@fhevm/sdk 1.1.0-alpha.6 → 1.1.0-alpha.8

package/_types/core/host-contracts/readKmsSignersContext-p.d.ts

@@ -1,6 +1,7 @@
 import type { KmsSignersContext } from '../types/kmsSignersContext.js';
-import type { BytesHex, ChecksummedAddress, Uint256BigInt } from '../types/primitives.js';
+import type { BytesHex, ChecksummedAddress } from '../types/primitives.js';
 import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { KmsExtraData } from '../types/kms-p.js';
 type Context = {
     readonly runtime: FhevmRuntime;
     readonly client: NonNullable<object>;
@@ -12,11 +13,21 @@ type Parameters = {
     readonly kmsVerifierAddress: ChecksummedAddress;
     readonly protocolConfigAddress: ChecksummedAddress | undefined;
     readonly forceRefresh?: boolean | undefined;
-    readonly kmsContextId?: Uint256BigInt | undefined;
-    readonly kmsEpochId?: Uint256BigInt | undefined;
+};
+type ParametersWithExtraData = Parameters & {
+    readonly extraData: KmsExtraData;
 };
 type ReturnType = KmsSignersContext;
-export declare function readKmsSignersContext(context: Context, parameters: Parameters): Promise<ReturnType>;
+export declare function readCurrentKmsSignersContext(context: Context, parameters: Parameters): Promise<ReturnType>;
+/**
+ * Reads the {@link KmsSignersContext} for a caller-provided `extraData`.
+ *
+ * Accepts an `extraData` of any version (v0, v1, v2, …); the underlying resolver
+ * selects the right protocol path and verifies the version is compatible with
+ * the on-chain KMSVerifier, throwing if it is not.
+ */
+export declare function readKmsSignersContextFromExtraData(context: Context, parameters: ParametersWithExtraData): Promise<ReturnType>;
+export type ReconcileMode = 'exact' | 'strict' | 'loose';
 /**
  * Reconciles the KMS signers context used by the SDK with the one the relayer
  * actually used when forwarding the decryption request to KMS nodes.
@@ -31,8 +42,10 @@ export declare function readKmsSignersContext(context: Context, parameters: Para
  *
  * ### Nomenclature
  *
- * - `requestedExtraData` — `kmsSignersContextToExtraData(requestedKmsSignersContext)`.
- * - `relayerKmsContextId` — `fromKmsExtraData(relayerExtraData).kmsContextId`.
+ * - `requestedKmsExtraData` — `createKmsExtraData({ kmsContextId, kmsEpochId })`
+ *   derived from `requestedKmsSignersContext`.
+ * - `relayerKmsExtraData` — `fromKmsExtraDataBytesHex(relayerKmsExtraDataBytesHex)`
+ *   (its `.kmsContextId` / `.kmsEpochId`).
  *
  * ### Host-Contract Compatibility
  *
@@ -43,37 +56,41 @@ export declare function readKmsSignersContext(context: Context, parameters: Para
  * - host-contracts v12 and v13 support `extraData` v0 and v1.
  * - host-contracts v14 support `extraData` v0, v1, and v2.
  *
- * ### Resolution (checked in order)
+ * ### Resolution (checked in order, then by `mode`)
  *
- * 1. `relayerExtraData === requestedExtraData` → exact byte match, return
- *    `requestedKmsSignersContext`. This is the **only** path that trusts cached data.
- * 2. In `'exact'` mode, any byte mismatch → **always throw**. This mode does
- *    not parse, refresh, or reconcile different `extraData`.
- * 3. Serialization version mismatch → **always throw**. The SDK and relayer must
- *    agree on the `extraData` encoding format, even if the context ID is the same.
- * 4. Context IDs differ → **full on-chain refetch**. The cached context is never
- *    reused, because any mismatch means on-chain state may have diverged
- *    (rotation, destruction, signer changes, etc.).
- *    - Context is **valid** on-chain (current or non-destroyed) → return it.
- *    - Context is **destroyed or out of range** → throw.
+ * 1. `relayerKmsExtraData` equals `requestedKmsExtraData` → return
+ *    `requestedKmsSignersContext`. This is the **only** path that trusts cached
+ *    data, and it applies in every mode.
+ * 2. Otherwise, in `'exact'` mode → **throw**. This mode never parses, refreshes,
+ *    or reconciles differing `extraData`.
+ * 3. `extraData` serialization version mismatch → **throw** (`'strict'`/`'loose'`).
+ *    The SDK and relayer must agree on the encoding format, even for the same context ID.
+ * 4. Versions match but context/epoch differ → force a **full on-chain refetch**
+ *    (cached data is never reused, since a mismatch means on-chain state may have
+ *    diverged: rotation, destruction, signer/epoch changes). The accept criterion
+ *    then depends on `mode`:
+ *    - `'strict'` → accept **only** if the relayer's context equals the *current*
+ *      on-chain context (both `kmsContextId` and `kmsEpochId`); otherwise throw.
+ *    - `'loose'` → accept **any** on-chain-valid context (non-destroyed, in range),
+ *      current or not; throw only if destroyed / out of range.
  *
  * ### Modes
  *
- * - `'exact'` — Accept only step 1 (byte-for-byte `extraData` equality).
- *   Rejects any relayer/context drift without parsing or on-chain recovery.
- * - `'strict'` — Accept step 1 (exact match) or both `relayerKmsContextId === currentKmsContextId`
- *   and `relayerKmsEpochId === currentKmsEpochId`. Rejects valid-but-not-current contexts.
- *   The epoch check is required because RFC 005 introduces same-context epoch rotations
- *   (new shares, same party set) — a stale epoch must be rejected even if the context matches.
+ * - `'exact'` — Accept only step 1 (`extraData` equality). Rejects any
+ *   relayer/context drift without parsing or on-chain recovery.
+ * - `'strict'` — Accept step 1, or a relayer context whose `kmsContextId` **and**
+ *   `kmsEpochId` equal the current on-chain values. Rejects valid-but-not-current
+ *   contexts. The epoch check is required because RFC 005 introduces same-context
+ *   epoch rotations (new shares, same party set) — a stale epoch must be rejected
+ *   even when the context ID matches.
  * - `'loose'` — Accept any on-chain valid context (non-destroyed, in range),
  *   regardless of whether it is current. Covers context rotations in either direction.
  */
-export type ReconcileMode = 'exact' | 'strict' | 'loose';
 export declare function reconcileKmsSignersContext(context: Context, parameters: {
     readonly kmsVerifierAddress: ChecksummedAddress;
     readonly protocolConfigAddress: ChecksummedAddress | undefined;
     readonly requestedKmsSignersContext: KmsSignersContext;
-    readonly relayerExtraData: BytesHex;
+    readonly relayerKmsExtraDataBytesHex: BytesHex;
     readonly mode: ReconcileMode;
 }): Promise<KmsSignersContext>;
 export {};

