@cofhe/sdk 1.1.0-alpha.0 → 1.1.0-alpha.2

package/dist/node.cjs

@@ -1925,19 +1925,22 @@ var zkProve = async (builder, crs, metadata) => {
     }, 0);
   });
 };
-var constructZkPoKMetadata = (accountAddr, securityZone, chainId) => {
+var constructZkPoKMetadata = (accountAddr, securityZone, chainId, consumingContract) => {
   const accountAddrNoPrefix = accountAddr.startsWith("0x") ? accountAddr.slice(2) : accountAddr;
   const accountBytes = hexToBytes(accountAddrNoPrefix);
+  const contractNoPrefix = consumingContract.startsWith("0x") ? consumingContract.slice(2) : consumingContract;
+  const contractBytes = hexToBytes(contractNoPrefix);
   const chainIdBytes = new Uint8Array(32);
   let value = chainId;
   for (let i = 31; i >= 0 && value > 0; i--) {
     chainIdBytes[i] = value & 255;
     value = value >>> 8;
   }
-  const metadata = new Uint8Array(1 + accountBytes.length + 32);
+  const metadata = new Uint8Array(1 + accountBytes.length + 32 + contractBytes.length);
   metadata[0] = securityZone;
   metadata.set(accountBytes, 1);
   metadata.set(chainIdBytes, 1 + accountBytes.length);
+  metadata.set(contractBytes, 1 + accountBytes.length + 32);
   return metadata;
 };
 var zkVerifyBatch = async (verifierUrl, serializedBytes, address, securityZone, chainId, consumingContract) => {
@@ -2850,20 +2853,33 @@ var EncryptInputsBuilder = class extends BaseBuilder {
     return this.consumingContract;
   }
   /**
-   * Asserts that this.consumingContract is populated
-   * @throws {CofheError} If consumingContract is not set
+   * Asserts that this.consumingContract is populated and is an address.
+   * Runs before TFHE init, key fetching and proving, so a bad address costs
+   * nothing: the contract is bound into the proof, and a proof built for a
+   * non-address could only fail at the verifier, after the expensive step.
+   * @throws {CofheError} If consumingContract is not set or is not an address
    */
   assertConsumingContract() {
-    if (this.consumingContract)
-      return;
-    throw new CofheError({
-      code: "CONSUMING_CONTRACT_UNINITIALIZED" /* ConsumingContractUninitialized */,
-      message: "Consuming contract is not set",
-      hint: "Use setConsumingContract(...) to set the contract that will consume the encrypted inputs.",
-      context: {
-        consumingContract: this.consumingContract
-      }
-    });
+    if (!this.consumingContract) {
+      throw new CofheError({
+        code: "CONSUMING_CONTRACT_UNINITIALIZED" /* ConsumingContractUninitialized */,
+        message: "Consuming contract is not set",
+        hint: "Use setConsumingContract(...) to set the contract that will consume the encrypted inputs.",
+        context: {
+          consumingContract: this.consumingContract
+        }
+      });
+    }
+    if (!viem.isAddress(this.consumingContract, { strict: false })) {
+      throw new CofheError({
+        code: "CONSUMING_CONTRACT_INVALID" /* ConsumingContractInvalid */,
+        message: "Consuming contract is not an address",
+        hint: "setConsumingContract(...) takes the 20-byte address of the contract that will consume the encrypted inputs.",
+        context: {
+          consumingContract: this.consumingContract
+        }
+      });
+    }
   }
   setUseWorker(useWorker) {
     this.useWorker = useWorker;
@@ -3079,7 +3095,7 @@ var EncryptInputsBuilder = class extends BaseBuilder {
     zkBuilder = zkPack(this.inputItems, zkBuilder);
     this.fireStepEnd("pack" /* Pack */);
     this.fireStepStart("prove" /* Prove */);
-    const metadata = constructZkPoKMetadata(this.account, this.securityZone, this.chainId);
+    const metadata = constructZkPoKMetadata(this.account, this.securityZone, this.chainId, this.consumingContract);
     let proof = null;
     let usedWorker = false;
     let workerFailedError;
@@ -3770,6 +3786,16 @@ function mapApiErrorCodeToCofheErrorCode(apiErrorCode, fallback) {
 
