@inco/js 0.2.16 → 0.3.0

package/dist/esm/attestedcompute/types.js

@@ -0,0 +1,42 @@
+import { SupportedScalarBinaryOp } from '../generated/es/inco/kms/lite/v1/kms_service_pb.js';
+/**
+ * Supported attested compute operations.
+ */
+export const AttestedComputeSupportedOps = {
+    /*
+    Add: SupportedScalarBinaryOp.FHE_ADD,
+    Sub: SupportedScalarBinaryOp.FHE_SUB,
+    Mul: SupportedScalarBinaryOp.FHE_MUL,
+    Div: SupportedScalarBinaryOp.FHE_DIV,
+    Rem: SupportedScalarBinaryOp.FHE_REM,
+    BitAnd: SupportedScalarBinaryOp.FHE_BIT_AND,
+    BitOr: SupportedScalarBinaryOp.FHE_BIT_OR,
+    BitXor: SupportedScalarBinaryOp.FHE_BIT_XOR,
+    Shl: SupportedScalarBinaryOp.FHE_SHL,
+    Shr: SupportedScalarBinaryOp.FHE_SHR,
+    Rotl: SupportedScalarBinaryOp.FHE_ROTL,
+    Rotr: SupportedScalarBinaryOp.FHE_ROTR,
+    */
+    Eq: SupportedScalarBinaryOp.FHE_EQ,
+    Ne: SupportedScalarBinaryOp.FHE_NE,
+    Ge: SupportedScalarBinaryOp.FHE_GE,
+    Gt: SupportedScalarBinaryOp.FHE_GT,
+    Le: SupportedScalarBinaryOp.FHE_LE,
+    Lt: SupportedScalarBinaryOp.FHE_LT,
+    /*
+    Min: SupportedScalarBinaryOp.FHE_MIN,
+    Max: SupportedScalarBinaryOp.FHE_MAX,
+    */
+};
+/**
+ * Custom error class for attested compute operations.
+ */
+export class AttestedComputeError extends Error {
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+        this.name = 'AttestedComputeError';
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/esm/attesteddecrypt/attested-decrypt.d.ts

@@ -0,0 +1,40 @@
+import type { Account, Chain, Transport, WalletClient } from 'viem';
+import { SupportedChainId } from '../chain.js';
+import { EciesScheme } from '../encryption/encryption.js';
+import type { KmsClient } from '../kms/client.js';
+import { AttestedDecryptor } from './types.js';
+/**
+ * Validates a handle format.
+ * @param handle - The handle to validate
+ * @throws {AttestedDecryptError} If the handle format is invalid
+ */
+export declare function validateHandle(handle: string): void;
+/**
+ * Arguments for creating an attested decryptor.
+ */
+export interface IncoLiteAttestedDecryptorArgs {
+    /** The wallet used to interact with the blockchain and sign the decrypt request */
+    walletClient: WalletClient<Transport, Chain, Account>;
+    /** The KMS connect RPC endpoint or client instance */
+    kmsConnectRpcEndpointOrClient?: string | KmsClient;
+    /** The chain ID to use */
+    chainId: SupportedChainId;
+}
+/**
+ * Creates an attested decryptor that can decrypt handles with an attached attestation from the covalidator.
+ * @param args - The arguments for creating the decryptor
+ * @returns A function that can decrypt handles using attestation
+ * @throws {AttestedDecryptError} If the decryptor creation fails
+ *
+ * @todo Support multiple handles in a single request.
+ *
+ * @example
+ * ```typescript
+ * const decryptor = await incoLiteAttestedDecryptor({
+ *   walletClient,
+ *   chainId: sepolia,
+ * });
+ * const { plaintext, covalidatorSignature } = await decryptor({ handle: '0x...' });
+ * ```
+ */
+export declare function incoLiteAttestedDecryptor({ kmsConnectRpcEndpointOrClient, chainId, walletClient, }: IncoLiteAttestedDecryptorArgs): AttestedDecryptor<EciesScheme>;

