@fhevm/sdk 1.1.0-alpha.6 → 1.1.0-alpha.7

package/_esm/core/kms/SignedDecryptionPermitV1-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignedDecryptionPermitV1-p.js","sourceRoot":"","sources":["../../../core/kms/SignedDecryptionPermitV1-p.ts"],"names":[],"mappings":";;;;;;;;;;;;AAcA,OAAO,EAAE,4BAA4B,EAAE,MAAM,oDAAoD,CAAC;AAClG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6DAA6D,CAAC;AACpH,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAC/G,OAAO,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjH,OAAO,EACL,uCAAuC,EACvC,qCAAqC,GACtC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAyB,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,gFAAgF;AAEhF,MAAM,aAAa,GAAG,MAAM,CAAC,gCAAgC,CAAC,CAAC;AAC/D,MAAM,8BAA8B,GAAG,GAAiB,CAAC;AACzD,MAAM,mCAAmC,GAAG,EAAiB,CAAC;AAE9D,gFAAgF;AAEhF,SAAS,iCAAiC,CACxC,EACE,cAAc,EACd,YAAY,GAIb,EACD,eAA2B;IAE3B,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,CAAC,yCAAyC,eAAe,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAEpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,oBAAoB,GAAG,gBAAgB,EAAE,CAAC;QAC5C,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACpE,IAAI,oBAAoB,GAAG,iBAAiB,GAAG,gBAAgB,EAAE,CAAC;QAChE,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,4BAA4B;IAKhC,YACE,YAAoB,EACpB,UAIC;QAVM,uDAAkE;QAClE,0DAAuB;QACvB,8DAAmC;QA8B5B;;;;mBAAU,CAAU;WAAC;QApBnC,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,uBAAA,IAAI,wCAAW,UAAU,CAAC,MAAM,MAAA,CAAC;QACjC,uBAAA,IAAI,2CAAc,UAAU,CAAC,SAAS,MAAA,CAAC;QACvC,uBAAA,IAAI,+CAAkB,UAAU,CAAC,aAAa,MAAA,CAAC;IACjD,CAAC;IAED,IAAW,MAAM;QACf,OAAO,uBAAA,IAAI,4CAAQ,CAAC;IACtB,CAAC;IAED,IAAW,SAAS;QAClB,OAAO,uBAAA,IAAI,+CAAW,CAAC;IACzB,CAAC;IAED,IAAW,aAAa;QACtB,OAAO,uBAAA,IAAI,mDAAe,CAAC;IAC7B,CAAC;IAIM,gBAAgB;QACrB,iCAAiC,CAAC,uBAAA,IAAI,4CAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IAC1F,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,uBAAuB,CAAC,iBAAoC;QACjE,MAAM,iBAAiB,GAAG,4BAA4B,CAAC,iBAAiB,CAAC,CAAC;QAC1E,IAAI,iBAAiB,KAAK,uBAAA,IAAI,4CAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,8BAA8B,uBAAA,IAAI,4CAAQ,CAAC,OAAO,CAAC,SAAS,8BAA8B,iBAAiB,2BAA2B,CACvI,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAW,kBAAkB;QAC3B,OAAO,uBAAA,IAAI,4CAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;IACxC,CAAC;IAED,IAAW,YAAY;QACrB,OAAO,gBAAgB,CAAC,uBAAA,IAAI,4CAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC;IACvE,CAAC;IAED,IAAW,UAAU;QACnB,OAAO,gBAAgB,CAAC,uBAAA,IAAI,4CAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC;IACrE,CAAC;IAED,IAAW,yBAAyB;QAClC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,yCAAyC,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,IAAW,WAAW;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,yCAAyC,CAAC;IAC/E,CAAC;CACF;;AAED,gFAAgF;AAEhF,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC;AAEtD,gFAAgF;AAEhF,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,KAAK,YAAY,4BAA4B,CAAC;AACvD,CAAC;AAED,gFAAgF;AAChF,kCAAkC;AAClC,gFAAgF;AAEhF,KAAK,UAAU,+BAA+B,CAC5C,OAAuE,EACvE,UAIC;IAED,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;IAExD,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,mCAAmC,EAAE,CAAC;QAClF,MAAM,KAAK,CAAC,mCAAmC,mCAAmC,WAAW,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,8BAA8B,EAAE,CAAC;QACzE,MAAM,KAAK,CAAC,yCAAyC,8BAA8B,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,KAAK,gCAAgC,EAAE,CAAC;QAC5D,MAAM,4BAA4B,CAAC,OAAO,EAAE;YAC1C,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS;SACV,CAAC,CAAC;QACH,OAAO,IAAI,4BAA4B,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,MAAM,qCAAqC,CAAC,OAAO,EAAE;YACnD,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS;SACV,CAAC,CAAC;QACH,OAAO,IAAI,4BAA4B,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAoC,EACpC,UAA0C;IAE1C,MAAM,iBAAiB,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE;QAC7D,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;QAC3F,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,OAAyC;KAC/G,CAAC,CAAC;IAEH,MAAM,SAAS,GAAa,4BAA4B,CAAC,iBAAiB,CAAC,CAAC;IAE5E,MAAM,EACJ,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,aAAa,EAAE,gBAAgB,EAC/B,gBAAgB,EAAE,gBAAgB,EAClC,MAAM,EACN,gBAAgB,GACjB,GAAG,UAAU,CAAC;IAEf,IAAI,eAAe,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,2EAA2E,eAAe,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,YAAY,GAAG,eAAe,GAAG,MAAM,CAAC;IAE9C,wBAAwB,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC/C,eAAe,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAEtC,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,eAAe,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,gBAAgB,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CACb,wDAAwD;gBACtD,wDAAwD,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,2BAA2B,CAAC,gBAAgB,CAAC,CAAC;IAEpE,MAAM,aAAa,GAAG;QACpB,kCAAkC,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAA6B;QAClH,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,iBAAiB;QACjB,YAAY;QACZ,cAAc;QACd,SAAS;QACT,SAAS,EAAE,gBAAgB,CAAC,SAAS;KACtC,CAAC;IAEF,MAAM,MAAM,GACV,gBAAgB,KAAK,SAAS;QAC5B,CAAC,CAAC,qCAAqC,CAAC;YACpC,GAAG,aAAa;YAChB,gBAAgB;SACjB,CAAC;QACJ,CAAC,CAAC,4BAA4B,CAAC,aAAa,CAAC,CAAC;IAElD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE;QACrE,OAAO,EAAE,aAAa;QACtB,GAAG,MAAM;KACV,CAAC,CAAC;IAEH,OAAO,MAAM,+BAA+B,CAAC,OAAO,EAAE;QACpD,SAAS;QACT,aAAa;QACb,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAoC,EACpC,gBAAkC,EAClC,MAAe;IAEf,wBAAwB,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAG,QAAQ,CAAC;IAC5B,MAAM,OAAO,GAAG,EAAE,CAAC;IAEnB,+BAA+B,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACvE,8BAA8B,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACzE,2BAA2B,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,0BAA0B,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,UAAU,SAAS,EAAE,OAAO,CAAC,CAAC;IACnF,MAAM,WAAW,GAAI,MAAkC,CAAC,WAAW,CAAC;IAEpE,MAAM,aAAa,GAAG,2BAA2B,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAExE,IAAI,WAAW,KAAK,gCAAgC,EAAE,CAAC;QACrD,8BAA8B,CAAC,MAAM,EAAE,GAAG,UAAU,SAAS,EAAE,OAAO,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CACb,0EAA0E;gBACxE,sDAAsD,CACzD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,+BAA+B,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAChH,CAAC;SAAM,IAAI,WAAW,KAAK,yCAAyC,EAAE,CAAC;QACrE,uCAAuC,CAAC,MAAM,EAAE,GAAG,UAAU,SAAS,EAAE,OAAO,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CACb,0EAA0E;gBACxE,sDAAsD,CACzD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,+BAA+B,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAChH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC"}