 // core/decrypt/submitRetry.ts
 var DEFAULT_404_RETRY_TIMEOUT_MS = 1e4;
+var DEFAULT_DECRYPT_TIMEOUT_MS = 5 * 60 * 1e3;
+function assertDecryptTimeoutMs(timeoutMs, operationLabel) {
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+    throw new CofheError({
+      code: "INTERNAL_ERROR" /* InternalError */,
+      message: `${operationLabel}: setTimeout(timeoutMs) expects a finite number greater than 0.`,
+      context: { timeoutMs }
+    });
+  }
+}
 function normalize404RetryTimeoutMs(params) {
   const { timeoutMs, operationLabel, errorCode } = params;
   if (timeoutMs === void 0)
@@ -3908,7 +3934,6 @@ function parseDecryptedBytesToBigInt(decrypted) {
 // core/decrypt/tnSealOutputV2.ts
 var POLL_INTERVAL_MS = 1e3;
 var POLL_MAX_INTERVAL_MS = 1e4;
-var SEAL_OUTPUT_TIMEOUT_MS = 5 * 60 * 1e3;
 var SUBMIT_RETRY_INTERVAL_MS = 1e3;
 function numberArrayToUint8Array(arr) {
   return new Uint8Array(arr);
@@ -3966,7 +3991,7 @@ function parseCompletedSealOutputResponse(params) {
   }
   return convertSealedData(sealed);
 }
-async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, onPoll) {
+async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll) {
   const body = {
     ct_tempkey: BigInt(ctHash).toString(16).padStart(64, "0"),
     host_chain_id: chainId,
@@ -4069,7 +4094,7 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp
       status: responseClassification.status,
       elapsedMs,
       retry404TimeoutMs,
-      overallTimeoutMs: SEAL_OUTPUT_TIMEOUT_MS,
+      overallTimeoutMs: timeoutMs,
       thresholdNetworkUrl,
       body,
       attemptIndex,
@@ -4081,13 +4106,13 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp
       attemptIndex,
       elapsedMs,
       intervalMs: SUBMIT_RETRY_INTERVAL_MS,
-      timeoutMs: SEAL_OUTPUT_TIMEOUT_MS
+      timeoutMs
     });
     await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS));
     attemptIndex += 1;
   }
 }
-async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStartTime, onPoll) {
+async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll) {
   let attemptIndex = 0;
   while (true) {
     const elapsedMs = Date.now() - overallStartTime;
@@ -4101,17 +4126,17 @@ async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStart
       attemptIndex,
       elapsedMs,
       intervalMs,
-      timeoutMs: SEAL_OUTPUT_TIMEOUT_MS
+      timeoutMs
     });
-    if (elapsedMs > SEAL_OUTPUT_TIMEOUT_MS) {
+    if (elapsedMs > timeoutMs) {
       throw new CofheError({
         code: "SEAL_OUTPUT_FAILED" /* SealOutputFailed */,
-        message: `sealOutput polling timed out after ${SEAL_OUTPUT_TIMEOUT_MS}ms`,
+        message: `sealOutput polling timed out after ${timeoutMs}ms`,
         hint: "The request may still be processing. Try again later.",
         context: {
           thresholdNetworkUrl,
           requestId,
-          timeoutMs: SEAL_OUTPUT_TIMEOUT_MS
+          timeoutMs
         }
       });
     }
@@ -4199,6 +4224,7 @@ async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStart
 }
 async function tnSealOutputV2(params) {
   const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll } = params;
+  const timeoutMs = params.timeoutMs ?? DEFAULT_DECRYPT_TIMEOUT_MS;
   const normalized404RetryTimeoutMs = normalize404RetryTimeoutMs({
     timeoutMs: retry404TimeoutMs,
     operationLabel: "sealOutput",
@@ -4212,12 +4238,13 @@ async function tnSealOutputV2(params) {
     acp,
     overallStartTime,
     normalized404RetryTimeoutMs,
+    timeoutMs,
     onPoll
   );
   if (submitResult.kind === "completed") {
     return submitResult.sealed;
   }
-  return await pollSealOutputStatus(thresholdNetworkUrl, submitResult.requestId, overallStartTime, onPoll);
+  return await pollSealOutputStatus(thresholdNetworkUrl, submitResult.requestId, overallStartTime, timeoutMs, onPoll);
 }
 
