@invisi-labs/sdk 1.1.7 → 1.2.1

package/dist/chunk-MI4IP4ZD.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/wx/Workspace/invisi-lab/invisi-sdk-ts/packages/sdk/dist/chunk-MI4IP4ZD.cjs","../src/provenance/proof-record.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACA;ACJA;AACI;AACA;AACA;AACA;AACA;AAAA,8DAGG;AACP,iDAAmE;AAenE,SAAS,IAAA,CAAK,KAAA,EAAe,OAAA,EAAmB;AAC5C,EAAA,GAAA,CACI,CAAC,MAAA,GACD,OAAO,MAAA,IAAU,SAAA,GACjB,KAAA,CAAM,OAAA,CAAQ,KAAK,EAAA,GACnB,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,IAAA,CAAK,CAAC,GAAA,EAAA,GAAQ,CAAC,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAC,CAAA;AAEvD,IAAA,MAAM,KAAA,CAAM,iCAAiC,CAAA;AACrD;AAEA,MAAA,SAAsB,uBAAA,CAClB,MAAA,EACA,KAAA,EACwB;AACxB,EAAA,IAAA,CAAK,MAAA,EAAQ;AAAA,IACT,QAAA;AAAA,IACA,MAAA;AAAA,IACA,SAAA;AAAA,IACA,qBAAA;AAAA,IACA,cAAA;AAAA,IACA,iBAAA;AAAA,IACA;AAAA,EACJ,CAAC,CAAA;AACD,EAAA,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,CAAC,SAAA,EAAW,iBAAA,EAAmB,cAAc,CAAC,CAAA;AACnE,EAAA,GAAA,CACI,MAAA,CAAO,OAAA,IAAW,kCAAA,GAClB,OAAO,MAAA,CAAO,OAAA,CAAQ,QAAA,IAAY,SAAA,GAClC,OAAO,MAAA,CAAO,OAAA,CAAQ,gBAAA,IAAoB,SAAA,GAC1C,OAAO,MAAA,CAAO,OAAA,CAAQ,aAAA,IAAiB,SAAA,GACvC,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,OAAO,EAAA,IAAM,MAAA,CAAO,KAAA,CAAM,OAAO,EAAA,GACvD,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,eAAe,EAAA,IAAM,MAAA,CAAO,KAAA,CAAM,eAAe,EAAA,GACvE,CAAC,KAAA,CAAM,OAAA,CAAQ,MAAA,CAAO,QAAQ,EAAA,GAC9B,MAAA,CAAO,QAAA,CAAS,OAAA,IAAW,CAAA;AAE3B,IAAA,MAAM,KAAA,CAAM,gDAAgD,CAAA;AAChE,EAAA,MAAM,QAAA,EAAU,uDAAA,MAAwB,CAAO,IAAI,CAAA;AACnD,EAAA,GAAA,CAAI,OAAA,CAAQ,OAAA,IAAW,UAAA,EAAY,MAAM,KAAA,CAAM,+CAA+C,CAAA;AAC9F,EAAA,MAAM,QAAA,EAAU;AAAA,IACZ,OAAA,EAAS,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA;AAAA,IACtC,eAAA,EAAiB,MAAA,CAAO,OAAA,CAAQ,eAAA;AAAA,IAChC,YAAA,EAAc,MAAA,CAAO,OAAA,CAAQ;AAAA,EACjC,CAAA;AACA,EAAA,MAAM,IAAA,EAAM,OAAA,CAAQ,OAAA,CAAQ,MAAA;AAC5B,EAAA,MAAM,OAAA,EAAS;AAAA,IACX,KAAA,EAAO,GAAA,CAAI,KAAA;AAAA,IACX,OAAA,EAAS,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,CAAC,MAAA,EAAA,GAAA,CAAiB;AAAA,MAC/C,MAAA,EAAQ,MAAA,CAAO,MAAA;AAAA,MACf,UAAA,EAAY,MAAA,CAAO;AAAA,IACvB,CAAA,CAAE,CAAA;AAAA,IACF,UAAA,EAAY,CAAC,GAAG,GAAA,CAAI,UAAU,CAAA;AAAA,IAC9B,eAAA,EAAiB,CAAC,GAAG,GAAA,CAAI,eAAe,CAAA;AAAA,IACxC,iBAAA,EAAmB,GAAA,CAAI,iBAAA;AAAA,IACvB,gBAAA,EAAkB,GAAA,CAAI,gBAAA;AAAA,IACtB,QAAA,EAAU,GAAA,CAAI,QAAA;AAAA,IACd,YAAA,EAAc,GAAA,CAAI,YAAA;AAAA,IAClB,SAAA,EAAW,GAAA,CAAI;AAAA,EACnB,CAAA;AACA,EAAA,MAAM,WAAA,EAAa,OAAA,CAAQ,OAAA,CAAQ,UAAA,CAAW,GAAA;AAAA,IAAI,CAAC,CAAA,EAAA,GAC/C,CAAA,CAAE,QAAA,CAAS,IAAI;AAAA,EACnB,CAAA;AACA,EAAA,MAAM,QAAA,EAAU,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA;AACrD,EAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,EAAI,MAAA,CAAO,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA;AAC1C,EAAA,MAAM,WAAA,EAAa,gDAAA,OAAyB,EAAS,MAAA,EAAQ,UAAA,EAAY,OAAO,CAAA;AAChF,EAAA,MAAM,aAAA,EAAe,gDAAA,OAAyB,EAAS,MAAA,EAAQ,UAAA,EAAY,OAAO,CAAA;AAClF,EAAA,GAAA,CACI,CAAC,UAAA,CAAW,WAAA,GACZ,UAAA,CAAW,SAAA,IAAa,MAAA,CAAO,oBAAA,GAC/B,IAAA,CAAK,SAAA,CAAU,YAAY,EAAA,IAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,YAAY,CAAA;AAEnE,IAAA,MAAM,KAAA,CAAM,sCAAsC,CAAA;AACtD,EAAA,MAAM,OAAA,EAAS,yCAAA;AAAgB,IAC3B,GAAG,OAAA;AAAA,IACH,mBAAA,EAAqB,UAAA,CAAW,QAAA;AAAA,IAChC;AAAA,EACJ,CAAC,CAAA;AACD,EAAA,GAAA,CAAI,MAAA,CAAO,gBAAA,IAAoB,MAAA,EAAQ,MAAM,KAAA,CAAM,sCAAsC,CAAA;AACzF,EAAA,MAAM,QAAA,EAAU,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA;AACjC,EAAA,MAAM,KAAA,EAAO,4CAAA,OAA0B,CAAA;AACvC,EAAA,GAAA,CAAI,IAAA,CAAK,eAAA,IAAmB,GAAA,EAAK,MAAM,KAAA,CAAM,wCAAwC,CAAA;AACrF,EAAA,MAAM,6CAAA,IAAoB,CAAK,WAAA,EAAa,KAAK,CAAA;AACjD,EAAA,MAAM,GAAA,EAAK,IAAA,CAAK,WAAA,CAAY,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AACnD,EAAA,GAAA,CACI,EAAA,CAAG,CAAC,EAAA,IAAM,MAAA,CAAO,OAAA,CAAQ,YAAY,EAAA,GACrC,EAAA,CAAG,CAAC,EAAA,IAAM,MAAA,CAAO,UAAA,CAAW,UAAU,EAAA,GACtC,8BAAA,EAAM,CAAG,CAAC,EAAA,GAAM,KAAA,EAAQ,EAAA,CAAG,CAAC,CAAE,EAAA,IAAM,OAAA,GACpC,EAAA,CAAG,CAAC,EAAA,IAAO,MAAM,qCAAA,UAAY,CAAW,UAAU,CAAA;AAElD,IAAA,MAAM,KAAA,CAAM,qCAAqC,CAAA;AACrD,EAAA,OAAO;AAAA,IACH,GAAG,MAAA;AAAA,IACH,OAAA,EAAS,EAAE,GAAG,MAAA,CAAO,QAAQ,CAAA;AAAA,IAC7B,YAAA,EAAc,CAAC,GAAG,YAAY,CAAA;AAAA,IAC9B,QAAA,EAAU,CAAC,IAAI;AAAA,EACnB,CAAA;AACJ;ADrCA;AACA;AACE;AACF,0DAAC","file":"/Users/wx/Workspace/invisi-lab/invisi-sdk-ts/packages/sdk/dist/chunk-MI4IP4ZD.cjs","sourcesContent":[null,"import {\n    inputDigest,\n    operationDigest,\n    proofSidecarToWire,\n    validateProofBundle,\n    word,\n    type ProofSidecar,\n    type TrustContext,\n} from \"@invisi-labs/protocol/provenance\";\nimport { normalizeTransactRequest, transactUserPublicInputs } from \"@invisi-labs/protocol\";\nimport type { Hex } from \"@invisi-labs/protocol/contracts\";\nimport { decodeBroadcasterIntent } from \"../broadcaster/index\";\n\n/** Public recovery packet; persist encrypted Note openings separately if reproof is needed. */\nexport interface ProvenanceProof {\n    format: \"invisi-provenance-submission-v1\";\n    data: string;\n    context: { chainId: string; protocolAddress: string; tokenAddress: string };\n    mainCircuitCapacity: number;\n    publicInputs: string[];\n    operationDigest: string;\n    sidecars: ProofSidecar[];\n}\n\nfunction keys(value: object, allowed: string[]) {\n    if (\n        !value ||\n        typeof value !== \"object\" ||\n        Array.isArray(value) ||\n        Object.keys(value).some((key) => !allowed.includes(key))\n    )\n        throw Error(\"Unknown Provenance packet field\");\n}\n\nexport async function validateProvenanceProof(\n    packet: ProvenanceProof,\n    trust: TrustContext\n): Promise<ProvenanceProof> {\n    keys(packet, [\n        \"format\",\n        \"data\",\n        \"context\",\n        \"mainCircuitCapacity\",\n        \"publicInputs\",\n        \"operationDigest\",\n        \"sidecars\",\n    ]);\n    keys(packet.context, [\"chainId\", \"protocolAddress\", \"tokenAddress\"]);\n    if (\n        packet.format !== \"invisi-provenance-submission-v1\" ||\n        typeof packet.context.chainId !== \"string\" ||\n        typeof packet.context.protocolAddress !== \"string\" ||\n        typeof packet.context.tokenAddress !== \"string\" ||\n        BigInt(packet.context.chainId) !== BigInt(trust.chainId) ||\n        BigInt(packet.context.protocolAddress) !== BigInt(trust.protocolAddress) ||\n        !Array.isArray(packet.sidecars) ||\n        packet.sidecars.length !== 1\n    )\n        throw Error(\"Provenance packet deployment or shape mismatch\");\n    const decoded = decodeBroadcasterIntent(packet.data);\n    if (decoded.method !== \"transact\") throw Error(\"Provenance requires private transact calldata\");\n    const context = {\n        chainId: BigInt(packet.context.chainId),\n        protocolAddress: packet.context.protocolAddress as Hex,\n        tokenAddress: packet.context.tokenAddress as Hex,\n    };\n    const raw = decoded.request.params;\n    const params = {\n        token: raw.token,\n        sources: Array.from(raw.sources, (source: any) => ({\n            treeId: source.treeId,\n            merkleRoot: source.merkleRoot,\n        })),\n        nullifiers: [...raw.nullifiers],\n        noteCommitments: [...raw.noteCommitments],\n        withdrawalAddress: raw.withdrawalAddress,\n        withdrawalAmount: raw.withdrawalAmount,\n        deadline: raw.deadline,\n        feeRecipient: raw.feeRecipient,\n        feeAmount: raw.feeAmount,\n    };\n    const deliveries = decoded.request.deliveries.map((d: { toObject(deep: boolean): unknown }) =>\n        d.toObject(true)\n    );\n    const funding = decoded.request.funding.toObject(true);\n    funding.permit.v = Number(funding.permit.v);\n    const normalized = normalizeTransactRequest(context, params, deliveries, funding);\n    const publicInputs = transactUserPublicInputs(context, params, deliveries, funding);\n    if (\n        !normalized.inputCount ||\n        normalized.capacity !== packet.mainCircuitCapacity ||\n        JSON.stringify(publicInputs) !== JSON.stringify(packet.publicInputs)\n    )\n        throw Error(\"Provenance native statement mismatch\");\n    const digest = operationDigest({\n        ...context,\n        mainCircuitCapacity: normalized.capacity,\n        publicInputs,\n    });\n    if (packet.operationDigest !== digest) throw Error(\"Provenance operation digest mismatch\");\n    const sidecar = packet.sidecars[0]!;\n    const wire = proofSidecarToWire(sidecar);\n    if (wire.operationIndex !== \"0\") throw Error(\"Unsupported Provenance operation index\");\n    await validateProofBundle(wire.proofBundle, trust);\n    const pi = wire.proofBundle.publicInputs.map(BigInt);\n    if (\n        pi[2] !== BigInt(context.tokenAddress) ||\n        pi[6] !== BigInt(normalized.inputCount) ||\n        word((pi[7]! << 128n) | pi[8]!) !== digest ||\n        pi[9] !== (await inputDigest(normalized.nullifiers))\n    )\n        throw Error(\"Provenance proof statement mismatch\");\n    return {\n        ...packet,\n        context: { ...packet.context },\n        publicInputs: [...publicInputs],\n        sidecars: [wire],\n    };\n}\n"]}