package/dist/esm/attesteddecrypt/attested-decrypt.js

@@ -0,0 +1,89 @@
+import { hexToBytes } from 'viem';
+import { bytesToBigInt } from '../binary.js';
+import { getSupportedChain } from '../chain.js';
+import { bigintToPlaintext, encryptionSchemes } from '../encryption/encryption.js';
+import { getHandleType } from '../handle.js';
+import { defaultCovalidatorGrpc, getKmsClient } from '../kms/client.js';
+import { createEIP712Payload } from '../reencryption/eip712.js';
+import { retryWithBackoff } from '../retry.js';
+import { AttestedDecryptError } from './types.js';
+const ATTESTED_DECRYPT_DOMAIN_NAME = 'IncoAttestedDecrypt';
+const ATTESTED_DECRYPT_DOMAIN_VERSION = '0.1.0';
+/**
+ * Validates a handle format.
+ * @param handle - The handle to validate
+ * @throws {AttestedDecryptError} If the handle format is invalid
+ */
+export function validateHandle(handle) {
+    if (!handle.startsWith('0x') || handle.length !== 66) {
+        throw new AttestedDecryptError('Invalid handle format: must be a 32-byte hex string with 0x prefix');
+    }
+}
+/**
+ * Creates an attested decryptor that can decrypt handles with an attached attestation from the covalidator.
+ * @param args - The arguments for creating the decryptor
+ * @returns A function that can decrypt handles using attestation
+ * @throws {AttestedDecryptError} If the decryptor creation fails
+ *
+ * @todo Support multiple handles in a single request.
+ *
+ * @example
+ * ```typescript
+ * const decryptor = await incoLiteAttestedDecryptor({
+ *   walletClient,
+ *   chainId: sepolia,
+ * });
+ * const { plaintext, covalidatorSignature } = await decryptor({ handle: '0x...' });
+ * ```
+ */
+export function incoLiteAttestedDecryptor({ kmsConnectRpcEndpointOrClient, chainId, walletClient, }) {
+    const kmsClient = getKmsClient(kmsConnectRpcEndpointOrClient || defaultCovalidatorGrpc(getSupportedChain(chainId)));
+    return async function attestedDecrypt({ handle, backoffConfig, }) {
+        try {
+            validateHandle(handle);
+            // Create the EIP712 payload for the handles to decrypt
+            const eip712Payload = createEIP712Payload({
+                chainId: BigInt(chainId),
+                primaryType: 'AttestedDecryptRequest',
+                primaryTypeFields: [{ name: 'handles', type: 'bytes32[]' }],
+                message: {
+                    handles: [handle],
+                },
+                domainName: ATTESTED_DECRYPT_DOMAIN_NAME,
+                domainVersion: ATTESTED_DECRYPT_DOMAIN_VERSION,
+            });
+            // Sign the EIP712 message
+            const eip712Signature = await walletClient.signTypedData(eip712Payload);
+            const attestedDecryptRequest = {
+                $typeName: 'inco.kms.lite.v1.AttestedDecryptRequest',
+                userAddress: walletClient.account.address,
+                handles: [handle],
+                eip712Signature: hexToBytes(eip712Signature),
+            };
+            const response = await retryWithBackoff(async () => {
+                return await kmsClient.attestedDecrypt(attestedDecryptRequest);
+            }, backoffConfig);
+            if (response.decryptionAttestations.length !== 1) {
+                throw new AttestedDecryptError('Expected 1 decryption attestation in response');
+            }
+            const decryptionAttestation = response.decryptionAttestations[0];
+            if (decryptionAttestation.plaintext === undefined) {
+                throw new AttestedDecryptError('No plaintext in response');
+            }
+            const handleType = getHandleType(handle);
+            const bigIntValue = bytesToBigInt(decryptionAttestation.plaintext);
+            return {
+                handle: decryptionAttestation.handle,
+                plaintext: bigintToPlaintext(encryptionSchemes.ecies, handleType, bigIntValue),
