@fhevm/sdk 1.1.0-alpha.6 → 1.1.0-alpha.8

package/_esm/core/kms/{fetchKmsSigncryptedShares-p.js → fetchKmsSigncryptedSharesV1-p.js}

@@ -1,7 +1,7 @@
 import { assertHandlesBelongToSameChainId } from '../handle/FhevmHandle.js';
-import { createKmsSigncryptedShares } from '../kms/KmsSigncryptedShares-p.js';
-import { readKmsSignersContext } from '../host-contracts/readKmsSignersContext-p.js';
-import { assertIsSignedDecryptionPermit, assertPermitIncludesContractAddresses } from './SignedDecryptionPermit-p.js';
+import { createKmsSigncryptedShares } from './KmsSigncryptedShares-p.js';
+import { readCurrentKmsSignersContext } from '../host-contracts/readKmsSignersContext-p.js';
+import { assertIsSignedDecryptionPermit } from './SignedDecryptionPermit-p.js';
 import { assertKmsDecryptionBitLimit } from './utils.js';
 import { checkPersistAllowed } from '../host-contracts/checkPersistAllowed.js';
 import { assertExtraDataMatchesKmsSingersContext } from '../host-contracts/KmsSignersContext-p.js';
@@ -10,16 +10,29 @@ import { checkDelegation } from '../host-contracts/checkDelegation.js';
 import { resolveFhevmTkmsVersion } from '../runtime/resolveFhevmVersions-p.js';
 ////////////////////////////////////////////////////////////////////////////////
 const MAX_USER_DECRYPT_CONTRACT_ADDRESSES = 10;
+/**
+ * Asserts that every address in {@link contractAddresses} is listed in the
+ * permit's `contractAddresses` (case-insensitive comparison).
+ */
+export function assertPermitV1IncludesContractAddresses(permit, contractAddresses) {
+    const permitAddresses = permit.eip712.message.contractAddresses;
+    for (const address of contractAddresses) {
+        if (!permitAddresses.some((a) => a.toLowerCase() === address.toLowerCase())) {
+            throw Error(`contract address ${address} is not listed in the permit's contractAddresses`);
+        }
+    }
+}
 ////////////////////////////////////////////////////////////////////////////////
-// fetchKmsSigncryptedShares
+// fetchKmsSigncryptedSharesV1
 ////////////////////////////////////////////////////////////////////////////////
-export async function fetchKmsSigncryptedShares(context, parameters) {
-    const { signedPermit, options, pairs } = parameters;
+export async function fetchKmsSigncryptedSharesV1(context, parameters) {
+    const { options, pairs } = parameters;
+    const signedPermit = parameters.signedPermit;
     // This helper must support base clients, where TKMS is not mandatory
     // and tkmsVersion may not be initialized in the CoreFhevm instance yet.
     const tkmsVersion = await resolveFhevmTkmsVersion(context);
     // Check: every requested contractAddress is listed in the permit
-    assertPermitIncludesContractAddresses(signedPermit, pairs.map((p) => p.contractAddress));
+    assertPermitV1IncludesContractAddresses(signedPermit, pairs.map((p) => p.contractAddress));
     // Caller-provided options override runtime config defaults (e.g. auth)
     const relayerOptions = {
         auth: context.runtime.config.auth,
@@ -51,7 +64,7 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
     // 6. Check: Expiration date
     signedPermit.assertNotExpired();
     // 7. Check: ACL permissions (user is signer or delegatorAddress)
-    if (signedPermit.isDelegated) {
+    if (signedPermit.eip712.primaryType === 'DelegatedUserDecryptRequestVerification') {
         await checkDelegation(context, {
             aclAddress: context.chain.fhevm.contracts.acl.address,
             delegate: signerAddress,
@@ -66,7 +79,7 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
             handleContractPairs,
         });
     }
-    // 8. Verify the EIP712 signature
+    // 8. Verify the Eip712 signature
     // Not required because a signedPermit is guaranteed to be verified.
     // 9. Fetch `KmsSignersContext` on-chain (cached)
     // Reject the permit early if it was signed against a different KMS context
@@ -82,7 +95,7 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
     // (e.g. a version change in the serialization scheme) will be rejected even
     // though the context ID matches. Consider comparing the decoded `kmsContextId`
     // instead of the raw `extraData` bytes.
-    const requestedKmsSignersContext = await readKmsSignersContext(context, {
+    const requestedKmsSignersContext = await readCurrentKmsSignersContext(context, {
         kmsVerifierAddress: context.chain.fhevm.contracts.kmsVerifier.address,
         protocolConfigAddress: context.chain.fhevm.contracts.protocolConfig?.address,
     });
@@ -91,11 +104,8 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
         kmsSignersContext: requestedKmsSignersContext,
     }, { subject: 'Invalid permit' });
     // 10. Fetch `KmsSigncryptedShares` from the relayer
-    // Safe casts: the discriminated union on parameters guarantees
-    // that options type matches signedPermit type, but TS can't prove
-    // it after destructuring (nested discriminant limitation).
     let shares;
-    if (signedPermit.isDelegated) {
+    if (signedPermit.eip712.primaryType === 'DelegatedUserDecryptRequestVerification') {
         shares = await context.runtime.relayer.fetchDelegatedUserDecrypt(context, {
             payload: {
                 handleContractPairs,
@@ -129,6 +139,30 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
         handles,
         tkmsVersion,
     };
+    /*
+  
+      ----------------------------------------------------------------------------
+      KMS response-signature verification.
+  
+      Each share's signature is an EIP-712 signature over the
+      `UserDecryptResponseVerification` struct (see `verifyKmsSigncryptedShare` and
+      gateway `Decryption.sol`). This check is already performed inside the tkms WASM
+      during reconstruction (verify=true); the call below is an equivalent JS-only
+      pass, kept for testing / debugging. To fully check, loop over every share.
