@cofhe/sdk 1.1.0-alpha.3 → 1.1.0-alpha.5

package/dist/{clientTypes-LvslG7o0.d.ts → clientTypes-DFXuL9kz.d.ts}

@@ -224,6 +224,12 @@ type CofheConfig = {
     supportedChains: CofheChain[];
     /** Default acp expiration in seconds, default is 30 days */
     defaultACPExpiration: number;
+    /**
+     * How many decrypts (`decryptForView` / `decryptForTx`) this client sends to the threshold
+     * network at a time; the rest wait their turn. A list of values decrypted at once stays within
+     * it without a limiter of its own. `Infinity` disables the cap. Default: 8
+     */
+    decryptConcurrency: number;
     /**
      * Storage scheme for the fetched fhe keys
      * FHE keys are large, and caching prevents re-fetching them on each encryptInputs call
@@ -337,6 +343,7 @@ declare const CofheConfigSchema: z.ZodObject<{
         environment: "MOCK" | "TESTNET" | "MAINNET";
     }>>;
     defaultACPExpiration: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    decryptConcurrency: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodLiteral<number>]>>>;
     fheKeyStorage: z.ZodDefault<z.ZodUnion<[z.ZodObject<{
         getItem: z.ZodCustom<(name: string) => Promise<any>, (name: string) => Promise<any>>;
         setItem: z.ZodCustom<(name: string, value: any) => Promise<void>, (name: string, value: any) => Promise<void>>;
@@ -432,6 +439,9 @@ declare abstract class BaseBuilder {
     };
 }
 
+/** Runs a threshold-network call when a slot is free; see `createDecryptLimiter`. */
+type DecryptLimiter = <T>(task: () => Promise<T>, operationLabel: string, signal?: AbortSignal) => Promise<T>;
+
 /**
  * API
  *
@@ -457,6 +467,8 @@ type DecryptForViewBuilderParams<U extends FheTypes> = BaseBuilderParams & {
     utype: U;
     acpHash?: string;
     acp?: ACP;
+    /** The client's decrypt cap; a builder made without one runs unlimited. */
+    limit?: DecryptLimiter;
 };
 declare class DecryptForViewBuilder<U extends FheTypes> extends BaseBuilder {
     private ctHash;
@@ -466,6 +478,8 @@ declare class DecryptForViewBuilder<U extends FheTypes> extends BaseBuilder {
     private pollCallback?;
     private retry404TimeoutMs;
     private timeoutMs?;
+    private signal?;
+    private limit;
     constructor(params: DecryptForViewBuilderParams<U>);
     /**
      * @param chainId - Chain to decrypt values from. Used to fetch the threshold network URL and use the correct acp.
@@ -507,6 +521,12 @@ declare class DecryptForViewBuilder<U extends FheTypes> extends BaseBuilder {
      * processing on the threshold network is not cancelled.
      */
     setTimeout(timeoutMs: number): DecryptForViewBuilder<U>;
+    /**
+     * Stops the decrypt when `signal` fires: the pending request is aborted, no further attempt is
+     * sent, and `execute()` rejects with `Aborted`. A request already processing on the threshold
+     * network is not cancelled.
+     */
+    setSignal(signal: AbortSignal): DecryptForViewBuilder<U>;
     /**
      * Select "use acp" mode (optional).
      *
@@ -589,6 +609,8 @@ declare class DecryptForViewBuilder<U extends FheTypes> extends BaseBuilder {
 
 type DecryptForTxBuilderParams = BaseBuilderParams & {
     ctHash: bigint | string;
+    /** The client's decrypt cap; a builder made without one runs unlimited. */
+    limit?: DecryptLimiter;
 };
 type DecryptForTxResult = {
     ctHash: bigint | string;
@@ -611,6 +633,8 @@ declare class DecryptForTxBuilder extends BaseBuilder {
     private pollCallback?;
     private retry404TimeoutMs;
     private timeoutMs?;
+    private signal?;
+    private limit;
     constructor(params: DecryptForTxBuilderParams);
     /**
      * @param chainId - Chain to decrypt values from. Used to fetch the threshold network URL and use the correct acp.
@@ -657,6 +681,13 @@ declare class DecryptForTxBuilder extends BaseBuilder {
      */
     setTimeout(this: DecryptForTxBuilderUnset, timeoutMs: number): DecryptForTxBuilderUnset;
     setTimeout(this: DecryptForTxBuilderSelected, timeoutMs: number): DecryptForTxBuilderSelected;
+    /**
+     * Stops the decrypt when `signal` fires: the pending request is aborted, no further attempt is
+     * sent, and `execute()` rejects with `Aborted`. A request already processing on the threshold
+     * network is not cancelled.
+     */
+    setSignal(this: DecryptForTxBuilderUnset, signal: AbortSignal): DecryptForTxBuilderUnset;
+    setSignal(this: DecryptForTxBuilderSelected, signal: AbortSignal): DecryptForTxBuilderSelected;
     /**
      * Select "use acp" mode.
      *

