@fhevm/sdk 1.0.0-alpha.2 → 1.0.0-alpha.3

package/_types/core/actions/host/getUserDecryptionDelegationExpirationDate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDecryptionDelegationExpirationDate.d.ts","sourceRoot":"","sources":["../../../../core/actions/host/getUserDecryptionDelegationExpirationDate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAKlF,MAAM,MAAM,mDAAmD,GAAG;IAChE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,mDAAmD,GAAG,YAAY,CAAC;AAE/E,wBAAsB,yCAAyC,CAC7D,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,mDAAmD,GAC9D,OAAO,CAAC,mDAAmD,CAAC,CAgB9D"}
+{"version":3,"file":"getUserDecryptionDelegationExpirationDate.d.ts","sourceRoot":"","sources":["../../../../core/actions/host/getUserDecryptionDelegationExpirationDate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAM9D,MAAM,MAAM,mDAAmD,GAAG;IAChE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,mDAAmD,GAAG,YAAY,CAAC;AAI/E,wBAAsB,yCAAyC,CAC7D,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,mDAAmD,GAC9D,OAAO,CAAC,mDAAmD,CAAC,CAc9D"}

package/_types/core/host-contracts/checkDelegation.d.ts

@@ -0,0 +1,22 @@
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { Handle } from '../types/encryptedTypes-p.js';
+import type { ChecksummedAddress } from '../types/primitives.js';
+type Context = {
+    readonly runtime: FhevmRuntime;
+    readonly client: NonNullable<object>;
+    readonly options: {
+        readonly batchRpcCalls: boolean;
+    };
+};
+type Parameters = {
+    readonly address: ChecksummedAddress;
+    readonly delegator: ChecksummedAddress;
+    readonly delegate: ChecksummedAddress;
+    readonly handleContractPairs: ReadonlyArray<{
+        readonly handle: Handle;
+        readonly contractAddress: ChecksummedAddress;
+    }>;
+};
+export declare function checkDelegation(context: Context, parameters: Parameters): Promise<void>;
+export {};
+//# sourceMappingURL=checkDelegation.d.ts.map

package/_types/core/host-contracts/checkDelegation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkDelegation.d.ts","sourceRoot":"","sources":["../../../core/host-contracts/checkDelegation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAOjE,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,aAAa,CAAC;QAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;KAC9C,CAAC,CAAC;CACJ,CAAC;AAIF,wBAAsB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAsF7F"}

package/_types/core/host-contracts/getUserDecryptionDelegationExpirationDate.d.ts

@@ -0,0 +1,19 @@
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { ChecksummedAddress, Uint64BigInt } from '../types/primitives.js';
+type Context = {
+    readonly runtime: FhevmRuntime;
+    readonly client: NonNullable<object>;
+    readonly options: {
+        readonly batchRpcCalls: boolean;
+    };
+};
+type Parameters = {
+    readonly address: ChecksummedAddress;
+    readonly delegator: ChecksummedAddress;
+    readonly delegate: ChecksummedAddress;
+    readonly contractAddress: ChecksummedAddress;
+};
+type ReturnType = Uint64BigInt;
+export declare function getUserDecryptionDelegationExpirationDate(context: Context, parameters: Parameters): Promise<ReturnType>;
+export {};
+//# sourceMappingURL=getUserDecryptionDelegationExpirationDate.d.ts.map

package/_types/core/host-contracts/getUserDecryptionDelegationExpirationDate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserDecryptionDelegationExpirationDate.d.ts","sourceRoot":"","sources":["../../../core/host-contracts/getUserDecryptionDelegationExpirationDate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAO/E,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;CAC9C,CAAC;AAEF,KAAK,UAAU,GAAG,YAAY,CAAC;AAI/B,wBAAsB,yCAAyC,CAC7D,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,CAAC,CAgBrB"}