package/_esm/core/kms/SignedDecryptionPermitV2-p.js

@@ -0,0 +1,204 @@
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _SignedDecryptionPermitV2Impl_eip712, _SignedDecryptionPermitV2Impl_signature, _SignedDecryptionPermitV2Impl_signerAddress, _SignedDecryptionPermitV2Impl_delegatorAddress;
+import { assertRecordNonNullableProperty } from '../base/record.js';
+import { assertRecordBytes65HexProperty } from '../base/bytes.js';
+import { addressToChecksummedAddress, assertIsAddress, assertRecordAddressProperty } from '../base/address.js';
+import { assertRecordStringProperty } from '../base/string.js';
+import { assertIsTransportKeyPair } from './TransportKeyPair-p.js';
+import { readKmsSignersContext } from '../host-contracts/readKmsSignersContext-p.js';
+import { kmsSignersContextToExtraData } from '../host-contracts/KmsSignersContext-p.js';
+import { EXTRA_DATA_V2, fromKmsExtraData } from './kmsExtraData.js';
+import { assertIsKmsUserDecryptEip712V2, createKmsUserDecryptEip712V2 } from './createKmsUserDecryptEip712V2.js';
+import { verifyKmsUserDecryptEip712V2 } from '../utils-p/decrypt/verifyKmsUserDecryptEip712V2.js';
+import { assert } from '../base/errors/InternalError.js';
+////////////////////////////////////////////////////////////////////////////////
+const PRIVATE_TOKEN = Symbol('SignedDecryptionPermitV2.token');
+const MAX_USER_DECRYPT_CONTRACT_ADDRESSES = 10;
+////////////////////////////////////////////////////////////////////////////////
+function assertKmsEip712V2DeadlineValidity({ startTimestamp, durationSeconds, }) {
+    if (durationSeconds === 0) {
+        throw Error('durationSeconds is zero');
+    }
+    const durationSecBigInt = BigInt(durationSeconds);
+    const startTimestampBigInt = BigInt(startTimestamp);
+    const currentTimestamp = BigInt(Math.floor(Date.now() / 1000));
+    if (startTimestampBigInt > currentTimestamp) {
+        throw Error('startTimestamp is set in the future');
+    }
+    if (startTimestampBigInt + durationSecBigInt < currentTimestamp) {
+        throw Error('request has expired');
+    }
+}
+////////////////////////////////////////////////////////////////////////////////
+// SignedDecryptionPermitV2Impl
+////////////////////////////////////////////////////////////////////////////////
+class SignedDecryptionPermitV2Impl {
+    constructor(privateToken, parameters) {
+        _SignedDecryptionPermitV2Impl_eip712.set(this, void 0);
+        _SignedDecryptionPermitV2Impl_signature.set(this, void 0);
+        _SignedDecryptionPermitV2Impl_signerAddress.set(this, void 0);
+        _SignedDecryptionPermitV2Impl_delegatorAddress.set(this, void 0);
+        Object.defineProperty(this, "version", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 2
+        });
+        if (privateToken !== PRIVATE_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        __classPrivateFieldSet(this, _SignedDecryptionPermitV2Impl_eip712, parameters.eip712, "f");
+        __classPrivateFieldSet(this, _SignedDecryptionPermitV2Impl_signature, parameters.signature, "f");
+        __classPrivateFieldSet(this, _SignedDecryptionPermitV2Impl_signerAddress, parameters.signerAddress, "f");
+        __classPrivateFieldSet(this, _SignedDecryptionPermitV2Impl_delegatorAddress, parameters.delegatorAddress, "f");
+    }
+    get eip712() {
+        return __classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_eip712, "f");
+    }
+    get signature() {
+        return __classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_signature, "f");
+    }
+    get signerAddress() {
+        return __classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_signerAddress, "f");
+    }
+    get encryptedDataOwnerAddress() {
+        return __classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_delegatorAddress, "f") ?? __classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_signerAddress, "f");
+    }
+    get isDelegated() {
+        return __classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_delegatorAddress, "f") !== undefined;
+    }
+    get transportPublicKey() {
+        return __classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_eip712, "f").message.publicKey;
+    }
+    assertNotExpired() {
+        const { startTimestamp, durationSeconds } = __classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_eip712, "f").message;
+        assertKmsEip712V2DeadlineValidity({ startTimestamp, durationSeconds });
+    }
+    assertMatchesKmsContext(kmsSignersContext) {
+        const expectedExtraData = kmsSignersContextToExtraData(kmsSignersContext);
+        if (expectedExtraData !== __classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_eip712, "f").message.extraData) {
+            throw new Error(`Invalid permit: extraData "${__classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_eip712, "f").message.extraData}" does not match expected "${expectedExtraData}" from KmsSignersContext.`);
+        }
+    }
+    get kmsContextId() {
+        return fromKmsExtraData(__classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_eip712, "f").message.extraData).kmsContextId;
+    }
+    get kmsEpochId() {
+        return fromKmsExtraData(__classPrivateFieldGet(this, _SignedDecryptionPermitV2Impl_eip712, "f").message.extraData).kmsEpochId;
+    }
+}
+_SignedDecryptionPermitV2Impl_eip712 = new WeakMap(), _SignedDecryptionPermitV2Impl_signature = new WeakMap(), _SignedDecryptionPermitV2Impl_signerAddress = new WeakMap(), _SignedDecryptionPermitV2Impl_delegatorAddress = new WeakMap();
+////////////////////////////////////////////////////////////////////////////////
+Object.freeze(SignedDecryptionPermitV2Impl);
+Object.freeze(SignedDecryptionPermitV2Impl.prototype);
+////////////////////////////////////////////////////////////////////////////////
+export function isSignedDecryptionPermitV2(value) {
+    return value instanceof SignedDecryptionPermitV2Impl;
+}
