@fhevm/sdk 1.1.0-alpha.6 → 1.1.0-alpha.7

package/_types/core/types/signedDecryptionPermit.d.ts

@@ -1,10 +1,7 @@
-import type { KmsDelegatedUserDecryptEip712, KmsUserDecryptEip712 } from './kms.js';
+import type { KmsDelegatedUserDecryptEip712V1, KmsUserDecryptEip712V1, KmsUserDecryptEip712V2 } from './kms.js';
 import type { Bytes65Hex, BytesHex, ChecksummedAddress } from './primitives.js';
 /**
- * A signed EIP-712 authorization that allows the signer's ephemeral key
- * to request decryption of the signer's own FHE handles from the KMS.
- *
- * Created once, serializable, and reusable across multiple decrypt calls.
+ * Common fields shared by all signed decryption permit versions.
  */
 export type SignedDecryptionPermitBase = {
     /** The EIP-712 signature. */
@@ -14,33 +11,47 @@ export type SignedDecryptionPermitBase = {
     /**
      * The account that owns the encrypted data this permit covers.
      *
-     * - **Self permit:** equals `signerAddress` — the signer authorizes decryption
-     *   of their own data.
-     *
-     * - **Delegated permit:** differs from `signerAddress`. Step by step:
-     *   1. Alice owns encrypted values on-chain (ebool, euint8, etc.).
-     *   2. Alice calls the ACL contract to grant Bob permission to decrypt her data.
-     *   3. Bob signs an EIP-712 delegated decryption permit referencing Alice as the
-     *      `encryptedDataOwnerAddress` (= `delegatorAddress` in the EIP-712 message).
-     *   4. The KMS verifies Bob's signature (`signerAddress`) and that Alice
-     *      (`encryptedDataOwnerAddress`) has granted him on-chain permission.
-     *   5. Bob can now decrypt Alice's encrypted values using this permit.
+     * - **Self permit:** equals `signerAddress`.
+     * - **Delegated permit:** differs from `signerAddress`. The owner has granted
+     *   the signer permission via `FHE.delegateUserDecryption()` on-chain.
      */
     readonly encryptedDataOwnerAddress: ChecksummedAddress;
     /** The E2E transport public key embedded in the EIP-712 message. */
     readonly transportPublicKey: BytesHex;
-    /** @throws If the permit has expired based on `startTimestamp` + `durationDays`. */
+    /** `true` when the signer is decrypting on behalf of another account (delegated permit). */
+    readonly isDelegated: boolean;
+    /** @throws If the permit has expired. */
     assertNotExpired(): void;
 };
-export type SignedSelfDecryptionPermit = SignedDecryptionPermitBase & {
-    readonly eip712: KmsUserDecryptEip712;
-    /** Always `false` for non-delegated permits. `encryptedDataOwnerAddress === signerAddress`. */
-    readonly isDelegated: false;
+/**
+ * Signed decryption permit produced by protocol v13 and below.
+ *
+ * Narrow to self vs delegated via `eip712.primaryType`:
+ * - `'UserDecryptRequestVerification'` → self permit (`encryptedDataOwnerAddress === signerAddress`)
+ * - `'DelegatedUserDecryptRequestVerification'` → delegated permit
+ */
+export type SignedDecryptionPermitV1 = SignedDecryptionPermitBase & {
+    readonly version: 1;
+    readonly eip712: KmsUserDecryptEip712V1 | KmsDelegatedUserDecryptEip712V1;
 };
-export type SignedDelegatedDecryptionPermit = SignedDecryptionPermitBase & {
-    readonly eip712: KmsDelegatedUserDecryptEip712;
-    /** Always `true` for delegated permits. `v` is the delegated account. (see `SenderCannotBeDelegate` is ACL.sol) */
-    readonly isDelegated: true;
+/**
+ * Signed decryption permit produced by protocol v14 and above.
+ *
+ * Uses the unified `KmsUserDecryptEip712V2` EIP-712 shape — there is no longer
+ * a separate delegated variant. The `encryptedDataOwnerAddress` is read from
+ * `eip712.message.userAddress` and may differ from `signerAddress`.
+ *
+ * Discriminate from {@link SignedDecryptionPermitV1} with `permit.version === 2`.
+ */
+export type SignedDecryptionPermitV2 = SignedDecryptionPermitBase & {
+    readonly version: 2;
+    readonly eip712: KmsUserDecryptEip712V2;
 };
-export type SignedDecryptionPermit = SignedSelfDecryptionPermit | SignedDelegatedDecryptionPermit;
+/**
+ * A signed decryption permit, covering all protocol versions.
+ *
+ * Narrow by version: `permit.version === 1` → {@link SignedDecryptionPermitV1},
+ * `permit.version === 2` → {@link SignedDecryptionPermitV2}.
+ */
+export type SignedDecryptionPermit = SignedDecryptionPermitV1 | SignedDecryptionPermitV2;
 //# sourceMappingURL=signedDecryptionPermit.d.ts.map

