@fhevm/sdk 1.0.0-alpha.1 → 1.0.0-alpha.3

package/_esm/core/host-contracts/checkDelegation.js

@@ -0,0 +1,81 @@
+import { AclUserDecryptionError } from '../errors/AclError.js';
+import { isHandleDelegatedForUserDecryption } from './isHandleDelegatedForUserDecryption-p.js';
+////////////////////////////////////////////////////////////////////////////////
+export async function checkDelegation(context, parameters) {
+    const { address, delegator, delegate, handleContractPairs } = parameters;
+    if (handleContractPairs.length === 0) {
+        throw new Error('checkDelegation requires at least one (handle, contractAddress) pair');
+    }
+    // runtime defensive check, use lowercase
+    function getKey(addr, handleBytes32Hex) {
+        return `${addr}:${handleBytes32Hex}`.toLowerCase();
+    }
+    // 1. Verify rule: delegator !== delegate
+    if (delegator.toLowerCase() === delegate.toLowerCase()) {
+        throw new AclUserDecryptionError({
+            contractAddress: address,
+            message: `delegator ${delegator} cannot be equal to delegate`,
+        });
+    }
+    // 2. Verify rules: delegator !== contractAddress & delegate !== contractAddress
+    for (const pair of handleContractPairs) {
+        if (delegator.toLowerCase() === pair.contractAddress.toLowerCase()) {
+            throw new AclUserDecryptionError({
+                contractAddress: address,
+                message: `delegator ${delegator} cannot be equal to contractAddress`,
+            });
+        }
+        if (delegate.toLowerCase() === pair.contractAddress.toLowerCase()) {
+            throw new AclUserDecryptionError({
+                contractAddress: address,
+                message: `delegate ${delegate} cannot be equal to contractAddress`,
+            });
+        }
+    }
+    // 3. Collect all unique (contractAddress, handle) pairs to avoid duplicate RPC calls
+    const allChecks = [];
+    const seenKeys = new Set();
+    for (const pair of handleContractPairs) {
+        // runtime defensive check, use lowercase
+        const key = getKey(pair.contractAddress, pair.handle.bytes32Hex);
+        if (!seenKeys.has(key)) {
+            seenKeys.add(key);
+            allChecks.push({
+                handle: pair.handle,
+                contractAddress: pair.contractAddress,
+            });
+        }
+    }
+    if (allChecks.length === 0) {
+        throw new Error('checkDelegation: no delegation checks to perform (unexpected empty dedup result)');
+    }
+    // 4. Single batched RPC call for all unique checks
+    const allResults = await isHandleDelegatedForUserDecryption(context, {
+        address,
+        delegator,
+        delegate,
+        pairs: allChecks,
+    });
+    // 5. Build result map for lookup
+    const resultMap = new Map();
+    for (const [i, check] of allChecks.entries()) {
+        const result = allResults[i];
+        // tsc: noUncheckedIndexedAccess
+        if (result === undefined) {
+            throw new Error(`Missing result at index ${i}`);
+        }
+        const key = getKey(check.contractAddress, check.handle.bytes32Hex);
+        resultMap.set(key, result);
+    }
+    // 6. Verify delegation for each requested pair
+    for (const pair of handleContractPairs) {
+        const key = getKey(pair.contractAddress, pair.handle.bytes32Hex);
+        if (resultMap.get(key) !== true) {
+            throw new AclUserDecryptionError({
+                contractAddress: address,
+                message: `Delegate ${delegate} is not delegated by ${delegator} to user decrypt handle ${pair.handle.bytes32Hex} on contract ${pair.contractAddress}!`,
+            });
+        }
+    }
+}
+//# sourceMappingURL=checkDelegation.js.map

package/_esm/core/host-contracts/checkDelegation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkDelegation.js","sourceRoot":"","sources":["../../../core/host-contracts/checkDelegation.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,kCAAkC,EAAE,MAAM,2CAA2C,CAAC;AAoB/F,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAgB,EAAE,UAAsB;IAC5E,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,UAAU,CAAC;IAEzE,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IAED,yCAAyC;IACzC,SAAS,MAAM,CAAC,IAAY,EAAE,gBAAwB;QACpD,OAAO,GAAG,IAAI,IAAI,gBAAgB,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,CAAC;IAED,yCAAyC;IACzC,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QACvD,MAAM,IAAI,sBAAsB,CAAC;YAC/B,eAAe,EAAE,OAAO;YACxB,OAAO,EAAE,aAAa,SAAS,8BAA8B;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC;YACnE,MAAM,IAAI,sBAAsB,CAAC;gBAC/B,eAAe,EAAE,OAAO;gBACxB,OAAO,EAAE,aAAa,SAAS,qCAAqC;aACrE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,sBAAsB,CAAC;gBAC/B,eAAe,EAAE,OAAO;gBACxB,OAAO,EAAE,YAAY,QAAQ,qCAAqC;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,yCAAyC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClB,SAAS,CAAC,IAAI,CAAC;gBACb,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IAED,mDAAmD;IACnD,MAAM,UAAU,GAAG,MAAM,kCAAkC,CAAC,OAAO,EAAE;QACnE,OAAO;QACP,SAAS;QACT,QAAQ;QACR,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,iCAAiC;IACjC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,gCAAgC;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,+CAA+C;IAC/C,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,sBAAsB,CAAC;gBAC/B,eAAe,EAAE,OAAO;gBACxB,OAAO,EAAE,YAAY,QAAQ,wBAAwB,SAAS,2BAA2B,IAAI,CAAC,MAAM,CAAC,UAAU,gBAAgB,IAAI,CAAC,eAAe,GAAG;aACvJ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/_esm/core/host-contracts/getUserDecryptionDelegationExpirationDate.js