package/_types/core/host-contracts/isHandleDelegatedForUserDecryption-p.d.ts

@@ -0,0 +1,20 @@
+import type { ChecksummedAddress } from '../types/primitives.js';
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { HandleContractPair } from '../types/other-p.js';
+type Context = {
+    readonly runtime: FhevmRuntime;
+    readonly client: NonNullable<object>;
+    readonly options: {
+        readonly batchRpcCalls: boolean;
+    };
+};
+type Parameters = {
+    readonly address: ChecksummedAddress;
+    readonly delegate: ChecksummedAddress;
+    readonly delegator: ChecksummedAddress;
+    readonly pairs: readonly HandleContractPair[];
+};
+type ReturnType = boolean[];
+export declare function isHandleDelegatedForUserDecryption(context: Context, parameters: Parameters): Promise<ReturnType>;
+export {};
+//# sourceMappingURL=isHandleDelegatedForUserDecryption-p.d.ts.map

package/_types/core/host-contracts/isHandleDelegatedForUserDecryption-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isHandleDelegatedForUserDecryption-p.d.ts","sourceRoot":"","sources":["../../../core/host-contracts/isHandleDelegatedForUserDecryption-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAO9D,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC/C,CAAC;AAEF,KAAK,UAAU,GAAG,OAAO,EAAE,CAAC;AAI5B,wBAAsB,kCAAkC,CACtD,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,CAAC,CAiBrB"}

package/_types/core/kms/fetchKmsSignedcryptedShares-p.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetchKmsSignedcryptedShares-p.d.ts","sourceRoot":"","sources":["../../../core/kms/fetchKmsSignedcryptedShares-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,KAAK,EAAE,kBAAkB,EAAgB,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,kCAAkC,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACzG,OAAO,KAAK,EAAE,+BAA+B,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AACtH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAyB3D,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GACX;IACE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;KAC9C,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;CAC1D,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;KAC9C,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,+BAA+B,CAAC;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,kCAAkC,GAAG,SAAS,CAAC;CACnE,CAAC;AAEN,KAAK,UAAU,GAAG,oBAAoB,CAAC;AAUvC,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAsI/G"}
+{"version":3,"file":"fetchKmsSignedcryptedShares-p.d.ts","sourceRoot":"","sources":["../../../core/kms/fetchKmsSignedcryptedShares-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,KAAK,EAAE,kBAAkB,EAAgB,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,kCAAkC,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACzG,OAAO,KAAK,EAAE,+BAA+B,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AACtH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AA0B3D,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GACX;IACE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;KAC9C,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;CAC1D,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;KAC9C,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,+BAA+B,CAAC;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,kCAAkC,GAAG,SAAS,CAAC;CACnE,CAAC;AAEN,KAAK,UAAU,GAAG,oBAAoB,CAAC;AAUvC,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CA+I/G"}

package/_types/core/types/index.d.ts

@@ -1,3 +1,4 @@
 export type { TypedValue } from './primitives.js';
 export type { EncryptedValue, EncryptedValueLike } from './encryptedTypes.js';
+export type { KmsDecryptEip712Like } from './kms.js';
 //# sourceMappingURL=index.d.ts.map

package/_types/core/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/types/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/types/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC"}

package/_types/core/types/kms.d.ts

@@ -154,6 +154,27 @@ export type KmsPublicDecryptEip712Message = Readonly<{
     decryptedResult: BytesHex;
     extraData: BytesHex;
 }>;
+export type KmsDecryptEip712Like = {
+    readonly domain: {
+        readonly name: string;
+        readonly version: string;
+        readonly chainId: number | bigint;
+        readonly verifyingContract: string;
+    };
+    readonly primaryType?: string | undefined;
+    readonly types: Record<string, ReadonlyArray<{
+        readonly name: string;
+        readonly type: string;
+    }>>;
+    readonly message: {
+        readonly publicKey: string | Uint8Array;
+        readonly contractAddresses: string[];
+        readonly startTimestamp: number;
+        readonly durationDays: number;
+        readonly extraData: string | Uint8Array;
+        readonly delegatorAddress?: string | undefined;
+    };
+};
 export type KmsUserDecryptEip712 = Prettify<{
     readonly domain: KmsEip712Domain;
     readonly types: KmsUserDecryptEip712Types;