+////////////////////////////////////////////////////////////////////////////////
+// _createSignedDecryptionPermitV2
+////////////////////////////////////////////////////////////////////////////////
+async function _createSignedDecryptionPermitV2(context, parameters) {
+    const { signerAddress, eip712, signature } = parameters;
+    if (eip712.message.allowedContracts.length > MAX_USER_DECRYPT_CONTRACT_ADDRESSES) {
+        throw Error(`allowedContracts max length of ${MAX_USER_DECRYPT_CONTRACT_ADDRESSES} exceeded`);
+    }
+    await verifyKmsUserDecryptEip712V2(context, { signer: signerAddress, message: eip712.message, signature });
+    return new SignedDecryptionPermitV2Impl(PRIVATE_TOKEN, parameters);
+}
+////////////////////////////////////////////////////////////////////////////////
+// signDecryptionPermitV2
+////////////////////////////////////////////////////////////////////////////////
+export async function signDecryptionPermitV2(context, parameters) {
+    const kmsSignersContext = await readKmsSignersContext(context, {
+        kmsVerifierAddress: context.chain.fhevm.contracts.kmsVerifier.address,
+        protocolConfigAddress: context.chain.fhevm.contracts.protocolConfig?.address,
+    });
+    const extraData = kmsSignersContextToExtraData(kmsSignersContext);
+    // For debug purpose only:
+    // -----------------------
+    // In theory, it should not be possible to produce a unified eip712 (protocol v14+)
+    // with an extraData coming from an old protocol v11/12/13
+    assert(fromKmsExtraData(extraData).version >= EXTRA_DATA_V2, `signDecryptionPermitV2 error: Invalid extraData version extraData=${extraData}`);
+    const { contractAddresses, startTimestamp, durationSeconds: durationSecondsParam, signerAddress: signerAddressArg, transportKeyPair: transportKeyPair, signer, delegatorAddress: delegatorAddressArg, } = parameters;
+    if (durationSecondsParam <= 0) {
+        throw new RangeError(`durationSeconds must be positive, got ${durationSecondsParam}`);
+    }
+    const MAX_DURATION_SECONDS = 604800n; // 7 days in seconds
+    const durationSeconds = BigInt(durationSecondsParam);
+    // RFC-016: warn when permissive mode (allowedContracts=[]) is combined with a long-lived permit —
+    // a stolen signature can decrypt anything the user owns until it expires or is invalidated.
+    if (contractAddresses.length === 0 && durationSeconds > MAX_DURATION_SECONDS) {
+        const msg = `permissive mode (allowedContracts=[]) with durationSeconds ${durationSeconds} exceeds the recommended maximum of ${MAX_DURATION_SECONDS}s — consider using a shorter window or app-bounded allowedContracts`;
+        const logger = context.runtime.config.logger;
+        logger?.warn?.(msg);
+    }
+    assertIsTransportKeyPair(transportKeyPair, {});
+    assertIsAddress(signerAddressArg, {});
+    const signerAddress = addressToChecksummedAddress(signerAddressArg);
+    let delegatorAddress;
+    if (delegatorAddressArg !== undefined) {
+        assertIsAddress(delegatorAddressArg, {});
+        delegatorAddress = addressToChecksummedAddress(delegatorAddressArg);
+    }
+    // RFC-016: round startTimestamp down to the nearest minute. This absorbs small clock skew
+    // and prevents a future-dated startTimestamp from bypassing signature invalidation
+    // (a future start would survive an invalidateDecryptionSignaturesBefore(block.timestamp) call).
+    const roundedStartTimestamp = Math.floor(startTimestamp / 60) * 60;
+    const commonMessage = {
+        verifyingContractAddressDecryption: context.chain.fhevm.gateway.contracts.decryption.address,
+        chainId: context.chain.id,
+        userAddress: signerAddress, // identity asserting authorization
+        allowedContracts: contractAddresses, // [] = permissive, [...] = specific
+        durationSeconds,
+        startTimestamp: roundedStartTimestamp,
+        extraData,
+        publicKey: transportKeyPair.publicKey,
+    };
+    const eip712 = createKmsUserDecryptEip712V2(commonMessage);
+    const signature = await context.runtime.ethereum.signTypedData(signer, {
+        account: signerAddress,
+        ...eip712,
+    });
+    return await _createSignedDecryptionPermitV2(context, {
+        signature,
+        signerAddress,
+        eip712,
+        delegatorAddress,
+    });
+}
+////////////////////////////////////////////////////////////////////////////////
+// parseSignedDecryptionPermitV2
+////////////////////////////////////////////////////////////////////////////////
+export async function parseSignedDecryptionPermitV2(context, transportKeyPair, permit) {
+    assertIsTransportKeyPair(transportKeyPair, {});
+    const permitName = 'permit';
+    const options = {};
+    assertRecordNonNullableProperty(permit, 'eip712', permitName, options);
+    assertRecordBytes65HexProperty(permit, 'signature', permitName, options);
+    assertRecordAddressProperty(permit, 'signerAddress', permitName, options);
+    const eip712 = permit.eip712;
+    assertRecordStringProperty(eip712, 'primaryType', `${permitName}.eip712`, options);
+    const primaryType = eip712.primaryType;
+    if (primaryType !== 'UserDecryptRequestVerification') {
+        throw new Error(`Expected primaryType 'UserDecryptRequestVerification' for V2 permit, got: ${primaryType}`);
+    }
+    assertIsKmsUserDecryptEip712V2(eip712, `${permitName}.eip712`, options);
+    const signerAddress = addressToChecksummedAddress(permit.signerAddress);
+    if (eip712.message.publicKey.toLowerCase() !== transportKeyPair.publicKey.toLowerCase()) {
+        throw new Error("The permit's publicKey does not match the TransportKeyPair's publicKey. " +
+            'Ensure the permit was signed with the same key pair.');
+    }
+    return await _createSignedDecryptionPermitV2(context, { signature: permit.signature, eip712, signerAddress });
+}
+//# sourceMappingURL=SignedDecryptionPermitV2-p.js.map