@@ -0,0 +1,19 @@
+import { isUint64 } from '../base/uint.js';
+import { getUserDecryptionDelegationExpirationDateAbi } from '../host-contracts/abi-fragments/fragments.js';
+import { getTrustedClient } from '../runtime/CoreFhevm-p.js';
+////////////////////////////////////////////////////////////////////////////////
+export async function getUserDecryptionDelegationExpirationDate(context, parameters) {
+    const trustedClient = getTrustedClient(context);
+    const address = parameters.address;
+    const res = await context.runtime.ethereum.readContract(trustedClient, {
+        address: address,
+        abi: getUserDecryptionDelegationExpirationDateAbi,
+        args: [parameters.delegator, parameters.delegate, parameters.contractAddress],
+        functionName: getUserDecryptionDelegationExpirationDateAbi[0].name,
+    });
+    if (!isUint64(res)) {
+        throw new Error(`Invalid expiration date.`);
+    }
+    return BigInt(res);
+}
+//# sourceMappingURL=getUserDecryptionDelegationExpirationDate.js.map

package/_esm/core/host-contracts/getUserDecryptionDelegationExpirationDate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserDecryptionDelegationExpirationDate.js","sourceRoot":"","sources":["../../../core/host-contracts/getUserDecryptionDelegationExpirationDate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,4CAA4C,EAAE,MAAM,8CAA8C,CAAC;AAC5G,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAmB7D,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,OAAgB,EAChB,UAAsB;IAEtB,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IAEnC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE;QACrE,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,4CAA4C;QACjD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,eAAe,CAAC;QAC7E,YAAY,EAAE,4CAA4C,CAAC,CAAC,CAAC,CAAC,IAAI;KACnE,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAiB,CAAC;AACrC,CAAC"}

package/_esm/core/host-contracts/isHandleDelegatedForUserDecryption-p.js

@@ -0,0 +1,32 @@
+import { isHandleDelegatedForUserDecryptionAbi } from './abi-fragments/fragments.js';
+import { getTrustedClient } from '../runtime/CoreFhevm-p.js';
+import { executeWithBatching } from '../base/promise.js';
+////////////////////////////////////////////////////////////////////////////////
+export async function isHandleDelegatedForUserDecryption(context, parameters) {
+    const { address, delegate, delegator, pairs } = parameters;
+    const rpcCalls = pairs.map((pair) => () => _isHandleDelegatedForUserDecryption(context, {
+        address,
+        delegate,
+        delegator,
+        handle: pair.handle,
+        contractAddress: pair.contractAddress,
+    }));
+    const results = await executeWithBatching(rpcCalls, context.options.batchRpcCalls);
+    return results;
+}
+////////////////////////////////////////////////////////////////////////////////
+async function _isHandleDelegatedForUserDecryption(context, parameters) {
+    const { address, delegator, delegate, contractAddress, handle } = parameters;
+    const trustedClient = getTrustedClient(context);
+    const res = await context.runtime.ethereum.readContract(trustedClient, {
+        address: address,
+        abi: isHandleDelegatedForUserDecryptionAbi,
+        args: [delegator, delegate, contractAddress, handle.bytes32Hex],
+        functionName: isHandleDelegatedForUserDecryptionAbi[0].name,
+    });
+    if (typeof res !== 'boolean') {
+        throw new Error(`Invalid isHandleDelegatedForUserDecryptionAbi result.`);
+    }
+    return res;
+}
+//# sourceMappingURL=isHandleDelegatedForUserDecryption-p.js.map

package/_esm/core/host-contracts/isHandleDelegatedForUserDecryption-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isHandleDelegatedForUserDecryption-p.js","sourceRoot":"","sources":["../../../core/host-contracts/isHandleDelegatedForUserDecryption-p.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,qCAAqC,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAmBzD,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,OAAgB,EAChB,UAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAE3D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CACxB,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,CACb,mCAAmC,CAAC,OAAO,EAAE;QAC3C,OAAO;QACP,QAAQ;QACR,SAAS;QACT,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC,CACL,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEnF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,mCAAmC,CAChD,OAAgB,EAChB,UAMC;IAED,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IAC7E,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE;QACrE,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,qCAAqC;QAC1C,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC;QAC/D,YAAY,EAAE,qCAAqC,CAAC,CAAC,CAAC,CAAC,IAAI;KAC5D,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/_esm/core/host-contracts/persistAllowed.js

