@cofhe/sdk 1.0.0 → 1.1.0-alpha.0

package/dist/{clientTypes-IO6b5Um8.d.cts → clientTypes-RXwLVWou.d.cts}

@@ -1,7 +1,7 @@
-import { WalletClient, PublicClient, Hex } from 'viem';
+import { WalletClient, PublicClient, Hex, ContractFunctionParameters } from 'viem';
 import { C as CofheChain } from './types-C07FK-cL.cjs';
 import { z } from 'zod';
-import { A as ACP, k as EIP712Domain, C as CreateSelfACPOptions, J as SelfACP, g as CreateSharingACPOptions, K as SharingACP, I as ImportSharedACPOptions, R as RecipientACP, P as ACPHashFields, f as SerializedACP, O as ACPAccessStatus, S as ShareLabel, j as IncomingShare, p as AclServedAddresses, L as LabelledShare, w as ShareLabelVerifyMode, x as ShareLabelCheck, l as ACPUtils } from './onchain-utils-CgOslubH.cjs';
+import { A as ACP, k as EIP712Domain, C as CreateSelfACPOptions, $ as SelfACP, g as CreateSharingACPOptions, a0 as SharingACP, I as ImportSharedACPOptions, a1 as RecipientACP, a5 as ACPHashFields, f as SerializedACP, t as ACP_REVOKER_ABI, a4 as ACPAccessStatus, S as ShareLabel, v as ACP_SHARE_REGISTRY_ABI, j as IncomingShare, p as AclServedAddresses, L as LabelledShare, Q as ShareLabelVerifyMode, R as ShareLabelCheck, l as ACPUtils } from './onchain-utils-Ns56cBm0.cjs';
 import { StoreApi } from 'zustand/vanilla';
 