package/_esm/core/kms/SignedDecryptionPermitV2-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignedDecryptionPermitV2-p.js","sourceRoot":"","sources":["../../../core/kms/SignedDecryptionPermitV2-p.ts"],"names":[],"mappings":";;;;;;;;;;;;AAOA,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAC/G,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAyB,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjH,OAAO,EAAE,4BAA4B,EAAE,MAAM,oDAAoD,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAEzD,gFAAgF;AAEhF,MAAM,aAAa,GAAG,MAAM,CAAC,gCAAgC,CAAC,CAAC;AAC/D,MAAM,mCAAmC,GAAG,EAAiB,CAAC;AAE9D,gFAAgF;AAEhF,SAAS,iCAAiC,CAAC,EACzC,cAAc,EACd,eAAe,GAIhB;IACC,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,oBAAoB,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAEpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,oBAAoB,GAAG,gBAAgB,EAAE,CAAC;QAC5C,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,oBAAoB,GAAG,iBAAiB,GAAG,gBAAgB,EAAE,CAAC;QAChE,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAEhF,MAAM,4BAA4B;IAMhC,YACE,YAAoB,EACpB,UAKC;QAZM,uDAAgC;QAChC,0DAAuB;QACvB,8DAAmC;QACnC,iEAAkD;QAgC3C;;;;mBAAU,CAAU;WAAC;QArBnC,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,uBAAA,IAAI,wCAAW,UAAU,CAAC,MAAM,MAAA,CAAC;QACjC,uBAAA,IAAI,2CAAc,UAAU,CAAC,SAAS,MAAA,CAAC;QACvC,uBAAA,IAAI,+CAAkB,UAAU,CAAC,aAAa,MAAA,CAAC;QAC/C,uBAAA,IAAI,kDAAqB,UAAU,CAAC,gBAAgB,MAAA,CAAC;IACvD,CAAC;IAED,IAAW,MAAM;QACf,OAAO,uBAAA,IAAI,4CAAQ,CAAC;IACtB,CAAC;IAED,IAAW,SAAS;QAClB,OAAO,uBAAA,IAAI,+CAAW,CAAC;IACzB,CAAC;IAED,IAAW,aAAa;QACtB,OAAO,uBAAA,IAAI,mDAAe,CAAC;IAC7B,CAAC;IAID,IAAW,yBAAyB;QAClC,OAAO,uBAAA,IAAI,sDAAkB,IAAI,uBAAA,IAAI,mDAAe,CAAC;IACvD,CAAC;IAED,IAAW,WAAW;QACpB,OAAO,uBAAA,IAAI,sDAAkB,KAAK,SAAS,CAAC;IAC9C,CAAC;IAED,IAAW,kBAAkB;QAC3B,OAAO,uBAAA,IAAI,4CAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;IACxC,CAAC;IAEM,gBAAgB;QACrB,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,uBAAA,IAAI,4CAAQ,CAAC,OAAO,CAAC;QACjE,iCAAiC,CAAC,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC;IACzE,CAAC;IAEM,uBAAuB,CAAC,iBAAoC;QACjE,MAAM,iBAAiB,GAAG,4BAA4B,CAAC,iBAAiB,CAAC,CAAC;QAC1E,IAAI,iBAAiB,KAAK,uBAAA,IAAI,4CAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,8BAA8B,uBAAA,IAAI,4CAAQ,CAAC,OAAO,CAAC,SAAS,8BAA8B,iBAAiB,2BAA2B,CACvI,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAW,YAAY;QACrB,OAAO,gBAAgB,CAAC,uBAAA,IAAI,4CAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC;IACvE,CAAC;IAED,IAAW,UAAU;QACnB,OAAO,gBAAgB,CAAC,uBAAA,IAAI,4CAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC;IACrE,CAAC;CACF;;AAED,gFAAgF;AAEhF,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC;AAEtD,gFAAgF;AAEhF,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,KAAK,YAAY,4BAA4B,CAAC;AACvD,CAAC;AAED,gFAAgF;AAChF,kCAAkC;AAClC,gFAAgF;AAEhF,KAAK,UAAU,+BAA+B,CAC5C,OAAuE,EACvE,UAKC;IAED,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;IAExD,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,mCAAmC,EAAE,CAAC;QACjF,MAAM,KAAK,CAAC,kCAAkC,mCAAmC,WAAW,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,4BAA4B,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAE3G,OAAO,IAAI,4BAA4B,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;AACrE,CAAC;AAED,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAoC,EACpC,UAA0C;IAE1C,MAAM,iBAAiB,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE;QAC7D,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;QAC3F,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,OAAyC;KAC/G,CAAC,CAAC;IAEH,MAAM,SAAS,GAAa,4BAA4B,CAAC,iBAAiB,CAAC,CAAC;IAE5E,0BAA0B;IAC1B,0BAA0B;IAC1B,mFAAmF;IACnF,0DAA0D;IAC1D,MAAM,CACJ,gBAAgB,CAAC,SAAS,CAAC,CAAC,OAAO,IAAI,aAAa,EACpD,qEAAqE,SAAS,EAAE,CACjF,CAAC;IAEF,MAAM,EACJ,iBAAiB,EACjB,cAAc,EACd,eAAe,EAAE,oBAAoB,EACrC,aAAa,EAAE,gBAAgB,EAC/B,gBAAgB,EAAE,gBAAgB,EAClC,MAAM,EACN,gBAAgB,EAAE,mBAAmB,GACtC,GAAG,UAAU,CAAC;IAEf,IAAI,oBAAoB,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAAC,yCAAyC,oBAAoB,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,oBAAoB,GAAG,OAAQ,CAAC,CAAC,oBAAoB;IAC3D,MAAM,eAAe,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAErD,kGAAkG;IAClG,4FAA4F;IAC5F,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,GAAG,oBAAoB,EAAE,CAAC;QAC7E,MAAM,GAAG,GAAG,8DAA8D,eAAe,uCAAuC,oBAAoB,qEAAqE,CAAC;QAC1N,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7C,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,wBAAwB,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC/C,eAAe,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAEtC,MAAM,aAAa,GAAG,2BAA2B,CAAC,gBAAgB,CAAC,CAAC;IAEpE,IAAI,gBAAgD,CAAC;IACrD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,eAAe,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACzC,gBAAgB,GAAG,2BAA2B,CAAC,mBAAmB,CAAC,CAAC;IACtE,CAAC;IAED,0FAA0F;IAC1F,mFAAmF;IACnF,gGAAgG;IAChG,MAAM,qBAAqB,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IAEnE,MAAM,aAAa,GAAG;QACpB,kCAAkC,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAA6B;QAClH,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,WAAW,EAAE,aAAa,EAAE,mCAAmC;QAC/D,gBAAgB,EAAE,iBAAiB,EAAE,oCAAoC;QACzE,eAAe;QACf,cAAc,EAAE,qBAAqB;QACrC,SAAS;QACT,SAAS,EAAE,gBAAgB,CAAC,SAAS;KACtC,CAAC;IAEF,MAAM,MAAM,GAAG,4BAA4B,CAAC,aAAa,CAAC,CAAC;IAE3D,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE;QACrE,OAAO,EAAE,aAAa;QACtB,GAAG,MAAM;KACV,CAAC,CAAC;IAEH,OAAO,MAAM,+BAA+B,CAAC,OAAO,EAAE;QACpD,SAAS;QACT,aAAa;QACb,MAAM;QACN,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAoC,EACpC,gBAAkC,EAClC,MAAe;IAEf,wBAAwB,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAG,QAAQ,CAAC;IAC5B,MAAM,OAAO,GAAG,EAAE,CAAC;IAEnB,+BAA+B,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACvE,8BAA8B,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACzE,2BAA2B,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,0BAA0B,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,UAAU,SAAS,EAAE,OAAO,CAAC,CAAC;IACnF,MAAM,WAAW,GAAI,MAAkC,CAAC,WAAW,CAAC;IAEpE,IAAI,WAAW,KAAK,gCAAgC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,6EAA6E,WAAW,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,8BAA8B,CAAC,MAAM,EAAE,GAAG,UAAU,SAAS,EAAE,OAAO,CAAC,CAAC;IAExE,MAAM,aAAa,GAAG,2BAA2B,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAExE,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,sDAAsD,CACzD,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,+BAA+B,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAChH,CAAC"}

package/_esm/core/kms/{createKmsDelegatedUserDecryptEip712.js → createKmsDelegatedUserDecryptEip712V1.js}

