@fhevm/sdk 0.0.1 → 1.0.0-alpha.1

package/_esm/core/host-contracts/getKmsContextSignersAndThresholdFromExtraData-p.js

@@ -0,0 +1,73 @@
+import { getVersion, isVersionStrictlyBefore } from './HostContractVersion-p.js';
+import { createCachedFetch } from '../base/cachedFetch.js';
+import { assertIsKmsExtraData, fromKmsExtraData } from '../kms/kmsExtraData.js';
+import { assertIsChecksummedAddressArray } from '../base/address.js';
+import { isUint8 } from '../base/uint.js';
+import { getContextSignersAndThresholdFromExtraDataAbi } from './abi-fragments/fragments.js';
+import { getTrustedClient } from '../runtime/CoreFhevm-p.js';
+////////////////////////////////////////////////////////////////////////////////
+const cachedGetKmsContextSignersAndThresholdFromExtraData = createCachedFetch({
+    executeFn: _getKmsContextSignersAndThresholdFromExtraData,
+    cacheKeyFn: (context, params) => {
+        const { kmsContextId } = fromKmsExtraData(params.extraData);
+        const contextIdHex = kmsContextId.toString(16).padStart(64, '0');
+        return `${context.runtime.uid.toLowerCase()}:${params.address.toLowerCase()}:${contextIdHex}`;
+    },
+    // Permanent cache: signers and threshold are immutable per context ID.
+});
+////////////////////////////////////////////////////////////////////////////////
+/**
+ * Reads the KMS signers and threshold for a given extraData context.
+ *
+ * Only available on KMSVerifier contracts >= v0.2.0. Throws on older versions.
+ *
+ * **Caching:** Results are cached permanently per (runtime, address, contextId)
+ * with no TTL. On-chain, new KMS context IDs can be added over time, but once
+ * a context is created its signers and threshold are immutable — they can never
+ * be modified or removed. This makes indefinite caching safe: a cached entry
+ * will always match the on-chain state. Concurrent callers to the same context
+ * share a single in-flight RPC request (deduplication).
+ *
+ * @param parameters.address - The checksummed address of the KMSVerifier contract.
+ * @param parameters.extraData - The encoded extraData (v1 format: version byte + 32-byte context ID).
+ */
+export function getKmsContextSignersAndThresholdFromExtraData(context, parameters) {
+    assertIsKmsExtraData(parameters.extraData, {});
+    return cachedGetKmsContextSignersAndThresholdFromExtraData.execute(context, parameters);
+}
+////////////////////////////////////////////////////////////////////////////////
+async function _getKmsContextSignersAndThresholdFromExtraData(context, parameters) {
+    const version = await getVersion(context, { address: parameters.address });
+    if (isVersionStrictlyBefore(version, { major: 0, minor: 2 })) {
+        throw new Error('getContextSignersAndThresholdFromExtraData requires KMSVerifier >= v0.2.0');
+    }
+    const trustedClient = getTrustedClient(context);
+    const address = parameters.address;
+    const res = await context.runtime.ethereum.readContract(trustedClient, {
+        address: address,
+        abi: getContextSignersAndThresholdFromExtraDataAbi,
+        args: [parameters.extraData],
+        functionName: getContextSignersAndThresholdFromExtraDataAbi[0].name,
+    });
+    if (!Array.isArray(res) || res.length < 2) {
+        throw new Error(`Invalid getContextSignersAndThresholdFromExtraData result.`);
+    }
+    const unknownSigners = res[0];
+    const unknownThreshold = res[1];
+    try {
+        assertIsChecksummedAddressArray(unknownSigners, {});
+    }
+    catch (e) {
+        throw new Error(`Invalid kms signers addresses.`, {
+            cause: e,
+        });
+    }
+    if (!isUint8(unknownThreshold)) {
+        throw new Error('Invalid threshold.');
+    }
+    return Object.freeze({
+        threshold: Number(unknownThreshold),
+        signers: unknownSigners,
+    });
+}
+//# sourceMappingURL=getKmsContextSignersAndThresholdFromExtraData-p.js.map

