@cofhe/sdk 0.5.1 → 0.6.0

package/dist/permits.d.cts

@@ -302,15 +302,17 @@ type PermitsStore = {
     activePermitHash: ChainRecord<AccountRecord<string | undefined>>;
 };
 declare const PERMIT_STORE_DEFAULTS: PermitsStore;
-declare const _permitStore: Omit<zustand_vanilla.StoreApi<PermitsStore>, "persist"> & {
+declare const _permitStore: Omit<zustand_vanilla.StoreApi<PermitsStore>, "setState" | "persist"> & {
+    setState(partial: PermitsStore | Partial<PermitsStore> | ((state: PermitsStore) => PermitsStore | Partial<PermitsStore>), replace?: false | undefined): unknown;
+    setState(state: PermitsStore | ((state: PermitsStore) => PermitsStore), replace: true): unknown;
     persist: {
-        setOptions: (options: Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore>>) => void;
+        setOptions: (options: Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore, unknown>>) => void;
         clearStorage: () => void;
         rehydrate: () => Promise<void> | void;
         hasHydrated: () => boolean;
         onHydrate: (fn: (state: PermitsStore) => void) => () => void;
         onFinishHydration: (fn: (state: PermitsStore) => void) => () => void;
-        getOptions: () => Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore>>;
+        getOptions: () => Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore, unknown>>;
     };
 };
 declare const clearStaleStore: () => void;
@@ -324,15 +326,17 @@ declare const setActivePermitHash: (chainId: number, account: string, hash: stri
 declare const removeActivePermitHash: (chainId: number, account: string) => void;
 declare const resetStore: () => void;
 declare const permitStore: {
-    store: Omit<zustand_vanilla.StoreApi<PermitsStore>, "persist"> & {
+    store: Omit<zustand_vanilla.StoreApi<PermitsStore>, "setState" | "persist"> & {
+        setState(partial: PermitsStore | Partial<PermitsStore> | ((state: PermitsStore) => PermitsStore | Partial<PermitsStore>), replace?: false | undefined): unknown;
+        setState(state: PermitsStore | ((state: PermitsStore) => PermitsStore), replace: true): unknown;
         persist: {
-            setOptions: (options: Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore>>) => void;
+            setOptions: (options: Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore, unknown>>) => void;
             clearStorage: () => void;
             rehydrate: () => Promise<void> | void;
             hasHydrated: () => boolean;
             onHydrate: (fn: (state: PermitsStore) => void) => () => void;
             onFinishHydration: (fn: (state: PermitsStore) => void) => () => void;
-            getOptions: () => Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore>>;
+            getOptions: () => Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore, unknown>>;
         };
     };
     getPermit: (chainId: number | undefined, account: string | undefined, hash: string | undefined) => Permit | undefined;

package/dist/permits.d.ts

@@ -302,15 +302,17 @@ type PermitsStore = {
     activePermitHash: ChainRecord<AccountRecord<string | undefined>>;
 };
 declare const PERMIT_STORE_DEFAULTS: PermitsStore;
-declare const _permitStore: Omit<zustand_vanilla.StoreApi<PermitsStore>, "persist"> & {
+declare const _permitStore: Omit<zustand_vanilla.StoreApi<PermitsStore>, "setState" | "persist"> & {
+    setState(partial: PermitsStore | Partial<PermitsStore> | ((state: PermitsStore) => PermitsStore | Partial<PermitsStore>), replace?: false | undefined): unknown;
+    setState(state: PermitsStore | ((state: PermitsStore) => PermitsStore), replace: true): unknown;
     persist: {
-        setOptions: (options: Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore>>) => void;
+        setOptions: (options: Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore, unknown>>) => void;
         clearStorage: () => void;
         rehydrate: () => Promise<void> | void;
         hasHydrated: () => boolean;
         onHydrate: (fn: (state: PermitsStore) => void) => () => void;
         onFinishHydration: (fn: (state: PermitsStore) => void) => () => void;
-        getOptions: () => Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore>>;
+        getOptions: () => Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore, unknown>>;
     };
 };
 declare const clearStaleStore: () => void;
@@ -324,15 +326,17 @@ declare const setActivePermitHash: (chainId: number, account: string, hash: stri
 declare const removeActivePermitHash: (chainId: number, account: string) => void;
 declare const resetStore: () => void;
 declare const permitStore: {
-    store: Omit<zustand_vanilla.StoreApi<PermitsStore>, "persist"> & {
+    store: Omit<zustand_vanilla.StoreApi<PermitsStore>, "setState" | "persist"> & {
+        setState(partial: PermitsStore | Partial<PermitsStore> | ((state: PermitsStore) => PermitsStore | Partial<PermitsStore>), replace?: false | undefined): unknown;
+        setState(state: PermitsStore | ((state: PermitsStore) => PermitsStore), replace: true): unknown;
         persist: {
-            setOptions: (options: Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore>>) => void;
+            setOptions: (options: Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore, unknown>>) => void;
             clearStorage: () => void;
             rehydrate: () => Promise<void> | void;
             hasHydrated: () => boolean;
             onHydrate: (fn: (state: PermitsStore) => void) => () => void;
             onFinishHydration: (fn: (state: PermitsStore) => void) => () => void;
-            getOptions: () => Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore>>;
+            getOptions: () => Partial<zustand_middleware.PersistOptions<PermitsStore, PermitsStore, unknown>>;
         };
     };
     getPermit: (chainId: number | undefined, account: string | undefined, hash: string | undefined) => Permit | undefined;

