@fhevm/sdk 1.1.0-alpha.5 → 1.1.0-alpha.7

package/_esm/core/kms/{createKmsUserDecryptEip712.js → createKmsUserDecryptEip712V1.js}

@@ -5,12 +5,13 @@ import { assertRecordNonNullableProperty } from '../base/record.js';
 import { assertRecordStringProperty, ensure0x } from '../base/string.js';
 import { assertIsUint64, assertIsUintNumber } from '../base/uint.js';
 import { assertIsKmsExtraData } from './kmsExtraData.js';
-import { kmsUserDecryptEip712Types } from './kmsUserDecryptEip712Types.js';
+import { kmsUserDecryptEip712V1Types } from './kmsUserDecryptEip712V1Types.js';
+import { kmsDelegatedUserDecryptEip712V1Types } from './kmsDelegatedUserDecryptEip712V1Types.js';
 import { isDeepEqual } from '../base/object.js';
 ////////////////////////////////////////////////////////////////////////////////
-// createKmsUserDecryptEip712
+// createKmsUserDecryptEip712V1
 ////////////////////////////////////////////////////////////////////////////////
-export function createKmsUserDecryptEip712(parameters) {
+export function createKmsUserDecryptEip712V1(parameters) {
     const { verifyingContractAddressDecryption, chainId, publicKey, contractAddresses, startTimestamp, durationDays, extraData, } = parameters;
     const publicKeyBytesHex = _verifyPublicKeyArg(publicKey);
     assertIsUint64(chainId, {});
@@ -28,7 +29,7 @@ export function createKmsUserDecryptEip712(parameters) {
     });
     const eip712 = {
         domain,
-        types: kmsUserDecryptEip712Types,
+        types: kmsUserDecryptEip712V1Types,
         primaryType,
         message: {
             publicKey: publicKeyBytesHex,
@@ -48,20 +49,23 @@ export function createKmsUserDecryptEip712(parameters) {
     return eip712;
 }
 ////////////////////////////////////////////////////////////////////////////////
-export function assertIsKmsUserDecryptEip712(value, name, options) {
-    _assertIsKmsUserDecryptEip712Base(value, name, 'UserDecryptRequestVerification', options);
+export function assertIsKmsUserDecryptEip712V1(value, name, options) {
+    _assertIsKmsUserDecryptEip712V1Base(value, name, 'UserDecryptRequestVerification', options);
 }
 /**
  * Validates the common structure shared by both
- * {@link KmsUserDecryptEip712} and {@link KmsDelegatedUserDecryptEIP712}:
+ * {@link KmsUserDecryptEip712V1} and {@link KmsDelegatedUserDecryptEip712V1}:
  * domain, types, primaryType, and base message fields.
  */
-export function _assertIsKmsUserDecryptEip712Base(value, name, primaryType, options) {
+export function _assertIsKmsUserDecryptEip712V1Base(value, name, primaryType, options) {
     assertRecordNonNullableProperty(value, 'domain', name, options);
     assertIsKmsEip712Domain(value.domain, `${name}.domain`, options);
     assertRecordNonNullableProperty(value, 'types', name, options);
-    if (!isDeepEqual(value.types, kmsUserDecryptEip712Types)) {
-        throw new Error('Unexpected KmsUserDecryptEip712Types');
+    const expectedTypes = primaryType === 'DelegatedUserDecryptRequestVerification'
+        ? kmsDelegatedUserDecryptEip712V1Types
+        : kmsUserDecryptEip712V1Types;
+    if (!isDeepEqual(value.types, expectedTypes)) {
+        throw new Error('Unexpected KmsUserDecryptEip712V1Types');
     }
     assertRecordStringProperty(value, 'primaryType', name, {
         expectedValue: primaryType,
@@ -69,13 +73,13 @@ export function _assertIsKmsUserDecryptEip712Base(value, name, primaryType, opti
     });
     assertRecordNonNullableProperty(value, 'message', name, options);
     const msg = value.message;
-    _assertIsKmsUserDecryptEip712Message(msg, `${name}.message`, options);
+    _assertIsKmsUserDecryptEip712V1Message(msg, `${name}.message`, options);
 }
 /**
  * Validates the common message fields shared by both
- * {@link KmsUserDecryptEip712} and {@link KmsDelegatedUserDecryptEIP712}.
+ * {@link KmsUserDecryptEip712V1} and {@link KmsDelegatedUserDecryptEip712V1}.
  */
-function _assertIsKmsUserDecryptEip712Message(msg, msgName, options) {
+function _assertIsKmsUserDecryptEip712V1Message(msg, msgName, options) {
     assertRecordBytesHexProperty(msg, 'publicKey', msgName, options);
     assertRecordChecksummedAddressArrayProperty(msg, 'contractAddresses', msgName, options);
     assertRecordStringProperty(msg, 'startTimestamp', msgName, options);
@@ -101,4 +105,4 @@ function _verifyPublicKeyArg(value) {
     }
     return publicKeyBytesHex;
 }
-//# sourceMappingURL=createKmsUserDecryptEip712.js.map
+//# sourceMappingURL=createKmsUserDecryptEip712V1.js.map

