@fhevm/sdk 0.0.1 → 1.0.0-alpha.1

package/_types/core/types/relayer-p.d.ts

@@ -0,0 +1,285 @@
+import type { Bytes32Hex, Bytes65Hex, Bytes65HexNo0x, BytesHex, BytesHexNo0x, ChecksummedAddress } from './primitives.js';
+import type { NonEmptyExtract } from './utils.js';
+import type { FetchInputProofResult, FetchPublicDecryptResult, FetchUserDecryptResult } from './relayer.js';
+import type { HandleBytes32Hex } from './encryptedTypes-p.js';
+export interface FetchPostOperationResultMap {
+    INPUT_PROOF: FetchInputProofResult;
+    PUBLIC_DECRYPT: FetchPublicDecryptResult;
+    USER_DECRYPT: FetchUserDecryptResult;
+    DELEGATED_USER_DECRYPT: FetchUserDecryptResult;
+}
+export type RelayerGetOperation = 'KEY_URL';
+export type RelayerPostOperation = keyof FetchPostOperationResultMap;
+export type RelayerOperation = RelayerPostOperation | RelayerGetOperation;
+export type FetchInputProofPayload = {
+    readonly contractChainId: `0x${string}`;
+    readonly contractAddress: ChecksummedAddress;
+    readonly userAddress: ChecksummedAddress;
+    readonly ciphertextWithInputVerification: BytesHexNo0x;
+    readonly extraData: BytesHex;
+};
+export type RelayerFetchPublicDecryptPayload = {
+    readonly ciphertextHandles: readonly BytesHex[];
+    readonly extraData: BytesHex;
+};
+export type HandleContractPair = {
+    readonly handle: HandleBytes32Hex;
+    readonly contractAddress: ChecksummedAddress;
+};
+export type FetchUserDecryptPayload = {
+    readonly handleContractPairs: readonly HandleContractPair[];
+    readonly requestValidity: {
+        readonly startTimestamp: string;
+        readonly durationDays: string;
+    };
+    readonly contractsChainId: string;
+    readonly contractAddresses: readonly ChecksummedAddress[];
+    readonly userAddress: ChecksummedAddress;
+    readonly signature: Bytes65HexNo0x;
+    readonly publicKey: BytesHexNo0x;
+    readonly extraData: BytesHex;
+};
+export type FetchDelegatedUserDecryptPayload = {
+    readonly handleContractPairs: readonly HandleContractPair[];
+    readonly contractsChainId: string;
+    readonly contractAddresses: readonly ChecksummedAddress[];
+    readonly delegatorAddress: ChecksummedAddress;
+    readonly delegateAddress: ChecksummedAddress;
+    readonly startTimestamp: string;
+    readonly durationDays: string;
+    readonly signature: Bytes65HexNo0x;
+    readonly publicKey: BytesHexNo0x;
+    readonly extraData: BytesHex;
+};
+export type RelayerAsyncRequestState = {
+    aborted: boolean;
+    canceled: boolean;
+    failed: boolean;
+    fetching: boolean;
+    running: boolean;
+    succeeded: boolean;
+    terminated: boolean;
+    timeout: boolean;
+};
+export type RelayerTerminateReason = 'succeeded' | 'failed' | 'timeout' | 'abort';
+export type RelayerFetchMethod = 'GET' | 'POST';
+export type RelayerSuccessStatus = 200 | 202;
+export type RelayerFailureStatus = 400 | 401 | 404 | 429 | 500 | 503;
+export type RelayerPostResponseStatus = NonEmptyExtract<RelayerSuccessStatus, 202> | NonEmptyExtract<RelayerFailureStatus, 400 | 401 | 429 | 500 | 503>;
+export type RelayerGetResponseStatus = NonEmptyExtract<RelayerSuccessStatus, 200 | 202> | NonEmptyExtract<RelayerFailureStatus, 400 | 401 | 404 | 500 | 503>;
+export interface RelayerGetResponse200Map {
+    INPUT_PROOF: RelayerResult200InputProofAccepted | RelayerResult200InputProofRejected;
+    PUBLIC_DECRYPT: RelayerResult200PublicDecrypt;
+    USER_DECRYPT: RelayerResult200UserDecrypt;
+}
+export type RelayerGetResponse200<A extends keyof RelayerGetResponse200Map> = {
+    status: 'succeeded';
+    requestId: string;
+    result: RelayerGetResponse200Map[A];
+};
+export type RelayerResult200InputProofAccepted = {
+    accepted: true;
+    extraData: BytesHex;
+    handles: Bytes32Hex[];
+    signatures: Bytes65Hex[];
+};
+export type RelayerResult200InputProofRejected = {
+    accepted: false;
+    extraData: BytesHex;
+};
+export type RelayerResult200PublicDecrypt = {
+    signatures: BytesHexNo0x[];
+    decryptedValue: BytesHexNo0x;
+    extraData: BytesHex;
+};
+export type RelayerResult200UserDecrypt = {
+    result: Array<{
+        payload: BytesHexNo0x;
+        signature: Bytes65HexNo0x;
+        extraData: BytesHex;
+    }>;
+};
+/**
+ * Relayer 200 response for input proof requests:
+ * ```json
+ * {
+ *   "status": "succeeded",
+ *   "requestId": "string",
