@cofhe/hardhat-3-plugin 0.6.1 → 0.7.0

package/CHANGELOG.md

@@ -1,5 +1,39 @@
 # @cofhe/hardhat-3-plugin
 
+## 0.7.0
+
+### Minor Changes
+
+- fb87d91: **Breaking: Permit (V2) → ACP (Access Control Permission).** Permits become scoped, revocable ACPs; old names are removed rather than deprecated. Highlights (full list in the [0.7.0 migration guide](https://cofhesdk.fhenix.io/migrating-to-0-7-0)):
+
+  - `Permit`/`Permission`/`PermitUtils`/`client.permits` → `ACP`/`ACPPublic`/`ACPUtils`/`client.acp`; `getPermission()` → `getPublic()`
+  - `ACPPrivate` & `ACPPublic` are top-level types, `ACP` is the union; the sealing keypair is flattened to `sealingPrivateKey`/`sealingKey` (the `SealingKey` class is removed)
+  - New scope fields (`scope`, `contracts`, `handles: bytes32[]`) and revocation fields renamed `validatorId`/`validatorContract` → `revokerData`/`revokerContract`; default revoker `ACPTimestampRevoker` with `revokeACP`/`revokeAllACPs`/`isACPRevoked` on the client
+  - EIP-712 domain bumped to `("ACL", "2")` with new `ACPIssuerSelf`/`ACPIssuerShared`/`ACPRecipient` types — previously signed permits no longer verify; the permit store migrates by wiping retired-format permits
+  - `ACPUtils.export()` produces a fixed `SharedACP` shape and only accepts signed sharing ACPs
+
+- fb87d91: **On-chain ACP sharing.** New `ACPShareRegistry` contract (deployed with the mocks) lets an issuer post a sharing ACP on-chain for its recipient to discover and import — replacing the JSON copy-paste hand-off.
+
+  - `client.acp.shareOnChain(acp)` posts a signed sharing ACP (issuer-only, same guards as `export()`); `cancelShare(shareId)` retracts it
+  - `client.acp.getIncomingShares()` lists importable shares addressed to the connected account (unexpired, not revoked — the registry checks the share's own revoker)
+  - `client.acp.importFromChain(share)` imports like the JSON flow (recipient sealing key + signature); `dismissShare(shareId)` cleans up the entry
+  - config: `acp.sharingRegistry: Record<chainId, address>`
+  - registry exposes `isShareValid(shareId)` as an on-chain verification hook for contracts
+
+### Patch Changes
+
+- Updated dependencies [fb87d91]
+- Updated dependencies [fb87d91]
+- Updated dependencies [fb87d91]
+- Updated dependencies [fb87d91]
+- Updated dependencies [fb87d91]
+- Updated dependencies [d4d662f]
+- Updated dependencies [fb87d91]
+- Updated dependencies [fb87d91]
+- Updated dependencies [f01cac7]
+  - @cofhe/sdk@0.7.0
+  - @cofhe/mock-contracts@0.7.0
+
 ## 0.6.1
 
 ### Patch Changes

package/README.md

@@ -114,7 +114,7 @@ await client.connect(publicClient, walletClient);
 
