@cofhe/sdk 1.0.0-alpha.0 → 1.1.0-alpha.0

package/dist/acps.d.ts

@@ -1,364 +1,10 @@
-import { A as ACP, S as ShareLabel, a as StoredValueLabel, E as EventValueLabel, L as LabelledShare, V as ValidationResult, b as ACPPublic, c as ACPSignaturePrimaryType, d as EIP712Types, e as EIP712Message, f as SerializedACP } from './onchain-utils-D9Z33IP7.js';
-export { O as ACPAccessStatus, P as ACPHashFields, h as ACPMetadata, H as ACPOf, D as ACPPrivate, M as ACPScope, N as ACPScopeOptions, F as ACPType, l as ACPUtils, p as AclServedAddresses, C as CreateSelfACPOptions, g as CreateSharingACPOptions, k as EIP712Domain, B as EIP712Type, r as EthEncryptedData, Q as Expand, G as GenerateSealingKey, I as ImportACPOptions, I as ImportSharedACPOptions, j as IncomingShare, v as LabelVerification, R as RecipientACP, q as SealingKeyPair, J as SelfACP, C as SelfACPOptions, x as ShareLabelCheck, t as ShareLabelReadArg, w as ShareLabelVerifyMode, i as SharedACP, K as SharingACP, g as SharingACPOptions, U as UnlabelledLabel, o as clearAclServedAddresses, m as getAclAddress, n as getAclServedAddresses, s as seal, u as unsealWithPrivateKey, y as verifyShareLabel, z as verifyShareLabels } from './onchain-utils-D9Z33IP7.js';
-import { Hex, AbiParameterToPrimitiveType, Address, PublicClient, Abi, ContractFunctionName, ContractFunctionArgs, Log } from 'viem';
+import { S as ShareLabel, a as StoredValueLabel, E as EventValueLabel, L as LabelledShare, A as ACP, V as ValidationResult, b as ACPPublic, c as ACPSignaturePrimaryType, d as EIP712Types, e as EIP712Message, f as SerializedACP } from './onchain-utils-Ns56cBm0.js';
+export { a4 as ACPAccessStatus, a5 as ACPHashFields, h as ACPMetadata, _ as ACPOf, Y as ACPPrivate, a2 as ACPScope, a3 as ACPScopeOptions, Z as ACPType, l as ACPUtils, t as ACP_REVOKER_ABI, v as ACP_SHARE_REGISTRY_ABI, w as ACP_SHARE_TUPLE_ABI, p as AclServedAddresses, B as ChainShare, C as CreateSelfACPOptions, g as CreateSharingACPOptions, k as EIP712Domain, X as EIP712Type, r as EthEncryptedData, a6 as Expand, G as GenerateSealingKey, I as ImportACPOptions, I as ImportSharedACPOptions, j as IncomingShare, O as LabelVerification, P as PostedShare, F as PostedShares, a1 as RecipientACP, q as SealingKeyPair, $ as SelfACP, C as SelfACPOptions, D as ShareHeader, R as ShareLabelCheck, M as ShareLabelReadArg, Q as ShareLabelVerifyMode, i as SharedACP, a0 as SharingACP, g as SharingACPOptions, N as UnlabelledLabel, U as UnreadableShare, o as clearAclServedAddresses, y as computeShareId, m as getAclAddress, n as getAclServedAddresses, H as readPostedShares, K as readShare, J as readSharesFor, s as seal, z as shareIdOfChainShare, x as toChainShare, u as unsealWithPrivateKey, T as verifyShareLabel, W as verifyShareLabels } from './onchain-utils-Ns56cBm0.js';
+import { Address, Hex, Abi, ContractFunctionName, ContractFunctionArgs, Log } from 'viem';
 import { z } from 'zod';
 import * as zustand_middleware from 'zustand/middleware';
 import * as zustand_vanilla from 'zustand/vanilla';
 
-/**
- * The on-chain sharing pieces: the share registry and revoker ABIs, the registry payload of a
- * sharing ACP and its share id, and the read of a share from its `Shared` event. Exported so an
- * app can send these writes through its own transaction path and still agree with the registry
- * on ids.
- *
- * The registry is pointer-based: storage keeps a share header (issuer, expiration, recipient,
- * revoker, and the block of its `Shared` event); the full payload and the metadata blob travel in
- * that event. A reader takes headers from `sharesFor` / `getShare` and fetches the events with one
- * single-block `getLogs` per block.
