@primuslabs/fhetransform-sdk 0.4.0

package/dist/core/fhe-type.d.ts

@@ -0,0 +1,75 @@
+import { Bytes32Hex, BytesHex } from "./primitives.js";
+/**
+ * FHE operation types.
+ */
+export declare enum Operator {
+    fheNone = 0,
+    fheAdd = 1,
+    fheSub = 2,
+    fheMul = 3,
+    fheDiv = 4,
+    fheBitAnd = 5,
+    fheBitOr = 6,
+    fheBitXor = 7,
+    fheBitNot = 8,
+    fheEq = 9,
+    fheNe = 10,
+    fheGe = 11,
+    fheGt = 12,
+    fheLe = 13,
+    fheLt = 14,
+    fheIfThenElse = 15,
+    trivialEncrypt = 16,
+    verifyAttestation = 17
+}
+/**
+ * FHE (Fully Homomorphic Encryption) data types.
+ * Represents different integer sizes for encrypted values.
+ */
+export declare enum FheType {
+    ve_bool = 0,
+    ve_uint8 = 1,
+    ve_uint16 = 2,
+    ve_uint32 = 3,
+    ve_uint64 = 4,
+    ve_uint128 = 5,
+    ve_uint256 = 6
+}
+/**
+ * Converts an FheType enum value to its Solidity type string representation.
+ * @param fheType - The FheType enum value
+ * @returns The corresponding Solidity type string
+ * @throws Error if the FheType is unsupported
+ */
+export declare function getFheTypeString(fheType: FheType): string;
+/**
+ * Converts a Solidity type string to its FheType enum value.
+ * @param type - The Solidity type string (e.g., "uint256")
+ * @returns The corresponding FheType enum value
+ * @throws Error if the Solidity type is unsupported
+ */
+export declare function getFheTypeFromString(type: string): FheType;
+/**
+ * Returns the byte length for a given FHE type.
+ * @param fheType - The FheType enum value
+ * @returns The byte length of the type
+ */
+export declare function getTypeLength(fheType: FheType): number;
+/**
+ * Handle identifier type - a hex string representing a 32-byte handle.
+ */
+export type HandleLike = Bytes32Hex;
+/**
+ * Unverified encryption data returned from the server.
+ */
+export interface UnverifiedEncryptData {
+    handle: HandleLike;
+    data: BytesHex;
+}
+/**
+ * Decrypted plaintext result containing both type and value.
+ */
+export interface Plaintext {
+    type: FheType;
+    value: bigint | boolean;
+}