package/_types/core/types/signedDecryptionPermit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signedDecryptionPermit.d.ts","sourceRoot":"","sources":["../../../core/types/signedDecryptionPermit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AACpF,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC,6BAA6B;IAC7B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,yBAAyB,EAAE,kBAAkB,CAAC;IACvD,oEAAoE;IACpE,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,CAAC;IAEtC,oFAAoF;IACpF,gBAAgB,IAAI,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,0BAA0B,GAAG;IACpE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,+FAA+F;IAC/F,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG,0BAA0B,GAAG;IACzE,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,mHAAmH;IACnH,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,GAAG,+BAA+B,CAAC"}
+{"version":3,"file":"signedDecryptionPermit.d.ts","sourceRoot":"","sources":["../../../core/types/signedDecryptionPermit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAChH,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEhF;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC,6BAA6B;IAC7B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C;;;;;;OAMG;IACH,QAAQ,CAAC,yBAAyB,EAAE,kBAAkB,CAAC;IACvD,oEAAoE;IACpE,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,CAAC;IACtC,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAE9B,yCAAyC;IACzC,gBAAgB,IAAI,IAAI,CAAC;CAC1B,CAAC;AAMF;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAAG,0BAA0B,GAAG;IAClE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,sBAAsB,GAAG,+BAA+B,CAAC;CAC3E,CAAC;AAMF;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAAG,0BAA0B,GAAG;IAClE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;CACzC,CAAC;AAIF;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,wBAAwB,GAAG,wBAAwB,CAAC"}

package/_types/core/utils-p/decrypt/verifyKmsDelegatedUserDecryptEip712V1.d.ts

@@ -0,0 +1,14 @@
+import type { FhevmRuntime } from '../../types/coreFhevmRuntime.js';
+import type { FhevmChain } from '../../types/fhevmChain.js';
+import type { KmsDelegatedUserDecryptEip712V1Message } from '../../types/kms.js';
+import type { Bytes65Hex, ChecksummedAddress } from '../../types/primitives.js';
+export type VerifyKmsDelegatedUserDecryptEip712V1Parameters = {
+    readonly signer: ChecksummedAddress;
+    readonly message: KmsDelegatedUserDecryptEip712V1Message;
+    readonly signature: Bytes65Hex;
+};
+export declare function verifyKmsDelegatedUserDecryptEip712V1(context: {
+    readonly chain: FhevmChain;
+    readonly runtime: FhevmRuntime;
+}, parameters: VerifyKmsDelegatedUserDecryptEip712V1Parameters): Promise<void>;
+//# sourceMappingURL=verifyKmsDelegatedUserDecryptEip712V1.d.ts.map

package/_types/core/utils-p/decrypt/verifyKmsDelegatedUserDecryptEip712V1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyKmsDelegatedUserDecryptEip712V1.d.ts","sourceRoot":"","sources":["../../../../core/utils-p/decrypt/verifyKmsDelegatedUserDecryptEip712V1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,KAAK,EAAmC,sCAAsC,EAAE,MAAM,oBAAoB,CAAC;AAClH,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAMhF,MAAM,MAAM,+CAA+C,GAAG;IAC5D,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,sCAAsC,CAAC;IACzD,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEF,wBAAsB,qCAAqC,CACzD,OAAO,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,EACvE,UAAU,EAAE,+CAA+C,GAC1D,OAAO,CAAC,IAAI,CAAC,CA4Bf"}