+ *   "result": {
+ *     "accepted": true,
+ *     "extraData": "0x...",
+ *     "handles": ["0x..."],
+ *     "signatures": ["0x..."]
+ *   } | {
+ *     "accepted": false,
+ *     "extraData": "0x..."
+ *   }
+ * }
+ * ```
+ */
+export type RelayerInputProofSucceeded = RelayerGetResponse200<'INPUT_PROOF'>;
+/**
+ * Relayer 200 response for public decrypt requests:
+ * ```json
+ * {
+ *   "status": "succeeded",
+ *   "requestId": "string",
+ *   "result": {
+ *     "signatures": ["hexNo0x..."],
+ *     "decryptedValue": "hexNo0x...",
+ *     "extraData": "0x..."
+ *   }
+ * }
+ * ```
+ */
+export type RelayerPublicDecryptSucceeded = RelayerGetResponse200<'PUBLIC_DECRYPT'>;
+/**
+ * Relayer 200 response for user decrypt requests:
+ * ```json
+ * {
+ *   "status": "succeeded",
+ *   "requestId": "string",
+ *   "result": {
+ *     "result": [{
+ *       "payload": "hexNo0x...",
+ *       "signature": "hexNo0x...",
+ *       "extraData": "hex_or_hexNo0x_?..."
+ *     }]
+ *   }
+ * }
+ * ```
+ */
+export type RelayerUserDecryptSucceeded = RelayerGetResponse200<'USER_DECRYPT'>;
+/**
+ * Relayer 202 get response schema:
+ * ```json
+ * {
+ *   "result": {
+ *     "status": "queued",
+ *     "requestId": "string",
+ *   }
+ * }
+ * ```
+ */
+export type RelayerGetResponse202Queued = {
+    status: 'queued';
+    requestId: string;
+};
+/**
+ * Relayer 202 post response schema:
+ * ```json
+ * {
+ *   "result": {
+ *     "status": "queued",
+ *     "requestId": "string",
+ *     "result": {
+ *        jobId: "string",
+ *      }
+ *   }
+ * }
+ * ```
+ */
+export type RelayerPostResponse202Queued = {
+    status: 'queued';
+    requestId: string;
+    result: RelayerResult202Queued;
+};
+export type RelayerResult202Queued = {
+    jobId: string;
+};
+/**
+ * Optional request id field. Would be empty in case of 429 from Cloudflare/Kong.
+ * In other cases, use it for identifying the request and asking support
+ */
+export type RelayerResponseFailed = {
+    status: 'failed';
+    requestId?: string;
+    error: RelayerApiError;
+};
+export type RelayerApiError = RelayerApiError400 | RelayerApiError401 | RelayerApiError404 | RelayerApiError429 | RelayerApiError500 | RelayerApiError503;
+/**
+ * Status: 400
+ */
+export type RelayerApiError400 = RelayerApiError400NoDetails | RelayerApiError400WithDetails;
+/**
+ * Status: 400 (no details)
+ */
+export type RelayerApiError400NoDetails = {
+    label: 'malformed_json' | 'request_error' | 'not_ready_for_decryption';
+    message: string;
+};
+/**
+ * Status: 400 (with details)
+ */
+export type RelayerApiError400WithDetails = {
+    label: 'missing_fields' | 'validation_failed';
+    message: string;
+    details: RelayerErrorDetail[];
+};
+export type RelayerErrorDetail = {
+    field: string;
+    issue: string;
+};
+/**
+ * Status: 401
+ */
+export type RelayerApiError401 = {
+    label: 'unauthorized';
+    message: string;
+};
+/**
+ * Status: 404
+ */
+export type RelayerApiError404 = {
+    label: 'not_found';
+    message: string;
+};
+/**
+ * Status: 429
+ */
+export type RelayerApiError429 = {
+    label: 'rate_limited' | 'protocol_overload';
+    message: string;
+};
+/**
+ * Status: 500
+ */
+export type RelayerApiError500 = {
+    label: 'internal_server_error';
+    message: string;
+};
+/**
+ * Status: 503
+ */
+export type RelayerApiError503 = {
+    label: 'protocol_paused' | 'gateway_not_reachable' | 'readiness_check_timed_out' | 'response_timed_out';
+    message: string;
+};
+export type FetchKeyUrlResult = {
+    readonly fheKeyInfo: [
+        {
+            readonly fhePublicKey: {
+                readonly dataId: string;
+                readonly urls: readonly [string];
+            };
+        }
+    ];
+    readonly crs: {
+        readonly 2048: {
+            readonly dataId: string;
+            readonly urls: readonly [string];
+        };
+    };
+};
+/**
+ * Parameters for fetching TFHE resources with retry support.
+ */
+export type TfheFetchParams = {
+    /** Optional fetch init options (headers, signal, etc.) */
+    init?: RequestInit | undefined;
+    /** Number of retry attempts on network failure (default: 3) */
+    retries?: number | undefined;
+    /** Delay in milliseconds between retries (default: 1000) */
+    retryDelayMs?: number | undefined;
+};
+//# sourceMappingURL=relayer-p.d.ts.map