package/dist/core/fhe-type.js

@@ -0,0 +1,115 @@
+import { logger } from "./logger.js";
+import { FheErrorCode } from "./errors/error-codes.js";
+import { FheError } from "./errors/fhe-error.js";
+/**
+ * FHE operation types.
+ */
+export var Operator;
+(function (Operator) {
+    Operator[Operator["fheNone"] = 0] = "fheNone";
+    Operator[Operator["fheAdd"] = 1] = "fheAdd";
+    Operator[Operator["fheSub"] = 2] = "fheSub";
+    Operator[Operator["fheMul"] = 3] = "fheMul";
+    Operator[Operator["fheDiv"] = 4] = "fheDiv";
+    Operator[Operator["fheBitAnd"] = 5] = "fheBitAnd";
+    Operator[Operator["fheBitOr"] = 6] = "fheBitOr";
+    Operator[Operator["fheBitXor"] = 7] = "fheBitXor";
+    Operator[Operator["fheBitNot"] = 8] = "fheBitNot";
+    Operator[Operator["fheEq"] = 9] = "fheEq";
+    Operator[Operator["fheNe"] = 10] = "fheNe";
+    Operator[Operator["fheGe"] = 11] = "fheGe";
+    Operator[Operator["fheGt"] = 12] = "fheGt";
+    Operator[Operator["fheLe"] = 13] = "fheLe";
+    Operator[Operator["fheLt"] = 14] = "fheLt";
+    Operator[Operator["fheIfThenElse"] = 15] = "fheIfThenElse";
+    Operator[Operator["trivialEncrypt"] = 16] = "trivialEncrypt";
+    Operator[Operator["verifyAttestation"] = 17] = "verifyAttestation";
+})(Operator || (Operator = {}));
+/**
+ * FHE (Fully Homomorphic Encryption) data types.
+ * Represents different integer sizes for encrypted values.
+ */
+export var FheType;
+(function (FheType) {
+    FheType[FheType["ve_bool"] = 0] = "ve_bool";
+    FheType[FheType["ve_uint8"] = 1] = "ve_uint8";
+    FheType[FheType["ve_uint16"] = 2] = "ve_uint16";
+    FheType[FheType["ve_uint32"] = 3] = "ve_uint32";
+    FheType[FheType["ve_uint64"] = 4] = "ve_uint64";
+    FheType[FheType["ve_uint128"] = 5] = "ve_uint128";
+    FheType[FheType["ve_uint256"] = 6] = "ve_uint256";
+})(FheType || (FheType = {}));
+// Mapping from FheType enum to corresponding Solidity type strings
+const FHE_TYPE_TO_SOLIDITY_TYPE = {
+    [FheType.ve_bool]: "bool",
+    [FheType.ve_uint8]: "uint8",
+    [FheType.ve_uint16]: "uint16",
+    [FheType.ve_uint32]: "uint32",
+    [FheType.ve_uint64]: "uint64",
+    [FheType.ve_uint128]: "uint128",
+    [FheType.ve_uint256]: "uint256",
+};
+// Mapping from Solidity type strings to FheType enum values
+const SOLIDITY_TYPE_TO_FHE_TYPE = {
+    bool: FheType.ve_bool,
+    uint8: FheType.ve_uint8,
+    uint16: FheType.ve_uint16,
+    uint32: FheType.ve_uint32,
+    uint64: FheType.ve_uint64,
+    uint128: FheType.ve_uint128,
+    uint256: FheType.ve_uint256,
+};
+/**
+ * Converts an FheType enum value to its Solidity type string representation.
+ * @param fheType - The FheType enum value
+ * @returns The corresponding Solidity type string
+ * @throws Error if the FheType is unsupported
+ */
+export function getFheTypeString(fheType) {
+    const type = FHE_TYPE_TO_SOLIDITY_TYPE[fheType];
+    if (!type) {
+        throw new FheError({ code: FheErrorCode.Unsupported, message: `Unsupported FheType: ${fheType}` });
+    }
+    return type;
+}
+/**
+ * Converts a Solidity type string to its FheType enum value.
+ * @param type - The Solidity type string (e.g., "uint256")
+ * @returns The corresponding FheType enum value
+ * @throws Error if the Solidity type is unsupported
+ */
+export function getFheTypeFromString(type) {
+    const fheType = SOLIDITY_TYPE_TO_FHE_TYPE[type];
+    if (fheType === undefined) {
+        throw new FheError({ code: FheErrorCode.Unsupported, message: `Unsupported Solidity type: ${type}` });
+    }
+    return fheType;
+}
+/**
+ * Returns the byte length for a given FHE type.
+ * @param fheType - The FheType enum value
+ * @returns The byte length of the type
+ */
+export function getTypeLength(fheType) {
+    switch (fheType) {
+        case FheType.ve_bool:
+            return 1;
+        case FheType.ve_uint8:
+            return 1;
+        case FheType.ve_uint16:
+            return 2;
+        case FheType.ve_uint32:
+            return 4;
+        case FheType.ve_uint64:
+            return 8;
+        case FheType.ve_uint128:
+            return 16;
+        case FheType.ve_uint256:
+            return 32;
+        default: {
+            logger.warn(`Unknown FheType: ${fheType}, defaulting to 1 byte`);
+            return 1;
+        }
+    }
+}
+//# sourceMappingURL=fhe-type.js.map