 type TfheInitializer = () => Promise<boolean>;
@@ -1031,6 +1031,21 @@ type ImportSharedOptions = ImportActivationOptions & {
      */
     name?: string;
 };
+/**
+ * Revoke a single acp on-chain via its revoker contract.
+ * Only the acp's issuer can revoke it (enforced by the revoker: revocations
+ * are keyed by msg.sender). The acp stays in local storage — on-chain
+ * validation will reject it from the next block onwards.
+ *
+ * @returns the revocation transaction hash
+ */
+/**
+ * A registry or revoker write built but not sent: what a simulation or `writeContract` takes,
+ * minus the sender. For a caller that sends through its own path (simulate first, record the
+ * transaction) instead of the plain `writeContract` the senders below do.
+ */
+type ShareRegistryWrite<functionName extends 'share' | 'removeShare'> = ContractFunctionParameters<typeof ACP_SHARE_REGISTRY_ABI, 'nonpayable', functionName>;
+type RevokerWrite = ContractFunctionParameters<typeof ACP_REVOKER_ABI, 'nonpayable', 'revokeSingle'>;
 /**
  * What `shareOnChain` posts with a share: the labels of its handles (one per handle, in order;
  * encoded with `encodeShareMetadata`), or an already encoded metadata blob. Written once, with the
@@ -1191,6 +1206,7 @@ declare const acps: {
     selectActiveACP: (chainId: number, account: string, hash: string) => void;
     removeActiveACP: (chainId: number, account: string) => Promise<void>;
     revokeACP: (acp: ACP, walletClient: WalletClient) => Promise<Hex>;
+    prepareRevokeACP: (acp: ACP) => RevokerWrite;
     revokeAllACPs: (walletClient: WalletClient, publicClient: PublicClient, revokerContract?: Hex) => Promise<Hex>;
     isACPRevoked: (acp: ACP, publicClient: PublicClient) => Promise<boolean>;
     checkAccess: (acp: ACP, publicClient: PublicClient, handle?: bigint | Hex) => Promise<ACPAccessStatus>;
@@ -1198,12 +1214,17 @@ declare const acps: {
         txHash: Hex;
         shareId: Hex;
     }>;
+    prepareShareOnChain: (acp: ACP, registry: Hex, options?: ShareOnChainOptions) => {
+        write: ShareRegistryWrite<"share">;
+        shareId: Hex;
+    };
     getIncomingShares: (publicClient: PublicClient, registry: Hex, recipient: Hex, { appKey }?: {
         appKey?: Hex;
     }) => Promise<IncomingShare[]>;
     getShareFromChain: (publicClient: PublicClient, registry: Hex, shareId: Hex) => Promise<IncomingShare | null>;
     importFromChain: (share: IncomingShare, publicClient: PublicClient, walletClient: WalletClient, importOptions?: ImportSharedOptions) => Promise<RecipientACP>;
     removeShareOnChain: (shareId: Hex, walletClient: WalletClient, registry: Hex) => Promise<Hex>;
+    prepareRemoveShare: (shareId: Hex, registry: Hex) => ShareRegistryWrite<"removeShare">;
     computeShareId: (acp: ACP) => Hex;
     applyACPDefaultsFromChain: <T extends {
         revokerData?: number;
@@ -1286,6 +1307,11 @@ type CofheClientACPs = {
     removeACP: (hash: string, chainId?: number, account?: string) => void;
     removeActiveACP: (chainId?: number, account?: string) => void;
     revokeACP: (acp: ACP) => Promise<`0x${string}`>;
+    /**
+     * The revoker write `revokeACP` sends, built but not sent — for an app that sends through its own
+     * path (a simulation first, a transaction store). Issuer only; throws for an acp without a revoker.
+     */
+    prepareRevokeACP: (acp: ACP) => RevokerWrite;
     revokeAllACPs: (revokerContract?: `0x${string}`) => Promise<`0x${string}`>;
     isACPRevoked: (acp: ACP) => Promise<boolean>;
     /**
@@ -1303,6 +1329,16 @@ type CofheClientACPs = {
         txHash: `0x${string}`;
         shareId: `0x${string}`;
     }>;
+    /**
+     * The registry write `shareOnChain` sends and the share id it gets, built but not sent — for an
+     * app that sends through its own path (a simulation first, a transaction store). Issuer only.
+     */
+    prepareShareOnChain: (acp: ACP, options?: ShareOnChainOptions) => Promise<{
+        write: ShareRegistryWrite<'share'>;
+        shareId: `0x${string}`;
+    }>;
+    /** The registry write `dismissShare` / `cancelShare` sends, built but not sent. */
+    prepareRemoveShare: (shareId: `0x${string}`) => Promise<ShareRegistryWrite<'removeShare'>>;
     /** Importable shares addressed to the connected account (unexpired, not revoked), with their metadata. */
     getIncomingShares: () => Promise<IncomingShare[]>;
     /** One share by id, as posted; null when unknown or removed. */