package/_types/core/types/relayer-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relayer-p.d.ts","sourceRoot":"","sources":["../../../core/types/relayer-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC5G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAM9D,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,qBAAqB,CAAC;IACnC,cAAc,EAAE,wBAAwB,CAAC;IACzC,YAAY,EAAE,sBAAsB,CAAC;IACrC,sBAAsB,EAAE,sBAAsB,CAAC;CAChD;AAED,MAAM,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAC5C,MAAM,MAAM,oBAAoB,GAAG,MAAM,2BAA2B,CAAC;AACrE,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,mBAAmB,CAAC;AAO1E,MAAM,MAAM,sBAAsB,GAAG;IAEnC,QAAQ,CAAC,eAAe,EAAE,KAAK,MAAM,EAAE,CAAC;IAExC,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAE7C,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IAEzC,QAAQ,CAAC,+BAA+B,EAAE,YAAY,CAAC;IAEvD,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;CAC9B,CAAC;AAGF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,QAAQ,EAAE,CAAC;IAEhD,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;CAC9B,CAAC;AAGF,MAAM,MAAM,kBAAkB,GAAG;IAE/B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAElC,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;CAC9C,CAAC;AAGF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC5D,QAAQ,CAAC,eAAe,EAAE;QAExB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAEhC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,CAAC;IAEF,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAElC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAE1D,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IAEzC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAEnC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,QAAQ,CAAC,mBAAmB,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAE5D,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAElC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAE1D,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;IAE9C,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAE7C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAEnC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;CAC9B,CAAC;AAMF,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;AAMlF,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,MAAM,CAAC;AAChD,MAAM,MAAM,oBAAoB,GAAG,GAAG,GAAG,GAAG,CAAC;AAC7C,MAAM,MAAM,oBAAoB,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;AAErE,MAAM,MAAM,yBAAyB,GACjC,eAAe,CAAC,oBAAoB,EAAE,GAAG,CAAC,GAC1C,eAAe,CAAC,oBAAoB,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;AAOvE,MAAM,MAAM,wBAAwB,GAChC,eAAe,CAAC,oBAAoB,EAAE,GAAG,GAAG,GAAG,CAAC,GAChD,eAAe,CAAC,oBAAoB,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;AAMvE,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,kCAAkC,GAAG,kCAAkC,CAAC;IACrF,cAAc,EAAE,6BAA6B,CAAC;IAC9C,YAAY,EAAE,2BAA2B,CAAC;CAC3C;AAED,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,MAAM,wBAAwB,IAAI;IAC5E,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,QAAQ,EAAE,IAAI,CAAC;IACf,SAAS,EAAE,QAAQ,CAAC;IAEpB,OAAO,EAAE,UAAU,EAAE,CAAC;IAEtB,UAAU,EAAE,UAAU,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,QAAQ,EAAE,KAAK,CAAC;IAChB,SAAS,EAAE,QAAQ,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,cAAc,EAAE,YAAY,CAAC;IAC7B,SAAS,EAAE,QAAQ,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,YAAY,CAAC;QACtB,SAAS,EAAE,cAAc,CAAC;QAC1B,SAAS,EAAE,QAAQ,CAAC;KACrB,CAAC,CAAC;CACJ,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,0BAA0B,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;AAEpF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,2BAA2B,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;AAMhF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,4BAA4B,GAAG;IACzC,MAAM,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,sBAAsB,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAMF;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,QAAQ,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,eAAe,CAAC;CACxB,CAAC;AAMF,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,kBAAkB,GAClB,kBAAkB,GAClB,kBAAkB,GAClB,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,2BAA2B,GAAG,6BAA6B,CAAC;AAE7F;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,EAAE,gBAAgB,GAAG,eAAe,GAAG,0BAA0B,CAAC;IACvE,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,KAAK,EAAE,gBAAgB,GAAG,mBAAmB,CAAC;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,cAAc,GAAG,mBAAmB,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,uBAAuB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,iBAAiB,GAAG,uBAAuB,GAAG,2BAA2B,GAAG,oBAAoB,CAAC;IACxG,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,UAAU,EAAE;QACnB;YACE,QAAQ,CAAC,YAAY,EAAE;gBACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;aAClC,CAAC;SACH;KACF,CAAC;IACF,QAAQ,CAAC,GAAG,EAAE;QACZ,QAAQ,CAAC,IAAI,EAAE;YACb,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;SAClC,CAAC;KACH,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,0DAA0D;IAC1D,IAAI,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAC/B,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,CAAC"}