package/dist/core/fhe-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fhe-type.js","sourceRoot":"","sources":["../../src/core/fhe-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD;;GAEG;AACH,MAAM,CAAN,IAAY,QAmBX;AAnBD,WAAY,QAAQ;IAClB,6CAAW,CAAA;IACX,2CAAU,CAAA;IACV,2CAAM,CAAA;IACN,2CAAM,CAAA;IACN,2CAAM,CAAA;IACN,iDAAS,CAAA;IACT,+CAAQ,CAAA;IACR,iDAAS,CAAA;IACT,iDAAS,CAAA;IACT,yCAAK,CAAA;IACL,0CAAK,CAAA;IACL,0CAAK,CAAA;IACL,0CAAK,CAAA;IACL,0CAAK,CAAA;IACL,0CAAK,CAAA;IACL,0DAAa,CAAA;IACb,4DAAc,CAAA;IACd,kEAAiB,CAAA;AACnB,CAAC,EAnBW,QAAQ,KAAR,QAAQ,QAmBnB;AAED;;;GAGG;AACH,MAAM,CAAN,IAAY,OAQX;AARD,WAAY,OAAO;IACjB,2CAAW,CAAA;IACX,6CAAY,CAAA;IACZ,+CAAa,CAAA;IACb,+CAAa,CAAA;IACb,+CAAa,CAAA;IACb,iDAAc,CAAA;IACd,iDAAc,CAAA;AAChB,CAAC,EARW,OAAO,KAAP,OAAO,QAQlB;AAED,mEAAmE;AACnE,MAAM,yBAAyB,GAA4B;IACzD,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM;IACzB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO;IAC3B,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ;IAC7B,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ;IAC7B,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ;IAC7B,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS;IAC/B,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS;CAChC,CAAC;AAEF,4DAA4D;AAC5D,MAAM,yBAAyB,GAA4B;IACzD,IAAI,EAAE,OAAO,CAAC,OAAO;IACrB,KAAK,EAAE,OAAO,CAAC,QAAQ;IACvB,MAAM,EAAE,OAAO,CAAC,SAAS;IACzB,MAAM,EAAE,OAAO,CAAC,SAAS;IACzB,MAAM,EAAE,OAAO,CAAC,SAAS;IACzB,OAAO,EAAE,OAAO,CAAC,UAAU;IAC3B,OAAO,EAAE,OAAO,CAAC,UAAU;CAC5B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,IAAI,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,wBAAwB,OAAO,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,OAAO,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,8BAA8B,IAAI,EAAE,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO,CAAC,OAAO;YAClB,OAAO,CAAC,CAAC;QACX,KAAK,OAAO,CAAC,QAAQ;YACnB,OAAO,CAAC,CAAC;QACX,KAAK,OAAO,CAAC,SAAS;YACpB,OAAO,CAAC,CAAC;QACX,KAAK,OAAO,CAAC,SAAS;YACpB,OAAO,CAAC,CAAC;QACX,KAAK,OAAO,CAAC,SAAS;YACpB,OAAO,CAAC,CAAC;QACX,KAAK,OAAO,CAAC,UAAU;YACrB,OAAO,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC,UAAU;YACrB,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,oBAAoB,OAAO,wBAAwB,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/core/fhe.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Encrypts an integer with ZK proof support.
+ *
+ * @param input - Input data to encrypt as Uint8Array
+ * @param pk - Public key as Uint8Array
+ * @param crs - CRS bytes for ZK proof
+ * @param metadata - Metadata for ZK proof
+ * @returns Promise resolving to ciphertext as Uint8Array
+ * @throws Error if input is invalid or encryption fails
+ */
+export declare function encryptIntegerWithZkProof(input: Uint8Array, pk: Uint8Array, crs: Uint8Array, metadata: Uint8Array): Promise<Uint8Array>;

package/dist/core/fhe.js

@@ -0,0 +1,23 @@
+import { createFheWasmClient } from '#worker-client';
+const client = createFheWasmClient();
+/**
+ * Encrypts an integer with ZK proof support.
+ *
+ * @param input - Input data to encrypt as Uint8Array
+ * @param pk - Public key as Uint8Array
+ * @param crs - CRS bytes for ZK proof
+ * @param metadata - Metadata for ZK proof
+ * @returns Promise resolving to ciphertext as Uint8Array
+ * @throws Error if input is invalid or encryption fails
+ */
+export async function encryptIntegerWithZkProof(input, pk, crs, metadata) {
+    // return encryptInternal(input, PK_TYPE.ZK, pk, crs, metadata);
+    const ciphertext = await client.encryptIntegerWithZkProof(
+    // {input, pk, crs, metadata, refresh:false}
+    {
+        input: new Uint8Array(input), pk: new Uint8Array(pk), crs: new Uint8Array(crs),
+        metadata: new Uint8Array(metadata), refresh: false,
+    });
+    return ciphertext;
+}
+//# sourceMappingURL=fhe.js.map

package/dist/core/fhe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fhe.js","sourceRoot":"","sources":["../../src/core/fhe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;AAErC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAiB,EACjB,EAAc,EACd,GAAe,EACf,QAAoB;IAEpB,gEAAgE;IAChE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,yBAAyB;IACvD,4CAA4C;IAC5C;QACE,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC;QAC9E,QAAQ,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK;KACnD,CACF,CAAC;IACF,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/core/handle.d.ts