package/_types/core/utils-p/decrypt/verifyKmsUserDecryptEip712V1.d.ts

@@ -0,0 +1,14 @@
+import type { FhevmRuntime } from '../../types/coreFhevmRuntime.js';
+import type { FhevmChain } from '../../types/fhevmChain.js';
+import type { KmsUserDecryptEip712V1Message } from '../../types/kms.js';
+import type { Bytes65Hex, ChecksummedAddress } from '../../types/primitives.js';
+export type VerifyKmsUserDecryptEip712V1Parameters = {
+    readonly signer: ChecksummedAddress;
+    readonly message: KmsUserDecryptEip712V1Message;
+    readonly signature: Bytes65Hex;
+};
+export declare function verifyKmsUserDecryptEip712V1(context: {
+    readonly chain: FhevmChain;
+    readonly runtime: FhevmRuntime;
+}, parameters: VerifyKmsUserDecryptEip712V1Parameters): Promise<void>;
+//# sourceMappingURL=verifyKmsUserDecryptEip712V1.d.ts.map

package/_types/core/utils-p/decrypt/verifyKmsUserDecryptEip712V1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyKmsUserDecryptEip712V1.d.ts","sourceRoot":"","sources":["../../../../core/utils-p/decrypt/verifyKmsUserDecryptEip712V1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,KAAK,EAA0B,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AAChG,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAMhF,MAAM,MAAM,sCAAsC,GAAG;IACnD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEF,wBAAsB,4BAA4B,CAChD,OAAO,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,EACvE,UAAU,EAAE,sCAAsC,GACjD,OAAO,CAAC,IAAI,CAAC,CA4Bf"}

package/_types/core/utils-p/decrypt/verifyKmsUserDecryptEip712V2.d.ts

@@ -0,0 +1,14 @@
+import type { FhevmRuntime } from '../../types/coreFhevmRuntime.js';
+import type { FhevmChain } from '../../types/fhevmChain.js';
+import type { KmsUserDecryptEip712V2Message } from '../../types/kms.js';
+import type { Bytes65Hex, ChecksummedAddress } from '../../types/primitives.js';
+export type VerifyKmsUserDecryptEip712V2Parameters = {
+    readonly signer: ChecksummedAddress;
+    readonly message: KmsUserDecryptEip712V2Message;
+    readonly signature: Bytes65Hex;
+};
+export declare function verifyKmsUserDecryptEip712V2(context: {
+    readonly chain: FhevmChain;
+    readonly runtime: FhevmRuntime;
+}, parameters: VerifyKmsUserDecryptEip712V2Parameters): Promise<void>;
+//# sourceMappingURL=verifyKmsUserDecryptEip712V2.d.ts.map

package/_types/core/utils-p/decrypt/verifyKmsUserDecryptEip712V2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyKmsUserDecryptEip712V2.d.ts","sourceRoot":"","sources":["../../../../core/utils-p/decrypt/verifyKmsUserDecryptEip712V2.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,KAAK,EAA0B,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AAChG,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAMhF,MAAM,MAAM,sCAAsC,GAAG;IACnD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEF,wBAAsB,4BAA4B,CAChD,OAAO,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,EACvE,UAAU,EAAE,sCAAsC,GACjD,OAAO,CAAC,IAAI,CAAC,CAwBf"}

package/_types/core/utils-p/runtime/recoverSigners.d.ts

@@ -1,11 +1,11 @@
 import type { RecoverTypedDataAddressModuleFunction } from '../../modules/ethereum/types.js';
 import type { FhevmRuntime } from '../../types/coreFhevmRuntime.js';
 import type { ChecksummedAddress } from '../../types/primitives.js';
-type EIP712TypesType = Record<string, ReadonlyArray<{
+type Eip712TypesType = Record<string, ReadonlyArray<{
     name: string;
     type: string;
 }>>;
-export type RecoverSignersParameters<T extends EIP712TypesType> = {
+export type RecoverSignersParameters<T extends Eip712TypesType> = {
     readonly domain: Parameters<RecoverTypedDataAddressModuleFunction['recoverTypedDataAddress']>[0]['domain'];
     readonly types: T;
     readonly primaryType: string & keyof T;