package/_types/core/types/kms.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kms.d.ts","sourceRoot":"","sources":["../../../core/types/kms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3C,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,OAAO,MAAM,CAAC;AAE7C,MAAM,MAAM,GAAG,GAAG;IAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAQjD,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,CAAC,aAAa,CAAC,GAAG;IACtE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC;IACtC,QAAQ,CAAC,kCAAkC,EAAE,kBAAkB,CAAC;CACjE,CAAC;AAIF,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,GAAG,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,iBAAiB,EAAE,kBAAkB,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QAClD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QACrD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QACtD;YAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;KACjE,CAAC;IAEF,QAAQ,CAAC,8BAA8B,EAAE,SAAS;QAChD;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;QACtD;YAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;SAAE;QAClE;YAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QAC7D;YAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QAC3D;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;KACvD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QAClD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QACrD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QACtD;YAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;KACjE,CAAC;IAEF,QAAQ,CAAC,uCAAuC,EAAE,SAAS;QACzD;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;QACtD;YAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;SAAE;QAClE;YAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QAC/D;YAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QAC7D;YAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QAC3D;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;KACvD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QAClD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QACrD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QACtD;YAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;KACjE,CAAC;IACF,QAAQ,CAAC,yBAAyB,EAAE,SAAS;QAC3C;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;SAAE;QAC1D;YAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;QAC5D;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;KACvD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IACjD,SAAS,EAAE,QAAQ,CAAC;IACpB,iBAAiB,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACjD,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,QAAQ,CAAC;CACrB,CAAC,CAAC;AAEH,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CACzD,2BAA2B,GAAG;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;CAC/C,CACF,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IACnD,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC,eAAe,EAAE,QAAQ,CAAC;IAC1B,SAAS,EAAE,QAAQ,CAAC;CACrB,CAAC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,gCAAgC,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;CAC/C,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,yCAAyC,CAAC;IAChE,QAAQ,CAAC,OAAO,EAAE,oCAAoC,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;CACjD,CAAC,CAAC;AAQH,MAAM,CAAC,OAAO,CAAC,MAAM,yBAAyB,EAAE,OAAO,MAAM,CAAC;AAC9D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,CAAC,yBAAyB,CAAC,EAAE,KAAK,CAAC;CAC7C"}
+{"version":3,"file":"kms.d.ts","sourceRoot":"","sources":["../../../core/types/kms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3C,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,OAAO,MAAM,CAAC;AAE7C,MAAM,MAAM,GAAG,GAAG;IAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAQjD,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,CAAC,aAAa,CAAC,GAAG;IACtE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC;IACtC,QAAQ,CAAC,kCAAkC,EAAE,kBAAkB,CAAC;CACjE,CAAC;AAIF,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,GAAG,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,iBAAiB,EAAE,kBAAkB,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QAClD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QACrD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QACtD;YAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;KACjE,CAAC;IAEF,QAAQ,CAAC,8BAA8B,EAAE,SAAS;QAChD;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;QACtD;YAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;SAAE;QAClE;YAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QAC7D;YAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QAC3D;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;KACvD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QAClD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QACrD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QACtD;YAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;KACjE,CAAC;IAEF,QAAQ,CAAC,uCAAuC,EAAE,SAAS;QACzD;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;QACtD;YAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;SAAE;QAClE;YAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QAC/D;YAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QAC7D;YAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QAC3D;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;KACvD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QAClD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;SAAE;QACrD;YAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;QACtD;YAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;SAAE;KACjE,CAAC;IACF,QAAQ,CAAC,yBAAyB,EAAE,SAAS;QAC3C;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;SAAE;QAC1D;YAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;QAC5D;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;SAAE;KACvD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IACjD,SAAS,EAAE,QAAQ,CAAC;IACpB,iBAAiB,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACjD,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,QAAQ,CAAC;CACrB,CAAC,CAAC;AAEH,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CACzD,2BAA2B,GAAG;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;CAC/C,CACF,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IACnD,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC,eAAe,EAAE,QAAQ,CAAC;IAC1B,SAAS,EAAE,QAAQ,CAAC;CACrB,CAAC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;QAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,CAAC;IACF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAChG,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;QACxC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;QACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;QACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAChD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,gCAAgC,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;CAC/C,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,yCAAyC,CAAC;IAChE,QAAQ,CAAC,OAAO,EAAE,oCAAoC,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;CACjD,CAAC,CAAC;AAQH,MAAM,CAAC,OAAO,CAAC,MAAM,yBAAyB,EAAE,OAAO,MAAM,CAAC;AAC9D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,CAAC,yBAAyB,CAAC,EAAE,KAAK,CAAC;CAC7C"}