@@ -0,0 +1,42 @@
+import { FheType, HandleLike } from "./fhe-type.js";
+/**
+ * Gets the current handle version used by local handle generation.
+ * The version is compiled into the build rather than fetched from the chain.
+ *
+ * @returns The handle version number
+ */
+export declare function getHandleVersion(): number;
+/**
+ * Creates a 32-byte handle identifier for off-chain ciphertext.
+ * The layout depends on the active handle version.
+ *
+ * Handle structure:
+ * - Version 0: [20..27] Chain ID, [28] Input type, [29] Operator, [30] FHE type, [31] Version
+ * - Version 1: [28] Chain key, [29] Operator, [30] FHE type, [31] Version
+ *
+ * @param chainId - Blockchain chain ID
+ * @param fheType - FHE data type
+ * @param handleVersion - Handle version (defaults to the compiled-in version)
+ * @returns Hex string representation of the 32-byte handle (0x-prefixed)
+ * @throws Error if the handle version is unsupported
+ */
+export declare function makeHandle(chainId: number, fheType: FheType, handleVersion?: number): `0x${string}`;
+/**
+ * Extracts the FHE type from a handle.
+ * @param handle - The handle identifier (32-byte hex string)
+ * @returns The FheType enum value
+ */
+export declare function getHandleFheType(handle: HandleLike): FheType;
+/**
+ * Extracts and returns the ABI type string from a handle.
+ * @param handle - The handle identifier (32-byte hex string)
+ * @returns The Solidity type string (e.g., "uint256")
+ */
+export declare function getHandleAbiType(handle: HandleLike): string;
+/**
+ * Extracts the blockchain chain ID from a handle by reading the chain key at byte 28.
+ * @param handle - The handle identifier (32-byte hex string)
+ * @returns The blockchain chain ID
+ * @throws Error if the chain key is not found in the CHAINS mapping
+ */
+export declare function extractChainIdFromHandle(handle: HandleLike): bigint;