package/_esm/core/host-contracts/getKmsContextSignersAndThresholdFromExtraData-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getKmsContextSignersAndThresholdFromExtraData-p.js","sourceRoot":"","sources":["../../../core/host-contracts/getKmsContextSignersAndThresholdFromExtraData-p.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,6CAA6C,EAAE,MAAM,8BAA8B,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAmB7D,gFAAgF;AAEhF,MAAM,mDAAmD,GAAG,iBAAiB,CAAkC;IAC7G,SAAS,EAAE,8CAA8C;IACzD,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9B,MAAM,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,YAAY,EAAE,CAAC;IAChG,CAAC;IACD,uEAAuE;CACxE,CAAC,CAAC;AAEH,gFAAgF;AAEhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,6CAA6C,CAC3D,OAAgB,EAChB,UAAwE;IAExE,oBAAoB,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAE/C,OAAO,mDAAmD,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1F,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,8CAA8C,CAC3D,OAAgB,EAChB,UAAsB;IAEtB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,IAAI,uBAAuB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IAEnC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE;QACrE,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,6CAA6C;QAClD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAC5B,YAAY,EAAE,6CAA6C,CAAC,CAAC,CAAC,CAAC,IAAI;KACpE,CAAC,CAAC;IAEH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,cAAc,GAAG,GAAG,CAAC,CAAC,CAAY,CAAC;IACzC,MAAM,gBAAgB,GAAG,GAAG,CAAC,CAAC,CAAY,CAAC;IAE3C,IAAI,CAAC;QACH,+BAA+B,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE;YAChD,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAgB;QAClD,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;AACL,CAAC"}

package/_esm/core/host-contracts/getSignersForKmsContext-p.js

@@ -0,0 +1,64 @@
+import { getVersion, isVersionStrictlyBefore } from './HostContractVersion-p.js';
+import { getTrustedClient } from '../runtime/CoreFhevm-p.js';
+import { getKmsSignersAbi, getSignersForKmsContextAbi } from './abi-fragments/fragments.js';
+import { assertIsChecksummedAddressArray } from '../base/address.js';
+////////////////////////////////////////////////////////////////////////////////
+/**
+ * Reads the ordered signer list for a given KMS context ID from the KMSVerifier contract.
+ *
+ * This function is **not cached** — every call issues a fresh RPC request.
+ * Use sparingly or wrap with a caching layer if repeated calls are expected.
+ *
+ * Returns an empty array for KMSVerifier versions before v0.2.0 (where
+ * per-context signers were not yet supported).
+ *
+ * @param parameters.address - The checksummed address of the KMSVerifier contract.
+ * @param parameters.kmsContextId - The context ID to query signers for.
+ */
+export async function getSignersForKmsContext(context, parameters) {
+    const version = await getVersion(context, parameters);
+    // getCurrentKmsContextId has been introduced in KMSVerifier.sol v0.2.0
+    if (isVersionStrictlyBefore(version, { major: 0, minor: 2 })) {
+        if (parameters.kmsContextId === 0n) {
+            return getKmsSigners(context, parameters);
+        }
+        throw new Error('Invalid context id');
+    }
+    const trustedClient = getTrustedClient(context);
+    const address = parameters.address;
+    const res = await context.runtime.ethereum.readContract(trustedClient, {
+        address: address,
+        abi: getSignersForKmsContextAbi,
+        args: [parameters.kmsContextId],
+        functionName: getSignersForKmsContextAbi[0].name,
+    });
+    try {
+        assertIsChecksummedAddressArray(res, {});
+    }
+    catch (e) {
+        throw new Error(`Invalid signers for KMS Context Id ${parameters.kmsContextId}.`, {
+            cause: e,
+        });
+    }
+    return res;
+}
+export async function getKmsSigners(context, parameters) {
+    const trustedClient = getTrustedClient(context);
+    const address = parameters.address;
+    const res = await context.runtime.ethereum.readContract(trustedClient, {
+        address: address,
+        abi: getKmsSignersAbi,
+        args: [],
+        functionName: getKmsSignersAbi[0].name,
+    });
+    try {
+        assertIsChecksummedAddressArray(res, {});
+    }
+    catch (e) {
+        throw new Error(`Invalid KMS signers.`, {
+            cause: e,
+        });
+    }
+    return res;
+}
+//# sourceMappingURL=getSignersForKmsContext-p.js.map