package/dist/core.cjs

@@ -3464,23 +3464,25 @@ var getBlockRevokerData = async (publicClient) => {
   }
   return revokerData;
 };
-var revokeACP = async (acp, walletClient) => {
+var prepareRevokeACP = (acp) => {
   if (acp.revokerContract === viem.zeroAddress || acp.revokerData === 0) {
     throw new Error("ACP is not revocable: it has no revoker (revokerContract/revokerData unset)");
   }
+  return {
+    address: acp.revokerContract,
+    abi: ACP_REVOKER_ABI,
+    functionName: "revokeSingle",
+    args: [BigInt(acp.revokerData)]
+  };
+};
+var revokeACP = async (acp, walletClient) => {
+  const write = prepareRevokeACP(acp);
   if (walletClient.account == null)
     throw new Error("Missing walletClient account");
   if (walletClient.account.address.toLowerCase() !== acp.issuer.toLowerCase()) {
     throw new Error("Only the acp issuer can revoke it");
   }
-  return walletClient.writeContract({
-    address: acp.revokerContract,
-    abi: ACP_REVOKER_ABI,
-    functionName: "revokeSingle",
-    args: [BigInt(acp.revokerData)],
-    account: walletClient.account,
-    chain: walletClient.chain
-  });
+  return walletClient.writeContract({ ...write, account: walletClient.account, chain: walletClient.chain });
 };
 var revokeAllACPs = async (walletClient, publicClient, revokerContract) => {
   if (walletClient.account == null)
@@ -3531,28 +3533,36 @@ var metadataOf = (acp, { labels, metadata, appKey }) => {
   }
   return encodeShareMetadata(labels, { issuer: acp.issuer, appKey });
 };
-var shareOnChain = async (acp, walletClient, registry, options = {}) => {
+var prepareShareOnChain = (acp, registry, options = {}) => {
   if (acp.type !== "sharing") {
     throw new Error(`Cannot share a '${acp.type}' ACP on-chain \u2014 only 'sharing' ACPs are shareable.`);
   }
   if (acp.issuerSignature === "0x") {
     throw new Error("Cannot share an unsigned sharing ACP \u2014 sign it first.");
   }
+  return {
+    write: {
+      address: registry,
+      abi: ACP_SHARE_REGISTRY_ABI,
+      functionName: "share",
+      args: [toChainShare(acp), metadataOf(acp, options)]
+    },
+    shareId: computeShareId(acp)
+  };
+};
+var shareOnChain = async (acp, walletClient, registry, options = {}) => {
+  const { write, shareId } = prepareShareOnChain(acp, registry, options);
   if (walletClient.account == null)
     throw new Error("Missing walletClient account");
   if (walletClient.account.address.toLowerCase() !== acp.issuer.toLowerCase()) {
     throw new Error("Only the ACP issuer can share it on-chain");
   }
-  const metadata = metadataOf(acp, options);
   const txHash = await walletClient.writeContract({
-    address: registry,
-    abi: ACP_SHARE_REGISTRY_ABI,
-    functionName: "share",
-    args: [toChainShare(acp), metadata],
+    ...write,
     account: walletClient.account,
     chain: walletClient.chain ?? null
   });
-  return { txHash, shareId: computeShareId(acp) };
+  return { txHash, shareId };
 };
 var toIncomingShare = ({ shareId, share: s, metadata }) => ({
   shareId,
@@ -3587,14 +3597,17 @@ var importFromChain = async (share, publicClient, walletClient, importOptions =
   const { shareId: _shareId, appKey: _appKey, ...options } = share;
   return importShared({ ...options, type: "sharing" }, publicClient, walletClient, importOptions);
 };
+var prepareRemoveShare = (shareId, registry) => ({
+  address: registry,
+  abi: ACP_SHARE_REGISTRY_ABI,
+  functionName: "removeShare",
+  args: [shareId]
+});
 var removeShareOnChain = async (shareId, walletClient, registry) => {
   if (walletClient.account == null)
     throw new Error("Missing walletClient account");
   return walletClient.writeContract({
-    address: registry,
-    abi: ACP_SHARE_REGISTRY_ABI,
-    functionName: "removeShare",
-    args: [shareId],
+    ...prepareRemoveShare(shareId, registry),
     account: walletClient.account,
     chain: walletClient.chain ?? null
   });
@@ -3621,14 +3634,17 @@ var acps = {
   selectActiveACP,
   removeActiveACP,
   revokeACP,
+  prepareRevokeACP,
   revokeAllACPs,
   isACPRevoked,
   checkAccess,
   shareOnChain,
+  prepareShareOnChain,
   getIncomingShares,
   getShareFromChain,
   importFromChain,
   removeShareOnChain,
+  prepareRemoveShare,
   computeShareId,
   applyACPDefaultsFromChain,
   getAclServedAddresses,
@@ -5411,6 +5427,12 @@ function createCofheClientBase(opts) {
       });
     }
   };
+  const _requireIssuer = (acp, what) => {
+    const sender = connectStore.getState().walletClient?.account?.address;
+    if (sender == null || sender.toLowerCase() !== acp.issuer.toLowerCase()) {
+      throw new Error(`Only the acp issuer can ${what}`);
+    }
+  };
   async function connect(publicClient, walletClient) {
     const state = connectStore.getState();
     if (state.connected && state.publicClient === publicClient && state.walletClient === walletClient)
@@ -5578,6 +5600,11 @@ function createCofheClientBase(opts) {
       const { walletClient } = connectStore.getState();
       return acps.revokeACP(acp, walletClient);
     },
+    prepareRevokeACP: (acp) => {
+      _requireConnected();
+      _requireIssuer(acp, "revoke it");
+      return acps.prepareRevokeACP(acp);
+    },
     revokeAllACPs: async (revokerContract) => {
       _requireConnected();
       const { publicClient, walletClient } = connectStore.getState();
@@ -5601,6 +5628,21 @@ function createCofheClientBase(opts) {
       const sharingRegistry = await _resolveSharingRegistry(publicClient, chainId);
       return acps.shareOnChain(acp, walletClient, sharingRegistry, { ...withAppKey(), ...options });
     },
+    prepareShareOnChain: async (acp, options) => {
+      _requireConnected();
+      _requireIssuer(acp, "share it on-chain");
+      const { publicClient } = connectStore.getState();
+      const chainId = await publicClient.getChainId();
+      const sharingRegistry = await _resolveSharingRegistry(publicClient, chainId);
+      return acps.prepareShareOnChain(acp, sharingRegistry, { ...withAppKey(), ...options });
+    },
+    prepareRemoveShare: async (shareId) => {
+      _requireConnected();
+      const { publicClient } = connectStore.getState();
+      const chainId = await publicClient.getChainId();
+      const sharingRegistry = await _resolveSharingRegistry(publicClient, chainId);
+      return acps.prepareRemoveShare(shareId, sharingRegistry);
+    },
     getIncomingShares: async () => {
       _requireConnected();
       const { publicClient, walletClient } = connectStore.getState();