package/dist/{clientTypes-BCAMwrqk.d.cts → clientTypes-K6XNB9H2.d.cts}

@@ -224,6 +224,12 @@ type CofheConfig = {
     supportedChains: CofheChain[];
     /** Default acp expiration in seconds, default is 30 days */
     defaultACPExpiration: number;
+    /**
+     * How many decrypts (`decryptForView` / `decryptForTx`) this client sends to the threshold
+     * network at a time; the rest wait their turn. A list of values decrypted at once stays within
+     * it without a limiter of its own. `Infinity` disables the cap. Default: 8
+     */
+    decryptConcurrency: number;
     /**
      * Storage scheme for the fetched fhe keys
      * FHE keys are large, and caching prevents re-fetching them on each encryptInputs call
@@ -337,6 +343,7 @@ declare const CofheConfigSchema: z.ZodObject<{
         environment: "MOCK" | "TESTNET" | "MAINNET";
     }>>;
     defaultACPExpiration: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    decryptConcurrency: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodLiteral<number>]>>>;
     fheKeyStorage: z.ZodDefault<z.ZodUnion<[z.ZodObject<{
         getItem: z.ZodCustom<(name: string) => Promise<any>, (name: string) => Promise<any>>;
         setItem: z.ZodCustom<(name: string, value: any) => Promise<void>, (name: string, value: any) => Promise<void>>;
@@ -432,6 +439,9 @@ declare abstract class BaseBuilder {
     };
 }
 
+/** Runs a threshold-network call when a slot is free; see `createDecryptLimiter`. */
+type DecryptLimiter = <T>(task: () => Promise<T>, operationLabel: string, signal?: AbortSignal) => Promise<T>;
+
 /**
  * API
  *
@@ -457,6 +467,8 @@ type DecryptForViewBuilderParams<U extends FheTypes> = BaseBuilderParams & {
     utype: U;
     acpHash?: string;
     acp?: ACP;
+    /** The client's decrypt cap; a builder made without one runs unlimited. */
+    limit?: DecryptLimiter;
 };
 declare class DecryptForViewBuilder<U extends FheTypes> extends BaseBuilder {
     private ctHash;
@@ -466,6 +478,8 @@ declare class DecryptForViewBuilder<U extends FheTypes> extends BaseBuilder {
     private pollCallback?;
     private retry404TimeoutMs;
     private timeoutMs?;
+    private signal?;
+    private limit;
     constructor(params: DecryptForViewBuilderParams<U>);
     /**
      * @param chainId - Chain to decrypt values from. Used to fetch the threshold network URL and use the correct acp.
@@ -507,6 +521,12 @@ declare class DecryptForViewBuilder<U extends FheTypes> extends BaseBuilder {
      * processing on the threshold network is not cancelled.
      */
     setTimeout(timeoutMs: number): DecryptForViewBuilder<U>;
+    /**
+     * Stops the decrypt when `signal` fires: the pending request is aborted, no further attempt is
+     * sent, and `execute()` rejects with `Aborted`. A request already processing on the threshold
+     * network is not cancelled.
+     */
+    setSignal(signal: AbortSignal): DecryptForViewBuilder<U>;
     /**
      * Select "use acp" mode (optional).
      *
@@ -589,6 +609,8 @@ declare class DecryptForViewBuilder<U extends FheTypes> extends BaseBuilder {
 
 type DecryptForTxBuilderParams = BaseBuilderParams & {
     ctHash: bigint | string;
+    /** The client's decrypt cap; a builder made without one runs unlimited. */
+    limit?: DecryptLimiter;
 };
 type DecryptForTxResult = {
     ctHash: bigint | string;
@@ -611,6 +633,8 @@ declare class DecryptForTxBuilder extends BaseBuilder {
     private pollCallback?;
     private retry404TimeoutMs;
     private timeoutMs?;
+    private signal?;
+    private limit;
     constructor(params: DecryptForTxBuilderParams);
     /**
      * @param chainId - Chain to decrypt values from. Used to fetch the threshold network URL and use the correct acp.
@@ -657,6 +681,13 @@ declare class DecryptForTxBuilder extends BaseBuilder {
      */
     setTimeout(this: DecryptForTxBuilderUnset, timeoutMs: number): DecryptForTxBuilderUnset;
     setTimeout(this: DecryptForTxBuilderSelected, timeoutMs: number): DecryptForTxBuilderSelected;
+    /**
+     * Stops the decrypt when `signal` fires: the pending request is aborted, no further attempt is
+     * sent, and `execute()` rejects with `Aborted`. A request already processing on the threshold
+     * network is not cancelled.
+     */
+    setSignal(this: DecryptForTxBuilderUnset, signal: AbortSignal): DecryptForTxBuilderUnset;
+    setSignal(this: DecryptForTxBuilderSelected, signal: AbortSignal): DecryptForTxBuilderSelected;
     /**
      * Select "use acp" mode.
      *