- */
-declare const ACP_REVOKER_ABI: readonly [{
-    readonly name: "revokeSingle";
-    readonly type: "function";
-    readonly stateMutability: "nonpayable";
-    readonly inputs: readonly [{
-        readonly type: "uint256";
-        readonly name: "id";
-    }];
-    readonly outputs: readonly [];
-}, {
-    readonly name: "revokeAllExisting";
-    readonly type: "function";
-    readonly stateMutability: "nonpayable";
-    readonly inputs: readonly [];
-    readonly outputs: readonly [];
-}, {
-    readonly name: "disabled";
-    readonly type: "function";
-    readonly stateMutability: "view";
-    readonly inputs: readonly [{
-        readonly type: "address";
-        readonly name: "issuer";
-    }, {
-        readonly type: "uint256";
-        readonly name: "id";
-    }];
-    readonly outputs: readonly [{
-        readonly type: "bool";
-    }];
-}];
-declare const ACP_SHARE_REGISTRY_ABI: readonly [{
-    readonly name: "share";
-    readonly type: "function";
-    readonly stateMutability: "nonpayable";
-    readonly inputs: readonly [{
-        readonly type: "tuple";
-        readonly components: readonly [{
-            readonly type: "address";
-            readonly name: "issuer";
-        }, {
-            readonly type: "uint64";
-            readonly name: "expiration";
-        }, {
-            readonly type: "address";
-            readonly name: "recipient";
-        }, {
-            readonly type: "uint256";
-            readonly name: "revokerData";
-        }, {
-            readonly type: "address";
-            readonly name: "revokerContract";
-        }, {
-            readonly type: "uint8";
-            readonly name: "scope";
-        }, {
-            readonly type: "address[]";
-            readonly name: "contracts";
-        }, {
-            readonly type: "bytes32[]";
-            readonly name: "handles";
-        }, {
-            readonly type: "bytes32";
-            readonly name: "sealingKey";
-        }, {
-            readonly type: "bytes";
-            readonly name: "issuerSignature";
-        }, {
-            readonly type: "bytes";
-            readonly name: "recipientSignature";
-        }];
-        readonly name: "acp";
-    }, {
-        readonly type: "bytes";
-        readonly name: "metadata";
-    }];
-    readonly outputs: readonly [{
-        readonly type: "bytes32";
-    }];
-}, {
-    readonly name: "removeShare";
-    readonly type: "function";
-    readonly stateMutability: "nonpayable";
-    readonly inputs: readonly [{
-        readonly type: "bytes32";
-        readonly name: "shareId";
-    }];
-    readonly outputs: readonly [];
-}, {
-    readonly name: "sharesFor";
-    readonly type: "function";
-    readonly stateMutability: "view";
-    readonly inputs: readonly [{
-        readonly type: "address";
-        readonly name: "recipient";
-    }];
-    readonly outputs: readonly [{
-        readonly type: "bytes32[]";
-        readonly name: "shareIds";
-    }, {
-        readonly type: "tuple[]";
-        readonly components: readonly [{
-            readonly type: "address";
-            readonly name: "issuer";
-        }, {
-            readonly type: "uint64";
-            readonly name: "expiration";
-        }, {
-            readonly type: "address";
-            readonly name: "recipient";
-        }, {
-            readonly type: "uint64";
-            readonly name: "blockNumber";
-        }, {
-            readonly type: "address";
-            readonly name: "revokerContract";
-        }, {
-            readonly type: "uint256";
-            readonly name: "revokerData";
-        }];
-        readonly name: "headers";
-    }];
-}, {
-    readonly name: "getShare";
-    readonly type: "function";
-    readonly stateMutability: "view";
-    readonly inputs: readonly [{
-        readonly type: "bytes32";
-        readonly name: "shareId";
-    }];
-    readonly outputs: readonly [{
-        readonly type: "tuple";
-        readonly components: readonly [{
-            readonly type: "address";
-            readonly name: "issuer";
-        }, {
-            readonly type: "uint64";
-            readonly name: "expiration";
-        }, {
-            readonly type: "address";
-            readonly name: "recipient";
-        }, {
-            readonly type: "uint64";
-            readonly name: "blockNumber";
-        }, {
-            readonly type: "address";
-            readonly name: "revokerContract";
-        }, {
-            readonly type: "uint256";
-            readonly name: "revokerData";
-        }];
-    }];
-}, {
-    readonly name: "isShareValid";
-    readonly type: "function";
-    readonly stateMutability: "view";
-    readonly inputs: readonly [{
-        readonly type: "bytes32";
-        readonly name: "shareId";
-    }];
-    readonly outputs: readonly [{
-        readonly type: "bool";
-    }];
-}, {
-    readonly name: "Shared";
-    readonly type: "event";
-    readonly inputs: readonly [{
-        readonly type: "address";
-        readonly name: "recipient";
