@fhevm/sdk 0.0.1 → 1.0.0-alpha.1

package/_esm/core/kms/TransportKeypair-p.js

@@ -0,0 +1,211 @@
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _TransportKeypairImpl_publicKeyBytesHex, _TransportKeypairImpl_privateKeyBytes, _TransportKeypairImpl_runtime, _TransportKeypairImpl_tkmsPrivateKey;
+import { assertIsBytesOrBytesHex, bytesToHexLarge, hexToBytesFaster } from '../base/bytes.js';
+import { InvalidTypeError } from '../base/errors/InvalidTypeError.js';
+import { assertRecordNonNullableProperty } from '../base/record.js';
+import { asFhevmRuntimeWith } from '../runtime/CoreFhevmRuntime-p.js';
+import { verifyTkmsPublicKey } from '../utils-p/decrypt/verifyTkmsPublicKey.js';
+////////////////////////////////////////////////////////////////////////////////
+const PRIVATE_TOKEN = Symbol('TransportKeypair.token');
+////////////////////////////////////////////////////////////////////////////////
+// TransportKeypairImpl
+//
+// Unexported class wrapping closures that bind a tkmsPrivateKey.
+// - Class: enables instanceof checks (isTransportKeypair)
+// - Closures: methods capture privateKey without exposing it
+// - Frozen: instance, class, and prototype are all immutable
+// - Tree-shakable: unused exports are eliminated by bundlers
+// - No this pitfalls: methods are own properties, not prototype-bound
+// - tamper-resistant: class + private token + frozen prototype
+const GetTkmsPrivateKeyFn = Symbol();
+const SerializeFn = Symbol();
+class TransportKeypairImpl {
+    constructor(privateToken, runtime, parameters) {
+        _TransportKeypairImpl_publicKeyBytesHex.set(this, void 0);
+        _TransportKeypairImpl_privateKeyBytes.set(this, void 0);
+        _TransportKeypairImpl_runtime.set(this, void 0);
+        _TransportKeypairImpl_tkmsPrivateKey.set(this, void 0);
+        if (privateToken !== PRIVATE_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        __classPrivateFieldSet(this, _TransportKeypairImpl_runtime, new WeakRef(runtime), "f");
+        __classPrivateFieldSet(this, _TransportKeypairImpl_publicKeyBytesHex, parameters.publicKeyBytesHex, "f");
+        __classPrivateFieldSet(this, _TransportKeypairImpl_privateKeyBytes, parameters.privateKeyBytes, "f");
+        __classPrivateFieldSet(this, _TransportKeypairImpl_tkmsPrivateKey, parameters.tkmsPrivateKey, "f");
+    }
+    get publicKey() {
+        return __classPrivateFieldGet(this, _TransportKeypairImpl_publicKeyBytesHex, "f");
+    }
+    /**
+     * Hidden method (Symbol key) that returns the deserialized TKMS private key.
+     * Lazily deserializes and verifies on first call.
+     *
+     * Access is doubly protected:
+     * - The Symbol key is not exported from the SDK, making the method invisible to external code.
+     * - The `privateToken` argument must match the module-scoped token, preventing calls
+     *   even if the Symbol is discovered via `Object.getOwnPropertySymbols`.
+     *
+     * @throws If `privateToken` is invalid or `expectedRuntime` does not match.
+     */
+    async [(_TransportKeypairImpl_publicKeyBytesHex = new WeakMap(), _TransportKeypairImpl_privateKeyBytes = new WeakMap(), _TransportKeypairImpl_runtime = new WeakMap(), _TransportKeypairImpl_tkmsPrivateKey = new WeakMap(), GetTkmsPrivateKeyFn)](privateToken, expectedRuntime) {
+        if (privateToken !== PRIVATE_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        // If the runtime was GC'd, deref() returns undefined, which !== expectedRuntime → throws.
+        // This is intentional: a GC'd runtime means the keypair is stale.
+        if (expectedRuntime !== __classPrivateFieldGet(this, _TransportKeypairImpl_runtime, "f").deref()) {
+            throw new Error('Invalid runtime');
+        }
+        if (__classPrivateFieldGet(this, _TransportKeypairImpl_tkmsPrivateKey, "f") !== undefined) {
+            return __classPrivateFieldGet(this, _TransportKeypairImpl_tkmsPrivateKey, "f");
+        }
+        const runtimeWithDecrypt = asFhevmRuntimeWith(expectedRuntime, 'decrypt');
+        __classPrivateFieldSet(this, _TransportKeypairImpl_tkmsPrivateKey, await runtimeWithDecrypt.decrypt.deserializeTkmsPrivateKey({
+            tkmsPrivateKeyBytes: __classPrivateFieldGet(this, _TransportKeypairImpl_privateKeyBytes, "f"),
+        }), "f");
+        // Verify the key is valid
+        await verifyTkmsPublicKey({ runtime: runtimeWithDecrypt }, {
+            tkmsPrivateKey: __classPrivateFieldGet(this, _TransportKeypairImpl_tkmsPrivateKey, "f"),
+            tkmsPublicKeyBytesHex: __classPrivateFieldGet(this, _TransportKeypairImpl_publicKeyBytesHex, "f"),
+        });
+        return __classPrivateFieldGet(this, _TransportKeypairImpl_tkmsPrivateKey, "f");
+    }
+    /**
+     * Hidden method (Symbol key) that serializes the keypair including the private key.
+     *
+     * Access is protected by the Symbol key (not exported) and the private token.
+     */
+    [SerializeFn](privateToken) {
+        if (privateToken !== PRIVATE_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        return {