@@ -3,13 +3,13 @@ import { asBytesHex, assertIsBytesHex, bytesToHexLarge } from '../base/bytes.js'
 import { ensure0x } from '../base/string.js';
 import { assertIsUintNumber } from '../base/uint.js';
 import { createKmsEip712Domain } from './createKmsEip712Domain.js';
-import { _assertIsKmsUserDecryptEip712Base } from './createKmsUserDecryptEip712.js';
-import { kmsDelegatedUserDecryptEip712Types } from './kmsDelegatedUserDecryptEip712Types.js';
+import { _assertIsKmsUserDecryptEip712V1Base } from './createKmsUserDecryptEip712V1.js';
+import { kmsDelegatedUserDecryptEip712V1Types } from './kmsDelegatedUserDecryptEip712V1Types.js';
 import { assertIsKmsExtraData } from './kmsExtraData.js';
 ////////////////////////////////////////////////////////////////////////////////
-// createKmsDelegatedUserDecryptEip712
+// createKmsDelegatedUserDecryptEip712V1
 ////////////////////////////////////////////////////////////////////////////////
-export function createKmsDelegatedUserDecryptEip712(parameters) {
+export function createKmsDelegatedUserDecryptEip712V1(parameters) {
     const { verifyingContractAddressDecryption, chainId, publicKey, contractAddresses, startTimestamp, durationDays, extraData, delegatorAddress, } = parameters;
     const publicKeyBytesHex = _verifyPublicKeyArg(publicKey);
     assertIsAddressArray(contractAddresses, {});
@@ -26,7 +26,7 @@ export function createKmsDelegatedUserDecryptEip712(parameters) {
         verifyingContractAddressDecryption,
     });
     const eip712 = {
-        types: kmsDelegatedUserDecryptEip712Types,
+        types: kmsDelegatedUserDecryptEip712V1Types,
         primaryType,
         domain,
         message: {
@@ -48,8 +48,8 @@ export function createKmsDelegatedUserDecryptEip712(parameters) {
     return eip712;
 }
 ////////////////////////////////////////////////////////////////////////////////
-export function assertIsKmsDelegatedUserDecryptEip712(value, name, options) {
-    _assertIsKmsUserDecryptEip712Base(value, name, 'DelegatedUserDecryptRequestVerification', options);
+export function assertIsKmsDelegatedUserDecryptEip712V1(value, name, options) {
+    _assertIsKmsUserDecryptEip712V1Base(value, name, 'DelegatedUserDecryptRequestVerification', options);
     assertRecordChecksummedAddressProperty(value.message, 'delegatorAddress', `${name}.message`, options);
 }
 ////////////////////////////////////////////////////////////////////////////////
@@ -70,4 +70,4 @@ function _verifyPublicKeyArg(value) {
     }
     return publicKeyBytesHex;
 }
-//# sourceMappingURL=createKmsDelegatedUserDecryptEip712.js.map
+//# sourceMappingURL=createKmsDelegatedUserDecryptEip712V1.js.map

package/_esm/core/kms/createKmsDelegatedUserDecryptEip712V1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsDelegatedUserDecryptEip712V1.js","sourceRoot":"","sources":["../../../core/kms/createKmsDelegatedUserDecryptEip712V1.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,2BAA2B,EAC3B,eAAe,EACf,oBAAoB,EACpB,sCAAsC,GACvC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAezD,gFAAgF;AAChF,wCAAwC;AACxC,gFAAgF;AAEhF,MAAM,UAAU,qCAAqC,CACnD,UAA2D;IAE3D,MAAM,EACJ,kCAAkC,EAClC,OAAO,EACP,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,SAAS,EACT,gBAAgB,GACjB,GAAG,UAAU,CAAC;IACf,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEzD,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC5C,kBAAkB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACvC,kBAAkB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACrC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAChC,eAAe,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACtC,oBAAoB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEpC,MAAM,4BAA4B,GAAG,iBAAiB,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAExF,MAAM,2BAA2B,GAAG,2BAA2B,CAAC,gBAAgB,CAAC,CAAC;IAElF,MAAM,WAAW,GAAmD,yCAAyC,CAAC;IAE9G,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACnC,OAAO;QACP,kCAAkC;KACnC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAoC;QAC9C,KAAK,EAAE,oCAAoC;QAC3C,WAAW;QACX,MAAM;QACN,OAAO,EAAE;YACP,SAAS,EAAE,iBAAiB;YAC5B,iBAAiB,EAAE,4BAA4B;YAC/C,gBAAgB,EAAE,2BAA2B;YAC7C,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;YACzC,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;YACrC,SAAS;SACV;KACF,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACpE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEhD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,uCAAuC,CACrD,KAAc,EACd,IAAY,EACZ,OAA4B;IAE5B,mCAAmC,CACjC,KAAK,EACL,IAAI,EACJ,yCAAkG,EAClG,OAAO,CACR,CAAC;IAEF,sCAAsC,CACpC,KAAK,CAAC,OAAO,EACb,kBAA6E,EAC7E,GAAG,IAAI,UAAU,EACjB,OAAO,CACR,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,iBAA2B,CAAC;IAEhC,MAAM,EAAE,GAAG,KAAK,CAAC;IAEjB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3B,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,EAAE,YAAY,UAAU,EAAE,CAAC;QACpC,iBAAiB,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/_esm/core/kms/createKmsPublicDecryptEip712.js

@@ -3,7 +3,7 @@ import { createKmsEip712Domain } from './createKmsEip712Domain.js';
 import { kmsPublicDecryptEip712Types } from './kmsPublicDecryptEip712Types.js';
 import { assertIsHandle } from '../handle/FhevmHandle.js';
 ////////////////////////////////////////////////////////////////////////////////
-// createKmsPublicDecryptEIP712
+// createKmsPublicDecryptEip712
 ////////////////////////////////////////////////////////////////////////////////
 export function createKmsPublicDecryptEip712(parameters) {
     const { verifyingContractAddressDecryption, chainId, handles, decryptedResult, extraData } = parameters;

package/_esm/core/kms/{createKmsUserDecryptEip712.js → createKmsUserDecryptEip712V1.js}

