@inco/js 0.2.16 → 0.3.0

package/dist/cjs/attestedcompute/attested-compute.d.ts

@@ -0,0 +1,38 @@
+import type { Account, Chain, Transport, WalletClient } from 'viem';
+import { SupportedChainId } from '../chain.js';
+import { EciesScheme } from '../encryption/encryption.js';
+import type { KmsClient } from '../kms/client.js';
+import { AttestedCompute } from './types.js';
+/**
+ * Arguments for creating an attested compute.
+ */
+export interface IncoLiteAttestedComputeArgs {
+    /** The wallet used to interact with the blockchain and sign the compute request */
+    walletClient: WalletClient<Transport, Chain, Account>;
+    /** The KMS connect RPC endpoint or client instance */
+    kmsConnectRpcEndpointOrClient?: string | KmsClient;
+    /** The chain ID to use */
+    chainId: SupportedChainId;
+}
+/**
+ * Creates an attested compute function that can decrypt handles with an attached attestation from the covalidator.
+ * @param args - The arguments for creating the attested compute function
+ * @returns A function that can perform binary operation on a handle and return an attestation
+ * @throws {AttestedComputeError} If the creation fails
+ *
+ * @todo Support multiple operations in a single request.
+ *
+ * @example
+ * ```typescript
+ * const compute = await incoLiteAttestedCompute({
+ *   walletClient,
+ *   chainId: sepolia,
+ * });
+ * const decryptionAttestation = await compute({
+ *   lhsHandle: '0x...',
+ *   op: AttestedComputeSupportedOps.Eq,
+ *   rhsPlaintext: 1337n,
+ * });
+ * ```
+ */
+export declare function incoLiteAttestedCompute({ kmsConnectRpcEndpointOrClient, chainId, walletClient, }: IncoLiteAttestedComputeArgs): AttestedCompute<EciesScheme>;

