iBAAiB,SAAS,gBAAgB,MAAM,EAAE;AACzE,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,2BAA0B;AACrE,WAAO,IAAI,kBAAkB,KAAK,QAAQ,OAAO,YAAY,CAAC,EAAE,OAAO,MAAM;AAAA,EACjF;AAAA,EAEA,MAAM,oBAAoB,SAAmD;AACzE,UAAM,SAAS,gBAAgB,OAAO;AACtC,SAAK,UAAU,EAAE,MAAM,iBAAiB,SAAS,gBAAgB,MAAM,EAAE;AACzE,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,2BAA0B;AACrE,WAAO,IAAI,kBAAkB,KAAK,QAAQ,OAAO,YAAY,CAAC,EAAE,OAAO,MAAM;AAAA,EACjF;AACJ;","names":["statement"]}

package/dist/chunk-J6TZZVAM.cjs

@@ -0,0 +1,230 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+var _chunkMI4IP4ZDcjs = require('./chunk-MI4IP4ZD.cjs');
+
+
+var _chunkHCB7RQ3Scjs = require('./chunk-HCB7RQ3S.cjs');
+
+
+var _chunk3KTQQZOWcjs = require('./chunk-3KTQQZOW.cjs');
+
+// src/broadcaster/provenance-preparation.ts
+var _provenance = require('@invisi-labs/rpc/provenance');
+
+
+
+
+
+
+
+
+var _provenance3 = require('@invisi-labs/protocol/provenance');
+
+
+var _provenancewitness = require('@invisi-labs/prover/provenance-witness');
+function requireProvenanceCapability(plan, runtime) {
+  const cap = runtime.options.provenance;
+  if (!cap) throw Error("Provenance capability required for private inputs");
+  const trust = cap.client.trust;
+  if (BigInt(trust.chainId) !== plan.context.chainId || BigInt(trust.protocolAddress) !== BigInt(plan.context.protocolAddress) || cap.manifest.sha256 !== trust.manifestSha256)
+    throw Error("Provenance deployment or manifest mismatch");
+}
+async function prepareProvenance(plan, runtime) {
+  requireProvenanceCapability(plan, runtime);
+  if (!plan.inputs.length) throw Error("No private Note inputs require a Provenance proof");
+  const {
+    client: source,
+    manifest,
+    prover,
+    maxRootPages = 10,
+    maxLeaves = 1e5
+  } = runtime.options.provenance;
+  if (!Number.isSafeInteger(maxRootPages) || maxRootPages < 1 || maxRootPages > 100 || !Number.isSafeInteger(maxLeaves) || maxLeaves < 1)
+    throw Error("Invalid Provenance replay budget");
+  if (!plan.params || !plan.capacity || plan.params.nullifiers.length !== plan.inputs.length)
+    throw Error("Private transact statement required");
+  const trust = source.trust;
+  const openings = await Promise.all(
+    plan.inputs.map(async (input, i) => {
+      const opening = {
+        owner: input.note.ownerAddress,
+        nonce: input.note.nonce,
+        amount: input.note.amount
+      };
+      const computed = await _provenance3.noteOpening.call(void 0, { ...plan.context, ...opening });
+      if (computed.commitment !== BigInt(input.commitment) || computed.nullifier !== BigInt(plan.params.nullifiers[i]))
+        throw Error("Prepared Note opening or nullifier mismatch");
+      return opening;
+    })
+  );
+  const digest = _provenance3.operationDigest.call(void 0, {
+    ...plan.context,
+    mainCircuitCapacity: plan.capacity,
+    publicInputs: _chunkHCB7RQ3Scjs.statement.call(void 0, plan).expectedPublicInputs
+  });
+  const status = await source.getStatus();
+  const rootId = `${BigInt(trust.chainGeneration)}:${BigInt(String(status.checkpointSequence))}`;
+  const latest = await source.getRoot(rootId);
+  if (!latest.certificate || latest.allowedForNewProof !== true)
+    throw Error("No current recognized root");
+  const certificates = /* @__PURE__ */ new Map();
+  const matches = /* @__PURE__ */ new Map();
+  let remaining = maxLeaves;
+  const replay = async (certificate) => {
+    _provenance3.assertCertificateTrust.call(void 0, certificate, trust);
+    const block = await runtime.reader.getBlock(BigInt(certificate.confirmedBlockNumber));