 ### `cofhe.createClientWithBatteries(walletClient?)`
 
-Creates a fully initialized `CofheClient` in one call — configures it for Hardhat, connects it, and creates a self-permit so it can decrypt encrypted FHE variables out of the box.
+Creates a fully initialized `CofheClient` in one call — configures it for Hardhat, connects it, and creates a self-acp so it can decrypt encrypted FHE variables out of the box.
 
 ```typescript
 // Uses the first account in the connection automatically:
@@ -241,14 +241,18 @@ describe('Encrypted counter', async () => {
   it('encrypts, stores, and decrypts a uint32', async () => {
     const client = await cofhe.createClientWithBatteries(walletClient);
 
-    // Encrypt
-    const [enc] = await client.encryptInputs([Encryptable.uint32(42n)]).execute();
+    // Encrypt - returns [hash, signature]: one hash per input, plus the shared batch signature.
+    // setConsumingContract binds the signature to the contract that will consume it.
+    const [hash, signature] = await client
+      .encryptInputs([Encryptable.uint32(42n)])
+      .setConsumingContract(simpleTest.address)
+      .execute();
 
-    // Store on-chain via SimpleTest
+    // Store on-chain via SimpleTest (batch entry point takes an array plus the signature)
     await walletClient.writeContract({
       ...simpleTest,
-      functionName: 'setValue',
-      args: [enc],
+      functionName: 'setValueBatch',
+      args: [[hash], signature],
     });
 
     const ctHash = (await publicClient.readContract({

package/dist/{chunk-AAZRPK26.js → chunk-E7DR6EGV.js}

@@ -2,7 +2,7 @@
 import { createTestClient, custom } from "viem";
 import chalk from "chalk";
 import { privateKeyToAccount } from "viem/accounts";
-import { MockTaskManagerArtifact, MockThresholdNetworkArtifact } from "@cofhe/mock-contracts";
+import { MockACLArtifact, MockTaskManagerArtifact, MockThresholdNetworkArtifact } from "@cofhe/mock-contracts";
 import {
   TASK_MANAGER_ADDRESS,
   MOCKS_ZK_VERIFIER_ADDRESS,
@@ -58,6 +58,28 @@ async function deployMocks(ctx, options = {}) {
     chain: null
   });
   log("vv", "ACL address set in TaskManager", 2);
+  const acpRevokerAddress = await deployVariable(ctx, "ACPTimestampRevoker", []);
+  logDeployment("ACPTimestampRevoker", acpRevokerAddress);
+  await ctx.walletClient.writeContract({
+    address: aclAddress,
+    abi: MockACLArtifact.abi,
+    functionName: "setDefaultRevokerContract",
+    args: [acpRevokerAddress],
+    account,
+    chain: null
+  });
+  log("vv", "Default revoker contract set in ACL", 2);
+  const acpShareRegistryAddress = await deployVariable(ctx, "ACPShareRegistry", []);
+  logDeployment("ACPShareRegistry", acpShareRegistryAddress);
+  await ctx.walletClient.writeContract({
+    address: aclAddress,
+    abi: MockACLArtifact.abi,
+    functionName: "setShareRegistry",
+    args: [acpShareRegistryAddress],
+    account,
+    chain: null
+  });
+  log("vv", "Share registry set in ACL", 2);
   const verifierSigner = privateKeyToAccount(MOCKS_ZK_VERIFIER_SIGNER_PRIVATE_KEY);
   await ctx.walletClient.writeContract({
     address: TASK_MANAGER_ADDRESS,
@@ -114,6 +136,8 @@ async function deployMocks(ctx, options = {}) {
   return {
     MockTaskManager: TASK_MANAGER_ADDRESS,
     MockACL: aclAddress,
+    ACPTimestampRevoker: acpRevokerAddress,
+    ACPShareRegistry: acpShareRegistryAddress,
     MockZkVerifier: MOCKS_ZK_VERIFIER_ADDRESS,
     MockThresholdNetwork: MOCKS_THRESHOLD_NETWORK_ADDRESS
   };

package/dist/{hre-PG4EAJES.js → hre-CYH6NXPG.js}

@@ -3,7 +3,7 @@ import {
   getMockContractsNpmPaths,
   mock_expectPlaintext,
   mock_getPlaintext
-} from "./chunk-AAZRPK26.js";
+} from "./chunk-E7DR6EGV.js";
 import {
   mock_setLoggingEnabled,
   mock_withLogs
@@ -61,7 +61,7 @@ function createCofheConnection(publicClient, walletClient, transport, artifacts,
       const config = await this.createConfig();
       const client = this.createClient(config);
       await client.connect(publicClient, signerClient);
-      await client.permits.createSelf({ issuer: address });
+      await client.acp.createSelf({ issuer: address });
       return client;
     },
     mocks: {

package/dist/index.d.ts

@@ -15,6 +15,8 @@ type LogMocksDeploy = '' | 'v' | 'vv';