-        readonly indexed: true;
-    }, {
-        readonly type: "address";
-        readonly name: "issuer";
-        readonly indexed: true;
-    }, {
-        readonly type: "bytes32";
-        readonly name: "shareId";
-        readonly indexed: true;
-    }, {
-        readonly type: "tuple";
-        readonly components: readonly [{
-            readonly type: "address";
-            readonly name: "issuer";
-        }, {
-            readonly type: "uint64";
-            readonly name: "expiration";
-        }, {
-            readonly type: "address";
-            readonly name: "recipient";
-        }, {
-            readonly type: "uint256";
-            readonly name: "revokerData";
-        }, {
-            readonly type: "address";
-            readonly name: "revokerContract";
-        }, {
-            readonly type: "uint8";
-            readonly name: "scope";
-        }, {
-            readonly type: "address[]";
-            readonly name: "contracts";
-        }, {
-            readonly type: "bytes32[]";
-            readonly name: "handles";
-        }, {
-            readonly type: "bytes32";
-            readonly name: "sealingKey";
-        }, {
-            readonly type: "bytes";
-            readonly name: "issuerSignature";
-        }, {
-            readonly type: "bytes";
-            readonly name: "recipientSignature";
-        }];
-        readonly name: "acp";
-    }, {
-        readonly type: "bytes";
-        readonly name: "metadata";
-    }];
-}, {
-    readonly name: "ShareRemoved";
-    readonly type: "event";
-    readonly inputs: readonly [{
-        readonly type: "address";
-        readonly name: "recipient";
-        readonly indexed: true;
-    }, {
-        readonly type: "address";
-        readonly name: "issuer";
-        readonly indexed: true;
-    }, {
-        readonly type: "bytes32";
-        readonly name: "shareId";
-        readonly indexed: true;
-    }];
-}];
-declare const ACP_SHARE_TUPLE_ABI: readonly [{
-    readonly type: "tuple";
-    readonly components: readonly [{
-        readonly name: "issuer";
-        readonly type: "address";
-    }, {
-        readonly name: "expiration";
-        readonly type: "uint64";
-    }, {
-        readonly name: "recipient";
-        readonly type: "address";
-    }, {
-        readonly name: "revokerData";
-        readonly type: "uint256";
-    }, {
-        readonly name: "revokerContract";
-        readonly type: "address";
-    }, {
-        readonly name: "scope";
-        readonly type: "uint8";
-    }, {
-        readonly name: "contracts";
-        readonly type: "address[]";
-    }, {
-        readonly name: "handles";
-        readonly type: "bytes32[]";
-    }, {
-        readonly name: "sealingKey";
-        readonly type: "bytes32";
-    }, {
-        readonly name: "issuerSignature";
-        readonly type: "bytes";
-    }, {
-        readonly name: "recipientSignature";
-        readonly type: "bytes";
-    }];
-}];
-/** The on-chain payload for a sharing ACP: recipient-side fields empty. */
-declare const toChainShare: (acp: ACP) => {
-    expiration: bigint;
-    revokerData: bigint;
-    sealingKey: `0x${string}`;
-    recipientSignature: Hex;
-    issuer: Hex;
-    recipient: Hex;
-    revokerContract: Hex;
-    scope: number;
-    contracts: Hex[];
-    handles: Hex[];
-    issuerSignature: Hex;
-};
-/** Mirrors the registry's `keccak256(abi.encode(acp))` share id. */
-declare const computeShareId: (acp: ACP) => Hex;
-/** The share id of a registry payload as read back from a `Shared` event. */
-declare const shareIdOfChainShare: (share: ChainShare) => Hex;
-/** A registry payload, as decoded from a `Shared` event (or passed to `share`). */
-type ChainShare = AbiParameterToPrimitiveType<(typeof ACP_SHARE_TUPLE_ABI)[0]>;
-/** What the registry stores of a share: the fields it checks, and the block of its `Shared` event. */
-type ShareHeader = {
-    issuer: Address;
-    expiration: bigint;
-    recipient: Address;
-    /** Block of the `Shared` event (the L2 block on Arbitrum). */
-    blockNumber: bigint;
-    revokerContract: Address;
-    revokerData: bigint;
-};
-/** A share as posted: its payload and the metadata blob that came with it (`0x` when none). */
-type PostedShare = {
-    shareId: Hex;
-    header: ShareHeader;
-    share: ChainShare;
-    metadata: Hex;
-};
-/** A share the registry lists but whose `Shared` event could not be read, and why. */
-type UnreadableShare = {
-    shareId: Hex;
-    header: ShareHeader;
-    reason: string;
-};
-/** Shares read from their events, and those that could not be; each share is on its own. */
-type PostedShares = {
-    posted: PostedShare[];
-    unreadable: UnreadableShare[];
-};
-/**
- * Fetches the `Shared` events of shares from the blocks their headers name: one single-block
- * `getLogs` per distinct block, filtered by registry and share ids, so any node answers it. Returns
- * the shares in the order given; where a block holds several events for one share id, the last.