package/dist/chunk-OCZLJKIA.cjs

@@ -0,0 +1,41 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+var _chunk4SDP53YQcjs = require('./chunk-4SDP53YQ.cjs');
+
+// src/notes/TransactionOutput.ts
+var TransactionOutput = class {
+  #output;
+  constructor(output) {
+    this.#output = structuredClone(output);
+    Object.freeze(this);
+  }
+  get context() {
+    return structuredClone(this.#output.context);
+  }
+  get recipient() {
+    return structuredClone(this.#output.recipient);
+  }
+  get amount() {
+    return this.#output.amount;
+  }
+  get commitment() {
+    return this.#output.commitment;
+  }
+  get identity() {
+    return this.#output.identity;
+  }
+  get nonce() {
+    return _optionalChain([this, 'access', _ => _.#output, 'access', _2 => _2.note, 'optionalAccess', _3 => _3.nonce]);
+  }
+  get change() {
+    return this.#output.change;
+  }
+  exportPaymentNote() {
+    return _chunk4SDP53YQcjs.exportPaymentNote.call(void 0, this.#output);
+  }
+};
+
+
+
+exports.TransactionOutput = TransactionOutput;
+//# sourceMappingURL=chunk-OCZLJKIA.cjs.map

package/dist/chunk-OCZLJKIA.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/wx/Workspace/invisi-lab/invisi-sdk-ts/packages/sdk/dist/chunk-OCZLJKIA.cjs","../src/notes/TransactionOutput.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACA;ACAO,IAAM,kBAAA,EAAN,MAAwB;AAAA,EAClB,CAAA,MAAA;AAAA,EACT,WAAA,CAAY,MAAA,EAAwB;AAChC,IAAA,IAAA,CAAK,CAAA,OAAA,EAAU,eAAA,CAAgB,MAAM,CAAA;AACrC,IAAA,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA;AAAA,EACtB;AAAA,EACA,IAAI,OAAA,CAAA,EAAU;AACV,IAAA,OAAO,eAAA,CAAgB,IAAA,CAAK,CAAA,MAAA,CAAQ,OAAO,CAAA;AAAA,EAC/C;AAAA,EACA,IAAI,SAAA,CAAA,EAAY;AACZ,IAAA,OAAO,eAAA,CAAgB,IAAA,CAAK,CAAA,MAAA,CAAQ,SAAS,CAAA;AAAA,EACjD;AAAA,EACA,IAAI,MAAA,CAAA,EAAS;AACT,IAAA,OAAO,IAAA,CAAK,CAAA,MAAA,CAAQ,MAAA;AAAA,EACxB;AAAA,EACA,IAAI,UAAA,CAAA,EAAa;AACb,IAAA,OAAO,IAAA,CAAK,CAAA,MAAA,CAAQ,UAAA;AAAA,EACxB;AAAA,EACA,IAAI,QAAA,CAAA,EAAW;AACX,IAAA,OAAO,IAAA,CAAK,CAAA,MAAA,CAAQ,QAAA;AAAA,EACxB;AAAA,EACA,IAAI,KAAA,CAAA,EAAQ;AACR,IAAA,uBAAO,IAAA,mBAAK,CAAA,MAAA,qBAAQ,IAAA,6BAAM,OAAA;AAAA,EAC9B;AAAA,EACA,IAAI,MAAA,CAAA,EAAS;AACT,IAAA,OAAO,IAAA,CAAK,CAAA,MAAA,CAAQ,MAAA;AAAA,EACxB;AAAA,EACA,iBAAA,CAAA,EAA4B;AACxB,IAAA,OAAO,iDAAA,IAAkB,CAAK,CAAA,MAAO,CAAA;AAAA,EACzC;AACJ,CAAA;ADEA;AACA;AACE;AACF,8CAAC","file":"/Users/wx/Workspace/invisi-lab/invisi-sdk-ts/packages/sdk/dist/chunk-OCZLJKIA.cjs","sourcesContent":[null,"import type { PreparedOutput } from \"../transactions/operation-types\";\nimport { exportPaymentNote } from \"../payment-note/export\";\n\n/** Detached final output snapshot, including any generated change. Contains private Note data. */\nexport class TransactionOutput {\n    readonly #output: PreparedOutput;\n    constructor(output: PreparedOutput) {\n        this.#output = structuredClone(output);\n        Object.freeze(this);\n    }\n    get context() {\n        return structuredClone(this.#output.context);\n    }\n    get recipient() {\n        return structuredClone(this.#output.recipient);\n    }\n    get amount() {\n        return this.#output.amount;\n    }\n    get commitment() {\n        return this.#output.commitment;\n    }\n    get identity() {\n        return this.#output.identity;\n    }\n    get nonce() {\n        return this.#output.note?.nonce;\n    }\n    get change() {\n        return this.#output.change;\n    }\n    exportPaymentNote(): string {\n        return exportPaymentNote(this.#output);\n    }\n}\n"]}

package/dist/chunk-R5YAOJKB.js

@@ -0,0 +1,71 @@
+// src/broadcaster/index.ts
+import {
+  BroadcasterRpcError,
+  broadcasterQuoteDomain,
+  broadcasterQuoteTypes,
+  broadcasterRequestHash,
+  broadcasterTransactInterface,
+  decodeBroadcasterIntent,
+  verifyBroadcasterQuote
+} from "@invisi-labs/rpc/broadcaster";
+import {
+  BroadcasterClient as RpcBroadcasterClient
+} from "@invisi-labs/rpc/broadcaster";
+
+// src/broadcaster/operation-bridge.ts
+var bindings = /* @__PURE__ */ new WeakMap();
+function bindBroadcasterOperation(target, hooks) {
+  if (bindings.has(target)) throw Error("Broadcaster operation already registered");
+  bindings.set(target, hooks);
+}
+function quoteOperation(client, target, options) {
+  const hooks = bindings.get(target);
+  if (!hooks) throw Error("Operation does not support broadcaster quoting");
+  return hooks.quote(client, options);
+}
+function submitOperation(client, target) {
+  const hooks = bindings.get(target);
+  if (!hooks) throw Error("Operation does not support broadcaster submission");
+  return hooks.submit(client);
+}
+function proveOperationProvenance(target, capability, reprove = false) {
+  const hooks = bindings.get(target);
+  if (!hooks) throw Error("Operation does not support Provenance proving");
+  return hooks.proveProvenance(capability, reprove);
+}
+function readOperationProvenance(target) {
+  const hooks = bindings.get(target);
+  if (!hooks) throw Error("Operation does not support Provenance proving");
+  return hooks.readProvenance();
+}
+function operationProvenanceContext(target) {
+  const hooks = bindings.get(target);
+  if (!hooks) throw Error("Operation does not support Provenance proving");
+  return hooks.provenanceContext();
+}
+
+// src/broadcaster/index.ts
+var BroadcasterClient = class extends RpcBroadcasterClient {
+  quote(transaction, options) {
+    return quoteOperation(this, transaction, options);
+  }
+  submit(transaction) {
+    return submitOperation(this, transaction);
+  }
+};
+
+export {
+  bindBroadcasterOperation,
+  proveOperationProvenance,
+  readOperationProvenance,
+  operationProvenanceContext,
+  BroadcasterClient,
+  BroadcasterRpcError,
+  broadcasterQuoteDomain,
+  broadcasterQuoteTypes,
+  broadcasterRequestHash,
+  broadcasterTransactInterface,
+  decodeBroadcasterIntent,
+  verifyBroadcasterQuote
+};
+//# sourceMappingURL=chunk-R5YAOJKB.js.map

package/dist/chunk-R5YAOJKB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/broadcaster/index.ts","../src/broadcaster/operation-bridge.ts"],"sourcesContent":["export {\n    BroadcasterRpcError,\n    broadcasterQuoteDomain,\n    broadcasterQuoteTypes,\n    broadcasterRequestHash,\n    broadcasterTransactInterface,\n    decodeBroadcasterIntent,\n    verifyBroadcasterQuote,\n} from \"@invisi-labs/rpc/broadcaster\";\nexport type {\n    BroadcasterQuote,\n    BroadcasterEstimate,\n    SignedBroadcasterQuote,\n    BroadcasterTrust,\n    BroadcasterStatus,\n    BroadcasterTransport,\n    BroadcasterConfiguration,\n} from \"@invisi-labs/rpc/broadcaster\";\nimport {\n    BroadcasterClient as RpcBroadcasterClient,\n    type BroadcasterStatus,\n} from \"@invisi-labs/rpc/broadcaster\";\nimport { quoteOperation, submitOperation, type BroadcasterTransaction } from \"./operation-bridge\";\nimport type { BroadcasterQuoteOptions } from \"./broadcaster-preparation\";\nexport type { BroadcasterTransaction } from \"./operation-bridge\";\n/** Application-level quote and submission conveniences over the public RPC client. */\nexport class BroadcasterClient extends RpcBroadcasterClient {\n    quote<T extends BroadcasterTransaction>(\n        transaction: T,\n        options: BroadcasterQuoteOptions\n    ): Promise<T> {\n        return quoteOperation(this, transaction, options);\n    }\n    submit(transaction: BroadcasterTransaction): Promise<BroadcasterStatus> {\n        return submitOperation(this, transaction);\n    }\n}\n","import type { Scope } from \"@invisi-labs/protocol/provenance\";\nimport type { PreparedProvenanceCapability } from \"./provenance-preparation\";\nimport type { ProvenanceProof } from \"../provenance/proof-record\";\nimport type { BroadcasterClient, BroadcasterStatus } from \"./index\";\nimport type { BroadcasterQuoteOptions } from \"./broadcaster-preparation\";\n\nexport interface BroadcasterTransaction {\n    readonly id: string;\n    readonly status: string;\n}\ninterface Hooks<T extends BroadcasterTransaction> {\n    quote(client: BroadcasterClient, options: BroadcasterQuoteOptions): Promise<T>;\n    submit(client: BroadcasterClient): Promise<BroadcasterStatus>;\n    provenanceContext(): Promise<Scope>;\n    readProvenance(): Promise<ProvenanceProof | undefined>;\n    proveProvenance(\n        capability: PreparedProvenanceCapability,\n        reprove?: boolean\n    ): Promise<ProvenanceProof>;\n}\n// Both stateless handles and managed sessions register their own lifecycle/storage boundary.