package/_esm/core/kms/createKmsUserDecryptEip712V1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsUserDecryptEip712V1.js","sourceRoot":"","sources":["../../../core/kms/createKmsUserDecryptEip712V1.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,2BAA2B,EAC3B,eAAe,EACf,oBAAoB,EACpB,2CAA2C,GAC5C,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC/G,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAchD,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAEhF,MAAM,UAAU,4BAA4B,CAC1C,UAAkD;IAElD,MAAM,EACJ,kCAAkC,EAClC,OAAO,EACP,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,SAAS,GACV,GAAG,UAAU,CAAC;IACf,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEzD,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5B,eAAe,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IACxD,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC5C,kBAAkB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACvC,kBAAkB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACrC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAChC,oBAAoB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEpC,MAAM,4BAA4B,GAAG,iBAAiB,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAExF,MAAM,WAAW,GAA0C,gCAAgC,CAAC;IAE5F,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACnC,OAAO;QACP,kCAAkC;KACnC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG;QACb,MAAM;QACN,KAAK,EAAE,2BAA2B;QAClC,WAAW;QACX,OAAO,EAAE;YACP,SAAS,EAAE,iBAAiB;YAC5B,iBAAiB,EAAE,4BAA4B;YAC/C,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;YACzC,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;YACrC,SAAS;SACV;KACF,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC3D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEhD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,8BAA8B,CAC5C,KAAc,EACd,IAAY,EACZ,OAA4B;IAE5B,mCAAmC,CACjC,KAAK,EACL,IAAI,EACJ,gCAAgF,EAChF,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAc,EACd,IAAY,EACZ,WAAmB,EACnB,OAA4B;IAO5B,+BAA+B,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,uBAAuB,CAAE,KAAiC,CAAC,MAAM,EAAE,GAAG,IAAI,SAAS,EAAE,OAAO,CAAC,CAAC;IAE9F,+BAA+B,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAE/D,MAAM,aAAa,GACjB,WAAW,KAAK,yCAAyC;QACvD,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,2BAA2B,CAAC;IAElC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,0BAA0B,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;QACrD,aAAa,EAAE,WAAW;QAC1B,GAAG,OAAO;KACX,CAAC,CAAC;IAEH,+BAA+B,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,GAAG,GAAI,KAAiC,CAAC,OAAkC,CAAC;IAClF,sCAAsC,CAAC,GAAG,EAAE,GAAG,IAAI,UAAU,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,SAAS,sCAAsC,CAC7C,GAAY,EACZ,OAAe,EACf,OAA4B;IAG5B,4BAA4B,CAAC,GAAG,EAAE,WAAuC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7F,2CAA2C,CAAC,GAAG,EAAE,mBAA+C,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACpH,0BAA0B,CAAC,GAAG,EAAE,gBAA4C,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAChG,0BAA0B,CAAC,GAAG,EAAE,cAA0C,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9F,4BAA4B,CAAC,GAAG,EAAE,WAAuC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7F,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAEhF,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,iBAA2B,CAAC;IAEhC,MAAM,EAAE,GAAG,KAAK,CAAC;IAEjB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3B,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,EAAE,YAAY,UAAU,EAAE,CAAC;QACpC,iBAAiB,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/_esm/core/kms/decryptValuesFromPairs.js

@@ -1,10 +1,26 @@
 ////////////////////////////////////////////////////////////////////////////////
+import { isSemverStrictlyBefore } from '../base/semver.js';
+import { getResolvedProtocolVersion } from '../runtime/CoreFhevm-p.js';
 import { decryptKmsSigncryptedShares } from './decryptKmsSigncryptedShares-p.js';
-import { fetchKmsSigncryptedShares } from './fetchKmsSigncryptedShares-p.js';
+import { fetchKmsSigncryptedSharesV1 } from './fetchKmsSigncryptedSharesV1-p.js';
+import { fetchKmsSigncryptedSharesV2 } from './fetchKmsSigncryptedSharesV2-p.js';
 ////////////////////////////////////////////////////////////////////////////////
 export async function decryptValuesFromPairs(fhevm, parameters) {
     const { transportKeyPair: transportKeyPair } = parameters;
-    const kmsSigncryptedShares = await fetchKmsSigncryptedShares(fhevm, parameters);
+    const protocolVersion = getResolvedProtocolVersion(fhevm);
+    if (protocolVersion === undefined) {
+        throw new Error('Unable to resolve protocol version from context, ensure proper initialization of the FhevmRuntime and FhevmChain.');
+    }
+    let kmsSigncryptedShares;
+    if (isSemverStrictlyBefore(protocolVersion.version, '0.14.0')) {
+        kmsSigncryptedShares = await fetchKmsSigncryptedSharesV1(fhevm, parameters);
+    }
+    else {
+        kmsSigncryptedShares = await fetchKmsSigncryptedSharesV2(fhevm, {
+            ...parameters,
+            options: parameters.options,
+        });
+    }
     // Using the `KmsSigncryptedShares` decrypt and reconstruct clear values
     return decryptKmsSigncryptedShares(fhevm, {
         kmsSigncryptedShares,

package/_esm/core/kms/decryptValuesFromPairs.js.map

@@ -1 +1 @@
-{"version":3,"file":"decryptValuesFromPairs.js","sourceRoot":"","sources":["../../../core/kms/decryptValuesFromPairs.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAWhF,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAkC7E,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAc,EAAE,UAAsB;IACjF,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,UAAU,CAAC;IAE1D,MAAM,oBAAoB,GAAyB,MAAM,yBAAyB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAEtG,wEAAwE;IACxE,OAAO,2BAA2B,CAAC,KAAK,EAAE;QACxC,oBAAoB;QACpB,gBAAgB,EAAE,gBAAgB;KACnC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"decryptValuesFromPairs.js","sourceRoot":"","sources":["../../../core/kms/decryptValuesFromPairs.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAWhF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AA4BjF,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAc,EAAE,UAAsB;IACjF,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,UAAU,CAAC;IAE1D,MAAM,eAAe,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;IACJ,CAAC;IAED,IAAI,oBAA0C,CAAC;IAC/C,IAAI,sBAAsB,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC9D,oBAAoB,GAAG,MAAM,2BAA2B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,oBAAoB,GAAG,MAAM,2BAA2B,CAAC,KAAK,EAAE;YAC9D,GAAG,UAAU;YACb,OAAO,EAAE,UAAU,CAAC,OAAgD;SACrE,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,OAAO,2BAA2B,CAAC,KAAK,EAAE;QACxC,oBAAoB;QACpB,gBAAgB,EAAE,gBAAgB;KACnC,CAAC,CAAC;AACL,CAAC"}

package/_esm/core/kms/{fetchKmsSigncryptedShares-p.js → fetchKmsSigncryptedSharesV1-p.js}