package/core/_version.ts

@@ -1,3 +1,3 @@
 // This file is auto-generated
-export const version: string = '1.1.0-alpha.6';
+export const version: string = '1.1.0-alpha.7';
 export const sdkName: string = '@fhevm/sdk';

package/core/actions/base/index.ts

@@ -1,5 +1,3 @@
-export { type ReadKmsSignersContextReturnType, readKmsSignersContext } from './readKmsSignersContext.js';
-
 export {
   type DecryptPublicValueParameters,
   type DecryptPublicValueReturnType,
@@ -32,48 +30,8 @@ export {
   canDecryptPublicValues,
 } from './canDecryptPublicValues.js';
 
-export {
-  type CreateVerifiedInputProofFromRawBytesParameters,
-  type CreateVerifiedInputProofFromRawBytesReturnType,
-  createVerifiedInputProofFromRawBytes,
-} from './createVerifiedInputProofFromRawBytes.js';
-
-export {
-  type ReadCoprocessorSignersContextReturnType,
-  readCoprocessorSignersContext,
-} from './readCoprocessorSignersContext.js';
-
-export {
-  type VerifyInputProofParameters,
-  type VerifyInputProofReturnType,
-  verifyInputProof,
-} from './verifyInputProof.js';
-
-export {
-  type FetchVerifiedInputProofParameters,
-  type FetchVerifiedInputProofReturnType,
-  fetchVerifiedInputProof,
-} from './fetchVerifiedInputProof.js';
-
 export {
   type FetchEncryptedValuesParameters,
   type FetchEncryptedValuesReturnType,
   fetchEncryptedValues,
 } from './fetchEncryptedValues.js';
-
-export {
-  type VerifyZkProofCoprocessorSignaturesParameters,
-  verifyZkProofCoprocessorSignatures,
-} from './verifyZkProofCoprocessorSignatures.js';
-
-export {
-  type FetchSelfKmsSigncryptedSharesParameters,
-  type FetchDelegatedKmsSigncryptedSharesParameters,
-  type FetchKmsSigncryptedSharesReturnType,
-  fetchKmsSigncryptedShares,
-} from './fetchKmsSigncryptedShares.js';
-
-export {
-  type VerifyHandlesCoprocessorSignaturesParameters,
-  verifyHandlesCoprocessorSignatures,
-} from './verifyHandlesCoprocessorSignatures.js';

package/core/actions/base/signDecryptionPermit.ts

@@ -1,43 +1,15 @@
-import type {
-  SignDecryptionPermitParameters,
-  SignSelfDecryptionPermitParameters,
-  SignDelegatedDecryptionPermitParameters,
-} from '../../kms/SignedDecryptionPermit-p.js';
+import type { SignDecryptionPermitParameters } from '../../kms/SignedDecryptionPermit-p.js';
 import type { Fhevm } from '../../types/coreFhevmClient.js';
 import type { FhevmChain } from '../../types/fhevmChain.js';
-import type {
-  SignedDecryptionPermit,
-  SignedDelegatedDecryptionPermit,
-  SignedSelfDecryptionPermit,
-} from '../../types/signedDecryptionPermit.js';
+import type { SignedDecryptionPermit } from '../../types/signedDecryptionPermit.js';
 import { signDecryptionPermit as signDecryptionPermit_ } from '../../kms/SignedDecryptionPermit-p.js';
 
-export type {
-  SignDecryptionPermitParameters,
-  SignSelfDecryptionPermitParameters,
-  SignDelegatedDecryptionPermitParameters,
-};
+export type { SignDecryptionPermitParameters };
 export type SignDecryptionPermitReturnType = SignedDecryptionPermit;
 