+      ----------------------------------------------------------------------------
+  
+      for (const share of shares) {
+        await verifyKmsSigncryptedShare(
+          context,
+          {
+            metadata: sharesMetadata,
+            share,
+            transportPublicKey: signedPermit.transportPublicKey,
+          }
+        );
+      }
+  
+    */
     // 12. The returned KmsSigncryptedShares is guaranteed to be fully verified:
     // uniform extraData across shares, valid extraData format, and consistency
     // with the KmsSignersContext (see KmsSigncryptedSharesImpl invariants).
@@ -137,4 +171,4 @@ export async function fetchKmsSigncryptedShares(context, parameters) {
         shares,
     });
 }
-//# sourceMappingURL=fetchKmsSigncryptedShares-p.js.map
+//# sourceMappingURL=fetchKmsSigncryptedSharesV1-p.js.map

package/_esm/core/kms/fetchKmsSigncryptedSharesV1-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchKmsSigncryptedSharesV1-p.js","sourceRoot":"","sources":["../../../core/kms/fetchKmsSigncryptedSharesV1-p.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAC5F,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAsB/E,gFAAgF;AAEhF,MAAM,mCAAmC,GAAG,EAAE,CAAC;AAE/C;;;GAGG;AACH,MAAM,UAAU,uCAAuC,CACrD,MAAgC,EAChC,iBAAoC;IAEpC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAChE,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC5E,MAAM,KAAK,CAAC,oBAAoB,OAAO,kDAAkD,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAgB,EAAE,UAAsB;IACxF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IACtC,MAAM,YAAY,GAAG,UAAU,CAAC,YAAwC,CAAC;IAEzE,qEAAqE;IACrE,wEAAwE;IACxE,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAE3D,iEAAiE;IACjE,uCAAuC,CACrC,YAAY,EACZ,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CACpC,CAAC;IAEF,uEAAuE;IACvE,MAAM,cAAc,GAAG;QACrB,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;QACjC,GAAG,OAAO;KACX,CAAC;IAEF,8BAA8B,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAEjD,sGAAsG;IACtG,MAAM,EAAE,yBAAyB,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;IAE7E,0DAA0D;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,CACT,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,MAAM,uBAAuB,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC;IACrF,IAAI,uBAAuB,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,+CAA+C;IAC/C,IAAI,uBAAuB,GAAG,mCAAmC,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC,mCAAmC,mCAAmC,WAAW,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,mBAAmB,GAAG,KAAK,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEvB,mDAAmD;IACnD,gCAAgC,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAiB,CAAC,CAAC;IAEpF,4BAA4B;IAC5B,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAErC,4BAA4B;IAC5B,YAAY,CAAC,gBAAgB,EAAE,CAAC;IAEhC,iEAAiE;IACjE,IAAI,YAAY,CAAC,MAAM,CAAC,WAAW,KAAK,yCAAyC,EAAE,CAAC;QAClF,MAAM,eAAe,CAAC,OAAO,EAAE;YAC7B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;YAC3E,QAAQ,EAAE,aAAa;YACvB,SAAS,EAAE,yBAAyB;YACpC,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,mBAAmB,CAAC,OAAO,EAAE;YACjC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;YAC3E,WAAW,EAAE,yBAAyB;YACtC,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,oEAAoE;IAEpE,iDAAiD;IACjD,2EAA2E;IAC3E,wDAAwD;IACxD,EAAE;IACF,6EAA6E;IAC7E,iFAAiF;IACjF,iFAAiF;IACjF,uCAAuC;IACvC,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,0BAA0B,GAAsB,MAAM,4BAA4B,CAAC,OAAO,EAAE;QAChG,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;QAC3F,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,OAAyC;KAC/G,CAAC,CAAC;IAEH,uCAAuC,CACrC;QACE,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS;QAChD,iBAAiB,EAAE,0BAA0B;KAC9C,EACD,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAC9B,CAAC;IAEF,oDAAoD;IACpD,IAAI,MAAsC,CAAC;IAE3C,IAAI,YAAY,CAAC,MAAM,CAAC,WAAW,KAAK,yCAAyC,EAAE,CAAC;QAClF,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,OAAO,EAAE;YACxE,OAAO,EAAE;gBACP,mBAAmB;gBACnB,sBAAsB,EAAE,aAAa;gBACrC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;gBACpD,yBAAyB,EAAE,SAAS;aACrC;YACD,OAAO,EAAE,cAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE;YAC/D,OAAO,EAAE;gBACP,mBAAmB;gBACnB,sBAAsB,EAAE,aAAa;gBACrC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;gBACpD,yBAAyB,EAAE,SAAS;aACrC;YACD,OAAO,EAAE,cAA2C;SACrD,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,MAAM,cAAc,GAAiC;QACnD,iBAAiB,EAAE,0BAA0B;QAC7C,YAAY,EAAE,qBAAqB,CAAC;YAClC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YACvC,kCAAkC,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO;SAC7F,CAAC;QACF,eAAe,EAAE,SAAS;QAC1B,mBAAmB,EAAE,aAAa;QAClC,OAAO;QACP,WAAW;KACZ,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;MAuBE;IAEF,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,MAAM,0BAA0B,CAAC,OAAO,EAAE;QAC/C,QAAQ,EAAE,cAAc;QACxB,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/_esm/core/kms/fetchKmsSigncryptedSharesV2-p.js

@@ -0,0 +1,119 @@
+import { assertHandlesBelongToSameChainId } from '../handle/FhevmHandle.js';
+import { createKmsSigncryptedShares } from './KmsSigncryptedShares-p.js';
+import { readCurrentKmsSignersContext } from '../host-contracts/readKmsSignersContext-p.js';
+import { assertIsSignedDecryptionPermit } from './SignedDecryptionPermit-p.js';
+import { assertKmsDecryptionBitLimit } from './utils.js';
+import { checkPersistAllowed } from '../host-contracts/checkPersistAllowed.js';
+import { checkDelegation } from '../host-contracts/checkDelegation.js';
+import { assertExtraDataMatchesKmsSingersContext } from '../host-contracts/KmsSignersContext-p.js';
+import { createKmsEip712Domain } from './createKmsEip712Domain.js';
+import { resolveFhevmTkmsVersion } from '../runtime/resolveFhevmVersions-p.js';
+////////////////////////////////////////////////////////////////////////////////
+// fetchKmsSigncryptedSharesV2
+////////////////////////////////////////////////////////////////////////////////
+export async function fetchKmsSigncryptedSharesV2(context, parameters) {
+    const { options, pairs } = parameters;
+    const signedPermit = parameters.signedPermit;
+    const tkmsVersion = await resolveFhevmTkmsVersion(context);
+    const relayerOptions = {
+        auth: context.runtime.config.auth,
+        ...options,
+    };
+    assertIsSignedDecryptionPermit(signedPermit, {});
+    const { signerAddress, signature } = signedPermit;
+    const userAddress = signedPermit.eip712.message.userAddress;
+    // 1. Check: At least one handle/contract pair is required
+    if (pairs.length === 0) {
+        throw Error(`encrypted value/contract pairs must not be empty, at least one encrypted value/contract pair is required`);
+    }
+    // Resolve ownerAddress for each pair: defaults to userAddress (direct-access path)
+    // when not explicitly provided by the caller.