+    if (!block || block.hash.toLowerCase() !== _provenance3.word.call(void 0, certificate.confirmedBlockHash).toLowerCase() || await runtime.reader.getChainId() !== plan.context.chainId)
+      throw Error("Provenance checkpoint canonical anchor mismatch");
+    const count = Number(BigInt(certificate.leafCount));
+    if (!Number.isSafeInteger(count) || count > remaining)
+      throw Error("Provenance replay leaf budget exceeded");
+    remaining -= count;
+    const tree = await source.syncRecognizedTree(
+      `${certificate.chainGeneration}:${certificate.rootSequence}`,
+      certificate,
+      { maxLeaves: Math.max(1, count) }
+    );
+    certificates.set(String(certificate.treeId), certificate);
+    for (let i = 0; i < plan.inputs.length; i++) {
+      if (matches.has(i)) continue;
+      const membership = await tree.membershipForCommitment(
+        trust,
+        plan.inputs[i].commitment
+      );
+      if (membership) matches.set(i, { certificate, membership });
+    }
+  };
+  await replay(latest.certificate);
+  if (matches.size !== plan.inputs.length) {
+    const newest = /* @__PURE__ */ new Map();
+    let cursor, complete = false;
+    for (let page = 0; page < maxRootPages; page++) {
+      const result = await source.getRoots(
+        cursor ? { cursor, limit: 200 } : { after: "0", limit: 200 }
+      );
+      for (const certificate of result.items) {
+        const previous = newest.get(String(certificate.treeId));
+        if (!previous || BigInt(previous.rootSequence) < BigInt(certificate.rootSequence))
+          newest.set(String(certificate.treeId), certificate);
+      }
+      if (!result.nextCursor) {
+        complete = true;
+        break;
+      }
+      const next = String(result.nextCursor);
+      if (next === cursor) throw Error("Provenance root cursor did not advance");
+      cursor = next;
+    }
+    if (!complete) throw Error("Provenance root replay page budget exceeded");
+    for (const certificate of newest.values()) {
+      if (certificates.has(String(certificate.treeId))) continue;
+      const current = await source.getRoot(
+        `${certificate.chainGeneration}:${certificate.rootSequence}`
+      );
+      if (current.allowedForNewProof !== true) continue;
+      await replay(certificate);
+      if (matches.size === plan.inputs.length) break;
+    }
+  }
+  if (matches.size !== plan.inputs.length) throw Error("Prepared Note is not recognized");
+  const used = [
+    ...new Map(
+      [...matches.values()].map((m) => [String(m.certificate.treeId), m.certificate])
+    ).values()
+  ].sort((a, b) => BigInt(a.treeId) < BigInt(b.treeId) ? -1 : 1);
+  const inputs = openings.map((opening, i) => {
+    const match = matches.get(i);
+    return {
+      ...opening,
+      sourceIndex: used.findIndex(
+        (c) => BigInt(c.treeId) === BigInt(match.certificate.treeId)
+      ),
+      leafIndex: match.membership.leafIndex,
+      path: match.membership.path
+    };
+  });
+  const capacity = _provenance3.CAPACITIES.find((k) => k >= inputs.length);
+  if (!capacity) throw Error("Provenance input capacity exceeded");
+  const sidecar = await _provenancewitness.exportSidecar.call(void 0, 
+    {
+      ...trust,
+      capacity,
+      tokenAddress: plan.context.tokenAddress,
+      operationDigest: digest,
+      inputs,
+      sources: used.map((c) => ({ treeId: c.treeId, root: c.root, leafCount: c.leafCount }))
+    },
+    used,
+    trust,
+    manifest,
+    prover,
+    0
+  );
+  return { operationDigest: digest, sidecars: [sidecar] };
+}