package/_types/core/host-contracts/readKmsSignersContext-p.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"readKmsSignersContext-p.d.ts","sourceRoot":"","sources":["../../../core/host-contracts/readKmsSignersContext-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAqBjE,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,QAAQ,CAAC,qBAAqB,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CACjD,CAAC;AAEF,KAAK,UAAU,GAAG,iBAAiB,CAAC;AAIpC,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAezG;AA0HD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAIH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEzD,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE;IACV,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,QAAQ,CAAC,qBAAqB,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,0BAA0B,EAAE,iBAAiB,CAAC;IACvD,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B,GACA,OAAO,CAAC,iBAAiB,CAAC,CAmE5B"}
+{"version":3,"file":"readKmsSignersContext-p.d.ts","sourceRoot":"","sources":["../../../core/host-contracts/readKmsSignersContext-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAiB,MAAM,wBAAwB,CAAC;AAC1F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAmBtD,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,QAAQ,CAAC,qBAAqB,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC7C,CAAC;AAEF,KAAK,uBAAuB,GAAG,UAAU,GAAG;IAC1C,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;CAClC,CAAC;AAMF,KAAK,UAAU,GAAG,iBAAiB,CAAC;AAIpC,wBAAsB,4BAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAEhH;AAID;;;;;;GAMG;AACH,wBAAsB,kCAAkC,CACtD,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,uBAAuB,GAClC,OAAO,CAAC,UAAU,CAAC,CAGrB;AAsJD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE;IACV,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,QAAQ,CAAC,qBAAqB,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,0BAA0B,EAAE,iBAAiB,CAAC;IACvD,QAAQ,CAAC,2BAA2B,EAAE,QAAQ,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B,GACA,OAAO,CAAC,iBAAiB,CAAC,CAmE5B"}

package/_types/core/kms/KmsSigncryptedShares-p.d.ts

@@ -1,5 +1,6 @@
 import type { KmsSigncryptedSharesMetadata, KmsSigncryptedShare } from '../types/kms-p.js';
 import type { KmsSigncryptedShares } from '../types/kms.js';
+import type { BytesHex } from '../types/primitives.js';
 import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
 import type { FhevmChain } from '../types/fhevmChain.js';
 type Context = {
@@ -10,6 +11,23 @@ type Context = {
         readonly batchRpcCalls: boolean;
     };
 };
+/**
+ * Helper:
+ * Verifies the EIP-712 signature of a single KMS signcrypted share.
+ *
+ * Rebuilds the `UserDecryptResponseVerification` payload the KMS node signed,
+ * recovers the signer, and asserts it belongs to the reconciled KMS signers
+ * context. This is an independent, JS-only check — the same verification is also
+ * performed inside the tkms WASM during reconstruction (`verify=true`), so this
+ * is primarily a test/defense-in-depth pass and is not required for correctness.
+ *
+ * @throws If the signer cannot be recovered, or is not a known KMS signer.
+ */
+export declare function verifyKmsSigncryptedShare(context: Context, parameters: {
+    readonly share: KmsSigncryptedShare;
+    readonly metadata: KmsSigncryptedSharesMetadata;
+    readonly transportPublicKey: BytesHex;
+}): Promise<void>;
 /**
  * Creates a validated {@link KmsSigncryptedShares} instance.
  *

package/_types/core/kms/KmsSigncryptedShares-p.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"KmsSigncryptedShares-p.d.ts","sourceRoot":"","sources":["../../../core/kms/KmsSigncryptedShares-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAA6B,MAAM,iBAAiB,CAAC;AAGvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAsEzD,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAyBF;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE;IACV,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACjD,GACA,OAAO,CAAC,oBAAoB,CAAC,CAkC/B;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,iBAAiB,EAAE,oBAAoB,GAAG,SAAS,mBAAmB,EAAE,CAKjG;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,iBAAiB,EAAE,oBAAoB,GAAG,4BAA4B,CAKjG"}
+{"version":3,"file":"KmsSigncryptedShares-p.d.ts","sourceRoot":"","sources":["../../../core/kms/KmsSigncryptedShares-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAA6B,MAAM,iBAAiB,CAAC;AACvF,OAAO,KAAK,EAAE,QAAQ,EAAoC,MAAM,wBAAwB,CAAC;AAEzF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAmGzD,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAyBF;;;;;;;;;;;GAWG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE;IACV,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,CAAC;CACvC,GACA,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE;IACV,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACjD,GACA,OAAO,CAAC,oBAAoB,CAAC,CAkC/B;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,iBAAiB,EAAE,oBAAoB,GAAG,SAAS,mBAAmB,EAAE,CAKjG;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,iBAAiB,EAAE,oBAAoB,GAAG,4BAA4B,CAKjG"}

package/_types/core/kms/PublicDecryptionProof-p.d.ts

@@ -29,7 +29,7 @@ type Parameters = {
     readonly originToken: symbol;
     readonly orderedHandles: readonly Handle[];
     readonly orderedAbiEncodedClearValues: BytesHex;
-    readonly kmsPublicDecryptEIP712Signatures: readonly Bytes65Hex[];
+    readonly kmsPublicDecryptEip712Signatures: readonly Bytes65Hex[];
     readonly kmsSignersContext: KmsSignersContext;
 };
 /**