package/dist/core.d.cts

@@ -1,9 +1,9 @@
-import { a as CofheConfig, c as CofheClientParams, b as CofheClient, d as CofheClientConnectionState, F as FheTypes } from './clientTypes-IO6b5Um8.cjs';
-export { A as AnyExternalHash, i as CofheClientACPs, C as CofheInputConfig, h as CofheInternalConfig, K as DecryptEndpoint, a4 as DecryptForTxBuilder, a5 as DecryptForTxResult, a3 as DecryptForViewBuilder, J as DecryptPollCallbackContext, G as DecryptPollCallbackFunction, a1 as EncryptInputsBuilder, a2 as EncryptInputsBuilderUnset, M as EncryptSetStateFn, W as EncryptStep, N as EncryptStepCallbackContext, S as Encryptable, p as EncryptableAddress, j as EncryptableBool, E as EncryptableItem, B as EncryptableToExternalHashMap, o as EncryptableUint128, l as EncryptableUint16, m as EncryptableUint32, n as EncryptableUint64, k as EncryptableUint8, q as EncryptedNumber, y as ExternalAddressHash, s as ExternalBoolHash, z as ExternalHashProof, D as ExternalItemHashes, x as ExternalUint128Hash, u as ExternalUint16Hash, v as ExternalUint32Hash, w as ExternalUint64Hash, t as ExternalUint8Hash, R as FheAllUTypes, Z as FheKeyDeserializer, r as FheTypeValue, Q as FheUintUTypes, H as HashPlusProofResult, I as IStorage, $ as KeysStorage, a0 as KeysStore, L as LiteralToPrimitive, P as Primitive, T as TfheInitializer, O as TfheThreadsSetting, U as UnsealedItem, a6 as ZkBuilderAndCrsGenerator, a7 as ZkProveWorkerFunction, a8 as ZkProveWorkerRequest, a9 as ZkProveWorkerResponse, f as assertNoRenamedConfigKeys, e as createCofheConfigBase, _ as createKeysStore, Y as fetchKeys, g as getCofheConfigItem, V as isEncryptableItem, X as isLastEncryptionStep, aa as zkProveWithWorker } from './clientTypes-IO6b5Um8.cjs';
+import { a as CofheConfig, c as CofheClientParams, b as CofheClient, d as CofheClientConnectionState, F as FheTypes } from './clientTypes-RXwLVWou.cjs';
+export { A as AnyExternalHash, i as CofheClientACPs, C as CofheInputConfig, h as CofheInternalConfig, K as DecryptEndpoint, a4 as DecryptForTxBuilder, a5 as DecryptForTxResult, a3 as DecryptForViewBuilder, J as DecryptPollCallbackContext, G as DecryptPollCallbackFunction, a1 as EncryptInputsBuilder, a2 as EncryptInputsBuilderUnset, M as EncryptSetStateFn, W as EncryptStep, N as EncryptStepCallbackContext, S as Encryptable, p as EncryptableAddress, j as EncryptableBool, E as EncryptableItem, B as EncryptableToExternalHashMap, o as EncryptableUint128, l as EncryptableUint16, m as EncryptableUint32, n as EncryptableUint64, k as EncryptableUint8, q as EncryptedNumber, y as ExternalAddressHash, s as ExternalBoolHash, z as ExternalHashProof, D as ExternalItemHashes, x as ExternalUint128Hash, u as ExternalUint16Hash, v as ExternalUint32Hash, w as ExternalUint64Hash, t as ExternalUint8Hash, R as FheAllUTypes, Z as FheKeyDeserializer, r as FheTypeValue, Q as FheUintUTypes, H as HashPlusProofResult, I as IStorage, $ as KeysStorage, a0 as KeysStore, L as LiteralToPrimitive, P as Primitive, T as TfheInitializer, O as TfheThreadsSetting, U as UnsealedItem, a6 as ZkBuilderAndCrsGenerator, a7 as ZkProveWorkerFunction, a8 as ZkProveWorkerRequest, a9 as ZkProveWorkerResponse, f as assertNoRenamedConfigKeys, e as createCofheConfigBase, _ as createKeysStore, Y as fetchKeys, g as getCofheConfigItem, V as isEncryptableItem, X as isLastEncryptionStep, aa as zkProveWithWorker } from './clientTypes-RXwLVWou.cjs';
 import { PublicClient, Address, Hex } from 'viem';
 import './types-C07FK-cL.cjs';
 import 'zod';
-import './onchain-utils-CgOslubH.cjs';
+import './onchain-utils-Ns56cBm0.cjs';
 import 'zustand/vanilla';
 