package/dist/core/handle.js

@@ -0,0 +1,99 @@
+import { bytesToHex, fromHexString } from "./bytes.js";
+import { chainKeyToChainIdMap, getChainKey } from "./chain.js";
+import { getFheTypeString, Operator } from "./fhe-type.js";
+import { logger } from "./logger.js";
+import { FheErrorCode } from "./errors/error-codes.js";
+import { FheError } from "./errors/fhe-error.js";
+/**
+ * Gets the current handle version used by local handle generation.
+ * The version is compiled into the build rather than fetched from the chain.
+ *
+ * @returns The handle version number
+ */
+export function getHandleVersion() {
+    return 1;
+}
+/**
+ * Creates a 32-byte handle identifier for off-chain ciphertext.
+ * The layout depends on the active handle version.
+ *
+ * Handle structure:
+ * - Version 0: [20..27] Chain ID, [28] Input type, [29] Operator, [30] FHE type, [31] Version
+ * - Version 1: [28] Chain key, [29] Operator, [30] FHE type, [31] Version
+ *
+ * @param chainId - Blockchain chain ID
+ * @param fheType - FHE data type
+ * @param handleVersion - Handle version (defaults to the compiled-in version)
+ * @returns Hex string representation of the 32-byte handle (0x-prefixed)
+ * @throws Error if the handle version is unsupported
+ */
+export function makeHandle(chainId, fheType, handleVersion = getHandleVersion()) {
+    const handleBytes = new Uint8Array(32);
+    crypto.getRandomValues(handleBytes);
+    handleBytes.fill(0, 20, 32);
+    logger.debug(`Creating handle: chainId=${chainId}, fheType=${fheType}, version=${handleVersion}`);
+    if (handleVersion === 0) {
+        // Version 0 handle format
+        const chainIdBytes = fromHexString(chainId.toString(16).padStart(16, "0"));
+        handleBytes.set(chainIdBytes, 20); // Chain ID bytes
+        handleBytes[28] = 0x00; // Input type: off-chain
+        handleBytes[29] = Operator.fheNone;
+        handleBytes[30] = fheType; // FHE type
+        handleBytes[31] = handleVersion; // Handle version
+    }
+    else if (handleVersion === 1) {
+        // Version 1 handle format
+        // Bytes 20-27 are zeroed for off-chain handles; byte 28 stores the chain key
+        const chainKey = getChainKey(BigInt(chainId));
+        handleBytes[28] = chainKey;
+        handleBytes[29] = Operator.fheNone;
+        handleBytes[30] = fheType; // FHE type
+        // Lower nibble stores the handle version: 000b|00001b (off-chain | handleVersion)
+        handleBytes[31] = handleVersion;
+    }
+    else {
+        logger.error(`Unsupported handle version: ${handleVersion}`);
+        throw new FheError({ code: FheErrorCode.Unsupported, message: `Unsupported handle version: ${handleVersion}` });
+    }
+    const result = bytesToHex(handleBytes);
+    logger.trace(`Handle created: ${result.substring(0, 20)}...`);
+    return result;
+}
+/**
+ * Extracts the FHE type from a handle.
+ * @param handle - The handle identifier (32-byte hex string)
+ * @returns The FheType enum value
+ */
+export function getHandleFheType(handle) {
+    const handleBytes = fromHexString(handle);
+    return handleBytes[30];
+}
+/**
+ * Extracts and returns the ABI type string from a handle.
+ * @param handle - The handle identifier (32-byte hex string)
+ * @returns The Solidity type string (e.g., "uint256")
+ */
+export function getHandleAbiType(handle) {
+    const handleBytes = fromHexString(handle);
+    const fheType = handleBytes[30];
+    return getFheTypeString(fheType);
+}
+/**
+ * Extracts the blockchain chain ID from a handle by reading the chain key at byte 28.
+ * @param handle - The handle identifier (32-byte hex string)
+ * @returns The blockchain chain ID
+ * @throws Error if the chain key is not found in the CHAINS mapping
+ */
+export function extractChainIdFromHandle(handle) {
+    const handleBytes = fromHexString(handle);
+    const chainKey = handleBytes[28]; // Chain key is stored at byte offset 28
+    const chainId = chainKeyToChainIdMap.get(chainKey);
+    if (chainId === undefined) {
+        throw new FheError({
+            code: FheErrorCode.UnsupportedChain,
+            message: `Unsupported chain key: ${chainKey} (not found in CHAINS mapping)`,
+        });
+    }
+    return chainId;
+}
+//# sourceMappingURL=handle.js.map

package/dist/core/handle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle.js","sourceRoot":"","sources":["../../src/core/handle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAW,gBAAgB,EAAc,QAAQ,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,OAAgB,EAChB,gBAAwB,gBAAgB,EAAE;IAE1C,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IACpC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAE5B,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,aAAa,OAAO,aAAa,aAAa,EAAE,CAAC,CAAC;IAElG,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QACxB,0BAA0B;QAC1B,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3E,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB;QACpD,WAAW,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,wBAAwB;QAChD,WAAW,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;QACnC,WAAW,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,WAAW;QACtC,WAAW,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,iBAAiB;IACpD,CAAC;SAAM,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QAC/B,0BAA0B;QAC1B,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,WAAW,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC;QAC3B,WAAW,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;QACnC,WAAW,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,WAAW;QACtC,kFAAkF;QAClF,WAAW,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,+BAA+B,aAAa,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,+BAA+B,aAAa,EAAE,EAAE,CAAC,CAAC;IAClH,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,WAAW,CAAC,EAAE,CAAY,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAY,CAAC;IAC3C,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAkB;IACzD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC;IAE1E,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,YAAY,CAAC,gBAAgB;YACnC,OAAO,EAAE,0BAA0B,QAAQ,gCAAgC;SAC5E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/json-utils.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Utility class for serializing and deserializing JSON data that contains BigInt values.
+ * BigInts are encoded as objects with a type marker to preserve precision during serialization.
+ */
+export declare class JSONWithBigInt {
+    /**
+     * Serializes a value to a JSON string, converting BigInts to a serializable format.
+     * @param value - The value to serialize (may contain BigInts)
+     * @returns A JSON string with BigInts encoded as `{ __type: 'bigint', value: '123' }`
+     */
+    static stringify(value: any): string;
+    /**
+     * Parses a JSON string, restoring encoded BigInts to their original type.
+     * @param text - The JSON string to parse
+     * @returns The parsed value with BigInts restored
+     */
+    static parse(text: string): any;
+}