package/dist/core.cjs

@@ -107,6 +107,7 @@ var CofheErrorCode = /* @__PURE__ */ ((CofheErrorCode2) => {
   CofheErrorCode2["ACPVerifierTimeout"] = "ACP_VERIFIER_TIMEOUT";
   CofheErrorCode2["ACPRequired"] = "ACP_REQUIRED";
   CofheErrorCode2["SealFailed"] = "SEAL_FAILED";
+  CofheErrorCode2["Aborted"] = "ABORTED";
   return CofheErrorCode2;
 })(CofheErrorCode || {});
 var CofheError = class _CofheError extends Error {
@@ -2537,6 +2538,8 @@ var CofheConfigSchema = zod.z.object({
   supportedChains: zod.z.array(zod.z.custom()),
   /** Default acp expiration in seconds, default is 30 days */
   defaultACPExpiration: zod.z.number().optional().default(60 * 60 * 24 * 30),
+  /** Decrypts sent to the threshold network at a time per client; `Infinity` disables the cap (default 8) */
+  decryptConcurrency: zod.z.union([zod.z.number().min(1), zod.z.literal(Infinity)]).optional().default(8),
   /** Storage method for fhe keys (defaults to indexedDB on web, filesystem on node) */
   fheKeyStorage: zod.z.object({
     getItem: zod.z.custom((val) => typeof val === "function", {
@@ -4089,6 +4092,32 @@ function throwIfSubmitRetryTimedOut(params) {
     });
   }
 }
+function decryptAbortedError(operationLabel, signal) {
+  return new CofheError({
+    code: "ABORTED" /* Aborted */,
+    message: `${operationLabel} aborted by the caller`,
+    cause: signal.reason instanceof Error ? signal.reason : void 0
+  });
+}
+function throwIfAborted(signal, operationLabel) {
+  if (signal?.aborted)
+    throw decryptAbortedError(operationLabel, signal);
+}
+function sleepUnlessAborted(ms, signal, operationLabel) {
+  return new Promise((resolve, reject) => {
+    if (signal?.aborted)
+      return reject(decryptAbortedError(operationLabel, signal));
+    const onAbort = () => {
+      clearTimeout(timer);
+      reject(decryptAbortedError(operationLabel, signal));
+    };
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve();
+    }, ms);
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
 function normalizeTnSignature(signature) {
   if (typeof signature !== "string") {
     throw new CofheError({
@@ -4206,7 +4235,7 @@ function parseCompletedSealOutputResponse(params) {
   }
   return convertSealedData(sealed);
 }
-async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll) {
+async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll, signal) {
   const body = {
     ct_tempkey: BigInt(ctHash).toString(16).padStart(64, "0"),
     host_chain_id: chainId,
@@ -4215,6 +4244,7 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp
   let attemptIndex = 0;
   let last404ApiErrorMessage;
   for (; ; ) {
+    throwIfAborted(signal, "sealOutput");
     let response;
     try {
       response = await cofheFetch(
@@ -4225,10 +4255,12 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp
           headers: {
             "Content-Type": "application/json"
           },
-          body: JSON.stringify(body)
+          body: JSON.stringify(body),
+          signal
         }
       );
     } catch (e) {
+      throwIfAborted(signal, "sealOutput");
       throw new CofheError({
         code: "SEAL_OUTPUT_FAILED" /* SealOutputFailed */,
         message: `sealOutput request failed`,
@@ -4323,13 +4355,14 @@ async function submitSealOutputRequest(thresholdNetworkUrl, ctHash, chainId, acp
       intervalMs: SUBMIT_RETRY_INTERVAL_MS,
       timeoutMs
     });
-    await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS));
+    await sleepUnlessAborted(SUBMIT_RETRY_INTERVAL_MS, signal, "sealOutput");
     attemptIndex += 1;
   }
 }
-async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll) {
+async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll, signal) {
   let attemptIndex = 0;
   while (true) {
+    throwIfAborted(signal, "sealOutput");
     const elapsedMs = Date.now() - overallStartTime;
     const intervalMs = computeMinuteRampPollIntervalMs(elapsedMs, {
       minIntervalMs: POLL_INTERVAL_MS,
@@ -4364,7 +4397,8 @@ async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStart
           method: "GET",
           headers: {
             "Content-Type": "application/json"
-          }
+          },
+          signal
         }
       );
     } catch (e) {
@@ -4425,7 +4459,7 @@ async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStart
         requestId
       });
     }
-    await new Promise((resolve) => setTimeout(resolve, intervalMs));
+    await sleepUnlessAborted(intervalMs, signal, "sealOutput");
     attemptIndex += 1;
   }
   throw new CofheError({
@@ -4438,7 +4472,7 @@ async function pollSealOutputStatus(thresholdNetworkUrl, requestId, overallStart
   });
 }
 async function tnSealOutputV2(params) {
-  const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll } = params;
+  const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll, signal } = params;
   const timeoutMs = params.timeoutMs ?? DEFAULT_DECRYPT_TIMEOUT_MS;
   const normalized404RetryTimeoutMs = normalize404RetryTimeoutMs({
     timeoutMs: retry404TimeoutMs,
@@ -4454,12 +4488,20 @@ async function tnSealOutputV2(params) {
     overallStartTime,
     normalized404RetryTimeoutMs,
     timeoutMs,
-    onPoll
+    onPoll,
+    signal
   );
   if (submitResult.kind === "completed") {
     return submitResult.sealed;
   }
-  return await pollSealOutputStatus(thresholdNetworkUrl, submitResult.requestId, overallStartTime, timeoutMs, onPoll);
+  return await pollSealOutputStatus(
+    thresholdNetworkUrl,
+    submitResult.requestId,
+    overallStartTime,
+    timeoutMs,
+    onPoll,
+    signal
+  );
 }
 