@@ -1,7 +1,7 @@
 import { assertHandlesBelongToSameChainId } from '../handle/FhevmHandle.js';
-import { createKmsSigncryptedShares } from '../kms/KmsSigncryptedShares-p.js';
+import { createKmsSigncryptedShares } from './KmsSigncryptedShares-p.js';
 import { readKmsSignersContext } from '../host-contracts/readKmsSignersContext-p.js';
-import { assertIsSignedDecryptionPermit, assertPermitIncludesContractAddresses } from './SignedDecryptionPermit-p.js';
+import { assertIsSignedDecryptionPermit } from './SignedDecryptionPermit-p.js';
 import { assertKmsDecryptionBitLimit } from './utils.js';
 import { checkPersistAllowed } from '../host-contracts/checkPersistAllowed.js';
 import { assertExtraDataMatchesKmsSingersContext } from '../host-contracts/KmsSignersContext-p.js';
@@ -10,16 +10,29 @@ import { checkDelegation } from '../host-contracts/checkDelegation.js';
 import { resolveFhevmTkmsVersion } from '../runtime/resolveFhevmVersions-p.js';
 ////////////////////////////////////////////////////////////////////////////////
 const MAX_USER_DECRYPT_CONTRACT_ADDRESSES = 10;
+/**
+ * Asserts that every address in {@link contractAddresses} is listed in the
+ * permit's `contractAddresses` (case-insensitive comparison).
+ */
+export function assertPermitV1IncludesContractAddresses(permit, contractAddresses) {
+    const permitAddresses = permit.eip712.message.contractAddresses;
+    for (const address of contractAddresses) {
+        if (!permitAddresses.some((a) => a.toLowerCase() === address.toLowerCase())) {
+            throw Error(`contract address ${address} is not listed in the permit's contractAddresses`);
+        }
+    }
+}
 ////////////////////////////////////////////////////////////////////////////////
-// fetchKmsSigncryptedShares
+// fetchKmsSigncryptedSharesV1
 ////////////////////////////////////////////////////////////////////////////////
-export async function fetchKmsSigncryptedShares(context, parameters) {
-    const { signedPermit, options, pairs } = parameters;
+export async function fetchKmsSigncryptedSharesV1(context, parameters) {
+    const { options, pairs } = parameters;
+    const signedPermit = parameters.signedPermit;
     // This helper must support base clients, where TKMS is not mandatory
     // and tkmsVersion may not be initialized in the CoreFhevm instance yet.
     const tkmsVersion = await resolveFhevmTkmsVersion(context);
     // Check: every requested contractAddress is listed in the permit
-    assertPermitIncludesContractAddresses(signedPermit, pairs.map((p) => p.contractAddress));
+    assertPermitV1IncludesContractAddresses(signedPermit, pairs.map((p) => p.contractAddress));
     // Caller-provided options override runtime config defaults (e.g. auth)
     const relayerOptions = {
         auth: context.runtime.config.auth,
@@ -51,7 +64,7 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
     // 6. Check: Expiration date
     signedPermit.assertNotExpired();
     // 7. Check: ACL permissions (user is signer or delegatorAddress)
-    if (signedPermit.isDelegated) {
+    if (signedPermit.eip712.primaryType === 'DelegatedUserDecryptRequestVerification') {
         await checkDelegation(context, {
             aclAddress: context.chain.fhevm.contracts.acl.address,
             delegate: signerAddress,
@@ -66,7 +79,7 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
             handleContractPairs,
         });
     }
-    // 8. Verify the EIP712 signature
+    // 8. Verify the Eip712 signature
     // Not required because a signedPermit is guaranteed to be verified.
     // 9. Fetch `KmsSignersContext` on-chain (cached)
     // Reject the permit early if it was signed against a different KMS context
@@ -91,11 +104,8 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
         kmsSignersContext: requestedKmsSignersContext,
     }, { subject: 'Invalid permit' });
     // 10. Fetch `KmsSigncryptedShares` from the relayer
-    // Safe casts: the discriminated union on parameters guarantees
-    // that options type matches signedPermit type, but TS can't prove
-    // it after destructuring (nested discriminant limitation).
     let shares;
-    if (signedPermit.isDelegated) {
+    if (signedPermit.eip712.primaryType === 'DelegatedUserDecryptRequestVerification') {
         shares = await context.runtime.relayer.fetchDelegatedUserDecrypt(context, {
             payload: {
                 handleContractPairs,
@@ -137,4 +147,4 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
         shares,
     });
 }
-//# sourceMappingURL=fetchKmsSigncryptedShares-p.js.map
+//# sourceMappingURL=fetchKmsSigncryptedSharesV1-p.js.map