-export async function signDecryptionPermit(
-  fhevm: Fhevm<FhevmChain>,
-  parameters: SignSelfDecryptionPermitParameters,
-): Promise<SignedSelfDecryptionPermit>;
-
-export async function signDecryptionPermit(
-  fhevm: Fhevm<FhevmChain>,
-  parameters: SignDelegatedDecryptionPermitParameters,
-): Promise<SignedDelegatedDecryptionPermit>;
-
 export async function signDecryptionPermit(
   fhevm: Fhevm<FhevmChain>,
   parameters: SignDecryptionPermitParameters,
 ): Promise<SignedDecryptionPermit> {
-  // The public overloads guarantee the correct pairing.
-  // The if/else narrows parameters via delegatorAddress, so TS can match each branch
-  // to the correct overload of signDecryptionPermit_ without any casts.
-  if (parameters.delegatorAddress !== undefined) {
-    return signDecryptionPermit_(fhevm, parameters);
-  }
   return signDecryptionPermit_(fhevm, parameters);
 }

package/core/actions/chain/index.ts

@@ -1,10 +1,3 @@
-export {
-  type VerifyKmsDelegatedUserDecryptEip712Parameters,
-  verifyKmsDelegatedUserDecryptEip712,
-} from './verifyKmsDelegatedUserDecryptEip712.js';
-
-export { type CreateKmsEIP712DomainReturnType, createKmsEIP712Domain } from './createKmsEip712Domain.js';
-
 export {
   type FetchFheEncryptionKeyBytesParameters,
   type FetchFheEncryptionKeyBytesReturnType,
@@ -23,33 +16,12 @@ export {
   serializeTransportKeyPair,
 } from './serializeTransportKeyPair.js';
 
-export {
-  type CreateKmsDelegatedUserDecryptEip712Parameters,
-  type CreateKmsDelegatedUserDecryptEip712ReturnType,
-  createKmsDelegatedUserDecryptEip712,
-} from './createKmsDelegatedUserDecryptEip712.js';
-
-export { type VerifyKmsUserDecryptEip712Parameters, verifyKmsUserDecryptEip712 } from './verifyKmsUserDecryptEip712.js';
-
-export {
-  type CreateCoprocessorEip712DomainReturnType,
-  createCoprocessorEip712Domain,
-} from './createCoprocessorEip712Domain.js';
-
 export {
   type SignDecryptionPermitParameters,
-  type SignSelfDecryptionPermitParameters,
-  type SignDelegatedDecryptionPermitParameters,
   type SignDecryptionPermitReturnType,
   signDecryptionPermit,
 } from '../base/signDecryptionPermit.js';
 
-export {
-  type CreateKmsUserDecryptEip712Parameters,
-  type CreateKmsUserDecryptEip712ReturnType,
-  createKmsUserDecryptEip712,
-} from './createKmsUserDecryptEip712.js';
-
 export {
   type SerializeSignedDecryptionPermitParameters,
   type SerializeSignedDecryptionPermitReturnType,

package/core/actions/chain/parseSignedDecryptionPermit.ts

@@ -10,6 +10,7 @@ import { parseSignedDecryptionPermit as parseSignedDecryptionPermit_ } from '../
 export type ParseSignedDecryptionPermitParameters = {
   /** The serialized permit — a previously parsed permit object. */
   readonly serializedPermit: {
+    readonly version: number;
     readonly eip712: Eip712Like;
     readonly signature: string;
     readonly signerAddress: string;

package/core/actions/chain/serializeSignedDecryptionPermit.ts

@@ -2,7 +2,7 @@ import type { Fhevm, OptionalNativeClient } from '../../types/coreFhevmClient.js
 import type { FhevmRuntime } from '../../types/coreFhevmRuntime.js';
 import type { FhevmChain } from '../../types/fhevmChain.js';
 import type { SignedDecryptionPermit } from '../../types/signedDecryptionPermit.js';
-import type { KmsDelegatedUserDecryptEip712, KmsUserDecryptEip712 } from '../../types/kms.js';
+import type { Eip712Like } from '../../types/kms.js';
 import { serializeSignedDecryptionPermitToJSON } from '../../kms/SignedDecryptionPermit-p.js';
 
