@fhevm/sdk 0.0.1 → 1.0.0-alpha.1

package/_types/core/key/FheEncryptionKeyCache-p.d.ts

@@ -0,0 +1,93 @@
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { FheEncryptionKeyWasm, FheEncryptionKeyBytes, FheEncryptionKeyMetadata } from '../types/fheEncryptionKey.js';
+/**
+ * A live mutable cache entry (placeholder).
+ *
+ * Callers hold a reference and observe state changes across awaits.
+ * - `resolvedKind`: kind of the currently available value ("bytes" | "wasm"),
+ *   or `undefined` if no value has resolved yet.
+ * - `value`: the resolved data, or `undefined` while no value is available.
+ * - `pendingKind`: kind of the value being fetched/converted ("bytes" | "wasm"),
+ *   or `undefined` if idle.
+ * - `pendingOp`: type of in-flight operation ("fetching" | "converting"),
+ *   or `undefined` if idle.
+ * - `ready`: the promise to await. When it resolves, `value` is populated,
+ *   `resolvedKind` is updated, and `pendingKind`/`pendingOp` are `undefined`.
+ */
+export interface CacheEntry {
+    readonly resolvedKind: 'bytes' | 'wasm' | undefined;
+    readonly value: FheEncryptionKeyBytes | FheEncryptionKeyWasm | undefined;
+    readonly pendingKind: 'bytes' | 'wasm' | undefined;
+    readonly pendingOp: 'fetching' | 'converting' | undefined;
+    readonly ready: Promise<void>;
+    readonly owner: WeakRef<FhevmRuntime>;
+}
+export declare class CacheEntryImpl implements CacheEntry {
+    resolvedKind: 'bytes' | 'wasm' | undefined;
+    value: FheEncryptionKeyBytes | FheEncryptionKeyWasm | undefined;
+    pendingKind: 'bytes' | 'wasm' | undefined;
+    pendingOp: 'fetching' | 'converting' | undefined;
+    metadata: FheEncryptionKeyMetadata;
+    ready: Promise<void>;
+    owner: WeakRef<FhevmRuntime>;
+    /** @internal promise on the future value being resolved. Do not use externally. */
+    _pending: Promise<FheEncryptionKeyBytes | FheEncryptionKeyWasm>;
+    /** @internal debug: true if `_pending` has been chained from (e.g. by ensureWasm). */
+    _pendingChained: boolean;
+    constructor(owner: FhevmRuntime, metadata: FheEncryptionKeyMetadata);
+}
+/**
+ * Global cache for FHE public key parameters.
+ *
+ * Keyed by relayer URL. Each entry is a live mutable placeholder that callers
+ * hold a reference to and observe state changes across awaits.
+ */
+export declare class FheEncryptionKeyCache {
+    #private;
+    get(relayerUrl: string): CacheEntry | undefined;
+    has(relayerUrl: string): boolean;
+    remove(relayerUrl: string): boolean;
+    clear(): void;
+    setBytes(owner: FhevmRuntime, relayerUrl: string, bytes: FheEncryptionKeyBytes): void;
+    /**
+     * Ensures the cache has an entry for the given relayer URL.
+     *
+     * **First write wins**: if an entry already exists (resolved or in-flight,
+     * bytes or wasm), it is kept as-is and the fetcher is never called.
+     * Only when no entry exists is the fetcher invoked to start a new fetch.
+     *
+     * To force a re-fetch, call `remove(relayerUrl)` before `ensureBytes`.
+     */
+    ensureBytes(parameters: {
+        readonly owner: FhevmRuntime;
+        readonly relayerUrl: string;
+        readonly fetcher: () => Promise<FheEncryptionKeyBytes>;
+        readonly metadata: FheEncryptionKeyMetadata;
+    }): void;
+    /**
+     * Upgrade a bytes entry to wasm in-place by deserializing.
+     * If already wasm (pending or resolved), returns the existing entry.
+     * Chains from `_pending` so it works whether bytes are resolved or still pending.
+     * Idempotent: repeated calls return the same entry.
+     */
+    ensureWasm(parameters: {
+        readonly owner: FhevmRuntime;
+        readonly relayerUrl: string;
+        readonly deserializeFn: (bytes: FheEncryptionKeyBytes) => Promise<FheEncryptionKeyWasm>;
+    }): void;
+    /**
+     * Get bytes from the cache, converting from wasm if necessary.
+     *
+     * - No entry → `undefined`
+     * - Resolved bytes → return immediately
+     * - Resolved wasm → serialize to bytes and return
+     * - Pending bytes → await, return resolved bytes
+     * - Pending wasm → await, serialize to bytes and return
+     */
+    resolveBytes(parameters: {
+        readonly relayerUrl: string;
+        readonly serializeFn?: ((parameters: FheEncryptionKeyWasm) => Promise<FheEncryptionKeyBytes>) | undefined;
+    }): Promise<FheEncryptionKeyBytes | undefined>;
+}
+export declare const globalFheEncryptionKeyCache: FheEncryptionKeyCache;
+//# sourceMappingURL=FheEncryptionKeyCache-p.d.ts.map