+            publicKey: __classPrivateFieldGet(this, _TransportKeypairImpl_publicKeyBytesHex, "f"),
+            privateKey: bytesToHexLarge(__classPrivateFieldGet(this, _TransportKeypairImpl_privateKeyBytes, "f"), false /* no0x */),
+        };
+    }
+    /**
+     * Prevents accidental private key exposure via `JSON.stringify`.
+     * Only the public key is included in the output.
+     */
+    toJSON() {
+        return { publicKey: __classPrivateFieldGet(this, _TransportKeypairImpl_publicKeyBytesHex, "f") };
+    }
+}
+Object.freeze(TransportKeypairImpl);
+Object.freeze(TransportKeypairImpl.prototype);
+////////////////////////////////////////////////////////////////////////////////
+/** Type guard. */
+export function isTransportKeypair(value) {
+    return value instanceof TransportKeypairImpl;
+}
+////////////////////////////////////////////////////////////////////////////////
+/** Throws {@link InvalidTypeError} if value is not a valid {@link TransportKeypair}. */
+export function assertIsTransportKeypair(value, options) {
+    if (!isTransportKeypair(value)) {
+        throw new InvalidTypeError({
+            subject: options.subject,
+            type: typeof value,
+            expectedType: 'TransportKeypair',
+        }, options);
+    }
+}
+////////////////////////////////////////////////////////////////////////////////
+/** Generates a fresh {@link TransportKeypair}. */
+export async function generateTransportKeypair(context) {
+    const tkmsPrivateKey = await context.runtime.decrypt.generateTkmsPrivateKey();
+    const tkmsPrivateKeyBytes = await context.runtime.decrypt.serializeTkmsPrivateKey({ tkmsPrivateKey });
+    const tkmsPublicKeyBytesHex = await context.runtime.decrypt.getTkmsPublicKeyHex({
+        tkmsPrivateKey,
+    });
+    return new TransportKeypairImpl(PRIVATE_TOKEN, context.runtime, {
+        privateKeyBytes: tkmsPrivateKeyBytes,
+        publicKeyBytesHex: tkmsPublicKeyBytesHex,
+        tkmsPrivateKey,
+    });
+}
+/**
+ * Converts an unknown value into a {@link TransportKeypair}.
+ *
+ * Accepted inputs:
+ * - An existing {@link TransportKeypair} (returned as-is)
+ * - A plain object `{ publicKey, privateKey }` where each is `Bytes` or `BytesHex`
+ *
+ * @throws {InvalidTypeError} If `value` is not a recognized keypair shape.
+ */
+export async function toTransportKeypair(context, value) {
+    if (isTransportKeypair(value)) {
+        // Force realize
+        await value[GetTkmsPrivateKeyFn](PRIVATE_TOKEN, context.runtime);
+        return value;
+    }
+    const name = 'TransportKeypair';
+    const options = {};
+    assertRecordNonNullableProperty(value, 'publicKey', name, {
+        expectedType: 'Bytes | BytesHex',
+        ...options,
+    });
+    assertRecordNonNullableProperty(value, 'privateKey', name, {
+        expectedType: 'Bytes | BytesHex',
+        ...options,
+    });
+    const rawPublicKey = value.publicKey;
+    const rawPrivateKey = value.privateKey;
+    assertIsBytesOrBytesHex(rawPublicKey, { subject: `${name}.publicKey` });
+    assertIsBytesOrBytesHex(rawPrivateKey, { subject: `${name}.privateKey` });
+    const tkmsPrivateKeyBytes = typeof rawPrivateKey === 'string' ? hexToBytesFaster(rawPrivateKey, { strict: true }) : rawPrivateKey;
+    const tkmsPublicKeyBytesHex = typeof rawPublicKey === 'string' ? rawPublicKey : bytesToHexLarge(rawPublicKey, false /* no0x */);
+    let tkmsPrivateKey;
+    // If the "decrypt" module is available, deserialize and verify the key
+    let runtimeWithDecrypt;
+    try {
+        runtimeWithDecrypt = asFhevmRuntimeWith(context.runtime, 'decrypt');
+    }
+    catch {
+        // there's no decrypt module
+    }
+    if (runtimeWithDecrypt !== undefined) {
+        tkmsPrivateKey = await runtimeWithDecrypt.decrypt.deserializeTkmsPrivateKey({
+            tkmsPrivateKeyBytes,
+        });
+        await verifyTkmsPublicKey({ runtime: runtimeWithDecrypt }, { tkmsPrivateKey, tkmsPublicKeyBytesHex });
+    }
+    return new TransportKeypairImpl(PRIVATE_TOKEN, context.runtime, {
+        privateKeyBytes: tkmsPrivateKeyBytes,
+        publicKeyBytesHex: tkmsPublicKeyBytesHex,
+        tkmsPrivateKey,
+    });
+}
+/**
+ * Serializes an {@link TransportKeypair} including the private key.
+ *
+ * **The output contains sensitive key material — handle and store securely.**
+ *
+ * @throws {InvalidTypeError} If `value` is not a valid {@link TransportKeypair}.
+ */
+export function serializeTransportKeypair(value) {
+    assertIsTransportKeypair(value, {});
+    return value[SerializeFn](PRIVATE_TOKEN);
+}
+/**
+ * Extracts the deserialized TKMS private key from an {@link TransportKeypair}.
+ * Lazily deserializes and verifies the key on first access.
+ *
+ * @throws {InvalidTypeError} If `value` is not a valid {@link TransportKeypair}.
+ * @throws If the runtime does not match or the key verification fails.
+ */
+export async function transportKeypairToTkmsPrivateKey(context, value) {
+    assertIsTransportKeypair(value, {});
+    return await value[GetTkmsPrivateKeyFn](PRIVATE_TOKEN, context.runtime);
+}
+//# sourceMappingURL=TransportKeypair-p.js.map