+                covalidatorSignature: decryptionAttestation.signature,
+            };
+        }
+        catch (error) {
+            if (error instanceof AttestedDecryptError) {
+                throw error;
+            }
+            throw new AttestedDecryptError('Failed to decrypt handle', error);
+        }
+    };
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXR0ZXN0ZWQtZGVjcnlwdC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9hdHRlc3RlZGRlY3J5cHQvYXR0ZXN0ZWQtZGVjcnlwdC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFDQSxPQUFPLEVBQUUsVUFBVSxFQUFFLE1BQU0sTUFBTSxDQUFDO0FBQ2xDLE9BQU8sRUFBRSxhQUFhLEVBQWEsTUFBTSxjQUFjLENBQUM7QUFDeEQsT0FBTyxFQUFFLGlCQUFpQixFQUFvQixNQUFNLGFBQWEsQ0FBQztBQUNsRSxPQUFPLEVBQUUsaUJBQWlCLEVBQWUsaUJBQWlCLEVBQW9CLE1BQU0sNkJBQTZCLENBQUM7QUFFbEgsT0FBTyxFQUFFLGFBQWEsRUFBRSxNQUFNLGNBQWMsQ0FBQztBQUU3QyxPQUFPLEVBQUUsc0JBQXNCLEVBQUUsWUFBWSxFQUFFLE1BQU0sa0JBQWtCLENBQUM7QUFDeEUsT0FBTyxFQUFFLG1CQUFtQixFQUFFLE1BQU0sMkJBQTJCLENBQUM7QUFFaEUsT0FBTyxFQUFFLGdCQUFnQixFQUFFLE1BQU0sYUFBYSxDQUFDO0FBQy9DLE9BQU8sRUFBRSxvQkFBb0IsRUFBNEMsTUFBTSxZQUFZLENBQUM7QUFFNUYsTUFBTSw0QkFBNEIsR0FBRyxxQkFBcUIsQ0FBQztBQUMzRCxNQUFNLCtCQUErQixHQUFHLE9BQU8sQ0FBQztBQUVoRDs7OztHQUlHO0FBQ0gsTUFBTSxVQUFVLGNBQWMsQ0FBQyxNQUFjO0lBQzNDLElBQUksQ0FBQyxNQUFNLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQyxJQUFJLE1BQU0sQ0FBQyxNQUFNLEtBQUssRUFBRSxFQUFFLENBQUM7UUFDckQsTUFBTSxJQUFJLG9CQUFvQixDQUFDLG9FQUFvRSxDQUFDLENBQUM7SUFDdkcsQ0FBQztBQUNILENBQUM7QUFjRDs7Ozs7Ozs7Ozs7Ozs7OztHQWdCRztBQUNILE1BQU0sVUFBVSx5QkFBeUIsQ0FBQyxFQUN4Qyw2QkFBNkIsRUFDN0IsT0FBTyxFQUNQLFlBQVksR0FDa0I7SUFDOUIsTUFBTSxTQUFTLEdBQUcsWUFBWSxDQUFDLDZCQUE2QixJQUFJLHNCQUFzQixDQUFDLGlCQUFpQixDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsQ0FBQztJQUVwSCxPQUFPLEtBQUssVUFBVSxlQUFlLENBQTZCLEVBQ2hFLE1BQU0sRUFDTixhQUFhLEdBSWQ7UUFDQyxJQUFJLENBQUM7WUFDSCxjQUFjLENBQUMsTUFBTSxDQUFDLENBQUM7WUFFdkIsdURBQXVEO1lBQ3ZELE1BQU0sYUFBYSxHQUFHLG1CQUFtQixDQUFDO2dCQUN4QyxPQUFPLEVBQUUsTUFBTSxDQUFDLE9BQU8sQ0FBQztnQkFDeEIsV0FBVyxFQUFFLHdCQUF3QjtnQkFDckMsaUJBQWlCLEVBQUUsQ0FBQyxFQUFFLElBQUksRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLFdBQVcsRUFBRSxDQUFDO2dCQUMzRCxPQUFPLEVBQUU7b0JBQ1AsT0FBTyxFQUFFLENBQUMsTUFBTSxDQUFDO2lCQUNsQjtnQkFDRCxVQUFVLEVBQUUsNEJBQTRCO2dCQUN4QyxhQUFhLEVBQUUsK0JBQStCO2FBQy9DLENBQUMsQ0FBQztZQUVILDBCQUEwQjtZQUMxQixNQUFNLGVBQWUsR0FBRyxNQUFNLFlBQVksQ0FBQyxhQUFhLENBQUMsYUFBYSxDQUFDLENBQUM7WUFFeEUsTUFBTSxzQkFBc0IsR0FBMkI7Z0JBQ3JELFNBQVMsRUFBRSx5Q0FBeUM7Z0JBQ3BELFdBQVcsRUFBRSxZQUFZLENBQUMsT0FBTyxDQUFDLE9BQU87Z0JBQ3pDLE9BQU8sRUFBRSxDQUFDLE1BQU0sQ0FBQztnQkFDakIsZUFBZSxFQUFFLFVBQVUsQ0FBQyxlQUFlLENBQUM7YUFDN0MsQ0FBQztZQUVGLE1BQU0sUUFBUSxHQUFHLE1BQU0sZ0JBQWdCLENBQUMsS0FBSyxJQUFJLEVBQUU7Z0JBQ2pELE9BQU8sTUFBTSxTQUFTLENBQUMsZUFBZSxDQUFDLHNCQUFzQixDQUFDLENBQUM7WUFDakUsQ0FBQyxFQUFFLGFBQWEsQ0FBQyxDQUFDO1lBRWxCLElBQUksUUFBUSxDQUFDLHNCQUFzQixDQUFDLE1BQU0sS0FBSyxDQUFDLEVBQUUsQ0FBQztnQkFDakQsTUFBTSxJQUFJLG9CQUFvQixDQUFDLCtDQUErQyxDQUFDLENBQUM7WUFDbEYsQ0FBQztZQUVELE1BQU0scUJBQXFCLEdBQUcsUUFBUSxDQUFDLHNCQUFzQixDQUFDLENBQUMsQ0FBQyxDQUFDO1lBRWpFLElBQUkscUJBQXFCLENBQUMsU0FBUyxLQUFLLFNBQVMsRUFBRSxDQUFDO2dCQUNsRCxNQUFNLElBQUksb0JBQW9CLENBQUMsMEJBQTBCLENBQUMsQ0FBQztZQUM3RCxDQUFDO1lBRUQsTUFBTSxVQUFVLEdBQUcsYUFBYSxDQUFDLE1BQU0sQ0FBQyxDQUFDO1lBQ3pDLE1BQU0sV0FBVyxHQUFHLGFBQWEsQ0FBQyxxQkFBcUIsQ0FBQyxTQUFTLENBQUMsQ0FBQztZQUVuRSxPQUFPO2dCQUNMLE1BQU0sRUFBRSxxQkFBcUIsQ0FBQyxNQUFtQjtnQkFDakQsU0FBUyxFQUFFLGlCQUFpQixDQUFDLGlCQUFpQixDQUFDLEtBQUssRUFBRSxVQUFlLEVBQUUsV0FBVyxDQUFDO2dCQUNuRixvQkFBb0IsRUFBRSxxQkFBcUIsQ0FBQyxTQUFTO2FBQ3RELENBQUM7UUFDSixDQUFDO1FBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztZQUNmLElBQUksS0FBSyxZQUFZLG9CQUFvQixFQUFFLENBQUM7Z0JBQzFDLE1BQU0sS0FBSyxDQUFDO1lBQ2QsQ0FBQztZQUNELE1BQU0sSUFBSSxvQkFBb0IsQ0FBQywwQkFBMEIsRUFBRSxLQUFLLENBQUMsQ0FBQztRQUNwRSxDQUFDO0lBQ0gsQ0FBQyxDQUFDO0FBQ0osQ0FBQyJ9