 // core/decrypt/decryptForViewBuilder.ts
@@ -4229,6 +4256,7 @@ var DecryptForViewBuilder = class extends BaseBuilder {
   acp;
   pollCallback;
   retry404TimeoutMs = DEFAULT_404_RETRY_TIMEOUT_MS2;
+  timeoutMs;
   constructor(params) {
     super({
       config: params.config,
@@ -4302,6 +4330,16 @@ var DecryptForViewBuilder = class extends BaseBuilder {
     this.retry404TimeoutMs = timeoutMs;
     return this;
   }
+  /**
+   * The whole budget of this decrypt in milliseconds, submit retries and status polling together
+   * (5 minutes by default). Past it, `execute()` rejects with `SealOutputFailed`; a request still
+   * processing on the threshold network is not cancelled.
+   */
+  setTimeout(timeoutMs) {
+    assertDecryptTimeoutMs(timeoutMs, "decryptForView");
+    this.timeoutMs = timeoutMs;
+    return this;
+  }
   withACP(acpOrACPHash) {
     if (typeof acpOrACPHash === "string") {
       this.acpHash = acpOrACPHash;
@@ -4431,6 +4469,7 @@ var DecryptForViewBuilder = class extends BaseBuilder {
       acp: wireAcp,
       thresholdNetworkUrl,
       retry404TimeoutMs: this.retry404TimeoutMs,
+      timeoutMs: this.timeoutMs,
       onPoll: this.pollCallback
     });
     return ACPUtils.unseal(acp, sealed);
@@ -4533,7 +4572,6 @@ async function cofheMocksDecryptForTx(ctHash, utype, acp, publicClient) {
 // core/decrypt/tnDecryptV2.ts
 var POLL_INTERVAL_MS2 = 1e3;
 var POLL_MAX_INTERVAL_MS2 = 1e4;
-var DECRYPT_TIMEOUT_MS = 5 * 60 * 1e3;
 var SUBMIT_RETRY_INTERVAL_MS2 = 1e3;
 function assertDecryptSubmitResponseV2(value) {
   if (value == null || typeof value !== "object") {
@@ -4650,7 +4688,7 @@ function assertDecryptStatusResponseV2(value) {
   }
   return value;
 }
-async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, onPoll) {
+async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll) {
   const body = {
     ct_tempkey: BigInt(ctHash).toString(16).padStart(64, "0"),
     host_chain_id: chainId
@@ -4757,7 +4795,7 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp,
       status: responseClassification.status,
       elapsedMs,
       retry404TimeoutMs,
-      overallTimeoutMs: DECRYPT_TIMEOUT_MS,
+      overallTimeoutMs: timeoutMs,
       thresholdNetworkUrl,
       body,
       attemptIndex,
@@ -4769,13 +4807,13 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp,
       attemptIndex,
       elapsedMs,
       intervalMs: SUBMIT_RETRY_INTERVAL_MS2,
-      timeoutMs: DECRYPT_TIMEOUT_MS
+      timeoutMs
     });
     await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS2));
     attemptIndex += 1;
   }
 }
-async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartTime, onPoll) {
+async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll) {
   let attemptIndex = 0;
   while (true) {
     const elapsedMs = Date.now() - overallStartTime;
@@ -4789,17 +4827,17 @@ async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartT
       attemptIndex,
       elapsedMs,
       intervalMs,
-      timeoutMs: DECRYPT_TIMEOUT_MS
+      timeoutMs
     });
-    if (elapsedMs > DECRYPT_TIMEOUT_MS) {
+    if (elapsedMs > timeoutMs) {
       throw new CofheError({
         code: "DECRYPT_FAILED" /* DecryptFailed */,
-        message: `decrypt polling timed out after ${DECRYPT_TIMEOUT_MS}ms`,
+        message: `decrypt polling timed out after ${timeoutMs}ms`,
         hint: "The request may still be processing. Try again later.",
         context: {
           thresholdNetworkUrl,
           requestId,
-          timeoutMs: DECRYPT_TIMEOUT_MS
+          timeoutMs
         }
       });
     }
@@ -4888,6 +4926,7 @@ async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartT
 }
 async function tnDecryptV2(params) {
   const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll } = params;
+  const timeoutMs = params.timeoutMs ?? DEFAULT_DECRYPT_TIMEOUT_MS;
   const normalized404RetryTimeoutMs = normalize404RetryTimeoutMs({
     timeoutMs: retry404TimeoutMs,
     operationLabel: "decrypt",
@@ -4901,12 +4940,13 @@ async function tnDecryptV2(params) {
     acp,
     overallStartTime,
     normalized404RetryTimeoutMs,
+    timeoutMs,
     onPoll
   );
   if (submitResult.kind === "completed") {
     return submitResult;
   }
-  return await pollDecryptStatusV2(thresholdNetworkUrl, submitResult.requestId, overallStartTime, onPoll);
+  return await pollDecryptStatusV2(thresholdNetworkUrl, submitResult.requestId, overallStartTime, timeoutMs, onPoll);
 }
 