package/dist/cjs/attestedcompute/attested-compute.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.incoLiteAttestedCompute = incoLiteAttestedCompute;
+const viem_1 = require("viem");
+const attested_decrypt_js_1 = require("../attesteddecrypt/attested-decrypt.js");
+const binary_js_1 = require("../binary.js");
+const chain_js_1 = require("../chain.js");
+const encryption_js_1 = require("../encryption/encryption.js");
+const handle_js_1 = require("../handle.js");
+const client_js_1 = require("../kms/client.js");
+const eip712_js_1 = require("../reencryption/eip712.js");
+const retry_js_1 = require("../retry.js");
+const types_js_1 = require("./types.js");
+const ATTESTED_COMPUTE_DOMAIN_NAME = 'IncoAttestedCompute';
+const ATTESTED_COMPUTE_DOMAIN_VERSION = '0.1.0';
+/**
+ * Creates an attested compute function that can decrypt handles with an attached attestation from the covalidator.
+ * @param args - The arguments for creating the attested compute function
+ * @returns A function that can perform binary operation on a handle and return an attestation
+ * @throws {AttestedComputeError} If the creation fails
+ *
+ * @todo Support multiple operations in a single request.
+ *
+ * @example
+ * ```typescript
+ * const compute = await incoLiteAttestedCompute({
+ *   walletClient,
+ *   chainId: sepolia,
+ * });
+ * const decryptionAttestation = await compute({
+ *   lhsHandle: '0x...',
+ *   op: AttestedComputeSupportedOps.Eq,
+ *   rhsPlaintext: 1337n,
+ * });
+ * ```
+ */
+function incoLiteAttestedCompute({ kmsConnectRpcEndpointOrClient, chainId, walletClient, }) {
+    const kmsClient = (0, client_js_1.getKmsClient)(kmsConnectRpcEndpointOrClient || (0, client_js_1.defaultCovalidatorGrpc)((0, chain_js_1.getSupportedChain)(chainId)));
+    return async function attestedCompute({ lhsHandle, op, rhsPlaintext, backoffConfig, }) {
+        try {
+            (0, attested_decrypt_js_1.validateHandle)(lhsHandle);
+            const rhsPlaintextBig = BigInt(rhsPlaintext);
+            // Create the EIP712 payload for the handles to decrypt
+            const eip712Payload = (0, eip712_js_1.createEIP712Payload)({
+                chainId: BigInt(chainId),
+                primaryType: 'AttestedComputeRequest',
+                primaryTypeFields: [
+                    { name: 'op', type: 'uint8' },
+                    { name: 'lhsHandle', type: 'bytes32' },
+                    { name: 'rhsPlaintext', type: 'bytes32' },
+                ],
+                message: {
+                    op: op,
+                    lhsHandle: lhsHandle,
+                    rhsPlaintext: (0, binary_js_1.bigintToBytes32)(rhsPlaintextBig),
+                },
+                domainName: ATTESTED_COMPUTE_DOMAIN_NAME,
+                domainVersion: ATTESTED_COMPUTE_DOMAIN_VERSION,
+            });
+            // Sign the EIP712 message
+            const eip712Signature = await walletClient.signTypedData(eip712Payload);
+            const rhsValueBytes = (0, encryption_js_1.bigintToPlaintext)(encryption_js_1.encryptionSchemes.ecies, (0, handle_js_1.getHandleType)(lhsHandle), rhsPlaintextBig);
+            const attestedComputeRequest = {
+                $typeName: 'inco.kms.lite.v1.AttestedComputeRequest',
+                userAddress: walletClient.account.address,
+                op: op,
+                lhsHandle: lhsHandle,
+                rhsPlaintext: rhsValueBytes.value.toString(16),
+                eip712Signature: (0, viem_1.hexToBytes)(eip712Signature),
+            };
+            const response = await (0, retry_js_1.retryWithBackoff)(async () => {
+                return await kmsClient.attestedCompute(attestedComputeRequest);
+            }, backoffConfig);
+            const decryptionAttestation = response.decryptionAttestation;
+            if (decryptionAttestation?.plaintext === undefined) {
+                throw new types_js_1.AttestedComputeError('No plaintext in response');
+            }
+            const computeResultHandle = response.decryptionAttestation?.handle;
+            if (!computeResultHandle) {
+                throw new types_js_1.AttestedComputeError('No compute result handle in response');
+            }
+            const handleType = (0, handle_js_1.getHandleType)(computeResultHandle);
+            const bigIntValue = (0, binary_js_1.bytesToBigInt)(decryptionAttestation.plaintext);
+            return {
+                handle: computeResultHandle,
+                plaintext: (0, encryption_js_1.bigintToPlaintext)(encryption_js_1.encryptionSchemes.ecies, handleType, bigIntValue),
+                covalidatorSignature: decryptionAttestation.signature,
+            };
+        }
+        catch (error) {
+            if (error instanceof types_js_1.AttestedComputeError) {
+                throw error;
+            }
+            throw new types_js_1.AttestedComputeError('Failed to perform attested compute', error);
+        }
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/attestedcompute/types.d.ts

@@ -0,0 +1,34 @@
+import type { DecryptionAttestation } from '../attesteddecrypt/types.js';
+import { HexString } from '../binary.js';
+import { EncryptionScheme, SupportedFheType } from '../encryption/encryption.js';
+import { SupportedScalarBinaryOp } from '../generated/es/inco/kms/lite/v1/kms_service_pb.js';
+import type { BackoffConfig } from '../retry.js';
+/**
+ * Supported attested compute operations.
+ */
+export declare const AttestedComputeSupportedOps: {
+    readonly Eq: SupportedScalarBinaryOp.FHE_EQ;
+    readonly Ne: SupportedScalarBinaryOp.FHE_NE;
+    readonly Ge: SupportedScalarBinaryOp.FHE_GE;
+    readonly Gt: SupportedScalarBinaryOp.FHE_GT;
+    readonly Le: SupportedScalarBinaryOp.FHE_LE;
+    readonly Lt: SupportedScalarBinaryOp.FHE_LT;
+};
+/**
+ * This type represents all the supported operations for attested compute.
+ */
+export type AttestedComputeOP = (typeof AttestedComputeSupportedOps)[keyof typeof AttestedComputeSupportedOps];
+/**
+ * Custom error class for attested compute operations.
+ */
+export declare class AttestedComputeError extends Error {
+    readonly cause?: unknown | undefined;
+    constructor(message: string, cause?: unknown | undefined);
+}
+export type AttestedCompute<S extends EncryptionScheme> = <T extends SupportedFheType>(args: {
+    /** The handle to compute on */
+    lhsHandle: HexString;
+    op: AttestedComputeOP;
+    rhsPlaintext: bigint | boolean;
+    backoffConfig?: Partial<BackoffConfig>;
+}) => Promise<DecryptionAttestation<S, T>>;