+    const resolvedPairs = pairs.map((p) => ({
+        handle: p.handle,
+        contractAddress: p.contractAddress,
+        ownerAddress: p.ownerAddress ?? userAddress,
+    }));
+    const handles = resolvedPairs.map((p) => p.handle);
+    Object.freeze(handles);
+    // 2. Check: All handles belong to the host chainId
+    assertHandlesBelongToSameChainId(handles, BigInt(context.chain.id));
+    // 3. Check: 2048 bits limit
+    assertKmsDecryptionBitLimit(handles);
+    // 4. Check: Expiration date
+    signedPermit.assertNotExpired();
+    // 5. Check: ACL permissions — split pairs by direct vs delegated access
+    const directPairs = resolvedPairs.filter((p) => p.ownerAddress.toLowerCase() === userAddress.toLowerCase());
+    const delegatedPairs = resolvedPairs.filter((p) => p.ownerAddress.toLowerCase() !== userAddress.toLowerCase());
+    if (directPairs.length > 0) {
+        await checkPersistAllowed(context, {
+            aclAddress: context.chain.fhevm.contracts.acl.address,
+            userAddress,
+            handleContractPairs: directPairs,
+        });
+    }
+    if (delegatedPairs.length > 0) {
+        // Group delegated pairs by delegator (ownerAddress): a single batch may contain
+        // handles from multiple delegators, each requiring a separate ACL delegation check.
+        const byDelegator = new Map();
+        for (const pair of delegatedPairs) {
+            const group = byDelegator.get(pair.ownerAddress) ?? [];
+            group.push(pair);
+            byDelegator.set(pair.ownerAddress, group);
+        }
+        for (const [delegator, groupedPairs] of byDelegator) {
+            await checkDelegation(context, {
+                aclAddress: context.chain.fhevm.contracts.acl.address,
+                delegate: userAddress,
+                delegator,
+                handleContractPairs: groupedPairs,
+            });
+        }
+    }
+    // 6. Verify the Eip712 signature
+    // Not required because a signedPermit is guaranteed to be verified.
+    // 7. Fetch `KmsSignersContext` on-chain (cached)
+    // Reject the permit early if it was signed against a different KMS context.
+    //
+    // TODO: The current check is a strict byte-level comparison. A permit signed
+    // with the correct `kmsContextId` but a different `extraData` encoding format
+    // (e.g. a version change in the serialization scheme) will be rejected even
+    // though the context ID matches. Consider comparing the decoded `kmsContextId`
+    // instead of the raw `extraData` bytes.
+    const requestedKmsSignersContext = await readCurrentKmsSignersContext(context, {
+        kmsVerifierAddress: context.chain.fhevm.contracts.kmsVerifier.address,
+        protocolConfigAddress: context.chain.fhevm.contracts.protocolConfig?.address,
+    });
+    assertExtraDataMatchesKmsSingersContext({
+        extraData: signedPermit.eip712.message.extraData,
+        kmsSignersContext: requestedKmsSignersContext,
+    }, { subject: 'Invalid permit' });
+    // 8. Fetch `KmsSigncryptedShares` from the relayer (unified V2 route)
+    const shares = await context.runtime.relayer.fetchUserDecrypt(context, {
+        payload: {
+            handleContractPairs: resolvedPairs,
+            kmsDecryptEip712Message: signedPermit.eip712.message,
+            kmsDecryptEip712Signature: signature,
+        },
+        options: relayerOptions,
+    });
+    // 9. Build and verify the sealed validated `KmsSigncryptedShares` object
+    const sharesMetadata = {
+        kmsSignersContext: requestedKmsSignersContext,
+        eip712Domain: createKmsEip712Domain({
+            chainId: context.chain.fhevm.gateway.id,
+            verifyingContractAddressDecryption: context.chain.fhevm.gateway.contracts.decryption.address,
+        }),
+        eip712Signature: signature,
+        eip712SignerAddress: signerAddress,
+        handles,
+        tkmsVersion,
+    };
+    // 10. The returned KmsSigncryptedShares is guaranteed to be fully verified:
+    // uniform extraData across shares, valid extraData format, and consistency
+    // with the KmsSignersContext (see KmsSigncryptedSharesImpl invariants).