+async function provePreparedProvenance(saved, runtime, capability, reprove = false) {
+  if (!saved.call || !saved.proof || saved.plan.kind !== "transfer" || !saved.plan.inputs.length)
+    throw Error("Ready transaction with private Note inputs required");
+  const provider = runtime.options.prover;
+  const active = await _asyncNullishCoalesce(await _asyncNullishCoalesce(capability, async () => ( runtime.options.provenance)), async () => ( (_optionalChain([provider, 'optionalAccess', _ => _.getProvenanceCapability]) ? {
+    ...await provider.getProvenanceCapability(),
+    client: await _asyncNullishCoalesce(runtime.options.provenanceClient, async () => ( await officialProvenance.get(saved.plan.context)))
+  } : void 0)));
+  if (!active) throw Error("Local Provenance capability required");
+  if (saved.provenance && !reprove)
+    return _chunkMI4IP4ZDcjs.validateProvenanceProof.call(void 0, structuredClone(saved.provenance), active.client.trust);
+  const localRuntime = { ...runtime, options: { ...runtime.options, provenance: active } };
+  const evidence = await prepareProvenance(saved.plan, localRuntime);
+  const packet = {
+    format: "invisi-provenance-submission-v1",
+    data: saved.call.data,
+    context: {
+      chainId: saved.plan.context.chainId.toString(),
+      protocolAddress: saved.plan.context.protocolAddress,
+      tokenAddress: saved.plan.context.tokenAddress
+    },
+    mainCircuitCapacity: saved.plan.capacity,
+    publicInputs: [..._chunkHCB7RQ3Scjs.statement.call(void 0, saved.plan).expectedPublicInputs],
+    ...evidence
+  };
+  return _chunkMI4IP4ZDcjs.validateProvenanceProof.call(void 0, packet, active.client.trust);
+}
+function validateBroadcastEnvelope(saved, client) {
+  if (!saved.broadcasterQuote || !saved.broadcasterBinding || !saved.call)
+    throw Error("Prepared broadcaster quote and ready call required");
+  if (JSON.stringify(saved.broadcasterBinding.configuration) !== JSON.stringify(client.configuration) || saved.broadcasterBinding.intentHash !== _chunk3KTQQZOWcjs.broadcasterRequestHash.call(void 0, saved.call.data))
+    throw Error("Prepared broadcaster context changed");
+  const context = saved.plan.context;
+  if (BigInt(saved.call.to) !== BigInt(context.protocolAddress) || saved.call.value !== 0n || _optionalChain([saved, 'access', _2 => _2.broadcasterQuote, 'access', _3 => _3.context, 'optionalAccess', _4 => _4.chainId]) !== context.chainId || BigInt(saved.broadcasterQuote.context.protocol) !== BigInt(context.protocolAddress))
+    throw Error("Prepared broadcaster deployment changed");
+}
+async function validatePreparedBroadcast(saved, client, runtime) {
+  validateBroadcastEnvelope(saved, client);
+  if (saved.broadcasterQuote.provenanceRequired && saved.plan.inputs.length) {
+    const source = saved.provenance;
+    if (!source || source.sidecars.length !== 1)
+      throw Error("Prepared Provenance evidence required");
+    const digest = _provenance3.operationDigest.call(void 0, {
+      ...saved.plan.context,
+      mainCircuitCapacity: saved.plan.capacity,
+      publicInputs: _chunkHCB7RQ3Scjs.statement.call(void 0, saved.plan).expectedPublicInputs
+    });
+    if (source.operationDigest !== digest || source.data !== saved.call.data)
+      throw Error("Prepared Provenance statement changed");
+    const sidecar = source.sidecars[0];
+    const pi = sidecar.proofBundle.publicInputs;
+    if (sidecar.operationIndex !== "0" || _provenance3.word.call(void 0, BigInt(pi[7]) << 128n | BigInt(pi[8])) !== digest || BigInt(pi[2]) !== BigInt(saved.plan.context.tokenAddress) || BigInt(pi[6]) !== BigInt(saved.plan.inputs.length) || BigInt(pi[9]) !== await _provenance3.inputDigest.call(void 0, saved.plan.params.nullifiers))