 // core/decrypt/decryptForViewBuilder.ts
@@ -4472,6 +4514,8 @@ var DecryptForViewBuilder = class extends BaseBuilder {
   pollCallback;
   retry404TimeoutMs = DEFAULT_404_RETRY_TIMEOUT_MS2;
   timeoutMs;
+  signal;
+  limit;
   constructor(params) {
     super({
       config: params.config,
@@ -4485,6 +4529,7 @@ var DecryptForViewBuilder = class extends BaseBuilder {
     this.utype = params.utype;
     this.acpHash = params.acpHash;
     this.acp = params.acp;
+    this.limit = params.limit ?? ((task) => task());
   }
   /**
    * @param chainId - Chain to decrypt values from. Used to fetch the threshold network URL and use the correct acp.
@@ -4555,6 +4600,15 @@ var DecryptForViewBuilder = class extends BaseBuilder {
     this.timeoutMs = timeoutMs;
     return this;
   }
+  /**
+   * Stops the decrypt when `signal` fires: the pending request is aborted, no further attempt is
+   * sent, and `execute()` rejects with `Aborted`. A request already processing on the threshold
+   * network is not cancelled.
+   */
+  setSignal(signal) {
+    this.signal = signal;
+    return this;
+  }
   withACP(acpOrACPHash) {
     if (typeof acpOrACPHash === "string") {
       this.acpHash = acpOrACPHash;
@@ -4678,15 +4732,20 @@ var DecryptForViewBuilder = class extends BaseBuilder {
     this.assertPublicClient();
     const thresholdNetworkUrl = await this.getThresholdNetworkUrl();
     const wireAcp = ACPUtils.getPublic(acp, true);
-    const sealed = await tnSealOutputV2({
-      ctHash: this.ctHash,
-      chainId: this.chainId,
-      acp: wireAcp,
-      thresholdNetworkUrl,
-      retry404TimeoutMs: this.retry404TimeoutMs,
-      timeoutMs: this.timeoutMs,
-      onPoll: this.pollCallback
-    });
+    const sealed = await this.limit(
+      () => tnSealOutputV2({
+        ctHash: this.ctHash,
+        chainId: this.chainId,
+        acp: wireAcp,
+        thresholdNetworkUrl,
+        retry404TimeoutMs: this.retry404TimeoutMs,
+        timeoutMs: this.timeoutMs,
+        onPoll: this.pollCallback,
+        signal: this.signal
+      }),
+      "sealOutput",
+      this.signal
+    );
     return ACPUtils.unseal(acp, sealed);
   }
   /**
@@ -4903,7 +4962,7 @@ function assertDecryptStatusResponseV2(value) {
   }
   return value;
 }
-async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll) {
+async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp, overallStartTime, retry404TimeoutMs, timeoutMs, onPoll, signal) {
   const body = {
     ct_tempkey: BigInt(ctHash).toString(16).padStart(64, "0"),
     host_chain_id: chainId
@@ -4914,6 +4973,7 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp,
   let attemptIndex = 0;
   let last404ApiErrorMessage;
   for (; ; ) {
+    throwIfAborted(signal, "decrypt");
     let response;
     try {
       response = await cofheFetch(
@@ -4924,10 +4984,12 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp,
           headers: {
             "Content-Type": "application/json"
           },
-          body: JSON.stringify(body)
+          body: JSON.stringify(body),
+          signal
         }
       );
     } catch (e) {
+      throwIfAborted(signal, "decrypt");
       throw new CofheError({
         code: "DECRYPT_FAILED" /* DecryptFailed */,
         message: `decrypt request failed`,
@@ -5024,13 +5086,14 @@ async function submitDecryptRequestV2(thresholdNetworkUrl, ctHash, chainId, acp,
       intervalMs: SUBMIT_RETRY_INTERVAL_MS2,
       timeoutMs
     });
-    await new Promise((resolve) => setTimeout(resolve, SUBMIT_RETRY_INTERVAL_MS2));
+    await sleepUnlessAborted(SUBMIT_RETRY_INTERVAL_MS2, signal, "decrypt");
     attemptIndex += 1;
   }
 }
-async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll) {
+async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartTime, timeoutMs, onPoll, signal) {
   let attemptIndex = 0;
   while (true) {
+    throwIfAborted(signal, "decrypt");
     const elapsedMs = Date.now() - overallStartTime;
     const intervalMs = computeMinuteRampPollIntervalMs(elapsedMs, {
       minIntervalMs: POLL_INTERVAL_MS2,
@@ -5065,7 +5128,8 @@ async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartT
           method: "GET",
           headers: {
             "Content-Type": "application/json"
-          }
+          },
+          signal
         }
       );
     } catch (e) {
@@ -5127,7 +5191,7 @@ async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartT
         requestId
       });
     }
-    await new Promise((resolve) => setTimeout(resolve, intervalMs));
+    await sleepUnlessAborted(intervalMs, signal, "decrypt");
     attemptIndex += 1;
   }
   throw new CofheError({
@@ -5140,7 +5204,7 @@ async function pollDecryptStatusV2(thresholdNetworkUrl, requestId, overallStartT
   });
 }
 async function tnDecryptV2(params) {
-  const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll } = params;
+  const { thresholdNetworkUrl, ctHash, chainId, acp, retry404TimeoutMs, onPoll, signal } = params;
   const timeoutMs = params.timeoutMs ?? DEFAULT_DECRYPT_TIMEOUT_MS;
   const normalized404RetryTimeoutMs = normalize404RetryTimeoutMs({
     timeoutMs: retry404TimeoutMs,
@@ -5156,12 +5220,20 @@ async function tnDecryptV2(params) {
     overallStartTime,
     normalized404RetryTimeoutMs,
     timeoutMs,
-    onPoll
+    onPoll,
+    signal
   );
   if (submitResult.kind === "completed") {
     return submitResult;
   }
-  return await pollDecryptStatusV2(thresholdNetworkUrl, submitResult.requestId, overallStartTime, timeoutMs, onPoll);
+  return await pollDecryptStatusV2(
+    thresholdNetworkUrl,
+    submitResult.requestId,
+    overallStartTime,
+    timeoutMs,
+    onPoll,
+    signal
+  );
 }
 