 ////////////////////////////////////////////////////////////////////////////////
@@ -12,7 +12,8 @@ export type SerializeSignedDecryptionPermitParameters = {
 };
 
 export type SerializeSignedDecryptionPermitReturnType = {
-  readonly eip712: KmsUserDecryptEip712 | KmsDelegatedUserDecryptEip712;
+  readonly version: number;
+  readonly eip712: Eip712Like;
   readonly signature: string;
   readonly signerAddress: string;
 };

package/core/actions/decrypt/canDecryptValue.ts

@@ -1,10 +1,6 @@
-/* eslint-disable @typescript-eslint/unified-signatures */
 import type { Fhevm } from '../../types/coreFhevmClient.js';
 import type { FhevmChain } from '../../types/fhevmChain.js';
-import type {
-  SignedDelegatedDecryptionPermit,
-  SignedSelfDecryptionPermit,
-} from '../../types/signedDecryptionPermit.js';
+import type { SignedDecryptionPermit } from '../../types/signedDecryptionPermit.js';
 import type { TransportKeyPair } from '../../kms/TransportKeyPair-p.js';
 import type { EncryptedValueLike } from '../../types/encryptedTypes.js';
 import { canDecryptValuesFromPairs as canDecryptValuesFromPairs_ } from '../../host-contracts/canDecryptValuesFromPairs.js';
@@ -23,7 +19,7 @@ export type CanDecryptValueWithUserAddressParameters = CanDecryptValueParameters
 };
 
 export type CanDecryptValueWithPermitParameters = CanDecryptValueParametersBase & {
-  readonly signedPermit: SignedSelfDecryptionPermit | SignedDelegatedDecryptionPermit;
+  readonly signedPermit: SignedDecryptionPermit;
   readonly transportKeyPair?: TransportKeyPair | undefined;
 };
 
@@ -77,16 +73,6 @@ export type CanDecryptValueReturnType = {
  * - the target user address and `contractAddress` must be different
  */
 
-export async function canDecryptValue(
-  fhevm: Fhevm<FhevmChain>,
-  parameters: CanDecryptValueWithUserAddressParameters,
-): Promise<CanDecryptValueReturnType>;
-
-export async function canDecryptValue(
-  fhevm: Fhevm<FhevmChain>,
-  parameters: CanDecryptValueWithPermitParameters,
-): Promise<CanDecryptValueReturnType>;
-
 export async function canDecryptValue(
   fhevm: Fhevm<FhevmChain>,
   parameters: CanDecryptValueWithUserAddressParameters | CanDecryptValueWithPermitParameters,

package/core/actions/decrypt/canDecryptValues.ts

@@ -1,10 +1,6 @@
-/* eslint-disable @typescript-eslint/unified-signatures */
 import type { Fhevm } from '../../types/coreFhevmClient.js';
 import type { FhevmChain } from '../../types/fhevmChain.js';
-import type {
-  SignedDelegatedDecryptionPermit,
-  SignedSelfDecryptionPermit,
-} from '../../types/signedDecryptionPermit.js';
+import type { SignedDecryptionPermit } from '../../types/signedDecryptionPermit.js';
 import type { TransportKeyPair } from '../../kms/TransportKeyPair-p.js';
 import type { EncryptedValueLike } from '../../types/encryptedTypes.js';
 import { canDecryptValuesFromPairs as canDecryptValuesFromPairs_ } from '../../host-contracts/canDecryptValuesFromPairs.js';
@@ -23,7 +19,7 @@ export type CanDecryptValuesWithUserAddressParameters = CanDecryptValuesParamete
 };
 
 export type CanDecryptValuesWithPermitParameters = CanDecryptValuesParametersBase & {
-  readonly signedPermit: SignedSelfDecryptionPermit | SignedDelegatedDecryptionPermit;
+  readonly signedPermit: SignedDecryptionPermit;
   readonly transportKeyPair?: TransportKeyPair | undefined;
 };
 
@@ -37,16 +33,6 @@ export type CanDecryptValuesReturnType = {
 
 ////////////////////////////////////////////////////////////////////////////////
 
-export async function canDecryptValues(
-  fhevm: Fhevm<FhevmChain>,
-  parameters: CanDecryptValuesWithUserAddressParameters,
-): Promise<CanDecryptValuesReturnType>;
-
-export async function canDecryptValues(
-  fhevm: Fhevm<FhevmChain>,
-  parameters: CanDecryptValuesWithPermitParameters,
-): Promise<CanDecryptValuesReturnType>;
-
 export async function canDecryptValues(
   fhevm: Fhevm<FhevmChain>,
   parameters: CanDecryptValuesWithUserAddressParameters | CanDecryptValuesWithPermitParameters,