package/dist/esm/attesteddecrypt/index.d.ts

@@ -0,0 +1,2 @@
+export * from './attested-decrypt.js';
+export * from './types.js';

package/dist/esm/attesteddecrypt/index.js

@@ -0,0 +1,3 @@
+export * from './attested-decrypt.js';
+export * from './types.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvYXR0ZXN0ZWRkZWNyeXB0L2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLGNBQWMsdUJBQXVCLENBQUM7QUFDdEMsY0FBYyxZQUFZLENBQUMifQ==

package/dist/esm/attesteddecrypt/types.d.ts

@@ -0,0 +1,20 @@
+import { HexString } from '../binary.js';
+import { EncryptionScheme, PlaintextOf, SupportedFheType } from '../encryption/encryption.js';
+import type { BackoffConfig } from '../retry.js';
+/**
+ * Custom error class for attested decrypt operations.
+ */
+export declare class AttestedDecryptError extends Error {
+    readonly cause?: unknown | undefined;
+    constructor(message: string, cause?: unknown | undefined);
+}
+export type DecryptionAttestation<S extends EncryptionScheme, T extends SupportedFheType> = {
+    handle: HexString;
+    plaintext: PlaintextOf<S, T>;
+    covalidatorSignature: Uint8Array;
+};
+export type AttestedDecryptor<S extends EncryptionScheme> = <T extends SupportedFheType>(args: {
+    /** The handle to decrypt */
+    handle: HexString;
+    backoffConfig?: Partial<BackoffConfig>;
+}) => Promise<DecryptionAttestation<S, T>>;

package/dist/esm/attesteddecrypt/types.js

@@ -0,0 +1,12 @@
+/**
+ * Custom error class for attested decrypt operations.
+ */
+export class AttestedDecryptError extends Error {
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+        this.name = 'AttestedDecryptError';
+    }
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvYXR0ZXN0ZWRkZWNyeXB0L3R5cGVzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUlBOztHQUVHO0FBQ0gsTUFBTSxPQUFPLG9CQUFxQixTQUFRLEtBQUs7SUFHM0I7SUFGbEIsWUFDRSxPQUFlLEVBQ0MsS0FBZTtRQUUvQixLQUFLLENBQUMsT0FBTyxDQUFDLENBQUM7UUFGQyxVQUFLLEdBQUwsS0FBSyxDQUFVO1FBRy9CLElBQUksQ0FBQyxJQUFJLEdBQUcsc0JBQXNCLENBQUM7SUFDckMsQ0FBQztDQUNGIn0=

package/dist/esm/binary.d.ts

@@ -0,0 +1,21 @@
+import { Schema } from 'effect';
+import { Hex } from 'viem';
+export declare const HexString: Schema.TemplateLiteral<`0x${string}`>;
+export type HexString = typeof HexString.Type;
+export type BytesIsh = string | Uint8Array;
+export declare function bytesToBigInt(byteArray: Uint8Array): bigint;
+export declare function bufferToBigInt(buffer: Buffer): bigint;
+export declare function bigintToBytes32(value: bigint): Bytes32;
+export declare function padLeft(bs: Uint8Array, n: number): Buffer;
+export declare function bytes32ToBigint(bs: BytesIsh): bigint;
+export declare function bytesFromHexString(hexString: string): Buffer;
+export declare function mustBeHex(value: string): Hex;
+export declare function normaliseToHex(value: string): Hex;
+export declare function bytesToHex(bs: Uint8Array): Hex;
+export declare const Bytes32: Schema.brand<Schema.filter<Schema.transformOrFail<Schema.Union<[typeof Schema.String, Schema.refine<object & Uint8Array<ArrayBufferLike>, Schema.Schema<object, object, never>>]>, Schema.TemplateLiteral<`0x${string}`>, never>>, "Bytes32">;
+export declare function asBytes32(x: BytesIsh): Bytes32;
+export type Bytes32 = typeof Bytes32.Type;
+export type Address = typeof Address.Type;
+export declare const Address: Schema.brand<Schema.filter<Schema.TemplateLiteral<`0x${string}`>>, "Address">;
+export declare function parseAddress(address: string): Address;
+export declare function parseHex(hex: string): HexString;