package/dist/permits.js

@@ -1,2 +1,2 @@
-export { GenerateSealingKey, ImportPermitOptionsValidator, ImportPermitValidator, PERMIT_STORE_DEFAULTS, PermitUtils, SealingKey, SelfPermitOptionsValidator, SelfPermitValidator, SharingPermitOptionsValidator, SharingPermitValidator, SignatureTypes, SignatureUtils, ValidationUtils, _permitStore, addressNotZeroSchema, addressSchema, bytesNotEmptySchema, bytesSchema, clearStaleStore, getActivePermit, getActivePermitHash, getPermit, getPermits, getSignatureTypesAndMessage, permitStore, removeActivePermitHash, removePermit, resetStore, setActivePermitHash, setPermit, validateImportPermit, validateImportPermitOptions, validateSelfPermit, validateSelfPermitOptions, validateSharingPermit, validateSharingPermitOptions } from './chunk-MRCKUMOS.js';
-import './chunk-4FP4V35O.js';
+export { GenerateSealingKey, ImportPermitOptionsValidator, ImportPermitValidator, PERMIT_STORE_DEFAULTS, PermitUtils, SealingKey, SelfPermitOptionsValidator, SelfPermitValidator, SharingPermitOptionsValidator, SharingPermitValidator, SignatureTypes, SignatureUtils, ValidationUtils, _permitStore, addressNotZeroSchema, addressSchema, bytesNotEmptySchema, bytesSchema, clearStaleStore, getActivePermit, getActivePermitHash, getPermit, getPermits, getSignatureTypesAndMessage, permitStore, removeActivePermitHash, removePermit, resetStore, setActivePermitHash, setPermit, validateImportPermit, validateImportPermitOptions, validateSelfPermit, validateSelfPermitOptions, validateSharingPermit, validateSharingPermitOptions } from './chunk-VB62WYPL.js';
+import './chunk-ESMZCFJY.js';

package/dist/web.cjs

@@ -393,7 +393,7 @@ var zkVerify = async (verifierUrl, serializedBytes, address, securityZone, chain
   }
 };
 var concatSigRecid = (signature, recid) => {
-  return signature + (recid + 27).toString(16).padStart(2, "0");
+  return `${signature}${(recid + 27).toString(16).padStart(2, "0")}`;
 };
 