package/_types/core/kms/PublicDecryptionProof-p.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PublicDecryptionProof-p.d.ts","sourceRoot":"","sources":["../../../core/kms/PublicDecryptionProof-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAevE;;GAEG;AACH,qBAAa,yBAA0B,YAAW,qBAAqB;;gBASnE,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE;QACV,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC;QACnC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,UAAU,EAAE,CAAC;QACnD,QAAQ,CAAC,4BAA4B,EAAE,QAAQ,CAAC;QAChD,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;KAC9B;IAkBH,IAAW,eAAe,IAAI,QAAQ,CAErC;IAED,IAAW,kBAAkB,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAEjE;IAED,IAAW,4BAA4B,IAAI,QAAQ,CAElD;IAED,IAAW,SAAS,IAAI,QAAQ,CAE/B;CACF;AASD,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,4BAA4B,EAAE,QAAQ,CAAC;IAChD,QAAQ,CAAC,gCAAgC,EAAE,SAAS,UAAU,EAAE,CAAC;IACjE,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;CAC/C,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,qBAAqB,CAAC,CA6EhC"}
+{"version":3,"file":"PublicDecryptionProof-p.d.ts","sourceRoot":"","sources":["../../../core/kms/PublicDecryptionProof-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAiBvE;;GAEG;AACH,qBAAa,yBAA0B,YAAW,qBAAqB;;gBASnE,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE;QACV,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC;QACnC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,UAAU,EAAE,CAAC;QACnD,QAAQ,CAAC,4BAA4B,EAAE,QAAQ,CAAC;QAChD,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;KAC9B;IAkBH,IAAW,eAAe,IAAI,QAAQ,CAErC;IAED,IAAW,kBAAkB,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAEjE;IAED,IAAW,4BAA4B,IAAI,QAAQ,CAElD;IAED,IAAW,SAAS,IAAI,QAAQ,CAE/B;CACF;AASD,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,4BAA4B,EAAE,QAAQ,CAAC;IAChD,QAAQ,CAAC,gCAAgC,EAAE,SAAS,UAAU,EAAE,CAAC;IACjE,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;CAC/C,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,qBAAqB,CAAC,CA6EhC"}

package/_types/core/kms/SignedDecryptionPermit-p.d.ts

@@ -1,10 +1,10 @@
-import type { SignedDecryptionPermit, SignedDelegatedDecryptionPermit, SignedSelfDecryptionPermit } from '../types/signedDecryptionPermit.js';
-import type { KmsDelegatedUserDecryptEip712, KmsUserDecryptEip712 } from '../types/kms.js';
+import type { SignedDecryptionPermit } from '../types/signedDecryptionPermit.js';
+import type { KmsDelegatedUserDecryptEip712V1, KmsUserDecryptEip712V1, KmsUserDecryptEip712V2 } from '../types/kms.js';
 import type { FhevmChain } from '../types/fhevmChain.js';
 import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
 import type { ErrorMetadataParams } from '../base/errors/ErrorBase.js';
 import type { NativeSigner } from '../modules/ethereum/types.js';
-import { type TransportKeyPair } from './TransportKeyPair-p.js';
+import type { TransportKeyPair } from './TransportKeyPair-p.js';
 /**
  * Serializes a signed decryption permit to a plain object suitable for
  * JSON serialization. Uses the public getters — does not access private fields.
@@ -13,7 +13,13 @@ import { type TransportKeyPair } from './TransportKeyPair-p.js';
  * serialization of sensitive data via `JSON.stringify(permit)`.
  */
 export declare function serializeSignedDecryptionPermitToJSON(permit: SignedDecryptionPermit): {
-    eip712: KmsUserDecryptEip712 | KmsDelegatedUserDecryptEip712;
+    version: 1;
+    eip712: KmsUserDecryptEip712V1 | KmsDelegatedUserDecryptEip712V1;
+    signature: string;
+    signerAddress: string;
+} | {
+    version: 2;
+    eip712: KmsUserDecryptEip712V2;
     signature: string;
     signerAddress: string;
 };
@@ -22,11 +28,6 @@ export declare function isSignedDecryptionPermit(value: unknown): value is Signe
 export declare function assertIsSignedDecryptionPermit(value: unknown, options: {
     subject?: string;
 } & ErrorMetadataParams): asserts value is SignedDecryptionPermit;
-/**
- * Asserts that every address in {@link contractAddresses} is listed in the
- * permit's `contractAddresses` (case-insensitive comparison).
- */
-export declare function assertPermitIncludesContractAddresses(permit: SignedDecryptionPermit, contractAddresses: readonly string[]): void;
 export type SignDecryptionPermitContext = {
     readonly chain: FhevmChain;
     readonly runtime: FhevmRuntime;
@@ -35,21 +36,15 @@ export type SignDecryptionPermitContext = {
         readonly batchRpcCalls: boolean;
     };
 };
-type SignDecryptionPermitCommonParameters = {
+export type SignDecryptionPermitParameters = {
     readonly contractAddresses: readonly string[];
     readonly startTimestamp: number;
-    readonly durationDays: number;
+    readonly durationSeconds: number;
     readonly signerAddress: string;
     readonly signer: NativeSigner;
+    readonly delegatorAddress?: string | undefined;
     readonly transportKeyPair: TransportKeyPair;
 };
-export type SignSelfDecryptionPermitParameters = SignDecryptionPermitCommonParameters & {
-    readonly delegatorAddress?: undefined;
-};
-export type SignDelegatedDecryptionPermitParameters = SignDecryptionPermitCommonParameters & {
-    readonly delegatorAddress: string;
-};
-export type SignDecryptionPermitParameters = SignSelfDecryptionPermitParameters | SignDelegatedDecryptionPermitParameters;
 /**
  * Creates a signed decryption permit by constructing the EIP-712 typed data
  * and signing it with the provided signer.
@@ -64,15 +59,6 @@ export type SignDecryptionPermitParameters = SignSelfDecryptionPermitParameters
  * @throws If the signer, address, or key pair is invalid.
  * @throws If the signature verification fails.
  */
-export declare function signDecryptionPermit(context: SignDecryptionPermitContext, parameters: SignSelfDecryptionPermitParameters): Promise<SignedSelfDecryptionPermit>;
-export declare function signDecryptionPermit(context: SignDecryptionPermitContext, parameters: SignDelegatedDecryptionPermitParameters): Promise<SignedDelegatedDecryptionPermit>;
-export declare function parseSignedDecryptionPermit(context: {
-    readonly chain: FhevmChain;
-    readonly runtime: FhevmRuntime;
-    readonly client: NonNullable<object>;
-    readonly options: {
-        readonly batchRpcCalls: boolean;
-    };
-}, transportKeyPair: TransportKeyPair, permit: unknown): Promise<SignedDecryptionPermit>;
-export {};
+export declare function signDecryptionPermit(context: SignDecryptionPermitContext, parameters: SignDecryptionPermitParameters): Promise<SignedDecryptionPermit>;
+export declare function parseSignedDecryptionPermit(context: SignDecryptionPermitContext, transportKeyPair: TransportKeyPair, permit: unknown): Promise<SignedDecryptionPermit>;
 //# sourceMappingURL=SignedDecryptionPermit-p.d.ts.map