 declare const InitialConnectStore: CofheClientConnectionState;

package/dist/core.d.ts

@@ -1,9 +1,9 @@
-import { a as CofheConfig, c as CofheClientParams, b as CofheClient, d as CofheClientConnectionState, F as FheTypes } from './clientTypes-b1pOxOUE.js';
-export { A as AnyExternalHash, i as CofheClientACPs, C as CofheInputConfig, h as CofheInternalConfig, K as DecryptEndpoint, a4 as DecryptForTxBuilder, a5 as DecryptForTxResult, a3 as DecryptForViewBuilder, J as DecryptPollCallbackContext, G as DecryptPollCallbackFunction, a1 as EncryptInputsBuilder, a2 as EncryptInputsBuilderUnset, M as EncryptSetStateFn, W as EncryptStep, N as EncryptStepCallbackContext, S as Encryptable, p as EncryptableAddress, j as EncryptableBool, E as EncryptableItem, B as EncryptableToExternalHashMap, o as EncryptableUint128, l as EncryptableUint16, m as EncryptableUint32, n as EncryptableUint64, k as EncryptableUint8, q as EncryptedNumber, y as ExternalAddressHash, s as ExternalBoolHash, z as ExternalHashProof, D as ExternalItemHashes, x as ExternalUint128Hash, u as ExternalUint16Hash, v as ExternalUint32Hash, w as ExternalUint64Hash, t as ExternalUint8Hash, R as FheAllUTypes, Z as FheKeyDeserializer, r as FheTypeValue, Q as FheUintUTypes, H as HashPlusProofResult, I as IStorage, $ as KeysStorage, a0 as KeysStore, L as LiteralToPrimitive, P as Primitive, T as TfheInitializer, O as TfheThreadsSetting, U as UnsealedItem, a6 as ZkBuilderAndCrsGenerator, a7 as ZkProveWorkerFunction, a8 as ZkProveWorkerRequest, a9 as ZkProveWorkerResponse, f as assertNoRenamedConfigKeys, e as createCofheConfigBase, _ as createKeysStore, Y as fetchKeys, g as getCofheConfigItem, V as isEncryptableItem, X as isLastEncryptionStep, aa as zkProveWithWorker } from './clientTypes-b1pOxOUE.js';
+import { a as CofheConfig, c as CofheClientParams, b as CofheClient, d as CofheClientConnectionState, F as FheTypes } from './clientTypes-CnslFzxB.js';
+export { A as AnyExternalHash, i as CofheClientACPs, C as CofheInputConfig, h as CofheInternalConfig, K as DecryptEndpoint, a4 as DecryptForTxBuilder, a5 as DecryptForTxResult, a3 as DecryptForViewBuilder, J as DecryptPollCallbackContext, G as DecryptPollCallbackFunction, a1 as EncryptInputsBuilder, a2 as EncryptInputsBuilderUnset, M as EncryptSetStateFn, W as EncryptStep, N as EncryptStepCallbackContext, S as Encryptable, p as EncryptableAddress, j as EncryptableBool, E as EncryptableItem, B as EncryptableToExternalHashMap, o as EncryptableUint128, l as EncryptableUint16, m as EncryptableUint32, n as EncryptableUint64, k as EncryptableUint8, q as EncryptedNumber, y as ExternalAddressHash, s as ExternalBoolHash, z as ExternalHashProof, D as ExternalItemHashes, x as ExternalUint128Hash, u as ExternalUint16Hash, v as ExternalUint32Hash, w as ExternalUint64Hash, t as ExternalUint8Hash, R as FheAllUTypes, Z as FheKeyDeserializer, r as FheTypeValue, Q as FheUintUTypes, H as HashPlusProofResult, I as IStorage, $ as KeysStorage, a0 as KeysStore, L as LiteralToPrimitive, P as Primitive, T as TfheInitializer, O as TfheThreadsSetting, U as UnsealedItem, a6 as ZkBuilderAndCrsGenerator, a7 as ZkProveWorkerFunction, a8 as ZkProveWorkerRequest, a9 as ZkProveWorkerResponse, f as assertNoRenamedConfigKeys, e as createCofheConfigBase, _ as createKeysStore, Y as fetchKeys, g as getCofheConfigItem, V as isEncryptableItem, X as isLastEncryptionStep, aa as zkProveWithWorker } from './clientTypes-CnslFzxB.js';
 import { PublicClient, Address, Hex } from 'viem';
 import './types-C07FK-cL.js';
 import 'zod';
-import './onchain-utils-CgOslubH.js';
+import './onchain-utils-Ns56cBm0.js';
 import 'zustand/vanilla';
 
 declare const InitialConnectStore: CofheClientConnectionState;

package/dist/core.js

@@ -1,4 +1,4 @@
-export { InitialConnectStore as CONNECT_STORE_DEFAULTS, DecryptForTxBuilder, DecryptForViewBuilder, EncryptInputsBuilder, assertNoRenamedConfigKeys, cofheFetch, createCofheClientBase, createCofheConfigBase, createKeysStore, fetchKeys, getCofheConfigItem, getCofheDebugInterceptors, setCofheDebugInterceptors, verifyDecryptResult, zkProveWithWorker } from './chunk-O2ITEUEU.js';
+export { InitialConnectStore as CONNECT_STORE_DEFAULTS, DecryptForTxBuilder, DecryptForViewBuilder, EncryptInputsBuilder, assertNoRenamedConfigKeys, cofheFetch, createCofheClientBase, createCofheConfigBase, createKeysStore, fetchKeys, getCofheConfigItem, getCofheDebugInterceptors, setCofheDebugInterceptors, verifyDecryptResult, zkProveWithWorker } from './chunk-2EO4JSR7.js';
 import './chunk-UKQAJK4N.js';
 export { getTaskManagerAddress } from './chunk-3L2IVPMI.js';
 export { EncryptStep, Encryptable, FheAllUTypes, FheTypes, FheUintUTypes, fheTypeToString, isEncryptableItem, isLastEncryptionStep } from './chunk-WJGTPW7K.js';