 // core/decrypt/decryptForTxBuilder.ts
@@ -5174,6 +5246,8 @@ var DecryptForTxBuilder = class extends BaseBuilder {
   pollCallback;
   retry404TimeoutMs = DEFAULT_404_RETRY_TIMEOUT_MS3;
   timeoutMs;
+  signal;
+  limit;
   constructor(params) {
     super({
       config: params.config,
@@ -5184,6 +5258,7 @@ var DecryptForTxBuilder = class extends BaseBuilder {
       requireConnected: params.requireConnected
     });
     this.ctHash = params.ctHash;
+    this.limit = params.limit ?? ((task) => task());
   }
   setChainId(chainId) {
     this.chainId = chainId;
@@ -5221,6 +5296,10 @@ var DecryptForTxBuilder = class extends BaseBuilder {
     this.timeoutMs = timeoutMs;
     return this;
   }
+  setSignal(signal) {
+    this.signal = signal;
+    return this;
+  }
   withACP(acpOrACPHash) {
     if (this.acpSelection === "with-acp") {
       throw new CofheError({
@@ -5348,15 +5427,20 @@ var DecryptForTxBuilder = class extends BaseBuilder {
     this.assertPublicClient();
     const thresholdNetworkUrl = await this.getThresholdNetworkUrl();
     const wireAcp = acp ? ACPUtils.getPublic(acp, true) : null;
-    const { decryptedValue, signature } = await tnDecryptV2({
-      ctHash: this.ctHash,
-      chainId: this.chainId,
-      acp: wireAcp,
-      thresholdNetworkUrl,
-      retry404TimeoutMs: this.retry404TimeoutMs,
-      timeoutMs: this.timeoutMs,
-      onPoll: this.pollCallback
-    });
+    const { decryptedValue, signature } = await this.limit(
+      () => tnDecryptV2({
+        ctHash: this.ctHash,
+        chainId: this.chainId,
+        acp: wireAcp,
+        thresholdNetworkUrl,
+        retry404TimeoutMs: this.retry404TimeoutMs,
+        timeoutMs: this.timeoutMs,
+        onPoll: this.pollCallback,
+        signal: this.signal
+      }),
+      "decrypt",
+      this.signal
+    );
     return {
       ctHash: this.ctHash,
       decryptedValue,
@@ -5394,6 +5478,39 @@ var DecryptForTxBuilder = class extends BaseBuilder {
     }
   }
 };
+
+// core/decrypt/decryptLimiter.ts
+function createDecryptLimiter(max) {
+  let active = 0;
+  const waiting = [];
+  return async (task, operationLabel, signal) => {
+    if (signal?.aborted)
+      throw decryptAbortedError(operationLabel, signal);
+    if (active >= max) {
+      await new Promise((resume, reject) => {
+        const onAbort = () => {
+          const index = waiting.indexOf(start);
+          if (index >= 0)
+            waiting.splice(index, 1);
+          reject(decryptAbortedError(operationLabel, signal));
+        };
+        const start = () => {
+          signal?.removeEventListener("abort", onAbort);
+          resume();
+        };
+        signal?.addEventListener("abort", onAbort, { once: true });
+        waiting.push(start);
+      });
+    }
+    active += 1;
+    try {
+      return await task();
+    } finally {
+      active -= 1;
+      waiting.shift()?.();
+    }
+  };
+}
 var decryptResultSignerAbi = viem.parseAbi(["function decryptResultSigner() view returns (address)"]);
 var UINT_TYPE_MASK2 = 0x7fn;
 var TYPE_BYTE_OFFSET2 = 8n;
@@ -5539,11 +5656,13 @@ function createCofheClientBase(opts) {
       requireConnected: _requireConnected
     });
   }
+  const decryptLimiter = createDecryptLimiter(opts.config.decryptConcurrency);
   function decryptForView(ctHash, utype) {
     const state = connectStore.getState();
     return new DecryptForViewBuilder({
       ctHash,
       utype,
+      limit: decryptLimiter,
       chainId: state.chainId,
       account: state.account,
       config: opts.config,
@@ -5556,6 +5675,7 @@ function createCofheClientBase(opts) {
     const state = connectStore.getState();
     return new DecryptForTxBuilder({
       ctHash,
+      limit: decryptLimiter,
       chainId: state.chainId,
       account: state.account,
       config: opts.config,

