@primuslabs/fhetransform-sdk 0.4.0

package/dist/jazz/public-decrypt-p.js

@@ -0,0 +1,258 @@
+import { ethers } from "ethers";
+import { logger } from "../core/logger.js";
+import { formatValue } from "../core/pretty-print.js";
+import { readKmsSignersInfo } from "./read-contract.js";
+import { aclAbi } from "../abis/acl.abi.js";
+import { FheErrorCode } from "../core/errors/error-codes.js";
+import { FheError } from "../core/errors/fhe-error.js";
+// ============================================================================
+// EIP-712 Constants
+// ============================================================================
+/**
+ * EIP-712 type definitions for KMS public decryption.
+ *
+ * CRITICAL: Field order is authoritative — it determines the EIP-712 type hash.
+ * Changing the order will produce a different signature and break on-chain verification.
+ * Must match the Solidity struct definition exactly.
+ */
+export const kmsPublicDecryptEip712Types = {
+    EIP712Domain: [
+        { name: 'name', type: 'string' },
+        { name: 'version', type: 'string' },
+        { name: 'chainId', type: 'uint256' },
+        { name: 'verifyingContract', type: 'address' },
+    ],
+    // CRITICAL: Field order is authoritative — it determines the EIP-712 type hash.
+    // Changing the order will produce a different signature and break on-chain verification.
+    // Must match the Solidity struct definition exactly.
+    PublicDecryptSignData: [
+        { name: 'ctHandles', type: 'bytes32[]' },
+        { name: 'decryptedResult', type: 'bytes' },
+        { name: 'extraData', type: 'bytes' },
+    ],
+};
+// ============================================================================
+// Signature Verification
+// ============================================================================
+/**
+ * Verifies KMS public decryption EIP-712 signatures.
+ *
+ * This function:
+ * 1. Reconstructs the EIP-712 message from the result
+ * 2. Recovers the signer addresses from each signature
+ * 3. Verifies all recovered addresses are in the KMS signer set
+ * 4. Verifies the threshold is met
+ *
+ * @param client - The Jazz client instance
+ * @param params - Verification parameters (chainId, verifyingContract, handles)
+ * @param result - Public decryption result containing signatures and decrypted data
+ * @throws Error if verification fails (unknown signer, threshold not met, invalid signature)
+ */
+export async function verifyPublicDecryptionSignatures(client, params, result) {
+    // Enter method
+    logger.debug(() => ['[verifyPublicDecryptionSignatures] Enter', formatValue({ params, result })]);
+    // ============================================================================
+    // Step 1: Build EIP-712 Domain and Message
+    // ============================================================================
+    const domain = {
+        name: 'Decryption',
+        version: '1',
+        chainId: params.chainId,
+        verifyingContract: params.verifyingContract,
+    };
+    const types = kmsPublicDecryptEip712Types;
+    const primaryType = 'PublicDecryptSignData';
+    const message = {
+        ctHandles: [...params.handles],
+        decryptedResult: result.orderedAbiEncodedClearValues,
+        extraData: result.extraData,
+    };
+    logger.debug(() => ['[verifyPublicDecryptionSignatures] EIP-712 built',
+        formatValue({ domain, types, primaryType, message })]);
+    // ============================================================================
+    // Step 2: Recover Signer Addresses
+    // ============================================================================
+    const primaryTypeFields = types[primaryType];
+    if (primaryTypeFields === undefined) {
+        logger.error('[verifyPublicDecryptionSignatures] Primary type not found', {
+            primaryType,
+        });
+        throw new FheError({ code: FheErrorCode.Internal, message: `Primary type "${primaryType}" not found in types` });
+    }
+    const typesToSign = {
+        [primaryType]: [...primaryTypeFields],
+    };