package/core/_version.ts

@@ -1,3 +1,3 @@
 // This file is auto-generated
-export const version: string = '1.0.0-alpha.2';
+export const version: string = '1.0.0-alpha.3';
 export const sdkName: string = '@fhevm/sdk';

package/core/actions/chain/parseSignedDecryptionPermit.ts

@@ -2,14 +2,18 @@ import type { Fhevm } from '../../types/coreFhevmClient.js';
 import type { FhevmChain } from '../../types/fhevmChain.js';
 import type { SignedDecryptionPermit } from '../../types/signedDecryptionPermit.js';
 import type { TransportKeypair } from '../../kms/TransportKeypair-p.js';
-import type { SerializeSignedDecryptionPermitReturnType } from './serializeSignedDecryptionPermit.js';
+import type { KmsDecryptEip712Like } from '../../types/kms.js';
 import { parseSignedDecryptionPermit as parseSignedDecryptionPermit_ } from '../../kms/SignedDecryptionPermit-p.js';
 
 ////////////////////////////////////////////////////////////////////////////////
 
 export type ParseSignedDecryptionPermitParameters = {
   /** The serialized permit — a previously parsed permit object. */
-  readonly serializedPermit: SerializeSignedDecryptionPermitReturnType;
+  readonly serializedPermit: {
+    readonly eip712: KmsDecryptEip712Like;
+    readonly signature: string;
+    readonly signerAddress: string;
+  };
   /** The transport keypair that was used when signing the permit. */
   readonly transportKeypair: TransportKeypair;
 };

package/core/actions/host/getUserDecryptionDelegationExpirationDate.ts

@@ -1,32 +1,36 @@
 import type { Fhevm } from '../../types/coreFhevmClient.js';
-import type { ChecksummedAddress, Uint64BigInt } from '../../types/primitives.js';
-import { isUint64 } from '../../base/uint.js';
-import { getUserDecryptionDelegationExpirationDateAbi } from '../../host-contracts/abi-fragments/fragments.js';
-import { getTrustedClient } from '../../runtime/CoreFhevm-p.js';
+import type { Uint64BigInt } from '../../types/primitives.js';
+import { addressToChecksummedAddress, assertIsAddress } from '../../base/address.js';
+import { getUserDecryptionDelegationExpirationDate as getUserDecryptionDelegationExpirationDate_ } from '../../host-contracts/getUserDecryptionDelegationExpirationDate.js';
+
+////////////////////////////////////////////////////////////////////////////////
 
 export type GetUserDecryptionDelegationExpirationDateParameters = {
-  readonly address: ChecksummedAddress;
+  readonly address: string;
+  readonly delegator: string;
+  readonly delegate: string;
+  readonly contractAddress: string;
 };
 
 export type GetUserDecryptionDelegationExpirationDateReturnType = Uint64BigInt;
 
+////////////////////////////////////////////////////////////////////////////////
+
 export async function getUserDecryptionDelegationExpirationDate(
   fhevm: Fhevm,
   parameters: GetUserDecryptionDelegationExpirationDateParameters,
 ): Promise<GetUserDecryptionDelegationExpirationDateReturnType> {
-  const trustedClient = getTrustedClient(fhevm);
-  const address = parameters.address;
+  const { address, delegate, delegator, contractAddress } = parameters;
 
-  const res = await fhevm.runtime.ethereum.readContract(trustedClient, {
-    address: address,
-    abi: getUserDecryptionDelegationExpirationDateAbi,
-    args: [],
-    functionName: getUserDecryptionDelegationExpirationDateAbi[0].name,
-  });
+  assertIsAddress(address, {});
+  assertIsAddress(delegate, {});
+  assertIsAddress(delegator, {});
+  assertIsAddress(contractAddress, {});
 