\nconst bindings = new WeakMap<BroadcasterTransaction, Hooks<BroadcasterTransaction>>();\nexport function bindBroadcasterOperation<T extends BroadcasterTransaction>(\n    target: T,\n    hooks: Hooks<T>\n): void {\n    if (bindings.has(target)) throw Error(\"Broadcaster operation already registered\");\n    bindings.set(target, hooks);\n}\nexport function quoteOperation<T extends BroadcasterTransaction>(\n    client: BroadcasterClient,\n    target: T,\n    options: BroadcasterQuoteOptions\n): Promise<T> {\n    const hooks = bindings.get(target);\n    if (!hooks) throw Error(\"Operation does not support broadcaster quoting\");\n    return hooks.quote(client, options) as Promise<T>;\n}\nexport function submitOperation(\n    client: BroadcasterClient,\n    target: BroadcasterTransaction\n): Promise<BroadcasterStatus> {\n    const hooks = bindings.get(target);\n    if (!hooks) throw Error(\"Operation does not support broadcaster submission\");\n    return hooks.submit(client);\n}\n\nexport function proveOperationProvenance(\n    target: BroadcasterTransaction,\n    capability: PreparedProvenanceCapability,\n    reprove = false\n): Promise<ProvenanceProof> {\n    const hooks = bindings.get(target);\n    if (!hooks) throw Error(\"Operation does not support Provenance proving\");\n    return hooks.proveProvenance(capability, reprove);\n}\n\nexport function readOperationProvenance(\n    target: BroadcasterTransaction\n): Promise<ProvenanceProof | undefined> {\n    const hooks = bindings.get(target);\n    if (!hooks) throw Error(\"Operation does not support Provenance proving\");\n    return hooks.readProvenance();\n}\n\nexport function operationProvenanceContext(target: BroadcasterTransaction): Promise<Scope> {\n    const hooks = bindings.get(target);\n    if (!hooks) throw Error(\"Operation does not support Provenance proving\");\n    return hooks.provenanceContext();\n}\n"],"mappings":";AAAA;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AAUP;AAAA,EACI,qBAAqB;AAAA,OAElB;;;ACAP,IAAM,WAAW,oBAAI,QAA+D;AAC7E,SAAS,yBACZ,QACA,OACI;AACJ,MAAI,SAAS,IAAI,MAAM,EAAG,OAAM,MAAM,0CAA0C;AAChF,WAAS,IAAI,QAAQ,KAAK;AAC9B;AACO,SAAS,eACZ,QACA,QACA,SACU;AACV,QAAM,QAAQ,SAAS,IAAI,MAAM;AACjC,MAAI,CAAC,MAAO,OAAM,MAAM,gDAAgD;AACxE,SAAO,MAAM,MAAM,QAAQ,OAAO;AACtC;AACO,SAAS,gBACZ,QACA,QAC0B;AAC1B,QAAM,QAAQ,SAAS,IAAI,MAAM;AACjC,MAAI,CAAC,MAAO,OAAM,MAAM,mDAAmD;AAC3E,SAAO,MAAM,OAAO,MAAM;AAC9B;AAEO,SAAS,yBACZ,QACA,YACA,UAAU,OACc;AACxB,QAAM,QAAQ,SAAS,IAAI,MAAM;AACjC,MAAI,CAAC,MAAO,OAAM,MAAM,+CAA+C;AACvE,SAAO,MAAM,gBAAgB,YAAY,OAAO;AACpD;AAEO,SAAS,wBACZ,QACoC;AACpC,QAAM,QAAQ,SAAS,IAAI,MAAM;AACjC,MAAI,CAAC,MAAO,OAAM,MAAM,+CAA+C;AACvE,SAAO,MAAM,eAAe;AAChC;AAEO,SAAS,2BAA2B,QAAgD;AACvF,QAAM,QAAQ,SAAS,IAAI,MAAM;AACjC,MAAI,CAAC,MAAO,OAAM,MAAM,+CAA+C;AACvE,SAAO,MAAM,kBAAkB;AACnC;;;AD3CO,IAAM,oBAAN,cAAgC,qBAAqB;AAAA,EACxD,MACI,aACA,SACU;AACV,WAAO,eAAe,MAAM,aAAa,OAAO;AAAA,EACpD;AAAA,EACA,OAAO,aAAiE;AACpE,WAAO,gBAAgB,MAAM,WAAW;AAAA,EAC5C;AACJ;","names":[]}

package/dist/chunk-RY4M2CIQ.js

@@ -0,0 +1,399 @@
+import {
+  InvisiError,
+  NoteOutput,
+  materializeNoteOutput
+} from "./chunk-GUD3LAUO.js";
+import {
+  EthersAddressResolver
+} from "./chunk-4VI6LYGH.js";
+
+// src/credit/state.ts
+import {
+  computeCreditCommitment,
+  deriveCreditUpdate
+} from "@invisi-labs/primitives";
+async function creditLeaf(state) {
+  return computeCreditCommitment(state.note);
+}
+async function assertCreditUpdatePlan(plan) {
+  const credit = plan.credit;
+  if (!credit?.update) return;
+  const input = credit.inputs[0], output = credit.outputs[0], changes = credit.updateChanges;
+  if (!input || !output || !changes)
+    throw Error("Credit update input, output and adjustment required");
+  const derived = await deriveCreditUpdate(input.state.note, changes, plan.deadline);
+  if (derived.nullifier !== credit.update.nullifier || derived.stateCommitment !== credit.update.creditCommitment || output.commitment !== derived.stateCommitment || await computeCreditCommitment(output.state.note) !== derived.stateCommitment)
+    throw Error("Credit update adjustment does not match frozen successor");
+}
+
+// src/notes/recipient-infrastructure.ts
+import {
+  MissingCapabilityError,
+  ReceivingAddress
+} from "@invisi-labs/primitives";
+import { ProtocolRpcClient } from "@invisi-labs/rpc";
+var recipientInfrastructure = /* @__PURE__ */ Symbol("SDK recipient infrastructure");
+function configureRecipientInfrastructure(options) {
+  const { provider, protocolRpc, chainReader } = options;
+  const registry = options.protocol.deployment.registry;
+  const deployment = options.protocol.deployment;
+  const lookup = (source) => async (ownerAddress) => {
+    if (!registry) throw new MissingCapabilityError("receiving-key registry deployment");
+    if (source === "chain") {
+      if (!provider)
+        throw new MissingCapabilityError("ethers provider for registry lookup");
+      return new EthersAddressResolver(
+        provider,
+        {
+          chainId: deployment.chainId,
+          registryAddress: registry.address
+        },
+        registry.runtimeCodeHash
+      ).lookup(ownerAddress);
+    }
+    if (!(protocolRpc instanceof ProtocolRpcClient))
+      throw new MissingCapabilityError("Protocol RPC recipient discovery");
+    const rpc = chainReader ? protocolRpc.withReader(chainReader) : protocolRpc;
+    const discovered = await rpc.getDeployment(deployment.chainId);
+    if (discovered.protocol.address !== deployment.protocol.address || discovered.protocol.runtimeCodeHash !== deployment.protocol.runtimeCodeHash || discovered.protocol.fromBlock !== deployment.protocol.fromBlock || discovered.registry?.address !== registry.address || discovered.registry.runtimeCodeHash !== registry.runtimeCodeHash || discovered.registry.fromBlock !== registry.fromBlock)
+      throw new Error("Recipient registry deployment pins mismatch");
+    const registration = await rpc.getReceivingAddress(ownerAddress);
+    return registration ? ReceivingAddress.parse(registration.receivingAddress).getReceivingKeys() : null;
+  };
+  return { ...options, [recipientInfrastructure]: lookup };
+}
+function recipientLookup(options, source = "protocol-rpc") {
+  return async (ownerAddress) => {
+    const lookup = options[recipientInfrastructure];
+    if (!lookup) throw new MissingCapabilityError("recipient infrastructure");
+    return lookup(source)(ownerAddress);
+  };
+}
+
+// src/discovery/membership.ts
+import { FIELD_MODULUS, poseidonHash } from "@invisi-labs/primitives";
+async function verifyMembership(reader, context, block, input, proof) {
+  if (proof.block.hash !== block.hash || proof.block.number !== block.number || proof.leaf !== input.commitment || proof.treeId !== input.treeId || proof.leafIndex !== input.leafIndex || proof.path.length !== 16 || !Number.isInteger(input.leafIndex) || input.leafIndex < 0 || input.leafIndex >= 65536 || !await reader.isKnownRoot(context, input.treeId, proof.root, block))
+    throw new Error("membership context/root mismatch");
+  let root = BigInt(input.commitment);
+  for (let i = 0; i < 16; i++) {
+    const sibling = proof.path[i];
+    if (typeof sibling !== "bigint" || sibling < 0n || sibling >= FIELD_MODULUS)
+      throw new Error("noncanonical membership path");
+    root = BigInt(
+      await poseidonHash(input.leafIndex >> i & 1 ? [sibling, root] : [root, sibling])
+    );
+  }
+  if (root !== BigInt(proof.root))
+    throw new Error("membership path does not produce canonical root");
+}
+
+// src/transactions/preparation/prepare-common.ts
+import { getAddress } from "ethers";
+import {
+  MissingCapabilityError as MissingCapabilityError2,
+  computeNoteCommitment,
+  computeNoteIdentity
+} from "@invisi-labs/primitives";
+import {
+  normalizeFunding
+} from "@invisi-labs/protocol";
+
+// src/transactions/preparation/selection.ts
+function selectNotes(notes, target, reserved) {
+  if (typeof target !== "bigint" || target < 0n)
+    throw new Error("selection target must be a nonnegative amount");
+  if (target === 0n) return [];
+  const eligible = notes.filter(
+    (note) => note.spent === "unspent" && !reserved.has(note.commitment)
+  );
+  for (const record of eligible)
+    if (typeof record.note.amount !== "bigint" || record.note.amount <= 0n || record.note.amount >= 1n << 128n)
+      throw new Error("invalid verified note amount");
+  eligible.sort(
+    (a, b) => a.note.amount > b.note.amount ? -1 : a.note.amount < b.note.amount ? 1 : a.treeId < b.treeId ? -1 : a.treeId > b.treeId ? 1 : a.leafIndex - b.leafIndex || a.commitment.localeCompare(b.commitment)
+  );
+  const selected = [];
+  let total = 0n;
+  for (const record of eligible) {
+    selected.push(structuredClone(record));
+    total += record.note.amount;
+    if (total >= target) return selected;
+  }
+  throw new Error("insufficient verified available funds");
+}
+
+// src/transactions/preparation/prepare-common.ts
+function positiveAmount(value, bits = 128) {
+  if (typeof value !== "bigint" || value <= 0n || value >= 1n << BigInt(bits)) {