+    return await createKmsSigncryptedShares(context, {
+        metadata: sharesMetadata,
+        shares,
+    });
+}
+//# sourceMappingURL=fetchKmsSigncryptedSharesV2-p.js.map

package/_esm/core/kms/fetchKmsSigncryptedSharesV2-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchKmsSigncryptedSharesV2-p.js","sourceRoot":"","sources":["../../../core/kms/fetchKmsSigncryptedSharesV2-p.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAC5F,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAyB/E,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAgB,EAAE,UAAsB;IACxF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IACtC,MAAM,YAAY,GAAG,UAAU,CAAC,YAAwC,CAAC;IAEzE,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAE3D,MAAM,cAAc,GAAG;QACrB,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;QACjC,GAAG,OAAO;KACX,CAAC;IAEF,8BAA8B,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAEjD,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;IAClD,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;IAE5D,0DAA0D;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,CACT,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,8CAA8C;IAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,WAAW;KAC5C,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEvB,mDAAmD;IACnD,gCAAgC,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAiB,CAAC,CAAC;IAEpF,4BAA4B;IAC5B,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAErC,4BAA4B;IAC5B,YAAY,CAAC,gBAAgB,EAAE,CAAC;IAEhC,wEAAwE;IACxE,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5G,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAE/G,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,mBAAmB,CAAC,OAAO,EAAE;YACjC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;YAC3E,WAAW;YACX,mBAAmB,EAAE,WAAW;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,gFAAgF;QAChF,oFAAoF;QACpF,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8D,CAAC;QAC1F,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,WAAW,EAAE,CAAC;YACpD,MAAM,eAAe,CAAC,OAAO,EAAE;gBAC7B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAA6B;gBAC3E,QAAQ,EAAE,WAAW;gBACrB,SAAS;gBACT,mBAAmB,EAAE,YAAY;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,oEAAoE;IAEpE,iDAAiD;IACjD,4EAA4E;IAC5E,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,0BAA0B,GAAsB,MAAM,4BAA4B,CAAC,OAAO,EAAE;QAChG,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;QAC3F,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,OAAyC;KAC/G,CAAC,CAAC;IAEH,uCAAuC,CACrC;QACE,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS;QAChD,iBAAiB,EAAE,0BAA0B;KAC9C,EACD,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAC9B,CAAC;IAEF,sEAAsE;IACtE,MAAM,MAAM,GAAmC,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE;QACrG,OAAO,EAAE;YACP,mBAAmB,EAAE,aAAa;YAClC,uBAAuB,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO;YACpD,yBAAyB,EAAE,SAAS;SACrC;QACD,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,cAAc,GAAiC;QACnD,iBAAiB,EAAE,0BAA0B;QAC7C,YAAY,EAAE,qBAAqB,CAAC;YAClC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YACvC,kCAAkC,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO;SAC7F,CAAC;QACF,eAAe,EAAE,SAAS;QAC1B,mBAAmB,EAAE,aAAa;QAClC,OAAO;QACP,WAAW;KACZ,CAAC;IAEF,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,MAAM,0BAA0B,CAAC,OAAO,EAAE;QAC/C,QAAQ,EAAE,cAAc;QACxB,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/_esm/core/kms/{kmsDelegatedUserDecryptEip712Types.js → kmsDelegatedUserDecryptEip712V1Types.js}

@@ -1,7 +1,8 @@
 ////////////////////////////////////////////////////////////////////////////////
-// KmsDelegateUserDecryptEIP712Types
+// KmsDelegatedUserDecryptEip712V1Types
 ////////////////////////////////////////////////////////////////////////////////
-export const kmsDelegatedUserDecryptEip712Types = {
+// Careful: do not change any fields in this structure
+export const kmsDelegatedUserDecryptEip712V1Types = {
     EIP712Domain: [
         { name: 'name', type: 'string' },
         { name: 'version', type: 'string' },
@@ -20,9 +21,9 @@ export const kmsDelegatedUserDecryptEip712Types = {
         { name: 'extraData', type: 'bytes' },
     ],
 };
-Object.freeze(kmsDelegatedUserDecryptEip712Types);
-Object.freeze(kmsDelegatedUserDecryptEip712Types.EIP712Domain);
-Object.freeze(kmsDelegatedUserDecryptEip712Types.DelegatedUserDecryptRequestVerification);
-kmsDelegatedUserDecryptEip712Types.EIP712Domain.forEach(Object.freeze);
-kmsDelegatedUserDecryptEip712Types.DelegatedUserDecryptRequestVerification.forEach(Object.freeze);
-//# sourceMappingURL=kmsDelegatedUserDecryptEip712Types.js.map
+Object.freeze(kmsDelegatedUserDecryptEip712V1Types);
+Object.freeze(kmsDelegatedUserDecryptEip712V1Types.EIP712Domain);
+Object.freeze(kmsDelegatedUserDecryptEip712V1Types.DelegatedUserDecryptRequestVerification);
+kmsDelegatedUserDecryptEip712V1Types.EIP712Domain.forEach(Object.freeze);
+kmsDelegatedUserDecryptEip712V1Types.DelegatedUserDecryptRequestVerification.forEach(Object.freeze);
+//# sourceMappingURL=kmsDelegatedUserDecryptEip712V1Types.js.map

package/_esm/core/kms/kmsDelegatedUserDecryptEip712V1Types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kmsDelegatedUserDecryptEip712V1Types.js","sourceRoot":"","sources":["../../../core/kms/kmsDelegatedUserDecryptEip712V1Types.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,uCAAuC;AACvC,gFAAgF;AAEhF,sDAAsD;AACtD,MAAM,CAAC,MAAM,oCAAoC,GAAyC;IACxF,YAAY,EAAE;QACZ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;KACtC;IACV,gFAAgF;IAChF,yFAAyF;IACzF,qDAAqD;IACrD,uCAAuC,EAAE;QACvC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;QACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE;QAChD,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC7C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3C,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE;QACzC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;KAC5B;CACF,CAAC;AAEX,MAAM,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,CAAC,oCAAoC,CAAC,YAAY,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,CAAC,oCAAoC,CAAC,uCAAuC,CAAC,CAAC;AAC5F,oCAAoC,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACzE,oCAAoC,CAAC,uCAAuC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC"}