package/dist/cjs/attestedcompute/types.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AttestedComputeError = exports.AttestedComputeSupportedOps = void 0;
+const kms_service_pb_js_1 = require("../generated/es/inco/kms/lite/v1/kms_service_pb.js");
+/**
+ * Supported attested compute operations.
+ */
+exports.AttestedComputeSupportedOps = {
+    /*
+    Add: SupportedScalarBinaryOp.FHE_ADD,
+    Sub: SupportedScalarBinaryOp.FHE_SUB,
+    Mul: SupportedScalarBinaryOp.FHE_MUL,
+    Div: SupportedScalarBinaryOp.FHE_DIV,
+    Rem: SupportedScalarBinaryOp.FHE_REM,
+    BitAnd: SupportedScalarBinaryOp.FHE_BIT_AND,
+    BitOr: SupportedScalarBinaryOp.FHE_BIT_OR,
+    BitXor: SupportedScalarBinaryOp.FHE_BIT_XOR,
+    Shl: SupportedScalarBinaryOp.FHE_SHL,
+    Shr: SupportedScalarBinaryOp.FHE_SHR,
+    Rotl: SupportedScalarBinaryOp.FHE_ROTL,
+    Rotr: SupportedScalarBinaryOp.FHE_ROTR,
+    */
+    Eq: kms_service_pb_js_1.SupportedScalarBinaryOp.FHE_EQ,
+    Ne: kms_service_pb_js_1.SupportedScalarBinaryOp.FHE_NE,
+    Ge: kms_service_pb_js_1.SupportedScalarBinaryOp.FHE_GE,
+    Gt: kms_service_pb_js_1.SupportedScalarBinaryOp.FHE_GT,
+    Le: kms_service_pb_js_1.SupportedScalarBinaryOp.FHE_LE,
+    Lt: kms_service_pb_js_1.SupportedScalarBinaryOp.FHE_LT,
+    /*
+    Min: SupportedScalarBinaryOp.FHE_MIN,
+    Max: SupportedScalarBinaryOp.FHE_MAX,
+    */
+};
+/**
+ * Custom error class for attested compute operations.
+ */
+class AttestedComputeError extends Error {
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+        this.name = 'AttestedComputeError';
+    }
+}
+exports.AttestedComputeError = AttestedComputeError;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/{attesteddecrypt → cjs/attesteddecrypt}/attested-decrypt.d.ts

