@cofhe/sdk 1.1.0-alpha.3 → 1.1.0-alpha.4

package/dist/web.cjs

@@ -2367,6 +2367,8 @@ var CofheConfigSchema = zod.z.object({
   supportedChains: zod.z.array(zod.z.custom()),
   /** Default acp expiration in seconds, default is 30 days */
   defaultACPExpiration: zod.z.number().optional().default(60 * 60 * 24 * 30),
+  /** Decrypts sent to the threshold network at a time per client; `Infinity` disables the cap (default 8) */
+  decryptConcurrency: zod.z.union([zod.z.number().min(1), zod.z.literal(Infinity)]).optional().default(8),
   /** Storage method for fhe keys (defaults to indexedDB on web, filesystem on node) */
   fheKeyStorage: zod.z.object({
     getItem: zod.z.custom((val) => typeof val === "function", {
@@ -3909,6 +3911,32 @@ function throwIfSubmitRetryTimedOut(params) {
     });
   }
 }
+function decryptAbortedError(operationLabel, signal) {
+  return new CofheError({
+    code: "ABORTED" /* Aborted */,
+    message: `${operationLabel} aborted by the caller`,
+    cause: signal.reason instanceof Error ? signal.reason : void 0
+  });
+}
+function throwIfAborted(signal, operationLabel) {
+  if (signal?.aborted)
+    throw decryptAbortedError(operationLabel, signal);
+}
+function sleepUnlessAborted(ms, signal, operationLabel) {
+  return new Promise((resolve, reject) => {
+    if (signal?.aborted)
+      return reject(decryptAbortedError(operationLabel, signal));
+    const onAbort = () => {
+      clearTimeout(timer);
+      reject(decryptAbortedError(operationLabel, signal));
+    };
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve();
+    }, ms);
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
 function normalizeTnSignature(signature) {
   if (typeof signature !== "string") {
     throw new CofheError({
@@ -4026,7 +4054,7 @@ function parseCompletedSealOutputResponse(params) {
   }
   return convertSealedData(sealed);
 }
-async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll) {
+async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll, signal) {
   const body = {
     ct_tempkey: BigInt(ctHash).toString(16).padStart(64, "0"),
     host_chain_id: chainId,
@@ -4035,6 +4063,7 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp
   let attemptIndex = 0;
   let last404ApiErrorMessage;
   for (; ; ) {
+    throwIfAborted(signal, "sealOutput");
     let response;
     try {
       response = await cofheFetch(
@@ -4045,10 +4074,12 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp
           headers: {
             "Content-Type": "application/json"
           },
-          body: JSON.stringify(body)
+          body: JSON.stringify(body),
+          signal
         }
       );
     } catch (e) {
+      throwIfAborted(signal, "sealOutput");
       throw new CofheError({
         code: "SEAL_OUTPUT_FAILED" /* SealOutputFailed */,
         message: `sealOutput request failed`,
@@ -4143,13 +4174,14 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp
       intervalMs: SUBMIT_RETRY_INTERVAL_MS,
       timeoutMs
     });
-    await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS));
+    await sleepUnlessAborted(SUBMIT_RETRY_INTERVAL_MS, signal, "sealOutput");
     attemptIndex += 1;
   }
 }
-async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll) {
+async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll, signal) {
   let attemptIndex = 0;
   while (true) {
+    throwIfAborted(signal, "sealOutput");
     const elapsedMs = Date.now() - overallStartTime;
     const intervalMs = computeMinuteRampPollIntervalMs(elapsedMs, {
       minIntervalMs: POLL_INTERVAL_MS,
@@ -4184,7 +4216,8 @@ async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStart
           method: "GET",
           headers: {
             "Content-Type": "application/json"
-          }
+          },
+          signal
         }
       );
     } catch (e) {
@@ -4245,7 +4278,7 @@ async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStart
         requestId
       });
     }
-    await new Promise((resolve) => setTimeout(resolve, intervalMs));
+    await sleepUnlessAborted(intervalMs, signal, "sealOutput");
     attemptIndex += 1;
   }
   throw new CofheError({
@@ -4258,7 +4291,7 @@ async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStart
   });
 }
 async function tnSealOutputV2(params) {
-  const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll } = params;
+  const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll, signal } = params;
   const timeoutMs = params.timeoutMs ?? DEFAULT_DECRYPT_TIMEOUT_MS;
   const normalized404RetryTimeoutMs = normalize404RetryTimeoutMs({
     timeoutMs: retry404TimeoutMs,
@@ -4274,12 +4307,20 @@ async function tnSealOutputV2(params) {
     overallStartTime,
     normalized404RetryTimeoutMs,
     timeoutMs,
-    onPoll
+    onPoll,
+    signal
   );
   if (submitResult.kind === "completed") {
     return submitResult.sealed;
   }
-  return await pollSealOutputStatus(thresholdNetworkUrl, submitResult.requestId, overallStartTime, timeoutMs, onPoll);
+  return await pollSealOutputStatus(
+    thresholdNetworkUrl,
+    submitResult.requestId,
+    overallStartTime,
+    timeoutMs,
+    onPoll,
+    signal
+  );
 }
 