package/_types/core/kms/SignedDecryptionPermit-p.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignedDecryptionPermit-p.d.ts","sourceRoot":"","sources":["../../../core/kms/SignedDecryptionPermit-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,+BAA+B,EAC/B,0BAA0B,EAC3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAS3F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAcjE,OAAO,EAA4B,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA+G1F;;;;;;GAMG;AACH,wBAAgB,qCAAqC,CAAC,MAAM,EAAE,sBAAsB,GAAG;IACrF,MAAM,EAAE,oBAAoB,GAAG,6BAA6B,CAAC;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB,CAOA;AAsDD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,sBAAsB,CAExF;AAED,8FAA8F;AAC9F,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,GAClD,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAWzC;AAED;;;GAGG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,sBAAsB,EAC9B,iBAAiB,EAAE,SAAS,MAAM,EAAE,GACnC,IAAI,CAON;AA6CD,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,oCAAoC,GAAG;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG,oCAAoC,GAAG;IACtF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,uCAAuC,GAAG,oCAAoC,GAAG;IAC3F,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,8BAA8B,GACtC,kCAAkC,GAClC,uCAAuC,CAAC;AAE5C;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,EACpC,UAAU,EAAE,kCAAkC,GAC7C,OAAO,CAAC,0BAA0B,CAAC,CAAC;AACvC,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,EACpC,UAAU,EAAE,uCAAuC,GAClD,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAuE5C,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE;IACP,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,EACD,gBAAgB,EAAE,gBAAgB,EAClC,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,sBAAsB,CAAC,CAkCjC"}
+{"version":3,"file":"SignedDecryptionPermit-p.d.ts","sourceRoot":"","sources":["../../../core/kms/SignedDecryptionPermit-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,EAAE,+BAA+B,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACvH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAkBhE;;;;;;GAMG;AACH,wBAAgB,qCAAqC,CAAC,MAAM,EAAE,sBAAsB,GAChF;IACE,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,sBAAsB,GAAG,+BAA+B,CAAC;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB,GACD;IACE,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB,CAyBJ;AAMD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,sBAAsB,CAExF;AAED,8FAA8F;AAC9F,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,GAClD,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAWzC;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,EACpC,UAAU,EAAE,8BAA8B,GACzC,OAAO,CAAC,sBAAsB,CAAC,CAajC;AAMD,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,2BAA2B,EACpC,gBAAgB,EAAE,gBAAgB,EAClC,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,sBAAsB,CAAC,CAejC"}

package/_types/core/kms/SignedDecryptionPermitV1-p.d.ts

@@ -0,0 +1,7 @@
+import type { SignedDecryptionPermit, SignedDecryptionPermitV1 } from '../types/signedDecryptionPermit.js';
+import type { SignDecryptionPermitContext, SignDecryptionPermitParameters } from './SignedDecryptionPermit-p.js';
+import { type TransportKeyPair } from './TransportKeyPair-p.js';
+export declare function isSignedDecryptionPermitV1(value: unknown): value is SignedDecryptionPermitV1;
+export declare function signDecryptionPermitV1(context: SignDecryptionPermitContext, parameters: SignDecryptionPermitParameters): Promise<SignedDecryptionPermit>;
+export declare function parseSignedDecryptionPermitV1(context: SignDecryptionPermitContext, transportKeyPair: TransportKeyPair, permit: unknown): Promise<SignedDecryptionPermit>;
+//# sourceMappingURL=SignedDecryptionPermitV1-p.d.ts.map

package/_types/core/kms/SignedDecryptionPermitV1-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignedDecryptionPermitV1-p.d.ts","sourceRoot":"","sources":["../../../core/kms/SignedDecryptionPermitV1-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAK3G,OAAO,KAAK,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAajH,OAAO,EAA4B,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA0H1F,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,wBAAwB,CAE5F;AAiDD,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,2BAA2B,EACpC,UAAU,EAAE,8BAA8B,GACzC,OAAO,CAAC,sBAAsB,CAAC,CAkEjC;AAMD,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,2BAA2B,EACpC,gBAAgB,EAAE,gBAAgB,EAClC,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,sBAAsB,CAAC,CAqCjC"}

package/_types/core/kms/SignedDecryptionPermitV2-p.d.ts

@@ -0,0 +1,7 @@
+import type { SignedDecryptionPermit, SignedDecryptionPermitV2 } from '../types/signedDecryptionPermit.js';
+import type { SignDecryptionPermitContext, SignDecryptionPermitParameters } from './SignedDecryptionPermit-p.js';
+import { type TransportKeyPair } from './TransportKeyPair-p.js';
+export declare function isSignedDecryptionPermitV2(value: unknown): value is SignedDecryptionPermitV2;
+export declare function signDecryptionPermitV2(context: SignDecryptionPermitContext, parameters: SignDecryptionPermitParameters): Promise<SignedDecryptionPermit>;
+export declare function parseSignedDecryptionPermitV2(context: SignDecryptionPermitContext, transportKeyPair: TransportKeyPair, permit: unknown): Promise<SignedDecryptionPermitV2>;
+//# sourceMappingURL=SignedDecryptionPermitV2-p.d.ts.map