@@ -5,13 +5,13 @@ import { assertRecordNonNullableProperty } from '../base/record.js';
 import { assertRecordStringProperty, ensure0x } from '../base/string.js';
 import { assertIsUint64, assertIsUintNumber } from '../base/uint.js';
 import { assertIsKmsExtraData } from './kmsExtraData.js';
-import { kmsUserDecryptEip712Types } from './kmsUserDecryptEip712Types.js';
+import { kmsUserDecryptEip712V1Types } from './kmsUserDecryptEip712V1Types.js';
+import { kmsDelegatedUserDecryptEip712V1Types } from './kmsDelegatedUserDecryptEip712V1Types.js';
 import { isDeepEqual } from '../base/object.js';
-import { kmsDelegatedUserDecryptEip712Types } from './kmsDelegatedUserDecryptEip712Types.js';
 ////////////////////////////////////////////////////////////////////////////////
-// createKmsUserDecryptEip712
+// createKmsUserDecryptEip712V1
 ////////////////////////////////////////////////////////////////////////////////
-export function createKmsUserDecryptEip712(parameters) {
+export function createKmsUserDecryptEip712V1(parameters) {
     const { verifyingContractAddressDecryption, chainId, publicKey, contractAddresses, startTimestamp, durationDays, extraData, } = parameters;
     const publicKeyBytesHex = _verifyPublicKeyArg(publicKey);
     assertIsUint64(chainId, {});
@@ -29,7 +29,7 @@ export function createKmsUserDecryptEip712(parameters) {
     });
     const eip712 = {
         domain,
-        types: kmsUserDecryptEip712Types,
+        types: kmsUserDecryptEip712V1Types,
         primaryType,
         message: {
             publicKey: publicKeyBytesHex,
@@ -49,23 +49,23 @@ export function createKmsUserDecryptEip712(parameters) {
     return eip712;
 }
 ////////////////////////////////////////////////////////////////////////////////
-export function assertIsKmsUserDecryptEip712(value, name, options) {
-    _assertIsKmsUserDecryptEip712Base(value, name, 'UserDecryptRequestVerification', options);
+export function assertIsKmsUserDecryptEip712V1(value, name, options) {
+    _assertIsKmsUserDecryptEip712V1Base(value, name, 'UserDecryptRequestVerification', options);
 }
 /**
  * Validates the common structure shared by both
- * {@link KmsUserDecryptEip712} and {@link KmsDelegatedUserDecryptEIP712}:
+ * {@link KmsUserDecryptEip712V1} and {@link KmsDelegatedUserDecryptEip712V1}:
  * domain, types, primaryType, and base message fields.
  */
-export function _assertIsKmsUserDecryptEip712Base(value, name, primaryType, options) {
+export function _assertIsKmsUserDecryptEip712V1Base(value, name, primaryType, options) {
     assertRecordNonNullableProperty(value, 'domain', name, options);
     assertIsKmsEip712Domain(value.domain, `${name}.domain`, options);
     assertRecordNonNullableProperty(value, 'types', name, options);
     const expectedTypes = primaryType === 'DelegatedUserDecryptRequestVerification'
-        ? kmsDelegatedUserDecryptEip712Types
-        : kmsUserDecryptEip712Types;
+        ? kmsDelegatedUserDecryptEip712V1Types
+        : kmsUserDecryptEip712V1Types;
     if (!isDeepEqual(value.types, expectedTypes)) {
-        throw new Error('Unexpected KmsUserDecryptEip712Types');
+        throw new Error('Unexpected KmsUserDecryptEip712V1Types');
     }
     assertRecordStringProperty(value, 'primaryType', name, {
         expectedValue: primaryType,
@@ -73,13 +73,13 @@ export function _assertIsKmsUserDecryptEip712Base(value, name, primaryType, opti
     });
     assertRecordNonNullableProperty(value, 'message', name, options);
     const msg = value.message;
-    _assertIsKmsUserDecryptEip712Message(msg, `${name}.message`, options);
+    _assertIsKmsUserDecryptEip712V1Message(msg, `${name}.message`, options);
 }
 /**
  * Validates the common message fields shared by both
- * {@link KmsUserDecryptEip712} and {@link KmsDelegatedUserDecryptEIP712}.
+ * {@link KmsUserDecryptEip712V1} and {@link KmsDelegatedUserDecryptEip712V1}.
  */
-function _assertIsKmsUserDecryptEip712Message(msg, msgName, options) {
+function _assertIsKmsUserDecryptEip712V1Message(msg, msgName, options) {
     assertRecordBytesHexProperty(msg, 'publicKey', msgName, options);
     assertRecordChecksummedAddressArrayProperty(msg, 'contractAddresses', msgName, options);
     assertRecordStringProperty(msg, 'startTimestamp', msgName, options);
@@ -105,4 +105,4 @@ function _verifyPublicKeyArg(value) {
     }
     return publicKeyBytesHex;
 }
-//# sourceMappingURL=createKmsUserDecryptEip712.js.map
+//# sourceMappingURL=createKmsUserDecryptEip712V1.js.map

package/_esm/core/kms/createKmsUserDecryptEip712V1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsUserDecryptEip712V1.js","sourceRoot":"","sources":["../../../core/kms/createKmsUserDecryptEip712V1.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,2BAA2B,EAC3B,eAAe,EACf,oBAAoB,EACpB,2CAA2C,GAC5C,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC/G,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,oCAAoC,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAchD,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAEhF,MAAM,UAAU,4BAA4B,CAC1C,UAAkD;IAElD,MAAM,EACJ,kCAAkC,EAClC,OAAO,EACP,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,SAAS,GACV,GAAG,UAAU,CAAC;IACf,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEzD,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5B,eAAe,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IACxD,oBAAoB,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC5C,kBAAkB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACvC,kBAAkB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACrC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAChC,oBAAoB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEpC,MAAM,4BAA4B,GAAG,iBAAiB,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAExF,MAAM,WAAW,GAA0C,gCAAgC,CAAC;IAE5F,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACnC,OAAO;QACP,kCAAkC;KACnC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG;QACb,MAAM;QACN,KAAK,EAAE,2BAA2B;QAClC,WAAW;QACX,OAAO,EAAE;YACP,SAAS,EAAE,iBAAiB;YAC5B,iBAAiB,EAAE,4BAA4B;YAC/C,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;YACzC,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;YACrC,SAAS;SACV;KACF,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC3D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEhD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,8BAA8B,CAC5C,KAAc,EACd,IAAY,EACZ,OAA4B;IAE5B,mCAAmC,CACjC,KAAK,EACL,IAAI,EACJ,gCAAgF,EAChF,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAc,EACd,IAAY,EACZ,WAAmB,EACnB,OAA4B;IAO5B,+BAA+B,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,uBAAuB,CAAE,KAAiC,CAAC,MAAM,EAAE,GAAG,IAAI,SAAS,EAAE,OAAO,CAAC,CAAC;IAE9F,+BAA+B,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAE/D,MAAM,aAAa,GACjB,WAAW,KAAK,yCAAyC;QACvD,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,2BAA2B,CAAC;IAElC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,0BAA0B,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE;QACrD,aAAa,EAAE,WAAW;QAC1B,GAAG,OAAO;KACX,CAAC,CAAC;IAEH,+BAA+B,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,GAAG,GAAI,KAAiC,CAAC,OAAkC,CAAC;IAClF,sCAAsC,CAAC,GAAG,EAAE,GAAG,IAAI,UAAU,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,SAAS,sCAAsC,CAC7C,GAAY,EACZ,OAAe,EACf,OAA4B;IAG5B,4BAA4B,CAAC,GAAG,EAAE,WAAuC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7F,2CAA2C,CAAC,GAAG,EAAE,mBAA+C,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACpH,0BAA0B,CAAC,GAAG,EAAE,gBAA4C,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAChG,0BAA0B,CAAC,GAAG,EAAE,cAA0C,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9F,4BAA4B,CAAC,GAAG,EAAE,WAAuC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7F,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAEhF,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,iBAA2B,CAAC;IAEhC,MAAM,EAAE,GAAG,KAAK,CAAC;IAEjB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3B,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,EAAE,YAAY,UAAU,EAAE,CAAC;QACpC,iBAAiB,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/_esm/core/kms/decryptValuesFromPairs.js