 // core/encrypt/MockZkVerifierAbi.ts
@@ -725,9 +725,9 @@ var hardhat2 = defineChain({
   name: "Hardhat",
   network: "localhost",
   // These are unused in the mock environment
-  coFheUrl: "http://127.0.0.1:8448",
-  verifierUrl: "http://127.0.0.1:3001",
-  thresholdNetworkUrl: "http://127.0.0.1:3000",
+  coFheUrl: "http://ignored-in-mock-environment",
+  verifierUrl: "http://ignored-in-mock-environment",
+  thresholdNetworkUrl: "http://ignored-in-mock-environment",
   environment: "MOCK"
 });
 var CofheConfigSchema = zod.z.object({
@@ -1113,6 +1113,7 @@ var EncryptInputsBuilder = class extends BaseBuilder {
   securityZone;
   stepCallback;
   inputItems;
+  hpp = false;
   zkvWalletClient;
   tfhePublicKeyDeserializer;
   compactPkeCrsDeserializer;
@@ -1242,6 +1243,20 @@ var EncryptInputsBuilder = class extends BaseBuilder {
   getSecurityZone() {
     return this.securityZone;
   }
+  /**
+   * Example:
+   * ```typescript
+   * const encrypted = await encryptInputs([Encryptable.uint128(10n)])
+   *   .asHashPlusProof()
+   *   .execute();
+   * ```
+   *
+   * @returns Chainable EncryptInputsBuilder instance that will return a HashPlusProofResult instead of an array of EncryptedItemInputs.
+   */
+  asHashPlusProof() {
+    this.hpp = true;
+    return this;
+  }
   /**
    * @param useWorker - Whether to use Web Workers for ZK proof generation.
    *
@@ -1523,6 +1538,15 @@ var EncryptInputsBuilder = class extends BaseBuilder {
     this.fireStepEnd("verify" /* Verify */);
     return encryptedInputs;
   }
+  structsToHashPlusProof(inItems) {
+    let hashes = [];
+    let proof = "";
+    for (const item of inItems) {
+      hashes.push("0x" + item.ctHash.toString(16).padStart(64, "0"));
+      proof += item.signature;
+    }
+    return [...hashes, proof];
+  }
   /**
    * Final step of the encryption process. MUST BE CALLED LAST IN THE CHAIN.
    *
@@ -1543,9 +1567,14 @@ var EncryptInputsBuilder = class extends BaseBuilder {
    * @returns The encrypted inputs.
    */
   async execute() {
+    let items;
     if (this.chainId === chains.hardhat.id)
-      return this.mocksExecute();
-    return this.productionExecute();
+      items = await this.mocksExecute();
+    else
+      items = await this.productionExecute();
+    if (this.hpp)
+      return this.structsToHashPlusProof(items);
+    return items;
   }
 };
 
@@ -2844,6 +2873,96 @@ function computeMinuteRampPollIntervalMs(elapsedMs, params) {
   return Math.min(params.maxIntervalMs, Math.max(params.minIntervalMs, intervalMs));
 }
 