package/_types/core/kms/SignedDecryptionPermitV2-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignedDecryptionPermitV2-p.d.ts","sourceRoot":"","sources":["../../../core/kms/SignedDecryptionPermitV2-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAK3G,OAAO,KAAK,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAMjH,OAAO,EAA4B,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA0G1F,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,wBAAwB,CAE5F;AA8BD,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,2BAA2B,EACpC,UAAU,EAAE,8BAA8B,GACzC,OAAO,CAAC,sBAAsB,CAAC,CAkFjC;AAMD,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,2BAA2B,EACpC,gBAAgB,EAAE,gBAAgB,EAClC,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,wBAAwB,CAAC,CA8BnC"}

package/_types/core/kms/createKmsDelegatedUserDecryptEip712V1.d.ts

@@ -0,0 +1,16 @@
+import type { KmsDelegatedUserDecryptEip712V1 } from '../types/kms.js';
+import type { ErrorMetadataParams } from '../base/errors/ErrorBase.js';
+import type { KmsExtraData } from '../types/kms-p.js';
+export type CreateKmsDelegatedUserDecryptEip712V1Parameters = {
+    readonly verifyingContractAddressDecryption: string;
+    readonly chainId: number | bigint;
+    readonly publicKey: string | Uint8Array;
+    readonly contractAddresses: readonly string[];
+    readonly startTimestamp: number;
+    readonly durationDays: number;
+    readonly extraData: KmsExtraData;
+    readonly delegatorAddress: string;
+};
+export declare function createKmsDelegatedUserDecryptEip712V1(parameters: CreateKmsDelegatedUserDecryptEip712V1Parameters): KmsDelegatedUserDecryptEip712V1;
+export declare function assertIsKmsDelegatedUserDecryptEip712V1(value: unknown, name: string, options: ErrorMetadataParams): asserts value is KmsDelegatedUserDecryptEip712V1;
+//# sourceMappingURL=createKmsDelegatedUserDecryptEip712V1.d.ts.map

package/_types/core/kms/createKmsDelegatedUserDecryptEip712V1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsDelegatedUserDecryptEip712V1.d.ts","sourceRoot":"","sources":["../../../core/kms/createKmsDelegatedUserDecryptEip712V1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAEvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAiBtD,MAAM,MAAM,+CAA+C,GAAG;IAC5D,QAAQ,CAAC,kCAAkC,EAAE,MAAM,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IACxC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC,CAAC;AAMF,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,+CAA+C,GAC1D,+BAA+B,CAqDjC;AAID,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,KAAK,IAAI,+BAA+B,CAclD"}

package/_types/core/kms/createKmsUserDecryptEip712V1.d.ts

@@ -0,0 +1,27 @@
+import type { ErrorMetadataParams } from '../base/errors/ErrorBase.js';
+import type { KmsEip712Domain, KmsUserDecryptEip712V1 } from '../types/kms.js';
+import type { KmsUserDecryptEip712V1Message } from '../types/kms.js';
+import type { KmsExtraData } from '../types/kms-p.js';
+export type CreateKmsUserDecryptEip712V1Parameters = {
+    readonly verifyingContractAddressDecryption: string;
+    readonly chainId: number | bigint;
+    readonly publicKey: string | Uint8Array;
+    readonly contractAddresses: readonly string[];
+    readonly startTimestamp: number;
+    readonly durationDays: number;
+    readonly extraData: KmsExtraData;
+};
+export declare function createKmsUserDecryptEip712V1(parameters: CreateKmsUserDecryptEip712V1Parameters): KmsUserDecryptEip712V1;
+export declare function assertIsKmsUserDecryptEip712V1(value: unknown, name: string, options: ErrorMetadataParams): asserts value is KmsUserDecryptEip712V1;
+/**
+ * Validates the common structure shared by both
+ * {@link KmsUserDecryptEip712V1} and {@link KmsDelegatedUserDecryptEip712V1}:
+ * domain, types, primaryType, and base message fields.
+ */
+export declare function _assertIsKmsUserDecryptEip712V1Base(value: unknown, name: string, primaryType: string, options: ErrorMetadataParams): asserts value is {
+    readonly domain: KmsEip712Domain;
+    readonly types: object;
+    readonly primaryType: string;
+    readonly message: KmsUserDecryptEip712V1Message;
+};
+//# sourceMappingURL=createKmsUserDecryptEip712V1.d.ts.map

package/_types/core/kms/createKmsUserDecryptEip712V1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsUserDecryptEip712V1.d.ts","sourceRoot":"","sources":["../../../core/kms/createKmsUserDecryptEip712V1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAmBtD,MAAM,MAAM,sCAAsC,GAAG;IACnD,QAAQ,CAAC,kCAAkC,EAAE,MAAM,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IACxC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;CAClC,CAAC;AAMF,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,sCAAsC,GACjD,sBAAsB,CAkDxB;AAID,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAOzC;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,KAAK,IAAI;IAClB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;CACjD,CAuBA"}

package/_types/core/kms/createKmsUserDecryptEip712V2.d.ts

@@ -1,5 +1,6 @@
 import type { ErrorMetadataParams } from '../base/errors/ErrorBase.js';
 import type { KmsUserDecryptEip712V2 } from '../types/kms.js';
+import type { KmsExtraData } from '../types/kms-p.js';
 export type CreateKmsUserDecryptEip712V2Parameters = {
     readonly verifyingContractAddressDecryption: string;
     readonly chainId: number | bigint;
@@ -7,8 +8,8 @@ export type CreateKmsUserDecryptEip712V2Parameters = {
     readonly publicKey: string | Uint8Array;
     readonly allowedContracts: readonly string[];
     readonly startTimestamp: number | bigint;
-    readonly durationSeconds: number | bigint;
-    readonly extraData: string;
+    readonly durationSeconds: bigint;
+    readonly extraData: KmsExtraData;
 };
 export declare function createKmsUserDecryptEip712V2(parameters: CreateKmsUserDecryptEip712V2Parameters): KmsUserDecryptEip712V2;
 export declare function assertIsKmsUserDecryptEip712V2(value: unknown, name: string, options: ErrorMetadataParams): asserts value is KmsUserDecryptEip712V2;