- * Never fails as a whole: a share whose block the node cannot serve yet, whose event is missing
- * from it, or whose event payload does not hash to its id is returned as `unreadable`, with the
- * reason, and the rest are posted as usual.
- */
-declare const readPostedShares: (publicClient: PublicClient, registry: Address, headers: readonly {
-    shareId: Hex;
-    header: ShareHeader;
-}[]) => Promise<PostedShares>;
-/**
- * The importable shares addressed to `recipient` (unexpired, not revoked), read from their events;
- * those whose event could not be read are listed apart, so one of them never hides the rest.
- */
-declare const readSharesFor: (publicClient: PublicClient, registry: Address, recipient: Address) => Promise<PostedShares>;
-/**
- * One share by id, read from its event; null when the registry has no such share (unknown or
- * removed). Throws, with the reason, when the registry lists it but its event could not be read.
- */
-declare const readShare: (publicClient: PublicClient, registry: Address, shareId: Hex) => Promise<PostedShare | null>;
-
 /**
  * Byte layout of a share metadata blob, version 3. Integers are big-endian; sizes in bytes.
  *
@@ -1056,4 +702,4 @@ declare const acpStore: {
     resetStore: () => void;
 };
 
-export { ACP, ACPPublic, ACPSignaturePrimaryType, ACP_REVOKER_ABI, ACP_SHARE_REGISTRY_ABI, ACP_SHARE_TUPLE_ABI, ACP_STORE_DEFAULTS, type ChainShare, type DecodedShareMetadata, EIP712Message, EIP712Types, ERC7984_ABI, type EventValueDescription, EventValueLabel, ImportACPOptionsValidator, ImportACPValidator, LabelledShare, type PostedShare, type PostedShares, LAYOUT_VERSION as SHARE_METADATA_VERSION, SelfACPOptionsValidator, SelfACPValidator, SerializedACP, type ShareHeader, ShareLabel, type ShareLabelAbis, type ShareLabelArg, type ShareLabelDescription, type ShareLabelParam, SharingACPOptionsValidator, SharingACPValidator, SignatureTypes, SignatureUtils, type StoredValueDescription, StoredValueLabel, UNLABELLED, type UnlabelledDescription, type UnreadableShare, ValidationResult, ValidationUtils, type ViewFunctionLabelOptions, _acpStore, acpStore, addressNotZeroSchema, addressSchema, bytesNotEmptySchema, bytesSchema, clearStaleStore, computeShareId, contractsSchema, decodeShareAppKey, decodeShareMetadata, decodeShareMetadataFull, describeShareLabels, describeShareMetadata, encodeShareMetadata, eventLogLabel, getACP, getACPs, getActiveACP, getActiveACPHash, getSignatureTypesAndMessage, handlesSchema, readPostedShares, readShare, readSharesFor, removeACP, removeActiveACPHash, resetStore, setACP, setActiveACPHash, shareAppKey, shareIdOfChainShare, toChainShare, validateImportACP, validateImportACPOptions, validateSelfACP, validateSelfACPOptions, validateSharingACP, validateSharingACPOptions, viewFunctionLabel };
+export { ACP, ACPPublic, ACPSignaturePrimaryType, ACP_STORE_DEFAULTS, type DecodedShareMetadata, EIP712Message, EIP712Types, ERC7984_ABI, type EventValueDescription, EventValueLabel, ImportACPOptionsValidator, ImportACPValidator, LabelledShare, LAYOUT_VERSION as SHARE_METADATA_VERSION, SelfACPOptionsValidator, SelfACPValidator, SerializedACP, ShareLabel, type ShareLabelAbis, type ShareLabelArg, type ShareLabelDescription, type ShareLabelParam, SharingACPOptionsValidator, SharingACPValidator, SignatureTypes, SignatureUtils, type StoredValueDescription, StoredValueLabel, UNLABELLED, type UnlabelledDescription, ValidationResult, ValidationUtils, type ViewFunctionLabelOptions, _acpStore, acpStore, addressNotZeroSchema, addressSchema, bytesNotEmptySchema, bytesSchema, clearStaleStore, contractsSchema, decodeShareAppKey, decodeShareMetadata, decodeShareMetadataFull, describeShareLabels, describeShareMetadata, encodeShareMetadata, eventLogLabel, getACP, getACPs, getActiveACP, getActiveACPHash, getSignatureTypesAndMessage, handlesSchema, removeACP, removeActiveACPHash, resetStore, setACP, setActiveACPHash, shareAppKey, validateImportACP, validateImportACPOptions, validateSelfACP, validateSelfACPOptions, validateSharingACP, validateSharingACPOptions, viewFunctionLabel };