-  if (!isUint64(res)) {
-    throw new Error(`Invalid expiration date.`);
-  }
-
-  return BigInt(res) as Uint64BigInt;
+  return getUserDecryptionDelegationExpirationDate_(fhevm, {
+    address: addressToChecksummedAddress(address),
+    delegate: addressToChecksummedAddress(delegate),
+    delegator: addressToChecksummedAddress(delegator),
+    contractAddress: addressToChecksummedAddress(contractAddress),
+  });
 }

package/core/host-contracts/checkDelegation.ts

@@ -0,0 +1,114 @@
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { Handle } from '../types/encryptedTypes-p.js';
+import type { ChecksummedAddress } from '../types/primitives.js';
+import type { HandleContractPair } from '../types/other-p.js';
+import { AclUserDecryptionError } from '../errors/AclError.js';
+import { isHandleDelegatedForUserDecryption } from './isHandleDelegatedForUserDecryption-p.js';
+
+////////////////////////////////////////////////////////////////////////////////
+
+type Context = {
+  readonly runtime: FhevmRuntime;
+  readonly client: NonNullable<object>;
+  readonly options: { readonly batchRpcCalls: boolean };
+};
+
+type Parameters = {
+  readonly address: ChecksummedAddress;
+  readonly delegator: ChecksummedAddress;
+  readonly delegate: ChecksummedAddress;
+  readonly handleContractPairs: ReadonlyArray<{
+    readonly handle: Handle;
+    readonly contractAddress: ChecksummedAddress;
+  }>;
+};
+
+////////////////////////////////////////////////////////////////////////////////
+
+export async function checkDelegation(context: Context, parameters: Parameters): Promise<void> {
+  const { address, delegator, delegate, handleContractPairs } = parameters;
+
+  if (handleContractPairs.length === 0) {
+    throw new Error('checkDelegation requires at least one (handle, contractAddress) pair');
+  }
+
+  // runtime defensive check, use lowercase
+  function getKey(addr: string, handleBytes32Hex: string): string {
+    return `${addr}:${handleBytes32Hex}`.toLowerCase();
+  }
+
+  // 1. Verify rule: delegator !== delegate
+  if (delegator.toLowerCase() === delegate.toLowerCase()) {
+    throw new AclUserDecryptionError({
+      contractAddress: address,
+      message: `delegator ${delegator} cannot be equal to delegate`,
+    });
+  }
+
+  // 2. Verify rules: delegator !== contractAddress & delegate !== contractAddress
+  for (const pair of handleContractPairs) {
+    if (delegator.toLowerCase() === pair.contractAddress.toLowerCase()) {
+      throw new AclUserDecryptionError({
+        contractAddress: address,
+        message: `delegator ${delegator} cannot be equal to contractAddress`,
+      });
+    }
+    if (delegate.toLowerCase() === pair.contractAddress.toLowerCase()) {
+      throw new AclUserDecryptionError({
+        contractAddress: address,
+        message: `delegate ${delegate} cannot be equal to contractAddress`,
+      });
+    }
+  }
+
+  // 3. Collect all unique (contractAddress, handle) pairs to avoid duplicate RPC calls
+  const allChecks: HandleContractPair[] = [];
+  const seenKeys = new Set<string>();
+
+  for (const pair of handleContractPairs) {
+    // runtime defensive check, use lowercase
+    const key = getKey(pair.contractAddress, pair.handle.bytes32Hex);
+    if (!seenKeys.has(key)) {
+      seenKeys.add(key);
+      allChecks.push({
+        handle: pair.handle,
+        contractAddress: pair.contractAddress,
+      });
+    }
+  }
+
+  if (allChecks.length === 0) {
+    throw new Error('checkDelegation: no delegation checks to perform (unexpected empty dedup result)');
+  }
+
+  // 4. Single batched RPC call for all unique checks
+  const allResults = await isHandleDelegatedForUserDecryption(context, {
+    address,
+    delegator,
+    delegate,
+    pairs: allChecks,
+  });
+
+  // 5. Build result map for lookup
+  const resultMap = new Map<string, boolean>();
+  for (const [i, check] of allChecks.entries()) {
+    const result = allResults[i];
+    // tsc: noUncheckedIndexedAccess
+    if (result === undefined) {
+      throw new Error(`Missing result at index ${i}`);
+    }
+    const key = getKey(check.contractAddress, check.handle.bytes32Hex);
+    resultMap.set(key, result);
+  }
+
+  // 6. Verify delegation for each requested pair
+  for (const pair of handleContractPairs) {
+    const key = getKey(pair.contractAddress, pair.handle.bytes32Hex);
+    if (resultMap.get(key) !== true) {
+      throw new AclUserDecryptionError({
+        contractAddress: address,
+        message: `Delegate ${delegate} is not delegated by ${delegator} to user decrypt handle ${pair.handle.bytes32Hex} on contract ${pair.contractAddress}!`,
+      });
+    }
+  }
+}