package/_types/core/kms/createKmsUserDecryptEip712V2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createKmsUserDecryptEip712V2.d.ts","sourceRoot":"","sources":["../../../core/kms/createKmsUserDecryptEip712V2.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAqB9D,MAAM,MAAM,sCAAsC,GAAG;IACnD,QAAQ,CAAC,kCAAkC,EAAE,MAAM,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAMF,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,sCAAsC,GACjD,sBAAsB,CAuDxB;AAID,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAiBzC"}
+{"version":3,"file":"createKmsUserDecryptEip712V2.d.ts","sourceRoot":"","sources":["../../../core/kms/createKmsUserDecryptEip712V2.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAG9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAmBtD,MAAM,MAAM,sCAAsC,GAAG;IACnD,QAAQ,CAAC,kCAAkC,EAAE,MAAM,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;CAClC,CAAC;AAMF,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,sCAAsC,GACjD,sBAAsB,CAsDxB;AAID,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAiBzC"}

package/_types/core/kms/decryptValuesFromPairs.d.ts

@@ -4,7 +4,7 @@ import type { Handle } from '../types/encryptedTypes-p.js';
 import type { FhevmChain } from '../types/fhevmChain.js';
 import type { ChecksummedAddress, TypedValue } from '../types/primitives.js';
 import type { RelayerDelegatedUserDecryptOptions, RelayerUserDecryptOptions } from '../types/relayer.js';
-import type { SignedDelegatedDecryptionPermit, SignedSelfDecryptionPermit } from '../types/signedDecryptionPermit.js';
+import type { SignedDecryptionPermit } from '../types/signedDecryptionPermit.js';
 import type { TransportKeyPair } from './TransportKeyPair-p.js';
 type Context = {
     readonly chain: FhevmChain;
@@ -19,18 +19,11 @@ type Parameters = {
     readonly pairs: ReadonlyArray<{
         readonly handle: Handle;
         readonly contractAddress: ChecksummedAddress;
+        readonly ownerAddress?: ChecksummedAddress | undefined;
     }>;
-    readonly signedPermit: SignedSelfDecryptionPermit;
+    readonly signedPermit: SignedDecryptionPermit;
     readonly transportKeyPair: TransportKeyPair;
-    readonly options?: RelayerUserDecryptOptions | undefined;
-} | {
-    readonly pairs: ReadonlyArray<{
-        readonly handle: Handle;
-        readonly contractAddress: ChecksummedAddress;
-    }>;
-    readonly signedPermit: SignedDelegatedDecryptionPermit;
-    readonly transportKeyPair: TransportKeyPair;
-    readonly options?: RelayerDelegatedUserDecryptOptions | undefined;
+    readonly options?: RelayerUserDecryptOptions | RelayerDelegatedUserDecryptOptions | undefined;
 };
 export type ReturnType = readonly TypedValue[];
 export declare function decryptValuesFromPairs(fhevm: Context, parameters: Parameters): Promise<ReturnType>;

package/_types/core/kms/decryptValuesFromPairs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decryptValuesFromPairs.d.ts","sourceRoot":"","sources":["../../../core/kms/decryptValuesFromPairs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EAAE,kCAAkC,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACzG,OAAO,KAAK,EAAE,+BAA+B,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AACtH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAMhE,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GACX;IACE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;KAC9C,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC;IAClD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;CAC1D,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;KAC9C,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,+BAA+B,CAAC;IACvD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,kCAAkC,GAAG,SAAS,CAAC;CACnE,CAAC;AAEN,MAAM,MAAM,UAAU,GAAG,SAAS,UAAU,EAAE,CAAC;AAI/C,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAUxG"}
+{"version":3,"file":"decryptValuesFromPairs.d.ts","sourceRoot":"","sources":["../../../core/kms/decryptValuesFromPairs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EAAE,kCAAkC,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACzG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAShE,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;QAI7C,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;KACxD,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,GAAG,kCAAkC,GAAG,SAAS,CAAC;CAC/F,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,SAAS,UAAU,EAAE,CAAC;AAI/C,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAyBxG"}

package/_types/core/kms/{fetchKmsSigncryptedShares-p.d.ts → fetchKmsSigncryptedSharesV1-p.d.ts}

@@ -3,7 +3,7 @@ import type { KmsSigncryptedShares } from '../types/kms.js';
 import type { ChecksummedAddress } from '../types/primitives.js';
 import type { FhevmChain } from '../types/fhevmChain.js';
 import type { RelayerDelegatedUserDecryptOptions, RelayerUserDecryptOptions } from '../types/relayer.js';
-import type { SignedDelegatedDecryptionPermit, SignedSelfDecryptionPermit } from '../types/signedDecryptionPermit.js';
+import type { SignedDecryptionPermit, SignedDecryptionPermitV1 } from '../types/signedDecryptionPermit.js';
 import type { Handle } from '../types/encryptedTypes-p.js';
 type Context = {
     readonly runtime: FhevmRuntime;
@@ -18,17 +18,15 @@ type Parameters = {
         readonly handle: Handle;
         readonly contractAddress: ChecksummedAddress;
     }>;
-    readonly signedPermit: SignedSelfDecryptionPermit;
-    readonly options?: RelayerUserDecryptOptions | undefined;
-} | {
-    readonly pairs: ReadonlyArray<{
-        readonly handle: Handle;
-        readonly contractAddress: ChecksummedAddress;
-    }>;
-    readonly signedPermit: SignedDelegatedDecryptionPermit;
-    readonly options?: RelayerDelegatedUserDecryptOptions | undefined;
+    readonly signedPermit: SignedDecryptionPermit;
+    readonly options?: RelayerUserDecryptOptions | RelayerDelegatedUserDecryptOptions | undefined;
 };
 type ReturnType = KmsSigncryptedShares;
-export declare function fetchKmsSigncryptedShares(context: Context, parameters: Parameters): Promise<ReturnType>;
+/**
+ * Asserts that every address in {@link contractAddresses} is listed in the
+ * permit's `contractAddresses` (case-insensitive comparison).
+ */
+export declare function assertPermitV1IncludesContractAddresses(permit: SignedDecryptionPermitV1, contractAddresses: readonly string[]): void;
+export declare function fetchKmsSigncryptedSharesV1(context: Context, parameters: Parameters): Promise<ReturnType>;
 export {};
-//# sourceMappingURL=fetchKmsSigncryptedShares-p.d.ts.map
+//# sourceMappingURL=fetchKmsSigncryptedSharesV1-p.d.ts.map