package/dist/acps.js

@@ -1,2 +1,2 @@
-export { ACPScope, ACPUtils, ACP_REVOKER_ABI, ACP_SHARE_REGISTRY_ABI, ACP_SHARE_TUPLE_ABI, ACP_STORE_DEFAULTS, ERC7984_ABI, GenerateSealingKey, ImportACPOptionsValidator, ImportACPValidator, LAYOUT_VERSION as SHARE_METADATA_VERSION, SelfACPOptionsValidator, SelfACPValidator, SharingACPOptionsValidator, SharingACPValidator, SignatureTypes, SignatureUtils, UNLABELLED, ValidationUtils, _acpStore, acpStore, addressNotZeroSchema, addressSchema, bytesNotEmptySchema, bytesSchema, clearAclServedAddresses, clearStaleStore, computeShareId, contractsSchema, decodeShareAppKey, decodeShareMetadata, decodeShareMetadataFull, describeShareLabels, describeShareMetadata, encodeShareMetadata, eventLogLabel, getACP, getACPs, getAclAddress, getAclServedAddresses, getActiveACP, getActiveACPHash, getSignatureTypesAndMessage, handlesSchema, readPostedShares, readShare, readSharesFor, removeACP, removeActiveACPHash, resetStore, seal, setACP, setActiveACPHash, shareAppKey, shareIdOfChainShare, toChainShare, unsealWithPrivateKey, validateImportACP, validateImportACPOptions, validateSelfACP, validateSelfACPOptions, validateSharingACP, validateSharingACPOptions, verifyShareLabel, verifyShareLabels, viewFunctionLabel } from './chunk-BQWHPIYU.js';
-import './chunk-XQ32JG3T.js';
+export { ACPScope, ACPUtils, ACP_REVOKER_ABI, ACP_SHARE_REGISTRY_ABI, ACP_SHARE_TUPLE_ABI, ACP_STORE_DEFAULTS, ERC7984_ABI, GenerateSealingKey, ImportACPOptionsValidator, ImportACPValidator, LAYOUT_VERSION as SHARE_METADATA_VERSION, SelfACPOptionsValidator, SelfACPValidator, SharingACPOptionsValidator, SharingACPValidator, SignatureTypes, SignatureUtils, UNLABELLED, ValidationUtils, _acpStore, acpStore, addressNotZeroSchema, addressSchema, bytesNotEmptySchema, bytesSchema, clearAclServedAddresses, clearStaleStore, computeShareId, contractsSchema, decodeShareAppKey, decodeShareMetadata, decodeShareMetadataFull, describeShareLabels, describeShareMetadata, encodeShareMetadata, eventLogLabel, getACP, getACPs, getAclAddress, getAclServedAddresses, getActiveACP, getActiveACPHash, getSignatureTypesAndMessage, handlesSchema, readPostedShares, readShare, readSharesFor, removeACP, removeActiveACPHash, resetStore, seal, setACP, setActiveACPHash, shareAppKey, shareIdOfChainShare, toChainShare, unsealWithPrivateKey, validateImportACP, validateImportACPOptions, validateSelfACP, validateSelfACPOptions, validateSharingACP, validateSharingACPOptions, verifyShareLabel, verifyShareLabels, viewFunctionLabel } from './chunk-3L2IVPMI.js';
+import './chunk-J23FYAI2.js';

package/dist/{chunk-OL3DZN7A.js → chunk-2EO4JSR7.js}

@@ -1,7 +1,7 @@
 import { hardhat as hardhat$1 } from './chunk-UKQAJK4N.js';
-import { acpStore, clearAclServedAddresses, getAclServedAddresses, computeShareId, ACPUtils, getTaskManagerAddress, verifyShareLabels, decodeShareMetadata, shareAppKey, ACP_SHARE_REGISTRY_ABI, readShare, readSharesFor, toChainShare, ACP_REVOKER_ABI, decodeShareAppKey, encodeShareMetadata } from './chunk-BQWHPIYU.js';
-import { sleep, getPublicClientChainID, getWalletClientAccount, validateBigIntInRange, toBigIntOrThrow, hexToBytes, toHexString, FheUintUTypes } from './chunk-6ZW76ZKB.js';