package/_esm/core/host-contracts/getSignersForKmsContext-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSignersForKmsContext-p.js","sourceRoot":"","sources":["../../../core/host-contracts/getSignersForKmsContext-p.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AAgBrE,gFAAgF;AAEhF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAgB,EAAE,UAAsB;IACpF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACtD,uEAAuE;IACvE,IAAI,uBAAuB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7D,IAAI,UAAU,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;YACnC,OAAO,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IAEnC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE;QACrE,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,0BAA0B;QAC/B,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAC/B,YAAY,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC,IAAI;KACjD,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,+BAA+B,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,CAAC,YAAY,GAAG,EAAE;YAChF,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,UAA4C;IAE5C,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IAEnC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE;QACrE,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,gBAAgB;QACrB,IAAI,EAAE,EAAE;QACR,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;KACvC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,+BAA+B,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE;YACtC,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/_esm/core/host-contracts/isAllowedForDecryption.js

@@ -0,0 +1,29 @@
+import { isAllowedForDecryptionAbi } from './abi-fragments/fragments.js';
+import { getTrustedClient } from '../runtime/CoreFhevm-p.js';
+import { executeWithBatching } from '../base/promise.js';
+////////////////////////////////////////////////////////////////////////////////
+export async function isAllowedForDecryption(context, parameters) {
+    const { address, handles } = parameters;
+    const rpcCalls = handles.map((handle) => () => _isAllowedForDecryption(context, {
+        address,
+        handle,
+    }));
+    const results = await executeWithBatching(rpcCalls, context.options.batchRpcCalls);
+    return results;
+}
+////////////////////////////////////////////////////////////////////////////////
+async function _isAllowedForDecryption(context, parameters) {
+    const { address, handle } = parameters;
+    const trustedClient = getTrustedClient(context);
+    const res = await context.runtime.ethereum.readContract(trustedClient, {
+        address: address,
+        abi: isAllowedForDecryptionAbi,
+        args: [handle.bytes32Hex],
+        functionName: isAllowedForDecryptionAbi[0].name,
+    });
+    if (typeof res !== 'boolean') {
+        throw new Error(`Invalid isAllowedForDecryption result.`);
+    }
+    return res;
+}
+//# sourceMappingURL=isAllowedForDecryption.js.map

package/_esm/core/host-contracts/isAllowedForDecryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isAllowedForDecryption.js","sourceRoot":"","sources":["../../../core/host-contracts/isAllowedForDecryption.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAiBzD,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAgB,EAAE,UAAsB;IACnF,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;IAExC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAC1B,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,CACf,uBAAuB,CAAC,OAAO,EAAE;QAC/B,OAAO;QACP,MAAM;KACP,CAAC,CACL,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEnF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,uBAAuB,CACpC,OAAgB,EAChB,UAGC;IAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IACvC,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE;QACrE,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,yBAAyB;QAC9B,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;QACzB,YAAY,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI;KAChD,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/_esm/core/host-contracts/isUserDecryptable.js