+// core/decrypt/submitRetry.ts
+var DEFAULT_404_RETRY_TIMEOUT_MS = 1e4;
+function isRetryableSubmitStatus(status) {
+  return status === 204 || status === 404;
+}
+function normalize404RetryTimeoutMs(params) {
+  const { timeoutMs, operationLabel, errorCode } = params;
+  if (timeoutMs === void 0)
+    return DEFAULT_404_RETRY_TIMEOUT_MS;
+  if (!Number.isFinite(timeoutMs) || timeoutMs < 0) {
+    throw new CofheError({
+      code: errorCode,
+      message: `${operationLabel} submit 404 retry timeout must be a finite number greater than or equal to 0`,
+      context: {
+        timeoutMs
+      }
+    });
+  }
+  return timeoutMs;
+}
+async function classifySubmitResponse(params) {
+  const { response, extractErrorMessage } = params;
+  if (isRetryableSubmitStatus(response.status)) {
+    return { kind: "retryable", status: response.status };
+  }
+  if (response.ok) {
+    return { kind: "parse-json" };
+  }
+  let errorMessage = `HTTP ${response.status}`;
+  try {
+    const errorBody = await response.json();
+    const maybeErrorMessage = extractErrorMessage?.(errorBody);
+    if (typeof maybeErrorMessage === "string" && maybeErrorMessage.length > 0) {
+      errorMessage = maybeErrorMessage;
+    } else if (errorBody && typeof errorBody === "object") {
+      const defaultMessage = errorBody.error_message;
+      const fallbackMessage = errorBody.message;
+      if (typeof defaultMessage === "string" && defaultMessage.length > 0) {
+        errorMessage = defaultMessage;
+      } else if (typeof fallbackMessage === "string" && fallbackMessage.length > 0) {
+        errorMessage = fallbackMessage;
+      }
+    }
+  } catch {
+    errorMessage = response.statusText || errorMessage;
+  }
+  return { kind: "fatal-http", errorMessage };
+}
+function throwIfSubmitRetryTimedOut(params) {
+  const {
+    operationLabel,
+    errorCode,
+    status,
+    elapsedMs,
+    retry404TimeoutMs,
+    overallTimeoutMs,
+    thresholdNetworkUrl,
+    body,
+    attemptIndex
+  } = params;
+  if (status === 404 && elapsedMs > retry404TimeoutMs) {
+    throw new CofheError({
+      code: errorCode,
+      message: `${operationLabel} submit retried 404 responses without receiving request_id for ${retry404TimeoutMs}ms`,
+      hint: "The ciphertext may not be indexed yet. Increase set404RetryTimeout(...) if the backend is slow to index ciphertexts.",
+      context: {
+        thresholdNetworkUrl,
+        body,
+        attemptIndex,
+        timeoutMs: retry404TimeoutMs,
+        status
+      }
+    });
+  }
+  if (elapsedMs > overallTimeoutMs) {
+    throw new CofheError({
+      code: errorCode,
+      message: `${operationLabel} submit retried without receiving request_id for ${overallTimeoutMs}ms`,
+      hint: "The ciphertext may still be propagating. Try again later.",
+      context: {
+        thresholdNetworkUrl,
+        body,
+        attemptIndex,
+        timeoutMs: overallTimeoutMs,
+        status
+      }
+    });
+  }
+}
+
 // core/decrypt/tnSealOutputV2.ts
 var POLL_INTERVAL_MS = 1e3;
 var POLL_MAX_INTERVAL_MS = 1e4;
@@ -2905,7 +3024,7 @@ function parseCompletedSealOutputResponse(params) {
   }
   return convertSealedData(sealed);
 }
-async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, permission, overallStartTime, onPoll) {
+async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, permission, overallStartTime, retry404TimeoutMs, onPoll) {
   const body = {
     ct_tempkey: BigInt(ctHash).toString(16).padStart(64, "0"),
     host_chain_id: chainId,
@@ -2935,17 +3054,11 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, per
         }
       });
     }
-    if (!response.ok) {
-      let errorMessage = `HTTP ${response.status}`;
-      try {
-        const errorBody = await response.json();
-        errorMessage = errorBody.error_message || errorBody.message || errorMessage;
-      } catch {
-        errorMessage = response.statusText || errorMessage;
-      }
+    const responseClassification = await classifySubmitResponse({ response });
+    if (responseClassification.kind === "fatal-http") {
       throw new CofheError({
         code: "SEAL_OUTPUT_FAILED" /* SealOutputFailed */,
-        message: `sealOutput request failed: ${errorMessage}`,
+        message: `sealOutput request failed: ${responseClassification.errorMessage}`,
         hint: "Check the threshold network URL and request parameters.",
         context: {
           thresholdNetworkUrl,
@@ -2956,8 +3069,8 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, per
         }
       });
     }
-    let submitResponse;
-    if (response.status !== 204) {
+    if (responseClassification.kind === "parse-json") {
+      let submitResponse;
       try {
         submitResponse = await response.json();
       } catch (e) {
@@ -2985,46 +3098,39 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, per
       if (submitResponse.request_id) {
         return { kind: "request_id", requestId: submitResponse.request_id };
       }
-    }
-    if (response.status === 204) {
-      const elapsedMs = Date.now() - overallStartTime;
-      if (elapsedMs > SEAL_OUTPUT_TIMEOUT_MS) {
-        throw new CofheError({
-          code: "SEAL_OUTPUT_FAILED" /* SealOutputFailed */,
-          message: `sealOutput submit retried without receiving request_id for ${SEAL_OUTPUT_TIMEOUT_MS}ms`,
-          hint: "The ciphertext may still be propagating. Try again later.",
-          context: {
-            thresholdNetworkUrl,
-            body,
-            attemptIndex,
-            timeoutMs: SEAL_OUTPUT_TIMEOUT_MS,
-            submitResponse,
-            status: response.status
-          }
-        });
-      }
-      onPoll?.({
-        operation: "sealoutput",
-        requestId: "",
-        attemptIndex,
-        elapsedMs,
-        intervalMs: SUBMIT_RETRY_INTERVAL_MS,
-        timeoutMs: SEAL_OUTPUT_TIMEOUT_MS
+      throw new CofheError({
+        code: "SEAL_OUTPUT_FAILED" /* SealOutputFailed */,
+        message: `sealOutput submit response missing request_id`,
+        context: {
+          thresholdNetworkUrl,
+          body,
+          submitResponse,
+          attemptIndex
+        }
       });
-      await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS));
-      attemptIndex += 1;
-      continue;
     }
-    throw new CofheError({
-      code: "SEAL_OUTPUT_FAILED" /* SealOutputFailed */,
-      message: `sealOutput submit response missing request_id`,
-      context: {
-        thresholdNetworkUrl,
-        body,
-        submitResponse,
-        attemptIndex
-      }
+    const elapsedMs = Date.now() - overallStartTime;
+    throwIfSubmitRetryTimedOut({
+      operationLabel: "sealOutput",
+      errorCode: "SEAL_OUTPUT_FAILED" /* SealOutputFailed */,
+      status: responseClassification.status,
+      elapsedMs,
+      retry404TimeoutMs,
+      overallTimeoutMs: SEAL_OUTPUT_TIMEOUT_MS,
+      thresholdNetworkUrl,
+      body,
+      attemptIndex
     });
+    onPoll?.({
+      operation: "sealoutput",
+      requestId: "",
+      attemptIndex,
+      elapsedMs,
+      intervalMs: SUBMIT_RETRY_INTERVAL_MS,
+      timeoutMs: SEAL_OUTPUT_TIMEOUT_MS
+    });
+    await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS));
+    attemptIndex += 1;
   }
 }
 async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStartTime, onPoll) {
@@ -3139,7 +3245,12 @@ async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStart
   });
 }
 async function tnSealOutputV2(params) {
-  const { thresholdNetworkUrl, ctHash, chainId, permission, onPoll } = params;
+  const { thresholdNetworkUrl, ctHash, chainId, permission, retry404TimeoutMs, onPoll } = params;
+  const normalized404RetryTimeoutMs = normalize404RetryTimeoutMs({
+    timeoutMs: retry404TimeoutMs,
+    operationLabel: "sealOutput",
+    errorCode: "SEAL_OUTPUT_FAILED" /* SealOutputFailed */
+  });
   const overallStartTime = Date.now();
   const submitResult = await submitSealOutputRequest(
     thresholdNetworkUrl,
@@ -3147,6 +3258,7 @@ async function tnSealOutputV2(params) {
     chainId,
     permission,
     overallStartTime,
+    normalized404RetryTimeoutMs,
     onPoll
   );
   if (submitResult.kind === "completed") {
@@ -3156,12 +3268,14 @@ async function tnSealOutputV2(params) {
 }
 