package/_esm/core/kms/TransportKeypair-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TransportKeypair-p.js","sourceRoot":"","sources":["../../../core/kms/TransportKeypair-p.ts"],"names":[],"mappings":";;;;;;;;;;;;AAIA,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAEhF,gFAAgF;AAEhF,MAAM,aAAa,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAWvD,gFAAgF;AAChF,uBAAuB;AACvB,EAAE;AACF,iEAAiE;AACjE,0DAA0D;AAC1D,6DAA6D;AAC7D,6DAA6D;AAC7D,6DAA6D;AAC7D,sEAAsE;AACtE,+DAA+D;AAE/D,MAAM,mBAAmB,GAAG,MAAM,EAAE,CAAC;AACrC,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC;AAE7B,MAAM,oBAAoB;IASxB,YACE,YAAoB,EACpB,OAAqB,EACrB,UAIC;QAbM,0DAA6B;QAC7B,wDAAwB;QAExB,gDAAgC;QACzC,uDAA4C;QAW1C,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,uBAAA,IAAI,iCAAY,IAAI,OAAO,CAAC,OAAO,CAAC,MAAA,CAAC;QACrC,uBAAA,IAAI,2CAAsB,UAAU,CAAC,iBAAiB,MAAA,CAAC;QACvD,uBAAA,IAAI,yCAAoB,UAAU,CAAC,eAAe,MAAA,CAAC;QACnD,uBAAA,IAAI,wCAAmB,UAAU,CAAC,cAAc,MAAA,CAAC;IACnD,CAAC;IAED,IAAW,SAAS;QAClB,OAAO,uBAAA,IAAI,+CAAmB,CAAC;IACjC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,uNAAC,mBAAmB,EAAC,CAAC,YAAoB,EAAE,eAA6B;QAC7E,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,0FAA0F;QAC1F,kEAAkE;QAClE,IAAI,eAAe,KAAK,uBAAA,IAAI,qCAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,uBAAA,IAAI,4CAAgB,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,uBAAA,IAAI,4CAAgB,CAAC;QAC9B,CAAC;QAED,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QAE1E,uBAAA,IAAI,wCAAmB,MAAM,kBAAkB,CAAC,OAAO,CAAC,yBAAyB,CAAC;YAChF,mBAAmB,EAAE,uBAAA,IAAI,6CAAiB;SAC3C,CAAC,MAAA,CAAC;QAEH,0BAA0B;QAC1B,MAAM,mBAAmB,CACvB,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAC/B;YACE,cAAc,EAAE,uBAAA,IAAI,4CAAgB;YACpC,qBAAqB,EAAE,uBAAA,IAAI,+CAAmB;SAC/C,CACF,CAAC;QAEF,OAAO,uBAAA,IAAI,4CAAgB,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,CAAC,WAAW,CAAC,CAAC,YAAoB;QAIhC,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,OAAO;YACL,SAAS,EAAE,uBAAA,IAAI,+CAAmB;YAClC,UAAU,EAAE,eAAe,CAAC,uBAAA,IAAI,6CAAiB,EAAE,KAAK,CAAC,UAAU,CAAC;SACrE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,MAAM;QACX,OAAO,EAAE,SAAS,EAAE,uBAAA,IAAI,+CAAmB,EAAE,CAAC;IAChD,CAAC;CACF;AAED,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;AAE9C,gFAAgF;AAEhF,kBAAkB;AAClB,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,KAAK,YAAY,oBAAoB,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAEhF,wFAAwF;AACxF,MAAM,UAAU,wBAAwB,CACtC,KAAc,EACd,OAAmD;IAEnD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,gBAAgB,CACxB;YACE,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,KAAK;YAClB,YAAY,EAAE,kBAAkB;SACjC,EACD,OAAO,CACR,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,kDAAkD;AAClD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAA0C;IACvF,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAC9E,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;IACtG,MAAM,qBAAqB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC9E,cAAc;KACf,CAAC,CAAC;IACH,OAAO,IAAI,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE;QAC9D,eAAe,EAAE,mBAAmB;QACpC,iBAAiB,EAAE,qBAAqB;QACxC,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA2C,EAC3C,KAAc;IAEd,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,gBAAgB;QAChB,MAAO,KAA8B,CAAC,mBAAmB,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC;IAChC,MAAM,OAAO,GAAG,EAAE,CAAC;IAEnB,+BAA+B,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE;QACxD,YAAY,EAAE,kBAAkB;QAChC,GAAG,OAAO;KACX,CAAC,CAAC;IACH,+BAA+B,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;QACzD,YAAY,EAAE,kBAAkB;QAChC,GAAG,OAAO;KACX,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC;IACrC,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC;IAEvC,uBAAuB,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,YAAY,EAAE,CAAC,CAAC;IACxE,uBAAuB,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,aAAa,EAAE,CAAC,CAAC;IAE1E,MAAM,mBAAmB,GACvB,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAExG,MAAM,qBAAqB,GACzB,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAEpG,IAAI,cAA0C,CAAC;IAE/C,uEAAuE;IACvE,IAAI,kBAA2C,CAAC;IAChD,IAAI,CAAC;QACH,kBAAkB,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;IAED,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,yBAAyB,CAAC;YAC1E,mBAAmB;SACpB,CAAC,CAAC;QACH,MAAM,mBAAmB,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,EAAE,cAAc,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACxG,CAAC;IAED,OAAO,IAAI,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE;QAC9D,eAAe,EAAE,mBAAmB;QACpC,iBAAiB,EAAE,qBAAqB;QACxC,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAuB;IAI/D,wBAAwB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpC,OAAQ,KAA8B,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAA2C,EAC3C,KAAuB;IAEvB,wBAAwB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpC,OAAO,MAAO,KAA8B,CAAC,mBAAmB,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AACpG,CAAC"}