@@ -0,0 +1,56 @@
+import { persistAllowed } from './persistAllowed.js';
+////////////////////////////////////////////////////////////////////////////////
+/**
+ * @internal
+ * See FHE.sol : isUserDecryptable()
+ */
+export async function isUserDecryptable(context, parameters) {
+    const { address, userAddress, handleContractPairs } = parameters;
+    function getKey(addr, handleBytes32Hex) {
+        return `${addr}:${handleBytes32Hex}`.toLowerCase();
+    }
+    const dedupedChecks = [];
+    const seenKeys = new Set();
+    for (const pair of handleContractPairs) {
+        const contractKey = getKey(pair.contractAddress, pair.handle.bytes32Hex);
+        if (!seenKeys.has(contractKey)) {
+            seenKeys.add(contractKey);
+            dedupedChecks.push({
+                handle: pair.handle,
+                account: pair.contractAddress,
+            });
+        }
+        const userKey = getKey(userAddress, pair.handle.bytes32Hex);
+        if (!seenKeys.has(userKey)) {
+            seenKeys.add(userKey);
+            dedupedChecks.push({
+                handle: pair.handle,
+                account: userAddress,
+            });
+        }
+    }
+    const dedupedResults = await persistAllowed(context, {
+        address,
+        pairs: dedupedChecks,
+    });
+    const resultMap = new Map();
+    for (const [i, check] of dedupedChecks.entries()) {
+        const result = dedupedResults[i];
+        if (result === undefined) {
+            throw new Error(`Missing result at index ${i}`);
+        }
+        resultMap.set(getKey(check.account, check.handle.bytes32Hex), result);
+    }
+    return handleContractPairs.map((pair) => {
+        const contractAllowed = resultMap.get(getKey(pair.contractAddress, pair.handle.bytes32Hex));
+        const userAllowed = resultMap.get(getKey(userAddress, pair.handle.bytes32Hex));
+        if (contractAllowed === undefined || userAllowed === undefined) {
+            throw new Error('Missing deduped persistAllowed result');
+        }
+        return {
+            contractAllowed,
+            userAllowed,
+        };
+    });
+}
+//# sourceMappingURL=isUserDecryptable.js.map

package/_esm/core/host-contracts/isUserDecryptable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isUserDecryptable.js","sourceRoot":"","sources":["../../../core/host-contracts/isUserDecryptable.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAwBrD,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAgB,EAAE,UAAsB;IAC9E,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,GAAG,UAAU,CAAC;IAEjE,SAAS,MAAM,CAAC,IAAY,EAAE,gBAAwB;QACpD,OAAO,GAAG,IAAI,IAAI,gBAAgB,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,aAAa,GAAwB,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC1B,aAAa,CAAC,IAAI,CAAC;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,IAAI,CAAC,eAAe;aAC9B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,WAAW;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE;QACnD,OAAO;QACP,KAAK,EAAE,aAAa;KACrB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtC,MAAM,eAAe,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5F,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAE/E,IAAI,eAAe,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO;YACL,eAAe;YACf,WAAW;SACZ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/_esm/core/host-contracts/persistAllowed.js

@@ -0,0 +1,30 @@
+import { persistAllowedAbi } from './abi-fragments/fragments.js';
+import { getTrustedClient } from '../runtime/CoreFhevm-p.js';
+import { executeWithBatching } from '../base/promise.js';
+////////////////////////////////////////////////////////////////////////////////
+export async function persistAllowed(context, parameters) {
+    const { address, pairs } = parameters;
+    const rpcCalls = pairs.map((pair) => () => _persistAllowed(context, {
+        address,
+        handle: pair.handle,
+        account: pair.account,
+    }));
+    const results = await executeWithBatching(rpcCalls, context.options.batchRpcCalls);
+    return results;
+}
+////////////////////////////////////////////////////////////////////////////////
+async function _persistAllowed(context, parameters) {
+    const { address, handle, account } = parameters;
+    const trustedClient = getTrustedClient(context);
+    const res = await context.runtime.ethereum.readContract(trustedClient, {
+        address: address,
+        abi: persistAllowedAbi,
+        args: [handle.bytes32Hex, account],
+        functionName: persistAllowedAbi[0].name,
+    });
+    if (typeof res !== 'boolean') {
+        throw new Error(`Invalid isAllowedForDecryption result.`);
+    }
+    return res;
+}
+//# sourceMappingURL=persistAllowed.js.map