package/_types/core/key/FheEncryptionKeyCache-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FheEncryptionKeyCache-p.d.ts","sourceRoot":"","sources":["../../../core/key/FheEncryptionKeyCache-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,8BAA8B,CAAC;AAItC;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,WAAW,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC;IAC1D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;CACvC;AAED,qBAAa,cAAe,YAAW,UAAU;IAC/C,YAAY,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IAC3C,KAAK,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,SAAS,CAAC;IAChE,WAAW,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IAC1C,SAAS,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC;IACjD,QAAQ,EAAE,wBAAwB,CAAC;IACnC,KAAK,EAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,EAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAE9B,mFAAmF;IACnF,QAAQ,EAAG,OAAO,CAAC,qBAAqB,GAAG,oBAAoB,CAAC,CAAC;IACjE,sFAAsF;IACtF,eAAe,EAAE,OAAO,CAAC;gBAEb,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,wBAAwB;CASpE;AA0BD;;;;;GAKG;AACH,qBAAa,qBAAqB;;IAKhC,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAI/C,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAIhC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAQnC,KAAK,IAAI,IAAI;IAgBb,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,IAAI;IAoBrF;;;;;;;;OAQG;IACH,WAAW,CAAC,UAAU,EAAE;QACtB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;QAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACvD,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;KAC7C,GAAG,IAAI;IAmBR;;;;;OAKG;IACH,UAAU,CAAC,UAAU,EAAE;QACrB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;QAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;KACzF,GAAG,IAAI;IA8BR;;;;;;;;OAQG;IACG,YAAY,CAAC,UAAU,EAAE;QAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,oBAAoB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,SAAS,CAAC;KAC3G,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC;CA4F/C;AAID,eAAO,MAAM,2BAA2B,uBAA8B,CAAC"}

package/_types/core/key/FheEncryptionKeyWasm-p.d.ts

@@ -0,0 +1,13 @@
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { FheEncryptionCrs, FheEncryptionKeyMetadata, FheEncryptionKeyWasm, FheEncryptionPublicKey } from '../types/fheEncryptionKey.js';
+export declare function createFheEncryptionKeyWasm(owner: WeakRef<FhevmRuntime>, parameters: {
+    readonly publicKey: FheEncryptionPublicKey;
+    readonly crs: FheEncryptionCrs;
+    readonly metadata: FheEncryptionKeyMetadata;
+}): FheEncryptionKeyWasm;
+/**
+ * Verifies that the given `FheEncryptionKeyWasm` instance is owned
+ * by the given runtime. Throws if not.
+ */
+export declare function assertFheEncryptionKeyWasmOwnedBy(data: FheEncryptionKeyWasm, owner: FhevmRuntime): void;
+//# sourceMappingURL=FheEncryptionKeyWasm-p.d.ts.map

package/_types/core/key/FheEncryptionKeyWasm-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FheEncryptionKeyWasm-p.d.ts","sourceRoot":"","sources":["../../../core/key/FheEncryptionKeyWasm-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,8BAA8B,CAAC;AAuEtC,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,EAC5B,UAAU,EAAE;IACV,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;CAC7C,GACA,oBAAoB,CAEtB;AAID;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAEvG"}

package/_types/core/key/deserializeFheEncryptionKey.d.ts

@@ -0,0 +1,6 @@
+import type { WithEncrypt } from '../types/coreFhevmRuntime.js';
+import type { FheEncryptionKeyWasm, FheEncryptionKeyBytes } from '../types/fheEncryptionKey.js';
+export declare function deserializeFheEncryptionKey(context: {
+    readonly runtime: WithEncrypt;
+}, parameters: FheEncryptionKeyBytes): Promise<FheEncryptionKeyWasm>;
+//# sourceMappingURL=deserializeFheEncryptionKey.d.ts.map

package/_types/core/key/deserializeFheEncryptionKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deserializeFheEncryptionKey.d.ts","sourceRoot":"","sources":["../../../core/key/deserializeFheEncryptionKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAKhG,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,EAC1C,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAAC,oBAAoB,CAAC,CAc/B"}

package/_types/core/key/fetchFheEncryptionKey.d.ts

@@ -0,0 +1,12 @@
+import type { RelayerKeyUrlOptions } from '../types/relayer.js';
+import type { WithEncrypt } from '../types/coreFhevmRuntime.js';
+import type { FhevmChain } from '../types/fhevmChain.js';
+import type { FheEncryptionKeyWasm } from '../types/fheEncryptionKey.js';
+export declare function fetchFheEncryptionKeyWasm(context: {
+    readonly chain: FhevmChain;
+    readonly runtime: WithEncrypt;
+}, parameters?: {
+    readonly options?: RelayerKeyUrlOptions | undefined;
+    readonly ignoreCache?: boolean | undefined;
+}): Promise<FheEncryptionKeyWasm>;
+//# sourceMappingURL=fetchFheEncryptionKey.d.ts.map