package/_types/core/kms/fetchKmsSigncryptedSharesV1-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchKmsSigncryptedSharesV1-p.d.ts","sourceRoot":"","sources":["../../../core/kms/fetchKmsSigncryptedSharesV1-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,KAAK,EAAE,kBAAkB,EAAgB,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,kCAAkC,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACzG,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC3G,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAc3D,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;KAC9C,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,GAAG,kCAAkC,GAAG,SAAS,CAAC;CAC/F,CAAC;AAEF,KAAK,UAAU,GAAG,oBAAoB,CAAC;AAMvC;;;GAGG;AACH,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,wBAAwB,EAChC,iBAAiB,EAAE,SAAS,MAAM,EAAE,GACnC,IAAI,CAON;AAMD,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CA4K/G"}

package/_types/core/kms/fetchKmsSigncryptedSharesV2-p.d.ts

@@ -0,0 +1,28 @@
+import type { FhevmRuntime } from '../types/coreFhevmRuntime.js';
+import type { KmsSigncryptedShares } from '../types/kms.js';
+import type { ChecksummedAddress } from '../types/primitives.js';
+import type { FhevmChain } from '../types/fhevmChain.js';
+import type { RelayerUserDecryptOptions } from '../types/relayer.js';
+import type { SignedDecryptionPermit } from '../types/signedDecryptionPermit.js';
+import type { Handle } from '../types/encryptedTypes-p.js';
+type Context = {
+    readonly runtime: FhevmRuntime;
+    readonly chain: FhevmChain;
+    readonly client: NonNullable<object>;
+    readonly options: {
+        readonly batchRpcCalls: boolean;
+    };
+};
+type Parameters = {
+    readonly pairs: ReadonlyArray<{
+        readonly handle: Handle;
+        readonly contractAddress: ChecksummedAddress;
+        readonly ownerAddress?: ChecksummedAddress | undefined;
+    }>;
+    readonly signedPermit: SignedDecryptionPermit;
+    readonly options?: RelayerUserDecryptOptions | undefined;
+};
+type ReturnType = KmsSigncryptedShares;
+export declare function fetchKmsSigncryptedSharesV2(context: Context, parameters: Parameters): Promise<ReturnType>;
+export {};
+//# sourceMappingURL=fetchKmsSigncryptedSharesV2-p.d.ts.map

package/_types/core/kms/fetchKmsSigncryptedSharesV2-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchKmsSigncryptedSharesV2-p.d.ts","sourceRoot":"","sources":["../../../core/kms/fetchKmsSigncryptedSharesV2-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,KAAK,EAAE,kBAAkB,EAAgB,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,KAAK,EAAE,sBAAsB,EAA4B,MAAM,oCAAoC,CAAC;AAC3G,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAc3D,KAAK,OAAO,GAAG;IACb,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;QAG7C,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;KACxD,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;CAC1D,CAAC;AAEF,KAAK,UAAU,GAAG,oBAAoB,CAAC;AAMvC,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAgI/G"}

package/_types/core/kms/kmsDelegatedUserDecryptEip712V1Types.d.ts

@@ -0,0 +1,3 @@
+import type { KmsDelegatedUserDecryptEip712V1Types } from '../types/kms.js';
+export declare const kmsDelegatedUserDecryptEip712V1Types: KmsDelegatedUserDecryptEip712V1Types;
+//# sourceMappingURL=kmsDelegatedUserDecryptEip712V1Types.d.ts.map

package/_types/core/kms/kmsDelegatedUserDecryptEip712V1Types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kmsDelegatedUserDecryptEip712V1Types.d.ts","sourceRoot":"","sources":["../../../core/kms/kmsDelegatedUserDecryptEip712V1Types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,iBAAiB,CAAC;AAO5E,eAAO,MAAM,oCAAoC,EAAE,oCAkBzC,CAAC"}