+    const signatures = result.kmsPublicDecryptEIP712Signatures;
+    logger.debug('[verifyPublicDecryptionSignatures] Recovering signer addresses', {
+        signatureCount: signatures.length,
+    });
+    const recoveredAddresses = await Promise.all(signatures.map(async (signature, index) => {
+        try {
+            const signerAddress = ethers.verifyTypedData(domain, typesToSign, message, signature);
+            logger.debug('[verifyPublicDecryptionSignatures] Signature recovered', {
+                index,
+                signature: signature.substring(0, 20) + '...',
+                signerAddress,
+            });
+            return signerAddress;
+        }
+        catch (error) {
+            logger.error('[verifyPublicDecryptionSignatures] Failed to recover signature', {
+                index,
+                error: error.message,
+            });
+            throw error;
+        }
+    }));
+    logger.debug('[verifyPublicDecryptionSignatures] Recovered addresses', {
+        addresses: recoveredAddresses,
+    });
+    // ============================================================================
+    // Step 3: Verify Against KMS Signer Set
+    // ============================================================================
+    const { kmsSigners, publicDecryptionThreshold } = await readKmsSignersInfo(client);
+    // Verify all recovered signers are in the KMS signer set
+    const isInclude = recoveredAddresses.every(item => kmsSigners.includes(item));
+    if (!isInclude) {
+        logger.error('[verifyPublicDecryptionSignatures] Unknown KMS signer detected', {
+            recoveredAddresses,
+            allowedSigners: kmsSigners,
+        });
+        throw new FheError({ code: FheErrorCode.UnknownSigner, message: 'Unknown KMS Signer' });
+    }
+    // Verify threshold is met
+    if (recoveredAddresses.length < publicDecryptionThreshold) {
+        logger.error('[verifyPublicDecryptionSignatures] Threshold not met', {
+            recoveredCount: recoveredAddresses.length,
+            threshold: publicDecryptionThreshold,
+        });
+        throw new FheError({ code: FheErrorCode.ThresholdNotMet, message: 'recovered signer addresses should >= threshold' });
+    }
+    logger.debug('[verifyPublicDecryptionSignatures] All signatures verified successfully', {
+        recoveredCount: recoveredAddresses.length,
+        threshold: publicDecryptionThreshold,
+    });
+}
+// ============================================================================
+// Proof Encoding
+// ============================================================================
+/**
+ * Creates a public decryption proof by encoding signatures and extra data.
+ *
+ * Format:
+ *     Byte 0             : numSigners (uint8)
+ *     Bytes 1 .. 65*N    : N × 65-byte ECDSA signatures
+ *     Bytes 65*N+1 .. end: extraData
+ *
+ * @param signatures - Array of signatures (hex strings with 0x prefix)
+ * @param extraData - Additional contextual data as Uint8Array
+ * @returns Encoded proof as Uint8Array
+ * @throws Error if numSigners exceeds 255 or signature length is invalid
+ */
+export function createPublicDecryptionProof(signatures, extraData) {
+    // Enter method
+    logger.debug('[createPublicDecryptionProof] Enter', {
+        signatures, extraData,
+    });
+    const numSigners = signatures.length;
+    // ============================================================================
+    // Step 1: Validate Inputs
+    // ============================================================================
+    // Validate numSigners fits in 1 byte (max 255)
+    if (numSigners > 255) {
+        logger.error('[createPublicDecryptionProof] Signer count exceeds 255', {
+            numSigners,
+        });
+        throw new FheError({ code: FheErrorCode.InvalidArgument, message: `numSigners:${numSigners} must fit in 1 byte` });
+    }
+    // Validate and convert signatures to bytes
+    logger.trace('[createPublicDecryptionProof] Validating signatures');
+    const sigBytes = signatures.map((s, i) => {