package/_types/core/types/relayer.d.ts

@@ -0,0 +1,106 @@
+import type { Bytes65Hex, Bytes65HexNo0x, BytesHex, BytesHexNo0x } from './primitives.js';
+import type { Prettify } from './utils.js';
+import type { Auth } from './auth.js';
+import type { InputHandle } from './encryptedTypes-p.js';
+export type RelayerSuccessStatus = 200 | 202;
+export type RelayerFailureStatus = 400 | 401 | 404 | 429 | 500 | 503;
+export type FetchInputProofResult = {
+    readonly handles: readonly InputHandle[];
+    readonly signatures: readonly Bytes65Hex[];
+    readonly extraData: BytesHex;
+};
+export type FetchPublicDecryptResult = {
+    readonly signatures: readonly BytesHexNo0x[];
+    readonly decryptedValue: BytesHexNo0x;
+    readonly extraData: BytesHex;
+};
+export type FetchUserDecryptResultItem = {
+    readonly payload: BytesHexNo0x;
+    readonly signature: Bytes65HexNo0x;
+    readonly extraData: BytesHex;
+};
+export type FetchUserDecryptResult = readonly FetchUserDecryptResultItem[];
+export type FetchDelegatedUserDecryptResult = readonly FetchUserDecryptResultItem[];
+export type RelayerCommonOptions = {
+    auth?: Auth | undefined;
+    debug?: boolean | undefined;
+    fetchRetries?: number | undefined;
+    fetchRetryDelayInMilliseconds?: number | undefined;
+    signal?: AbortSignal;
+    timeout?: number;
+};
+export type RelayerKeyUrlOptions = Prettify<Omit<RelayerCommonOptions, 'timeout'> & {
+    onProgress?: ((args: RelayerKeyUrlProgressArgs) => void) | undefined;
+}>;
+export type RelayerInputProofOptions = Prettify<RelayerCommonOptions & {
+    onProgress?: ((args: RelayerInputProofProgressArgs) => void) | undefined;
+}>;
+export type RelayerUserDecryptOptions = Prettify<RelayerCommonOptions & {
+    onProgress?: ((args: RelayerUserDecryptProgressArgs) => void) | undefined;
+}>;
+export type RelayerDelegatedUserDecryptOptions = Prettify<RelayerCommonOptions & {
+    onProgress?: ((args: RelayerDelegatedUserDecryptProgressArgs) => void) | undefined;
+}>;
+export type RelayerPublicDecryptOptions = Prettify<RelayerCommonOptions & {
+    onProgress?: ((args: RelayerPublicDecryptProgressArgs) => void) | undefined;
+}>;
+export type RelayerProgressTypeValue = 'abort' | 'queued' | 'failed' | 'timeout' | 'succeeded' | 'throttled';
+export type RelayerPostOperation = 'INPUT_PROOF' | 'PUBLIC_DECRYPT' | 'USER_DECRYPT' | 'DELEGATED_USER_DECRYPT';
+export type FetchResultOf<O extends RelayerPostOperation> = O extends 'INPUT_PROOF' ? FetchInputProofResult : O extends 'PUBLIC_DECRYPT' ? FetchPublicDecryptResult : FetchUserDecryptResult;
+export type RelayerProgressArgs<O extends RelayerPostOperation> = RelayerProgressQueued<O> | RelayerProgressThrottled<O> | RelayerProgressSucceeded<O> | RelayerProgressTimeout<O> | RelayerProgressAbort<O> | RelayerProgressFailed<O>;
+export type RelayerKeyUrlProgressArgs = {
+    readonly url: string;
+    readonly operation: 'KEY_URL';
+    readonly retryCount: number;
+    readonly method: 'GET';
+};
+export type RelayerInputProofProgressArgs = RelayerProgressArgs<'INPUT_PROOF'>;
+export type RelayerUserDecryptProgressArgs = RelayerProgressArgs<'USER_DECRYPT'>;
+export type RelayerDelegatedUserDecryptProgressArgs = RelayerProgressArgs<'DELEGATED_USER_DECRYPT'>;
+export type RelayerPublicDecryptProgressArgs = RelayerProgressArgs<'PUBLIC_DECRYPT'>;
+export type RelayerProgressBase<T extends RelayerProgressTypeValue, O extends RelayerPostOperation> = {
+    readonly type: T;
+    readonly url: string;
+    readonly method?: 'POST' | 'GET';
+    readonly operation: O;
+    readonly jobId?: string | undefined;
+    readonly retryCount: number;
+    readonly totalSteps: number;
+    readonly step: number;
+};
+export type RelayerProgressStatusBase<T extends RelayerProgressTypeValue, O extends RelayerPostOperation, S extends RelayerSuccessStatus | RelayerFailureStatus> = Prettify<RelayerProgressBase<T, O> & {
+    readonly method: 'POST' | 'GET';
+    readonly status: S;
+}>;
+export type RelayerProgressJobIdBase<T extends RelayerProgressTypeValue, O extends RelayerPostOperation, S extends RelayerSuccessStatus | RelayerFailureStatus> = Prettify<RelayerProgressStatusBase<T, O, S> & {
+    readonly jobId: string;
+}>;
+export type RelayerProgressQueued<O extends RelayerPostOperation> = Prettify<RelayerProgressJobIdBase<'queued', O, 202> & {
+    readonly requestId: string;
+    readonly retryAfterMs: number;
+    readonly elapsed: number;
+}>;
+export type RelayerProgressThrottled<O extends RelayerPostOperation> = Prettify<RelayerProgressStatusBase<'throttled', O, 429> & {
+    readonly method: 'POST';
+    readonly retryAfterMs: number;
+    readonly elapsed: number;
+    readonly relayerApiError: {
+        readonly label: string;
+        readonly message: string;
+    };
+}>;
+export type RelayerProgressSucceeded<O extends RelayerPostOperation> = Prettify<RelayerProgressJobIdBase<'succeeded', O, 200> & {
+    readonly requestId: string;
+    readonly elapsed: number;
+    readonly result: FetchResultOf<O>;
+}>;
+export type RelayerProgressFailed<O extends RelayerPostOperation, S extends RelayerFailureStatus = RelayerFailureStatus> = Prettify<RelayerProgressStatusBase<'failed', O, S> & {
+    readonly elapsed: number;
+    readonly relayerApiError: {
+        readonly label: string;
+        readonly message: string;
+    };
+}>;
+export type RelayerProgressTimeout<O extends RelayerPostOperation> = Prettify<RelayerProgressBase<'timeout', O>>;
+export type RelayerProgressAbort<O extends RelayerPostOperation> = Prettify<RelayerProgressBase<'abort', O>>;
+//# sourceMappingURL=relayer.d.ts.map