+      throw Error("Prepared Provenance evidence binding mismatch");
+    if (runtime.options.provenance)
+      await _provenance3.validateProofBundle.call(void 0, sidecar.proofBundle, runtime.options.provenance.client.trust);
+  } else if (saved.provenance) throw Error("Unexpected Prepared Provenance evidence");
+}
+var officialProvenance = new (0, _provenance.OfficialProvenanceClients)();
+
+
+
+
+
+
+exports.prepareProvenance = prepareProvenance; exports.provePreparedProvenance = provePreparedProvenance; exports.validateBroadcastEnvelope = validateBroadcastEnvelope; exports.validatePreparedBroadcast = validatePreparedBroadcast;
+//# sourceMappingURL=chunk-J6TZZVAM.cjs.map

package/dist/chunk-J6TZZVAM.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/wx/Workspace/invisi-lab/invisi-sdk-ts/packages/sdk/dist/chunk-J6TZZVAM.cjs","../src/broadcaster/provenance-preparation.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACVA,yDAA0C;AAE1C;AACI;AACA;AACA;AACA;AACA;AACA;AACA;AAAA,+DAIG;AACP;AACI;AAAA,2EAGG;AAiBP,SAAS,2BAAA,CAA4B,IAAA,EAAqB,OAAA,EAA6B;AACnF,EAAA,MAAM,IAAA,EAAM,OAAA,CAAQ,OAAA,CAAQ,UAAA;AAC5B,EAAA,GAAA,CAAI,CAAC,GAAA,EAAK,MAAM,KAAA,CAAM,mDAAmD,CAAA;AACzE,EAAA,MAAM,MAAA,EAAQ,GAAA,CAAI,MAAA,CAAO,KAAA;AACzB,EAAA,GAAA,CACI,MAAA,CAAO,KAAA,CAAM,OAAO,EAAA,IAAM,IAAA,CAAK,OAAA,CAAQ,QAAA,GACvC,MAAA,CAAO,KAAA,CAAM,eAAe,EAAA,IAAM,MAAA,CAAO,IAAA,CAAK,OAAA,CAAQ,eAAe,EAAA,GACrE,GAAA,CAAI,QAAA,CAAS,OAAA,IAAW,KAAA,CAAM,cAAA;AAE9B,IAAA,MAAM,KAAA,CAAM,4CAA4C,CAAA;AAChE;AACA,MAAA,SAAsB,iBAAA,CAClB,IAAA,EACA,OAAA,EAC8D;AAC9D,EAAA,2BAAA,CAA4B,IAAA,EAAM,OAAO,CAAA;AACzC,EAAA,GAAA,CAAI,CAAC,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,MAAM,KAAA,CAAM,mDAAmD,CAAA;AACxF,EAAA,MAAM;AAAA,IACF,MAAA,EAAQ,MAAA;AAAA,IACR,QAAA;AAAA,IACA,MAAA;AAAA,IACA,aAAA,EAAe,EAAA;AAAA,IACf,UAAA,EAAY;AAAA,EAChB,EAAA,EAAI,OAAA,CAAS,OAAA,CAAQ,UAAA;AACrB,EAAA,GAAA,CACI,CAAC,MAAA,CAAO,aAAA,CAAc,YAAY,EAAA,GAClC,aAAA,EAAe,EAAA,GACf,aAAA,EAAe,IAAA,GACf,CAAC,MAAA,CAAO,aAAA,CAAc,SAAS,EAAA,GAC/B,UAAA,EAAY,CAAA;AAEZ,IAAA,MAAM,KAAA,CAAM,kCAAkC,CAAA;AAClD,EAAA,GAAA,CAAI,CAAC,IAAA,CAAK,OAAA,GAAU,CAAC,IAAA,CAAK,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,UAAA,CAAW,OAAA,IAAW,IAAA,CAAK,MAAA,CAAO,MAAA;AAChF,IAAA,MAAM,KAAA,CAAM,qCAAqC,CAAA;AACrD,EAAA,MAAM,MAAA,EAAQ,MAAA,CAAO,KAAA;AACrB,EAAA,MAAM,SAAA,EAAW,MAAM,OAAA,CAAQ,GAAA;AAAA,IAC3B,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,MAAA,CAAO,KAAA,EAAO,CAAA,EAAA,GAAM;AAChC,MAAA,MAAM,QAAA,EAAU;AAAA,QACZ,KAAA,EAAO,KAAA,CAAM,IAAA,CAAK,YAAA;AAAA,QAClB,KAAA,EAAO,KAAA,CAAM,IAAA,CAAK,KAAA;AAAA,QAClB,MAAA,EAAQ,KAAA,CAAM,IAAA,CAAK;AAAA,MACvB,CAAA;AACA,MAAA,MAAM,SAAA,EAAW,MAAM,sCAAA,EAAc,GAAG,IAAA,CAAK,OAAA,EAAS,GAAG,QAAQ,CAAC,CAAA;AAClE,MAAA,GAAA,CACI,QAAA,CAAS,WAAA,IAAe,MAAA,CAAO,KAAA,CAAM,UAAU,EAAA,GAC/C,QAAA,CAAS,UAAA,IAAc,MAAA,CAAO,IAAA,CAAK,MAAA,CAAQ,UAAA,CAAW,CAAC,CAAE,CAAA;AAEzD,QAAA,MAAM,KAAA,CAAM,6CAA6C,CAAA;AAC7D,MAAA,OAAO,OAAA;AAAA,IACX,CAAC;AAAA,EACL,CAAA;AACA,EAAA,MAAM,OAAA,EAAS,0CAAA;AAAgB,IAC3B,GAAG,IAAA,CAAK,OAAA;AAAA,IACR,mBAAA,EAAqB,IAAA,CAAK,QAAA;AAAA,IAC1B,YAAA,EAAc,yCAAA,IAAc,CAAA,CAAE;AAAA,EAClC,CAAC,CAAA;AACD,EAAA,MAAM,OAAA,EAAS,MAAM,MAAA,CAAO,SAAA,CAAU,CAAA;AACtC,EAAA,MAAM,OAAA,EAAS,CAAA,EAAA;AACA,EAAA;AACH,EAAA;AACI,IAAA;AACV,EAAA;AACU,EAAA;AAIA,EAAA;AACD,EAAA;AACX,IAAA;AACc,IAAA;AAGV,IAAA;AAGY,MAAA;AACF,IAAA;AACF,IAAA;AACI,MAAA;AACH,IAAA;AACA,IAAA;AACN,MAAA;AACH,MAAA;AACE,MAAA;AACN,IAAA;AACa,IAAA;AACA,IAAA;AACG,MAAA;AACN,MAAA;AACF,QAAA;AACK,QAAA;AACT,MAAA;AACI,MAAA;AACR,IAAA;AACJ,EAAA;AACa,EAAA;AACD,EAAA;AACF,IAAA;AAEF,IAAA;AACK,IAAA;AACC,MAAA;AACO,QAAA;AACb,MAAA;AACW,MAAA;AACD,QAAA;AACD,QAAA;AACM,UAAA;AACf,MAAA;AACY,MAAA;AACR,QAAA;AACA,QAAA;AACJ,MAAA;AACM,MAAA;AACF,MAAA;AACK,MAAA;AACb,IAAA;AACe,IAAA;AACJ,IAAA;AACH,MAAA;AACE,MAAA;AACC,QAAA;AACP,MAAA;AACY,MAAA;AACN,MAAA;AACM,MAAA;AAChB,IAAA;AACJ,EAAA;AACY,EAAA;AACC,EAAA;AACF,IAAA;AACS,MAAA;AACP,IAAA;AACF,EAAA;AACoB,EAAA;AACb,IAAA;AACP,IAAA;AACA,MAAA;AACH,MAAA;AACW,QAAA;AACX,MAAA;AACW,MAAA;AACC,MAAA;AAChB,IAAA;AACH,EAAA;AACK,EAAA;AACS,EAAA;AACC,EAAA;AACZ,IAAA;AACO,MAAA;AACH,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACS,MAAA;AACb,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACJ,EAAA;AACS,EAAA;AACb;AACsB;AAMP,EAAA;AACK,IAAA;AACV,EAAA;AAGF,EAAA;AAIoB,IAAA;AAEN,IAAA;AAGR,EAAA;AACG,EAAA;AACH,EAAA;AACC,IAAA;AACL,EAAA;AACA,EAAA;AAC0B,EAAA;AACpB,IAAA;AACI,IAAA;AACH,IAAA;AACI,MAAA;AACT,MAAA;AACA,MAAA;AACJ,IAAA;AACA,IAAA;AACc,IAAA;AACX,IAAA;AACP,EAAA;AACO,EAAA;AACX;AACgB;AACD,EAAA;AACK,IAAA;AAEP,EAAA;AAIO,IAAA;AACA,EAAA;AAEL,EAAA;AAKK,IAAA;AACpB;AACsB;AAKlB,EAAA;AACU,EAAA;AACA,IAAA;AACD,IAAA;AACW,MAAA;AACV,IAAA;AACO,MAAA;AACT,MAAA;AACA,MAAA;AACH,IAAA;AACU,IAAA;AACK,MAAA;AACV,IAAA;AACK,IAAA;AAEC,IAAA;AAMI,MAAA;AACJ,IAAA;AACF,MAAA;AACH,EAAA;AACf;AAEM;ADnEY;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/wx/Workspace/invisi-lab/invisi-sdk-ts/packages/sdk/dist/chunk-J6TZZVAM.cjs","sourcesContent":[null,"import { OfficialProvenanceClients } from \"@invisi-labs/rpc/provenance\";\nimport { validateProvenanceProof, type ProvenanceProof } from \"../provenance/proof-record\";\nimport {\n    CAPACITIES,\n    noteOpening,\n    operationDigest,\n    word,\n    assertCertificateTrust,\n    validateProofBundle,\n    inputDigest,\n    type ManifestIdentity,\n    type ProofSidecar,\n    type RootCertificate,\n} from \"@invisi-labs/protocol/provenance\";\nimport {\n    exportSidecar,\n    type OfflineProver,\n    type WitnessInput,\n} from \"@invisi-labs/prover/provenance-witness\";\nimport { type ProvenanceClient } from \"@invisi-labs/rpc/provenance\";\nimport type {\n    OperationPlan,\n    TransactionRuntime,\n    SavedOperation,\n} from \"../transactions/operation-types\";\nimport { statement } from \"../transactions/signing/statement\";\nimport { broadcasterRequestHash, type BroadcasterClient } from \"./index\";\n\nexport interface PreparedProvenanceCapability {\n    client: ProvenanceClient;\n    manifest: ManifestIdentity;\n    prover: OfflineProver;\n    maxRootPages?: number;\n    maxLeaves?: number;\n}\nfunction requireProvenanceCapability(plan: OperationPlan, runtime: TransactionRuntime) {\n    const cap = runtime.options.provenance;\n    if (!cap) throw Error(\"Provenance capability required for private inputs\");\n    const trust = cap.client.trust;\n    if (\n        BigInt(trust.chainId) !== plan.context.chainId ||\n        BigInt(trust.protocolAddress) !== BigInt(plan.context.protocolAddress) ||\n        cap.manifest.sha256 !== trust.manifestSha256\n    )\n        throw Error(\"Provenance deployment or manifest mismatch\");\n}\nexport async function prepareProvenance(\n    plan: OperationPlan,\n    runtime: TransactionRuntime\n): Promise<{ operationDigest: string; sidecars: ProofSidecar[] }> {\n    requireProvenanceCapability(plan, runtime);\n    if (!plan.inputs.length) throw Error(\"No private Note inputs require a Provenance proof\");\n    const {\n        client: source,\n        manifest,\n        prover,\n        maxRootPages = 10,\n        maxLeaves = 100000,\n    } = runtime!.options.provenance!;\n    if (\n        !Number.isSafeInteger(maxRootPages) ||\n        maxRootPages < 1 ||\n        maxRootPages > 100 ||\n        !Number.isSafeInteger(maxLeaves) ||\n        maxLeaves < 1\n    )\n        throw Error(\"Invalid Provenance replay budget\");\n    if (!plan.params || !plan.capacity || plan.params.nullifiers.length !