@@ -1,9 +1,14 @@
 import type { Account, Chain, Transport, WalletClient } from 'viem';
-import { HexString } from '../binary';
-import { SupportedChain } from '../chain';
-import { EciesScheme, PlaintextOf, SupportedFheType } from '../encryption/encryption';
-import type { KmsClient } from '../kms/client';
-import type { BackoffConfig } from '../retry';
+import { SupportedChainId } from '../chain.js';
+import { EciesScheme } from '../encryption/encryption.js';
+import type { KmsClient } from '../kms/client.js';
+import { AttestedDecryptor } from './types.js';
+/**
+ * Validates a handle format.
+ * @param handle - The handle to validate
+ * @throws {AttestedDecryptError} If the handle format is invalid
+ */
+export declare function validateHandle(handle: string): void;
 /**
  * Arguments for creating an attested decryptor.
  */
@@ -13,23 +18,23 @@ export interface IncoLiteAttestedDecryptorArgs {
     /** The KMS connect RPC endpoint or client instance */
     kmsConnectRpcEndpointOrClient?: string | KmsClient;
     /** The chain ID to use */
-    chainId: SupportedChain;
+    chainId: SupportedChainId;
 }
 /**
- * Creates an attested decryptor that can decrypt handles using attestation.
+ * Creates an attested decryptor that can decrypt handles with an attached attestation from the covalidator.
  * @param args - The arguments for creating the decryptor
  * @returns A function that can decrypt handles using attestation
  * @throws {AttestedDecryptError} If the decryptor creation fails
  *
+ * @todo Support multiple handles in a single request.
+ *
  * @example
  * ```typescript
  * const decryptor = await incoLiteAttestedDecryptor({
  *   walletClient,
  *   chainId: sepolia,
  * });
- * const plaintext = await decryptor({ handle: '0x...' });
+ * const { plaintext, covalidatorSignature } = await decryptor({ handle: '0x...' });
  * ```
  */
-export declare function incoLiteAttestedDecryptor({ kmsConnectRpcEndpointOrClient, chainId, walletClient, }: IncoLiteAttestedDecryptorArgs): Promise<(<T extends SupportedFheType>({ handle, }: {
-    handle: HexString;
-}, backoffConfig?: Partial<BackoffConfig>) => Promise<PlaintextOf<EciesScheme, T>>)>;
+export declare function incoLiteAttestedDecryptor({ kmsConnectRpcEndpointOrClient, chainId, walletClient, }: IncoLiteAttestedDecryptorArgs): AttestedDecryptor<EciesScheme>;

package/dist/cjs/attesteddecrypt/attested-decrypt.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateHandle = validateHandle;
+exports.incoLiteAttestedDecryptor = incoLiteAttestedDecryptor;
+const viem_1 = require("viem");
+const binary_js_1 = require("../binary.js");
+const chain_js_1 = require("../chain.js");
+const encryption_js_1 = require("../encryption/encryption.js");
+const handle_js_1 = require("../handle.js");
+const client_js_1 = require("../kms/client.js");
+const eip712_js_1 = require("../reencryption/eip712.js");
+const retry_js_1 = require("../retry.js");
+const types_js_1 = require("./types.js");
+const ATTESTED_DECRYPT_DOMAIN_NAME = 'IncoAttestedDecrypt';
+const ATTESTED_DECRYPT_DOMAIN_VERSION = '0.1.0';
+/**
+ * Validates a handle format.
+ * @param handle - The handle to validate
+ * @throws {AttestedDecryptError} If the handle format is invalid
+ */
+function validateHandle(handle) {
+    if (!handle.startsWith('0x') || handle.length !== 66) {
+        throw new types_js_1.AttestedDecryptError('Invalid handle format: must be a 32-byte hex string with 0x prefix');
+    }
+}
+/**
+ * Creates an attested decryptor that can decrypt handles with an attached attestation from the covalidator.
+ * @param args - The arguments for creating the decryptor
+ * @returns A function that can decrypt handles using attestation
+ * @throws {AttestedDecryptError} If the decryptor creation fails
+ *
+ * @todo Support multiple handles in a single request.
+ *
+ * @example
+ * ```typescript
+ * const decryptor = await incoLiteAttestedDecryptor({
+ *   walletClient,
+ *   chainId: sepolia,
+ * });
+ * const { plaintext, covalidatorSignature } = await decryptor({ handle: '0x...' });
+ * ```
+ */
+function incoLiteAttestedDecryptor({ kmsConnectRpcEndpointOrClient, chainId, walletClient, }) {
+    const kmsClient = (0, client_js_1.getKmsClient)(kmsConnectRpcEndpointOrClient || (0, client_js_1.defaultCovalidatorGrpc)((0, chain_js_1.getSupportedChain)(chainId)));
+    return async function attestedDecrypt({ handle, backoffConfig, }) {
+        try {
+            validateHandle(handle);
+            // Create the EIP712 payload for the handles to decrypt
+            const eip712Payload = (0, eip712_js_1.createEIP712Payload)({
+                chainId: BigInt(chainId),
+                primaryType: 'AttestedDecryptRequest',
+                primaryTypeFields: [{ name: 'handles', type: 'bytes32[]' }],
+                message: {
+                    handles: [handle],
+                },
+                domainName: ATTESTED_DECRYPT_DOMAIN_NAME,
+                domainVersion: ATTESTED_DECRYPT_DOMAIN_VERSION,
+            });
+            // Sign the EIP712 message
+            const eip712Signature = await walletClient.signTypedData(eip712Payload);
+            const attestedDecryptRequest = {
+                $typeName: 'inco.kms.lite.v1.AttestedDecryptRequest',
+                userAddress: walletClient.account.address,
+                handles: [handle],
+                eip712Signature: (0, viem_1.hexToBytes)(eip712Signature),
+            };
+            const response = await (0, retry_js_1.retryWithBackoff)(async () => {
+                return await kmsClient.attestedDecrypt(attestedDecryptRequest);
+            }, backoffConfig);
+            if (response.decryptionAttestations.length !== 1) {
+                throw new types_js_1.AttestedDecryptError('Expected 1 decryption attestation in response');
+            }
+            const decryptionAttestation = response.decryptionAttestations[0];
+            if (decryptionAttestation.plaintext === undefined) {
+                throw new types_js_1.AttestedDecryptError('No plaintext in response');
+            }
+            const handleType = (0, handle_js_1.getHandleType)(handle);
+            const bigIntValue = (0, binary_js_1.bytesToBigInt)(decryptionAttestation.plaintext);
+            return {
+                handle: decryptionAttestation.handle,
+                plaintext: (0, encryption_js_1.bigintToPlaintext)(encryption_js_1.encryptionSchemes.ecies, handleType, bigIntValue),
+                covalidatorSignature: decryptionAttestation.signature,
+            };
+        }
+        catch (error) {
+            if (error instanceof types_js_1.AttestedDecryptError) {
+                throw error;
+            }
+            throw new types_js_1.AttestedDecryptError('Failed to decrypt handle', error);
+        }
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/attesteddecrypt/index.d.ts