@@ -23,7 +23,7 @@ async function _persistAllowed(context, parameters) {
         functionName: persistAllowedAbi[0].name,
     });
     if (typeof res !== 'boolean') {
-        throw new Error(`Invalid isAllowedForDecryption result.`);
+        throw new Error(`Invalid persistAllowed result.`);
     }
     return res;
 }

package/_esm/core/host-contracts/persistAllowed.js.map

@@ -1 +1 @@
-{"version":3,"file":"persistAllowed.js","sourceRoot":"","sources":["../../../core/host-contracts/persistAllowed.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAiBzD,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAgB,EAAE,UAAsB;IAC3E,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CACxB,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,CACb,eAAe,CAAC,OAAO,EAAE;QACvB,OAAO;QACP,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CACL,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEnF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,eAAe,CAC5B,OAAgB,EAChB,UAIC;IAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;IAChD,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE;QACrE,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,iBAAiB;QACtB,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC;QAClC,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;KACxC,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"persistAllowed.js","sourceRoot":"","sources":["../../../core/host-contracts/persistAllowed.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAiBzD,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAgB,EAAE,UAAsB;IAC3E,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CACxB,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,CACb,eAAe,CAAC,OAAO,EAAE;QACvB,OAAO;QACP,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CACL,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEnF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,eAAe,CAC5B,OAAgB,EAChB,UAIC;IAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;IAChD,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE;QACrE,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,iBAAiB;QACtB,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC;QAClC,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;KACxC,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/_esm/core/kms/fetchKmsSignedcryptedShares-p.js

@@ -6,6 +6,7 @@ import { assertKmsDecryptionBitLimit } from './utils.js';
 import { checkPersistAllowed } from '../host-contracts/checkPersistAllowed.js';
 import { assertExtraDataMatchesKmsSingersContext } from '../host-contracts/KmsSignersContext-p.js';
 import { createKmsEip712Domain } from './createKmsEip712Domain.js';
+import { checkDelegation } from '../host-contracts/checkDelegation.js';
 ////////////////////////////////////////////////////////////////////////////////
 const MAX_USER_DECRYPT_CONTRACT_ADDRESSES = 10;
 ////////////////////////////////////////////////////////////////////////////////
@@ -46,11 +47,21 @@ export async function fetchKmsSignedcryptedShares(context, parameters) {
     // 6. Check: Expiration date
     signedPermit.assertNotExpired();
     // 7. Check: ACL permissions (user is signer or delegatorAddress)
-    await checkPersistAllowed(context, {
-        address: context.chain.fhevm.contracts.acl.address,
-        userAddress: encryptedDataOwnerAddress,
-        handleContractPairs,
-    });
+    if (signedPermit.isDelegated) {
+        await checkDelegation(context, {
+            address: context.chain.fhevm.contracts.acl.address,
+            delegate: signerAddress,
+            delegator: encryptedDataOwnerAddress,
+            handleContractPairs,
+        });
+    }
+    else {
+        await checkPersistAllowed(context, {
+            address: context.chain.fhevm.contracts.acl.address,
+            userAddress: encryptedDataOwnerAddress,
+            handleContractPairs,
+        });
+    }
     // 8. Verify the EIP712 signature
     // Not required because a signedPermit is guaranteed to be verified.
     // 9. Fetch `KmsSignersContext` on-chain (cached)
@@ -78,10 +89,9 @@ export async function fetchKmsSignedcryptedShares(context, parameters) {
     // Safe casts: the discriminated union on parameters guarantees
     // that options type matches signedPermit type, but TS can't prove
     // it after destructuring (nested discriminant limitation).
-    const relayerUrl = context.chain.fhevm.relayerUrl;
     let shares;
     if (signedPermit.isDelegated) {
-        shares = await context.runtime.relayer.fetchDelegatedUserDecrypt({ relayerUrl, chainId: context.chain.id }, {
+        shares = await context.runtime.relayer.fetchDelegatedUserDecrypt(context, {
             payload: {
                 handleContractPairs,
                 kmsDecryptEip712Signer: signerAddress,
@@ -92,7 +102,7 @@ export async function fetchKmsSignedcryptedShares(context, parameters) {
         });
     }
     else {
-        shares = await context.runtime.relayer.fetchUserDecrypt({ relayerUrl, chainId: context.chain.id }, {
+        shares = await context.runtime.relayer.fetchUserDecrypt(context, {
             payload: {
                 handleContractPairs,
                 kmsDecryptEip712Signer: signerAddress,