package/dist/core.d.cts

@@ -1,5 +1,5 @@
-import { a as CofheConfig, c as CofheClientParams, b as CofheClient, d as CofheClientConnectionState, F as FheTypes } from './clientTypes-BCAMwrqk.cjs';
-export { A as AnyExternalHash, i as CofheClientACPs, C as CofheInputConfig, h as CofheInternalConfig, K as DecryptEndpoint, a4 as DecryptForTxBuilder, a5 as DecryptForTxResult, a3 as DecryptForViewBuilder, J as DecryptPollCallbackContext, G as DecryptPollCallbackFunction, a1 as EncryptInputsBuilder, a2 as EncryptInputsBuilderUnset, M as EncryptSetStateFn, W as EncryptStep, N as EncryptStepCallbackContext, S as Encryptable, p as EncryptableAddress, j as EncryptableBool, E as EncryptableItem, B as EncryptableToExternalHashMap, o as EncryptableUint128, l as EncryptableUint16, m as EncryptableUint32, n as EncryptableUint64, k as EncryptableUint8, q as EncryptedNumber, y as ExternalAddressHash, s as ExternalBoolHash, z as ExternalHashProof, D as ExternalItemHashes, x as ExternalUint128Hash, u as ExternalUint16Hash, v as ExternalUint32Hash, w as ExternalUint64Hash, t as ExternalUint8Hash, R as FheAllUTypes, Z as FheKeyDeserializer, r as FheTypeValue, Q as FheUintUTypes, H as HashPlusProofResult, I as IStorage, $ as KeysStorage, a0 as KeysStore, L as LiteralToPrimitive, P as Primitive, T as TfheInitializer, O as TfheThreadsSetting, U as UnsealedItem, a6 as ZkBuilderAndCrsGenerator, a7 as ZkProveWorkerFunction, a8 as ZkProveWorkerRequest, a9 as ZkProveWorkerResponse, f as assertNoRenamedConfigKeys, e as createCofheConfigBase, _ as createKeysStore, Y as fetchKeys, g as getCofheConfigItem, V as isEncryptableItem, X as isLastEncryptionStep, aa as zkProveWithWorker } from './clientTypes-BCAMwrqk.cjs';
+import { a as CofheConfig, c as CofheClientParams, b as CofheClient, d as CofheClientConnectionState, F as FheTypes } from './clientTypes-K6XNB9H2.cjs';
+export { A as AnyExternalHash, i as CofheClientACPs, C as CofheInputConfig, h as CofheInternalConfig, K as DecryptEndpoint, a4 as DecryptForTxBuilder, a5 as DecryptForTxResult, a3 as DecryptForViewBuilder, J as DecryptPollCallbackContext, G as DecryptPollCallbackFunction, a1 as EncryptInputsBuilder, a2 as EncryptInputsBuilderUnset, M as EncryptSetStateFn, W as EncryptStep, N as EncryptStepCallbackContext, S as Encryptable, p as EncryptableAddress, j as EncryptableBool, E as EncryptableItem, B as EncryptableToExternalHashMap, o as EncryptableUint128, l as EncryptableUint16, m as EncryptableUint32, n as EncryptableUint64, k as EncryptableUint8, q as EncryptedNumber, y as ExternalAddressHash, s as ExternalBoolHash, z as ExternalHashProof, D as ExternalItemHashes, x as ExternalUint128Hash, u as ExternalUint16Hash, v as ExternalUint32Hash, w as ExternalUint64Hash, t as ExternalUint8Hash, R as FheAllUTypes, Z as FheKeyDeserializer, r as FheTypeValue, Q as FheUintUTypes, H as HashPlusProofResult, I as IStorage, $ as KeysStorage, a0 as KeysStore, L as LiteralToPrimitive, P as Primitive, T as TfheInitializer, O as TfheThreadsSetting, U as UnsealedItem, a6 as ZkBuilderAndCrsGenerator, a7 as ZkProveWorkerFunction, a8 as ZkProveWorkerRequest, a9 as ZkProveWorkerResponse, f as assertNoRenamedConfigKeys, e as createCofheConfigBase, _ as createKeysStore, Y as fetchKeys, g as getCofheConfigItem, V as isEncryptableItem, X as isLastEncryptionStep, aa as zkProveWithWorker } from './clientTypes-K6XNB9H2.cjs';
 import { PublicClient, Address, Hex } from 'viem';
 import './types-C07FK-cL.cjs';
 import 'zod';
@@ -101,7 +101,9 @@ declare enum CofheErrorCode {
     CtSourceTimeout = "CT_SOURCE_TIMEOUT",
     ACPVerifierTimeout = "ACP_VERIFIER_TIMEOUT",
     ACPRequired = "ACP_REQUIRED",
-    SealFailed = "SEAL_FAILED"
+    SealFailed = "SEAL_FAILED",
+    /** The caller's `AbortSignal` fired; the operation stopped at its next await. */
+    Aborted = "ABORTED"
 }
 type CofheErrorParams = {
     code: CofheErrorCode;