 // core/decrypt/decryptForViewBuilder.ts
+var DEFAULT_404_RETRY_TIMEOUT_MS2 = 1e4;
 var DecryptForViewBuilder = class extends BaseBuilder {
   ctHash;
   utype;
   permitHash;
   permit;
   pollCallback;
+  retry404TimeoutMs = DEFAULT_404_RETRY_TIMEOUT_MS2;
   constructor(params) {
     super({
       config: params.config,
@@ -3222,6 +3336,19 @@ var DecryptForViewBuilder = class extends BaseBuilder {
     this.pollCallback = callback;
     return this;
   }
+  set404RetryTimeout(timeoutMs) {
+    if (!Number.isFinite(timeoutMs) || timeoutMs < 0) {
+      throw new CofheError({
+        code: "INTERNAL_ERROR" /* InternalError */,
+        message: "decryptForView: set404RetryTimeout(timeoutMs) expects a finite number greater than or equal to 0.",
+        context: {
+          timeoutMs
+        }
+      });
+    }
+    this.retry404TimeoutMs = timeoutMs;
+    return this;
+  }
   withPermit(permitOrPermitHash) {
     if (typeof permitOrPermitHash === "string") {
       this.permitHash = permitOrPermitHash;
@@ -3350,6 +3477,7 @@ var DecryptForViewBuilder = class extends BaseBuilder {
       chainId: this.chainId,
       permission,
       thresholdNetworkUrl,
+      retry404TimeoutMs: this.retry404TimeoutMs,
       onPoll: this.pollCallback
     });
     return PermitUtils.unseal(permit, sealed);
@@ -3625,7 +3753,7 @@ function assertDecryptStatusResponseV2(value) {
   }
   return value;
 }
-async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, permission, overallStartTime, onPoll) {
+async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, permission, overallStartTime, retry404TimeoutMs, onPoll) {
   const body = {
     ct_tempkey: BigInt(ctHash).toString(16).padStart(64, "0"),
     host_chain_id: chainId
@@ -3657,19 +3785,11 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, perm
         }
       });
     }
-    if (!response.ok) {
-      let errorMessage = `HTTP ${response.status}`;
-      try {
-        const errorBody = await response.json();
-        const maybeMessage = errorBody.error_message || errorBody.message;
-        if (typeof maybeMessage === "string" && maybeMessage.length > 0)
-          errorMessage = maybeMessage;
-      } catch {
-        errorMessage = response.statusText || errorMessage;
-      }
+    const responseClassification = await classifySubmitResponse({ response });
+    if (responseClassification.kind === "fatal-http") {
       throw new CofheError({
         code: "DECRYPT_FAILED" /* DecryptFailed */,
-        message: `decrypt request failed: ${errorMessage}`,
+        message: `decrypt request failed: ${responseClassification.errorMessage}`,
         hint: "Check the threshold network URL and request parameters.",
         context: {
           thresholdNetworkUrl,
@@ -3680,8 +3800,8 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, perm
         }
       });
     }
-    let submitResponse;
-    if (response.status !== 204) {
+    if (responseClassification.kind === "parse-json") {
+      let submitResponse;
       let rawJson;
       try {
         rawJson = await response.json();
@@ -3711,46 +3831,39 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, perm
       if (submitResponse.request_id) {
         return { kind: "request_id", requestId: submitResponse.request_id };
       }
-    }
-    if (response.status === 204) {
-      const elapsedMs = Date.now() - overallStartTime;
-      if (elapsedMs > DECRYPT_TIMEOUT_MS) {
-        throw new CofheError({
-          code: "DECRYPT_FAILED" /* DecryptFailed */,
-          message: `decrypt submit retried without receiving request_id for ${DECRYPT_TIMEOUT_MS}ms`,
-          hint: "The ciphertext may still be propagating. Try again later.",
-          context: {
-            thresholdNetworkUrl,
-            body,
-            attemptIndex,
-            timeoutMs: DECRYPT_TIMEOUT_MS,
-            submitResponse,
-            status: response.status
-          }
-        });
-      }
-      onPoll?.({
-        operation: "decrypt",
-        requestId: "",
-        attemptIndex,
-        elapsedMs,
-        intervalMs: SUBMIT_RETRY_INTERVAL_MS2,
-        timeoutMs: DECRYPT_TIMEOUT_MS
+      throw new CofheError({
+        code: "DECRYPT_FAILED" /* DecryptFailed */,
+        message: `decrypt submit response missing request_id`,
+        context: {
+          thresholdNetworkUrl,
+          body,
+          submitResponse,
+          attemptIndex
+        }
       });
-      await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS2));
-      attemptIndex += 1;
-      continue;
     }
-    throw new CofheError({
-      code: "DECRYPT_FAILED" /* DecryptFailed */,
-      message: `decrypt submit response missing request_id`,
-      context: {
-        thresholdNetworkUrl,
-        body,
-        submitResponse,
-        attemptIndex
-      }
+    const elapsedMs = Date.now() - overallStartTime;
+    throwIfSubmitRetryTimedOut({
+      operationLabel: "decrypt",
+      errorCode: "DECRYPT_FAILED" /* DecryptFailed */,
+      status: responseClassification.status,
+      elapsedMs,
+      retry404TimeoutMs,
+      overallTimeoutMs: DECRYPT_TIMEOUT_MS,
+      thresholdNetworkUrl,
+      body,
+      attemptIndex
     });
+    onPoll?.({
+      operation: "decrypt",
+      requestId: "",
+      attemptIndex,
+      elapsedMs,
+      intervalMs: SUBMIT_RETRY_INTERVAL_MS2,
+      timeoutMs: DECRYPT_TIMEOUT_MS
+    });
+    await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS2));
+    attemptIndex += 1;
   }
 }
 async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartTime, onPoll) {
@@ -3868,7 +3981,12 @@ async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartT
   });
 }
 async function tnDecryptV2(params) {
-  const { thresholdNetworkUrl, ctHash, chainId, permission, onPoll } = params;
+  const { thresholdNetworkUrl, ctHash, chainId, permission, retry404TimeoutMs, onPoll } = params;
+  const normalized404RetryTimeoutMs = normalize404RetryTimeoutMs({
+    timeoutMs: retry404TimeoutMs,
+    operationLabel: "decrypt",
+    errorCode: "DECRYPT_FAILED" /* DecryptFailed */
+  });
   const overallStartTime = Date.now();
   const submitResult = await submitDecryptRequestV2(
     thresholdNetworkUrl,
@@ -3876,6 +3994,7 @@ async function tnDecryptV2(params) {
     chainId,
     permission,
     overallStartTime,
+    normalized404RetryTimeoutMs,
     onPoll
   );
   if (submitResult.kind === "completed") {
@@ -3885,12 +4004,14 @@ async function tnDecryptV2(params) {
 }
 