package/dist/node.cjs

@@ -3257,23 +3257,25 @@ var getBlockRevokerData = async (publicClient) => {
   }
   return revokerData;
 };
-var revokeACP = async (acp, walletClient) => {
+var prepareRevokeACP = (acp) => {
   if (acp.revokerContract === viem.zeroAddress || acp.revokerData === 0) {
     throw new Error("ACP is not revocable: it has no revoker (revokerContract/revokerData unset)");
   }
+  return {
+    address: acp.revokerContract,
+    abi: ACP_REVOKER_ABI,
+    functionName: "revokeSingle",
+    args: [BigInt(acp.revokerData)]
+  };
+};
+var revokeACP = async (acp, walletClient) => {
+  const write = prepareRevokeACP(acp);
   if (walletClient.account == null)
     throw new Error("Missing walletClient account");
   if (walletClient.account.address.toLowerCase() !== acp.issuer.toLowerCase()) {
     throw new Error("Only the acp issuer can revoke it");
   }
-  return walletClient.writeContract({
-    address: acp.revokerContract,
-    abi: ACP_REVOKER_ABI,
-    functionName: "revokeSingle",
-    args: [BigInt(acp.revokerData)],
-    account: walletClient.account,
-    chain: walletClient.chain
-  });
+  return walletClient.writeContract({ ...write, account: walletClient.account, chain: walletClient.chain });
 };
 var revokeAllACPs = async (walletClient, publicClient, revokerContract) => {
   if (walletClient.account == null)
@@ -3324,28 +3326,36 @@ var metadataOf = (acp, { labels, metadata, appKey }) => {
   }
   return encodeShareMetadata(labels, { issuer: acp.issuer, appKey });
 };
-var shareOnChain = async (acp, walletClient, registry, options = {}) => {
+var prepareShareOnChain = (acp, registry, options = {}) => {
   if (acp.type !== "sharing") {
     throw new Error(`Cannot share a '${acp.type}' ACP on-chain \u2014 only 'sharing' ACPs are shareable.`);
   }
   if (acp.issuerSignature === "0x") {
     throw new Error("Cannot share an unsigned sharing ACP \u2014 sign it first.");
   }
+  return {
+    write: {
+      address: registry,
+      abi: ACP_SHARE_REGISTRY_ABI,
+      functionName: "share",
+      args: [toChainShare(acp), metadataOf(acp, options)]
+    },
+    shareId: computeShareId(acp)
+  };
+};
+var shareOnChain = async (acp, walletClient, registry, options = {}) => {
+  const { write, shareId } = prepareShareOnChain(acp, registry, options);
   if (walletClient.account == null)
     throw new Error("Missing walletClient account");
   if (walletClient.account.address.toLowerCase() !== acp.issuer.toLowerCase()) {
     throw new Error("Only the ACP issuer can share it on-chain");
   }
-  const metadata = metadataOf(acp, options);
   const txHash = await walletClient.writeContract({
-    address: registry,
-    abi: ACP_SHARE_REGISTRY_ABI,
-    functionName: "share",
-    args: [toChainShare(acp), metadata],
+    ...write,
     account: walletClient.account,
     chain: walletClient.chain ?? null
   });
-  return { txHash, shareId: computeShareId(acp) };
+  return { txHash, shareId };
 };
 var toIncomingShare = ({ shareId, share: s, metadata }) => ({
   shareId,
@@ -3380,14 +3390,17 @@ var importFromChain = async (share, publicClient, walletClient, importOptions =
   const { shareId: _shareId, appKey: _appKey, ...options } = share;