@@ -0,0 +1,2 @@
+export * from './attested-decrypt.js';
+export * from './types.js';

package/dist/{generated/abis → cjs/attesteddecrypt}/index.js

@@ -14,6 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./lightning"), exports);
-__exportStar(require("./addTwo"), exports);
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvZ2VuZXJhdGVkL2FiaXMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLDhDQUEyQjtBQUMzQiwyQ0FBd0IifQ==
+__exportStar(require("./attested-decrypt.js"), exports);
+__exportStar(require("./types.js"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvYXR0ZXN0ZWRkZWNyeXB0L2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSx3REFBc0M7QUFDdEMsNkNBQTJCIn0=

package/dist/cjs/attesteddecrypt/types.d.ts

@@ -0,0 +1,20 @@
+import { HexString } from '../binary.js';
+import { EncryptionScheme, PlaintextOf, SupportedFheType } from '../encryption/encryption.js';
+import type { BackoffConfig } from '../retry.js';
+/**
+ * Custom error class for attested decrypt operations.
+ */
+export declare class AttestedDecryptError extends Error {
+    readonly cause?: unknown | undefined;
+    constructor(message: string, cause?: unknown | undefined);
+}
+export type DecryptionAttestation<S extends EncryptionScheme, T extends SupportedFheType> = {
+    handle: HexString;
+    plaintext: PlaintextOf<S, T>;
+    covalidatorSignature: Uint8Array;
+};
+export type AttestedDecryptor<S extends EncryptionScheme> = <T extends SupportedFheType>(args: {
+    /** The handle to decrypt */
+    handle: HexString;
+    backoffConfig?: Partial<BackoffConfig>;
+}) => Promise<DecryptionAttestation<S, T>>;