== plan.inputs.length)\n        throw Error(\"Private transact statement required\");\n    const trust = source.trust;\n    const openings = await Promise.all(\n        plan.inputs.map(async (input, i) => {\n            const opening = {\n                owner: input.note.ownerAddress,\n                nonce: input.note.nonce,\n                amount: input.note.amount,\n            };\n            const computed = await noteOpening({ ...plan.context, ...opening });\n            if (\n                computed.commitment !== BigInt(input.commitment) ||\n                computed.nullifier !== BigInt(plan.params!.nullifiers[i]!)\n            )\n                throw Error(\"Prepared Note opening or nullifier mismatch\");\n            return opening;\n        })\n    );\n    const digest = operationDigest({\n        ...plan.context,\n        mainCircuitCapacity: plan.capacity,\n        publicInputs: statement(plan).expectedPublicInputs,\n    });\n    const status = await source.getStatus();\n    const rootId = `${BigInt(trust.chainGeneration)}:${BigInt(String(status.checkpointSequence))}`;\n    const latest = await source.getRoot(rootId);\n    if (!latest.certificate || latest.allowedForNewProof !== true)\n        throw Error(\"No current recognized root\");\n    const certificates = new Map<string, RootCertificate>();\n    const matches = new Map<\n        number,\n        { certificate: RootCertificate; membership: { leafIndex: number; path: bigint[] } }\n    >();\n    let remaining = maxLeaves;\n    const replay = async (certificate: RootCertificate) => {\n        assertCertificateTrust(certificate, trust);\n        const block = await runtime!.reader.getBlock(BigInt(certificate.confirmedBlockNumber));\n        if (\n            !block ||\n            block.hash.toLowerCase() !== word(certificate.confirmedBlockHash).toLowerCase() ||\n            (await runtime!.reader.getChainId()) !== plan.context.chainId\n        )\n            throw Error(\"Provenance checkpoint canonical anchor mismatch\");\n        const count = Number(BigInt(certificate.leafCount));\n        if (!Number.isSafeInteger(count) || count > remaining)\n            throw Error(\"Provenance replay leaf budget exceeded\");\n        remaining -= count;\n        const tree = await source.syncRecognizedTree(\n            `${certificate.chainGeneration}:${certificate.rootSequence}`,\n            certificate,\n            { maxLeaves: Math.max(1, count) }\n        );\n        certificates.set(String(certificate.treeId), certificate);\n        for (let i = 0; i < plan.inputs.length; i++) {\n            if (matches.has(i)) continue;\n            const membership = await tree.membershipForCommitment(\n                trust,\n                plan.inputs[i]!.commitment\n            );\n            if (membership) matches.set(i, { certificate, membership });\n        }\n    };\n    await replay(latest.certificate as RootCertificate);\n    if (matches.size !