 // core/decrypt/decryptForTxBuilder.ts
@@ -4918,6 +4958,7 @@ var DecryptForTxBuilder = class extends BaseBuilder {
   acpSelection = "unset";
   pollCallback;
   retry404TimeoutMs = DEFAULT_404_RETRY_TIMEOUT_MS3;
+  timeoutMs;
   constructor(params) {
     super({
       config: params.config,
@@ -4960,6 +5001,11 @@ var DecryptForTxBuilder = class extends BaseBuilder {
     this.retry404TimeoutMs = timeoutMs;
     return this;
   }
+  setTimeout(timeoutMs) {
+    assertDecryptTimeoutMs(timeoutMs, "decryptForTx");
+    this.timeoutMs = timeoutMs;
+    return this;
+  }
   withACP(acpOrACPHash) {
     if (this.acpSelection === "with-acp") {
       throw new CofheError({
@@ -5093,6 +5139,7 @@ var DecryptForTxBuilder = class extends BaseBuilder {
       acp: wireAcp,
       thresholdNetworkUrl,
       retry404TimeoutMs: this.retry404TimeoutMs,
+      timeoutMs: this.timeoutMs,
       onPoll: this.pollCallback
     });
     return {

package/dist/node.d.cts

@@ -1,4 +1,4 @@
-import { C as CofheInputConfig, a as CofheConfig, b as CofheClient } from './clientTypes-RXwLVWou.cjs';
+import { C as CofheInputConfig, a as CofheConfig, b as CofheClient } from './clientTypes-BCAMwrqk.cjs';
 import 'viem';
 import './types-C07FK-cL.cjs';
 import 'zod';

package/dist/node.d.ts

@@ -1,4 +1,4 @@
-import { C as CofheInputConfig, a as CofheConfig, b as CofheClient } from './clientTypes-CnslFzxB.js';
+import { C as CofheInputConfig, a as CofheConfig, b as CofheClient } from './clientTypes-LvslG7o0.js';
 import 'viem';
 import './types-C07FK-cL.js';
 import 'zod';