+    throw new Error(`amount must be a positive uint${bits}`);
+  }
+  return value;
+}
+function copyApplicationPayload(value) {
+  if (value === void 0) return new Uint8Array();
+  if (!(value instanceof Uint8Array)) throw new TypeError("payload must be Uint8Array");
+  return Uint8Array.from(value);
+}
+function positiveOutputAmount(payment, outputIndex) {
+  try {
+    return positiveAmount(payment.amount);
+  } catch (cause) {
+    throw new InvisiError(
+      "PREPARATION_FAILED",
+      cause instanceof Error ? cause.message : "Invalid output amount",
+      {
+        address: payment.to,
+        field: "amount",
+        ...outputIndex === void 0 ? {} : { outputIndex },
+        cause
+      }
+    );
+  }
+}
+var Preparation = class {
+  constructor(runtime) {
+    this.runtime = runtime;
+  }
+  #roots = /* @__PURE__ */ new Map();
+  async frame(requested) {
+    const { reader, options } = this.runtime;
+    await options.protocol.validateDeployment(reader);
+    const block = await reader.getBlock(await reader.getLatestBlockNumber());
+    const deadline = requested ?? block.timestamp + (options.transactionTTL ?? 300n);
+    if (typeof deadline !== "bigint" || deadline < block.timestamp || deadline >= 1n << 64n) {
+      throw new Error("invalid transaction deadline");
+    }
+    const state = await this.runtime.readInventory();
+    if (state.invalidated) {
+      throw new Error("wallet requires canonical resync");
+    }
+    for (const point of [state.observedThrough]) {
+      if (point && (await reader.getBlock(point.number)).hash !== point.hash) {
+        throw new Error("canonical wallet checkpoint changed; resync required");
+      }
+    }
+    return {
+      context: {
+        ...options.protocol.context,
+        now: block.timestamp,
+        timestamp: block.timestamp
+      },
+      block,
+      deadline
+    };
+  }
+  async assertBlock(frame) {
+    if ((await this.runtime.reader.getBlock(frame.block.number)).hash !== frame.block.hash) {
+      throw new Error("canonical block changed while preparing");
+    }
+  }
+  async funding(source, frame) {
+    if (!source) {
+      return { funding: {}, fundingMode: "none" };
+    }
+    positiveAmount(source.amount);
+    const payer = getAddress(source.payer);
+    const mode = source.authorization ?? "signature";
+    if (BigInt(payer) === 0n) {
+      throw new Error("funding payer must be nonzero");
+    }
+    if (mode !== "signature" && mode !== "caller") {
+      throw new Error("invalid funding authorization mode");
+    }
+    if (mode === "caller" && (source.sigNonce || source.deadline)) {
+      throw new Error("caller funding uses zero nonce/deadline");
+    }
+    const funding = normalizeFunding({
+      payer,
+      amount: source.amount,
+      sigNonce: mode === "caller" ? 0n : source.sigNonce ?? await this.runtime.reader.getFundingNonce(
+        frame.context,
+        payer,
+        frame.block
+      ),
+      deadline: mode === "caller" ? 0n : source.deadline ?? frame.deadline,
+      ...source.permit ? { permit: structuredClone(source.permit) } : {}
+    });
+    if (mode === "signature" && funding.deadline < frame.block.timestamp) {
+      throw new Error("funding authorization deadline has expired");
+    }
+    return { funding, fundingMode: mode };
+  }
+  async change(amount, context) {
+    const address = this.runtime.changeAddress ?? this.runtime.options.wallet.getReceivingAddress().toString();
+    try {
+      const output = await NoteOutput.create({
+        chainId: context.chainId,
+        protocolAddress: context.protocolAddress,
+        tokenAddress: context.tokenAddress,
+        amount,
+        recipient: address.startsWith("0i") ? { type: "invisi", address } : { type: "evm", address }
+      });
+      return await this.output(output, context, true);
+    } catch (cause) {
+      if (cause instanceof InvisiError)
+        throw new InvisiError(cause.code, cause.message, {
+          address,
+          field: "changeAddress",
+          ...cause.capability ? { capability: cause.capability } : {},
+          cause: cause.cause ?? cause
+        });
+      throw new InvisiError(
+        "PREPARATION_FAILED",
+        cause instanceof Error ? cause.message : "Change output preparation failed",
+        { address, field: "changeAddress", cause }
+      );
+    }
+  }
+  async output(payment, context, change = false, outputIndex) {
+    try {
+      positiveOutputAmount(payment, outputIndex);
+      const output = await materializeNoteOutput(
+        payment,
+        context,
+        (source) => recipientLookup(this.runtime.options, source)
+      );
+      return { ...output, change };
+    } catch (cause) {
+      if (cause instanceof InvisiError) {
+        throw new InvisiError(cause.code, cause.message, {
+          address: cause.address ?? payment.to,
+          field: change ? "changeAddress" : cause.field ?? "to",
+          ...outputIndex === void 0 ? {} : { outputIndex },
+          ...cause.capability ? { capability: cause.capability } : {},
+          cause: cause.cause ?? cause
+        });
+      }
+      throw new InvisiError(
+        "PREPARATION_FAILED",
+        cause instanceof Error ? cause.message : "Output preparation failed",
+        {
+          address: payment.to,
+          field: change ? "changeAddress" : "to",
+          ...outputIndex === void 0 ? {} : { outputIndex },
+          cause
+        }
+      );
+    }
+  }
+  async membership(input, frame) {
+    const { options, reader } = this.runtime;
+    if (!options.protocolRpc)
+      throw new MissingCapabilityError2("Protocol RPC membership provider");
+    const root = this.#roots.get(input.treeId);
+    const proof = await options.protocolRpc.getMembership(
+      frame.context,
+      {
+        ...input,
+        ...root ? { root } : {}
+      },
+      frame.block
+    );
+    if (root && proof.root !== root)
+      throw new Error("membership provider changed the pinned source root");
+    await verifyMembership(reader, frame.context, frame.block, input, proof);
+    this.#roots.set(input.treeId, proof.root);
+    return { ...proof, path: [...proof.path] };
+  }
+  async selectFunds(target, frame, maxInputs = 190) {
+    const { scope, options, reader } = this.runtime;
+    const state = await this.runtime.readInventory();
+    if (state.invalidated) {
+      throw new Error("wallet requires canonical resync");
+    }
+    const need = target > 0n ? target : 0n;
+    const nullifier = options.wallet.exportNullifier();
+    const reserved = new Set(Object.keys(state.reservations));
+    const eligible = Object.values(state.notes).filter(
+      (note) => note.note.tokenAddress === BigInt(frame.context.tokenAddress) && note.spent === "unspent" && !reserved.has(note.commitment)
+    );
+    const byId = new Map(eligible.map((note) => [note.commitment, note]));
+    const choices = this.runtime.inputSelection ? [...this.runtime.inputSelection] : this.runtime.explicitInputs ? eligible.map((note) => note.commitment) : need > 0n && options.coinSelector ? await options.coinSelector.select(storedCandidates(eligible), need) : selectNotes(eligible, need, reserved).map((note) => note.commitment);
+    if (!Array.isArray(choices) || new Set(choices).size !== choices.length || choices.some((id) => !byId.has(id))) {
+      throw new Error("invalid or duplicate coin selection");
+    }
+    const selected = choices.map((id) => structuredClone(byId.get(id)));
+    const amount = selected.reduce((sum, input) => sum + input.note.amount, 0n);
+    if (amount < need) {
+      throw new Error("coin selection has insufficient verified funds");
+    }
+    if (selected.length > maxInputs || amount >= 1n << 135n) {
+      throw new Error("coin selection exceeds transaction capacity");
+    }
+    const inputs = [];
+    const sources = /* @__PURE__ */ new Map();
+    const nullifiers = [];
+    for (const input of selected) {
+      const note = input.note;
+      const c = frame.context;
+      if (note.ownerAddress !== scope.ownerAddress || note.chainId !== c.chainId || note.protocolAddress !== BigInt(c.protocolAddress) || note.tokenAddress !== BigInt(c.tokenAddress) || await computeNoteCommitment(
+        c.chainId,
+        BigInt(c.protocolAddress),
+        await computeNoteIdentity(BigInt(note.ownerAddress), note.nonce),
+        note.tokenAddress,
+        note.amount
+      ) !== input.commitment) {
+        throw new Error("selected input preimage/context mismatch");
+      }
+      const proof = await this.membership(input, frame);
+      const path = [...proof.path];
+      const root = proof.root;
+      if (sources.has(input.treeId) && sources.get(input.treeId) !== root) {
+        throw new Error("source roots do not share a canonical snapshot");
+      }
+      sources.set(input.treeId, root);