package/core/host-contracts/getUserDecryptionDelegationExpirationDate.ts

@@ -0,0 +1,45 @@
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { ChecksummedAddress, Uint64BigInt } from '../types/primitives.js';
+import { isUint64 } from '../base/uint.js';
+import { getUserDecryptionDelegationExpirationDateAbi } from '../host-contracts/abi-fragments/fragments.js';
+import { getTrustedClient } from '../runtime/CoreFhevm-p.js';
+
+////////////////////////////////////////////////////////////////////////////////
+
+type Context = {
+  readonly runtime: FhevmRuntime;
+  readonly client: NonNullable<object>;
+  readonly options: { readonly batchRpcCalls: boolean };
+};
+
+type Parameters = {
+  readonly address: ChecksummedAddress;
+  readonly delegator: ChecksummedAddress;
+  readonly delegate: ChecksummedAddress;
+  readonly contractAddress: ChecksummedAddress;
+};
+
+type ReturnType = Uint64BigInt;
+
+////////////////////////////////////////////////////////////////////////////////
+
+export async function getUserDecryptionDelegationExpirationDate(
+  context: Context,
+  parameters: Parameters,
+): Promise<ReturnType> {
+  const trustedClient = getTrustedClient(context);
+  const address = parameters.address;
+
+  const res = await context.runtime.ethereum.readContract(trustedClient, {
+    address: address,
+    abi: getUserDecryptionDelegationExpirationDateAbi,
+    args: [parameters.delegator, parameters.delegate, parameters.contractAddress],
+    functionName: getUserDecryptionDelegationExpirationDateAbi[0].name,
+  });
+
+  if (!isUint64(res)) {
+    throw new Error(`Invalid expiration date.`);
+  }
+
+  return BigInt(res) as Uint64BigInt;
+}

package/core/host-contracts/isHandleDelegatedForUserDecryption-p.ts

@@ -0,0 +1,77 @@
+import type { ChecksummedAddress } from '../types/primitives.js';
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { Handle } from '../types/encryptedTypes-p.js';
+import type { HandleContractPair } from '../types/other-p.js';
+import { isHandleDelegatedForUserDecryptionAbi } from './abi-fragments/fragments.js';
+import { getTrustedClient } from '../runtime/CoreFhevm-p.js';
+import { executeWithBatching } from '../base/promise.js';
+
+////////////////////////////////////////////////////////////////////////////////
+
+type Context = {
+  readonly runtime: FhevmRuntime;
+  readonly client: NonNullable<object>;
+  readonly options: { readonly batchRpcCalls: boolean };
+};
+
+type Parameters = {
+  readonly address: ChecksummedAddress;
+  readonly delegate: ChecksummedAddress;
+  readonly delegator: ChecksummedAddress;
+  readonly pairs: readonly HandleContractPair[];
+};
+
+type ReturnType = boolean[];
+
+////////////////////////////////////////////////////////////////////////////////
+
+export async function isHandleDelegatedForUserDecryption(
+  context: Context,
+  parameters: Parameters,
+): Promise<ReturnType> {
+  const { address, delegate, delegator, pairs } = parameters;
+
+  const rpcCalls = pairs.map(
+    (pair) => () =>
+      _isHandleDelegatedForUserDecryption(context, {
+        address,
+        delegate,
+        delegator,
+        handle: pair.handle,
+        contractAddress: pair.contractAddress,
+      }),
+  );
+
+  const results = await executeWithBatching(rpcCalls, context.options.batchRpcCalls);
+
+  return results;
+}
+
+////////////////////////////////////////////////////////////////////////////////
+
+async function _isHandleDelegatedForUserDecryption(
+  context: Context,
+  parameters: {
+    readonly address: ChecksummedAddress;
+    readonly delegator: ChecksummedAddress;
+    readonly delegate: ChecksummedAddress;
+    readonly contractAddress: ChecksummedAddress;
+    readonly handle: Handle;
+  },
+): Promise<boolean> {
+  const { address, delegator, delegate, contractAddress, handle } = parameters;
+  const trustedClient = getTrustedClient(context);
+
+  const res = await context.runtime.ethereum.readContract(trustedClient, {
+    address: address,
+    abi: isHandleDelegatedForUserDecryptionAbi,
+    args: [delegator, delegate, contractAddress, handle.bytes32Hex],
+    functionName: isHandleDelegatedForUserDecryptionAbi[0].name,
+  });
+
+  if (typeof res !== 'boolean') {
+    throw new Error(`Invalid isHandleDelegatedForUserDecryptionAbi result.`);
+  }
+
+  return res;
+}