package/_types/core/types/relayer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relayer.d.ts","sourceRoot":"","sources":["../../../core/types/relayer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC1F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,MAAM,oBAAoB,GAAG,GAAG,GAAG,GAAG,CAAC;AAC7C,MAAM,MAAM,oBAAoB,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;AAErE,MAAM,MAAM,qBAAqB,GAAG;IAElC,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IAEzC,QAAQ,CAAC,UAAU,EAAE,SAAS,UAAU,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;CAC9B,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG,SAAS,0BAA0B,EAAE,CAAC;AAC3E,MAAM,MAAM,+BAA+B,GAAG,SAAS,0BAA0B,EAAE,CAAC;AAMpF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,6BAA6B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CACzC,IAAI,CAAC,oBAAoB,EAAE,SAAS,CAAC,GAAG;IACtC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,yBAAyB,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACtE,CACF,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAC7C,oBAAoB,GAAG;IACrB,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,6BAA6B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC1E,CACF,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAC9C,oBAAoB,GAAG;IACrB,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,8BAA8B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC3E,CACF,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CACvD,oBAAoB,GAAG;IACrB,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,uCAAuC,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACpF,CACF,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAChD,oBAAoB,GAAG;IACrB,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,gCAAgC,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC7E,CACF,CAAC;AAMF,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;AAE7G,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG,gBAAgB,GAAG,cAAc,GAAG,wBAAwB,CAAC;AAEhH,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,oBAAoB,IAAI,CAAC,SAAS,aAAa,GAC/E,qBAAqB,GACrB,CAAC,SAAS,gBAAgB,GACxB,wBAAwB,GACxB,sBAAsB,CAAC;AAE7B,MAAM,MAAM,mBAAmB,CAAC,CAAC,SAAS,oBAAoB,IAC1D,qBAAqB,CAAC,CAAC,CAAC,GACxB,wBAAwB,CAAC,CAAC,CAAC,GAC3B,wBAAwB,CAAC,CAAC,CAAC,GAC3B,sBAAsB,CAAC,CAAC,CAAC,GACzB,oBAAoB,CAAC,CAAC,CAAC,GACvB,qBAAqB,CAAC,CAAC,CAAC,CAAC;AAE7B,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;CACxB,CAAC;AACF,MAAM,MAAM,6BAA6B,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;AAC/E,MAAM,MAAM,8BAA8B,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;AACjF,MAAM,MAAM,uCAAuC,GAAG,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;AACpG,MAAM,MAAM,gCAAgC,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;AAErF,MAAM,MAAM,mBAAmB,CAAC,CAAC,SAAS,wBAAwB,EAAE,CAAC,SAAS,oBAAoB,IAAI;IACpG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,yBAAyB,CACnC,CAAC,SAAS,wBAAwB,EAClC,CAAC,SAAS,oBAAoB,EAC9B,CAAC,SAAS,oBAAoB,GAAG,oBAAoB,IACnD,QAAQ,CACV,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;CACpB,CACF,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAClC,CAAC,SAAS,wBAAwB,EAClC,CAAC,SAAS,oBAAoB,EAC9B,CAAC,SAAS,oBAAoB,GAAG,oBAAoB,IACnD,QAAQ,CACV,yBAAyB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CACF,CAAC;AAGF,MAAM,MAAM,qBAAqB,CAAC,CAAC,SAAS,oBAAoB,IAAI,QAAQ,CAC1E,wBAAwB,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CACF,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,CAAC,SAAS,oBAAoB,IAAI,QAAQ,CAC7E,yBAAyB,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE;QACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH,CACF,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,CAAC,SAAS,oBAAoB,IAAI,QAAQ,CAC7E,wBAAwB,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;CACnC,CACF,CAAC;AAEF,MAAM,MAAM,qBAAqB,CAC/B,CAAC,SAAS,oBAAoB,EAC9B,CAAC,SAAS,oBAAoB,GAAG,oBAAoB,IACnD,QAAQ,CACV,yBAAyB,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE;QACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH,CACF,CAAC;AAEF,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,oBAAoB,IAAI,QAAQ,CAAC,mBAAmB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;AAEjH,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,oBAAoB,IAAI,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC"}