 // core/decrypt/decryptForViewBuilder.ts
@@ -4292,6 +4333,8 @@ var DecryptForViewBuilder = class extends BaseBuilder {
   pollCallback;
   retry404TimeoutMs = DEFAULT_404_RETRY_TIMEOUT_MS2;
   timeoutMs;
+  signal;
+  limit;
   constructor(params) {
     super({
       config: params.config,
@@ -4305,6 +4348,7 @@ var DecryptForViewBuilder = class extends BaseBuilder {
     this.utype = params.utype;
     this.acpHash = params.acpHash;
     this.acp = params.acp;
+    this.limit = params.limit ?? ((task) => task());
   }
   /**
    * @param chainId - Chain to decrypt values from. Used to fetch the threshold network URL and use the correct acp.
@@ -4375,6 +4419,15 @@ var DecryptForViewBuilder = class extends BaseBuilder {
     this.timeoutMs = timeoutMs;
     return this;
   }
+  /**
+   * Stops the decrypt when `signal` fires: the pending request is aborted, no further attempt is
+   * sent, and `execute()` rejects with `Aborted`. A request already processing on the threshold
+   * network is not cancelled.
+   */
+  setSignal(signal) {
+    this.signal = signal;
+    return this;
+  }
   withACP(acpOrACPHash) {
     if (typeof acpOrACPHash === "string") {
       this.acpHash = acpOrACPHash;
@@ -4498,15 +4551,20 @@ var DecryptForViewBuilder = class extends BaseBuilder {
     this.assertPublicClient();
     const thresholdNetworkUrl = await this.getThresholdNetworkUrl();
     const wireAcp = ACPUtils.getPublic(acp, true);
-    const sealed = await tnSealOutputV2({
-      ctHash: this.ctHash,
-      chainId: this.chainId,
-      acp: wireAcp,
-      thresholdNetworkUrl,
-      retry404TimeoutMs: this.retry404TimeoutMs,
-      timeoutMs: this.timeoutMs,
-      onPoll: this.pollCallback
-    });
+    const sealed = await this.limit(
+      () => tnSealOutputV2({
+        ctHash: this.ctHash,
+        chainId: this.chainId,
+        acp: wireAcp,
+        thresholdNetworkUrl,
+        retry404TimeoutMs: this.retry404TimeoutMs,
+        timeoutMs: this.timeoutMs,
+        onPoll: this.pollCallback,
+        signal: this.signal
+      }),
+      "sealOutput",
+      this.signal
+    );
     return ACPUtils.unseal(acp, sealed);
   }
   /**
@@ -4723,7 +4781,7 @@ function assertDecryptStatusResponseV2(value) {
   }
   return value;
 }
-async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll) {
+async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll, signal) {
   const body = {
     ct_tempkey: BigInt(ctHash).toString(16).padStart(64, "0"),
     host_chain_id: chainId
@@ -4734,6 +4792,7 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp,
   let attemptIndex = 0;
   let last404ApiErrorMessage;
   for (; ; ) {
+    throwIfAborted(signal, "decrypt");
     let response;
     try {
       response = await cofheFetch(
@@ -4744,10 +4803,12 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp,
           headers: {
             "Content-Type": "application/json"
           },
-          body: JSON.stringify(body)
+          body: JSON.stringify(body),
+          signal
         }
       );
     } catch (e) {
+      throwIfAborted(signal, "decrypt");
       throw new CofheError({
         code: "DECRYPT_FAILED" /* DecryptFailed */,
         message: `decrypt request failed`,
@@ -4844,13 +4905,14 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp,
       intervalMs: SUBMIT_RETRY_INTERVAL_MS2,
       timeoutMs
     });
-    await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS2));
+    await sleepUnlessAborted(SUBMIT_RETRY_INTERVAL_MS2, signal, "decrypt");
     attemptIndex += 1;
   }
 }
-async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll) {
+async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll, signal) {
   let attemptIndex = 0;
   while (true) {
+    throwIfAborted(signal, "decrypt");
     const elapsedMs = Date.now() - overallStartTime;
     const intervalMs = computeMinuteRampPollIntervalMs(elapsedMs, {
       minIntervalMs: POLL_INTERVAL_MS2,
@@ -4885,7 +4947,8 @@ async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartT
           method: "GET",
           headers: {
             "Content-Type": "application/json"
-          }
+          },
+          signal
         }
       );
     } catch (e) {
@@ -4947,7 +5010,7 @@ async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartT
         requestId
       });
     }
-    await new Promise((resolve) => setTimeout(resolve, intervalMs));
+    await sleepUnlessAborted(intervalMs, signal, "decrypt");
     attemptIndex += 1;
   }
   throw new CofheError({
@@ -4960,7 +5023,7 @@ async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartT
   });
 }
 async function tnDecryptV2(params) {
-  const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll } = params;
+  const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll, signal } = params;
   const timeoutMs = params.timeoutMs ?? DEFAULT_DECRYPT_TIMEOUT_MS;
   const normalized404RetryTimeoutMs = normalize404RetryTimeoutMs({
     timeoutMs: retry404TimeoutMs,
@@ -4976,12 +5039,20 @@ async function tnDecryptV2(params) {
     overallStartTime,
     normalized404RetryTimeoutMs,
     timeoutMs,
-    onPoll
+    onPoll,
+    signal
   );
   if (submitResult.kind === "completed") {
     return submitResult;
   }
-  return await pollDecryptStatusV2(thresholdNetworkUrl, submitResult.requestId, overallStartTime, timeoutMs, onPoll);
+  return await pollDecryptStatusV2(
+    thresholdNetworkUrl,
+    submitResult.requestId,
+    overallStartTime,
+    timeoutMs,
+    onPoll,
+    signal
+  );
 }
 