package/_esm/core/kms/fetchKmsSignedcryptedShares-p.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetchKmsSignedcryptedShares-p.js","sourceRoot":"","sources":["../../../core/kms/fetchKmsSignedcryptedShares-p.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,qCAAqC,EAAE,MAAM,+BAA+B,CAAC;AACtH,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AA4CnE,gFAAgF;AAEhF,MAAM,mCAAmC,GAAG,EAAE,CAAC;AAE/C,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAgB,EAAE,UAAsB;IACxF,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAEpD,iEAAiE;IACjE,qCAAqC,CACnC,YAAY,EACZ,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CACpC,CAAC;IAEF,uEAAuE;IACvE,MAAM,cAAc,GAAG;QACrB,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;QACjC,GAAG,OAAO;KACX,CAAC;IAEF,8BAA8B,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAEjD,sGAAsG;IACtG,MAAM,EAAE,yBAAyB,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;IAE7E,0DAA0D;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,CACT,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,MAAM,uBAAuB,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC;IACrF,IAAI,uBAAuB,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,+CAA+C;IAC/C,IAAI,uBAAuB,GAAG,mCAAmC,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC,mCAAmC,mCAAmC,WAAW,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,mBAAmB,GAAG,KAAK,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEvB,mDAAmD;IACnD,gCAAgC,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAiB,CAAC,CAAC;IAEpF,4BAA4B;IAC5B,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAErC,4BAA4B;IAC5B,YAAY,CAAC,gBAAgB,EAAE,CAAC;IAEhC,iEAAiE;IACjE,MAAM,mBAAmB,CAAC,OAAO,EAAE;QACjC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;QACxE,WAAW,EAAE,yBAAyB;QACtC,mBAAmB;KACpB,CAAC,CAAC;IAEH,iCAAiC;IACjC,oEAAoE;IAEpE,iDAAiD;IACjD,2EAA2E;IAC3E,wDAAwD;IACxD,EAAE;IACF,6EAA6E;IAC7E,iFAAiF;IACjF,iFAAiF;IACjF,uCAAuC;IACvC,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,0BAA0B,GAAsB,MAAM,qBAAqB,CAAC,OAAO,EAAE;QACzF,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;KACjF,CAAC,CAAC;IAEH,uCAAuC,CACrC;QACE,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS;QAChD,iBAAiB,EAAE,0BAA0B;KAC9C,EACD,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAC9B,CAAC;IAEF,oDAAoD;IACpD,+DAA+D;IAC/D,kEAAkE;IAClE,2DAA2D;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;IAElD,IAAI,MAAsC,CAAC;IAE3C,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAC9D,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EACzC;YACE,OAAO,EAAE;gBACP,mBAAmB;gBACnB,sBAAsB,EAAE,aAAa;gBACrC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;gBACpD,yBAAyB,EAAE,SAAS;aACrC;YACD,OAAO,EAAE,cAAoD;SAC9D,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CACrD,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EACzC;YACE,OAAO,EAAE;gBACP,mBAAmB;gBACnB,sBAAsB,EAAE,aAAa;gBACrC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;gBACpD,yBAAyB,EAAE,SAAS;aACrC;YACD,OAAO,EAAE,cAA2C;SACrD,CACF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,MAAM,cAAc,GAAiC;QACnD,iBAAiB,EAAE,0BAA0B;QAC7C,YAAY,EAAE,qBAAqB,CAAC;YAClC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YACvC,kCAAkC,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO;SAC7F,CAAC;QACF,eAAe,EAAE,SAAS;QAC1B,mBAAmB,EAAE,aAAa;QAClC,OAAO;KACR,CAAC;IAEF,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,MAAM,0BAA0B,CAAC,OAAO,EAAE;QAC/C,QAAQ,EAAE,cAAc;QACxB,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"fetchKmsSignedcryptedShares-p.js","sourceRoot":"","sources":["../../../core/kms/fetchKmsSignedcryptedShares-p.