package/_types/core/key/fetchFheEncryptionKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchFheEncryptionKey.d.ts","sourceRoot":"","sources":["../../../core/key/fetchFheEncryptionKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIzE,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,EACtE,UAAU,CAAC,EAAE;IACX,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC5C,GACA,OAAO,CAAC,oBAAoB,CAAC,CAgC/B"}

package/_types/core/key/fetchFheEncryptionKeyBytes.d.ts

@@ -0,0 +1,12 @@
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { FhevmChain } from '../types/fhevmChain.js';
+import type { FheEncryptionKeyBytes } from '../types/fheEncryptionKey.js';
+import type { RelayerKeyUrlOptions } from '../types/relayer.js';
+export declare function fetchFheEncryptionKeyBytes(context: {
+    readonly chain: FhevmChain;
+    readonly runtime: FhevmRuntime;
+}, parameters?: {
+    readonly options?: RelayerKeyUrlOptions | undefined;
+    readonly ignoreCache?: boolean | undefined;
+}): Promise<FheEncryptionKeyBytes>;
+//# sourceMappingURL=fetchFheEncryptionKeyBytes.d.ts.map

package/_types/core/key/fetchFheEncryptionKeyBytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchFheEncryptionKeyBytes.d.ts","sourceRoot":"","sources":["../../../core/key/fetchFheEncryptionKeyBytes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,qBAAqB,EAAwB,MAAM,8BAA8B,CAAC;AAChG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAQhE,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,EACvE,UAAU,CAAC,EAAE;IACX,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC5C,GACA,OAAO,CAAC,qBAAqB,CAAC,CA6BhC"}

package/_types/core/key/fetchFheEncryptionKeyBytesWithSource.d.ts

@@ -0,0 +1,4 @@
+import type { FheEncryptionKeyBytes, FheEncryptionKeySource } from '../types/fheEncryptionKey.js';
+import { type FetchWithRetryParameters } from '../base/fetch.js';
+export declare function fetchFheEncryptionKeyBytesWithSource(source: FheEncryptionKeySource, options?: FetchWithRetryParameters): Promise<FheEncryptionKeyBytes>;
+//# sourceMappingURL=fetchFheEncryptionKeyBytesWithSource.d.ts.map

package/_types/core/key/fetchFheEncryptionKeyBytesWithSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchFheEncryptionKeyBytesWithSource.d.ts","sourceRoot":"","sources":["../../../core/key/fetchFheEncryptionKeyBytesWithSource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAGlG,OAAO,EAAoC,KAAK,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAMnG,wBAAsB,oCAAoC,CACxD,MAAM,EAAE,sBAAsB,EAC9B,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,qBAAqB,CAAC,CAyBhC"}

package/_types/core/key/serializeFheEncryptionKey.d.ts

@@ -0,0 +1,6 @@
+import type { WithEncrypt } from '../types/coreFhevmRuntime.js';
+import { type FheEncryptionKeyWasm, type FheEncryptionKeyBytes } from '../types/fheEncryptionKey.js';
+export declare function serializeFheEncryptionKeyWasm(context: {
+    readonly runtime: WithEncrypt;
+}, parameters: FheEncryptionKeyWasm): Promise<FheEncryptionKeyBytes>;
+//# sourceMappingURL=serializeFheEncryptionKey.d.ts.map

package/_types/core/key/serializeFheEncryptionKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializeFheEncryptionKey.d.ts","sourceRoot":"","sources":["../../../core/key/serializeFheEncryptionKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAG3B,MAAM,8BAA8B,CAAC;AAItC,wBAAsB,6BAA6B,CACjD,OAAO,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,EAC1C,UAAU,EAAE,oBAAoB,GAC/B,OAAO,CAAC,qBAAqB,CAAC,CAoBhC"}

package/_types/core/kms/KmsSigncryptedShares-p.d.ts

@@ -0,0 +1,39 @@
+import type { KmsSigncryptedSharesMetadata, KmsSigncryptedShare } from '../types/kms-p.js';
+import type { KmsSigncryptedShares } from '../types/kms.js';
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { FhevmChain } from '../types/fhevmChain.js';
+type Context = {
+    readonly runtime: FhevmRuntime;
+    readonly chain: FhevmChain;
+    readonly client: NonNullable<object>;
+    readonly options: {
+        readonly batchRpcCalls: boolean;
+    };
+};
+/**
+ * Creates a validated {@link KmsSigncryptedShares} instance.
+ *
+ * Enforces all invariants documented on {@link KmsSigncryptedSharesImpl}:
+ * at least one share, uniform `extraData`, and consistency with the
+ * {@link KmsSignersContext}.
+ *
+ * @throws If validation fails.
+ * @internal
+ */
+export declare function createKmsSigncryptedShares(context: Context, parameters: {
+    readonly metadata: KmsSigncryptedSharesMetadata;
+    readonly shares: readonly KmsSigncryptedShare[];
+}): Promise<KmsSigncryptedShares>;
+/**
+ * Returns the validated shares. No additional verification is needed —
+ * all invariants are enforced at {@link KmsSigncryptedSharesImpl} construction time.
+ *
+ * @internal
+ */
+export declare function getShares(signcryptedShares: KmsSigncryptedShares): readonly KmsSigncryptedShare[];
+/**
+ * @internal
+ */
+export declare function getMetadata(signcryptedShares: KmsSigncryptedShares): KmsSigncryptedSharesMetadata;
+export {};
+//# sourceMappingURL=KmsSigncryptedShares-p.d.ts.map