@@ -1,10 +1,26 @@
 ////////////////////////////////////////////////////////////////////////////////
+import { isSemverStrictlyBefore } from '../base/semver.js';
+import { getResolvedProtocolVersion } from '../runtime/CoreFhevm-p.js';
 import { decryptKmsSigncryptedShares } from './decryptKmsSigncryptedShares-p.js';
-import { fetchKmsSigncryptedShares } from './fetchKmsSigncryptedShares-p.js';
+import { fetchKmsSigncryptedSharesV1 } from './fetchKmsSigncryptedSharesV1-p.js';
+import { fetchKmsSigncryptedSharesV2 } from './fetchKmsSigncryptedSharesV2-p.js';
 ////////////////////////////////////////////////////////////////////////////////
 export async function decryptValuesFromPairs(fhevm, parameters) {
     const { transportKeyPair: transportKeyPair } = parameters;
-    const kmsSigncryptedShares = await fetchKmsSigncryptedShares(fhevm, parameters);
+    const protocolVersion = getResolvedProtocolVersion(fhevm);
+    if (protocolVersion === undefined) {
+        throw new Error('Unable to resolve protocol version from context, ensure proper initialization of the FhevmRuntime and FhevmChain.');
+    }
+    let kmsSigncryptedShares;
+    if (isSemverStrictlyBefore(protocolVersion.version, '0.14.0')) {
+        kmsSigncryptedShares = await fetchKmsSigncryptedSharesV1(fhevm, parameters);
+    }
+    else {
+        kmsSigncryptedShares = await fetchKmsSigncryptedSharesV2(fhevm, {
+            ...parameters,
+            options: parameters.options,
+        });
+    }
     // Using the `KmsSigncryptedShares` decrypt and reconstruct clear values
     return decryptKmsSigncryptedShares(fhevm, {
         kmsSigncryptedShares,

package/_esm/core/kms/decryptValuesFromPairs.js.map

@@ -1 +1 @@
-{"version":3,"file":"decryptValuesFromPairs.js","sourceRoot":"","sources":["../../../core/kms/decryptValuesFromPairs.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAWhF,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAkC7E,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAc,EAAE,UAAsB;IACjF,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,UAAU,CAAC;IAE1D,MAAM,oBAAoB,GAAyB,MAAM,yBAAyB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAEtG,wEAAwE;IACxE,OAAO,2BAA2B,CAAC,KAAK,EAAE;QACxC,oBAAoB;QACpB,gBAAgB,EAAE,gBAAgB;KACnC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"decryptValuesFromPairs.js","sourceRoot":"","sources":["../../../core/kms/decryptValuesFromPairs.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAWhF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AA4BjF,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAc,EAAE,UAAsB;IACjF,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,UAAU,CAAC;IAE1D,MAAM,eAAe,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;IACJ,CAAC;IAED,IAAI,oBAA0C,CAAC;IAC/C,IAAI,sBAAsB,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC9D,oBAAoB,GAAG,MAAM,2BAA2B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,oBAAoB,GAAG,MAAM,2BAA2B,CAAC,KAAK,EAAE;YAC9D,GAAG,UAAU;YACb,OAAO,EAAE,UAAU,CAAC,OAAgD;SACrE,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,OAAO,2BAA2B,CAAC,KAAK,EAAE;QACxC,oBAAoB;QACpB,gBAAgB,EAAE,gBAAgB;KACnC,CAAC,CAAC;AACL,CAAC"}

package/_esm/core/kms/{fetchKmsSigncryptedShares-p.js → fetchKmsSigncryptedSharesV1-p.js}