package/core/actions/decrypt/canDecryptValuesFromPairs.ts

@@ -1,10 +1,6 @@
-/* eslint-disable @typescript-eslint/unified-signatures */
 import type { Fhevm } from '../../types/coreFhevmClient.js';
 import type { FhevmChain } from '../../types/fhevmChain.js';
-import type {
-  SignedDelegatedDecryptionPermit,
-  SignedSelfDecryptionPermit,
-} from '../../types/signedDecryptionPermit.js';
+import type { SignedDecryptionPermit } from '../../types/signedDecryptionPermit.js';
 import type { TransportKeyPair } from '../../kms/TransportKeyPair-p.js';
 import type { EncryptedValueLike } from '../../types/encryptedTypes.js';
 import { canDecryptValuesFromPairs as canDecryptValuesFromPairs_ } from '../../host-contracts/canDecryptValuesFromPairs.js';
@@ -25,7 +21,7 @@ export type CanDecryptValuesFromPairsWithUserAddressParameters = CanDecryptValue
 };
 
 export type CanDecryptValuesFromPairsWithPermitParameters = CanDecryptValuesFromPairsParametersBase & {
-  readonly signedPermit: SignedSelfDecryptionPermit | SignedDelegatedDecryptionPermit;
+  readonly signedPermit: SignedDecryptionPermit;
   readonly transportKeyPair?: TransportKeyPair | undefined;
 };
 
@@ -39,16 +35,6 @@ export type CanDecryptValuesFromPairsReturnType = {
 
 ////////////////////////////////////////////////////////////////////////////////
 
-export async function canDecryptValuesFromPairs(
-  fhevm: Fhevm<FhevmChain>,
-  parameters: CanDecryptValuesFromPairsWithUserAddressParameters,
-): Promise<CanDecryptValuesFromPairsReturnType>;
-
-export async function canDecryptValuesFromPairs(
-  fhevm: Fhevm<FhevmChain>,
-  parameters: CanDecryptValuesFromPairsWithPermitParameters,
-): Promise<CanDecryptValuesFromPairsReturnType>;
-
 export async function canDecryptValuesFromPairs(
   fhevm: Fhevm<FhevmChain>,
   parameters: CanDecryptValuesFromPairsWithUserAddressParameters | CanDecryptValuesFromPairsWithPermitParameters,

package/core/actions/decrypt/decryptValue.ts

@@ -38,6 +38,7 @@ export async function decryptValue(
     {
       handle: toFhevmHandle(encryptedValue),
       contractAddress: sanitizedContractAddress,
+      ownerAddress: addressToChecksummedAddress(parameters.signedPermit.encryptedDataOwnerAddress),
     },
   ];
 
@@ -46,7 +47,7 @@ export async function decryptValue(
   const typedValues = await decryptValuesFromPairs_(f, {
     ...rest,
     pairs: sanitizedPairs,
-  } as Parameters<typeof decryptValuesFromPairs_>[1]);
+  });
 
   // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
   return typedValues[0]!;

package/core/actions/decrypt/decryptValues.ts

@@ -34,10 +34,12 @@ export async function decryptValues(
   assertIsAddress(contractAddress, {});
   const sanitizedContractAddress = addressToChecksummedAddress(contractAddress);
 
+  const ownerAddress = addressToChecksummedAddress(parameters.signedPermit.encryptedDataOwnerAddress);
   const sanitizedPairs = encryptedValues.map((ev) => {
     return {
       handle: toFhevmHandle(ev),
       contractAddress: sanitizedContractAddress,
+      ownerAddress,
     };
   });
 
@@ -46,5 +48,5 @@ export async function decryptValues(
   return decryptValuesFromPairs_(f, {
     ...rest,
     pairs: sanitizedPairs,
-  } as Parameters<typeof decryptValuesFromPairs_>[1]);
+  });
 }

package/core/actions/decrypt/decryptValuesFromPairs.ts

@@ -33,11 +33,13 @@ export async function decryptValuesFromPairs(
 ): Promise<DecryptValuesFromPairsReturnType> {
   const { pairs, ...rest } = parameters;
 