package/_types/core/kms/KmsSigncryptedShares-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"KmsSigncryptedShares-p.d.ts","sourceRoot":"","sources":["../../../core/kms/KmsSigncryptedShares-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAA6B,MAAM,iBAAiB,CAAC;AAGvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AA6DzD,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAyBF;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE;IACV,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACjD,GACA,OAAO,CAAC,oBAAoB,CAAC,CAiC/B;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,iBAAiB,EAAE,oBAAoB,GAAG,SAAS,mBAAmB,EAAE,CAKjG;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,iBAAiB,EAAE,oBAAoB,GAAG,4BAA4B,CAKjG"}

package/_types/core/kms/PublicDecryptionProof-p.d.ts

@@ -0,0 +1,42 @@
+import type { KmsSignersContext } from '../types/kmsSignersContext.js';
+import type { Bytes65Hex, BytesHex } from '../types/primitives.js';
+import type { PublicDecryptionProof } from '../types/publicDecryptionProof-p.js';
+import type { FhevmChain } from '../types/fhevmChain.js';
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { NonEmptyReadonlyArray } from '../types/utils.js';
+import type { ClearValue, Handle } from '../types/encryptedTypes-p.js';
+/**
+ * @internal
+ */
+export declare class PublicDecryptionProofImpl implements PublicDecryptionProof {
+    #private;
+    constructor(privateToken: symbol, parameters: {
+        readonly decryptionProof: BytesHex;
+        readonly orderedClearValues: readonly ClearValue[];
+        readonly orderedAbiEncodedClearValues: BytesHex;
+        readonly extraData: BytesHex;
+    });
+    get decryptionProof(): BytesHex;
+    get orderedClearValues(): NonEmptyReadonlyArray<ClearValue>;
+    get orderedAbiEncodedClearValues(): BytesHex;
+    get extraData(): BytesHex;
+}
+type Context = {
+    readonly chain: FhevmChain;
+    readonly runtime: FhevmRuntime;
+};
+type Parameters = {
+    readonly originToken: symbol;
+    readonly orderedHandles: readonly Handle[];
+    readonly orderedAbiEncodedClearValues: BytesHex;
+    readonly kmsPublicDecryptEIP712Signatures: readonly Bytes65Hex[];
+    readonly kmsSignersContext: KmsSignersContext;
+};
+/**
+ * Builds a {@link PublicDecryptionProof} from KMS signatures.
+ *
+ * @internal
+ */
+export declare function createPublicDecryptionProof(context: Context, parameters: Parameters): Promise<PublicDecryptionProof>;
+export {};
+//# sourceMappingURL=PublicDecryptionProof-p.d.ts.map

package/_types/core/kms/PublicDecryptionProof-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicDecryptionProof-p.d.ts","sourceRoot":"","sources":["../../../core/kms/PublicDecryptionProof-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAevE;;GAEG;AACH,qBAAa,yBAA0B,YAAW,qBAAqB;;gBASnE,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE;QACV,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC;QACnC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,UAAU,EAAE,CAAC;QACnD,QAAQ,CAAC,4BAA4B,EAAE,QAAQ,CAAC;QAChD,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;KAC9B;IAkBH,IAAW,eAAe,IAAI,QAAQ,CAErC;IAED,IAAW,kBAAkB,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAEjE;IAED,IAAW,4BAA4B,IAAI,QAAQ,CAElD;IAED,IAAW,SAAS,IAAI,QAAQ,CAE/B;CACF;AASD,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,4BAA4B,EAAE,QAAQ,CAAC;IAChD,QAAQ,CAAC,gCAAgC,EAAE,SAAS,UAAU,EAAE,CAAC;IACjE,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;CAC/C,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,qBAAqB,CAAC,CA6EhC"}

package/_types/core/kms/PublicDecryptionProof.d.ts

@@ -0,0 +1,3 @@
+import type { PublicDecryptionProof } from '../types/publicDecryptionProof-p.js';
+export declare function isPublicDecryptionProof(value: unknown): value is PublicDecryptionProof;
+//# sourceMappingURL=PublicDecryptionProof.d.ts.map

package/_types/core/kms/PublicDecryptionProof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicDecryptionProof.d.ts","sourceRoot":"","sources":["../../../core/kms/PublicDecryptionProof.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAOjF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAEtF"}