package/dist/{attesteddecrypt → cjs/attesteddecrypt}/types.js

@@ -13,4 +13,4 @@ class AttestedDecryptError extends Error {
     }
 }
 exports.AttestedDecryptError = AttestedDecryptError;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvYXR0ZXN0ZWRkZWNyeXB0L3R5cGVzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQXdCQTs7R0FFRztBQUNILE1BQWEsb0JBQXFCLFNBQVEsS0FBSztJQUczQjtJQUZsQixZQUNFLE9BQWUsRUFDQyxLQUFlO1FBRS9CLEtBQUssQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUZDLFVBQUssR0FBTCxLQUFLLENBQVU7UUFHL0IsSUFBSSxDQUFDLElBQUksR0FBRyxzQkFBc0IsQ0FBQztJQUNyQyxDQUFDO0NBQ0Y7QUFSRCxvREFRQyJ9
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvYXR0ZXN0ZWRkZWNyeXB0L3R5cGVzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUlBOztHQUVHO0FBQ0gsTUFBYSxvQkFBcUIsU0FBUSxLQUFLO0lBRzNCO0lBRmxCLFlBQ0UsT0FBZSxFQUNDLEtBQWU7UUFFL0IsS0FBSyxDQUFDLE9BQU8sQ0FBQyxDQUFDO1FBRkMsVUFBSyxHQUFMLEtBQUssQ0FBVTtRQUcvQixJQUFJLENBQUMsSUFBSSxHQUFHLHNCQUFzQixDQUFDO0lBQ3JDLENBQUM7Q0FDRjtBQVJELG9EQVFDIn0=

package/dist/cjs/binary.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Address = exports.Bytes32 = exports.HexString = void 0;
+exports.bytesToBigInt = bytesToBigInt;
+exports.bufferToBigInt = bufferToBigInt;
+exports.bigintToBytes32 = bigintToBytes32;
+exports.padLeft = padLeft;
+exports.bytes32ToBigint = bytes32ToBigint;
+exports.bytesFromHexString = bytesFromHexString;
+exports.mustBeHex = mustBeHex;
+exports.normaliseToHex = normaliseToHex;
+exports.bytesToHex = bytesToHex;
+exports.asBytes32 = asBytes32;
+exports.parseAddress = parseAddress;
+exports.parseHex = parseHex;
+const effect_1 = require("effect");
+const viem_1 = require("viem");
+const schema_js_1 = require("./schema.js");
+exports.HexString = effect_1.Schema.TemplateLiteral('0x', effect_1.Schema.String);
+function bytesToBigInt(byteArray) {
+    // Ugly but better than bigint-buffer that insists on writing junk to stderr if it doesn't have native bindings
+    return !byteArray?.length ? BigInt(0) : BigInt('0x' + Buffer.from(byteArray).toString('hex'));
+}
+function bufferToBigInt(buffer) {
+    return bytesToBigInt(Uint8Array.from(buffer));
+}
+// Convert a bigint to a 32-byte array, left-padded if necessary. Note: it is
+// caller's responsibility to ensure that the bigint is not too large to fit in
+// 32 bytes, or else the result will be truncated.
+function bigintToBytes32(value) {
+    return (0, schema_js_1.parse)(exports.Bytes32, Buffer.from(value.toString(16).padStart(64, '0'), 'hex').toString('hex'));
+}
+function padLeft(bs, n) {
+    if (bs.length > n) {
+        throw new Error(`Cannot pad ${bs.length} bytes to ${n} - would truncate`);
+    }
+    const buf = Buffer.alloc(n);
+    buf.set(bs, n - bs.length);
+    return buf;
+}
+function bytes32ToBigint(bs) {
+    const bytes32 = asBytes32(bs);
+    return BigInt(bytes32);
+}
+function bytesFromHexString(hexString) {
+    return Buffer.from(hexString.startsWith('0x') ? hexString.slice(2) : hexString, 'hex');
+}
+function mustBeHex(value) {
+    if (!(0, viem_1.isHex)(value)) {
+        throw new Error(`Expected hex string, got: ${value}`);
+    }
+    return value;
+}
+function normaliseToHex(value) {
+    return mustBeHex(value.startsWith('0x') ? value : `0x${value}`);
+}
+function bytesToHex(bs) {
+    return ('0x' + Buffer.from(bs).toString('hex'));
+}
+const ByteArray = effect_1.Schema.Object.pipe(effect_1.Schema.filter((x) => x instanceof Uint8Array));
+const BytesToHex = effect_1.Schema.transformOrFail(effect_1.Schema.Union(effect_1.Schema.String, ByteArray), exports.HexString, {
+    strict: true,
+    encode: effect_1.ParseResult.succeed,
+    decode: (x) => x instanceof Uint8Array
+        ? effect_1.ParseResult.succeed(bytesToHex(x))
+        : ((y) => (0, viem_1.isHex)(y)
+            ? effect_1.ParseResult.succeed(y)
+            : effect_1.ParseResult.fail(new effect_1.ParseResult.Unexpected(y, `'${y}' is not a hex string`)))(normaliseToHex(x)),
+});
+exports.Bytes32 = BytesToHex.pipe(effect_1.Schema.filter((x) => x.length === 66 ||
+    `Expected 32-byte hex string (66 characters with 0x prefix) but got ${x.length} character string`), effect_1.Schema.brand('Bytes32'));
+function asBytes32(x) {
+    return (0, schema_js_1.parse)(exports.Bytes32, x);
+}
+exports.Address = exports.HexString.pipe(effect_1.Schema.filter((s) => s.length === 42 || `Address must be a 20-byte '0x'-prefixed hex string, but got: ${s}`), effect_1.Schema.brand('Address'));
+function parseAddress(address) {
+    return (0, schema_js_1.parse)(exports.Address, address);
+}
+function parseHex(hex) {
+    return (0, schema_js_1.parse)(exports.HexString, hex);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/{chain.d.ts → cjs/chain.d.ts}