package/dist/node.js

@@ -1,8 +1,8 @@
-import { createCofheConfigBase, createCofheClientBase } from './chunk-2EO4JSR7.js';
+import { createCofheConfigBase, createCofheClientBase } from './chunk-KHM6LYLU.js';
 import './chunk-UKQAJK4N.js';
-import './chunk-3L2IVPMI.js';
-import { fromHexString } from './chunk-WJGTPW7K.js';
-import { TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT } from './chunk-J23FYAI2.js';
+import './chunk-WAA2U7CT.js';
+import { fromHexString } from './chunk-3SD2UCRE.js';
+import { TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT } from './chunk-OC5TGQGG.js';
 import { promises } from 'fs';
 import { join } from 'path';
 import { init_panic_hook, ProvenCompactCiphertextList, CompactPkeCrs, TfheCompactPublicKey } from 'node-tfhe';

package/dist/web.cjs

@@ -1960,19 +1960,22 @@ var zkProve = async (builder, crs, metadata) => {
     }, 0);
   });
 };
-var constructZkPoKMetadata = (accountAddr, securityZone, chainId) => {
+var constructZkPoKMetadata = (accountAddr, securityZone, chainId, consumingContract) => {
   const accountAddrNoPrefix = accountAddr.startsWith("0x") ? accountAddr.slice(2) : accountAddr;
   const accountBytes = hexToBytes(accountAddrNoPrefix);
+  const contractNoPrefix = consumingContract.startsWith("0x") ? consumingContract.slice(2) : consumingContract;
+  const contractBytes = hexToBytes(contractNoPrefix);
   const chainIdBytes = new Uint8Array(32);
   let value = chainId;
   for (let i = 31; i >= 0 && value > 0; i--) {
     chainIdBytes[i] = value & 255;
     value = value >>> 8;
   }
-  const metadata = new Uint8Array(1 + accountBytes.length + 32);
+  const metadata = new Uint8Array(1 + accountBytes.length + 32 + contractBytes.length);
   metadata[0] = securityZone;
   metadata.set(accountBytes, 1);
   metadata.set(chainIdBytes, 1 + accountBytes.length);
+  metadata.set(contractBytes, 1 + accountBytes.length + 32);
   return metadata;
 };
 var zkVerifyBatch = async (verifierUrl, serializedBytes, address, securityZone, chainId, consumingContract) => {
@@ -2885,20 +2888,33 @@ var EncryptInputsBuilder = class extends BaseBuilder {
     return this.consumingContract;
   }
   /**
-   * Asserts that this.consumingContract is populated
-   * @throws {CofheError} If consumingContract is not set
+   * Asserts that this.consumingContract is populated and is an address.
+   * Runs before TFHE init, key fetching and proving, so a bad address costs
+   * nothing: the contract is bound into the proof, and a proof built for a
+   * non-address could only fail at the verifier, after the expensive step.
+   * @throws {CofheError} If consumingContract is not set or is not an address
    */
   assertConsumingContract() {
-    if (this.consumingContract)
-      return;
-    throw new CofheError({
-      code: "CONSUMING_CONTRACT_UNINITIALIZED" /* ConsumingContractUninitialized */,
-      message: "Consuming contract is not set",
-      hint: "Use setConsumingContract(...) to set the contract that will consume the encrypted inputs.",
-      context: {
-        consumingContract: this.consumingContract
-      }
-    });
+    if (!this.consumingContract) {
+      throw new CofheError({
+        code: "CONSUMING_CONTRACT_UNINITIALIZED" /* ConsumingContractUninitialized */,
+        message: "Consuming contract is not set",
+        hint: "Use setConsumingContract(...) to set the contract that will consume the encrypted inputs.",
+        context: {
+          consumingContract: this.consumingContract
+        }
+      });
+    }
+    if (!viem.isAddress(this.consumingContract, { strict: false })) {
+      throw new CofheError({
+        code: "CONSUMING_CONTRACT_INVALID" /* ConsumingContractInvalid */,
+        message: "Consuming contract is not an address",
+        hint: "setConsumingContract(...) takes the 20-byte address of the contract that will consume the encrypted inputs.",
+        context: {
+          consumingContract: this.consumingContract
+        }
+      });
+    }
   }
   setUseWorker(useWorker) {
     this.useWorker = useWorker;
@@ -3114,7 +3130,7 @@ var EncryptInputsBuilder = class extends BaseBuilder {
     zkBuilder = zkPack(this.inputItems, zkBuilder);
     this.fireStepEnd("pack" /* Pack */);
     this.fireStepStart("prove" /* Prove */);
-    const metadata = constructZkPoKMetadata(this.account, this.securityZone, this.chainId);
+    const metadata = constructZkPoKMetadata(this.account, this.securityZone, this.chainId, this.consumingContract);
     let proof = null;
     let usedWorker = false;
     let workerFailedError;
@@ -3805,6 +3821,16 @@ function mapApiErrorCodeToCofheErrorCode(apiErrorCode, fallback) {
 