package/_types/core/kms/SignedDecryptionPermit-p.d.ts

@@ -0,0 +1,78 @@
+import type { SignedDecryptionPermit, SignedDelegatedDecryptionPermit, SignedSelfDecryptionPermit } from '../types/signedDecryptionPermit.js';
+import type { KmsDelegatedUserDecryptEip712, KmsUserDecryptEip712 } from '../types/kms.js';
+import type { FhevmChain } from '../types/fhevmChain.js';
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { ErrorMetadataParams } from '../base/errors/ErrorBase.js';
+import type { NativeSigner } from '../modules/ethereum/types.js';
+import { type TransportKeypair } from './TransportKeypair-p.js';
+/**
+ * Serializes a signed decryption permit to a plain object suitable for
+ * JSON serialization. Uses the public getters — does not access private fields.
+ *
+ * `toJSON()` is intentionally not on the class to prevent accidental
+ * serialization of sensitive data via `JSON.stringify(permit)`.
+ */
+export declare function serializeSignedDecryptionPermitToJSON(permit: SignedDecryptionPermit): {
+    eip712: KmsUserDecryptEip712 | KmsDelegatedUserDecryptEip712;
+    signature: string;
+    signerAddress: string;
+};
+export declare function isSignedDecryptionPermit(value: unknown): value is SignedDecryptionPermit;
+/** Throws {@link InvalidTypeError} if value is not a valid {@link SignedDecryptionPermit}. */
+export declare function assertIsSignedDecryptionPermit(value: unknown, options: {
+    subject?: string;
+} & ErrorMetadataParams): asserts value is SignedDecryptionPermit;
+/**
+ * Asserts that every address in {@link contractAddresses} is listed in the
+ * permit's `contractAddresses` (case-insensitive comparison).
+ */
+export declare function assertPermitIncludesContractAddresses(permit: SignedDecryptionPermit, contractAddresses: readonly string[]): void;
+export type SignDecryptionPermitContext = {
+    readonly chain: FhevmChain;
+    readonly runtime: FhevmRuntime;
+    readonly client: NonNullable<object>;
+    readonly options: {
+        readonly batchRpcCalls: boolean;
+    };
+};
+type SignDecryptionPermitCommonParameters = {
+    readonly contractAddresses: readonly string[];
+    readonly startTimestamp: number;
+    readonly durationDays: number;
+    readonly signerAddress: string;
+    readonly signer: NativeSigner;
+    readonly transportKeypair: TransportKeypair;
+};
+export type SignSelfDecryptionPermitParameters = SignDecryptionPermitCommonParameters & {
+    readonly delegatorAddress?: undefined;
+};
+export type SignDelegatedDecryptionPermitParameters = SignDecryptionPermitCommonParameters & {
+    readonly delegatorAddress: string;
+};
+export type SignDecryptionPermitParameters = SignSelfDecryptionPermitParameters | SignDelegatedDecryptionPermitParameters;
+/**
+ * Creates a signed decryption permit by constructing the EIP-712 typed data
+ * and signing it with the provided signer.
+ *
+ * If `delegatorAddress` is provided, creates a delegated permit that allows the signer
+ * to decrypt encrypted values belonging to the `delegatorAddress` account.
+ * Otherwise, creates a standard permit where the signer decrypts their own values.
+ *
+ * The EIP-712 message includes the keypair's public key, allowing the gateway
+ * to encrypt the decrypted result for this specific keypair.
+ *
+ * @throws If the signer, address, or keypair is invalid.
+ * @throws If the signature verification fails.
+ */
+export declare function signDecryptionPermit(context: SignDecryptionPermitContext, parameters: SignSelfDecryptionPermitParameters): Promise<SignedSelfDecryptionPermit>;
+export declare function signDecryptionPermit(context: SignDecryptionPermitContext, parameters: SignDelegatedDecryptionPermitParameters): Promise<SignedDelegatedDecryptionPermit>;
+export declare function parseSignedDecryptionPermit(context: {
+    readonly chain: FhevmChain;
+    readonly runtime: FhevmRuntime;
+    readonly client: NonNullable<object>;
+    readonly options: {
+        readonly batchRpcCalls: boolean;
+    };
+}, transportKeypair: TransportKeypair, permit: unknown): Promise<SignedDecryptionPermit>;
+export {};
+//# sourceMappingURL=SignedDecryptionPermit-p.d.ts.map

package/_types/core/kms/SignedDecryptionPermit-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignedDecryptionPermit-p.d.ts","sourceRoot":"","sources":["../../../core/kms/SignedDecryptionPermit-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,+BAA+B,EAC/B,0BAA0B,EAC3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAS3F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAcjE,OAAO,EAA4B,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA2G1F;;;;;;GAMG;AACH,wBAAgB,qCAAqC,CAAC,MAAM,EAAE,sBAAsB,GAAG;IACrF,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,CAAC;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB,CAOA;AAsDD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,sBAAsB,CAExF;AAED,8FAA8F;AAC9F,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,GAClD,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAWzC;AAED;;;GAGG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,sBAAsB,EAC9B,iBAAiB,EAAE,SAAS,MAAM,EAAE,GACnC,IAAI,CAON;AA6CD,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,oCAAoC,GAAG;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG,oCAAoC,GAAG;IACtF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,uCAAuC,GAAG,oCAAoC,GAAG;IAC3F,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,8BAA8B,GACtC,kCAAkC,GAClC,uCAAuC,CAAC;AAE5C;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,EACpC,UAAU,EAAE,kCAAkC,GAC7C,OAAO,CAAC,0BAA0B,CAAC,CAAC;AACvC,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,EACpC,UAAU,EAAE,uCAAuC,GAClD,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAsE5C,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE;IACP,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,EACD,gBAAgB,EAAE,gBAAgB,EAClC,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,sBAAsB,CAAC,CAkCjC"}