@@ -2,6 +2,9 @@ export declare const supportedChains: {
     readonly baseSepolia: 84532;
     readonly sepolia: 11155111;
     readonly monadTestnet: 10143;
+    readonly plasmaTestnet: 9746;
+    readonly worldchainSepolia: 4801;
+    readonly anvil: 31337;
 };
 export declare const fheSupportedChains: {
     readonly baseSepolia: 84532;

package/dist/cjs/chain.js

@@ -0,0 +1,31 @@
+"use strict";
+// No imports here to avoid issues with closures and modules across pulumi boundary
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fheSupportedChains = exports.supportedChains = void 0;
+exports.getSupportedChain = getSupportedChain;
+// This file can be seen as mirroring the functionality of viem changes without depending on it directly.
+// It exists as a workaround for some very gnarly issues with code reuse between Pulumi and this module, partly
+// relating to modules but also linked to Pulumi's ability to capture closures and serialise them.
+exports.supportedChains = {
+    baseSepolia: 84532,
+    sepolia: 11155111,
+    monadTestnet: 10143,
+    plasmaTestnet: 9746,
+    worldchainSepolia: 4801,
+    anvil: 31337,
+};
+exports.fheSupportedChains = { baseSepolia: 84532, sepolia: 11155111 };
+// Get supportedChain either by its chain ID or the short name (lower pascal case)
+function getSupportedChain(chainish) {
+    const found = typeof chainish === 'number' || typeof chainish === 'bigint'
+        ? Object.entries(exports.supportedChains).find(([, id]) => id === Number(chainish))
+        : typeof chainish === 'object'
+            ? Object.entries(exports.supportedChains).find(([, id]) => id === Number(chainish.id))
+            : Object.entries(exports.supportedChains).find(([shortName]) => shortName === chainish);
+    if (!found) {
+        throw new Error(`Supported chain ${chainish} not found`);
+    }
+    const [name, id] = found;
+    return { name: name, id };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/{encryption → cjs/encryption}/encryption.d.ts

@@ -1,6 +1,6 @@
 import { Schema } from 'effect';
-import { Bytes32 } from '../binary';
-import { InputContext } from '../handle';
+import { Bytes32 } from '../binary.js';
+import { InputContext } from '../handle.js';
 export type Encryptor<S extends EncryptionScheme = EncryptionScheme> = <T extends SupportedFheType>(plaintext: PlaintextWithContextOf<S, T>) => Promise<EncryptResultOf<S, T>>;
 export type Decryptor<S extends EncryptionScheme = EncryptionScheme> = <T extends SupportedFheType>(ciphertext: CiphertextOf<S, T>, context?: InputContext) => Promise<PlaintextOf<S, T>>;
 export declare const supportedFheTypes: {