+      inputs.push({
+        note,
+        commitment: input.commitment,
+        treeId: input.treeId,
+        leafIndex: input.leafIndex,
+        path
+      });
+      nullifiers.push(
+        await nullifier.compute(
+          c.chainId,
+          BigInt(c.protocolAddress),
+          input.commitment,
+          input.note.nonce
+        )
+      );
+    }
+    await this.assertUnspent(nullifiers, frame);
+    return {
+      inputs,
+      sources: [...sources].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([treeId, merkleRoot]) => ({ treeId, merkleRoot })),
+      nullifiers,
+      amount
+    };
+  }
+  async assertUnspent(nullifiers, frame) {
+    if (nullifiers.length) {
+      const spent = await this.runtime.reader.isSpent(frame.context, nullifiers, frame.block);
+      if (spent.length !== nullifiers.length || spent.some((value) => value !== false)) {
+        throw new Error("selected input spent or invalid spent-state response");
+      }
+    }
+  }
+};
+function storedCandidates(inputs) {
+  const records = inputs.filter(
+    (input) => "blockNumber" in input && typeof input.blockNumber === "bigint" && "blockHash" in input && typeof input.blockHash === "string"
+  );
+  if (records.length !== inputs.length)
+    throw new Error("custom coin selection requires stored receipt metadata");
+  return structuredClone(records);
+}
+
+export {
+  creditLeaf,
+  assertCreditUpdatePlan,
+  configureRecipientInfrastructure,
+  recipientLookup,
+  verifyMembership,
+  positiveAmount,
+  copyApplicationPayload,
+  positiveOutputAmount,
+  Preparation
+};
+//# sourceMappingURL=chunk-RY4M2CIQ.js.map

package/dist/chunk-RY4M2CIQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/credit/state.ts","../src/notes/recipient-infrastructure.ts","../src/discovery/membership.ts","../src/transactions/preparation/prepare-common.ts","../src/transactions/preparation/selection.ts"],"sourcesContent":["import type { Hex } from \"@invisi-labs/protocol/contracts\";\n\nimport {\n    computeCreditCommitment,\n    deriveCreditUpdate,\n    type CreditDeliveryState,\n} from \"@invisi-labs/primitives\";\nexport async function creditLeaf(state: CreditDeliveryState): Promise<Hex> {\n    return computeCreditCommitment(state.note);\n}\n\n/** Rebuild from the original input and delta; cached output balances are never update intent. */\nexport async function assertCreditUpdatePlan(\n    plan: import(\"../transactions/operation-types\").OperationPlan\n): Promise<void> {\n    const credit = plan.credit;\n    if (!credit?.update) return;\n    const input = credit.inputs[0],\n        output = credit.outputs[0],\n        changes = credit.updateChanges;\n    if (!input || !output || !changes)\n        throw Error(\"Credit update input, output and adjustment required\");\n    const derived = await deriveCreditUpdate(input.state.note, changes, plan.deadline);\n    if (\n        derived.nullifier !== credit.update.nullifier ||\n        derived.stateCommitment !== credit.update.creditCommitment ||\n        output.commitment !== derived.stateCommitment ||\n        (await computeCreditCommitment(output.state.note)) !== derived.stateCommitment\n    )\n        throw Error(\"Credit update adjustment does not match frozen successor\");\n}\n","import {\n    MissingCapabilityError,\n    ReceivingAddress,\n    type ReceivingKeyLookup,\n} from \"@invisi-labs/primitives\";\nimport { ProtocolRpcClient } from \"@invisi-labs/rpc\";\nimport { EthersAddressResolver } from \"../integrations/ethers\";\nimport type { TransactionInfrastructure } from \"../transactions/operation-types\";\n\nexport type AddressLookup = \"chain\" | \"protocol-rpc\";\nconst recipientInfrastructure = Symbol(\"SDK recipient infrastructure\");\ntype InternalInfrastructure = {\n    [recipientInfrastructure]?: (source: AddressLookup) => ReceivingKeyLookup;\n};\n\n/** Capture deployment pins before a Protocol is bound to an operation's token. */\nexport function configureRecipientInfrastructure<T extends TransactionInfrastructure>(\n    options: T\n): T {\n    const { provider, protocolRpc, chainReader } = options;\n    const registry = options.protocol.deployment.registry;\n    const deployment = options.protocol.deployment;\n    const lookup =\n        (source: AddressLookup): ReceivingKeyLookup =>\n        async (ownerAddress) => {\n            if (!registry) throw new MissingCapabilityError(\"receiving-key registry deployment\");\n            if (source === \"chain\") {\n                if (!provider)\n                    throw new MissingCapabilityError(\"ethers provider for registry lookup\");\n                return new EthersAddressResolver(\n                    provider,\n                    {\n                        chainId: deployment.chainId,\n                        registryAddress: registry.address,\n                    },\n                    registry.runtimeCodeHash\n                ).lookup(ownerAddress);\n            }\n            if (!(protocolRpc instanceof ProtocolRpcClient))\n                throw new MissingCapabilityError(\"Protocol RPC recipient discovery\");\n            const rpc = chainReader ? protocolRpc.withReader(chainReader) : protocolRpc;\n            const discovered = await rpc.getDeployment(deployment.chainId);\n            if (\n                discovered.protocol.address !== deployment.protocol.address ||\n                discovered.protocol.runtimeCodeHash !== deployment.protocol.runtimeCodeHash ||\n                discovered.protocol.fromBlock !== deployment.protocol.fromBlock ||\n                discovered.registry?.address !== registry.address ||\n                discovered.registry.runtimeCodeHash !== registry.runtimeCodeHash ||\n                discovered.registry.fromBlock !== registry.fromBlock\n            )\n                throw new Error(\"Recipient registry deployment pins mismatch\");\n            const registration = await rpc.getReceivingAddress(ownerAddress);\n            return registration\n                ? ReceivingAddress.parse(registration.receivingAddress).getReceivingKeys()\n                : null;\n        };\n    return { ...options, [recipientInfrastructure]: lookup };\n}\n\n/** Internal lookup plumbing; public APIs never accept resolver functions. */\nexport function recipientLookup(\n    options: object,\n    source: AddressLookup = \"protocol-rpc\"\n): ReceivingKeyLookup {\n    return async (ownerAddress) => {\n        const lookup = (options as InternalInfrastructure)[recipientInfrastructure];\n        if (!lookup) throw new MissingCapabilityError(\"recipient infrastructure\");\n        return lookup(source)(ownerAddress);\n    };\n}\n","import type { Hex } from \"@invisi-labs/protocol/contracts\";\n\nimport { FIELD_MODULUS, poseidonHash } from \"@invisi-labs/primitives\";\nimport type {\n    CanonicalBlock,\n    ChainReader,\n    Membership,\n    TransactionContext,\n} from \"@invisi-labs/protocol\";\nexport async function verifyMembership(\n    reader: ChainReader,\n    context: TransactionContext,\n    block: CanonicalBlock,\n    input: { treeId: bigint; leafIndex: number; commitment: Hex },\n    proof: Membership\n): Promise<void> {\n    if (\n        proof.block.hash !== block.hash ||\n        proof.block.number !== block.number ||\n        proof.leaf !== input.commitment ||\n        proof.treeId !== input.treeId ||\n        proof.leafIndex !== input.leafIndex ||\n        proof.path.length !== 16 ||\n        !Number.isInteger(input.leafIndex) ||\n        input.leafIndex < 0 ||\n        input.leafIndex >= 65536 ||\n        !(await reader.isKnownRoot(context, input.treeId, proof.root, block))\n    )\n        throw new Error(\"membership context/root mismatch\");\n    let root = BigInt(input.commitment);\n    for (let i = 0; i < 16; i++) {\n        const sibling = proof.path[i]!;\n        if (typeof sibling !== \"bigint\" || sibling < 0n || sibling >= FIELD_MODULUS)\n            throw new Error(\"noncanonical membership path\");\n        root = BigInt(\n            await poseidonHash((input.leafIndex >> i) & 1 ? [sibling, root] : [root, sibling])\n        );\n    }\n    if (root !== BigInt(proof.root))\n        throw new Error(\"membership path does not produce canonical root\");\n}\n","import type { Hex } from \"@invisi-labs/protocol/contracts\";\nimport { getAddress } from \"ethers\";\nimport { InvisiError } from \"../../errors\";\nimport { NoteOutput, materializeNoteOutput } from \"../../notes/NoteOutput\";\nimport { recipientLookup } from \"../../notes/recipient-infrastructure\";\n\nimport {\n    MissingCapabilityError,\n    computeNoteCommitment,\n    computeNoteIdentity,\n} from \"@invisi-labs/primitives\";\nimport {\n    normalizeFunding,\n    type CanonicalBlock,\n    type FundingInput,\n    type Membership,\n    type TransactionContext,\n} from \"@invisi-labs/protocol\";\nimport { type NoteMembership } from \"@invisi-labs/prover\";\nimport { verifyMembership } from \"../../discovery/membership\";\nimport type {\n    FundingSource,\n    OperationPlan,\n    PreparationRuntime,\n    PreparedOutput,\n} from \"../operation-types\";\nimport type { NoteRecord } from \"../records\";\nimport { selectNotes, type SelectableNote } from \"./selection\";\n\nexport interface PreparationFrame {\n    context: TransactionContext;\n    block: CanonicalBlock;\n    deadline: bigint;\n}\n\nexport function positiveAmount(value: bigint, bits = 128): bigint {\n    if (typeof value !