package/_types/core/kms/TransportKeypair-p.d.ts

@@ -0,0 +1,54 @@
+import type { ErrorMetadataParams } from '../base/errors/ErrorBase.js';
+import type { FhevmRuntime, WithDecrypt } from '../types/coreFhevmRuntime.js';
+import type { BytesHex } from '../types/primitives.js';
+import type { TkmsPrivateKey } from '../types/tkms-p.js';
+declare const TransportKeypairBrand: unique symbol;
+export type TransportKeypair = {
+    readonly publicKey: BytesHex;
+    readonly [TransportKeypairBrand]: true;
+};
+/** Type guard. */
+export declare function isTransportKeypair(value: unknown): value is TransportKeypair;
+/** Throws {@link InvalidTypeError} if value is not a valid {@link TransportKeypair}. */
+export declare function assertIsTransportKeypair(value: unknown, options: {
+    subject?: string;
+} & ErrorMetadataParams): asserts value is TransportKeypair;
+/** Generates a fresh {@link TransportKeypair}. */
+export declare function generateTransportKeypair(context: {
+    readonly runtime: WithDecrypt;
+}): Promise<TransportKeypair>;
+/**
+ * Converts an unknown value into a {@link TransportKeypair}.
+ *
+ * Accepted inputs:
+ * - An existing {@link TransportKeypair} (returned as-is)
+ * - A plain object `{ publicKey, privateKey }` where each is `Bytes` or `BytesHex`
+ *
+ * @throws {InvalidTypeError} If `value` is not a recognized keypair shape.
+ */
+export declare function toTransportKeypair(context: {
+    readonly runtime: FhevmRuntime;
+}, value: unknown): Promise<TransportKeypair>;
+/**
+ * Serializes an {@link TransportKeypair} including the private key.
+ *
+ * **The output contains sensitive key material — handle and store securely.**
+ *
+ * @throws {InvalidTypeError} If `value` is not a valid {@link TransportKeypair}.
+ */
+export declare function serializeTransportKeypair(value: TransportKeypair): {
+    publicKey: BytesHex;
+    privateKey: BytesHex;
+};
+/**
+ * Extracts the deserialized TKMS private key from an {@link TransportKeypair}.
+ * Lazily deserializes and verifies the key on first access.
+ *
+ * @throws {InvalidTypeError} If `value` is not a valid {@link TransportKeypair}.
+ * @throws If the runtime does not match or the key verification fails.
+ */
+export declare function transportKeypairToTkmsPrivateKey(context: {
+    readonly runtime: FhevmRuntime;
+}, value: TransportKeypair): Promise<TkmsPrivateKey>;
+export {};
+//# sourceMappingURL=TransportKeypair-p.d.ts.map

package/_types/core/kms/TransportKeypair-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TransportKeypair-p.d.ts","sourceRoot":"","sources":["../../../core/kms/TransportKeypair-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,KAAK,EAAS,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAazD,OAAO,CAAC,MAAM,qBAAqB,EAAE,OAAO,MAAM,CAAC;AAEnD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC;CACxC,CAAC;AAyHF,kBAAkB;AAClB,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAID,wFAAwF;AACxF,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,GAClD,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAWnC;AAID,kDAAkD;AAClD,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAWpH;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,EAC3C,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,gBAAgB,CAAC,CAqD3B;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,gBAAgB,GAAG;IAClE,SAAS,EAAE,QAAQ,CAAC;IACpB,UAAU,EAAE,QAAQ,CAAC;CACtB,CAGA;AAED;;;;;;GAMG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,EAC3C,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAGzB"}

package/_types/core/kms/createKmsDelegatedUserDecryptEip712.d.ts

@@ -0,0 +1,15 @@
+import type { KmsDelegatedUserDecryptEip712 } from '../types/kms.js';
+import type { ErrorMetadataParams } from '../base/errors/ErrorBase.js';
+export type CreateKmsDelegatedUserDecryptEip712Parameters = {
+    readonly verifyingContractAddressDecryption: string;
+    readonly chainId: number | bigint;
+    readonly publicKey: string | Uint8Array;
+    readonly contractAddresses: readonly string[];
+    readonly startTimestamp: number;
+    readonly durationDays: number;
+    readonly extraData: string;
+    readonly delegatorAddress: string;
+};
+export declare function createKmsDelegatedUserDecryptEip712(parameters: CreateKmsDelegatedUserDecryptEip712Parameters): KmsDelegatedUserDecryptEip712;
+export declare function assertIsKmsDelegatedUserDecryptEip712(value: unknown, name: string, options: ErrorMetadataParams): asserts value is KmsDelegatedUserDecryptEip712;
+//# sourceMappingURL=createKmsDelegatedUserDecryptEip712.d.ts.map