package/_esm/core/kms/kmsExtraData-p.js

@@ -0,0 +1,298 @@
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _KmsExtraDataImpl_instances, _KmsExtraDataImpl_version, _KmsExtraDataImpl_kmsContextId, _KmsExtraDataImpl_kmsEpochId, _KmsExtraDataImpl_validate;
+import { asUint256BigInt, asUint8Number } from '../base/uint.js';
+import { asBytes32Hex, assertIsBytesHex } from '../base/bytes.js';
+import { isVersionEqual, isVersionStrictlyBefore } from '../host-contracts/HostContractVersion-p.js';
+import { InvalidTypeError } from '../base/errors/InvalidTypeError.js';
+export const EXTRA_DATA_V0 = 0x00; // 0x00
+export const EXTRA_DATA_V1 = 0x01; // 1 version byte + 32-byte big-endian context ID = 33 bytes
+export const EXTRA_DATA_V2 = 0x02; // 1 version byte + 32-byte big-endian context ID + 32-byte big-endian epoch ID = 65 bytes
+//////////////////////////////////////////////////////////////////////////////
+const PRIVATE_TOKEN = Symbol('KmsExtraData.token');
+//////////////////////////////////////////////////////////////////////////////
+// ExtraDataImpl class
+//////////////////////////////////////////////////////////////////////////////
+/**
+ * @internal
+ */
+export class KmsExtraDataImpl {
+    constructor(privateToken, parameters) {
+        _KmsExtraDataImpl_instances.add(this);
+        _KmsExtraDataImpl_version.set(this, void 0);
+        _KmsExtraDataImpl_kmsContextId.set(this, void 0);
+        _KmsExtraDataImpl_kmsEpochId.set(this, void 0);
+        if (privateToken !== PRIVATE_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        __classPrivateFieldSet(this, _KmsExtraDataImpl_kmsContextId, asUint256BigInt(parameters.kmsContextId), "f");
+        __classPrivateFieldSet(this, _KmsExtraDataImpl_kmsEpochId, asUint256BigInt(parameters.kmsEpochId), "f");
+        __classPrivateFieldSet(this, _KmsExtraDataImpl_version, asUint8Number(parameters.version), "f");
+        __classPrivateFieldGet(this, _KmsExtraDataImpl_instances, "m", _KmsExtraDataImpl_validate).call(this);
+    }
+    get version() {
+        return __classPrivateFieldGet(this, _KmsExtraDataImpl_version, "f");
+    }
+    get kmsContextId() {
+        return __classPrivateFieldGet(this, _KmsExtraDataImpl_kmsContextId, "f");
+    }
+    get kmsEpochId() {
+        return __classPrivateFieldGet(this, _KmsExtraDataImpl_kmsEpochId, "f");
+    }
+    /**
+     * Encodes a KMS context into an extraData format.
+     * v0: `0x00`
+     * v1: `0x01` + 32-byte big-endian context ID.
+     * v2: `0x02` + 32-byte big-endian context ID + 32-byte big-endian epoch ID.
+     */
+    toBytesHex() {
+        const v = __classPrivateFieldGet(this, _KmsExtraDataImpl_version, "f").toString(16).padStart(2, '0');
+        switch (__classPrivateFieldGet(this, _KmsExtraDataImpl_version, "f")) {
+            case EXTRA_DATA_V0: {
+                return `0x${v}`;
+            }
+            case EXTRA_DATA_V1: {
+                const contextId = __classPrivateFieldGet(this, _KmsExtraDataImpl_kmsContextId, "f").toString(16).padStart(64, '0');
+                return `0x${v}${contextId}`;
+            }
+            case EXTRA_DATA_V2: {
+                const contextId = __classPrivateFieldGet(this, _KmsExtraDataImpl_kmsContextId, "f").toString(16).padStart(64, '0');
+                const epochId = __classPrivateFieldGet(this, _KmsExtraDataImpl_kmsEpochId, "f").toString(16).padStart(64, '0');
+                return `0x${v}${contextId}${epochId}`;
+            }
+            default:
+                throw new Error(`Unsupported kms extraData version ${__classPrivateFieldGet(this, _KmsExtraDataImpl_version, "f")}`);
+        }
+    }
+}
+_KmsExtraDataImpl_version = new WeakMap(), _KmsExtraDataImpl_kmsContextId = new WeakMap(), _KmsExtraDataImpl_kmsEpochId = new WeakMap(), _KmsExtraDataImpl_instances = new WeakSet(), _KmsExtraDataImpl_validate = function _KmsExtraDataImpl_validate() {
+    switch (__classPrivateFieldGet(this, _KmsExtraDataImpl_version, "f")) {
+        case EXTRA_DATA_V0: {
+            if (__classPrivateFieldGet(this, _KmsExtraDataImpl_kmsContextId, "f") !== 0n) {
+                throw new Error('kmsContextId must be 0 for v0 kms extraData');
+            }
+            if (__classPrivateFieldGet(this, _KmsExtraDataImpl_kmsEpochId, "f") !== 0n) {
+                throw new Error('kmsEpochId must be 0 for v0 kms extraData');
+            }
+            return;
+        }
+        case EXTRA_DATA_V1: {
+            if (__classPrivateFieldGet(this, _KmsExtraDataImpl_kmsContextId, "f") === 0n) {
+                throw new Error('kmsContextId cannot be 0 for v1 kms extraData');
+            }
+            if (__classPrivateFieldGet(this, _KmsExtraDataImpl_kmsEpochId, "f") !== 0n) {
+                throw new Error('kmsEpochId must be 0 for v1 kms extraData');
+            }
+            return;
+        }
+        case EXTRA_DATA_V2: {
+            if (__classPrivateFieldGet(this, _KmsExtraDataImpl_kmsContextId, "f") === 0n) {
+                throw new Error('kmsContextId cannot be 0 for v2 kms extraData');
+            }
+            if (__classPrivateFieldGet(this, _KmsExtraDataImpl_kmsEpochId, "f") === 0n) {
+                throw new Error('kmsEpochId cannot be 0 for v2 kms extraData');
+            }
+            return;
+        }
+        default:
+            throw new Error(`Unsupported kms extraData version ${__classPrivateFieldGet(this, _KmsExtraDataImpl_version, "f")}`);
+    }
+};
+//////////////////////////////////////////////////////////////////////////////