package/_esm/core/kms/fetchKmsSigncryptedSharesV1-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchKmsSigncryptedSharesV1-p.js","sourceRoot":"","sources":["../../../core/kms/fetchKmsSigncryptedSharesV1-p.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAmC/E,gFAAgF;AAEhF,MAAM,mCAAmC,GAAG,EAAE,CAAC;AAE/C;;;GAGG;AACH,MAAM,UAAU,uCAAuC,CACrD,MAAgC,EAChC,iBAAoC;IAEpC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAChE,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC5E,MAAM,KAAK,CAAC,oBAAoB,OAAO,kDAAkD,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAgB,EAAE,UAAsB;IACxF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IACtC,MAAM,YAAY,GAAG,UAAU,CAAC,YAAwC,CAAC;IAEzE,qEAAqE;IACrE,wEAAwE;IACxE,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAE3D,iEAAiE;IACjE,uCAAuC,CACrC,YAAY,EACZ,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CACpC,CAAC;IAEF,uEAAuE;IACvE,MAAM,cAAc,GAAG;QACrB,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;QACjC,GAAG,OAAO;KACX,CAAC;IAEF,8BAA8B,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAEjD,sGAAsG;IACtG,MAAM,EAAE,yBAAyB,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;IAE7E,0DAA0D;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,CACT,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,MAAM,uBAAuB,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC;IACrF,IAAI,uBAAuB,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,+CAA+C;IAC/C,IAAI,uBAAuB,GAAG,mCAAmC,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC,mCAAmC,mCAAmC,WAAW,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,mBAAmB,GAAG,KAAK,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEvB,mDAAmD;IACnD,gCAAgC,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAiB,CAAC,CAAC;IAEpF,4BAA4B;IAC5B,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAErC,4BAA4B;IAC5B,YAAY,CAAC,gBAAgB,EAAE,CAAC;IAEhC,iEAAiE;IACjE,IAAI,YAAY,CAAC,MAAM,CAAC,WAAW,KAAK,yCAAyC,EAAE,CAAC;QAClF,MAAM,eAAe,CAAC,OAAO,EAAE;YAC7B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;YAC3E,QAAQ,EAAE,aAAa;YACvB,SAAS,EAAE,yBAAyB;YACpC,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,mBAAmB,CAAC,OAAO,EAAE;YACjC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;YAC3E,WAAW,EAAE,yBAAyB;YACtC,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,oEAAoE;IAEpE,iDAAiD;IACjD,2EAA2E;IAC3E,wDAAwD;IACxD,EAAE;IACF,6EAA6E;IAC7E,iFAAiF;IACjF,iFAAiF;IACjF,uCAAuC;IACvC,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,0BAA0B,GAAsB,MAAM,qBAAqB,CAAC,OAAO,EAAE;QACzF,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;QAC3F,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,OAAyC;KAC/G,CAAC,CAAC;IAEH,uCAAuC,CACrC;QACE,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS;QAChD,iBAAiB,EAAE,0BAA0B;KAC9C,EACD,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAC9B,CAAC;IAEF,oDAAoD;IACpD,IAAI,MAAsC,CAAC;IAE3C,IAAI,YAAY,CAAC,MAAM,CAAC,WAAW,KAAK,yCAAyC,EAAE,CAAC;QAClF,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,OAAO,EAAE;YACxE,OAAO,EAAE;gBACP,mBAAmB;gBACnB,sBAAsB,EAAE,aAAa;gBACrC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;gBACpD,yBAAyB,EAAE,SAAS;aACrC;YACD,OAAO,EAAE,cAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE;YAC/D,OAAO,EAAE;gBACP,mBAAmB;gBACnB,sBAAsB,EAAE,aAAa;gBACrC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;gBACpD,yBAAyB,EAAE,SAAS;aACrC;YACD,OAAO,EAAE,cAA2C;SACrD,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,MAAM,cAAc,GAAiC;QACnD,iBAAiB,EAAE,0BAA0B;QAC7C,YAAY,EAAE,qBAAqB,CAAC;YAClC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YACvC,kCAAkC,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO;SAC7F,CAAC;QACF,eAAe,EAAE,SAAS;QAC1B,mBAAmB,EAAE,aAAa;QAClC,OAAO;QACP,WAAW;KACZ,CAAC;IAEF,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,MAAM,0BAA0B,CAAC,OAAO,EAAE;QAC/C,QAAQ,EAAE,cAAc;QACxB,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/_esm/core/kms/fetchKmsSigncryptedSharesV2-p.js