package/dist/esm/binary.js

@@ -0,0 +1,67 @@
+import { ParseResult, Schema } from 'effect';
+import { isHex } from 'viem';
+import { parse } from './schema.js';
+export const HexString = Schema.TemplateLiteral('0x', Schema.String);
+export function bytesToBigInt(byteArray) {
+    // Ugly but better than bigint-buffer that insists on writing junk to stderr if it doesn't have native bindings
+    return !byteArray?.length ? BigInt(0) : BigInt('0x' + Buffer.from(byteArray).toString('hex'));
+}
+export function bufferToBigInt(buffer) {
+    return bytesToBigInt(Uint8Array.from(buffer));
+}
+// Convert a bigint to a 32-byte array, left-padded if necessary. Note: it is
+// caller's responsibility to ensure that the bigint is not too large to fit in
+// 32 bytes, or else the result will be truncated.
+export function bigintToBytes32(value) {
+    return parse(Bytes32, Buffer.from(value.toString(16).padStart(64, '0'), 'hex').toString('hex'));
+}
+export function padLeft(bs, n) {
+    if (bs.length > n) {
+        throw new Error(`Cannot pad ${bs.length} bytes to ${n} - would truncate`);
+    }
+    const buf = Buffer.alloc(n);
+    buf.set(bs, n - bs.length);
+    return buf;
+}
+export function bytes32ToBigint(bs) {
+    const bytes32 = asBytes32(bs);
+    return BigInt(bytes32);
+}
+export function bytesFromHexString(hexString) {
+    return Buffer.from(hexString.startsWith('0x') ? hexString.slice(2) : hexString, 'hex');
+}
+export function mustBeHex(value) {
+    if (!isHex(value)) {
+        throw new Error(`Expected hex string, got: ${value}`);
+    }
+    return value;
+}
+export function normaliseToHex(value) {
+    return mustBeHex(value.startsWith('0x') ? value : `0x${value}`);
+}
+export function bytesToHex(bs) {
+    return ('0x' + Buffer.from(bs).toString('hex'));
+}
+const ByteArray = Schema.Object.pipe(Schema.filter((x) => x instanceof Uint8Array));
+const BytesToHex = Schema.transformOrFail(Schema.Union(Schema.String, ByteArray), HexString, {
+    strict: true,
+    encode: ParseResult.succeed,
+    decode: (x) => x instanceof Uint8Array
+        ? ParseResult.succeed(bytesToHex(x))
+        : ((y) => isHex(y)
+            ? ParseResult.succeed(y)
+            : ParseResult.fail(new ParseResult.Unexpected(y, `'${y}' is not a hex string`)))(normaliseToHex(x)),
+});
+export const Bytes32 = BytesToHex.pipe(Schema.filter((x) => x.length === 66 ||
+    `Expected 32-byte hex string (66 characters with 0x prefix) but got ${x.length} character string`), Schema.brand('Bytes32'));
+export function asBytes32(x) {
+    return parse(Bytes32, x);
+}
+export const Address = HexString.pipe(Schema.filter((s) => s.length === 42 || `Address must be a 20-byte '0x'-prefixed hex string, but got: ${s}`), Schema.brand('Address'));
+export function parseAddress(address) {
+    return parse(Address, address);
+}
+export function parseHex(hex) {
+    return parse(HexString, hex);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/esm/chain.d.ts

@@ -0,0 +1,25 @@
+export declare const supportedChains: {
+    readonly baseSepolia: 84532;
+    readonly sepolia: 11155111;
+    readonly monadTestnet: 10143;
+    readonly plasmaTestnet: 9746;
+    readonly worldchainSepolia: 4801;
+    readonly anvil: 31337;
+};
+export declare const fheSupportedChains: {
+    readonly baseSepolia: 84532;
+    readonly sepolia: 11155111;
+};
+type SupportedChains = typeof supportedChains;
+export type SupportedChainId = SupportedChains[keyof SupportedChains];
+export type SupportedChainName = keyof SupportedChains;
+export type SupportedChain = {
+    name: SupportedChainName;
+    id: SupportedChainId;
+};
+export type Numberish = number | bigint;
+export type Chainish = {
+    id: Numberish;
+} | Numberish | string;
+export declare function getSupportedChain(chainish: Chainish): SupportedChain;
+export {};