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,qCAAqC,EAAE,MAAM,+BAA+B,CAAC;AACtH,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AA4CvE,gFAAgF;AAEhF,MAAM,mCAAmC,GAAG,EAAE,CAAC;AAE/C,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAgB,EAAE,UAAsB;IACxF,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAEpD,iEAAiE;IACjE,qCAAqC,CACnC,YAAY,EACZ,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CACpC,CAAC;IAEF,uEAAuE;IACvE,MAAM,cAAc,GAAG;QACrB,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;QACjC,GAAG,OAAO;KACX,CAAC;IAEF,8BAA8B,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAEjD,sGAAsG;IACtG,MAAM,EAAE,yBAAyB,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;IAE7E,0DAA0D;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,CACT,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,MAAM,uBAAuB,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC;IACrF,IAAI,uBAAuB,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,+CAA+C;IAC/C,IAAI,uBAAuB,GAAG,mCAAmC,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC,mCAAmC,mCAAmC,WAAW,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,mBAAmB,GAAG,KAAK,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEvB,mDAAmD;IACnD,gCAAgC,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAiB,CAAC,CAAC;IAEpF,4BAA4B;IAC5B,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAErC,4BAA4B;IAC5B,YAAY,CAAC,gBAAgB,EAAE,CAAC;IAEhC,iEAAiE;IACjE,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,eAAe,CAAC,OAAO,EAAE;YAC7B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;YACxE,QAAQ,EAAE,aAAa;YACvB,SAAS,EAAE,yBAAyB;YACpC,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,mBAAmB,CAAC,OAAO,EAAE;YACjC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;YACxE,WAAW,EAAE,yBAAyB;YACtC,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,oEAAoE;IAEpE,iDAAiD;IACjD,2EAA2E;IAC3E,wDAAwD;IACxD,EAAE;IACF,6EAA6E;IAC7E,iFAAiF;IACjF,iFAAiF;IACjF,uCAAuC;IACvC,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,0BAA0B,GAAsB,MAAM,qBAAqB,CAAC,OAAO,EAAE;QACzF,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;KACjF,CAAC,CAAC;IAEH,uCAAuC,CACrC;QACE,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS;QAChD,iBAAiB,EAAE,0BAA0B;KAC9C,EACD,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAC9B,CAAC;IAEF,oDAAoD;IACpD,+DAA+D;IAC/D,kEAAkE;IAClE,2DAA2D;IAC3D,IAAI,MAAsC,CAAC;IAE3C,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,OAAO,EAAE;YACxE,OAAO,EAAE;gBACP,mBAAmB;gBACnB,sBAAsB,EAAE,aAAa;gBACrC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;gBACpD,yBAAyB,EAAE,SAAS;aACrC;YACD,OAAO,EAAE,cAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE;YAC/D,OAAO,EAAE;gBACP,mBAAmB;gBACnB,sBAAsB,EAAE,aAAa;gBACrC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;gBACpD,yBAAyB,EAAE,SAAS;aACrC;YACD,OAAO,EAAE,cAA2C;SACrD,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,MAAM,cAAc,GAAiC;QACnD,iBAAiB,EAAE,0BAA0B;QAC7C,YAAY,EAAE,qBAAqB,CAAC;YAClC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YACvC,kCAAkC,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO;SAC7F,CAAC;QACF,eAAe,EAAE,SAAS;QAC1B,mBAAmB,EAAE,aAAa;QAClC,OAAO;KACR,CAAC;IAEF,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,MAAM,0BAA0B,CAAC,OAAO,EAAE;QAC/C,QAAQ,EAAE,cAAc;QACxB,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/_esm/core/kms/publicDecrypt.js