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { a as CofheConfig, c as CofheClientParams, b as CofheClient, d as CofheClientConnectionState, F as FheTypes } from './clientTypes-LvslG7o0.js';
-export { A as AnyExternalHash, i as CofheClientACPs, C as CofheInputConfig, h as CofheInternalConfig, K as DecryptEndpoint, a4 as DecryptForTxBuilder, a5 as DecryptForTxResult, a3 as DecryptForViewBuilder, J as DecryptPollCallbackContext, G as DecryptPollCallbackFunction, a1 as EncryptInputsBuilder, a2 as EncryptInputsBuilderUnset, M as EncryptSetStateFn, W as EncryptStep, N as EncryptStepCallbackContext, S as Encryptable, p as EncryptableAddress, j as EncryptableBool, E as EncryptableItem, B as EncryptableToExternalHashMap, o as EncryptableUint128, l as EncryptableUint16, m as EncryptableUint32, n as EncryptableUint64, k as EncryptableUint8, q as EncryptedNumber, y as ExternalAddressHash, s as ExternalBoolHash, z as ExternalHashProof, D as ExternalItemHashes, x as ExternalUint128Hash, u as ExternalUint16Hash, v as ExternalUint32Hash, w as ExternalUint64Hash, t as ExternalUint8Hash, R as FheAllUTypes, Z as FheKeyDeserializer, r as FheTypeValue, Q as FheUintUTypes, H as HashPlusProofResult, I as IStorage, $ as KeysStorage, a0 as KeysStore, L as LiteralToPrimitive, P as Primitive, T as TfheInitializer, O as TfheThreadsSetting, U as UnsealedItem, a6 as ZkBuilderAndCrsGenerator, a7 as ZkProveWorkerFunction, a8 as ZkProveWorkerRequest, a9 as ZkProveWorkerResponse, f as assertNoRenamedConfigKeys, e as createCofheConfigBase, _ as createKeysStore, Y as fetchKeys, g as getCofheConfigItem, V as isEncryptableItem, X as isLastEncryptionStep, aa as zkProveWithWorker } from './clientTypes-LvslG7o0.js';
+import { a as CofheConfig, c as CofheClientParams, b as CofheClient, d as CofheClientConnectionState, F as FheTypes } from './clientTypes-DFXuL9kz.js';
+export { A as AnyExternalHash, i as CofheClientACPs, C as CofheInputConfig, h as CofheInternalConfig, K as DecryptEndpoint, a4 as DecryptForTxBuilder, a5 as DecryptForTxResult, a3 as DecryptForViewBuilder, J as DecryptPollCallbackContext, G as DecryptPollCallbackFunction, a1 as EncryptInputsBuilder, a2 as EncryptInputsBuilderUnset, M as EncryptSetStateFn, W as EncryptStep, N as EncryptStepCallbackContext, S as Encryptable, p as EncryptableAddress, j as EncryptableBool, E as EncryptableItem, B as EncryptableToExternalHashMap, o as EncryptableUint128, l as EncryptableUint16, m as EncryptableUint32, n as EncryptableUint64, k as EncryptableUint8, q as EncryptedNumber, y as ExternalAddressHash, s as ExternalBoolHash, z as ExternalHashProof, D as ExternalItemHashes, x as ExternalUint128Hash, u as ExternalUint16Hash, v as ExternalUint32Hash, w as ExternalUint64Hash, t as ExternalUint8Hash, R as FheAllUTypes, Z as FheKeyDeserializer, r as FheTypeValue, Q as FheUintUTypes, H as HashPlusProofResult, I as IStorage, $ as KeysStorage, a0 as KeysStore, L as LiteralToPrimitive, P as Primitive, T as TfheInitializer, O as TfheThreadsSetting, U as UnsealedItem, a6 as ZkBuilderAndCrsGenerator, a7 as ZkProveWorkerFunction, a8 as ZkProveWorkerRequest, a9 as ZkProveWorkerResponse, f as assertNoRenamedConfigKeys, e as createCofheConfigBase, _ as createKeysStore, Y as fetchKeys, g as getCofheConfigItem, V as isEncryptableItem, X as isLastEncryptionStep, aa as zkProveWithWorker } from './clientTypes-DFXuL9kz.js';
 import { PublicClient, Address, Hex } from 'viem';
 import './types-C07FK-cL.js';
 import 'zod';
@@ -101,7 +101,9 @@ declare enum CofheErrorCode {
     CtSourceTimeout = "CT_SOURCE_TIMEOUT",
     ACPVerifierTimeout = "ACP_VERIFIER_TIMEOUT",
     ACPRequired = "ACP_REQUIRED",
-    SealFailed = "SEAL_FAILED"
+    SealFailed = "SEAL_FAILED",
+    /** The caller's `AbortSignal` fired; the operation stopped at its next await. */
+    Aborted = "ABORTED"
 }
 type CofheErrorParams = {
     code: CofheErrorCode;