== plan.inputs.length) {\n        const newest = new Map<string, RootCertificate>();\n        let cursor: string | undefined,\n            complete = false;\n        for (let page = 0; page < maxRootPages; page++) {\n            const result = await source.getRoots(\n                cursor ? { cursor, limit: 200 } : { after: \"0\", limit: 200 }\n            );\n            for (const certificate of result.items as RootCertificate[]) {\n                const previous = newest.get(String(certificate.treeId));\n                if (!previous || BigInt(previous.rootSequence) < BigInt(certificate.rootSequence))\n                    newest.set(String(certificate.treeId), certificate);\n            }\n            if (!result.nextCursor) {\n                complete = true;\n                break;\n            }\n            const next = String(result.nextCursor);\n            if (next === cursor) throw Error(\"Provenance root cursor did not advance\");\n            cursor = next;\n        }\n        if (!complete) throw Error(\"Provenance root replay page budget exceeded\");\n        for (const certificate of newest.values()) {\n            if (certificates.has(String(certificate.treeId))) continue;\n            const current = await source.getRoot(\n                `${certificate.chainGeneration}:${certificate.rootSequence}`\n            );\n            if (current.allowedForNewProof !== true) continue;\n            await replay(certificate);\n            if (matches.size === plan.inputs.length) break;\n        }\n    }\n    if (matches.size !== plan.inputs.length) throw Error(\"Prepared Note is not recognized\");\n    const used = [\n        ...new Map(\n            [...matches.values()].map((m) => [String(m.certificate.treeId), m.certificate])\n        ).values(),\n    ].sort((a, b) => (BigInt(a.treeId) < BigInt(b.treeId) ? -1 : 1));\n    const inputs: WitnessInput[] = openings.map((opening, i) => {\n        const match = matches.get(i)!;\n        return {\n            ...opening,\n            sourceIndex: used.findIndex(\n                (c) => BigInt(c.treeId) === BigInt(match.certificate.treeId)\n            ),\n            leafIndex: match.membership.leafIndex,\n            path: match.membership.path,\n        };\n    });\n    const capacity = CAPACITIES.find((k) => k >= inputs.length);\n    if (!capacity) throw Error(\"Provenance input capacity exceeded\");\n    const sidecar = await exportSidecar(\n        {\n            ...trust,\n            capacity,\n            tokenAddress: plan.context.tokenAddress,\n            operationDigest: digest,\n            inputs,\n            sources: used.map((c) => ({ treeId: c.treeId, root: c.root, leafCount: c.leafCount })),\n        },\n        used,\n        trust,\n        manifest,\n        prover,\n        0\n    );\n    return { operationDigest: digest, sidecars: [sidecar] };\n}\nexport async function provePreparedProvenance(\n    saved: SavedOperation,\n    runtime: TransactionRuntime,\n    capability?: PreparedProvenanceCapability,\n    reprove = false\n): Promise<ProvenanceProof> {\n    if (!saved.call || !saved.proof || saved.plan.kind !== \"transfer\" || !saved.plan.inputs.length)\n        throw Error(\"Ready transaction with private Note inputs required\");\n    const provider = runtime.options.prover as typeof runtime.options.prover &\n        Partial<import(\"@invisi-labs/prover/provenance-witness\").ProvenanceProvider>;\n    const active =\n        capability ??\n        runtime.options.provenance ??\n        (provider?.getProvenanceCapability\n            ? {\n                  ...(await provider.getProvenanceCapability()),\n                  client:\n                      runtime.options.provenanceClient ??