package/_esm/core/kms/createKmsDelegatedUserDecryptEip712.js

@@ -0,0 +1,73 @@
+import { addressToChecksummedAddress, assertIsAddress, assertIsAddressArray, assertRecordChecksummedAddressProperty, } from '../base/address.js';
+import { asBytesHex, assertIsBytesHex, bytesToHexLarge } from '../base/bytes.js';
+import { ensure0x } from '../base/string.js';
+import { assertIsUintNumber } from '../base/uint.js';
+import { createKmsEip712Domain } from './createKmsEip712Domain.js';
+import { _assertIsKmsUserDecryptEip712Base } from './createKmsUserDecryptEip712.js';
+import { kmsDelegatedUserDecryptEip712Types } from './kmsDelegatedUserDecryptEip712Types.js';
+import { assertIsKmsExtraData } from './kmsExtraData.js';
+////////////////////////////////////////////////////////////////////////////////
+// createKmsDelegatedUserDecryptEip712
+////////////////////////////////////////////////////////////////////////////////
+export function createKmsDelegatedUserDecryptEip712(parameters) {
+    const { verifyingContractAddressDecryption, chainId, publicKey, contractAddresses, startTimestamp, durationDays, extraData, delegatorAddress, } = parameters;
+    const publicKeyBytesHex = _verifyPublicKeyArg(publicKey);
+    assertIsAddressArray(contractAddresses, {});
+    assertIsUintNumber(startTimestamp, {});
+    assertIsUintNumber(durationDays, {});
+    assertIsBytesHex(extraData, {});
+    assertIsAddress(delegatorAddress, {});
+    assertIsKmsExtraData(extraData, {});
+    const checksummedContractAddresses = contractAddresses.map(addressToChecksummedAddress);
+    const checksummedDelegatorAddress = addressToChecksummedAddress(delegatorAddress);
+    const primaryType = 'DelegatedUserDecryptRequestVerification';
+    const domain = createKmsEip712Domain({
+        chainId,
+        verifyingContractAddressDecryption,
+    });
+    const eip712 = {
+        types: kmsDelegatedUserDecryptEip712Types,
+        primaryType,
+        domain,
+        message: {
+            publicKey: publicKeyBytesHex,
+            contractAddresses: checksummedContractAddresses,
+            delegatorAddress: checksummedDelegatorAddress,
+            startTimestamp: startTimestamp.toString(),
+            durationDays: durationDays.toString(),
+            extraData,
+        },
+    };
+    Object.freeze(eip712);
+    Object.freeze(eip712.domain);
+    Object.freeze(eip712.types);
+    Object.freeze(eip712.types.EIP712Domain);
+    Object.freeze(eip712.types.DelegatedUserDecryptRequestVerification);
+    Object.freeze(eip712.message);
+    Object.freeze(eip712.message.contractAddresses);
+    return eip712;
+}
+////////////////////////////////////////////////////////////////////////////////
+export function assertIsKmsDelegatedUserDecryptEip712(value, name, options) {
+    _assertIsKmsUserDecryptEip712Base(value, name, 'DelegatedUserDecryptRequestVerification', options);
+    assertRecordChecksummedAddressProperty(value.message, 'delegatorAddress', `${name}.message`, options);
+}
+////////////////////////////////////////////////////////////////////////////////
+function _verifyPublicKeyArg(value) {
+    if (value === null || value === undefined) {
+        throw new Error(`Missing publicKey argument.`);
+    }
+    let publicKeyBytesHex;
+    const pk = value;
+    if (typeof pk === 'string') {
+        publicKeyBytesHex = asBytesHex(ensure0x(pk));
+    }
+    else if (pk instanceof Uint8Array) {
+        publicKeyBytesHex = bytesToHexLarge(pk);
+    }
+    else {
+        throw new Error(`Invalid publicKey argument.`);
+    }
+    return publicKeyBytesHex;
+}
+//# sourceMappingURL=createKmsDelegatedUserDecryptEip712.js.map