package/_types/core/types/signedDecryptionPermit.d.ts

@@ -0,0 +1,46 @@
+import type { KmsDelegatedUserDecryptEip712, KmsUserDecryptEip712 } from './kms.js';
+import type { Bytes65Hex, BytesHex, ChecksummedAddress } from './primitives.js';
+/**
+ * A signed EIP-712 authorization that allows the signer's ephemeral key
+ * to request decryption of the signer's own FHE handles from the KMS.
+ *
+ * Created once, serializable, and reusable across multiple decrypt calls.
+ */
+export type SignedDecryptionPermitBase = {
+    /** The EIP-712 signature. */
+    readonly signature: Bytes65Hex;
+    /** The account that signed the permit. */
+    readonly signerAddress: ChecksummedAddress;
+    /**
+     * The account that owns the encrypted data this permit covers.
+     *
+     * - **Self permit:** equals `signerAddress` — the signer authorizes decryption
+     *   of their own data.
+     *
+     * - **Delegated permit:** differs from `signerAddress`. Step by step:
+     *   1. Alice owns encrypted values on-chain (ebool, euint8, etc.).
+     *   2. Alice calls the ACL contract to grant Bob permission to decrypt her data.
+     *   3. Bob signs an EIP-712 delegated decryption permit referencing Alice as the
+     *      `encryptedDataOwnerAddress` (= `delegatorAddress` in the EIP-712 message).
+     *   4. The KMS verifies Bob's signature (`signerAddress`) and that Alice
+     *      (`encryptedDataOwnerAddress`) has granted him on-chain permission.
+     *   5. Bob can now decrypt Alice's encrypted values using this permit.
+     */
+    readonly encryptedDataOwnerAddress: ChecksummedAddress;
+    /** The E2E transport public key embedded in the EIP-712 message. */
+    readonly e2eTransportPublicKey: BytesHex;
+    /** @throws If the permit has expired based on `startTimestamp` + `durationDays`. */
+    assertNotExpired(): void;
+};
+export type SignedSelfDecryptionPermit = SignedDecryptionPermitBase & {
+    readonly eip712: KmsUserDecryptEip712;
+    /** Always `false` for non-delegated permits. `encryptedDataOwnerAddress === signerAddress`. */
+    readonly isDelegated: false;
+};
+export type SignedDelegatedDecryptionPermit = SignedDecryptionPermitBase & {
+    readonly eip712: KmsDelegatedUserDecryptEip712;
+    /** Always `true` for delegated permits. `v` is the delegated account. (see `SenderCannotBeDelegate` is ACL.sol) */
+    readonly isDelegated: true;
+};
+export type SignedDecryptionPermit = SignedSelfDecryptionPermit | SignedDelegatedDecryptionPermit;
+//# sourceMappingURL=signedDecryptionPermit.d.ts.map

package/_types/core/types/signedDecryptionPermit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signedDecryptionPermit.d.ts","sourceRoot":"","sources":["../../../core/types/signedDecryptionPermit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AACpF,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC,6BAA6B;IAC7B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,yBAAyB,EAAE,kBAAkB,CAAC;IACvD,oEAAoE;IACpE,QAAQ,CAAC,qBAAqB,EAAE,QAAQ,CAAC;IAEzC,oFAAoF;IACpF,gBAAgB,IAAI,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,0BAA0B,GAAG;IACpE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,+FAA+F;IAC/F,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG,0BAA0B,GAAG;IACzE,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,mHAAmH;IACnH,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,GAAG,+BAA+B,CAAC"}

package/_types/core/types/tkms-p.d.ts

@@ -0,0 +1,5 @@
+export declare const TkmsPrivateKeyBrand: unique symbol;
+export type TkmsPrivateKey = {
+    readonly [TkmsPrivateKeyBrand]: never;
+};
+//# sourceMappingURL=tkms-p.d.ts.map

package/_types/core/types/tkms-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tkms-p.d.ts","sourceRoot":"","sources":["../../../core/types/tkms-p.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,OAAO,CAAC,MAAM,mBAAmB,EAAE,OAAO,MAAM,CAAC;AAExD,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC;CACvC,CAAC"}

package/_types/core/types/utils.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Utility type that flattens intersection types for better IDE display.
+ */
+export type Prettify<T> = {
+    [K in keyof T]: T[K];
+} & {};
+export type ValidationResult<T, E extends Error = Error> = {
+    readonly ok: true;
+    readonly value: T;
+} | {
+    readonly ok: false;
+    readonly error: E;
+};
+export type PartialWithUndefined<T> = {
+    [P in keyof T]?: T[P] | undefined;
+};
+declare const symbol: unique symbol;
+export type Branded<T, U> = T & {
+    [symbol]: U;
+};
+export interface Branding<BrandT> {
+    __brand: BrandT;
+}
+export interface Flavoring<FlavorT> {
+    __flavor?: FlavorT;
+}
+export type Flavor<T, FlavorT> = T & Flavoring<FlavorT>;
+export type NonEmptyExtract<T, U> = Extract<T, U> extends never ? {
+    error: 'Extract produced never - no matching types found';
+} : Extract<T, U>;
+export type StrictEquals<A, B> = [A] extends [B] ? ([B] extends [A] ? true : false) : false;
+export type NonEmptyReadonlyArray<T> = readonly [T, ...T[]];
+export {};
+//# sourceMappingURL=utils.d.ts.map