   return importShared({ ...options, type: "sharing" }, publicClient, walletClient, importOptions);
 };
+var prepareRemoveShare = (shareId, registry) => ({
+  address: registry,
+  abi: ACP_SHARE_REGISTRY_ABI,
+  functionName: "removeShare",
+  args: [shareId]
+});
 var removeShareOnChain = async (shareId, walletClient, registry) => {
   if (walletClient.account == null)
     throw new Error("Missing walletClient account");
   return walletClient.writeContract({
-    address: registry,
-    abi: ACP_SHARE_REGISTRY_ABI,
-    functionName: "removeShare",
-    args: [shareId],
+    ...prepareRemoveShare(shareId, registry),
     account: walletClient.account,
     chain: walletClient.chain ?? null
   });
@@ -3414,14 +3427,17 @@ var acps = {
   selectActiveACP,
   removeActiveACP,
   revokeACP,
+  prepareRevokeACP,
   revokeAllACPs,
   isACPRevoked,
   checkAccess,
   shareOnChain,
+  prepareShareOnChain,
   getIncomingShares,
   getShareFromChain,
   importFromChain,
   removeShareOnChain,
+  prepareRemoveShare,
   computeShareId,
   applyACPDefaultsFromChain,
   getAclServedAddresses,
@@ -5197,6 +5213,12 @@ function createCofheClientBase(opts) {
       });
     }
   };
+  const _requireIssuer = (acp, what) => {
+    const sender = connectStore.getState().walletClient?.account?.address;
+    if (sender == null || sender.toLowerCase() !== acp.issuer.toLowerCase()) {
+      throw new Error(`Only the acp issuer can ${what}`);
+    }
+  };
   async function connect(publicClient, walletClient) {
     const state = connectStore.getState();
     if (state.connected && state.publicClient === publicClient && state.walletClient === walletClient)
@@ -5364,6 +5386,11 @@ function createCofheClientBase(opts) {
       const { walletClient } = connectStore.getState();
       return acps.revokeACP(acp, walletClient);
     },
+    prepareRevokeACP: (acp) => {
+      _requireConnected();
+      _requireIssuer(acp, "revoke it");
+      return acps.prepareRevokeACP(acp);
+    },
     revokeAllACPs: async (revokerContract) => {
       _requireConnected();
       const { publicClient, walletClient } = connectStore.getState();
@@ -5387,6 +5414,21 @@ function createCofheClientBase(opts) {
       const sharingRegistry = await _resolveSharingRegistry(publicClient, chainId);
       return acps.shareOnChain(acp, walletClient, sharingRegistry, { ...withAppKey(), ...options });
     },
+    prepareShareOnChain: async (acp, options) => {
+      _requireConnected();
+      _requireIssuer(acp, "share it on-chain");
+      const { publicClient } = connectStore.getState();
+      const chainId = await publicClient.getChainId();
+      const sharingRegistry = await _resolveSharingRegistry(publicClient, chainId);
+      return acps.prepareShareOnChain(acp, sharingRegistry, { ...withAppKey(), ...options });
+    },
+    prepareRemoveShare: async (shareId) => {
+      _requireConnected();
+      const { publicClient } = connectStore.getState();
+      const chainId = await publicClient.getChainId();
+      const sharingRegistry = await _resolveSharingRegistry(publicClient, chainId);
+      return acps.prepareRemoveShare(shareId, sharingRegistry);
+    },
     getIncomingShares: async () => {
       _requireConnected();
       const { publicClient, walletClient } = connectStore.getState();