-import { TFHE_RS_KEY_VERSION, CofheError, TFHE_RS_ZK_MAX_BITS, TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT, MOCKS_THRESHOLD_NETWORK_ADDRESS, MOCKS_DECRYPT_RESULT_SIGNER_PRIVATE_KEY, MOCKS_ZK_VERIFIER_SIGNER_PRIVATE_KEY, MOCKS_ZK_VERIFIER_ADDRESS } from './chunk-XQ32JG3T.js';
+import { acpStore, clearAclServedAddresses, getAclServedAddresses, computeShareId, ACP_SHARE_REGISTRY_ABI, ACPUtils, getTaskManagerAddress, verifyShareLabels, decodeShareMetadata, shareAppKey, readShare, readSharesFor, toChainShare, ACP_REVOKER_ABI, decodeShareAppKey, encodeShareMetadata } from './chunk-3L2IVPMI.js';
+import { sleep, getPublicClientChainID, getWalletClientAccount, validateBigIntInRange, toBigIntOrThrow, hexToBytes, toHexString, FheUintUTypes } from './chunk-WJGTPW7K.js';
+import { TFHE_RS_KEY_VERSION, CofheError, TFHE_RS_ZK_MAX_BITS, TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT, MOCKS_THRESHOLD_NETWORK_ADDRESS, MOCKS_DECRYPT_RESULT_SIGNER_PRIVATE_KEY, MOCKS_ZK_VERIFIER_SIGNER_PRIVATE_KEY, MOCKS_ZK_VERIFIER_ADDRESS } from './chunk-J23FYAI2.js';
 import { createStore } from 'zustand/vanilla';
 import { parseAbi, isAddressEqual, zeroAddress, recoverAddress, encodePacked, keccak256, createWalletClient, http, getAddress, parseSignature, serializeSignature } from 'viem';
 import { hardhat } from 'viem/chains';
@@ -1409,23 +1409,25 @@ var getBlockRevokerData = async (publicClient) => {
   }
   return revokerData;
 };
-var revokeACP = async (acp, walletClient) => {
+var prepareRevokeACP = (acp) => {
   if (acp.revokerContract === zeroAddress || acp.revokerData === 0) {
     throw new Error("ACP is not revocable: it has no revoker (revokerContract/revokerData unset)");
   }
+  return {
+    address: acp.revokerContract,
+    abi: ACP_REVOKER_ABI,
+    functionName: "revokeSingle",
+    args: [BigInt(acp.revokerData)]
+  };
+};
+var revokeACP = async (acp, walletClient) => {
+  const write = prepareRevokeACP(acp);
   if (walletClient.account == null)
     throw new Error("Missing walletClient account");
   if (walletClient.account.address.toLowerCase() !== acp.issuer.toLowerCase()) {
     throw new Error("Only the acp issuer can revoke it");
   }
-  return walletClient.writeContract({
-    address: acp.revokerContract,
-    abi: ACP_REVOKER_ABI,
-    functionName: "revokeSingle",
-    args: [BigInt(acp.revokerData)],
-    account: walletClient.account,
-    chain: walletClient.chain
-  });
+  return walletClient.writeContract({ ...write, account: walletClient.account, chain: walletClient.chain });
 };
 var revokeAllACPs = async (walletClient, publicClient, revokerContract) => {
   if (walletClient.account == null)
@@ -1476,28 +1478,36 @@ var metadataOf = (acp, { labels, metadata, appKey }) => {
   }
   return encodeShareMetadata(labels, { issuer: acp.issuer, appKey });
 };
-var shareOnChain = async (acp, walletClient, registry, options = {}) => {
+var prepareShareOnChain = (acp, registry, options = {}) => {
   if (acp.type !== "sharing") {
     throw new Error(`Cannot share a '${acp.type}' ACP on-chain \u2014 only 'sharing' ACPs are shareable.`);
   }
   if (acp.issuerSignature === "0x") {
     throw new Error("Cannot share an unsigned sharing ACP \u2014 sign it first.");
   }
+  return {
+    write: {
+      address: registry,
+      abi: ACP_SHARE_REGISTRY_ABI,
+      functionName: "share",
+      args: [toChainShare(acp), metadataOf(acp, options)]
+    },
+    shareId: computeShareId(acp)
+  };
+};
+var shareOnChain = async (acp, walletClient, registry, options = {}) => {
+  const { write, shareId } = prepareShareOnChain(acp, registry, options);
   if (walletClient.account == null)
     throw new Error("Missing walletClient account");
   if (walletClient.account.address.toLowerCase() !== acp.issuer.toLowerCase()) {