package/core/host-contracts/persistAllowed.ts

@@ -61,7 +61,7 @@ async function _persistAllowed(
   });
 
   if (typeof res !== 'boolean') {
-    throw new Error(`Invalid isAllowedForDecryption result.`);
+    throw new Error(`Invalid persistAllowed result.`);
   }
 
   return res;

package/core/kms/fetchKmsSignedcryptedShares-p.ts

@@ -15,6 +15,7 @@ import { assertKmsDecryptionBitLimit } from './utils.js';
 import { checkPersistAllowed } from '../host-contracts/checkPersistAllowed.js';
 import { assertExtraDataMatchesKmsSingersContext } from '../host-contracts/KmsSignersContext-p.js';
 import { createKmsEip712Domain } from './createKmsEip712Domain.js';
+import { checkDelegation } from '../host-contracts/checkDelegation.js';
 
 /*
     See: in KMS (eip712Domain)
@@ -118,11 +119,20 @@ export async function fetchKmsSignedcryptedShares(context: Context, parameters:
   signedPermit.assertNotExpired();
 
   // 7. Check: ACL permissions (user is signer or delegatorAddress)
-  await checkPersistAllowed(context, {
-    address: context.chain.fhevm.contracts.acl.address as ChecksummedAddress,
-    userAddress: encryptedDataOwnerAddress,
-    handleContractPairs,
-  });
+  if (signedPermit.isDelegated) {
+    await checkDelegation(context, {
+      address: context.chain.fhevm.contracts.acl.address as ChecksummedAddress,
+      delegate: signerAddress,
+      delegator: encryptedDataOwnerAddress,
+      handleContractPairs,
+    });
+  } else {
+    await checkPersistAllowed(context, {
+      address: context.chain.fhevm.contracts.acl.address as ChecksummedAddress,
+      userAddress: encryptedDataOwnerAddress,
+      handleContractPairs,
+    });
+  }
 
   // 8. Verify the EIP712 signature
   // Not required because a signedPermit is guaranteed to be verified.

package/core/types/index.ts

@@ -1,2 +1,3 @@
 export type { TypedValue } from './primitives.js';
 export type { EncryptedValue, EncryptedValueLike } from './encryptedTypes.js';
+export type { KmsDecryptEip712Like } from './kms.js';

package/core/types/kms.ts

@@ -99,6 +99,25 @@ export type KmsPublicDecryptEip712Message = Readonly<{
   extraData: BytesHex;
 }>;
 
+export type KmsDecryptEip712Like = {
+  readonly domain: {
+    readonly name: string;
+    readonly version: string;
+    readonly chainId: number | bigint;
+    readonly verifyingContract: string;
+  };
+  readonly primaryType?: string | undefined;
+  readonly types: Record<string, ReadonlyArray<{ readonly name: string; readonly type: string }>>;
+  readonly message: {
+    readonly publicKey: string | Uint8Array;
+    readonly contractAddresses: string[];
+    readonly startTimestamp: number;
+    readonly durationDays: number;
+    readonly extraData: string | Uint8Array;
+    readonly delegatorAddress?: string | undefined;
+  };
+};
+
 export type KmsUserDecryptEip712 = Prettify<{
   readonly domain: KmsEip712Domain;
   readonly types: KmsUserDecryptEip712Types;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@fhevm/sdk",
   "description": "TypeScript Interface for FHEVM",
-  "version": "1.0.0-alpha.2",
+  "version": "1.0.0-alpha.3",
   "type": "module",
   "main": "./_cjs/index.js",
   "module": "./_esm/index.js",