package/dist/core/json-utils.js

@@ -0,0 +1,37 @@
+/**
+ * Utility class for serializing and deserializing JSON data that contains BigInt values.
+ * BigInts are encoded as objects with a type marker to preserve precision during serialization.
+ */
+export class JSONWithBigInt {
+    /**
+     * Serializes a value to a JSON string, converting BigInts to a serializable format.
+     * @param value - The value to serialize (may contain BigInts)
+     * @returns A JSON string with BigInts encoded as `{ __type: 'bigint', value: '123' }`
+     */
+    static stringify(value) {
+        return JSON.stringify(value, (_key, val) => {
+            if (typeof val === "bigint") {
+                return {
+                    __type: "bigint",
+                    value: val.toString(),
+                };
+            }
+            return val;
+        });
+    }
+    /**
+     * Parses a JSON string, restoring encoded BigInts to their original type.
+     * @param text - The JSON string to parse
+     * @returns The parsed value with BigInts restored
+     */
+    static parse(text) {
+        return JSON.parse(text, (_key, value) => {
+            // Check for the BigInt type marker and restore as BigInt
+            if (value && typeof value === "object" && value.__type === "bigint") {
+                return BigInt(value.value);
+            }
+            return value;
+        });
+    }
+}
+//# sourceMappingURL=json-utils.js.map

package/dist/core/json-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-utils.js","sourceRoot":"","sources":["../../src/core/json-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,OAAO,cAAc;IACzB;;;;OAIG;IACH,MAAM,CAAC,SAAS,CAAC,KAAU;QACzB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE;iBACtB,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACtC,yDAAyD;YACzD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACpE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/core/kms.d.ts

@@ -0,0 +1,42 @@
+export { kms_init } from "#wasm-loader";
+/**
+ * Generates a new encryption key pair.
+ * @returns The generated key pair as a WASM-compatible object.
+ */
+export declare const kms_enc_keygen: (...args: any[]) => any;
+/**
+ * Encrypts data using the KMS encryption scheme.
+ * @param ...args - Arguments required for encryption (key, plaintext, etc.).
+ * @returns The encrypted data.
+ */
+export declare const kms_encrypt: (...args: any[]) => any;
+/**
+ * Decrypts data using the KMS encryption scheme.
+ * @param ...args - Arguments required for decryption (key, ciphertext, etc.).
+ * @returns The decrypted plaintext.
+ */
+export declare const kms_decrypt: (...args: any[]) => any;
+/**
+ * Performs signcryption (signature + encryption) on data.
+ * @param ...args - Arguments required for signcryption.
+ * @returns The signcrypted data.
+ */
+export declare const kms_signcrypt_ex: (...args: any[]) => any;
+/**
+ * Performs unsigncryption (decryption + signature verification) on data.
+ * @param ...args - Arguments required for unsigncryption.
+ * @returns The decrypted and verified data.
+ */
+export declare const kms_unsigncrypt: (...args: any[]) => any;
+/**
+ * Splits a secret into multiple shares using a secret sharing scheme.
+ * @param ...args - Arguments required for splitting.
+ * @returns Array of secret shares.
+ */
+export declare const kms_split_secret: (...args: any[]) => any;
+/**
+ * Combines multiple secret shares to reconstruct the original secret.
+ * @param ...args - Arguments required for combining.
+ * @returns The reconstructed secret.
+ */
+export declare const kms_combine_secret: (...args: any[]) => any;