package/_esm/core/host-contracts/persistAllowed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistAllowed.js","sourceRoot":"","sources":["../../../core/host-contracts/persistAllowed.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAiBzD,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAgB,EAAE,UAAsB;IAC3E,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CACxB,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,CACb,eAAe,CAAC,OAAO,EAAE;QACvB,OAAO;QACP,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CACL,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEnF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,eAAe,CAC5B,OAAgB,EAChB,UAIC;IAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;IAChD,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE;QACrE,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,iBAAiB;QACtB,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC;QAClC,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;KACxC,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/_esm/core/host-contracts/readCoprocessorSignersContext-p.js

@@ -0,0 +1,14 @@
+import { createCoprocessorSignersContext } from './CoprocessorSignersContext-p.js';
+import { getCoprocessorContextSignersAndThreshold } from './getCoprocessorContextSignersAndThreshold-p.js';
+////////////////////////////////////////////////////////////////////////////////
+export async function readCoprocessorSignersContext(context, parameters) {
+    // TTL-Cached
+    const c = await getCoprocessorContextSignersAndThreshold(context, parameters);
+    const data = createCoprocessorSignersContext(new WeakRef(context.runtime), {
+        ...parameters,
+        coprocessorSigners: c.signers,
+        coprocessorSignerThreshold: c.threshold,
+    });
+    return data;
+}
+//# sourceMappingURL=readCoprocessorSignersContext-p.js.map

package/_esm/core/host-contracts/readCoprocessorSignersContext-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readCoprocessorSignersContext-p.js","sourceRoot":"","sources":["../../../core/host-contracts/readCoprocessorSignersContext-p.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,wCAAwC,EAAE,MAAM,iDAAiD,CAAC;AAgB3G,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAAgB,EAAE,UAAsB;IAC1F,aAAa;IACb,MAAM,CAAC,GAAG,MAAM,wCAAwC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAE9E,MAAM,IAAI,GAAG,+BAA+B,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;QACzE,GAAG,UAAU;QACb,kBAAkB,EAAE,CAAC,CAAC,OAAO;QAC7B,0BAA0B,EAAE,CAAC,CAAC,SAAS;KACxC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/_esm/core/host-contracts/readKmsSignersContext-p.js