@@ -0,0 +1,119 @@
+import { assertHandlesBelongToSameChainId } from '../handle/FhevmHandle.js';
+import { createKmsSigncryptedShares } from './KmsSigncryptedShares-p.js';
+import { readKmsSignersContext } from '../host-contracts/readKmsSignersContext-p.js';
+import { assertIsSignedDecryptionPermit } from './SignedDecryptionPermit-p.js';
+import { assertKmsDecryptionBitLimit } from './utils.js';
+import { checkPersistAllowed } from '../host-contracts/checkPersistAllowed.js';
+import { checkDelegation } from '../host-contracts/checkDelegation.js';
+import { assertExtraDataMatchesKmsSingersContext } from '../host-contracts/KmsSignersContext-p.js';
+import { createKmsEip712Domain } from './createKmsEip712Domain.js';
+import { resolveFhevmTkmsVersion } from '../runtime/resolveFhevmVersions-p.js';
+////////////////////////////////////////////////////////////////////////////////
+// fetchKmsSigncryptedSharesV2
+////////////////////////////////////////////////////////////////////////////////
+export async function fetchKmsSigncryptedSharesV2(context, parameters) {
+    const { options, pairs } = parameters;
+    const signedPermit = parameters.signedPermit;
+    const tkmsVersion = await resolveFhevmTkmsVersion(context);
+    const relayerOptions = {
+        auth: context.runtime.config.auth,
+        ...options,
+    };
+    assertIsSignedDecryptionPermit(signedPermit, {});
+    const { signerAddress, signature } = signedPermit;
+    const userAddress = signedPermit.eip712.message.userAddress;
+    // 1. Check: At least one handle/contract pair is required
+    if (pairs.length === 0) {
+        throw Error(`encrypted value/contract pairs must not be empty, at least one encrypted value/contract pair is required`);
+    }
+    // Resolve ownerAddress for each pair: defaults to userAddress (direct-access path)
+    // when not explicitly provided by the caller.
+    const resolvedPairs = pairs.map((p) => ({
+        handle: p.handle,
+        contractAddress: p.contractAddress,
+        ownerAddress: p.ownerAddress ?? userAddress,
+    }));
+    const handles = resolvedPairs.map((p) => p.handle);
+    Object.freeze(handles);
+    // 2. Check: All handles belong to the host chainId
+    assertHandlesBelongToSameChainId(handles, BigInt(context.chain.id));
+    // 3. Check: 2048 bits limit
+    assertKmsDecryptionBitLimit(handles);
+    // 4. Check: Expiration date
+    signedPermit.assertNotExpired();
+    // 5. Check: ACL permissions — split pairs by direct vs delegated access
+    const directPairs = resolvedPairs.filter((p) => p.ownerAddress.toLowerCase() === userAddress.toLowerCase());
+    const delegatedPairs = resolvedPairs.filter((p) => p.ownerAddress.toLowerCase() !== userAddress.toLowerCase());
+    if (directPairs.length > 0) {
+        await checkPersistAllowed(context, {
+            aclAddress: context.chain.fhevm.contracts.acl.address,
+            userAddress,
+            handleContractPairs: directPairs,
+        });
+    }
+    if (delegatedPairs.length > 0) {
+        // Group delegated pairs by delegator (ownerAddress): a single batch may contain
+        // handles from multiple delegators, each requiring a separate ACL delegation check.
+        const byDelegator = new Map();
+        for (const pair of delegatedPairs) {
+            const group = byDelegator.get(pair.ownerAddress) ?? [];
+            group.push(pair);
+            byDelegator.set(pair.ownerAddress, group);
+        }
+        for (const [delegator, groupedPairs] of byDelegator) {
+            await checkDelegation(context, {
+                aclAddress: context.chain.fhevm.contracts.acl.address,
+                delegate: userAddress,
+                delegator,
+                handleContractPairs: groupedPairs,
+            });
+        }
+    }
+    // 6. Verify the Eip712 signature
+    // Not required because a signedPermit is guaranteed to be verified.
+    // 7. Fetch `KmsSignersContext` on-chain (cached)
+    // Reject the permit early if it was signed against a different KMS context.
+    //
+    // TODO: The current check is a strict byte-level comparison. A permit signed
+    // with the correct `kmsContextId` but a different `extraData` encoding format
+    // (e.g. a version change in the serialization scheme) will be rejected even
+    // though the context ID matches. Consider comparing the decoded `kmsContextId`
+    // instead of the raw `extraData` bytes.
+    const requestedKmsSignersContext = await readKmsSignersContext(context, {
+        kmsVerifierAddress: context.chain.fhevm.contracts.kmsVerifier.address,
+        protocolConfigAddress: context.chain.fhevm.contracts.protocolConfig?.address,
+    });
+    assertExtraDataMatchesKmsSingersContext({
+        extraData: signedPermit.eip712.message.extraData,
+        kmsSignersContext: requestedKmsSignersContext,
+    }, { subject: 'Invalid permit' });
+    // 8. Fetch `KmsSigncryptedShares` from the relayer (unified V2 route)
+    const shares = await context.runtime.relayer.fetchUserDecrypt(context, {
+        payload: {
+            handleContractPairs: resolvedPairs,
+            kmsDecryptEip712Message: signedPermit.eip712.message,
+            kmsDecryptEip712Signature: signature,
+        },
+        options: relayerOptions,
+    });
+    // 9. Build and verify the sealed validated `KmsSigncryptedShares` object
+    const sharesMetadata = {
+        kmsSignersContext: requestedKmsSignersContext,
+        eip712Domain: createKmsEip712Domain({
+            chainId: context.chain.fhevm.gateway.id,
+            verifyingContractAddressDecryption: context.chain.fhevm.gateway.contracts.decryption.address,
+        }),
+        eip712Signature: signature,
+        eip712SignerAddress: signerAddress,
+        handles,
+        tkmsVersion,
+    };
+    // 10. The returned KmsSigncryptedShares is guaranteed to be fully verified:
+    // uniform extraData across shares, valid extraData format, and consistency
+    // with the KmsSignersContext (see KmsSigncryptedSharesImpl invariants).
+    return await createKmsSigncryptedShares(context, {
+        metadata: sharesMetadata,
+        shares,
+    });
+}
+//# sourceMappingURL=fetchKmsSigncryptedSharesV2-p.js.map