package/_types/core/types/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../core/types/utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI;KACvB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CACrB,GAAG,EAAE,CAAC;AAEP,MAAM,MAAM,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,KAAK,GAAG,KAAK,IACnD;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC;AAE9C,MAAM,MAAM,oBAAoB,CAAC,CAAC,IAAI;KACnC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS;CAClC,CAAC;AAEF,OAAO,CAAC,MAAM,MAAM,EAAE,OAAO,MAAM,CAAC;AACpC,MAAM,MAAM,OAAO,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG;IAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;CAAE,CAAC;AAEhD,MAAM,WAAW,QAAQ,CAAC,MAAM;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS,CAAC,OAAO;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;AAExD,MAAM,MAAM,eAAe,CAAC,CAAC,EAAE,CAAC,IAC9B,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,KAAK,GAAG;IAAE,KAAK,EAAE,kDAAkD,CAAA;CAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE9G,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;AAE5F,MAAM,MAAM,qBAAqB,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC"}

package/_types/core/types/zkProof-p.d.ts

@@ -0,0 +1,21 @@
+import type { InputHandle } from './encryptedTypes-p.js';
+import type { EncryptionBits } from './fheType.js';
+import type { Bytes, ChecksummedAddress, Uint64BigInt } from './primitives.js';
+export interface ZkProofLike {
+    readonly chainId: bigint | number;
+    readonly aclContractAddress: string;
+    readonly contractAddress: string;
+    readonly userAddress: string;
+    readonly ciphertextWithZkProof: Uint8Array | string;
+    readonly encryptionBits?: readonly number[];
+}
+export interface ZkProof {
+    readonly chainId: Uint64BigInt;
+    readonly aclContractAddress: ChecksummedAddress;
+    readonly contractAddress: ChecksummedAddress;
+    readonly userAddress: ChecksummedAddress;
+    readonly ciphertextWithZkProof: Bytes;
+    readonly encryptionBits: readonly EncryptionBits[];
+    getInputHandles(): readonly InputHandle[];
+}
+//# sourceMappingURL=zkProof-p.d.ts.map

package/_types/core/types/zkProof-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zkProof-p.d.ts","sourceRoot":"","sources":["../../../core/types/zkProof-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAQ/E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,qBAAqB,EAAE,UAAU,GAAG,MAAM,CAAC;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,qBAAqB,EAAE,KAAK,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,SAAS,cAAc,EAAE,CAAC;IAEnD,eAAe,IAAI,SAAS,WAAW,EAAE,CAAC;CAC3C"}

package/_types/core/types/zkProofBuilder.d.ts

@@ -0,0 +1,23 @@
+import type { EncryptionBits } from './fheType.js';
+import type { Fhevm } from './coreFhevmClient.js';
+import type { AddressValueLike, BoolValueLike, TypedValue, Uint128ValueLike, Uint16ValueLike, Uint256ValueLike, Uint32ValueLike, Uint64ValueLike, Uint8ValueLike } from './primitives.js';
+import type { ZkProof } from './zkProof-p.js';
+import type { WithEncrypt } from './coreFhevmRuntime.js';
+import type { FhevmChain } from './fhevmChain.js';
+export interface ZkProofBuilder {
+    addBool(value: boolean | number | bigint | BoolValueLike): this;
+    addUint8(value: number | bigint | Uint8ValueLike): this;
+    addUint16(value: number | bigint | Uint16ValueLike): this;
+    addUint32(value: number | bigint | Uint32ValueLike): this;
+    addUint64(value: number | bigint | Uint64ValueLike): this;
+    addUint128(value: number | bigint | Uint128ValueLike): this;
+    addUint256(value: number | bigint | Uint256ValueLike): this;
+    addAddress(value: string | AddressValueLike): this;
+    addTypedValue(typedValue: TypedValue): this;
+    getBits(): EncryptionBits[];
+    build(fhevm: Fhevm<FhevmChain, WithEncrypt>, parameters: {
+        readonly contractAddress: string;
+        readonly userAddress: string;
+    }): Promise<ZkProof>;
+}
+//# sourceMappingURL=zkProofBuilder.d.ts.map

package/_types/core/types/zkProofBuilder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zkProofBuilder.d.ts","sourceRoot":"","sources":["../../../core/types/zkProofBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,cAAc,EACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC;IACxD,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,eAAe,GAAG,IAAI,CAAC;IAC1D,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,eAAe,GAAG,IAAI,CAAC;IAC1D,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,eAAe,GAAG,IAAI,CAAC;IAC1D,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAC5D,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAC5D,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAAC;IACnD,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;IAC5C,OAAO,IAAI,cAAc,EAAE,CAAC;IAC5B,KAAK,CACH,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,EACrC,UAAU,EAAE;QACV,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,GACA,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB"}

package/_types/core/utils-p/decrypt/assertPermitMatchesKeypair.d.ts

@@ -0,0 +1,12 @@
+import type { TransportKeypair } from '../../kms/TransportKeypair-p.js';
+import type { SignedDecryptionPermit } from '../../types/signedDecryptionPermit.js';
+/**
+ * Asserts that the permit's publicKey matches the keypair's publicKey.
+ *
+ * Both values are validated via `instanceof` before comparison.
+ *
+ * @throws {InvalidTypeError} If either value is not the expected type.
+ * @throws If the public keys do not match.
+ */
+export declare function assertPermitMatchesKeypair(signedPermit: SignedDecryptionPermit, transportKeypair: TransportKeypair): void;
+//# sourceMappingURL=assertPermitMatchesKeypair.d.ts.map