@@ -0,0 +1,116 @@
+import { assertIsKmsSignersContext, createKmsSignersContext, kmsSignersContextToExtraData, } from './KmsSignersContext-p.js';
+import { getCurrentKmsContextId } from './getCurrentKmsContextId-p.js';
+import { getVersion, isVersionStrictlyBefore } from './HostContractVersion-p.js';
+import { assertIsKmsExtraData, fromKmsExtraData, toKmsExtraData } from '../kms/kmsExtraData.js';
+import { getKmsContextSignersAndThresholdFromExtraData } from './getKmsContextSignersAndThresholdFromExtraData-p.js';
+import { getKmsSignersAndThreshold } from './getKmsContextSignersAndThreshold-p.js';
+////////////////////////////////////////////////////////////////////////////////
+export async function readKmsSignersContext(context, parameters) {
+    const kmsVerifierContractAddress = parameters.address;
+    // TTL-cached
+    const version = await getVersion(context, {
+        address: kmsVerifierContractAddress,
+    });
+    if (isVersionStrictlyBefore(version, { major: 0, minor: 2 })) {
+        return _readKmsSignersContextV1(context, parameters);
+    }
+    else {
+        return _readKmsSignersContext(context, parameters);
+    }
+}
+////////////////////////////////////////////////////////////////////////////////
+async function _readKmsSignersContextV1(context, parameters) {
+    if (parameters.kmsContextId !== undefined && parameters.kmsContextId !== 0n) {
+        throw new Error('Impossible on v1');
+    }
+    // TTL-Cached
+    const c = await getKmsSignersAndThreshold(context, parameters);
+    const data = createKmsSignersContext(new WeakRef(context.runtime), {
+        ...parameters,
+        kmsContextId: 0n,
+        kmsSigners: c.signers,
+        kmsSignerThreshold: c.threshold,
+    });
+    return data;
+}
+////////////////////////////////////////////////////////////////////////////////
+async function _readKmsSignersContext(context, parameters) {
+    let kmsContextId;
+    if (parameters.kmsContextId !== undefined) {
+        if (parameters.kmsContextId === 0n) {
+            throw new Error('Impossible on v2');
+        }
+        kmsContextId = parameters.kmsContextId;
+    }
+    else {
+        // TTL-Cached
+        kmsContextId = await getCurrentKmsContextId(context, parameters);
+    }
+    return _readKmsSignersContextForContextId(context, {
+        ...parameters,
+        kmsContextId,
+    });
+}
+async function _readKmsSignersContextForContextId(context, parameters) {
+    const { kmsContextId } = parameters;
+    const extraData = toKmsExtraData({
+        version: 1,
+        kmsContextId,
+    });
+    // Permanent-Cached
+    const c = await getKmsContextSignersAndThresholdFromExtraData(context, {
+        ...parameters,
+        extraData,
+    });
+    const data = createKmsSignersContext(new WeakRef(context.runtime), {
+        ...parameters,
+        kmsContextId,
+        kmsSigners: c.signers,
+        kmsSignerThreshold: c.threshold,
+    });
+    return data;
+}
+export async function reconcileKmsSignersContext(context, parameters) {
+    const { address, requestedKmsSignersContext, relayerExtraData, mode } = parameters;
+    assertIsKmsExtraData(relayerExtraData, {});
+    assertIsKmsSignersContext(requestedKmsSignersContext, {});
+    const requestedExtraData = kmsSignersContextToExtraData(requestedKmsSignersContext);
+    // 1. Exact match — the relayer used the same context as the SDK.
+    if (relayerExtraData === requestedExtraData) {
+        return requestedKmsSignersContext;
+    }
+    // Bytes differ — extract and compare serialization versions.
+    const relayerKmsExtraData = fromKmsExtraData(relayerExtraData);
+    const requestedKmsExtraData = fromKmsExtraData(requestedExtraData);
+    // Reject if extraData serialization version differs.
+    if (relayerKmsExtraData.version !== requestedKmsExtraData.version) {
+        throw new Error(`ExtraData serialization version mismatch: SDK uses v${requestedKmsExtraData.version}, ` +
+            `relayer returned v${relayerKmsExtraData.version}. ` +
+            `The SDK and relayer must agree on the extraData encoding format.`);
+    }
+    // Versions match but context IDs differ — verify the relayer's context on-chain.
+    const relayerKmsContextId = relayerKmsExtraData.kmsContextId;
+    // 2. In strict mode, only accept if the relayer used the current on-chain context.
+    if (mode === 'strict') {
+        // `readKmsSignersContext` with `forceRefresh` fetches the current context.
+        // If `relayerKmsContextId` matches current, we're good.
+        const currentContext = await readKmsSignersContext(context, {
+            address,
+            forceRefresh: true,
+        });
+        if (currentContext.id !== relayerKmsContextId) {
+            throw new Error(`Strict reconciliation failed: relayer used context ${relayerKmsContextId}, ` +
+                `but the current on-chain context is ${currentContext.id}.`);
+        }
+        return currentContext;
+    }
+    // 3. Loose mode — accept any valid (non-destroyed, in-range) context.
+    //    `readKmsSignersContext` with `forceRefresh` + specific `kmsContextId` will
+    //    throw if the context is destroyed or out of range.
+    return readKmsSignersContext(context, {
+        address,
+        kmsContextId: relayerKmsContextId,
+        forceRefresh: true,
+    });
+}
+//# sourceMappingURL=readKmsSignersContext-p.js.map