== \"bigint\" || value <= 0n || value >= 1n << BigInt(bits)) {\n        throw new Error(`amount must be a positive uint${bits}`);\n    }\n    return value;\n}\n\n/** Reject non-byte JavaScript inputs before copying; empty bytes explicitly clear metadata. */\nexport function copyApplicationPayload(value?: Uint8Array): Uint8Array {\n    if (value === undefined) return new Uint8Array();\n    if (!(value instanceof Uint8Array)) throw new TypeError(\"payload must be Uint8Array\");\n    return Uint8Array.from(value);\n}\n\n/** Preserve the offending payment position even when summing transfer amounts first. */\nexport function positiveOutputAmount(payment: NoteOutput, outputIndex?: number): bigint {\n    try {\n        return positiveAmount(payment.amount);\n    } catch (cause) {\n        throw new InvisiError(\n            \"PREPARATION_FAILED\",\n            cause instanceof Error ? cause.message : \"Invalid output amount\",\n            {\n                address: payment.to,\n                field: \"amount\",\n                ...(outputIndex === undefined ? {} : { outputIndex }),\n                cause,\n            }\n        );\n    }\n}\n\n/** Shared local preparation checks; private witnesses never enter this object's public records. */\nexport class Preparation<Result> {\n    readonly #roots = new Map<bigint, Hex>();\n    constructor(readonly runtime: PreparationRuntime<Result>) {}\n\n    async frame(requested?: bigint): Promise<PreparationFrame> {\n        const { reader, options } = this.runtime;\n        await options.protocol.validateDeployment(reader);\n        const block = await reader.getBlock(await reader.getLatestBlockNumber());\n        const deadline = requested ?? block.timestamp + (options.transactionTTL ?? 300n);\n        if (typeof deadline !== \"bigint\" || deadline < block.timestamp || deadline >= 1n << 64n) {\n            throw new Error(\"invalid transaction deadline\");\n        }\n        const state = await this.runtime.readInventory();\n        if (state.invalidated) {\n            throw new Error(\"wallet requires canonical resync\");\n        }\n        for (const point of [state.observedThrough]) {\n            if (point && (await reader.getBlock(point.number)).hash !== point.hash) {\n                throw new Error(\"canonical wallet checkpoint changed; resync required\");\n            }\n        }\n        return {\n            context: {\n                ...options.protocol.context,\n                now: block.timestamp,\n                timestamp: block.timestamp,\n            },\n            block,\n            deadline,\n        };\n    }\n\n    async assertBlock(frame: PreparationFrame): Promise<void> {\n        if ((await this.runtime.reader.getBlock(frame.block.number)).hash !== frame.block.hash) {\n            throw new Error(\"canonical block changed while preparing\");\n        }\n    }\n\n    async funding(\n        source: FundingSource | undefined,\n        frame: PreparationFrame\n    ): Promise<{ funding: FundingInput; fundingMode: OperationPlan[\"fundingMode\"] }> {\n        if (!source) {\n            return { funding: {}, fundingMode: \"none\" };\n        }\n        positiveAmount(source.amount);\n        const payer = getAddress(source.payer) as Hex;\n        const mode = source.authorization ?? \"signature\";\n        if (BigInt(payer) === 0n) {\n            throw new Error(\"funding payer must be nonzero\");\n        }\n        if (mode !== \"signature\" && mode !== \"caller\") {\n            throw new Error(\"invalid funding authorization mode\");\n        }\n        if (mode === \"caller\" && (source.sigNonce || source.deadline)) {\n            throw new Error(\"caller funding uses zero nonce/deadline\");\n        }\n        const funding = normalizeFunding({\n            payer,\n            amount: source.amount,\n            sigNonce:\n                mode === \"caller\"\n                    ? 0n\n                    : (source.sigNonce ??\n                      (await this.runtime.reader.getFundingNonce(\n                          frame.context,\n                          payer,\n                          frame.block\n                      ))),\n            deadline: mode === \"caller\" ? 0n : (source.deadline ?? frame.deadline),\n            ...(source.permit ? { permit: structuredClone(source.permit) } : {}),\n        });\n        if (mode === \"signature\" && funding.deadline < frame.block.timestamp) {\n            throw new Error(\"funding authorization deadline has expired\");\n        }\n        return { funding, fundingMode: mode };\n    }\n\n    async change(amount: bigint, context: TransactionContext): Promise<PreparedOutput> {\n        const address =\n            this.runtime.changeAddress ??\n            this.runtime.options.wallet.getReceivingAddress().toString();\n        try {\n            const output = await NoteOutput.create({\n                chainId: context.chainId,\n                protocolAddress: context.protocolAddress,\n                tokenAddress: context.tokenAddress,\n                amount,\n                recipient: address.startsWith(\"0i\")\n                    ? { type: \"invisi\", address }\n                    : { type: \"evm\", address },\n            });\n            return await this.output(output, context, true);\n        } catch (cause) {\n            if (cause instanceof InvisiError)\n                throw new InvisiError(cause.code, cause.message, {\n                    address,\n                    field: \"changeAddress\",\n                    ...(cause.capability ? { capability: cause.capability } : {}),\n                    cause: cause.cause ?? cause,\n                });\n            throw new InvisiError(\n                \"PREPARATION_FAILED\",\n                cause instanceof Error ? cause.message : \"Change output preparation failed\",\n                { address, field: \"changeAddress\", cause }\n            );\n        }\n    }\n\n    async output(\n        payment: NoteOutput,\n        context: TransactionContext,\n        change = false,\n        outputIndex?: number\n    ): Promise<PreparedOutput> {\n        try {\n            positiveOutputAmount(payment, outputIndex);\n            const output = await materializeNoteOutput(payment, context, (source) =>\n                recipientLookup(this.runtime.options, source)\n            );\n            return { ...output, change };\n        } catch (cause) {\n            if (cause instanceof InvisiError) {\n                throw new InvisiError(cause.code, cause.message, {\n                    address: cause.address ?? payment.to,\n                    field: change ? \"changeAddress\" : (cause.field ?? \"to\"),\n                    ...(outputIndex === undefined ? {} : { outputIndex }),\n                    ...(cause.capability ? { capability: cause.capability } : {}),\n                    cause: cause.cause ?? cause,\n                });\n            }\n            throw new InvisiError(\n                \"PREPARATION_FAILED\",\n                cause instanceof Error ? cause.message : \"Output preparation failed\",\n                {\n                    address: payment.to,\n                    field: change ? \"changeAddress\" : \"to\",\n                    ...(outputIndex === undefined ? {} : { outputIndex }),\n                    cause,\n                }\n            );\n        }\n    }\n\n    async membership(\n        input: { treeId: bigint; leafIndex: number; commitment: Hex },\n        frame: PreparationFrame\n    ): Promise<Membership> {\n        const { options, reader } = this.runtime;\n        if (!options.protocolRpc)\n            throw new MissingCapabilityError(\"Protocol RPC membership provider\");\n        const root = this.#roots.get(input.treeId);\n        const proof = await options.protocolRpc.getMembership(\n            frame.context,\n            {\n                ...input,\n                ...(root ? { root } : {}),\n            },\n            frame.block\n        );\n        if (root && proof.root !== root)\n            throw new Error(\"membership provider changed the pinned source root\");\n        await verifyMembership(reader, frame.context, frame.block, input, proof);\n        this.