package/_types/core/kms/kmsExtraData-p.d.ts

@@ -0,0 +1,66 @@
+import type { BytesHex, Uint256BigInt, Uint8Number } from '../types/primitives.js';
+import type { ErrorMetadataParams } from '../base/errors/ErrorBase.js';
+import type { HostContractVersion } from '../types/hostContract.js';
+import type { KmsExtraData } from '../types/kms-p.js';
+export declare const EXTRA_DATA_V0: Uint8Number;
+export declare const EXTRA_DATA_V1: Uint8Number;
+export declare const EXTRA_DATA_V2: Uint8Number;
+/**
+ * @internal
+ */
+export declare class KmsExtraDataImpl implements KmsExtraData {
+    #private;
+    constructor(privateToken: symbol, parameters: {
+        readonly version: Uint8Number;
+        readonly kmsContextId: Uint256BigInt;
+        readonly kmsEpochId: Uint256BigInt;
+    });
+    get version(): Uint8Number;
+    get kmsContextId(): Uint256BigInt;
+    get kmsEpochId(): Uint256BigInt;
+    /**
+     * Encodes a KMS context into an extraData format.
+     * v0: `0x00`
+     * v1: `0x01` + 32-byte big-endian context ID.
+     * v2: `0x02` + 32-byte big-endian context ID + 32-byte big-endian epoch ID.
+     */
+    toBytesHex(): BytesHex;
+}
+export declare function fromKmsExtraDataBytesHex(extraDataBytesHex: BytesHex): KmsExtraData;
+export declare function createKmsExtraDataV0(): KmsExtraData;
+export declare function createKmsExtraDataV1(parameters: {
+    readonly kmsContextId: Uint256BigInt;
+}): KmsExtraData;
+export declare function createKmsExtraDataV2(parameters: {
+    readonly kmsContextId: Uint256BigInt;
+    readonly kmsEpochId: Uint256BigInt;
+}): KmsExtraData;
+export declare function validateKmsExtraDataParams(parameters: {
+    readonly kmsContextId: Uint256BigInt;
+    readonly kmsEpochId: Uint256BigInt;
+}): void;
+export declare function createKmsExtraData(parameters: {
+    readonly kmsContextId: Uint256BigInt;
+    readonly kmsEpochId: Uint256BigInt;
+}): KmsExtraData;
+export declare function equalsKmsExtraData(a: KmsExtraData, b: KmsExtraData): boolean;
+export declare function isKmsExtraData(value: unknown): value is KmsExtraData;
+export declare function assertIsKmsExtraData(value: unknown, options: {
+    readonly subject?: string;
+} & ErrorMetadataParams): asserts value is KmsExtraData;
+export declare function assertIsKmsExtraDataBytesHex(value: unknown, options: {
+    subject?: string;
+} & ErrorMetadataParams): asserts value is BytesHex;
+/**
+ * Returns `true` if `kmsExtraData`'s version is accepted by the given
+ * KMSVerifier contract version.
+ *
+ * | KMSVerifier version | protocol        | max extraData version |
+ * | ------------------- | --------------- | --------------------- |
+ * | < 0.2.0             | v0.11.0         | v0                    |
+ * | 0.2.0 – 0.3.x       | v0.12.0/v0.13.0 | v1                    |
+ * | 0.4.0               | v0.14.0         | v2                    |
+ * | > 0.4.0             | v0.14.1+        | not checked (`true`)  |
+ */
+export declare function isKmsExtraDataCompatibleWithKmsVerifier(kmsExtraData: KmsExtraData, kmsVerifierVersion: HostContractVersion): boolean;
+//# sourceMappingURL=kmsExtraData-p.d.ts.map

package/_types/core/kms/kmsExtraData-p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kmsExtraData-p.d.ts","sourceRoot":"","sources":["../../../core/kms/kmsExtraData-p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAMtD,eAAO,MAAM,aAAa,EAAE,WAAiC,CAAC;AAC9D,eAAO,MAAM,aAAa,EAAE,WAAiC,CAAC;AAC9D,eAAO,MAAM,aAAa,EAAE,WAAiC,CAAC;AAU9D;;GAEG;AACH,qBAAa,gBAAiB,YAAW,YAAY;;gBAMjD,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE;QACV,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;QAC9B,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;QACrC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;KACpC;IA+CH,IAAW,OAAO,IAAI,WAAW,CAEhC;IAED,IAAW,YAAY,IAAI,aAAa,CAEvC;IAED,IAAW,UAAU,IAAI,aAAa,CAErC;IAED;;;;;OAKG;IACI,UAAU,IAAI,QAAQ;CAoB9B;AAID,wBAAgB,wBAAwB,CAAC,iBAAiB,EAAE,QAAQ,GAAG,YAAY,CAmElF;AAID,wBAAgB,oBAAoB,IAAI,YAAY,CAMnD;AAID,wBAAgB,oBAAoB,CAAC,UAAU,EAAE;IAAE,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAA;CAAE,GAAG,YAAY,CAMvG;AAID,wBAAgB,oBAAoB,CAAC,UAAU,EAAE;IAC/C,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;CACpC,GAAG,YAAY,CAMf;AAID,wBAAgB,0BAA0B,CAAC,UAAU,EAAE;IACrD,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;CACpC,GAAG,IAAI,CAIP;AAID,wBAAgB,kBAAkB,CAAC,UAAU,EAAE;IAC7C,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;CACpC,GAAG,YAAY,CAgBf;AAID,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,OAAO,CAI5E;AAyBD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAID,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,GAC3D,OAAO,CAAC,KAAK,IAAI,YAAY,CAW/B;AAID,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,GAClD,OAAO,CAAC,KAAK,IAAI,QAAQ,CAS3B;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,uCAAuC,CACrD,YAAY,EAAE,YAAY,EAC1B,kBAAkB,EAAE,mBAAmB,GACtC,OAAO,CA4BT"}

package/_types/core/kms/kmsUserDecryptEip712V1Types.d.ts

@@ -0,0 +1,3 @@
+import type { KmsUserDecryptEip712V1Types } from '../types/kms.js';
+export declare const kmsUserDecryptEip712V1Types: KmsUserDecryptEip712V1Types;
+//# sourceMappingURL=kmsUserDecryptEip712V1Types.d.ts.map

package/_types/core/kms/kmsUserDecryptEip712V1Types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kmsUserDecryptEip712V1Types.d.ts","sourceRoot":"","sources":["../../../core/kms/kmsUserDecryptEip712V1Types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAOnE,eAAO,MAAM,2BAA2B,EAAE,2BAiBhC,CAAC"}

package/_types/core/kms/kmsUserDecryptEip712V2Types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kmsUserDecryptEip712V2Types.d.ts","sourceRoot":"","sources":["../../../core/kms/kmsUserDecryptEip712V2Types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAMnE,eAAO,MAAM,2BAA2B,EAAE,2BAkBhC,CAAC"}
+{"version":3,"file":"kmsUserDecryptEip712V2Types.d.ts","sourceRoot":"","sources":["../../../core/kms/kmsUserDecryptEip712V2Types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAOnE,eAAO,MAAM,2BAA2B,EAAE,2BAkBhC,CAAC"}