+        const b = ethers.getBytes(s);
+        if (b.length !== 65) {
+            logger.error('[createPublicDecryptionProof] Invalid signature length', {
+                index: i,
+                signature: s.substring(0, 20) + '...',
+                expected: 65,
+                actual: b.length,
+            });
+            throw new FheError({ code: FheErrorCode.InvalidArgument, message: `the length of signature ${i} != 65 bytes` });
+        }
+        return b;
+    });
+    // ============================================================================
+    // Step 2: Build Encoded Proof
+    // ============================================================================
+    // Calculate total length: header(1) + signatures(65*n) + extraData
+    const totalLen = 1 + 65 * numSigners + extraData.length;
+    const proof = new Uint8Array(totalLen);
+    let offset = 0;
+    logger.trace('[createPublicDecryptionProof] Encoding proof data', {
+        totalLength: totalLen,
+        headerSize: 1,
+        signaturesSize: 65 * numSigners,
+        extraDataSize: extraData.length,
+    });
+    // Header: numSigners (1 byte)
+    proof[offset++] = numSigners;
+    // Signatures (65 bytes each)
+    for (let i = 0; i < sigBytes.length; i++) {
+        const b = sigBytes[i];
+        proof.set(b, offset);
+        offset += 65;
+        logger.trace('[createPublicDecryptionProof] Encoded signature', {
+            index: i,
+            offset: offset - 65,
+            size: b.length,
+        });
+    }
+    // Extra data (variable length)
+    if (extraData.length > 0) {
+        proof.set(extraData, offset);
+        offset += extraData.length;
+        logger.trace('[createPublicDecryptionProof] Encoded extra data', {
+            size: extraData.length,
+            offset: offset - extraData.length,
+        });
+    }
+    // Verify encoding offset matches total length
+    if (offset !== totalLen) {
+        logger.error('[createPublicDecryptionProof] Length mismatch', {
+            offset,
+            totalLen,
+            diff: offset - totalLen,
+        });
+        throw new FheError({ code: FheErrorCode.Internal, message: `proof encoding length mismatch: offset(${offset}) !== totalLen(${totalLen})` });
+    }
+    logger.debug('[createPublicDecryptionProof] Proof encoded successfully', {
+        totalBytes: totalLen,
+        numSigners,
+        extraDataSize: extraData.length,
+    });
+    return proof;
+}
+export async function checkPublicDecryptPermission(client, params) {
+    const { aclContractAddress, ctHandles } = params;
+    const provider = await client.sdk.requireProvider();
+    const contract = new ethers.Contract(aclContractAddress, aclAbi, provider);
+    // Check permissions for each handle
+    for (let i = 0; i < ctHandles.length; i++) {
+        const ctHandle = ctHandles[i];
+        logger.trace('[checkPublicDecryptPermission] Checking ACL permission', {
+            index: i,
+            handle: ctHandle,
+        });
+        const isAllowed = await contract.isAllowedForDecryption(ctHandle);
+        if (!isAllowed) {
+            logger.error('[checkPublicDecryptPermission] ACL permission denied', {
+                index: i,
+                handle: ctHandle,
+            });
+            throw new FheError({ code: FheErrorCode.PermissionDenied, message: `PublicDecryption: not allowed ${ctHandle}`, context: { handle: ctHandle } });
+        }
+    }
+    logger.debug('[checkPublicDecryptPermission] ACL permissions verified', {
+        allowedCount: ctHandles.length,
+    });
+}
+//# sourceMappingURL=public-decrypt-p.js.map