@@ -35,10 +35,7 @@ export async function publicDecrypt(context, parameters) {
         handles: orderedHandles,
     });
     // 5. Call relayer
-    const { orderedAbiEncodedClearValues, kmsPublicDecryptEIP712Signatures, extraData: relayerExtraData, } = await context.runtime.relayer.fetchPublicDecrypt({
-        relayerUrl: context.chain.fhevm.relayerUrl,
-        chainId: context.chain.id,
-    }, {
+    const { orderedAbiEncodedClearValues, kmsPublicDecryptEIP712Signatures, extraData: relayerExtraData, } = await context.runtime.relayer.fetchPublicDecrypt(context, {
         payload: {
             orderedHandles,
             extraData: requestedExtraData,

package/_esm/core/kms/publicDecrypt.js.map

@@ -1 +1 @@
-{"version":3,"file":"publicDecrypt.js","sourceRoot":"","sources":["../../../core/kms/publicDecrypt.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AACjH,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,gDAAgD,CAAC;AAmB3F,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,UAAsB;IAC1E,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC;IAErD,gEAAgE;IAChE,6EAA6E;IAC7E,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM,0BAA0B,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE;QACtE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;KACjF,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAa,4BAA4B,CAAC,0BAA0B,CAAC,CAAC;IAE9F,MAAM,cAAc,GAAG,OAAO,CAAC;IAE/B,uEAAuE;IACvE,MAAM,cAAc,GAAgC;QAClD,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;QACjC,GAAG,OAAO;KACX,CAAC;IAEF,4CAA4C;IAC5C,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC5E,CAAC;IAED,4BAA4B;IAC5B,2BAA2B,CAAC,cAAc,CAAC,CAAC;IAE5C,mDAAmD;IACnD,gCAAgC,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAiB,CAAC,CAAC;IAE3F,4BAA4B;IAC5B,MAAM,yBAAyB,CAAC,OAAO,EAAE;QACvC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;QACxE,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,kBAAkB;IAClB,MAAM,EACJ,4BAA4B,EAC5B,gCAAgC,EAChC,SAAS,EAAE,gBAAgB,GAC5B,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAClD;QACE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU;QAC1C,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;KAC1B,EACD;QACE,OAAO,EAAE;YACP,cAAc;YACd,SAAS,EAAE,kBAAkB;SAC9B;QACD,OAAO,EAAE,cAAc;KACxB,CACF,CAAC;IAEF,qDAAqD;IACrD,MAAM,2BAA2B,GAAsB,MAAM,0BAA0B,CAAC,OAAO,EAAE;QAC/F,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;QAChF,gBAAgB;QAChB,0BAA0B,EAAE,0BAA0B;QACtD,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IAEH,8CAA8C;IAC9C,MAAM,qBAAqB,GAA0B,MAAM,2BAA2B,CAAC,OAAO,EAAE;QAC9F,WAAW;QACX,cAAc,EAAE,cAAc;QAC9B,4BAA4B;QAC5B,gCAAgC;QAChC,iBAAiB,EAAE,2BAA2B;KAC/C,CAAC,CAAC;IAEH,OAAO,qBAAqB,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"publicDecrypt.js","sourceRoot":"","sources":["../../../core/kms/publicDecrypt.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AACjH,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,gDAAgD,CAAC;AAmB3F,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,UAAsB;IAC1E,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC;IAErD,gEAAgE;IAChE,6EAA6E;IAC7E,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM,0BAA0B,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE;QACtE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;KACjF,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAa,4BAA4B,CAAC,0BAA0B,CAAC,CAAC;IAE9F,MAAM,cAAc,GAAG,OAAO,CAAC;IAE/B,uEAAuE;IACvE,MAAM,cAAc,GAAgC;QAClD,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;QACjC,GAAG,OAAO;KACX,CAAC;IAEF,4CAA4C;IAC5C,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC5E,CAAC;IAED,4BAA4B;IAC5B,2BAA2B,CAAC,cAAc,CAAC,CAAC;IAE5C,mDAAmD;IACnD,gCAAgC,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAiB,CAAC,CAAC;IAE3F,4BAA4B;IAC5B,MAAM,yBAAyB,CAAC,OAAO,EAAE;QACvC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;QACxE,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,kBAAkB;IAClB,MAAM,EACJ,4BAA4B,EAC5B,gCAAgC,EAChC,SAAS,EAAE,gBAAgB,GAC5B,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE;QAC5D,OAAO,EAAE;YACP,cAAc;YACd,SAAS,EAAE,kBAAkB;SAC9B;QACD,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,qDAAqD;IACrD,MAAM,2BAA2B,GAAsB,MAAM,0BAA0B,CAAC,OAAO,EAAE;QAC/F,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;QAChF,gBAAgB;QAChB,0BAA0B,EAAE,0BAA0B;QACtD,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IAEH,8CAA8C;IAC9C,MAAM,qBAAqB,GAA0B,MAAM,2BAA2B,CAAC,OAAO,EAAE;QAC9F,WAAW;QACX,cAAc,EAAE,cAAc;QAC9B,4BAA4B;QAC5B,gCAAgC;QAChC,iBAAiB,EAAE,2BAA2B;KAC/C,CAAC,CAAC;IAEH,OAAO,qBAAqB,CAAC;AAC/B,CAAC"}