 // core/decrypt/submitRetry.ts
 var DEFAULT_404_RETRY_TIMEOUT_MS = 1e4;
+var DEFAULT_DECRYPT_TIMEOUT_MS = 5 * 60 * 1e3;
+function assertDecryptTimeoutMs(timeoutMs, operationLabel) {
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+    throw new CofheError({
+      code: "INTERNAL_ERROR" /* InternalError */,
+      message: `${operationLabel}: setTimeout(timeoutMs) expects a finite number greater than 0.`,
+      context: { timeoutMs }
+    });
+  }
+}
 function normalize404RetryTimeoutMs(params) {
   const { timeoutMs, operationLabel, errorCode } = params;
   if (timeoutMs === void 0)
@@ -3943,7 +3969,6 @@ function parseDecryptedBytesToBigInt(decrypted) {
 // core/decrypt/tnSealOutputV2.ts
 var POLL_INTERVAL_MS = 1e3;
 var POLL_MAX_INTERVAL_MS = 1e4;
-var SEAL_OUTPUT_TIMEOUT_MS = 5 * 60 * 1e3;
 var SUBMIT_RETRY_INTERVAL_MS = 1e3;
 function numberArrayToUint8Array(arr) {
   return new Uint8Array(arr);
@@ -4001,7 +4026,7 @@ function parseCompletedSealOutputResponse(params) {
   }
   return convertSealedData(sealed);
 }
-async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, onPoll) {
+async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll) {
   const body = {
     ct_tempkey: BigInt(ctHash).toString(16).padStart(64, "0"),
     host_chain_id: chainId,
@@ -4104,7 +4129,7 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp
       status: responseClassification.status,
       elapsedMs,
       retry404TimeoutMs,
-      overallTimeoutMs: SEAL_OUTPUT_TIMEOUT_MS,
+      overallTimeoutMs: timeoutMs,
       thresholdNetworkUrl,
       body,
       attemptIndex,
@@ -4116,13 +4141,13 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp
       attemptIndex,
       elapsedMs,
       intervalMs: SUBMIT_RETRY_INTERVAL_MS,
-      timeoutMs: SEAL_OUTPUT_TIMEOUT_MS
+      timeoutMs
     });
     await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS));
     attemptIndex += 1;
   }
 }
-async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStartTime, onPoll) {
+async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll) {
   let attemptIndex = 0;
   while (true) {
     const elapsedMs = Date.now() - overallStartTime;
@@ -4136,17 +4161,17 @@ async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStart
       attemptIndex,
       elapsedMs,
       intervalMs,
-      timeoutMs: SEAL_OUTPUT_TIMEOUT_MS
+      timeoutMs
     });
-    if (elapsedMs > SEAL_OUTPUT_TIMEOUT_MS) {
+    if (elapsedMs > timeoutMs) {
       throw new CofheError({
         code: "SEAL_OUTPUT_FAILED" /* SealOutputFailed */,
-        message: `sealOutput polling timed out after ${SEAL_OUTPUT_TIMEOUT_MS}ms`,
+        message: `sealOutput polling timed out after ${timeoutMs}ms`,
         hint: "The request may still be processing. Try again later.",
         context: {
           thresholdNetworkUrl,
           requestId,
-          timeoutMs: SEAL_OUTPUT_TIMEOUT_MS
+          timeoutMs
         }
       });
     }
@@ -4234,6 +4259,7 @@ async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStart
 }
 async function tnSealOutputV2(params) {
   const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll } = params;
+  const timeoutMs = params.timeoutMs ?? DEFAULT_DECRYPT_TIMEOUT_MS;
   const normalized404RetryTimeoutMs = normalize404RetryTimeoutMs({
     timeoutMs: retry404TimeoutMs,
     operationLabel: "sealOutput",
@@ -4247,12 +4273,13 @@ async function tnSealOutputV2(params) {
     acp,
     overallStartTime,
     normalized404RetryTimeoutMs,
+    timeoutMs,
     onPoll
   );
   if (submitResult.kind === "completed") {
     return submitResult.sealed;
   }
-  return await pollSealOutputStatus(thresholdNetworkUrl, submitResult.requestId, overallStartTime, onPoll);
+  return await pollSealOutputStatus(thresholdNetworkUrl, submitResult.requestId, overallStartTime, timeoutMs, onPoll);
 }
 