     throw new Error("Only the ACP issuer can share it on-chain");
   }
-  const metadata = metadataOf(acp, options);
   const txHash = await walletClient.writeContract({
-    address: registry,
-    abi: ACP_SHARE_REGISTRY_ABI,
-    functionName: "share",
-    args: [toChainShare(acp), metadata],
+    ...write,
     account: walletClient.account,
     chain: walletClient.chain ?? null
   });
-  return { txHash, shareId: computeShareId(acp) };
+  return { txHash, shareId };
 };
 var toIncomingShare = ({ shareId, share: s, metadata }) => ({
   shareId,
@@ -1532,14 +1542,17 @@ var importFromChain = async (share, publicClient, walletClient, importOptions =
   const { shareId: _shareId, appKey: _appKey, ...options } = share;
   return importShared({ ...options, type: "sharing" }, publicClient, walletClient, importOptions);
 };
+var prepareRemoveShare = (shareId, registry) => ({
+  address: registry,
+  abi: ACP_SHARE_REGISTRY_ABI,
+  functionName: "removeShare",
+  args: [shareId]
+});
 var removeShareOnChain = async (shareId, walletClient, registry) => {
   if (walletClient.account == null)
     throw new Error("Missing walletClient account");
   return walletClient.writeContract({
-    address: registry,
-    abi: ACP_SHARE_REGISTRY_ABI,
-    functionName: "removeShare",
-    args: [shareId],
+    ...prepareRemoveShare(shareId, registry),
     account: walletClient.account,
     chain: walletClient.chain ?? null
   });
@@ -1566,14 +1579,17 @@ var acps = {
   selectActiveACP,
   removeActiveACP,
   revokeACP,
+  prepareRevokeACP,
   revokeAllACPs,
   isACPRevoked,
   checkAccess,
   shareOnChain,
+  prepareShareOnChain,
   getIncomingShares,
   getShareFromChain,
   importFromChain,
   removeShareOnChain,
+  prepareRemoveShare,
   computeShareId,
   applyACPDefaultsFromChain,
   getAclServedAddresses,
@@ -3356,6 +3372,12 @@ function createCofheClientBase(opts) {
       });
     }
   };
+  const _requireIssuer = (acp, what) => {
+    const sender = connectStore.getState().walletClient?.account?.address;
+    if (sender == null || sender.toLowerCase() !== acp.issuer.toLowerCase()) {
+      throw new Error(`Only the acp issuer can ${what}`);
+    }
+  };
   async function connect(publicClient, walletClient) {
     const state = connectStore.getState();
     if (state.connected && state.publicClient === publicClient && state.walletClient === walletClient)
@@ -3523,6 +3545,11 @@ function createCofheClientBase(opts) {
       const { walletClient } = connectStore.getState();
       return acps.revokeACP(acp, walletClient);
     },
+    prepareRevokeACP: (acp) => {
+      _requireConnected();
+      _requireIssuer(acp, "revoke it");
+      return acps.prepareRevokeACP(acp);
+    },
     revokeAllACPs: async (revokerContract) => {
       _requireConnected();
       const { publicClient, walletClient } = connectStore.getState();
@@ -3546,6 +3573,21 @@ function createCofheClientBase(opts) {
       const sharingRegistry = await _resolveSharingRegistry(publicClient, chainId);
       return acps.shareOnChain(acp, walletClient, sharingRegistry, { ...withAppKey(), ...options });
     },
+    prepareShareOnChain: async (acp, options) => {
+      _requireConnected();
+      _requireIssuer(acp, "share it on-chain");
+      const { publicClient } = connectStore.getState();
+      const chainId = await publicClient.getChainId();
+      const sharingRegistry = await _resolveSharingRegistry(publicClient, chainId);
+      return acps.prepareShareOnChain(acp, sharingRegistry, { ...withAppKey(), ...options });
+    },
+    prepareRemoveShare: async (shareId) => {
+      _requireConnected();
+      const { publicClient } = connectStore.getState();