package/_esm/core/modules/decrypt/mock.js

@@ -1,32 +1,118 @@
+import { assertIsKmsExtraData } from '../../kms/kmsExtraData.js';
+import { ensure0x, remove0x } from '../../base/string.js';
+import { getMetadata, getShares } from '../../kms/KmsSigncryptedShares-p.js';
+import { asBytesHex, bytesToHex, hexToBytes } from '../../base/bytes.js';
+import { bigintToClearValueType } from '../../handle/FheType.js';
+import { createClearValue } from '../../handle/ClearValue.js';
+////////////////////////////////////////////////////////////////////////////////
+const PRIVATE_CLEARTEXT_TKMS_LIB_TOKEN = Symbol('CleartextTKMSLib.token');
+////////////////////////////////////////////////////////////////////////////////
+function _xorUnmaskWithPublicKey(publicKey, maskedCleartexts) {
+    const hex = remove0x(publicKey);
+    if (hex.length < 64) {
+        throw new Error(`PublicKeyTooShort: publicKey has ${hex.length / 2} bytes, need >= 32`);
+    }
+    const mask = BigInt('0x' + hex.slice(0, 64));
+    return maskedCleartexts.map((c) => c ^ mask);
+}
 ////////////////////////////////////////////////////////////////////////////////
 // decryptAndReconstruct
 ////////////////////////////////////////////////////////////////////////////////
-export async function decryptAndReconstruct(_runtime, _parameters) {
-    throw new Error('Not yet implemented');
+export async function decryptAndReconstruct(runtime, parameters) {
+    const cleartextEthereumModule = runtime.ethereum;
+    const { tkmsPrivateKey, shares } = parameters;
+    const privateKeySecp256k1 = asBytesHex(tkmsPrivateKey);
+    const publicKeySecp256k1 = cleartextEthereumModule.getPublicKey({ privateKey: privateKeySecp256k1 });
+    const metadata = getMetadata(shares);
+    const sharesArray = getShares(shares);
+    const firstShare = sharesArray[0];
+    if (firstShare === undefined) {
+        throw new Error('Expected at least one signcrypted share.');
+    }
+    const firstExtraData = firstShare.extraData;
+    for (let i = 1; i < sharesArray.length; i++) {
+        const share = sharesArray[i];
+        if (share !== undefined && share.extraData !== firstExtraData) {
+            throw new Error(`Mismatched extraData across shares: share[0]="${firstExtraData}" vs share[${i}]="${share.extraData}".`);
+        }
+    }
+    const extraData = ensure0x(firstExtraData);
+    assertIsKmsExtraData(extraData, {});
+    for (let i = 0; i < sharesArray.length; ++i) {
+        const s = sharesArray[i];
+        if (!s) {
+            throw new Error('Internal error');
+        }
+        const recoveredAddress = await cleartextEthereumModule.recoverAddress({
+            hash: ensure0x(s.payload),
+            signature: ensure0x(s.signature),
+        });
+        if (!metadata.kmsSignersContext.has(recoveredAddress)) {
+            throw new Error(`Unknown KMS signer: recovered address ${recoveredAddress} from share[${i}] is not a registered KMS signer.`);
+        }
+    }
+    const decoded = cleartextEthereumModule.decode({
+        encodedData: ensure0x(firstShare.payload),
+        types: ['uint256[]', 'bytes'],
+    });
+    if (decoded.length !== 2) {
+        throw new Error('Invalid decrypted result.');
+    }
+    const maskedCleartexts = decoded[0];
+    const signedExtraData = decoded[1];
+    const cleartexts = _xorUnmaskWithPublicKey(publicKeySecp256k1, maskedCleartexts);
+    if (extraData !== signedExtraData) {
+        throw new Error(`extraData mismatch: share extraData="${extraData}" does not match the signed payload's extraData="${signedExtraData}".`);
+    }
+    // 2. Build an unforgeable structure that contains the decrypted FhevmHandles
+    const orderedClearValues = cleartexts.map((plaintext, idx) => {
+        const fhevmHandle = metadata.handles[idx];
+        if (fhevmHandle === undefined) {
+            throw new Error('Internal error');
+        }
+        return createClearValue({
+            value: bigintToClearValueType(fhevmHandle.fheType, plaintext),
+            handle: fhevmHandle,
+            originToken: PRIVATE_CLEARTEXT_TKMS_LIB_TOKEN, // origin token for authenticity assertion
+        });
+    });
+    Object.freeze(orderedClearValues);
+    return orderedClearValues;
 }
 //////////////////////////////////////////////////////////////////////////////
 // generateTkmsPrivateKey
 //////////////////////////////////////////////////////////////////////////////
-export async function generateTkmsPrivateKey(_runtime) {
-    throw new Error('Not yet implemented');
+export async function generateTkmsPrivateKey(runtime) {
+    const cleartextEthereumModule = runtime.ethereum;
+    const privateKeySecp256k1 = cleartextEthereumModule.generatePrivateKey();
+    return Promise.resolve(privateKeySecp256k1);
 }
 //////////////////////////////////////////////////////////////////////////////
 // getTkmsPublicKeyHex
 //////////////////////////////////////////////////////////////////////////////
-export async function getTkmsPublicKeyHex(_runtime, _parameters) {
-    throw new Error('Not yet implemented');
+export async function getTkmsPublicKeyHex(runtime, parameters) {
+    const { tkmsPrivateKey } = parameters;
+    const privateKeySecp256k1 = asBytesHex(tkmsPrivateKey);
+    const cleartextEthereumModule = runtime.ethereum;
+    const publicKeySecp256k1 = cleartextEthereumModule.getPublicKey({ privateKey: privateKeySecp256k1 });
+    return Promise.resolve(publicKeySecp256k1);
 }
 //////////////////////////////////////////////////////////////////////////////
 // serializeTkmsPrivateKey
 //////////////////////////////////////////////////////////////////////////////
-export async function serializeTkmsPrivateKey(_runtime, _parameters) {
-    throw new Error('Not yet implemented');
+export async function serializeTkmsPrivateKey(_runtime, parameters) {
+    const { tkmsPrivateKey } = parameters;
+    const privateKeySecp256k1 = asBytesHex(tkmsPrivateKey);
+    const privateKeySecp256k1Bytes = hexToBytes(privateKeySecp256k1);
+    return Promise.resolve(privateKeySecp256k1Bytes);
 }
 //////////////////////////////////////////////////////////////////////////////
 // deserializeTkmsPrivateKey
 //////////////////////////////////////////////////////////////////////////////
-export async function deserializeTkmsPrivateKey(_runtime, _parameters) {
-    throw new Error('Not yet implemented');
+export async function deserializeTkmsPrivateKey(_runtime, parameters) {
+    const { tkmsPrivateKeyBytes } = parameters;
+    const privateKeySecp256k1 = bytesToHex(tkmsPrivateKeyBytes);
+    return Promise.resolve(privateKeySecp256k1);
 }
 //////////////////////////////////////////////////////////////////////////////
 // verifyTkmsPrivateKey