 // core/decrypt/decryptForTxBuilder.ts
@@ -4994,6 +5065,8 @@ var DecryptForTxBuilder = class extends BaseBuilder {
   pollCallback;
   retry404TimeoutMs = DEFAULT_404_RETRY_TIMEOUT_MS3;
   timeoutMs;
+  signal;
+  limit;
   constructor(params) {
     super({
       config: params.config,
@@ -5004,6 +5077,7 @@ var DecryptForTxBuilder = class extends BaseBuilder {
       requireConnected: params.requireConnected
     });
     this.ctHash = params.ctHash;
+    this.limit = params.limit ?? ((task) => task());
   }
   setChainId(chainId) {
     this.chainId = chainId;
@@ -5041,6 +5115,10 @@ var DecryptForTxBuilder = class extends BaseBuilder {
     this.timeoutMs = timeoutMs;
     return this;
   }
+  setSignal(signal) {
+    this.signal = signal;
+    return this;
+  }
   withACP(acpOrACPHash) {
     if (this.acpSelection === "with-acp") {
       throw new CofheError({
@@ -5168,15 +5246,20 @@ var DecryptForTxBuilder = class extends BaseBuilder {
     this.assertPublicClient();
     const thresholdNetworkUrl = await this.getThresholdNetworkUrl();
     const wireAcp = acp ? ACPUtils.getPublic(acp, true) : null;
-    const { decryptedValue, signature } = await tnDecryptV2({
-      ctHash: this.ctHash,
-      chainId: this.chainId,
-      acp: wireAcp,
-      thresholdNetworkUrl,
-      retry404TimeoutMs: this.retry404TimeoutMs,
-      timeoutMs: this.timeoutMs,
-      onPoll: this.pollCallback
-    });
+    const { decryptedValue, signature } = await this.limit(
+      () => tnDecryptV2({
+        ctHash: this.ctHash,
+        chainId: this.chainId,
+        acp: wireAcp,
+        thresholdNetworkUrl,
+        retry404TimeoutMs: this.retry404TimeoutMs,
+        timeoutMs: this.timeoutMs,
+        onPoll: this.pollCallback,
+        signal: this.signal
+      }),
+      "decrypt",
+      this.signal
+    );
     return {
       ctHash: this.ctHash,
       decryptedValue,
@@ -5214,6 +5297,39 @@ var DecryptForTxBuilder = class extends BaseBuilder {
     }
   }
 };
+
+// core/decrypt/decryptLimiter.ts
+function createDecryptLimiter(max) {
+  let active = 0;
+  const waiting = [];
+  return async (task, operationLabel, signal) => {
+    if (signal?.aborted)
+      throw decryptAbortedError(operationLabel, signal);
+    if (active >= max) {
+      await new Promise((resume, reject) => {
+        const onAbort = () => {
+          const index = waiting.indexOf(start);
+          if (index >= 0)
+            waiting.splice(index, 1);
+          reject(decryptAbortedError(operationLabel, signal));
+        };
+        const start = () => {
+          signal?.removeEventListener("abort", onAbort);
+          resume();
+        };
+        signal?.addEventListener("abort", onAbort, { once: true });
+        waiting.push(start);
+      });
+    }
+    active += 1;
+    try {
+      return await task();
+    } finally {
+      active -= 1;
+      waiting.shift()?.();
+    }
+  };
+}
 var decryptResultSignerAbi = viem.parseAbi(["function decryptResultSigner() view returns (address)"]);
 var UINT_TYPE_MASK2 = 0x7fn;
 var TYPE_BYTE_OFFSET2 = 8n;
@@ -5359,11 +5475,13 @@ function createCofheClientBase(opts) {
       requireConnected: _requireConnected
     });
   }
+  const decryptLimiter = createDecryptLimiter(opts.config.decryptConcurrency);
   function decryptForView(ctHash, utype) {
     const state = connectStore.getState();
     return new DecryptForViewBuilder({
       ctHash,
       utype,
+      limit: decryptLimiter,
       chainId: state.chainId,
       account: state.account,
       config: opts.config,
@@ -5376,6 +5494,7 @@ function createCofheClientBase(opts) {
     const state = connectStore.getState();
     return new DecryptForTxBuilder({
       ctHash,
+      limit: decryptLimiter,
       chainId: state.chainId,
       account: state.account,
       config: opts.config,