 // core/decrypt/decryptForTxBuilder.ts
+var DEFAULT_404_RETRY_TIMEOUT_MS3 = 1e4;
 var DecryptForTxBuilder = class extends BaseBuilder {
   ctHash;
   permitHash;
   permit;
   permitSelection = "unset";
   pollCallback;
+  retry404TimeoutMs = DEFAULT_404_RETRY_TIMEOUT_MS3;
   constructor(params) {
     super({
       config: params.config,
@@ -3920,6 +4041,19 @@ var DecryptForTxBuilder = class extends BaseBuilder {
     this.pollCallback = callback;
     return this;
   }
+  set404RetryTimeout(timeoutMs) {
+    if (!Number.isFinite(timeoutMs) || timeoutMs < 0) {
+      throw new CofheError({
+        code: "INTERNAL_ERROR" /* InternalError */,
+        message: "decryptForTx: set404RetryTimeout(timeoutMs) expects a finite number greater than or equal to 0.",
+        context: {
+          timeoutMs
+        }
+      });
+    }
+    this.retry404TimeoutMs = timeoutMs;
+    return this;
+  }
   withPermit(permitOrPermitHash) {
     if (this.permitSelection === "with-permit") {
       throw new CofheError({
@@ -4052,6 +4186,7 @@ var DecryptForTxBuilder = class extends BaseBuilder {
       chainId: this.chainId,
       permission,
       thresholdNetworkUrl,
+      retry404TimeoutMs: this.retry404TimeoutMs,
       onPoll: this.pollCallback
     });
     return {