 // core/decrypt/decryptForViewBuilder.ts
@@ -4264,6 +4291,7 @@ var DecryptForViewBuilder = class extends BaseBuilder {
   acp;
   pollCallback;
   retry404TimeoutMs = DEFAULT_404_RETRY_TIMEOUT_MS2;
+  timeoutMs;
   constructor(params) {
     super({
       config: params.config,
@@ -4337,6 +4365,16 @@ var DecryptForViewBuilder = class extends BaseBuilder {
     this.retry404TimeoutMs = timeoutMs;
     return this;
   }
+  /**
+   * The whole budget of this decrypt in milliseconds, submit retries and status polling together
+   * (5 minutes by default). Past it, `execute()` rejects with `SealOutputFailed`; a request still
+   * processing on the threshold network is not cancelled.
+   */
+  setTimeout(timeoutMs) {
+    assertDecryptTimeoutMs(timeoutMs, "decryptForView");
+    this.timeoutMs = timeoutMs;
+    return this;
+  }
   withACP(acpOrACPHash) {
     if (typeof acpOrACPHash === "string") {
       this.acpHash = acpOrACPHash;
@@ -4466,6 +4504,7 @@ var DecryptForViewBuilder = class extends BaseBuilder {
       acp: wireAcp,
       thresholdNetworkUrl,
       retry404TimeoutMs: this.retry404TimeoutMs,
+      timeoutMs: this.timeoutMs,
       onPoll: this.pollCallback
     });
     return ACPUtils.unseal(acp, sealed);
@@ -4568,7 +4607,6 @@ async function cofheMocksDecryptForTx(ctHash, utype, acp, publicClient) {
 // core/decrypt/tnDecryptV2.ts
 var POLL_INTERVAL_MS2 = 1e3;
 var POLL_MAX_INTERVAL_MS2 = 1e4;
-var DECRYPT_TIMEOUT_MS = 5 * 60 * 1e3;
 var SUBMIT_RETRY_INTERVAL_MS2 = 1e3;
 function assertDecryptSubmitResponseV2(value) {
   if (value == null || typeof value !== "object") {
@@ -4685,7 +4723,7 @@ function assertDecryptStatusResponseV2(value) {
   }
   return value;
 }
-async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, onPoll) {
+async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll) {
   const body = {
     ct_tempkey: BigInt(ctHash).toString(16).padStart(64, "0"),
     host_chain_id: chainId
@@ -4792,7 +4830,7 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp,
       status: responseClassification.status,
       elapsedMs,
       retry404TimeoutMs,
-      overallTimeoutMs: DECRYPT_TIMEOUT_MS,
+      overallTimeoutMs: timeoutMs,
       thresholdNetworkUrl,
       body,
       attemptIndex,
@@ -4804,13 +4842,13 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp,
       attemptIndex,
       elapsedMs,
       intervalMs: SUBMIT_RETRY_INTERVAL_MS2,
-      timeoutMs: DECRYPT_TIMEOUT_MS
+      timeoutMs
     });
     await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS2));
     attemptIndex += 1;
   }
 }
-async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartTime, onPoll) {