package/_esm/core/kms/createKmsDelegatedUserDecryptEip712.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsDelegatedUserDecryptEip712.js","sourceRoot":"","sources":["../../../core/kms/createKmsDelegatedUserDecryptEip712.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,2BAA2B,EAC3B,eAAe,EACf,oBAAoB,EACpB,sCAAsC,GACvC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAezD,gFAAgF;AAChF,sCAAsC;AACtC,gFAAgF;AAEhF,MAAM,UAAU,mCAAmC,CACjD,UAAyD;IAEzD,MAAM,EACJ,kCAAkC,EAClC,OAAO,EACP,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,SAAS,EACT,gBAAgB,GACjB,GAAG,UAAU,CAAC;IACf,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEzD,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC5C,kBAAkB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACvC,kBAAkB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACrC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAChC,eAAe,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACtC,oBAAoB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEpC,MAAM,4BAA4B,GAAG,iBAAiB,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAExF,MAAM,2BAA2B,GAAG,2BAA2B,CAAC,gBAAgB,CAAC,CAAC;IAElF,MAAM,WAAW,GAAiD,yCAAyC,CAAC;IAE5G,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACnC,OAAO;QACP,kCAAkC;KACnC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAkC;QAC5C,KAAK,EAAE,kCAAkC;QACzC,WAAW;QACX,MAAM;QACN,OAAO,EAAE;YACP,SAAS,EAAE,iBAAiB;YAC5B,iBAAiB,EAAE,4BAA4B;YAC/C,gBAAgB,EAAE,2BAA2B;YAC7C,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;YACzC,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;YACrC,SAAS;SACV;KACF,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACpE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEhD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,qCAAqC,CACnD,KAAc,EACd,IAAY,EACZ,OAA4B;IAE5B,iCAAiC,CAC/B,KAAK,EACL,IAAI,EACJ,yCAAgG,EAChG,OAAO,CACR,CAAC;IAEF,sCAAsC,CACpC,KAAK,CAAC,OAAO,EACb,kBAA2E,EAC3E,GAAG,IAAI,UAAU,EACjB,OAAO,CACR,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,iBAA2B,CAAC;IAEhC,MAAM,EAAE,GAAG,KAAK,CAAC;IAEjB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3B,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,EAAE,YAAY,UAAU,EAAE,CAAC;QACpC,iBAAiB,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/_esm/core/kms/createKmsEip712Domain.js

@@ -0,0 +1,40 @@
+import { addressToChecksummedAddress, assertIsAddress, assertRecordChecksummedAddressProperty, } from '../base/address.js';
+import { assertRecordStringProperty } from '../base/string.js';
+import { assertIsUint64, assertRecordUintBigIntProperty } from '../base/uint.js';
+////////////////////////////////////////////////////////////////////////////////
+/**
+ * IMPORTANT:
+ *
+ * KmsEip712Domain.chainId depends on the primaryType:
+ *    - `UserDecryptRequestVerification`: chainId is the **host chain**
+ *    - `DelegatedUserDecryptRequestVerification`: chainId is the **host chain**
+ *    - `PublicDecryptVerification`: chainId is the **gateway chain**
+ */
+export function createKmsEip712Domain(parameters) {
+    const { chainId, // Warning! any chainId could be host or gateway
+    verifyingContractAddressDecryption, } = parameters;
+    assertIsUint64(chainId, {});
+    assertIsAddress(verifyingContractAddressDecryption, {});
+    const domain = {
+        name: 'Decryption',
+        version: '1',
+        chainId: BigInt(chainId),
+        verifyingContract: addressToChecksummedAddress(verifyingContractAddressDecryption),
+    };
+    Object.freeze(domain);
+    return domain;
+}
+////////////////////////////////////////////////////////////////////////////////
+export function assertIsKmsEip712Domain(value, name, options) {
+    assertRecordStringProperty(value, 'name', name, {
+        expectedValue: 'Decryption',
+        ...options,
+    });
+    assertRecordStringProperty(value, 'version', name, {
+        expectedValue: '1',
+        ...options,
+    });
+    assertRecordUintBigIntProperty(value, 'chainId', name, options);
+    assertRecordChecksummedAddressProperty(value, 'verifyingContract', name, options);
+}
+//# sourceMappingURL=createKmsEip712Domain.js.map