 type DeployedMockContracts = {
     MockTaskManager: `0x${string}`;
     MockACL: `0x${string}`;
+    ACPTimestampRevoker: `0x${string}`;
+    ACPShareRegistry: `0x${string}`;
     MockZkVerifier: `0x${string}`;
     MockThresholdNetwork: `0x${string}`;
 };

package/dist/index.js

@@ -3,7 +3,7 @@ import {
   getMockContractsNpmPaths,
   mock_expectPlaintext,
   mock_getPlaintext
-} from "./chunk-AAZRPK26.js";
+} from "./chunk-E7DR6EGV.js";
 import {
   localcofheFundAccount,
   localcofheFundWalletIfNeeded
@@ -26,7 +26,7 @@ var plugin = {
   id: "@cofhe/hardhat-3-plugin",
   hookHandlers: {
     config: async () => import("./config-YK3LB5IH.js"),
-    hre: async () => import("./hre-PG4EAJES.js")
+    hre: async () => import("./hre-CYH6NXPG.js")
   },
   tasks: [
     task(TASK_COFHE_USE_FAUCET, "Fund an account via the localcofhe faucet").addOption({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cofhe/hardhat-3-plugin",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "Hardhat 3 plugin for CoFHE — deploys mock contracts and wires up the hre.cofhe interface",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,8 +28,8 @@
   "dependencies": {
     "chalk": "4.1.2",
     "viem": "2.38.6",
-    "@cofhe/mock-contracts": "0.6.1",
-    "@cofhe/sdk": "0.6.1"
+    "@cofhe/mock-contracts": "0.7.0",
+    "@cofhe/sdk": "0.7.0"
   },
   "devDependencies": {
     "@types/node": "20.19.15",

package/src/deploy.ts

@@ -4,7 +4,7 @@ import { createTestClient, custom } from 'viem';
 import chalk from 'chalk';
 import { privateKeyToAccount } from 'viem/accounts';
 
-import { MockTaskManagerArtifact, MockThresholdNetworkArtifact } from '@cofhe/mock-contracts';
+import { MockACLArtifact, MockTaskManagerArtifact, MockThresholdNetworkArtifact } from '@cofhe/mock-contracts';
 import {
   TASK_MANAGER_ADDRESS,
   MOCKS_ZK_VERIFIER_ADDRESS,
@@ -26,6 +26,8 @@ export type LogMocksDeploy = '' | 'v' | 'vv';
 export type DeployedMockContracts = {
   MockTaskManager: `0x${string}`;
   MockACL: `0x${string}`;
+  ACPTimestampRevoker: `0x${string}`;
+  ACPShareRegistry: `0x${string}`;
   MockZkVerifier: `0x${string}`;
   MockThresholdNetwork: `0x${string}`;
 };
@@ -109,6 +111,32 @@ export async function deployMocks(ctx: DeployContext, options: DeployMocksArgs =
   });
   log('vv', 'ACL address set in TaskManager', 2);
 
+  // 5b. ACP (ACP V3): default revoker (verification is inherited by the ACL)
+  const acpRevokerAddress = await deployVariable(ctx, 'ACPTimestampRevoker', []);
+  logDeployment('ACPTimestampRevoker', acpRevokerAddress);
+  await ctx.walletClient.writeContract({
+    address: aclAddress,
+    abi: MockACLArtifact.abi,
+    functionName: 'setDefaultRevokerContract',
+    args: [acpRevokerAddress],
+    account,
+    chain: null,
+  });
+  log('vv', 'Default revoker contract set in ACL', 2);
+
+  // 5c. ACP: on-chain hand-off for sharing ACPs
+  const acpShareRegistryAddress = await deployVariable(ctx, 'ACPShareRegistry', []);
+  logDeployment('ACPShareRegistry', acpShareRegistryAddress);
+  await ctx.walletClient.writeContract({
+    address: aclAddress,
+    abi: MockACLArtifact.abi,
+    functionName: 'setShareRegistry',
+    args: [acpShareRegistryAddress],
+    account,
+    chain: null,
+  });
+  log('vv', 'Share registry set in ACL', 2);
+
   // 6. Set ZkVerifier signer (the key is well-known and shared with the SDK)
   const verifierSigner = privateKeyToAccount(MOCKS_ZK_VERIFIER_SIGNER_PRIVATE_KEY);
   await ctx.walletClient.writeContract({
@@ -181,6 +209,8 @@ export async function deployMocks(ctx: DeployContext, options: DeployMocksArgs =
   return {
     MockTaskManager: TASK_MANAGER_ADDRESS,
     MockACL: aclAddress,
+    ACPTimestampRevoker: acpRevokerAddress,
+    ACPShareRegistry: acpShareRegistryAddress,
     MockZkVerifier: MOCKS_ZK_VERIFIER_ADDRESS,
     MockThresholdNetwork: MOCKS_THRESHOLD_NETWORK_ADDRESS,
   };

package/src/hooks/hre.ts

@@ -74,7 +74,7 @@ function createCofheConnection(
       const config = await this.createConfig();
       const client = this.createClient(config);
       await client.connect(publicClient, signerClient);
-      await client.permits.createSelf({ issuer: address });
+      await client.acp.createSelf({ issuer: address });
       return client;
     },