+export function fromKmsExtraDataBytesHex(extraDataBytesHex) {
+    if (extraDataBytesHex === '0x00' || extraDataBytesHex === '0x') {
+        return new KmsExtraDataImpl(PRIVATE_TOKEN, {
+            version: EXTRA_DATA_V0,
+            kmsContextId: 0n,
+            kmsEpochId: 0n,
+        });
+    }
+    if (extraDataBytesHex.length <= 4) {
+        throw new Error(`Unsupported kms extraData length ${extraDataBytesHex.length}: must be more than 4 bytes`);
+    }
+    // First byte = version (characters 2-3 after '0x')
+    const version = asUint8Number(Number('0x' + extraDataBytesHex.slice(2, 4)));
+    if (version === EXTRA_DATA_V1) {
+        // ExtraData v1 format: 1 version byte + 32-byte big-endian context ID = 33 bytes = 66 hex chars + 2 for '0x' = 68
+        // 0x01aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+        // ↑   ↑                                                               ↑
+        // 0   4                                                               68
+        // 0         1         2         3         4         5         6
+        // 01234567890123456789012345678901234567890123456789012345678901234567
+        if (extraDataBytesHex.length != 68) {
+            throw new Error(`Invalid kms extraData length for v1: expected 68, got ${extraDataBytesHex.length}`);
+        }
+        // 32-byte contextId starts at byte 1 (hex chars 4..67)
+        const contextIdBytes32Hex = asBytes32Hex(`0x${extraDataBytesHex.slice(4, 68)}`);
+        const kmsContextId = asUint256BigInt(BigInt(contextIdBytes32Hex));
+        return new KmsExtraDataImpl(PRIVATE_TOKEN, {
+            version: EXTRA_DATA_V1,
+            kmsContextId,
+            kmsEpochId: 0n,
+        });
+    }
+    if (version === EXTRA_DATA_V2) {
+        // ExtraData v2 format: 1 version byte + 32-byte big-endian context ID + 32-byte big-endian epoch ID = 65 bytes = 130 hex chars + 2 for '0x' = 132
+        // 0x01aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaabbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
+        // ↑   ↑                                                               ↑                                                               ↑
+        // 0   4                                                               68                                                              132
+        // 0         1         2         3         4         5         6         7         8         9         0         1         2         3
+        // 012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901
+        if (extraDataBytesHex.length != 132) {
+            throw new Error(`Invalid extraData length for v2: expected 132, got ${extraDataBytesHex.length}`);
+        }
+        // 32-byte contextId starts at byte 1 (hex chars 4..67)
+        const contextIdBytes32Hex = asBytes32Hex(`0x${extraDataBytesHex.slice(4, 68)}`);
+        const kmsContextId = asUint256BigInt(BigInt(contextIdBytes32Hex));
+        // 32-byte epochId starts at byte 33 (hex chars 68..131)
+        const epochIdBytes32Hex = asBytes32Hex(`0x${extraDataBytesHex.slice(68, 132)}`);
+        const kmsEpochId = asUint256BigInt(BigInt(epochIdBytes32Hex));
+        return new KmsExtraDataImpl(PRIVATE_TOKEN, {
+            version: EXTRA_DATA_V2,
+            kmsContextId,
+            kmsEpochId: kmsEpochId,
+        });
+    }
+    throw new Error(`Unsupported kms extraData version ${version}`);
+}
+////////////////////////////////////////////////////////////////////////////////
+export function createKmsExtraDataV0() {
+    return new KmsExtraDataImpl(PRIVATE_TOKEN, {
+        version: EXTRA_DATA_V0,
+        kmsContextId: 0n,
+        kmsEpochId: 0n,
+    });
+}
+////////////////////////////////////////////////////////////////////////////////
+export function createKmsExtraDataV1(parameters) {
+    return new KmsExtraDataImpl(PRIVATE_TOKEN, {
+        version: EXTRA_DATA_V1,
+        kmsContextId: parameters.kmsContextId,
+        kmsEpochId: 0n,
+    });
+}
+////////////////////////////////////////////////////////////////////////////////
+export function createKmsExtraDataV2(parameters) {
+    return new KmsExtraDataImpl(PRIVATE_TOKEN, {
+        version: EXTRA_DATA_V2,
+        kmsContextId: parameters.kmsContextId,
+        kmsEpochId: parameters.kmsEpochId,
+    });
+}
+////////////////////////////////////////////////////////////////////////////////
+export function validateKmsExtraDataParams(parameters) {
+    if (parameters.kmsEpochId !== 0n && parameters.kmsContextId === 0n) {
+        throw new Error('kmsContextId cannot be 0 if kmsEpochId is not 0');
+    }
+}
+////////////////////////////////////////////////////////////////////////////////
+export function createKmsExtraData(parameters) {
+    validateKmsExtraDataParams(parameters);
+    if (parameters.kmsEpochId === 0n) {
+        if (parameters.kmsContextId === 0n) {
+            return createKmsExtraDataV0();
+        }
+        return createKmsExtraDataV1({
+            kmsContextId: parameters.kmsContextId,
+        });
+    }
+    return createKmsExtraDataV2({
+        kmsContextId: parameters.kmsContextId,
+        kmsEpochId: parameters.kmsEpochId,
+    });
+}
+////////////////////////////////////////////////////////////////////////////////
+export function equalsKmsExtraData(a, b) {
+    assertIsKmsExtraData(a, {});
+    assertIsKmsExtraData(b, {});
+    return a.version === b.version && a.kmsContextId === b.kmsContextId && a.kmsEpochId === b.kmsEpochId;
+}
+////////////////////////////////////////////////////////////////////////////////
+/**
+ * Module-only helper. Narrows an unknown value to the concrete
+ * {@link KmsExtraDataImpl} class by verifying it via {@link assertIsKmsExtraData}
+ * and returning it typed as the implementation class, so other functions in this
+ * module can reach class-only members. Prefer this over a bare cast.