+async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll) {
   let attemptIndex = 0;
   while (true) {
     const elapsedMs = Date.now() - overallStartTime;
@@ -4824,17 +4862,17 @@ async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartT
       attemptIndex,
       elapsedMs,
       intervalMs,
-      timeoutMs: DECRYPT_TIMEOUT_MS
+      timeoutMs
     });
-    if (elapsedMs > DECRYPT_TIMEOUT_MS) {
+    if (elapsedMs > timeoutMs) {
       throw new CofheError({
         code: "DECRYPT_FAILED" /* DecryptFailed */,
-        message: `decrypt polling timed out after ${DECRYPT_TIMEOUT_MS}ms`,
+        message: `decrypt polling timed out after ${timeoutMs}ms`,
         hint: "The request may still be processing. Try again later.",
         context: {
           thresholdNetworkUrl,
           requestId,
-          timeoutMs: DECRYPT_TIMEOUT_MS
+          timeoutMs
         }
       });
     }
@@ -4923,6 +4961,7 @@ async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartT
 }
 async function tnDecryptV2(params) {
   const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll } = params;
+  const timeoutMs = params.timeoutMs ?? DEFAULT_DECRYPT_TIMEOUT_MS;
   const normalized404RetryTimeoutMs = normalize404RetryTimeoutMs({
     timeoutMs: retry404TimeoutMs,
     operationLabel: "decrypt",
@@ -4936,12 +4975,13 @@ async function tnDecryptV2(params) {
     acp,
     overallStartTime,
     normalized404RetryTimeoutMs,
+    timeoutMs,
     onPoll
   );
   if (submitResult.kind === "completed") {
     return submitResult;
   }
-  return await pollDecryptStatusV2(thresholdNetworkUrl, submitResult.requestId, overallStartTime, onPoll);
+  return await pollDecryptStatusV2(thresholdNetworkUrl, submitResult.requestId, overallStartTime, timeoutMs, onPoll);
 }
 
 // core/decrypt/decryptForTxBuilder.ts
@@ -4953,6 +4993,7 @@ var DecryptForTxBuilder = class extends BaseBuilder {
   acpSelection = "unset";
   pollCallback;
   retry404TimeoutMs = DEFAULT_404_RETRY_TIMEOUT_MS3;
+  timeoutMs;
   constructor(params) {
     super({
       config: params.config,
@@ -4995,6 +5036,11 @@ var DecryptForTxBuilder = class extends BaseBuilder {
     this.retry404TimeoutMs = timeoutMs;
     return this;
   }
+  setTimeout(timeoutMs) {
+    assertDecryptTimeoutMs(timeoutMs, "decryptForTx");
+    this.timeoutMs = timeoutMs;
+    return this;
+  }
   withACP(acpOrACPHash) {
     if (this.acpSelection === "with-acp") {
       throw new CofheError({
@@ -5128,6 +5174,7 @@ var DecryptForTxBuilder = class extends BaseBuilder {
       acp: wireAcp,
       thresholdNetworkUrl,
       retry404TimeoutMs: this.retry404TimeoutMs,
+      timeoutMs: this.timeoutMs,
       onPoll: this.pollCallback
     });
     return {