package/_types/core/kms/createKmsDelegatedUserDecryptEip712.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsDelegatedUserDecryptEip712.d.ts","sourceRoot":"","sources":["../../../core/kms/createKmsDelegatedUserDecryptEip712.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAiBvE,MAAM,MAAM,6CAA6C,GAAG;IAC1D,QAAQ,CAAC,kCAAkC,EAAE,MAAM,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IACxC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC,CAAC;AAMF,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,6CAA6C,GACxD,6BAA6B,CAsD/B;AAID,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,KAAK,IAAI,6BAA6B,CAchD"}

package/_types/core/kms/createKmsEip712Domain.d.ts

@@ -0,0 +1,17 @@
+import type { ErrorMetadataParams } from '../base/errors/ErrorBase.js';
+import type { KmsEip712Domain } from '../types/kms.js';
+export type CreateKmsEip712DomainParameters = {
+    readonly chainId: number | bigint;
+    readonly verifyingContractAddressDecryption: string;
+};
+/**
+ * IMPORTANT:
+ *
+ * KmsEip712Domain.chainId depends on the primaryType:
+ *    - `UserDecryptRequestVerification`: chainId is the **host chain**
+ *    - `DelegatedUserDecryptRequestVerification`: chainId is the **host chain**
+ *    - `PublicDecryptVerification`: chainId is the **gateway chain**
+ */
+export declare function createKmsEip712Domain(parameters: CreateKmsEip712DomainParameters): KmsEip712Domain;
+export declare function assertIsKmsEip712Domain(value: unknown, name: string, options: ErrorMetadataParams): asserts value is KmsEip712Domain;
+//# sourceMappingURL=createKmsEip712Domain.d.ts.map

package/_types/core/kms/createKmsEip712Domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsEip712Domain.d.ts","sourceRoot":"","sources":["../../../core/kms/createKmsEip712Domain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAYvD,MAAM,MAAM,+BAA+B,GAAG;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,kCAAkC,EAAE,MAAM,CAAC;CACrD,CAAC;AAIF;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,+BAA+B,GAAG,eAAe,CAkBlG;AAID,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,KAAK,IAAI,eAAe,CAYlC"}

package/_types/core/kms/createKmsPublicDecryptEip712.d.ts

@@ -0,0 +1,11 @@
+import type { KmsPublicDecryptEip712 } from '../types/kms.js';
+import type { Handle } from '../types/encryptedTypes-p.js';
+export type CreateKmsPublicDecryptEip712Parameters = {
+    readonly verifyingContractAddressDecryption: string;
+    readonly chainId: number | bigint;
+    readonly handles: readonly Handle[];
+    readonly decryptedResult: string;
+    readonly extraData: string;
+};
+export declare function createKmsPublicDecryptEip712(parameters: CreateKmsPublicDecryptEip712Parameters): KmsPublicDecryptEip712;
+//# sourceMappingURL=createKmsPublicDecryptEip712.d.ts.map

package/_types/core/kms/createKmsPublicDecryptEip712.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsPublicDecryptEip712.d.ts","sourceRoot":"","sources":["../../../core/kms/createKmsPublicDecryptEip712.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAQ3D,MAAM,MAAM,sCAAsC,GAAG;IACnD,QAAQ,CAAC,kCAAkC,EAAE,MAAM,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAMF,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,sCAAsC,GACjD,sBAAsB,CAmCxB"}

package/_types/core/kms/createKmsUserDecryptEip712.d.ts

@@ -0,0 +1,26 @@
+import type { ErrorMetadataParams } from '../base/errors/ErrorBase.js';
+import type { KmsEip712Domain, KmsUserDecryptEip712 } from '../types/kms.js';
+import type { KmsUserDecryptEip712Message } from '../types/kms.js';
+export type CreateKmsUserDecryptEip712Parameters = {
+    readonly verifyingContractAddressDecryption: string;
+    readonly chainId: number | bigint;
+    readonly publicKey: string | Uint8Array;
+    readonly contractAddresses: readonly string[];
+    readonly startTimestamp: number;
+    readonly durationDays: number;
+    readonly extraData: string;
+};
+export declare function createKmsUserDecryptEip712(parameters: CreateKmsUserDecryptEip712Parameters): KmsUserDecryptEip712;
+export declare function assertIsKmsUserDecryptEip712(value: unknown, name: string, options: ErrorMetadataParams): asserts value is KmsUserDecryptEip712;
+/**
+ * Validates the common structure shared by both
+ * {@link KmsUserDecryptEip712} and {@link KmsDelegatedUserDecryptEIP712}:
+ * domain, types, primaryType, and base message fields.
+ */
+export declare function _assertIsKmsUserDecryptEip712Base(value: unknown, name: string, primaryType: string, options: ErrorMetadataParams): asserts value is {
+    readonly domain: KmsEip712Domain;
+    readonly types: object;
+    readonly primaryType: string;
+    readonly message: KmsUserDecryptEip712Message;
+};
+//# sourceMappingURL=createKmsUserDecryptEip712.d.ts.map