package/_esm/core/kms/createKmsEip712Domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsEip712Domain.js","sourceRoot":"","sources":["../../../core/kms/createKmsEip712Domain.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,2BAA2B,EAC3B,eAAe,EACf,sCAAsC,GACvC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AASjF,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAA2C;IAC/E,MAAM,EACJ,OAAO,EAAE,gDAAgD;IACzD,kCAAkC,GACnC,GAAG,UAAU,CAAC;IAEf,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5B,eAAe,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,MAAM,CAAC,OAAO,CAAiB;QACxC,iBAAiB,EAAE,2BAA2B,CAAC,kCAAkC,CAAC;KAC1E,CAAC;IACX,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEtB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,uBAAuB,CACrC,KAAc,EACd,IAAY,EACZ,OAA4B;IAG5B,0BAA0B,CAAC,KAAK,EAAE,MAAwB,EAAE,IAAI,EAAE;QAChE,aAAa,EAAE,YAAgC;QAC/C,GAAG,OAAO;KACX,CAAC,CAAC;IACH,0BAA0B,CAAC,KAAK,EAAE,SAA2B,EAAE,IAAI,EAAE;QACnE,aAAa,EAAE,GAA0B;QACzC,GAAG,OAAO;KACX,CAAC,CAAC;IACH,8BAA8B,CAAC,KAAK,EAAE,SAA2B,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAClF,sCAAsC,CAAC,KAAK,EAAE,mBAAqC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACtG,CAAC"}

package/_esm/core/kms/createKmsPublicDecryptEip712.js

@@ -0,0 +1,39 @@
+import { assertIsBytesHex } from '../base/bytes.js';
+import { createKmsEip712Domain } from './createKmsEip712Domain.js';
+import { kmsPublicDecryptEip712Types } from './kmsPublicDecryptEip712Types.js';
+import { assertIsHandle } from '../handle/FhevmHandle.js';
+////////////////////////////////////////////////////////////////////////////////
+// createKmsPublicDecryptEIP712
+////////////////////////////////////////////////////////////////////////////////
+export function createKmsPublicDecryptEip712(parameters) {
+    const { verifyingContractAddressDecryption, chainId, handles, decryptedResult, extraData } = parameters;
+    assertIsBytesHex(decryptedResult, {});
+    assertIsBytesHex(extraData, {});
+    const primaryType = 'PublicDecryptVerification';
+    const domain = createKmsEip712Domain({
+        chainId,
+        verifyingContractAddressDecryption,
+    });
+    const eip712 = {
+        types: kmsPublicDecryptEip712Types,
+        primaryType,
+        domain,
+        message: {
+            ctHandles: handles.map((h) => {
+                assertIsHandle(h);
+                return h.bytes32Hex;
+            }),
+            decryptedResult,
+            extraData,
+        },
+    };
+    Object.freeze(eip712);
+    Object.freeze(eip712.domain);
+    Object.freeze(eip712.types);
+    Object.freeze(eip712.types.EIP712Domain);
+    Object.freeze(eip712.types.PublicDecryptVerification);
+    Object.freeze(eip712.message);
+    Object.freeze(eip712.message.ctHandles);
+    return eip712;
+}
+//# sourceMappingURL=createKmsPublicDecryptEip712.js.map

package/_esm/core/kms/createKmsPublicDecryptEip712.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsPublicDecryptEip712.js","sourceRoot":"","sources":["../../../core/kms/createKmsPublicDecryptEip712.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAY1D,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAEhF,MAAM,UAAU,4BAA4B,CAC1C,UAAkD;IAElD,MAAM,EAAE,kCAAkC,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;IACxG,gBAAgB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACtC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEhC,MAAM,WAAW,GAA0C,2BAA2B,CAAC;IAEvF,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACnC,OAAO;QACP,kCAAkC;KACnC,CAAC,CAAC;IAEH,MAAM,MAAM,GAA2B;QACrC,KAAK,EAAE,2BAA2B;QAClC,WAAW;QACX,MAAM;QACN,OAAO,EAAE;YACP,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC3B,cAAc,CAAC,CAAC,CAAC,CAAC;gBAClB,OAAO,CAAC,CAAC,UAAU,CAAC;YACtB,CAAC,CAAC;YACF,eAAe;YACf,SAAS;SACV;KACF,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAExC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/_esm/core/kms/createKmsUserDecryptEip712.js