@@ -1,7 +1,7 @@
 import { assertHandlesBelongToSameChainId } from '../handle/FhevmHandle.js';
-import { createKmsSigncryptedShares } from '../kms/KmsSigncryptedShares-p.js';
+import { createKmsSigncryptedShares } from './KmsSigncryptedShares-p.js';
 import { readKmsSignersContext } from '../host-contracts/readKmsSignersContext-p.js';
-import { assertIsSignedDecryptionPermit, assertPermitIncludesContractAddresses } from './SignedDecryptionPermit-p.js';
+import { assertIsSignedDecryptionPermit } from './SignedDecryptionPermit-p.js';
 import { assertKmsDecryptionBitLimit } from './utils.js';
 import { checkPersistAllowed } from '../host-contracts/checkPersistAllowed.js';
 import { assertExtraDataMatchesKmsSingersContext } from '../host-contracts/KmsSignersContext-p.js';
@@ -10,16 +10,29 @@ import { checkDelegation } from '../host-contracts/checkDelegation.js';
 import { resolveFhevmTkmsVersion } from '../runtime/resolveFhevmVersions-p.js';
 ////////////////////////////////////////////////////////////////////////////////
 const MAX_USER_DECRYPT_CONTRACT_ADDRESSES = 10;
+/**
+ * Asserts that every address in {@link contractAddresses} is listed in the
+ * permit's `contractAddresses` (case-insensitive comparison).
+ */
+export function assertPermitV1IncludesContractAddresses(permit, contractAddresses) {
+    const permitAddresses = permit.eip712.message.contractAddresses;
+    for (const address of contractAddresses) {
+        if (!permitAddresses.some((a) => a.toLowerCase() === address.toLowerCase())) {
+            throw Error(`contract address ${address} is not listed in the permit's contractAddresses`);
+        }
+    }
+}
 ////////////////////////////////////////////////////////////////////////////////
-// fetchKmsSigncryptedShares
+// fetchKmsSigncryptedSharesV1
 ////////////////////////////////////////////////////////////////////////////////
-export async function fetchKmsSigncryptedShares(context, parameters) {
-    const { signedPermit, options, pairs } = parameters;
+export async function fetchKmsSigncryptedSharesV1(context, parameters) {
+    const { options, pairs } = parameters;
+    const signedPermit = parameters.signedPermit;
     // This helper must support base clients, where TKMS is not mandatory
     // and tkmsVersion may not be initialized in the CoreFhevm instance yet.
     const tkmsVersion = await resolveFhevmTkmsVersion(context);
     // Check: every requested contractAddress is listed in the permit
-    assertPermitIncludesContractAddresses(signedPermit, pairs.map((p) => p.contractAddress));
+    assertPermitV1IncludesContractAddresses(signedPermit, pairs.map((p) => p.contractAddress));
     // Caller-provided options override runtime config defaults (e.g. auth)
     const relayerOptions = {
         auth: context.runtime.config.auth,
@@ -51,7 +64,7 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
     // 6. Check: Expiration date
     signedPermit.assertNotExpired();
     // 7. Check: ACL permissions (user is signer or delegatorAddress)
-    if (signedPermit.isDelegated) {
+    if (signedPermit.eip712.primaryType === 'DelegatedUserDecryptRequestVerification') {
         await checkDelegation(context, {
             aclAddress: context.chain.fhevm.contracts.acl.address,
             delegate: signerAddress,
@@ -66,7 +79,7 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
             handleContractPairs,
         });
     }
-    // 8. Verify the EIP712 signature
+    // 8. Verify the Eip712 signature
     // Not required because a signedPermit is guaranteed to be verified.
     // 9. Fetch `KmsSignersContext` on-chain (cached)
     // Reject the permit early if it was signed against a different KMS context
@@ -91,11 +104,8 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
         kmsSignersContext: requestedKmsSignersContext,
     }, { subject: 'Invalid permit' });
     // 10. Fetch `KmsSigncryptedShares` from the relayer
-    // Safe casts: the discriminated union on parameters guarantees
-    // that options type matches signedPermit type, but TS can't prove
-    // it after destructuring (nested discriminant limitation).
     let shares;
-    if (signedPermit.isDelegated) {
+    if (signedPermit.eip712.primaryType === 'DelegatedUserDecryptRequestVerification') {
         shares = await context.runtime.relayer.fetchDelegatedUserDecrypt(context, {
             payload: {
                 handleContractPairs,
@@ -137,4 +147,4 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
         shares,
     });
 }
-//# sourceMappingURL=fetchKmsSigncryptedShares-p.js.map
+//# sourceMappingURL=fetchKmsSigncryptedSharesV1-p.js.map

package/_esm/core/kms/fetchKmsSigncryptedSharesV1-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchKmsSigncryptedSharesV1-p.js","sourceRoot":"","sources":["../../../core/kms/fetchKmsSigncryptedSharesV1-p.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAmC/E,gFAAgF;AAEhF,MAAM,mCAAmC,GAAG,EAAE,CAAC;AAE/C;;;GAGG;AACH,MAAM,UAAU,uCAAuC,CACrD,MAAgC,EAChC,iBAAoC;IAEpC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAChE,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC5E,MAAM,KAAK,CAAC,oBAAoB,OAAO,kDAAkD,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAgB,EAAE,UAAsB;IACxF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IACtC,MAAM,YAAY,GAAG,UAAU,CAAC,YAAwC,CAAC;IAEzE,qEAAqE;IACrE,wEAAwE;IACxE,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAE3D,iEAAiE;IACjE,uCAAuC,CACrC,YAAY,EACZ,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CACpC,CAAC;IAEF,uEAAuE;IACvE,MAAM,cAAc,GAAG;QACrB,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;QACjC,GAAG,OAAO;KACX,CAAC;IAEF,8BAA8B,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAEjD,sGAAsG;IACtG,MAAM,EAAE,yBAAyB,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;IAE7E,0DAA0D;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,CACT,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,MAAM,uBAAuB,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC;IACrF,IAAI,uBAAuB,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,+CAA+C;IAC/C,IAAI,uBAAuB,GAAG,mCAAmC,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC,mCAAmC,mCAAmC,WAAW,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,mBAAmB,GAAG,KAAK,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEvB,mDAAmD;IACnD,gCAAgC,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAiB,CAAC,CAAC;IAEpF,4BAA4B;IAC5B,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAErC,4BAA4B;IAC5B,YAAY,CAAC,gBAAgB,EAAE,CAAC;IAEhC,iEAAiE;IACjE,IAAI,YAAY,CAAC,MAAM,CAAC,WAAW,KAAK,yCAAyC,EAAE,CAAC;QAClF,MAAM,eAAe,CAAC,OAAO,EAAE;YAC7B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;YAC3E,QAAQ,EAAE,aAAa;YACvB,SAAS,EAAE,yBAAyB;YACpC,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,mBAAmB,CAAC,OAAO,EAAE;YACjC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;YAC3E,WAAW,EAAE,yBAAyB;YACtC,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,oEAAoE;IAEpE,iDAAiD;IACjD,2EAA2E;IAC3E,wDAAwD;IACxD,EAAE;IACF,6EAA6E;IAC7E,iFAAiF;IACjF,iFAAiF;IACjF,uCAAuC;IACvC,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,0BAA0B,GAAsB,MAAM,qBAAqB,CAAC,OAAO,EAAE;QACzF,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;QAC3F,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,OAAyC;KAC/G,CAAC,CAAC;IAEH,uCAAuC,CACrC;QACE,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS;QAChD,iBAAiB,EAAE,0BAA0B;KAC9C,EACD,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAC9B,CAAC;IAEF,oDAAoD;IACpD,IAAI,MAAsC,CAAC;IAE3C,IAAI,YAAY,CAAC,MAAM,CAAC,WAAW,KAAK,yCAAyC,EAAE,CAAC;QAClF,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,OAAO,EAAE;YACxE,OAAO,EAAE;gBACP,mBAAmB;gBACnB,sBAAsB,EAAE,aAAa;gBACrC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;gBACpD,yBAAyB,EAAE,SAAS;aACrC;YACD,OAAO,EAAE,cAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE;YAC/D,OAAO,EAAE;gBACP,mBAAmB;gBACnB,sBAAsB,EAAE,aAAa;gBACrC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;gBACpD,yBAAyB,EAAE,SAAS;aACrC;YACD,OAAO,EAAE,cAA2C;SACrD,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,MAAM,cAAc,GAAiC;QACnD,iBAAiB,EAAE,0BAA0B;QAC7C,YAAY,EAAE,qBAAqB,CAAC;YAClC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YACvC,kCAAkC,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO;SAC7F,CAAC;QACF,eAAe,EAAE,SAAS;QAC1B,mBAAmB,EAAE,aAAa;QAClC,OAAO;QACP,WAAW;KACZ,CAAC;IAEF,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,MAAM,0BAA0B,CAAC,OAAO,EAAE;QAC/C,QAAQ,EAAE,cAAc;QACxB,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}