package/_esm/core/host-contracts/readKmsSignersContext-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readKmsSignersContext-p.js","sourceRoot":"","sources":["../../../core/host-contracts/readKmsSignersContext-p.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,6CAA6C,EAAE,MAAM,sDAAsD,CAAC;AACrH,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAkBpF,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAgB,EAAE,UAAsB;IAClF,MAAM,0BAA0B,GAAG,UAAU,CAAC,OAAO,CAAC;IAEtD,aAAa;IACb,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE;QACxC,OAAO,EAAE,0BAA0B;KACpC,CAAC,CAAC;IAEH,IAAI,uBAAuB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7D,OAAO,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,OAAO,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,wBAAwB,CAAC,OAAgB,EAAE,UAAsB;IAC9E,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,IAAI,UAAU,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IAED,aAAa;IACb,MAAM,CAAC,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAE/D,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;QACjE,GAAG,UAAU;QACb,YAAY,EAAE,EAAmB;QACjC,UAAU,EAAE,CAAC,CAAC,OAAO;QACrB,kBAAkB,EAAE,CAAC,CAAC,SAAS;KAChC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,sBAAsB,CAAC,OAAgB,EAAE,UAAsB;IAC5E,IAAI,YAA2B,CAAC;IAChC,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,UAAU,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QACD,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,aAAa;QACb,YAAY,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,kCAAkC,CAAC,OAAO,EAAE;QACjD,GAAG,UAAU;QACb,YAAY;KACb,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kCAAkC,CAC/C,OAAgB,EAChB,UAAiE;IAEjE,MAAM,EAAE,YAAY,EAAE,GAAG,UAAU,CAAC;IACpC,MAAM,SAAS,GAAG,cAAc,CAAC;QAC/B,OAAO,EAAE,CAAgB;QACzB,YAAY;KACb,CAAC,CAAC;IAEH,mBAAmB;IACnB,MAAM,CAAC,GAAG,MAAM,6CAA6C,CAAC,OAAO,EAAE;QACrE,GAAG,UAAU;QACb,SAAS;KACV,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;QACjE,GAAG,UAAU;QACb,YAAY;QACZ,UAAU,EAAE,CAAC,CAAC,OAAO;QACrB,kBAAkB,EAAE,CAAC,CAAC,SAAS;KAChC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AA6CD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB,EAChB,UAKC;IAED,MAAM,EAAE,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;IAEnF,oBAAoB,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC3C,yBAAyB,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IAE1D,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,0BAA0B,CAAC,CAAC;IAEpF,iEAAiE;IACjE,IAAI,gBAAgB,KAAK,kBAAkB,EAAE,CAAC;QAC5C,OAAO,0BAA0B,CAAC;IACpC,CAAC;IAED,6DAA6D;IAC7D,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IAEnE,qDAAqD;IACrD,IAAI,mBAAmB,CAAC,OAAO,KAAK,qBAAqB,CAAC,OAAO,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,uDAAuD,qBAAqB,CAAC,OAAO,IAAI;YACtF,qBAAqB,mBAAmB,CAAC,OAAO,IAAI;YACpD,kEAAkE,CACrE,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,YAAY,CAAC;IAE7D,mFAAmF;IACnF,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,2EAA2E;QAC3E,wDAAwD;QACxD,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE;YAC1D,OAAO;YACP,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QAEH,IAAI,cAAc,CAAC,EAAE,KAAK,mBAAmB,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,sDAAsD,mBAAmB,IAAI;gBAC3E,uCAAuC,cAAc,CAAC,EAAE,GAAG,CAC9D,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,sEAAsE;IACtE,gFAAgF;IAChF,wDAAwD;IACxD,OAAO,qBAAqB,CAAC,OAAO,EAAE;QACpC,OAAO;QACP,YAAY,EAAE,mBAAmB;QACjC,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;AACL,CAAC"}