package/dist/esm/chain.js

@@ -0,0 +1,27 @@
+// No imports here to avoid issues with closures and modules across pulumi boundary
+// This file can be seen as mirroring the functionality of viem changes without depending on it directly.
+// It exists as a workaround for some very gnarly issues with code reuse between Pulumi and this module, partly
+// relating to modules but also linked to Pulumi's ability to capture closures and serialise them.
+export const supportedChains = {
+    baseSepolia: 84532,
+    sepolia: 11155111,
+    monadTestnet: 10143,
+    plasmaTestnet: 9746,
+    worldchainSepolia: 4801,
+    anvil: 31337,
+};
+export const fheSupportedChains = { baseSepolia: 84532, sepolia: 11155111 };
+// Get supportedChain either by its chain ID or the short name (lower pascal case)
+export function getSupportedChain(chainish) {
+    const found = typeof chainish === 'number' || typeof chainish === 'bigint'
+        ? Object.entries(supportedChains).find(([, id]) => id === Number(chainish))
+        : typeof chainish === 'object'
+            ? Object.entries(supportedChains).find(([, id]) => id === Number(chainish.id))
+            : Object.entries(supportedChains).find(([shortName]) => shortName === chainish);
+    if (!found) {
+        throw new Error(`Supported chain ${chainish} not found`);
+    }
+    const [name, id] = found;
+    return { name: name, id };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/esm/encryption/encryption.d.ts