@@ -0,0 +1,100 @@
+import { addressToChecksummedAddress, assertIsAddress, assertIsAddressArray, assertRecordChecksummedAddressArrayProperty, } from '../base/address.js';
+import { assertIsKmsEip712Domain, createKmsEip712Domain } from './createKmsEip712Domain.js';
+import { asBytesHex, assertIsBytesHex, assertRecordBytesHexProperty, bytesToHexLarge } from '../base/bytes.js';
+import { assertRecordNonNullableProperty } from '../base/record.js';
+import { assertRecordStringProperty, ensure0x } from '../base/string.js';
+import { assertIsUint64, assertIsUintNumber } from '../base/uint.js';
+import { assertIsKmsExtraData } from './kmsExtraData.js';
+import { kmsUserDecryptEip712Types } from './kmsUserDecryptEip712Types.js';
+////////////////////////////////////////////////////////////////////////////////
+// createKmsUserDecryptEip712
+////////////////////////////////////////////////////////////////////////////////
+export function createKmsUserDecryptEip712(parameters) {
+    const { verifyingContractAddressDecryption, chainId, publicKey, contractAddresses, startTimestamp, durationDays, extraData, } = parameters;
+    const publicKeyBytesHex = _verifyPublicKeyArg(publicKey);
+    assertIsUint64(chainId, {});
+    assertIsAddress(verifyingContractAddressDecryption, {});
+    assertIsAddressArray(contractAddresses, {});
+    assertIsUintNumber(startTimestamp, {});
+    assertIsUintNumber(durationDays, {});
+    assertIsBytesHex(extraData, {});
+    assertIsKmsExtraData(extraData, {});
+    const checksummedContractAddresses = contractAddresses.map(addressToChecksummedAddress);
+    const primaryType = 'UserDecryptRequestVerification';
+    const domain = createKmsEip712Domain({
+        chainId,
+        verifyingContractAddressDecryption,
+    });
+    const eip712 = {
+        domain,
+        types: kmsUserDecryptEip712Types,
+        primaryType,
+        message: {
+            publicKey: publicKeyBytesHex,
+            contractAddresses: checksummedContractAddresses,
+            startTimestamp: startTimestamp.toString(),
+            durationDays: durationDays.toString(),
+            extraData,
+        },
+    };
+    Object.freeze(eip712);
+    Object.freeze(eip712.domain);
+    Object.freeze(eip712.types);
+    Object.freeze(eip712.types.EIP712Domain);
+    Object.freeze(eip712.types.UserDecryptRequestVerification);
+    Object.freeze(eip712.message);
+    Object.freeze(eip712.message.contractAddresses);
+    return eip712;
+}
+////////////////////////////////////////////////////////////////////////////////
+export function assertIsKmsUserDecryptEip712(value, name, options) {
+    _assertIsKmsUserDecryptEip712Base(value, name, 'UserDecryptRequestVerification', options);
+}
+/**
+ * Validates the common structure shared by both
+ * {@link KmsUserDecryptEip712} and {@link KmsDelegatedUserDecryptEIP712}:
+ * domain, types, primaryType, and base message fields.
+ */
+export function _assertIsKmsUserDecryptEip712Base(value, name, primaryType, options) {
+    assertRecordNonNullableProperty(value, 'domain', name, options);
+    assertIsKmsEip712Domain(value.domain, `${name}.domain`, options);
+    assertRecordNonNullableProperty(value, 'types', name, options);
+    assertRecordStringProperty(value, 'primaryType', name, {
+        expectedValue: primaryType,
+        ...options,
+    });
+    assertRecordNonNullableProperty(value, 'message', name, options);
+    const msg = value.message;
+    _assertIsKmsUserDecryptEip712Message(msg, `${name}.message`, options);
+}
+/**
+ * Validates the common message fields shared by both
+ * {@link KmsUserDecryptEip712} and {@link KmsDelegatedUserDecryptEIP712}.
+ */
+function _assertIsKmsUserDecryptEip712Message(msg, msgName, options) {
+    assertRecordBytesHexProperty(msg, 'publicKey', msgName, options);
+    assertRecordChecksummedAddressArrayProperty(msg, 'contractAddresses', msgName, options);
+    assertRecordStringProperty(msg, 'startTimestamp', msgName, options);
+    assertRecordStringProperty(msg, 'durationDays', msgName, options);
+    assertRecordBytesHexProperty(msg, 'extraData', msgName, options);
+    assertIsKmsExtraData(msg.extraData, options);
+}
+////////////////////////////////////////////////////////////////////////////////
+function _verifyPublicKeyArg(value) {
+    if (value === null || value === undefined) {
+        throw new Error(`Missing publicKey argument.`);
+    }
+    let publicKeyBytesHex;
+    const pk = value;
+    if (typeof pk === 'string') {
+        publicKeyBytesHex = asBytesHex(ensure0x(pk));
+    }
+    else if (pk instanceof Uint8Array) {
+        publicKeyBytesHex = bytesToHexLarge(pk);
+    }
+    else {
+        throw new Error(`Invalid publicKey argument.`);
+    }
+    return publicKeyBytesHex;
+}
+//# sourceMappingURL=createKmsUserDecryptEip712.js.map