package/_types/core/utils-p/decrypt/assertPermitMatchesKeypair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertPermitMatchesKeypair.d.ts","sourceRoot":"","sources":["../../../../core/utils-p/decrypt/assertPermitMatchesKeypair.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAIpF;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,sBAAsB,EACpC,gBAAgB,EAAE,gBAAgB,GACjC,IAAI,CAUN"}

package/_types/core/utils-p/decrypt/verifyKmsDelegatedUserDecryptEip712.d.ts

@@ -0,0 +1,14 @@
+import type { FhevmRuntime } from '../../types/coreFhevmRuntime.js';
+import type { FhevmChain } from '../../types/fhevmChain.js';
+import type { KmsDelegatedUserDecryptEip712Message } from '../../types/kms.js';
+import type { Bytes65Hex, ChecksummedAddress } from '../../types/primitives.js';
+export type VerifyKmsDelegatedUserDecryptEip712Parameters = {
+    readonly signer: ChecksummedAddress;
+    readonly message: KmsDelegatedUserDecryptEip712Message;
+    readonly signature: Bytes65Hex;
+};
+export declare function verifyKmsDelegatedUserDecryptEip712(context: {
+    readonly chain: FhevmChain;
+    readonly runtime: FhevmRuntime;
+}, parameters: VerifyKmsDelegatedUserDecryptEip712Parameters): Promise<void>;
+//# sourceMappingURL=verifyKmsDelegatedUserDecryptEip712.d.ts.map

package/_types/core/utils-p/decrypt/verifyKmsDelegatedUserDecryptEip712.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyKmsDelegatedUserDecryptEip712.d.ts","sourceRoot":"","sources":["../../../../core/utils-p/decrypt/verifyKmsDelegatedUserDecryptEip712.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,KAAK,EAAiC,oCAAoC,EAAE,MAAM,oBAAoB,CAAC;AAC9G,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAMhF,MAAM,MAAM,6CAA6C,GAAG;IAC1D,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,oCAAoC,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEF,wBAAsB,mCAAmC,CACvD,OAAO,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,EACvE,UAAU,EAAE,6CAA6C,GACxD,OAAO,CAAC,IAAI,CAAC,CA4Bf"}

package/_types/core/utils-p/decrypt/verifyKmsUserDecryptEip712.d.ts

@@ -0,0 +1,14 @@
+import type { FhevmRuntime } from '../../types/coreFhevmRuntime.js';
+import type { FhevmChain } from '../../types/fhevmChain.js';
+import type { KmsUserDecryptEip712Message } from '../../types/kms.js';
+import type { Bytes65Hex, ChecksummedAddress } from '../../types/primitives.js';
+export type VerifyKmsUserDecryptEip712Parameters = {
+    readonly signer: ChecksummedAddress;
+    readonly message: KmsUserDecryptEip712Message;
+    readonly signature: Bytes65Hex;
+};
+export declare function verifyKmsUserDecryptEip712(context: {
+    readonly chain: FhevmChain;
+    readonly runtime: FhevmRuntime;
+}, parameters: VerifyKmsUserDecryptEip712Parameters): Promise<void>;
+//# sourceMappingURL=verifyKmsUserDecryptEip712.d.ts.map

package/_types/core/utils-p/decrypt/verifyKmsUserDecryptEip712.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyKmsUserDecryptEip712.d.ts","sourceRoot":"","sources":["../../../../core/utils-p/decrypt/verifyKmsUserDecryptEip712.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,KAAK,EAAwB,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAC5F,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAMhF,MAAM,MAAM,oCAAoC,GAAG;IACjD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEF,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,EACvE,UAAU,EAAE,oCAAoC,GAC/C,OAAO,CAAC,IAAI,CAAC,CA4Bf"}

package/_types/core/utils-p/decrypt/verifyTkmsPublicKey.d.ts

@@ -0,0 +1,16 @@
+import type { TkmsPrivateKey } from '../../types/tkms-p.js';
+import type { FhevmRuntime, WithDecrypt } from '../../types/coreFhevmRuntime.js';
+import type { BytesHex } from '../../types/primitives.js';
+/**
+ * Verifies that a TKMS public key matches the given private key
+ * by re-deriving the public key and comparing.
+ *
+ * @throws If the derived public key does not match `tkmsPublicKeyBytesHex`.
+ */
+export declare function verifyTkmsPublicKey(context: {
+    readonly runtime: FhevmRuntime<WithDecrypt>;
+}, parameters: {
+    readonly tkmsPrivateKey: TkmsPrivateKey;
+    readonly tkmsPublicKeyBytesHex: BytesHex;
+}): Promise<void>;
+//# sourceMappingURL=verifyTkmsPublicKey.d.ts.map

package/_types/core/utils-p/decrypt/verifyTkmsPublicKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyTkmsPublicKey.d.ts","sourceRoot":"","sources":["../../../../core/utils-p/decrypt/verifyTkmsPublicKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAE1D;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;CAAE,EACxD,UAAU,EAAE;IACV,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,qBAAqB,EAAE,QAAQ,CAAC;CAC1C,GACA,OAAO,CAAC,IAAI,CAAC,CAUf"}