package/dist/core.js

@@ -1,5 +1,5 @@
-export { InitialConnectStore as CONNECT_STORE_DEFAULTS, DecryptForTxBuilder, DecryptForViewBuilder, EncryptInputsBuilder, assertNoRenamedConfigKeys, cofheFetch, createCofheClientBase, createCofheConfigBase, createKeysStore, fetchKeys, getCofheConfigItem, getCofheDebugInterceptors, setCofheDebugInterceptors, verifyDecryptResult, zkProveWithWorker } from './chunk-KHM6LYLU.js';
+export { InitialConnectStore as CONNECT_STORE_DEFAULTS, DecryptForTxBuilder, DecryptForViewBuilder, EncryptInputsBuilder, assertNoRenamedConfigKeys, cofheFetch, createCofheClientBase, createCofheConfigBase, createKeysStore, fetchKeys, getCofheConfigItem, getCofheDebugInterceptors, setCofheDebugInterceptors, verifyDecryptResult, zkProveWithWorker } from './chunk-ZYCIUX5C.js';
 import './chunk-UKQAJK4N.js';
-export { getTaskManagerAddress } from './chunk-WAA2U7CT.js';
-export { EncryptStep, Encryptable, FheAllUTypes, FheTypes, FheUintUTypes, fheTypeToString, isEncryptableItem, isLastEncryptionStep } from './chunk-3SD2UCRE.js';
-export { COFHE_ADDRESS_BOOK_ADDRESS, CofheError, CofheErrorCode, MOCKS_DECRYPT_RESULT_SIGNER_PRIVATE_KEY, MOCKS_TASK_MANAGER_ADDRESS, MOCKS_THRESHOLD_NETWORK_ADDRESS, MOCKS_ZK_VERIFIER_ADDRESS, MOCKS_ZK_VERIFIER_SIGNER_ADDRESS, MOCKS_ZK_VERIFIER_SIGNER_PRIVATE_KEY, TASK_MANAGER_ID, TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT, TFHE_RS_ZK_MAX_BITS, isCofheError } from './chunk-OC5TGQGG.js';
+export { getTaskManagerAddress } from './chunk-37SG44CR.js';
+export { EncryptStep, Encryptable, FheAllUTypes, FheTypes, FheUintUTypes, fheTypeToString, isEncryptableItem, isLastEncryptionStep } from './chunk-PLHQYVND.js';
+export { COFHE_ADDRESS_BOOK_ADDRESS, CofheError, CofheErrorCode, MOCKS_DECRYPT_RESULT_SIGNER_PRIVATE_KEY, MOCKS_TASK_MANAGER_ADDRESS, MOCKS_THRESHOLD_NETWORK_ADDRESS, MOCKS_ZK_VERIFIER_ADDRESS, MOCKS_ZK_VERIFIER_SIGNER_ADDRESS, MOCKS_ZK_VERIFIER_SIGNER_PRIVATE_KEY, TASK_MANAGER_ID, TFHE_RS_SAFE_SERIALIZATION_SIZE_LIMIT, TFHE_RS_ZK_MAX_BITS, isCofheError } from './chunk-NJTYZ3CW.js';