package/_types/core/kms/createKmsUserDecryptEip712.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsUserDecryptEip712.d.ts","sourceRoot":"","sources":["../../../core/kms/createKmsUserDecryptEip712.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE7E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAiBnE,MAAM,MAAM,oCAAoC,GAAG;IACjD,QAAQ,CAAC,kCAAkC,EAAE,MAAM,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IACxC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAMF,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,oCAAoC,GAAG,oBAAoB,CAmDjH;AAID,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,KAAK,IAAI,oBAAoB,CAOvC;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,KAAK,IAAI;IAClB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;CAC/C,CAcA"}

package/_types/core/kms/decryptKmsSignedcryptedShares-p.d.ts

@@ -0,0 +1,15 @@
+import type { WithDecrypt } from '../types/coreFhevmRuntime.js';
+import type { KmsSigncryptedShares } from '../types/kms.js';
+import type { ClearValue } from '../types/encryptedTypes-p.js';
+import type { TransportKeypair } from './TransportKeypair-p.js';
+type Context = {
+    readonly runtime: WithDecrypt;
+};
+type Parameters = {
+    readonly kmsSigncryptedShares: KmsSigncryptedShares;
+    readonly transportKeypair: TransportKeypair;
+};
+type ReturnType = readonly ClearValue[];
+export declare function decryptKmsSignedcryptedShares(context: Context, parameters: Parameters): Promise<ReturnType>;
+export {};
+//# sourceMappingURL=decryptKmsSignedcryptedShares-p.d.ts.map

package/_types/core/kms/decryptKmsSignedcryptedShares-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptKmsSignedcryptedShares-p.d.ts","sourceRoot":"","sources":["../../../core/kms/decryptKmsSignedcryptedShares-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAOhE,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C,CAAC;AAEF,KAAK,UAAU,GAAG,SAAS,UAAU,EAAE,CAAC;AAIxC,wBAAsB,6BAA6B,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAajH"}

package/_types/core/kms/decryptValuesFromPairs.d.ts

@@ -0,0 +1,36 @@
+import type { WithDecrypt } from '../types/coreFhevmRuntime.js';
+import type { Handle } from '../types/encryptedTypes-p.js';
+import type { FhevmChain } from '../types/fhevmChain.js';
+import type { ChecksummedAddress, TypedValue } from '../types/primitives.js';
+import type { RelayerDelegatedUserDecryptOptions, RelayerUserDecryptOptions } from '../types/relayer.js';
+import type { SignedDelegatedDecryptionPermit, SignedSelfDecryptionPermit } from '../types/signedDecryptionPermit.js';
+import type { TransportKeypair } from './TransportKeypair-p.js';
+type Context = {
+    readonly chain: FhevmChain;
+    readonly runtime: WithDecrypt;
+    readonly client: NonNullable<object>;
+    readonly options: {
+        readonly batchRpcCalls: boolean;
+    };
+};
+type Parameters = {
+    readonly pairs: ReadonlyArray<{
+        readonly handle: Handle;
+        readonly contractAddress: ChecksummedAddress;
+    }>;
+    readonly signedPermit: SignedSelfDecryptionPermit;
+    readonly transportKeypair: TransportKeypair;
+    readonly options?: RelayerUserDecryptOptions | undefined;
+} | {
+    readonly pairs: ReadonlyArray<{
+        readonly handle: Handle;
+        readonly contractAddress: ChecksummedAddress;
+    }>;
+    readonly signedPermit: SignedDelegatedDecryptionPermit;
+    readonly transportKeypair: TransportKeypair;
+    readonly options?: RelayerDelegatedUserDecryptOptions | undefined;
+};
+export type ReturnType = readonly TypedValue[];
+export declare function decryptValuesFromPairs(fhevm: Context, parameters: Parameters): Promise<ReturnType>;
+export {};
+//# sourceMappingURL=decryptValuesFromPairs.d.ts.map

package/_types/core/kms/decryptValuesFromPairs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptValuesFromPairs.d.ts","sourceRoot":"","sources":["../../../core/kms/decryptValuesFromPairs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EAAE,kCAAkC,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACzG,OAAO,KAAK,EAAE,+BAA+B,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AACtH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAMhE,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GACX;IACE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;KAC9C,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC;IAClD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;CAC1D,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;KAC9C,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,+BAA+B,CAAC;IACvD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,kCAAkC,GAAG,SAAS,CAAC;CACnE,CAAC;AAEN,MAAM,MAAM,UAAU,GAAG,SAAS,UAAU,EAAE,CAAC;AAI/C,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAUxG"}