package/dist/web.d.cts

@@ -1,4 +1,4 @@
-import { I as IStorage, C as CofheInputConfig, a as CofheConfig, b as CofheClient, E as EncryptableItem } from './clientTypes-BSbwairE.cjs';
+import { I as IStorage, C as CofheInputConfig, a as CofheConfig, b as CofheClient, E as EncryptableItem } from './clientTypes-BDy1qIBu.cjs';
 import 'viem';
 import './types-C07FK-cL.cjs';
 import 'zod';

package/dist/web.d.ts

@@ -1,4 +1,4 @@
-import { I as IStorage, C as CofheInputConfig, a as CofheConfig, b as CofheClient, E as EncryptableItem } from './clientTypes-DDmcgZ0a.js';
+import { I as IStorage, C as CofheInputConfig, a as CofheConfig, b as CofheClient, E as EncryptableItem } from './clientTypes-CyUvRRzA.js';
 import 'viem';
 import './types-C07FK-cL.js';
 import 'zod';

package/dist/web.js

@@ -1,7 +1,7 @@
-import { createCofheConfigBase, createCofheClientBase, fheTypeToString } from './chunk-S7OKGLFD.js';
-import './chunk-TBLR7NNE.js';
-import './chunk-MRCKUMOS.js';
-import { TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT } from './chunk-4FP4V35O.js';
+import { createCofheConfigBase, createCofheClientBase, fheTypeToString } from './chunk-PE5V5CCV.js';
+import './chunk-MTRAXQXC.js';
+import './chunk-VB62WYPL.js';
+import { TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT } from './chunk-ESMZCFJY.js';
 import { constructClient } from 'iframe-shared-storage';
 
 // web/const.ts

package/dist/zkProve.worker.js

@@ -1,4 +1,4 @@
-import { TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT } from './chunk-4FP4V35O.js';
+import { TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT } from './chunk-ESMZCFJY.js';
 
 // web/zkProve.worker.ts
 var tfheModule = null;