package/dist/web.d.cts

@@ -1,4 +1,4 @@
-import { I as IStorage, C as CofheInputConfig, a as CofheConfig, b as CofheClient, E as EncryptableItem } from './clientTypes-BCAMwrqk.cjs';
+import { I as IStorage, C as CofheInputConfig, a as CofheConfig, b as CofheClient, E as EncryptableItem } from './clientTypes-K6XNB9H2.cjs';
 import 'viem';
 import './types-C07FK-cL.cjs';
 import 'zod';

package/dist/web.d.ts

@@ -1,4 +1,4 @@
-import { I as IStorage, C as CofheInputConfig, a as CofheConfig, b as CofheClient, E as EncryptableItem } from './clientTypes-LvslG7o0.js';
+import { I as IStorage, C as CofheInputConfig, a as CofheConfig, b as CofheClient, E as EncryptableItem } from './clientTypes-DFXuL9kz.js';
 import 'viem';
 import './types-C07FK-cL.js';
 import 'zod';

package/dist/web.js

@@ -1,9 +1,9 @@
-import { createCofheConfigBase, createCofheClientBase } from './chunk-KHM6LYLU.js';
+import { createCofheConfigBase, createCofheClientBase } from './chunk-ZYCIUX5C.js';
 import './chunk-UKQAJK4N.js';
-import './chunk-WAA2U7CT.js';
+import './chunk-37SG44CR.js';
 import { initTfheThreadPool } from './chunk-KSOV5B4B.js';
-import { fheTypeToString, fromHexString } from './chunk-3SD2UCRE.js';
-import { TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT } from './chunk-OC5TGQGG.js';
+import { fheTypeToString, fromHexString } from './chunk-PLHQYVND.js';
+import { TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT } from './chunk-NJTYZ3CW.js';
 import { constructClient } from 'iframe-shared-storage';
 
 // web/const.ts

package/dist/zkProve.worker.js

@@ -1,6 +1,6 @@
 import { initTfheThreadPool } from './chunk-KSOV5B4B.js';
-import { fromHexString } from './chunk-3SD2UCRE.js';
-import { TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT } from './chunk-OC5TGQGG.js';
+import { fromHexString } from './chunk-PLHQYVND.js';
+import { TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT } from './chunk-NJTYZ3CW.js';
 
 // web/zkProve.worker.ts
 var tfheModule = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cofhe/sdk",
-  "version": "1.1.0-alpha.3",
+  "version": "1.1.0-alpha.4",
   "type": "module",
   "description": "SDK for Fhenix COFHE coprocessor interaction",
   "main": "./dist/core.cjs",