@@ -0,0 +1,119 @@
+import { Schema } from 'effect';
+import { Bytes32 } from '../binary.js';
+import { InputContext } from '../handle.js';
+export type Encryptor<S extends EncryptionScheme = EncryptionScheme> = <T extends SupportedFheType>(plaintext: PlaintextWithContextOf<S, T>) => Promise<EncryptResultOf<S, T>>;
+export type Decryptor<S extends EncryptionScheme = EncryptionScheme> = <T extends SupportedFheType>(ciphertext: CiphertextOf<S, T>, context?: InputContext) => Promise<PlaintextOf<S, T>>;
+export declare const supportedFheTypes: {
+    readonly euint64: 5;
+    readonly euint160: 7;
+    readonly euint256: 8;
+    readonly ebool: 0;
+};
+export declare const SupportedFheTypeName: Schema.SchemaClass<"ebool" | "euint64" | "euint160" | "euint256", "ebool" | "euint64" | "euint160" | "euint256", never>;
+export type SupportedFheTypeName = typeof SupportedFheTypeName.Type;
+export declare const SupportedFheType: Schema.SchemaClass<0 | 5 | 7 | 8, 0 | 5 | 7 | 8, never>;
+export type SupportedFheType = typeof SupportedFheType.Type;
+export declare const encryptionSchemes: {
+    readonly tfhe: 0;
+    readonly ecies: 1;
+    readonly cryptobox: 2;
+};
+export declare function getEncryptionSchemeName(scheme: number): string;
+export type EncryptionSchemes = typeof encryptionSchemes;
+export type EciesScheme = EncryptionSchemes['ecies'];
+export type TfheScheme = EncryptionSchemes['tfhe'];
+export type CryptoboxScheme = EncryptionSchemes['cryptobox'];
+export declare const EncryptionScheme: Schema.Literal<[0, 1, 2]>;
+export type EncryptionScheme = typeof EncryptionScheme.Type;
+type DistType<P, S extends EncryptionScheme, T extends SupportedFheType> = P extends any ? P & {
+    scheme: S;
+    type: T;
+} : never;
+export declare const ciphertextEnvelopes: {
+    readonly none: 0;
+    readonly hadu: 1;
+};
+export declare const CiphertextEnvelope: Schema.SchemaClass<0 | 1, 0 | 1, never>;
+export declare const Ciphertext: Schema.Struct<{
+    scheme: Schema.Literal<[0, 1, 2]>;
+    type: Schema.SchemaClass<0 | 5 | 7 | 8, 0 | 5 | 7 | 8, never>;
+    value: Schema.TemplateLiteral<`0x${string}`>;
+    envelope: Schema.optional<Schema.SchemaClass<0 | 1, 0 | 1, never>>;
+}>;
+export type Ciphertext = typeof Ciphertext.Type;
+export type CiphertextOf<S extends EncryptionScheme, T extends SupportedFheType> = DistType<Ciphertext, S, T>;
+export declare const CiphertextWithContext: Schema.Struct<{
+    ciphertext: Schema.Struct<{
+        scheme: Schema.Literal<[0, 1, 2]>;
+        type: Schema.SchemaClass<0 | 5 | 7 | 8, 0 | 5 | 7 | 8, never>;
+        value: Schema.TemplateLiteral<`0x${string}`>;
+        envelope: Schema.optional<Schema.SchemaClass<0 | 1, 0 | 1, never>>;
+    }>;
+    context: Schema.Struct<{
+        hostChainId: typeof Schema.BigInt;
+        aclAddress: Schema.TemplateLiteral<`0x${string}`>;
+        userAddress: Schema.TemplateLiteral<`0x${string}`>;
+        contractAddress: Schema.TemplateLiteral<`0x${string}`>;
+    }>;
+}>;
+export type CiphertextWithContext = typeof CiphertextWithContext.Type;
+export type CiphertextWithContextOf<S extends EncryptionScheme, T extends SupportedFheType> = CiphertextWithContext & {
+    ciphertext: CiphertextOf<S, T>;
+};
+export declare const EncryptResult: Schema.Struct<{
+    ciphertext: Schema.Struct<{
+        scheme: Schema.Literal<[0, 1, 2]>;
+        type: Schema.SchemaClass<0 | 5 | 7 | 8, 0 | 5 | 7 | 8, never>;
+        value: Schema.TemplateLiteral<`0x${string}`>;
+        envelope: Schema.optional<Schema.SchemaClass<0 | 1, 0 | 1, never>>;
+    }>;
+    context: Schema.Struct<{
+        hostChainId: typeof Schema.BigInt;
+        aclAddress: Schema.TemplateLiteral<`0x${string}`>;
+        userAddress: Schema.TemplateLiteral<`0x${string}`>;
+        contractAddress: Schema.TemplateLiteral<`0x${string}`>;
+    }>;
+    prehandle: Schema.brand<Schema.filter<Schema.transformOrFail<Schema.Union<[typeof Schema.String, Schema.refine<object & Uint8Array<ArrayBufferLike>, Schema.Schema<object, object, never>>]>, Schema.TemplateLiteral<`0x${string}`>, never>>, "Bytes32">;
+    handle: Schema.brand<Schema.filter<Schema.transformOrFail<Schema.Union<[typeof Schema.String, Schema.refine<object & Uint8Array<ArrayBufferLike>, Schema.Schema<object, object, never>>]>, Schema.TemplateLiteral<`0x${string}`>, never>>, "Bytes32">;
+}>;
+export type EncryptResult = typeof EncryptResult.Type;
+export type EncryptResultOf<S extends EncryptionScheme, T extends SupportedFheType> = EncryptResult & {
+    ciphertext: CiphertextOf<S, T>;
+};
+export declare const Plaintext: Schema.Union<[Schema.Struct<{
+    scheme: Schema.Literal<[0, 1, 2]>;
+    type: Schema.Literal<[5, 7, 8]>;
+    value: typeof Schema.BigInt;
+}>, Schema.Struct<{
+    scheme: Schema.Literal<[0, 1, 2]>;
+    type: Schema.Literal<[0]>;
+    value: typeof Schema.Boolean;
+}>]>;
+export type Plaintext = typeof Plaintext.Type;
+export type PlaintextOf<S extends EncryptionScheme, T extends SupportedFheType> = DistType<Plaintext, S, T>;
+export declare const PlaintextWithContext: Schema.Struct<{
+    plaintext: Schema.Union<[Schema.Struct<{
+        scheme: Schema.Literal<[0, 1, 2]>;
+        type: Schema.Literal<[5, 7, 8]>;
+        value: typeof Schema.BigInt;
+    }>, Schema.Struct<{
+        scheme: Schema.Literal<[0, 1, 2]>;
+        type: Schema.Literal<[0]>;
+        value: typeof Schema.Boolean;
+    }>]>;
+    context: Schema.Struct<{
+        hostChainId: typeof Schema.BigInt;
+        aclAddress: Schema.TemplateLiteral<`0x${string}`>;
+        userAddress: Schema.TemplateLiteral<`0x${string}`>;
+        contractAddress: Schema.TemplateLiteral<`0x${string}`>;
+    }>;
+}>;
+export type PlaintextWithContext = typeof PlaintextWithContext.Type;
+export type PlaintextWithContextOf<S extends EncryptionScheme, T extends SupportedFheType> = PlaintextWithContext & {
+    plaintext: PlaintextOf<S, T>;
+};
+export declare function bigintToPlaintext<S extends EncryptionScheme, T extends SupportedFheType>(scheme: S, type: T, bigPt: bigint): PlaintextOf<S, T>;
+export declare function plaintextToBigint(plaintext: Plaintext): bigint;
+export declare function plaintextToBytes32(plaintext: Plaintext): Bytes32;
+export declare function bytes32ToPlaintext(plaintext: Bytes32, scheme: EncryptionScheme, type: SupportedFheType): Plaintext;
+export {};