package/_esm/core/kms/fetchKmsSigncryptedSharesV2-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchKmsSigncryptedSharesV2-p.js","sourceRoot":"","sources":["../../../core/kms/fetchKmsSigncryptedSharesV2-p.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAyB/E,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAgB,EAAE,UAAsB;IACxF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IACtC,MAAM,YAAY,GAAG,UAAU,CAAC,YAAwC,CAAC;IAEzE,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAE3D,MAAM,cAAc,GAAG;QACrB,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;QACjC,GAAG,OAAO;KACX,CAAC;IAEF,8BAA8B,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAEjD,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;IAClD,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;IAE5D,0DAA0D;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,CACT,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,8CAA8C;IAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,WAAW;KAC5C,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEvB,mDAAmD;IACnD,gCAAgC,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAiB,CAAC,CAAC;IAEpF,4BAA4B;IAC5B,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAErC,4BAA4B;IAC5B,YAAY,CAAC,gBAAgB,EAAE,CAAC;IAEhC,wEAAwE;IACxE,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5G,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAE/G,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,mBAAmB,CAAC,OAAO,EAAE;YACjC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;YAC3E,WAAW;YACX,mBAAmB,EAAE,WAAW;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,gFAAgF;QAChF,oFAAoF;QACpF,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8D,CAAC;QAC1F,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,WAAW,EAAE,CAAC;YACpD,MAAM,eAAe,CAAC,OAAO,EAAE;gBAC7B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;gBAC3E,QAAQ,EAAE,WAAW;gBACrB,SAAS;gBACT,mBAAmB,EAAE,YAAY;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,oEAAoE;IAEpE,iDAAiD;IACjD,4EAA4E;IAC5E,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,0BAA0B,GAAsB,MAAM,qBAAqB,CAAC,OAAO,EAAE;QACzF,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;QAC3F,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,OAAyC;KAC/G,CAAC,CAAC;IAEH,uCAAuC,CACrC;QACE,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS;QAChD,iBAAiB,EAAE,0BAA0B;KAC9C,EACD,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAC9B,CAAC;IAEF,sEAAsE;IACtE,MAAM,MAAM,GAAmC,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE;QACrG,OAAO,EAAE;YACP,mBAAmB,EAAE,aAAa;YAClC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;YACpD,yBAAyB,EAAE,SAAS;SACrC;QACD,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,cAAc,GAAiC;QACnD,iBAAiB,EAAE,0BAA0B;QAC7C,YAAY,EAAE,qBAAqB,CAAC;YAClC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YACvC,kCAAkC,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO;SAC7F,CAAC;QACF,eAAe,EAAE,SAAS;QAC1B,mBAAmB,EAAE,aAAa;QAClC,OAAO;QACP,WAAW;KACZ,CAAC;IAEF,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,MAAM,0BAA0B,CAAC,OAAO,EAAE;QAC/C,QAAQ,EAAE,cAAc;QACxB,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/_esm/core/kms/{kmsDelegatedUserDecryptEip712Types.js → kmsDelegatedUserDecryptEip712V1Types.js}

@@ -1,7 +1,8 @@
 ////////////////////////////////////////////////////////////////////////////////
-// KmsDelegateUserDecryptEIP712Types
+// KmsDelegatedUserDecryptEip712V1Types
 ////////////////////////////////////////////////////////////////////////////////
-export const kmsDelegatedUserDecryptEip712Types = {
+// Careful: do not change any fields in this structure
+export const kmsDelegatedUserDecryptEip712V1Types = {
     EIP712Domain: [
         { name: 'name', type: 'string' },
         { name: 'version', type: 'string' },
@@ -20,9 +21,9 @@ export const kmsDelegatedUserDecryptEip712Types = {
         { name: 'extraData', type: 'bytes' },
     ],
 };
-Object.freeze(kmsDelegatedUserDecryptEip712Types);
-Object.freeze(kmsDelegatedUserDecryptEip712Types.EIP712Domain);
-Object.freeze(kmsDelegatedUserDecryptEip712Types.DelegatedUserDecryptRequestVerification);
-kmsDelegatedUserDecryptEip712Types.EIP712Domain.forEach(Object.freeze);
-kmsDelegatedUserDecryptEip712Types.DelegatedUserDecryptRequestVerification.forEach(Object.freeze);
-//# sourceMappingURL=kmsDelegatedUserDecryptEip712Types.js.map
+Object.freeze(kmsDelegatedUserDecryptEip712V1Types);
+Object.freeze(kmsDelegatedUserDecryptEip712V1Types.EIP712Domain);
+Object.freeze(kmsDelegatedUserDecryptEip712V1Types.DelegatedUserDecryptRequestVerification);
+kmsDelegatedUserDecryptEip712V1Types.EIP712Domain.forEach(Object.freeze);
+kmsDelegatedUserDecryptEip712V1Types.DelegatedUserDecryptRequestVerification.forEach(Object.freeze);
+//# sourceMappingURL=kmsDelegatedUserDecryptEip712V1Types.js.map

package/_esm/core/kms/kmsDelegatedUserDecryptEip712V1Types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kmsDelegatedUserDecryptEip712V1Types.js","sourceRoot":"","sources":["../../../core/kms/kmsDelegatedUserDecryptEip712V1Types.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,uCAAuC;AACvC,gFAAgF;AAEhF,sDAAsD;AACtD,MAAM,CAAC,MAAM,oCAAoC,GAAyC;IACxF,YAAY,EAAE;QACZ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;KACtC;IACV,gFAAgF;IAChF,yFAAyF;IACzF,qDAAqD;IACrD,uCAAuC,EAAE;QACvC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;QACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE;QAChD,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC7C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3C,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE;QACzC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;KAC5B;CACF,CAAC;AAEX,MAAM,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,CAAC,oCAAoC,CAAC,YAAY,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,CAAC,oCAAoC,CAAC,uCAAuC,CAAC,CAAC;AAC5F,oCAAoC,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACzE,oCAAoC,CAAC,uCAAuC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC"}

package/_esm/core/kms/kmsPublicDecryptEip712Types.js

@@ -1,5 +1,5 @@
 ////////////////////////////////////////////////////////////////////////////////
-// KmsPublicDecryptEIP712Types
+// KmsPublicDecryptEip712Types
 ////////////////////////////////////////////////////////////////////////////////
 export const kmsPublicDecryptEip712Types = {
     EIP712Domain: [

package/_esm/core/kms/{kmsUserDecryptEip712Types.js → kmsUserDecryptEip712V1Types.js}