package/dist/core/kms.js

@@ -0,0 +1,70 @@
+import { kms_module } from "#wasm-loader";
+export { kms_init } from "#wasm-loader";
+import { FheErrorCode } from "./errors/error-codes.js";
+import { FheError } from "./errors/fhe-error.js";
+/**
+ * KMS (Key Management Service) WebAssembly module.
+ * Provides cryptographic operations including encryption, decryption,
+ * signcryption, and secret splitting.
+ *
+ * The module automatically loads the appropriate WASM bundle based on the
+ * runtime environment (browser vs Node.js).
+ */
+/**
+ * Creates an API function that wraps a WASM module method.
+ * Ensures the module is initialized before calling the method.
+ *
+ * @param name - The name of the WASM function to call.
+ * @returns A function that calls the WASM method with the provided arguments.
+ */
+const api = (name) => (...args) => {
+    if (!kms_module()) {
+        throw new FheError({ code: FheErrorCode.KmsNotInitialized, message: "KMS WASM module not initialized. Please call kms_init() first." });
+    }
+    return kms_module()[name](...args);
+};
+// ============================================
+// Cryptographic Operations
+// ============================================
+/**
+ * Generates a new encryption key pair.
+ * @returns The generated key pair as a WASM-compatible object.
+ */
+export const kms_enc_keygen = api("wasm_enc_keygen");
+/**
+ * Encrypts data using the KMS encryption scheme.
+ * @param ...args - Arguments required for encryption (key, plaintext, etc.).
+ * @returns The encrypted data.
+ */
+export const kms_encrypt = api("wasm_encrypt");
+/**
+ * Decrypts data using the KMS encryption scheme.
+ * @param ...args - Arguments required for decryption (key, ciphertext, etc.).
+ * @returns The decrypted plaintext.
+ */
+export const kms_decrypt = api("wasm_decrypt");
+/**
+ * Performs signcryption (signature + encryption) on data.
+ * @param ...args - Arguments required for signcryption.
+ * @returns The signcrypted data.
+ */
+export const kms_signcrypt_ex = api("wasm_signcrypt_ex");
+/**
+ * Performs unsigncryption (decryption + signature verification) on data.
+ * @param ...args - Arguments required for unsigncryption.
+ * @returns The decrypted and verified data.
+ */
+export const kms_unsigncrypt = api("wasm_unsigncrypt");
+/**
+ * Splits a secret into multiple shares using a secret sharing scheme.
+ * @param ...args - Arguments required for splitting.
+ * @returns Array of secret shares.
+ */
+export const kms_split_secret = api("wasm_split_secret");
+/**
+ * Combines multiple secret shares to reconstruct the original secret.
+ * @param ...args - Arguments required for combining.
+ * @returns The reconstructed secret.
+ */
+export const kms_combine_secret = api("wasm_combine_secret");
+//# sourceMappingURL=kms.js.map

package/dist/core/kms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kms.js","sourceRoot":"","sources":["../../src/core/kms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,IAAW,EAAE,EAAE;IAC/C,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,iBAAiB,EAAE,OAAO,EAAE,gEAAgE,EAAE,CAAC,CAAC;IAC1I,CAAC;IACD,OAAO,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,+CAA+C;AAC/C,2BAA2B;AAC3B,+CAA+C;AAE/C;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAEvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC"}

package/dist/core/logger.d.ts

@@ -0,0 +1,3 @@
+import { Logger, TLogLevelName } from "tslog";
+export declare const logger: Logger<unknown>;
+export declare function setLogLevel(level: TLogLevelName): void;

package/dist/core/logger.js

@@ -0,0 +1,11 @@
+import { Logger } from "tslog";
+export const logger = new Logger({
+    type: "pretty",
+    pretty: {},
+    minLevel: 'INFO',
+    stack: { capture: "off" }
+});
+export function setLogLevel(level) {
+    logger.setMinLevel(level);
+}
+//# sourceMappingURL=logger.js.map

package/dist/core/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/core/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAiB,MAAM,OAAO,CAAC;AAE9C,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;IAC/B,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,EACP;IACD,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;CAC1B,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CAAC,KAAoB;IAC9C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}

package/dist/core/pretty-print.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Recursively formats values for human-readable display.
+ * - Truncates long strings (>132 chars) to show head and tail with length.
+ * - Converts BigInts to strings.
+ * - Recursively processes objects.
+ *
+ * @param value - The value to format
+ * @returns The formatted value
+ */
+export declare function formatValue(value: any): any;
+/**
+ * Pretty-prints data to the console with hex string truncation.
+ * - In browser environments: uses console.log with JSON formatting
+ * - In Node.js environments: uses console.dir with detailed options
+ *
+ * @param data - The data to pretty-print
+ */
+export declare function prettyPrint(data: any): void;