package/dist/esm/encryption/encryption.js

@@ -0,0 +1,101 @@
+import { Schema } from 'effect';
+import { bigintToBytes32, Bytes32, HexString } from '../binary.js';
+import { handleTypes, InputContext } from '../handle.js';
+export const supportedFheTypes = {
+    euint64: handleTypes.euint64,
+    euint160: handleTypes.euint160,
+    euint256: handleTypes.euint256,
+    ebool: handleTypes.ebool,
+};
+const supportedFheTypeNames = Object.keys(supportedFheTypes);
+export const SupportedFheTypeName = Schema.Literal(...supportedFheTypeNames);
+// TODO: extend to all types
+export const SupportedFheType = Schema.Literal(...Object.values(supportedFheTypes));
+export const encryptionSchemes = {
+    tfhe: 0,
+    ecies: 1,
+    cryptobox: 2,
+};
+export function getEncryptionSchemeName(scheme) {
+    switch (scheme) {
+        case encryptionSchemes.tfhe:
+            return 'TFHE';
+        case encryptionSchemes.ecies:
+            return 'ECIES';
+        case encryptionSchemes.cryptobox:
+            return 'NACLCryptoBox';
+        default:
+            throw new Error(`Unknown encryption scheme: ${scheme}`);
+    }
+}
+export const EncryptionScheme = Schema.Literal(encryptionSchemes.tfhe, encryptionSchemes.ecies, encryptionSchemes.cryptobox);
+export const ciphertextEnvelopes = {
+    none: 0,
+    hadu: 1,
+};
+export const CiphertextEnvelope = Schema.Literal(...Object.values(ciphertextEnvelopes));
+export const Ciphertext = Schema.Struct({
+    scheme: EncryptionScheme,
+    type: SupportedFheType,
+    value: HexString,
+    envelope: Schema.optional(CiphertextEnvelope),
+});
+export const CiphertextWithContext = Schema.Struct({
+    ciphertext: Ciphertext,
+    context: InputContext,
+});
+export const EncryptResult = Schema.Struct({
+    ciphertext: Ciphertext,
+    context: InputContext,
+    prehandle: Bytes32,
+    handle: Bytes32,
+});
+export const Plaintext = Schema.Union(Schema.Struct({
+    scheme: EncryptionScheme,
+    type: Schema.Literal(handleTypes.euint64, handleTypes.euint160, handleTypes.euint256),
+    value: Schema.BigInt,
+}), Schema.Struct({
+    scheme: EncryptionScheme,
+    type: Schema.Literal(handleTypes.ebool),
+    value: Schema.Boolean,
+}));
+export const PlaintextWithContext = Schema.Struct({
+    plaintext: Plaintext,
+    context: InputContext,
+});
+export function bigintToPlaintext(scheme, type, bigPt) {
+    switch (type) {
+        case handleTypes.euint64:
+        case handleTypes.euint160:
+        case handleTypes.euint256:
+            return {
+                scheme,
+                type,
+                value: bigPt,
+            };
+        case handleTypes.ebool:
+            return {
+                scheme,
+                type,
+                value: bigPt !== 0n,
+            };
+    }
+    throw new Error(`Unsupported FHE type: ${type}`);
+}
+export function plaintextToBigint(plaintext) {
+    switch (plaintext.type) {
+        case handleTypes.euint64:
+        case handleTypes.euint160:
+        case handleTypes.euint256:
+            return plaintext.value;
+        case handleTypes.ebool:
+            return plaintext.value ? 1n : 0n;
+    }
+}
+export function plaintextToBytes32(plaintext) {
+    return bigintToBytes32(plaintextToBigint(plaintext));
+}
+export function bytes32ToPlaintext(plaintext, scheme, type) {
+    return bigintToPlaintext(scheme, type, BigInt(plaintext));
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/esm/encryption/index.d.ts

@@ -0,0 +1 @@
+export * from './encryption.js';

package/dist/esm/encryption/index.js

@@ -0,0 +1,2 @@
+export * from './encryption.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvZW5jcnlwdGlvbi9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxjQUFjLGlCQUFpQixDQUFDIn0=

package/dist/esm/fhevm/fhe-environment.d.ts

@@ -0,0 +1,9 @@
+import { Chainish } from '../chain.js';
+export type Address = `0x${string}`;
+export type FheEnvironment = {
+    aclAddress: Address;
+    thfeExecutorAddress: Address;
+    gatewayAddress: Address;
+    kmsVerifierAddress: Address;
+};
+export declare function getFheEnvironment(chainId: Chainish): FheEnvironment;

package/dist/esm/fhevm/fhe-environment.js

@@ -0,0 +1,8 @@
+// Avoid inporting any other dependencies in this file to avoid serialisation issues downstream in infracto
+import { getSupportedChain } from '../chain.js';
+import { FHEEnvironments } from '../generated/fhe-environments.js';
+export function getFheEnvironment(chainId) {
+    const supportedChain = getSupportedChain(chainId);
+    return FHEEnvironments[supportedChain.name];
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZmhlLWVudmlyb25tZW50LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL2ZoZXZtL2ZoZS1lbnZpcm9ubWVudC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSwyR0FBMkc7QUFDM0csT0FBTyxFQUFnQyxpQkFBaUIsRUFBRSxNQUFNLGFBQWEsQ0FBQztBQUM5RSxPQUFPLEVBQUUsZUFBZSxFQUFFLE1BQU0sa0NBQWtDLENBQUM7QUFhbkUsTUFBTSxVQUFVLGlCQUFpQixDQUFDLE9BQWlCO0lBQ2pELE1BQU0sY0FBYyxHQUFHLGlCQUFpQixDQUFDLE9BQU8sQ0FBQyxDQUFDO0lBQ2xELE9BQU8sZUFBZSxDQUFDLGNBQWMsQ0FBQyxJQUF1QyxDQUFDLENBQUM7QUFDakYsQ0FBQyJ9