@@ -1,7 +1,8 @@
 ////////////////////////////////////////////////////////////////////////////////
-// KmsUserDecryptEIP712Types
+// KmsUserDecryptEip712V1Types
 ////////////////////////////////////////////////////////////////////////////////
-export const kmsUserDecryptEip712Types = {
+// Careful: do not change any fields in this structure
+export const kmsUserDecryptEip712V1Types = {
     EIP712Domain: [
         { name: 'name', type: 'string' },
         { name: 'version', type: 'string' },
@@ -19,9 +20,9 @@ export const kmsUserDecryptEip712Types = {
         { name: 'extraData', type: 'bytes' },
     ],
 };
-Object.freeze(kmsUserDecryptEip712Types);
-Object.freeze(kmsUserDecryptEip712Types.EIP712Domain);
-Object.freeze(kmsUserDecryptEip712Types.UserDecryptRequestVerification);
-kmsUserDecryptEip712Types.EIP712Domain.forEach(Object.freeze);
-kmsUserDecryptEip712Types.UserDecryptRequestVerification.forEach(Object.freeze);
-//# sourceMappingURL=kmsUserDecryptEip712Types.js.map
+Object.freeze(kmsUserDecryptEip712V1Types);
+Object.freeze(kmsUserDecryptEip712V1Types.EIP712Domain);
+Object.freeze(kmsUserDecryptEip712V1Types.UserDecryptRequestVerification);
+kmsUserDecryptEip712V1Types.EIP712Domain.forEach(Object.freeze);
+kmsUserDecryptEip712V1Types.UserDecryptRequestVerification.forEach(Object.freeze);
+//# sourceMappingURL=kmsUserDecryptEip712V1Types.js.map

package/_esm/core/kms/kmsUserDecryptEip712V1Types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kmsUserDecryptEip712V1Types.js","sourceRoot":"","sources":["../../../core/kms/kmsUserDecryptEip712V1Types.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,sDAAsD;AACtD,MAAM,CAAC,MAAM,2BAA2B,GAAgC;IACtE,YAAY,EAAE;QACZ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;KACtC;IACV,gFAAgF;IAChF,yFAAyF;IACzF,qDAAqD;IACrD,8BAA8B,EAAE;QAC9B,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;QACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE;QAChD,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3C,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE;QACzC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;KAC5B;CACF,CAAC;AAEX,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,8BAA8B,CAAC,CAAC;AAC1E,2BAA2B,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAChE,2BAA2B,CAAC,8BAA8B,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC"}

package/_esm/core/kms/kmsUserDecryptEip712V2Types.js

@@ -1,6 +1,7 @@
 ////////////////////////////////////////////////////////////////////////////////
-// KmsUserDecryptEIP712V2Types (RFC-016)
+// KmsUserDecryptEip712V2Types (RFC-016)
 ////////////////////////////////////////////////////////////////////////////////
+// Careful: do not change any fields in this structure
 export const kmsUserDecryptEip712V2Types = {
     EIP712Domain: [
         { name: 'name', type: 'string' },

package/_esm/core/kms/kmsUserDecryptEip712V2Types.js.map

@@ -1 +1 @@
-{"version":3,"file":"kmsUserDecryptEip712V2Types.js","sourceRoot":"","sources":["../../../core/kms/kmsUserDecryptEip712V2Types.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,wCAAwC;AACxC,gFAAgF;AAEhF,MAAM,CAAC,MAAM,2BAA2B,GAAgC;IACtE,YAAY,EAAE;QACZ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;KACtC;IACV,gFAAgF;IAChF,yFAAyF;IACzF,qDAAqD;IACrD,8BAA8B,EAAE;QAC9B,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;QACxC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;QACpC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,WAAW,EAAE;QAC/C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3C,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;KAC5B;CACF,CAAC;AAEX,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,8BAA8B,CAAC,CAAC;AAC1E,2BAA2B,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAChE,2BAA2B,CAAC,8BAA8B,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"kmsUserDecryptEip712V2Types.js","sourceRoot":"","sources":["../../../core/kms/kmsUserDecryptEip712V2Types.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,wCAAwC;AACxC,gFAAgF;AAEhF,sDAAsD;AACtD,MAAM,CAAC,MAAM,2BAA2B,GAAgC;IACtE,YAAY,EAAE;QACZ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;KACtC;IACV,gFAAgF;IAChF,yFAAyF;IACzF,qDAAqD;IACrD,8BAA8B,EAAE;QAC9B,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;QACxC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;QACpC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,WAAW,EAAE;QAC/C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3C,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;KAC5B;CACF,CAAC;AAEX,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,8BAA8B,CAAC,CAAC;AAC1E,2BAA2B,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAChE,2BAA2B,CAAC,8BAA8B,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC"}

package/_esm/core/kms/publicDecrypt.js

@@ -36,7 +36,7 @@ export async function publicDecrypt(context, parameters) {
         handles: orderedHandles,
     });
     // 5. Call relayer
-    const { orderedAbiEncodedClearValues, kmsPublicDecryptEIP712Signatures, extraData: relayerExtraData, } = await context.runtime.relayer.fetchPublicDecrypt(context, {
+    const { orderedAbiEncodedClearValues, kmsPublicDecryptEip712Signatures, extraData: relayerExtraData, } = await context.runtime.relayer.fetchPublicDecrypt(context, {
         payload: {
             orderedHandles,
             extraData: requestedExtraData,
@@ -56,7 +56,7 @@ export async function publicDecrypt(context, parameters) {
         originToken,
         orderedHandles: orderedHandles,
         orderedAbiEncodedClearValues,
-        kmsPublicDecryptEIP712Signatures,
+        kmsPublicDecryptEip712Signatures,
         kmsSignersContext: reconciledKmsSignersContext,
     });
     return publicDecryptionProof;