+ *
+ * Must never be exported: `Impl` classes are internal to the SDK and never leave
+ * the module, so a function that hands one back must stay module-private too.
+ * The public surface exposes only the {@link KmsExtraData} interface.
+ *
+ * @param value - The value to narrow.
+ * @returns The same value typed as {@link KmsExtraDataImpl}.
+ * @throws {InvalidTypeError} If `value` is not a {@link KmsExtraDataImpl} instance.
+ */
+function _asKmsExtraDataImpl(value) {
+    assertIsKmsExtraData(value, {});
+    return value;
+}
+////////////////////////////////////////////////////////////////////////////////
+export function isKmsExtraData(value) {
+    return value instanceof KmsExtraDataImpl;
+}
+////////////////////////////////////////////////////////////////////////////////
+export function assertIsKmsExtraData(value, options) {
+    if (!isKmsExtraData(value)) {
+        throw new InvalidTypeError({
+            subject: options.subject,
+            type: typeof value,
+            expectedType: 'KmsExtraData',
+        }, options);
+    }
+}
+////////////////////////////////////////////////////////////////////////////////
+export function assertIsKmsExtraDataBytesHex(value, options) {
+    if (value === '0x00' || value === '0x') {
+        return;
+    }
+    assertIsBytesHex(value, options);
+    // Will valid extraData length too
+    fromKmsExtraDataBytesHex(value);
+}
+////////////////////////////////////////////////////////////////////////////////
+/**
+ * Returns `true` if `kmsExtraData`'s version is accepted by the given
+ * KMSVerifier contract version.
+ *
+ * | KMSVerifier version | protocol        | max extraData version |
+ * | ------------------- | --------------- | --------------------- |
+ * | < 0.2.0             | v0.11.0         | v0                    |
+ * | 0.2.0 – 0.3.x       | v0.12.0/v0.13.0 | v1                    |
+ * | 0.4.0               | v0.14.0         | v2                    |
+ * | > 0.4.0             | v0.14.1+        | not checked (`true`)  |
+ */
+export function isKmsExtraDataCompatibleWithKmsVerifier(kmsExtraData, kmsVerifierVersion) {
+    const ed = _asKmsExtraDataImpl(kmsExtraData);
+    // Protocol v0.11.0
+    if (isVersionStrictlyBefore(kmsVerifierVersion, { major: 0, minor: 2 })) {
+        return ed.version <= EXTRA_DATA_V0;
+    }
+    // Protocol v0.12.0/v0.13.0
+    if (isVersionStrictlyBefore(kmsVerifierVersion, { major: 0, minor: 4 })) {
+        return ed.version <= EXTRA_DATA_V1;
+    }
+    // Protocol v0.14.0
+    if (isVersionEqual(kmsVerifierVersion, { major: 0, minor: 4, patch: 0 })) {
+        return ed.version <= EXTRA_DATA_V2;
+    }
+    // Protocol v0.14.1+ (beyond the versions this SDK release knows about).
+    //
+    // We deliberately return `true` (compatible) instead of guessing an upper
+    // bound on `extraData.version`. On v0.14.0 the KMSVerifier reverts for
+    // `extraData.version > 2`, but we cannot know the accepted range of future
+    // contract versions. Pre-validating here would risk rejecting extraData that
+    // a newer contract actually supports. If the on-chain contract does reject it,
+    // the call reverts — and surfacing that revert is the source of truth, not a
+    // speculative client-side check.
+    return true;
+}
+//# sourceMappingURL=kmsExtraData-p.js.map

package/_esm/core/kms/kmsExtraData-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kmsExtraData-p.js","sourceRoot":"","sources":["../../../core/kms/kmsExtraData-p.ts"],"names":[],"mappings":";;;;;;;;;;;;AAIA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrG,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAEtE,MAAM,CAAC,MAAM,aAAa,GAAgB,IAAmB,CAAC,CAAC,OAAO;AACtE,MAAM,CAAC,MAAM,aAAa,GAAgB,IAAmB,CAAC,CAAC,4DAA4D;AAC3H,MAAM,CAAC,MAAM,aAAa,GAAgB,IAAmB,CAAC,CAAC,0FAA0F;AAEzJ,8EAA8E;AAE9E,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAEnD,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAK3B,YACE,YAAoB,EACpB,UAIC;;QAVM,4CAAsB;QACtB,iDAA6B;QAC7B,+CAA2B;QAUlC,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QAED,uBAAA,IAAI,kCAAiB,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC,MAAA,CAAC;QAC9D,uBAAA,IAAI,gCAAe,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,MAAA,CAAC;QAC1D,uBAAA,IAAI,6BAAY,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,MAAA,CAAC;QAElD,uBAAA,IAAI,+DAAU,MAAd,IAAI,CAAY,CAAC;IACnB,CAAC;IAoCD,IAAW,OAAO;QAChB,OAAO,uBAAA,IAAI,iCAAS,CAAC;IACvB,CAAC;IAED,IAAW,YAAY;QACrB,OAAO,uBAAA,IAAI,sCAAc,CAAC;IAC5B,CAAC;IAED,IAAW,UAAU;QACnB,OAAO,uBAAA,IAAI,oCAAY,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACI,UAAU;QACf,MAAM,CAAC,GAAG,uBAAA,IAAI,iCAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAEtD,QAAQ,uBAAA,IAAI,iCAAS,EAAE,CAAC;YACtB,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,OAAO,KAAK,CAAC,EAAc,CAAC;YAC9B,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,SAAS,GAAG,uBAAA,IAAI,sCAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACpE,OAAO,KAAK,CAAC,GAAG,SAAS,EAAc,CAAC;YAC1C,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,SAAS,GAAG,uBAAA,IAAI,sCAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACpE,MAAM,OAAO,GAAG,uBAAA,IAAI,oCAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBAChE,OAAO,KAAK,CAAC,GAAG,SAAS,GAAG,OAAO,EAAc,CAAC;YACpD,CAAC;YACD;gBACE,MAAM,IAAI,KAAK,CAAC,qCAAqC,uBAAA,IAAI,iCAAS,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;CACF;;IAvEG,QAAQ,uBAAA,IAAI,iCAAS,EAAE,CAAC;QACtB,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,IAAI,uBAAA,IAAI,sCAAc,KAAK,EAAE,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,uBAAA,IAAI,oCAAY,KAAK,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,IAAI,uBAAA,IAAI,sCAAc,KAAK,EAAE,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,uBAAA,IAAI,oCAAY,KAAK,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,IAAI,uBAAA,IAAI,sCAAc,KAAK,EAAE,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,uBAAA,IAAI,oCAAY,KAAK,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,OAAO;QACT,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,qCAAqC,uBAAA,IAAI,iCAAS,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AA0CH,8EAA8E;AAE9E,MAAM,UAAU,wBAAwB,CAAC,iBAA2B;IAClE,IAAK,iBAA4B,KAAK,MAAM,IAAK,iBAA4B,KAAK,IAAI,EAAE,CAAC;QACvF,OAAO,IAAI,gBAAgB,CAAC,aAAa,EAAE;YACzC,OAAO,EAAE,aAAa;YACtB,YAAY,EAAE,EAAmB;YACjC,UAAU,EAAE,EAAmB;SAChC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,oCAAoC,iBAAiB,CAAC,MAAM,6BAA6B,CAAC,CAAC;IAC7G,CAAC;IAED,mDAAmD;IACnD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5E,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC9B,kHAAkH;QAClH,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,gEAAgE;QAChE,uEAAuE;QAEvE,IAAI,iBAAiB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,yDAAyD,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;QACvG,CAAC;QAED,uDAAuD;QACvD,MAAM,mBAAmB,GAAe,YAAY,CAAC,KAAK,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5F,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAElE,OAAO,IAAI,gBAAgB,CAAC,aAAa,EAAE;YACzC,OAAO,EAAE,aAAa;YACtB,YAAY;YACZ,UAAU,EAAE,EAAmB;SAChC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC9B,kJAAkJ;QAClJ,uIAAuI;QACvI,wIAAwI;QACxI,0IAA0I;QAC1I,sIAAsI;QACtI,uIAAuI;QAEvI,IAAI,iBAAiB,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,sDAAsD,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,uDAAuD;QACvD,MAAM,mBAAmB,GAAe,YAAY,CAAC,KAAK,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5F,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAElE,wDAAwD;QACxD,MAAM,iBAAiB,GAAe,YAAY,CAAC,KAAK,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAE9D,OAAO,IAAI,gBAAgB,CAAC,aAAa,EAAE;YACzC,OAAO,EAAE,aAAa;YACtB,YAAY;YACZ,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,gBAAgB,CAAC,aAAa,EAAE;QACzC,OAAO,EAAE,aAAa;QACtB,YAAY,EAAE,EAAmB;QACjC,UAAU,EAAE,EAAmB;KAChC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,oBAAoB,CAAC,UAAoD;IACvF,OAAO,IAAI,gBAAgB,CAAC,aAAa,EAAE;QACzC,OAAO,EAAE,aAAa;QACtB,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,UAAU,EAAE,EAAmB;KAChC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,oBAAoB,CAAC,UAGpC;IACC,OAAO,IAAI,gBAAgB,CAAC,aAAa,EAAE;QACzC,OAAO,EAAE,aAAa;QACtB,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,0BAA0B,CAAC,UAG1C;IACC,IAAI,UAAU,CAAC,UAAU,KAAK,EAAE,IAAI,UAAU,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,kBAAkB,CAAC,UAGlC;IACC,0BAA0B,CAAC,UAAU,CAAC,CAAC;IAEvC,IAAI,UAAU,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QACjC,IAAI,UAAU,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;YACnC,OAAO,oBAAoB,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,oBAAoB,CAAC;YAC1B,YAAY,EAAE,UAAU,CAAC,YAAY;SACtC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,oBAAoB,CAAC;QAC1B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,kBAAkB,CAAC,CAAe,EAAE,CAAe;IACjE,oBAAoB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5B,oBAAoB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC;AACvG,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChC,OAAO,KAAyB,CAAC;AACnC,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,gBAAgB,CAAC;AAC3C,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,OAA4D;IAE5D,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,gBAAgB,CACxB;YACE,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,KAAK;YAClB,YAAY,EAAE,cAAc;SAC7B,EACD,OAAO,CACR,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,4BAA4B,CAC1C,KAAc,EACd,OAAmD;IAEnD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACvC,OAAO;IACT,CAAC;IAED,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAEjC,kCAAkC;IAClC,wBAAwB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uCAAuC,CACrD,YAA0B,EAC1B,kBAAuC;IAEvC,MAAM,EAAE,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAE7C,mBAAmB;IACnB,IAAI,uBAAuB,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,CAAC,OAAO,IAAI,aAAa,CAAC;IACrC,CAAC;IAED,2BAA2B;IAC3B,IAAI,uBAAuB,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,CAAC,OAAO,IAAI,aAAa,CAAC;IACrC,CAAC;IAED,mBAAmB;IACnB,IAAI,cAAc,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,CAAC,OAAO,IAAI,aAAa,CAAC;IACrC,CAAC;IAED,wEAAwE;IACxE,EAAE;IACF,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,iCAAiC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/_esm/core/kms/kmsPublicDecryptEip712Types.js

@@ -1,5 +1,5 @@
 ////////////////////////////////////////////////////////////////////////////////
-// KmsPublicDecryptEIP712Types
+// KmsPublicDecryptEip712Types
 ////////////////////////////////////////////////////////////////////////////////
 export const kmsPublicDecryptEip712Types = {
     EIP712Domain: [