package/_esm/core/modules/decrypt/mock.js.map

@@ -1 +1 @@
-{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../../../core/modules/decrypt/mock.ts"],"names":[],"mappings":"AAmBA,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAsB,EACtB,WAA4C;IAE5C,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAAsB;IACjE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAsB,EACtB,WAA0C;IAE1C,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAsB,EACtB,WAA8C;IAE9C,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAsB,EACtB,WAAgD;IAEhD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,UAAU,oBAAoB,CAAC,QAAsB,EAAE,WAA2C;IACtG,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAyB,CAAC,OAAqB,EAAE,EAAE;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;YACvC,iBAAiB,EAAE,GAAG,EAAE;gBACtB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YACD,sBAAsB,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAC7D,qBAAqB,EAAE,CAAC,IAAqC,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC;YACtG,uBAAuB,EAAE,CAAC,IAAuC,EAAE,EAAE,CAAC,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC;YAC5G,yBAAyB,EAAE,CAAC,IAAyC,EAAE,EAAE,CACvE,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC;YAC1C,oBAAoB,EAAE,CAAC,IAAoC,EAAE,EAAE;gBAC7D,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,mBAAmB,EAAE,CAAC,IAAmC,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC;SACjG,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,iBAAiB,GAA6B,CACzD,OAAqB,EACrB,UAAuC,EACvC,EAAE;IACF,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;YACvC,iBAAiB,EAAE,GAAG,EAAE;gBACtB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YACD,qBAAqB,EAAE,CAAC,IAAyC,EAAE,EAAE,CACnE,qBAAqB,CAAC,OAAO,EAAE;gBAC7B,GAAG,IAAI;gBACP,cAAc,EAAE,UAAU;aAC3B,CAAC;YACJ,mBAAmB,EAAE,GAAG,EAAE,CACxB,mBAAmB,CAAC,OAAO,EAAE;gBAC3B,cAAc,EAAE,UAAU;aAC3B,CAAC;YACJ,uBAAuB,EAAE,GAAG,EAAE,CAC5B,uBAAuB,CAAC,OAAO,EAAE;gBAC/B,cAAc,EAAE,UAAU;aAC3B,CAAC;SACL,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC"}
+{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../../../core/modules/decrypt/mock.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9D,gFAAgF;AAEhF,MAAM,gCAAgC,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAE1E,gFAAgF;AAEhF,SAAS,uBAAuB,CAAC,SAAmB,EAAE,gBAAmC;IACvF,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7C,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAqB,EACrB,UAA2C;IAE3C,MAAM,uBAAuB,GAAG,OAAO,CAAC,QAAmC,CAAC;IAC5E,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IAE9C,MAAM,mBAAmB,GAAG,UAAU,CAAC,cAAyB,CAAC,CAAC;IAClE,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAErG,MAAM,QAAQ,GAAiC,WAAW,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,WAAW,GAAmC,SAAS,CAAC,MAAM,CAAC,CAAC;IAEtE,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CACb,iDAAiD,cAAc,cAAc,CAAC,MAAM,KAAK,CAAC,SAAS,IAAI,CACxG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAa,QAAQ,CAAC,cAAc,CAAC,CAAC;IACrD,oBAAoB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,cAAc,CAAC;YACpE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACzB,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,yCAAyC,gBAAgB,eAAe,CAAC,mCAAmC,CAC7G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC;QAC7C,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QACzC,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;KAC9B,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAa,CAAC;IAChD,MAAM,eAAe,GAAG,OAAO,CAAC,CAAC,CAAa,CAAC;IAE/C,MAAM,UAAU,GAAa,uBAAuB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;IAE3F,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,wCAAwC,SAAS,oDAAoD,eAAe,IAAI,CACzH,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,MAAM,kBAAkB,GAA0B,UAAU,CAAC,GAAG,CAAC,CAAC,SAAiB,EAAE,GAAW,EAAE,EAAE;QAClG,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,gBAAgB,CAAC;YACtB,KAAK,EAAE,sBAAsB,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC;YAC7D,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,gCAAgC,EAAE,0CAA0C;SAC1F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAElC,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAqB;IAChE,MAAM,uBAAuB,GAAG,OAAO,CAAC,QAAmC,CAAC;IAC5E,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;IACzE,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAgD,CAAC,CAAC;AAC3E,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAqB,EACrB,UAAyC;IAEzC,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC;IACtC,MAAM,mBAAmB,GAAG,UAAU,CAAC,cAAyB,CAAC,CAAC;IAClE,MAAM,uBAAuB,GAAG,OAAO,CAAC,QAAmC,CAAC;IAC5E,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACrG,OAAO,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAsB,EACtB,UAA6C;IAE7C,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC;IACtC,MAAM,mBAAmB,GAAG,UAAU,CAAC,cAAyB,CAAC,CAAC;IAClE,MAAM,wBAAwB,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC;IACjE,OAAO,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAsB,EACtB,UAA+C;IAE/C,MAAM,EAAE,mBAAmB,EAAE,GAAG,UAAU,CAAC;IAC3C,MAAM,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAC5D,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAgD,CAAC,CAAC;AAC3E,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,UAAU,oBAAoB,CAAC,QAAsB,EAAE,WAA2C;IACtG,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAyB,CAAC,OAAqB,EAAE,EAAE;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;YACvC,iBAAiB,EAAE,GAAG,EAAE;gBACtB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YACD,sBAAsB,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAC7D,qBAAqB,EAAE,CAAC,IAAqC,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC;YACtG,uBAAuB,EAAE,CAAC,IAAuC,EAAE,EAAE,CAAC,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC;YAC5G,yBAAyB,EAAE,CAAC,IAAyC,EAAE,EAAE,CACvE,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC;YAC1C,oBAAoB,EAAE,CAAC,IAAoC,EAAE,EAAE;gBAC7D,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,mBAAmB,EAAE,CAAC,IAAmC,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC;SACjG,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,iBAAiB,GAA6B,CACzD,OAAqB,EACrB,UAAuC,EACvC,EAAE;IACF,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;YACvC,iBAAiB,EAAE,GAAG,EAAE;gBACtB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YACD,qBAAqB,EAAE,CAAC,IAAyC,EAAE,EAAE,CACnE,qBAAqB,CAAC,OAAO,EAAE;gBAC7B,GAAG,IAAI;gBACP,cAAc,EAAE,UAAU;aAC3B,CAAC;YACJ,mBAAmB,EAAE,GAAG,EAAE,CACxB,mBAAmB,CAAC,OAAO,EAAE;gBAC3B,cAAc,EAAE,UAAU;aAC3B,CAAC;YACJ,uBAAuB,EAAE,GAAG,EAAE,CAC5B,uBAAuB,CAAC,OAAO,EAAE;gBAC/B,cAAc,EAAE,UAAU;aAC3B,CAAC;SACL,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC"}