+      const chainId = await publicClient.getChainId();
+      const sharingRegistry = await _resolveSharingRegistry(publicClient, chainId);
+      return acps.prepareRemoveShare(shareId, sharingRegistry);
+    },
     getIncomingShares: async () => {
       _requireConnected();
       const { publicClient, walletClient } = connectStore.getState();

package/dist/{chunk-BQWHPIYU.js → chunk-3L2IVPMI.js}

@@ -1,4 +1,4 @@
-import { TASK_MANAGER_ID, COFHE_ADDRESS_BOOK_ADDRESS, CofheError } from './chunk-XQ32JG3T.js';
+import { CofheError, TASK_MANAGER_ID, COFHE_ADDRESS_BOOK_ADDRESS } from './chunk-J23FYAI2.js';
 import { isAddress, getAddress, zeroAddress, isHex, parseAbi, keccak256, padHex, numberToHex, concatHex, toFunctionSelector, size, sliceHex, toHex, encodeAbiParameters, hexToBigInt, stringToHex, hexToNumber, toEventSignature, toFunctionSignature, decodeErrorResult, toEventSelector, decodeAbiParameters } from 'viem';
 import nacl from 'tweetnacl';
 import { z } from 'zod';
@@ -86,9 +86,25 @@ var unsealWithPrivateKey = (privateKey, parsedData) => {
   const nonce = parsedData.nonce instanceof Uint8Array ? parsedData.nonce : new Uint8Array(parsedData.nonce);
   const ephemPublicKey = parsedData.public_key instanceof Uint8Array ? parsedData.public_key : new Uint8Array(parsedData.public_key);
   const dataToDecrypt = parsedData.data instanceof Uint8Array ? parsedData.data : new Uint8Array(parsedData.data);
-  const decryptedMessage = nacl.box.open(dataToDecrypt, nonce, ephemPublicKey, fromHexString(privateKey));
+  let decryptedMessage;
+  let cause;
+  try {
+    decryptedMessage = nacl.box.open(dataToDecrypt, nonce, ephemPublicKey, fromHexString(privateKey));
+  } catch (e) {
+    decryptedMessage = null;
+    cause = e instanceof Error ? e : void 0;
+  }
   if (!decryptedMessage) {
-    throw new Error("Failed to decrypt message");
+    throw new CofheError({
+      code: "SEAL_OUTPUT_FAILED" /* SealOutputFailed */,
+      message: "Failed to unseal decrypt response",
+      cause,
+      context: {
+        dataLength: dataToDecrypt.length,
+        nonceLength: nonce.length,
+        publicKeyLength: ephemPublicKey.length
+      }
+    });
   }
   return toBigInt(decryptedMessage);
 };
@@ -705,15 +721,22 @@ var getAclServedAddresses = async (publicClient, chainId) => {
   } catch {
     return {};
   }
+  let transient = false;
+  const readServedAddress = (functionName) => publicClient.readContract({ address: aclAddress, abi: ACL_SERVED_ADDRESSES_ABI, functionName }).catch((err) => {
+    if (revertErrorName(err, ACL_SERVED_ADDRESSES_ABI) === void 0)
+      transient = true;
+    return void 0;
+  });
   const [defaultRevoker, shareRegistry] = await Promise.all([
-    publicClient.readContract({ address: aclAddress, abi: ACL_SERVED_ADDRESSES_ABI, functionName: "defaultRevokerContract" }).catch(() => void 0),
-    publicClient.readContract({ address: aclAddress, abi: ACL_SERVED_ADDRESSES_ABI, functionName: "shareRegistry" }).catch(() => void 0)
+    readServedAddress("defaultRevokerContract"),
+    readServedAddress("shareRegistry")
   ]);
   const resolved = {
     defaultRevoker: defaultRevoker != null && defaultRevoker !== zeroAddress ? defaultRevoker : void 0,
     shareRegistry: shareRegistry != null && shareRegistry !== zeroAddress ? shareRegistry : void 0
   };
-  aclServedAddressesCache.set(chainId, resolved);
+  if (!transient)
+    aclServedAddressesCache.set(chainId, resolved);
   return resolved;
 };
 

package/dist/{chunk-6ZW76ZKB.js → chunk-WJGTPW7K.js}

@@ -1,4 +1,4 @@
-import { CofheError } from './chunk-XQ32JG3T.js';
+import { CofheError } from './chunk-J23FYAI2.js';
 import 'viem';
 
 // core/types.ts