package/dist/node.d.cts

@@ -1,8 +1,8 @@
-import { C as CofheInputConfig, a as CofheConfig, b as CofheClient } from './clientTypes-IO6b5Um8.cjs';
+import { C as CofheInputConfig, a as CofheConfig, b as CofheClient } from './clientTypes-RXwLVWou.cjs';
 import 'viem';
 import './types-C07FK-cL.cjs';
 import 'zod';
-import './onchain-utils-CgOslubH.cjs';
+import './onchain-utils-Ns56cBm0.cjs';
 import 'zustand/vanilla';
 
 /**

package/dist/node.d.ts

@@ -1,8 +1,8 @@
-import { C as CofheInputConfig, a as CofheConfig, b as CofheClient } from './clientTypes-b1pOxOUE.js';
+import { C as CofheInputConfig, a as CofheConfig, b as CofheClient } from './clientTypes-CnslFzxB.js';
 import 'viem';
 import './types-C07FK-cL.js';
 import 'zod';
-import './onchain-utils-CgOslubH.js';
+import './onchain-utils-Ns56cBm0.js';
 import 'zustand/vanilla';
 
 /**

package/dist/node.js

@@ -1,4 +1,4 @@
-import { createCofheConfigBase, createCofheClientBase } from './chunk-O2ITEUEU.js';
+import { createCofheConfigBase, createCofheClientBase } from './chunk-2EO4JSR7.js';
 import './chunk-UKQAJK4N.js';
 import './chunk-3L2IVPMI.js';
 import { fromHexString } from './chunk-WJGTPW7K.js';