+  const ownerAddress = addressToChecksummedAddress(parameters.signedPermit.encryptedDataOwnerAddress);
   const sanitizedPairs = pairs.map((pair) => {
     assertIsAddress(pair.contractAddress, {});
     return {
       handle: toFhevmHandle(pair.encryptedValue),
       contractAddress: addressToChecksummedAddress(pair.contractAddress),
+      ownerAddress,
     };
   });
 
@@ -46,5 +48,5 @@ export async function decryptValuesFromPairs(
   return decryptValuesFromPairs_(f, {
     ...rest,
     pairs: sanitizedPairs,
-  } as Parameters<typeof decryptValuesFromPairs_>[1]);
+  });
 }

package/core/actions/decrypt/index.ts

@@ -16,12 +16,6 @@ export { type DecryptValueParameters, type DecryptValueReturnType, decryptValue
 
 export { type DecryptValuesParameters, type DecryptValuesReturnType, decryptValues } from './decryptValues.js';
 
-export {
-  type DecryptKmsSigncryptedSharesParameters,
-  type DecryptKmsSigncryptedSharesReturnType,
-  decryptKmsSigncryptedShares,
-} from './decryptKmsSigncryptedShares.js';
-
 export {
   type CanDecryptValuesFromPairsWithUserAddressParameters,
   type CanDecryptValuesFromPairsWithPermitParameters,

package/core/actions/host/index.ts

@@ -10,24 +10,4 @@ export {
   isAllowedForDecryption,
 } from './isAllowedForDecryption.js';
 
-export { type ResolveChainIdParameters, type ResolveChainIdReturnType, resolveChainId } from './resolveChainId.js';
-
-export {
-  type ReadFhevmExecutorContractDataParameters,
-  type ReadFhevmExecutorContractDataReturnType,
-  readFhevmExecutorContractData,
-} from './readFhevmExecutorContractData.js';
-
-export {
-  type ReadKmsVerifierContractDataParameters,
-  type ReadKmsVerifierContractDataReturnType,
-  readKmsVerifierContractData,
-} from './readKmsVerifierContractData.js';
-
 export { type PersistAllowedParameters, type PersistAllowedReturnType, persistAllowed } from './persistAllowed.js';
-
-export {
-  type ReadInputVerifierContractDataParameters,
-  type ReadInputVerifierContractDataReturnType,
-  readInputVerifierContractData,
-} from './readInputVerifierContractData.js';

package/core/base/cachedFetch.ts

@@ -23,6 +23,7 @@ type CachedFetchOptions<TContext, TParams, TResult> = {
 };
 
 export const CACHE_TTL_24H = 24 * 60 * 60 * 1000; // 24 hours
+export const CACHE_TTL_15MIN = 15 * 1000; // 15 min
 
 /**
  * Creates a cached, deduplicating wrapper around an async fetch function.

package/core/base/uint.ts

@@ -23,7 +23,12 @@ import type {
   UintTypeName,
   ValueTypeName,
 } from '../types/primitives.js';
-import type { RecordWithPropertyType, RecordUintPropertyType, RecordUint256PropertyType } from '../types/record-p.js';
+import type {
+  RecordWithPropertyType,
+  RecordUintPropertyType,
+  RecordUint256PropertyType,
+  RecordUintNumberPropertyType,
+} from '../types/record-p.js';
 import type { ErrorMetadataParams } from './errors/ErrorBase.js';
 import { isRecordNonNullableProperty, typeofProperty } from './record.js';
 import { InvalidPropertyError } from './errors/InvalidPropertyError.js';
@@ -615,6 +620,18 @@ export function assertRecordUintProperty<K extends string>(
 
 ////////////////////////////////////////////////////////////////////////////////
 
+export function isRecordUintNumberProperty<K extends string>(
+  record: unknown,
+  property: K,
+): record is RecordUintNumberPropertyType<K> {
+  if (!isRecordNonNullableProperty(record, property)) {
+    return false;
+  }
+  return isUintNumber(record[property]);
+}
+
+////////////////////////////////////////////////////////////////////////////////
+
 export function isRecordUint256Property<K extends string>(
   record: unknown,
   property: K,