package/_esm/core/kms/createKmsUserDecryptEip712.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsUserDecryptEip712.js","sourceRoot":"","sources":["../../../core/kms/createKmsUserDecryptEip712.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,2BAA2B,EAC3B,eAAe,EACf,oBAAoB,EACpB,2CAA2C,GAC5C,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC/G,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAc3E,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF,MAAM,UAAU,0BAA0B,CAAC,UAAgD;IACzF,MAAM,EACJ,kCAAkC,EAClC,OAAO,EACP,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,SAAS,GACV,GAAG,UAAU,CAAC;IACf,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEzD,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5B,eAAe,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IACxD,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC5C,kBAAkB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACvC,kBAAkB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACrC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAChC,oBAAoB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEpC,MAAM,4BAA4B,GAAG,iBAAiB,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAExF,MAAM,WAAW,GAAwC,gCAAgC,CAAC;IAE1F,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACnC,OAAO;QACP,kCAAkC;KACnC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG;QACb,MAAM;QACN,KAAK,EAAE,yBAAyB;QAChC,WAAW;QACX,OAAO,EAAE;YACP,SAAS,EAAE,iBAAiB;YAC5B,iBAAiB,EAAE,4BAA4B;YAC/C,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;YACzC,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;YACrC,SAAS;SACV;KACF,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC3D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEhD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,4BAA4B,CAC1C,KAAc,EACd,IAAY,EACZ,OAA4B;IAE5B,iCAAiC,CAC/B,KAAK,EACL,IAAI,EACJ,gCAA8E,EAC9E,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,KAAc,EACd,IAAY,EACZ,WAAmB,EACnB,OAA4B;IAO5B,+BAA+B,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,uBAAuB,CAAE,KAAiC,CAAC,MAAM,EAAE,GAAG,IAAI,SAAS,EAAE,OAAO,CAAC,CAAC;IAE9F,+BAA+B,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAE/D,0BAA0B,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;QACrD,aAAa,EAAE,WAAW;QAC1B,GAAG,OAAO;KACX,CAAC,CAAC;IAEH,+BAA+B,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,GAAG,GAAI,KAAiC,CAAC,OAAkC,CAAC;IAClF,oCAAoC,CAAC,GAAG,EAAE,GAAG,IAAI,UAAU,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,SAAS,oCAAoC,CAC3C,GAAY,EACZ,OAAe,EACf,OAA4B;IAG5B,4BAA4B,CAAC,GAAG,EAAE,WAAuC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7F,2CAA2C,CAAC,GAAG,EAAE,mBAA+C,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACpH,0BAA0B,CAAC,GAAG,EAAE,gBAA4C,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAChG,0BAA0B,CAAC,GAAG,EAAE,cAA0C,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9F,4BAA4B,CAAC,GAAG,EAAE,WAAuC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7F,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAEhF,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,iBAA2B,CAAC;IAEhC,MAAM,EAAE,GAAG,KAAK,CAAC;IAEjB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3B,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,EAAE,YAAY,UAAU,EAAE,CAAC;QACpC,iBAAiB,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/_esm/core/kms/decryptKmsSignedcryptedShares-p.js

@@ -0,0 +1,14 @@
+import { transportKeypairToTkmsPrivateKey } from './TransportKeypair-p.js';
+////////////////////////////////////////////////////////////////////////////////
+export async function decryptKmsSignedcryptedShares(context, parameters) {
+    const { transportKeypair, kmsSigncryptedShares } = parameters;
+    // also validates `transportKeypair`
+    const tkmsPrivateKey = await transportKeypairToTkmsPrivateKey(context, transportKeypair);
+    // Using the `KmsSigncryptedShares` decrypt and reconstruct clear values
+    const orderedDecryptedHandles = await context.runtime.decrypt.decryptAndReconstruct({
+        shares: kmsSigncryptedShares,
+        tkmsPrivateKey,
+    });
+    return orderedDecryptedHandles;
+}
+//# sourceMappingURL=decryptKmsSignedcryptedShares-p.js.map

package/_esm/core/kms/decryptKmsSignedcryptedShares-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptKmsSignedcryptedShares-p.js","sourceRoot":"","sources":["../../../core/kms/decryptKmsSignedcryptedShares-p.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAiB3E,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAAgB,EAAE,UAAsB;IAC1F,MAAM,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,GAAG,UAAU,CAAC;IAE9D,oCAAoC;IACpC,MAAM,cAAc,GAAG,MAAM,gCAAgC,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAEzF,wEAAwE;IACxE,MAAM,uBAAuB,GAA0B,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC;QACzG,MAAM,EAAE,oBAAoB;QAC5B,cAAc;KACf,CAAC,CAAC;IAEH,OAAO,uBAAuB,CAAC;AACjC,CAAC"}

package/_esm/core/kms/decryptValuesFromPairs.js

@@ -0,0 +1,14 @@
+////////////////////////////////////////////////////////////////////////////////
+import { decryptKmsSignedcryptedShares } from './decryptKmsSignedcryptedShares-p.js';
+import { fetchKmsSignedcryptedShares } from './fetchKmsSignedcryptedShares-p.js';
+////////////////////////////////////////////////////////////////////////////////
+export async function decryptValuesFromPairs(fhevm, parameters) {
+    const { transportKeypair } = parameters;
+    const kmsSigncryptedShares = await fetchKmsSignedcryptedShares(fhevm, parameters);
+    // Using the `KmsSigncryptedShares` decrypt and reconstruct clear values
+    return decryptKmsSignedcryptedShares(fhevm, {
+        kmsSigncryptedShares,
+        transportKeypair,
+    });
+}
+//# sourceMappingURL=decryptValuesFromPairs.js.map

package/_esm/core/kms/decryptValuesFromPairs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptValuesFromPairs.js","sourceRoot":"","sources":["../../../core/kms/decryptValuesFromPairs.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAUhF,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAiCjF,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAc,EAAE,UAAsB;IACjF,MAAM,EAAE,gBAAgB,EAAE,GAAG,UAAU,CAAC;IAExC,MAAM,oBAAoB,GAAyB,MAAM,2BAA2B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAExG,wEAAwE;IACxE,OAAO,6BAA6B,CAAC,KAAK,EAAE;QAC1C,oBAAoB;QACpB,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC"}