package/_esm/core/kms/utils.js

@@ -17,22 +17,4 @@ export function assertKmsDecryptionBitLimit(handles) {
     }
     return total;
 }
-export function assertKmsEIP712DeadlineValidity({ startTimestamp, durationDays, }, maxDurationDays) {
-    if (durationDays === 0) {
-        throw Error('durationDays is zero');
-    }
-    const durationDaysBigInt = BigInt(durationDays);
-    if (durationDaysBigInt > BigInt(maxDurationDays)) {
-        throw Error(`durationDays is above max duration of ${maxDurationDays}`);
-    }
-    const startTimestampBigInt = BigInt(startTimestamp);
-    const currentTimestamp = BigInt(Math.floor(Date.now() / 1000));
-    if (startTimestampBigInt > currentTimestamp) {
-        throw Error('startTimestamp is set in the future');
-    }
-    const durationInSeconds = durationDaysBigInt * BigInt(24 * 60 * 60);
-    if (startTimestampBigInt + durationInSeconds < currentTimestamp) {
-        throw Error('request has expired');
-    }
-}
 //# sourceMappingURL=utils.js.map

package/_esm/core/kms/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../core/kms/utils.ts"],"names":[],"mappings":"AAGA,MAAM,oCAAoC,GAAG,IAAkB,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAA0B;IACpE,IAAI,KAAK,GAAW,CAAC,CAAC;IAEtB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,IAAI,MAAM,CAAC,cAAc,CAAC;QAE/B,IAAI,KAAK,GAAG,oCAAoC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,4BAA4B,oCAAoC,qCAAqC,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAmB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,EACE,cAAc,EACd,YAAY,GAIb,EACD,eAA2B;IAE3B,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,CAAC,yCAAyC,eAAe,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAEpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,oBAAoB,GAAG,gBAAgB,EAAE,CAAC;QAC5C,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACpE,IAAI,oBAAoB,GAAG,iBAAiB,GAAG,gBAAgB,EAAE,CAAC;QAChE,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../core/kms/utils.ts"],"names":[],"mappings":"AAGA,MAAM,oCAAoC,GAAG,IAAkB,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAA0B;IACpE,IAAI,KAAK,GAAW,CAAC,CAAC;IAEtB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,IAAI,MAAM,CAAC,cAAc,CAAC;QAE/B,IAAI,KAAK,GAAG,oCAAoC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,4BAA4B,oCAAoC,qCAAqC,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAmB,CAAC;AAC7B,CAAC"}

package/_esm/core/kms/verifyKmsPublicDecryptEip712-p.js

@@ -5,7 +5,7 @@ import { kmsPublicDecryptEip712Types } from './kmsPublicDecryptEip712Types.js';
 ////////////////////////////////////////////////////////////////////////////////
 export async function verifyKmsPublicDecryptEip712(context, parameters) {
     const { kmsSignersContext, orderedHandles: orderedEncryptedValues, orderedAbiEncodedClearValues } = parameters;
-    // TODO:  use createKmsPublicDecryptEIP712 instead!
+    // TODO:  use createKmsPublicDecryptEip712 instead!
     const extraData = kmsSignersContextToExtraData(kmsSignersContext);
     ////////////////////////////////////////////////////////////////////////////
     //
@@ -37,7 +37,7 @@ export async function verifyKmsPublicDecryptEip712(context, parameters) {
         domain,
         types: kmsPublicDecryptEip712Types,
         primaryType: 'PublicDecryptVerification',
-        signatures: parameters.kmsPublicDecryptEIP712Signatures,
+        signatures: parameters.kmsPublicDecryptEip712Signatures,
         message,
     });
     // 2. Verify signature threshold is reached

package/_esm/core/modules/decrypt/module/api-p.js

@@ -154,15 +154,15 @@ export async function decryptAndReconstruct(runtime, parameters) {
     const privateEncKeyMlKem512Wasm = TkmsPrivateEncKeyMlKem512Impl[GET_NATIVE_FUNC](tkmsPrivateKey, PRIVATE_TKMS_LIB_TOKEN, parameters.tkmsVersion);
     const publicEncKeyMlKem512Wasm = TkmsPublicEncKeyMlKem512Impl[GET_NATIVE_FUNC](tkmsPublicKey, PRIVATE_TKMS_LIB_TOKEN, parameters.tkmsVersion);
     const publicEncKeyMlKem512WasmBytesHex = TkmsPublicEncKeyMlKem512Impl[GET_BYTES_HEX_FUNC](tkmsPublicKey, PRIVATE_TKMS_LIB_TOKEN, parameters.tkmsVersion, kmsLib);
-    // KmsEIP712Domain
-    const kmsEIP712Domain = metadata.eip712Domain;
+    // KmsEip712Domain
+    const kmsEip712Domain = metadata.eip712Domain;
     const clientAddress = metadata.eip712SignerAddress;
     // To be modified! use uint64ToBytes32 instead
     const eip712DomainWasmArg = {
-        name: kmsEIP712Domain.name,
-        version: kmsEIP712Domain.version,
-        chain_id: uint32ToBytes32(kmsEIP712Domain.chainId), // gateway chainId
-        verifying_contract: kmsEIP712Domain.verifyingContract,
+        name: kmsEip712Domain.name,
+        version: kmsEip712Domain.version,
+        chain_id: uint32ToBytes32(kmsEip712Domain.chainId), // gateway chainId
+        verifying_contract: kmsEip712Domain.verifyingContract,
         salt: null,
     };
     //////////////////////////////////////////////////////////////////////////////