#roots.set(input.treeId, proof.root);\n        return { ...proof, path: [...proof.path] };\n    }\n\n    async selectFunds(target: bigint, frame: PreparationFrame, maxInputs = 190) {\n        const { scope, options, reader } = this.runtime;\n        const state = await this.runtime.readInventory();\n        if (state.invalidated) {\n            throw new Error(\"wallet requires canonical resync\");\n        }\n        const need = target > 0n ? target : 0n;\n        const nullifier = options.wallet.exportNullifier();\n        const reserved = new Set(Object.keys(state.reservations));\n        const eligible = Object.values(state.notes).filter(\n            (note) =>\n                note.note.tokenAddress === BigInt(frame.context.tokenAddress) &&\n                note.spent === \"unspent\" &&\n                !reserved.has(note.commitment)\n        );\n        const byId = new Map(eligible.map((note) => [note.commitment, note]));\n        const choices = this.runtime.inputSelection\n            ? [...this.runtime.inputSelection]\n            : this.runtime.explicitInputs\n              ? eligible.map((note) => note.commitment)\n              : need > 0n && options.coinSelector\n                ? await options.coinSelector.select(storedCandidates(eligible), need)\n                : selectNotes(eligible, need, reserved).map((note) => note.commitment);\n        if (\n            !Array.isArray(choices) ||\n            new Set(choices).size !== choices.length ||\n            choices.some((id) => !byId.has(id))\n        ) {\n            throw new Error(\"invalid or duplicate coin selection\");\n        }\n        const selected = choices.map((id) => structuredClone(byId.get(id)!));\n        const amount = selected.reduce((sum, input) => sum + input.note.amount, 0n);\n        if (amount < need) {\n            throw new Error(\"coin selection has insufficient verified funds\");\n        }\n        if (selected.length > maxInputs || amount >= 1n << 135n) {\n            throw new Error(\"coin selection exceeds transaction capacity\");\n        }\n        const inputs: Array<NoteMembership & { commitment: Hex }> = [];\n        const sources = new Map<bigint, Hex>();\n        const nullifiers: Hex[] = [];\n        for (const input of selected) {\n            const note = input.note;\n            const c = frame.context;\n            if (\n                note.ownerAddress !== scope.ownerAddress ||\n                note.chainId !== c.chainId ||\n                note.protocolAddress !== BigInt(c.protocolAddress) ||\n                note.tokenAddress !== BigInt(c.tokenAddress) ||\n                (await computeNoteCommitment(\n                    c.chainId,\n                    BigInt(c.protocolAddress),\n                    await computeNoteIdentity(BigInt(note.ownerAddress), note.nonce),\n                    note.tokenAddress,\n                    note.amount\n                )) !== input.commitment\n            ) {\n                throw new Error(\"selected input preimage/context mismatch\");\n            }\n            const proof = await this.membership(input, frame);\n            const path = [...proof.path];\n            const root = proof.root;\n            if (sources.has(input.treeId) && sources.get(input.treeId) !== root) {\n                throw new Error(\"source roots do not share a canonical snapshot\");\n            }\n            sources.set(input.treeId, root);\n            inputs.push({\n                note,\n                commitment: input.commitment,\n                treeId: input.treeId,\n                leafIndex: input.leafIndex,\n                path,\n            });\n            nullifiers.push(\n                await nullifier!.compute(\n                    c.chainId,\n                    BigInt(c.protocolAddress),\n                    input.commitment,\n                    input.note.nonce\n                )\n            );\n        }\n        await this.assertUnspent(nullifiers, frame);\n        return {\n            inputs,\n            sources: [...sources]\n                .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))\n                .map(([treeId, merkleRoot]) => ({ treeId, merkleRoot })),\n            nullifiers,\n            amount,\n        };\n    }\n\n    async assertUnspent(nullifiers: readonly Hex[], frame: PreparationFrame): Promise<void> {\n        if (nullifiers.length) {\n            const spent = await this.runtime.reader.isSpent(frame.context, nullifiers, frame.block);\n            if (spent.length !== nullifiers.length || spent.some((value) => value !== false)) {\n                throw new Error(\"selected input spent or invalid spent-state response\");\n            }\n        }\n    }\n}\n\n// Managed custom selectors retain access to receipt metadata. Explicit inputs\n// use their own exact selection and never pass fabricated metadata to a selector.\nfunction storedCandidates(inputs: readonly SelectableNote[]): NoteRecord[] {\n    const records = inputs.filter(\n        (input): input is NoteRecord =>\n            \"blockNumber\" in input &&\n            typeof input.blockNumber === \"bigint\" &&\n            \"blockHash\" in input &&\n            typeof input.blockHash === \"string\"\n    );\n    if (records.length !== inputs.length)\n        throw new Error(\"custom coin selection requires stored receipt metadata\");\n    return structuredClone(records);\n}\n","import type { NoteRecord } from \"../records\";\n/** Minimal input count by descending amount, with deterministic tree/position/commitment ties. */\nexport type SelectableNote = Pick<\n    NoteRecord,\n    \"note\" | \"commitment\" | \"treeId\" | \"leafIndex\" | \"spent\"\n>;\nexport function selectNotes<T extends SelectableNote>(\n    notes: readonly T[],\n    target: bigint,\n    reserved: ReadonlySet<string>\n): T[] {\n    if (typeof target !== \"bigint\" || target < 0n)\n        throw new Error(\"selection target must be a nonnegative amount\");\n    if (target === 0n) return [];\n    const eligible = notes.filter(\n        (note) => note.spent === \"unspent\" && !reserved.has(note.commitment)\n    );\n    for (const record of eligible)\n        if (\n            typeof record.note.amount !== \"bigint\" ||\n            record.note.amount <= 0n ||\n            record.note.amount >= 1n << 128n\n        )\n            throw new Error(\"invalid verified note amount\");\n    eligible.sort((a, b) =>\n        a.note.amount > b.note.amount\n            ? -1\n            : a.note.amount < b.note.amount\n              ? 1\n              : a.treeId < b.treeId\n                ? -1\n                : a.treeId > b.treeId\n                  ? 1\n                  : a.leafIndex - b.leafIndex || a.commitment.localeCompare(b.commitment)\n    );\n    const selected: T[] = [];\n    let total = 0n;\n    for (const record of eligible) {\n        selected.push(structuredClone(record));\n        total += record.note.amount;\n        if (total >= target) return selected;\n    }\n    throw new Error(\"insufficient verified available funds\");\n}\n"],"mappings":";;;;;;;;;;AAEA;AAAA,EACI;AAAA,EACA;AAAA,OAEG;AACP,eAAsB,WAAW,OAA0C;AACvE,SAAO,wBAAwB,MAAM,IAAI;AAC7C;AAGA,eAAsB,uBAClB,MACa;AACb,QAAM,SAAS,KAAK;AACpB,MAAI,CAAC,QAAQ,OAAQ;AACrB,QAAM,QAAQ,OAAO,OAAO,CAAC,GACzB,SAAS,OAAO,QAAQ,CAAC,GACzB,UAAU,OAAO;AACrB,MAAI,CAAC,SAAS,CAAC,UAAU,CAAC;AACtB,UAAM,MAAM,qDAAqD;AACrE,QAAM,UAAU,MAAM,mBAAmB,MAAM,MAAM,MAAM,SAAS,KAAK,QAAQ;AACjF,MACI,QAAQ,cAAc,OAAO,OAAO,aACpC,QAAQ,oBAAoB,OAAO,OAAO,oBAC1C,OAAO,eAAe,QAAQ,mBAC7B,MAAM,wBAAwB,OAAO,MAAM,IAAI,MAAO,QAAQ;AAE/D,UAAM,MAAM,0DAA0D;AAC9E;;;AC9BA;AAAA,EACI;AAAA,EACA;AAAA,OAEG;AACP,SAAS,yBAAyB;AAKlC,IAAM,0BAA0B,uBAAO,8BAA8B;AAM9D,SAAS,iCACZ,SACC;AACD,QAAM,EAAE,UAAU,aAAa,YAAY,IAAI;AAC/C,QAAM,WAAW,QAAQ,SAAS,WAAW;AAC7C,QAAM,aAAa,QAAQ,SAAS;AACpC,QAAM,SACF,CAAC,WACD,OAAO,iBAAiB;AACpB,QAAI,CAAC,SAAU,OAAM,IAAI,uBAAuB,mCAAmC;AACnF,QAAI,WAAW,SAAS;AACpB,UAAI,CAAC;AACD,cAAM,IAAI,uBAAuB,qCAAqC;AAC1E,aAAO,IAAI;AAAA,QACP;AAAA,QACA;AAAA,UACI,SAAS,WAAW;AAAA,UACpB,iBAAiB,SAAS;AAAA,QAC9B;AAAA,QACA,SAAS;AAAA,MACb,EAAE,OAAO,YAAY;AAAA,IACzB;AACA,QAAI,EAAE,uBAAuB;AACzB,YAAM,IAAI,uBAAuB,kCAAkC;AACvE,UAAM,MAAM,cAAc,YAAY,WAAW,WAAW,IAAI;AAChE,UAAM,aAAa,MAAM,IAAI,cAAc,WAAW,OAAO;AAC7D,QACI,WAAW,SAAS,YAAY,WAAW,SAAS,WACpD,WAAW,SAAS,oBAAoB,WAAW,SAAS,mBAC5D,WAAW,SAAS,cAAc,WAAW,SAAS,aACtD,WAAW,UAAU,YAAY,SAAS,WAC1C,WAAW,SAAS,oBAAoB,SAAS,mBACjD,WAAW,SAAS,cAAc,SAAS;AAE3C,YAAM,IAAI,MAAM,6CAA6C;AACjE,UAAM,eAAe,MAAM,IAAI,oBAAoB,YAAY;AAC/D,WAAO,eACD,iBAAiB,MAAM,aAAa,gBAAgB,EAAE,iBAAiB,IACvE;AAAA,EACV;AACJ,SAAO,EAAE,GAAG,SAAS,CAAC,uBAAuB,GAAG,OAAO;AAC3D;AAGO,SAAS,gBACZ,SACA,SAAwB,gBACN;AAClB,SAAO,OAAO,iBAAiB;AAC3B,UAAM,SAAU,QAAmC,uBAAuB;AAC1E,QAAI,CAAC,OAAQ,OAAM,IAAI,uBAAuB,0BAA0B;AACxE,WAAO,OAAO,MAAM,EAAE,YAAY;AAAA,EACtC;AACJ;;;ACnEA,SAAS,eAAe,oBAAoB;AAO5C,eAAsB,iBAClB,QACA,SACA,OACA,OACA,OACa;AACb,MACI,MAAM,MAAM,SAAS,MAAM,QAC3B,MAAM,MAAM,WAAW,MAAM,UAC7B,MAAM,SAAS,MAAM,cACrB,MAAM,WAAW,MAAM,UACvB,MAAM,cAAc,MAAM,aAC1B,MAAM,KAAK,WAAW,MACtB,CAAC,OAAO,UAAU,MAAM,SAAS,KACjC,MAAM,YAAY,KAClB,MAAM,aAAa,SACnB,CAAE,MAAM,OAAO,YAAY,SAAS,MAAM,QAAQ,MAAM,MAAM,KAAK;AAEnE,UAAM,IAAI,MAAM,kCAAkC;AACtD,MAAI,OAAO,OAAO,MAAM,UAAU;AAClC,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AACzB,UAAM,UAAU,MAAM,KAAK,CAAC;AAC5B,QAAI,OAAO,YAAY,YAAY,UAAU,MAAM,WAAW;AAC1D,YAAM,IAAI,MAAM,8BAA8B;AAClD,WAAO;AAAA,MACH,MAAM,aAAc,MAAM,aAAa,IAAK,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC;AAAA,IACrF;AAAA,EACJ;AACA,MAAI,SAAS,OAAO,MAAM,IAAI;AAC1B,UAAM,IAAI,MAAM,iDAAiD;AACzE;;;ACvCA,SAAS,kBAAkB;AAK3B;AAAA,EACI,0BAAAA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AACP;AAAA,EACI;AAAA,OAKG;;;ACXA,SAAS,YACZ,OACA,QACA,UACG;AACH,MAAI,OAAO,WAAW,YAAY,SAAS;AACvC,UAAM,IAAI,MAAM,+CAA+C;AACnE,MAAI,WAAW,GAAI,QAAO,CAAC;AAC3B,QAAM,WAAW,MAAM;AAAA,IACnB,CAAC,SAAS,KAAK,UAAU,aAAa,CAAC,SAAS,IAAI,KAAK,UAAU;AAAA,EACvE;AACA,aAAW,UAAU;AACjB,QACI,OAAO,OAAO,KAAK,WAAW,YAC9B,OAAO,KAAK,UAAU,MACtB,OAAO,KAAK,UAAU,MAAM;AAE5B,YAAM,IAAI,MAAM,8BAA8B;AACtD,WAAS;AAAA,IAAK,CAAC,GAAG,MACd,EAAE,KAAK,SAAS,EAAE,KAAK,SACjB,KACA,EAAE,KAAK,SAAS,EAAE,KAAK,SACrB,IACA,EAAE,SAAS,EAAE,SACX,KACA,EAAE,SAAS,EAAE,SACX,IACA,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,cAAc,EAAE,UAAU;AAAA,EACpF;AACA,QAAM,WAAgB,CAAC;AACvB,MAAI,QAAQ;AACZ,aAAW,UAAU,UAAU;AAC3B,aAAS,KAAK,gBAAgB,MAAM,CAAC;AACrC,aAAS,OAAO,KAAK;AACrB,QAAI,SAAS,OAAQ,QAAO;AAAA,EAChC;AACA,QAAM,IAAI,MAAM,uCAAuC;AAC3D;;;ADRO,SAAS,eAAe,OAAe,OAAO,KAAa;AAC9D,MAAI,OAAO,UAAU,YAAY,SAAS,MAAM,SAAS,MAAM,OAAO,IAAI,GAAG;AACzE,UAAM,IAAI,MAAM,iCAAiC,IAAI,EAAE;AAAA,EAC3D;AACA,SAAO;AACX;AAGO,SAAS,uBAAuB,OAAgC;AACnE,MAAI,UAAU,OAAW,QAAO,IAAI,WAAW;AAC/C,MAAI,EAAE,iBAAiB,YAAa,OAAM,IAAI,UAAU,4BAA4B;AACpF,SAAO,WAAW,KAAK,KAAK;AAChC;AAGO,SAAS,qBAAqB,SAAqB,aAA8B;AACpF,MAAI;AACA,WAAO,eAAe,QAAQ,MAAM;AAAA,EACxC,SAAS,OAAO;AACZ,UAAM,IAAI;AAAA,MACN;AAAA,MACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MACzC;AAAA,QACI,SAAS,QAAQ;AAAA,QACjB,OAAO;AAAA,QACP,GAAI,gBAAgB,SAAY,CAAC,IAAI,EAAE,YAAY;AAAA,QACnD;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AACJ;AAGO,IAAM,cAAN,MAA0B;AAAA,EAE7B,YAAqB,SAAqC;AAArC;AAAA,EAAsC;AAAA,EADlD,SAAS,oBAAI,IAAiB;AAAA,EAGvC,MAAM,MAAM,WAA+C;AACvD,UAAM,EAAE,QAAQ,QAAQ,IAAI,KAAK;AACjC,UAAM,QAAQ,SAAS,mBAAmB,MAAM;AAChD,UAAM,QAAQ,MAAM,OAAO,SAAS,MAAM,OAAO,qBAAqB,CAAC;AACvE,UAAM,WAAW,aAAa,MAAM,aAAa,QAAQ,kBAAkB;AAC3E,QAAI,OAAO,aAAa,YAAY,WAAW,MAAM,aAAa,YAAY,MAAM,KAAK;AACrF,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAClD;AACA,UAAM,QAAQ,MAAM,KAAK,QAAQ,cAAc;AAC/C,QAAI,MAAM,aAAa;AACnB,YAAM,IAAI,MAAM,kCAAkC;AAAA,IACtD;AACA,eAAW,SAAS,CAAC,MAAM,eAAe,GAAG;AACzC,UAAI,UAAU,MAAM,OAAO,SAAS,MAAM,MAAM,GAAG,SAAS,MAAM,MAAM;AACpE,cAAM,IAAI,MAAM,sDAAsD;AAAA,MAC1E;AAAA,IACJ;AACA,WAAO;AAAA,MACH,SAAS;AAAA,QACL,GAAG,QAAQ,SAAS;AAAA,QACpB,KAAK,MAAM;AAAA,QACX,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,YAAY,OAAwC;AACtD,SAAK,MAAM,KAAK,QAAQ,OAAO,SAAS,MAAM,MAAM,MAAM,GAAG,SAAS,MAAM,MAAM,MAAM;AACpF,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC7D;AAAA,EACJ;AAAA,EAEA,MAAM,QACF,QACA,OAC6E;AAC7E,QAAI,CAAC,QAAQ;AACT,aAAO,EAAE,SAAS,CAAC,GAAG,aAAa,OAAO;AAAA,IAC9C;AACA,mBAAe,OAAO,MAAM;AAC5B,UAAM,QAAQ,WAAW,OAAO,KAAK;AACrC,UAAM,OAAO,OAAO,iBAAiB;AACrC,QAAI,OAAO,KAAK,MAAM,IAAI;AACtB,YAAM,IAAI,MAAM,+BAA+B;AAAA,IACnD;AACA,QAAI,SAAS,eAAe,SAAS,UAAU;AAC3C,YAAM,IAAI,MAAM,oCAAoC;AAAA,IACxD;AACA,QAAI,SAAS,aAAa,OAAO,YAAY,OAAO,WAAW;AAC3D,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC7D;AACA,UAAM,UAAU,iBAAiB;AAAA,MAC7B;AAAA,MACA,QAAQ,OAAO;AAAA,MACf,UACI,SAAS,WACH,KACC,OAAO,YACP,MAAM,KAAK,QAAQ,OAAO;AAAA,QACvB,MAAM;AAAA,QACN;AAAA,QACA,MAAM;AAAA,MACV;AAAA,MACV,UAAU,SAAS,WAAW,KAAM,OAAO,YAAY,MAAM;AAAA,MAC7D,GAAI,OAAO,SAAS,EAAE,QAAQ,gBAAgB,OAAO,MAAM,EAAE,IAAI,CAAC;AAAA,IACtE,CAAC;AACD,QAAI,SAAS,eAAe,QAAQ,WAAW,MAAM,MAAM,WAAW;AAClE,YAAM,IAAI,MAAM,4CAA4C;AAAA,IAChE;AACA,WAAO,EAAE,SAAS,aAAa,KAAK;AAAA,EACxC;AAAA,EAEA,MAAM,OAAO,QAAgB,SAAsD;AAC/E,UAAM,UACF,KAAK,QAAQ,iBACb,KAAK,QAAQ,QAAQ,OAAO,oBAAoB,EAAE,SAAS;AAC/D,QAAI;AACA,YAAM,SAAS,MAAM,WAAW,OAAO;AAAA,QACnC,SAAS,QAAQ;AAAA,QACjB,iBAAiB,QAAQ;AAAA,QACzB,cAAc,QAAQ;AAAA,QACtB;AAAA,QACA,WAAW,QAAQ,WAAW,IAAI,IAC5B,EAAE,MAAM,UAAU,QAAQ,IAC1B,EAAE,MAAM,OAAO,QAAQ;AAAA,MACjC,CAAC;AACD,aAAO,MAAM,KAAK,OAAO,QAAQ,SAAS,IAAI;AAAA,IAClD,SAAS,OAAO;AACZ,UAAI,iBAAiB;AACjB,cAAM,IAAI,YAAY,MAAM,MAAM,MAAM,SAAS;AAAA,UAC7C;AAAA,UACA,OAAO;AAAA,UACP,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,UAC3D,OAAO,MAAM,SAAS;AAAA,QAC1B,CAAC;AACL,YAAM,IAAI;AAAA,QACN;AAAA,QACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QACzC,EAAE,SAAS,OAAO,iBAAiB,MAAM;AAAA,MAC7C;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,OACF,SACA,SACA,SAAS,OACT,aACuB;AACvB,QAAI;AACA,2BAAqB,SAAS,WAAW;AACzC,YAAM,SAAS,MAAM;AAAA,QAAsB;AAAA,QAAS;AAAA,QAAS,CAAC,WAC1D,gBAAgB,KAAK,QAAQ,SAAS,MAAM;AAAA,MAChD;AACA,aAAO,EAAE,GAAG,QAAQ,OAAO;AAAA,IAC/B,SAAS,OAAO;AACZ,UAAI,iBAAiB,aAAa;AAC9B,cAAM,IAAI,YAAY,MAAM,MAAM,MAAM,SAAS;AAAA,UAC7C,SAAS,MAAM,WAAW,QAAQ;AAAA,UAClC,OAAO,SAAS,kBAAmB,MAAM,SAAS;AAAA,UAClD,GAAI,gBAAgB,SAAY,CAAC,IAAI,EAAE,YAAY;AAAA,UACnD,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,UAC3D,OAAO,MAAM,SAAS;AAAA,QAC1B,CAAC;AAAA,MACL;AACA,YAAM,IAAI;AAAA,QACN;AAAA,QACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QACzC;AAAA,UACI,SAAS,QAAQ;AAAA,UACjB,OAAO,SAAS,kBAAkB;AAAA,UAClC,GAAI,gBAAgB,SAAY,CAAC,IAAI,EAAE,YAAY;AAAA,UACnD;AAAA,QACJ;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,WACF,OACA,OACmB;AACnB,UAAM,EAAE,SAAS,OAAO,IAAI,KAAK;AACjC,QAAI,CAAC,QAAQ;AACT,YAAM,IAAIC,wBAAuB,kCAAkC;AACvE,UAAM,OAAO,KAAK,OAAO,IAAI,MAAM,MAAM;AACzC,UAAM,QAAQ,MAAM,QAAQ,YAAY;AAAA,MACpC,MAAM;AAAA,MACN;AAAA,QACI,GAAG;AAAA,QACH,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,MAC3B;AAAA,MACA,MAAM;AAAA,IACV;AACA,QAAI,QAAQ,MAAM,SAAS;AACvB,YAAM,IAAI,MAAM,oDAAoD;AACxE,UAAM,iBAAiB,QAAQ,MAAM,SAAS,MAAM,OAAO,OAAO,KAAK;AACvE,SAAK,OAAO,IAAI,MAAM,QAAQ,MAAM,IAAI;AACxC,WAAO,EAAE,GAAG,OAAO,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE;AAAA,EAC7C;AAAA,EAEA,MAAM,YAAY,QAAgB,OAAyB,YAAY,KAAK;AACxE,UAAM,EAAE,OAAO,SAAS,OAAO,IAAI,KAAK;AACxC,UAAM,QAAQ,MAAM,KAAK,QAAQ,cAAc;AAC/C,QAAI,MAAM,aAAa;AACnB,YAAM,IAAI,MAAM,kCAAkC;AAAA,IACtD;AACA,UAAM,OAAO,SAAS,KAAK,SAAS;AACpC,UAAM,YAAY,QAAQ,OAAO,gBAAgB;AACjD,UAAM,WAAW,IAAI,IAAI,OAAO,KAAK,MAAM,YAAY,CAAC;AACxD,UAAM,WAAW,OAAO,OAAO,MAAM,KAAK,EAAE;AAAA,MACxC,CAAC,SACG,KAAK,KAAK,iBAAiB,OAAO,MAAM,QAAQ,YAAY,KAC5D,KAAK,UAAU,aACf,CAAC,SAAS,IAAI,KAAK,UAAU;AAAA,IACrC;AACA,UAAM,OAAO,IAAI,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC;AACpE,UAAM,UAAU,KAAK,QAAQ,iBACvB,CAAC,GAAG,KAAK,QAAQ,cAAc,IAC/B,KAAK,QAAQ,iBACX,SAAS,IAAI,CAAC,SAAS,KAAK,UAAU,IACtC,OAAO,MAAM,QAAQ,eACnB,MAAM,QAAQ,aAAa,OAAO,iBAAiB,QAAQ,GAAG,IAAI,IAClE,YAAY,UAAU,MAAM,QAAQ,EAAE,IAAI,CAAC,SAAS,KAAK,UAAU;AAC7E,QACI,CAAC,MAAM,QAAQ,OAAO,KACtB,IAAI,IAAI,OAAO,EAAE,SAAS,QAAQ,UAClC,QAAQ,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,GACpC;AACE,YAAM,IAAI,MAAM,qCAAqC;AAAA,IACzD;AACA,UAAM,WAAW,QAAQ,IAAI,CAAC,OAAO,gBAAgB,KAAK,IAAI,EAAE,CAAE,CAAC;AACnE,UAAM,SAAS,SAAS,OAAO,CAAC,KAAK,UAAU,MAAM,MAAM,KAAK,QAAQ,EAAE;AAC1E,QAAI,SAAS,MAAM;AACf,YAAM,IAAI,MAAM,gDAAgD;AAAA,IACpE;AACA,QAAI,SAAS,SAAS,aAAa,UAAU,MAAM,MAAM;AACrD,YAAM,IAAI,MAAM,6CAA6C;AAAA,IACjE;AACA,UAAM,SAAsD,CAAC;AAC7D,UAAM,UAAU,oBAAI,IAAiB;AACrC,UAAM,aAAoB,CAAC;AAC3B,eAAW,SAAS,UAAU;AAC1B,YAAM,OAAO,MAAM;AACnB,YAAM,IAAI,MAAM;AAChB,UACI,KAAK,iBAAiB,MAAM,gBAC5B,KAAK,YAAY,EAAE,WACnB,KAAK,oBAAoB,OAAO,EAAE,eAAe,KACjD,KAAK,iBAAiB,OAAO,EAAE,YAAY,KAC1C,MAAM;AAAA,QACH,EAAE;AAAA,QACF,OAAO,EAAE,eAAe;AAAA,QACxB,MAAM,oBAAoB,OAAO,KAAK,YAAY,GAAG,KAAK,KAAK;AAAA,QAC/D,KAAK;AAAA,QACL,KAAK;AAAA,MACT,MAAO,MAAM,YACf;AACE,cAAM,IAAI,MAAM,0CAA0C;AAAA,MAC9D;AACA,YAAM,QAAQ,MAAM,KAAK,WAAW,OAAO,KAAK;AAChD,YAAM,OAAO,CAAC,GAAG,MAAM,IAAI;AAC3B,YAAM,OAAO,MAAM;AACnB,UAAI,QAAQ,IAAI,MAAM,MAAM,KAAK,QAAQ,IAAI,MAAM,MAAM,MAAM,MAAM;AACjE,cAAM,IAAI,MAAM,gDAAgD;AAAA,MACpE;AACA,cAAQ,IAAI,MAAM,QAAQ,IAAI;AAC9B,aAAO,KAAK;AAAA,QACR;AAAA,QACA,YAAY,MAAM;AAAA,QAClB,QAAQ,MAAM;AAAA,QACd,WAAW,MAAM;AAAA,QACjB;AAAA,MACJ,CAAC;AACD,iBAAW;AAAA,QACP,MAAM,UAAW;AAAA,UACb,EAAE;AAAA,UACF,OAAO,EAAE,eAAe;AAAA,UACxB,MAAM;AAAA,UACN,MAAM,KAAK;AAAA,QACf;AAAA,MACJ;AAAA,IACJ;AACA,UAAM,KAAK,cAAc,YAAY,KAAK;AAC1C,WAAO;AAAA,MACH;AAAA,MACA,SAAS,CAAC,GAAG,OAAO,EACf,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAE,EAC/C,IAAI,CAAC,CAAC,QAAQ,UAAU,OAAO,EAAE,QAAQ,WAAW,EAAE;AAAA,MAC3D;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,cAAc,YAA4B,OAAwC;AACpF,QAAI,WAAW,QAAQ;AACnB,YAAM,QAAQ,MAAM,KAAK,QAAQ,OAAO,QAAQ,MAAM,SAAS,YAAY,MAAM,KAAK;AACtF,UAAI,MAAM,WAAW,WAAW,UAAU,MAAM,KAAK,CAAC,UAAU,UAAU,KAAK,GAAG;AAC9E,cAAM,IAAI,MAAM,sDAAsD;AAAA,MAC1E;AAAA,IACJ;AAAA,EACJ;AACJ;AAIA,SAAS,iBAAiB,QAAiD;AACvE,QAAM,UAAU,OAAO;AAAA,IACnB,CAAC,UACG,iBAAiB,SACjB,OAAO,MAAM,gBAAgB,YAC7B,eAAe,SACf,OAAO,MAAM,cAAc;AAAA,EACnC;AACA,MAAI,QAAQ,WAAW,OAAO;AAC1B,UAAM,IAAI,MAAM,wDAAwD;AAC5E,SAAO,gBAAgB,OAAO;AAClC;","names":["MissingCapabilityError","MissingCapabilityError"]}