\n                      (await officialProvenance.get(saved.plan.context)),\n              }\n            : undefined);\n    if (!active) throw Error(\"Local Provenance capability required\");\n    if (saved.provenance && !reprove)\n        return validateProvenanceProof(structuredClone(saved.provenance), active.client.trust);\n    const localRuntime = { ...runtime, options: { ...runtime.options, provenance: active } };\n    const evidence = await prepareProvenance(saved.plan, localRuntime);\n    const packet: ProvenanceProof = {\n        format: \"invisi-provenance-submission-v1\",\n        data: saved.call.data,\n        context: {\n            chainId: saved.plan.context.chainId.toString(),\n            protocolAddress: saved.plan.context.protocolAddress,\n            tokenAddress: saved.plan.context.tokenAddress,\n        },\n        mainCircuitCapacity: saved.plan.capacity!,\n        publicInputs: [...statement(saved.plan).expectedPublicInputs],\n        ...evidence,\n    };\n    return validateProvenanceProof(packet, active.client.trust);\n}\nexport function validateBroadcastEnvelope(saved: SavedOperation, client: BroadcasterClient) {\n    if (!saved.broadcasterQuote || !saved.broadcasterBinding || !saved.call)\n        throw Error(\"Prepared broadcaster quote and ready call required\");\n    if (\n        JSON.stringify(saved.broadcasterBinding.configuration) !==\n            JSON.stringify(client.configuration) ||\n        saved.broadcasterBinding.intentHash !== broadcasterRequestHash(saved.call.data)\n    )\n        throw Error(\"Prepared broadcaster context changed\");\n    const context = saved.plan.context;\n    if (\n        BigInt(saved.call.to) !== BigInt(context.protocolAddress) ||\n        saved.call.value !== 0n ||\n        saved.broadcasterQuote.context?.chainId !== context.chainId ||\n        BigInt(saved.broadcasterQuote.context.protocol) !== BigInt(context.protocolAddress)\n    )\n        throw Error(\"Prepared broadcaster deployment changed\");\n}\nexport async function validatePreparedBroadcast(\n    saved: SavedOperation,\n    client: BroadcasterClient,\n    runtime: TransactionRuntime\n) {\n    validateBroadcastEnvelope(saved, client);\n    if (saved.broadcasterQuote!.provenanceRequired && saved.plan.inputs.length) {\n        const source = saved.provenance;\n        if (!source || source.sidecars.length !== 1)\n            throw Error(\"Prepared Provenance evidence required\");\n        const digest = operationDigest({\n            ...saved.plan.context,\n            mainCircuitCapacity: saved.plan.capacity!,\n            publicInputs: statement(saved.plan).expectedPublicInputs,\n        });\n        if (source.operationDigest !== digest || source.data !== saved.call!.data)\n            throw Error(\"Prepared Provenance statement changed\");\n        const sidecar = source.sidecars[0]!;\n        const pi = sidecar.proofBundle.publicInputs;\n        if (\n            sidecar.operationIndex !== \"0\" ||\n            word((BigInt(pi[7]!) << 128n) | BigInt(pi[8]!)) !== digest ||\n            BigInt(pi[2]!) !== BigInt(saved.plan.context.tokenAddress) ||\n            BigInt(pi[6]!) !== BigInt(saved.plan.inputs.length) ||\n            BigInt(pi[9]!) !== (await inputDigest(saved.plan.params!.nullifiers))\n        )\n            throw Error(\"Prepared Provenance evidence binding mismatch\");\n        if (runtime.options.provenance)\n            await validateProofBundle(sidecar.proofBundle, runtime.options.provenance.client.trust);\n    } else if (saved.provenance) throw Error(\"Unexpected Prepared Provenance evidence\");\n}\n\nconst officialProvenance = new OfficialProvenanceClients();\n"]}