package/dist/jazz/public-decrypt-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-decrypt-p.js","sourceRoot":"","sources":["../../src/jazz/public-decrypt-p.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIhC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAmCvD,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAgC;IACtE,YAAY,EAAE;QACZ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;KACtC;IACV,gFAAgF;IAChF,yFAAyF;IACzF,qDAAqD;IACrD,qBAAqB,EAAE;QACrB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE;QACxC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;QAC1C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;KAC5B;CACF,CAAC;AAEX,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,MAAmB,EACnB,MAIC,EACD,MAAgC;IAEhC,eAAe;IACf,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,0CAA0C,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAElG,+EAA+E;IAC/E,2CAA2C;IAC3C,+EAA+E;IAE/E,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KACnC,CAAC;IAEX,MAAM,KAAK,GAAG,2BAA2B,CAAC;IAC1C,MAAM,WAAW,GAAG,uBAAuB,CAAC;IAE5C,MAAM,OAAO,GAAkC;QAC7C,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,eAAe,EAAE,MAAM,CAAC,4BAA4B;QACpD,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,kDAAkD;QACpE,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAGzD,+EAA+E;IAC/E,mCAAmC;IACnC,+EAA+E;IAE/E,MAAM,iBAAiB,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,2DAA2D,EAAE;YACxE,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,WAAW,sBAAsB,EAAE,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,WAAW,GAAqC;QACpD,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC;KACtC,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,CAAC,gCAAgC,CAAC;IAE3D,MAAM,CAAC,KAAK,CAAC,gEAAgE,EAAE;QAC7E,cAAc,EAAE,UAAU,CAAC,MAAM;KAClC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC1C,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAmB,EAAE,KAAa,EAAE,EAAE;QAC1D,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACtF,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;gBACrE,KAAK;gBACL,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;gBAC7C,aAAa;aACd,CAAC,CAAC;YACH,OAAO,aAAa,CAAC;QACvB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,gEAAgE,EAAE;gBAC7E,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,OAAO;aACrB,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;QACrE,SAAS,EAAE,kBAAkB;KAC9B,CAAC,CAAC;IAEH,+EAA+E;IAC/E,wCAAwC;IACxC,+EAA+E;IAC/E,MAAM,EAAE,UAAU,EAAE,yBAAyB,EAAE,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAEnF,yDAAyD;IACzD,MAAM,SAAS,GAAY,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,gEAAgE,EAAE;YAC7E,kBAAkB;YAClB,cAAc,EAAE,UAAU;SAC3B,CAAC,CAAC;QACH,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,aAAa,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,0BAA0B;IAC1B,IAAI,kBAAkB,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,sDAAsD,EAAE;YACnE,cAAc,EAAE,kBAAkB,CAAC,MAAM;YACzC,SAAS,EAAE,yBAAyB;SACrC,CAAC,CAAC;QACH,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,eAAe,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;IACxH,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,yEAAyE,EAAE;QACtF,cAAc,EAAE,kBAAkB,CAAC,MAAM;QACzC,SAAS,EAAE,yBAAyB;KACrC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAoB,EACpB,SAAqB;IAErB,eAAe;IACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;QAClD,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;IAErC,+EAA+E;IAC/E,0BAA0B;IAC1B,+EAA+E;IAE/E,+CAA+C;IAC/C,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;YACrE,UAAU;SACX,CAAC,CAAC;QACH,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,eAAe,EAAE,OAAO,EAAE,cAAc,UAAU,qBAAqB,EAAE,CAAC,CAAC;IACrH,CAAC;IAED,2CAA2C;IAC3C,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;gBACrE,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;gBACrC,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;YACH,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,eAAe,EAAE,OAAO,EAAE,2BAA2B,CAAC,cAAc,EAAE,CAAC,CAAC;QAClH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,8BAA8B;IAC9B,+EAA+E;IAE/E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,MAAM,CAAC,KAAK,CAAC,mDAAmD,EAAE;QAChE,WAAW,EAAE,QAAQ;QACrB,UAAU,EAAE,CAAC;QACb,cAAc,EAAE,EAAE,GAAG,UAAU;QAC/B,aAAa,EAAE,SAAS,CAAC,MAAM;KAChC,CAAC,CAAC;IAEH,8BAA8B;IAC9B,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC;IAE7B,6BAA6B;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACrB,MAAM,IAAI,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE;YAC9D,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,MAAM,GAAG,EAAE;YACnB,IAAI,EAAE,CAAC,CAAC,MAAM;SACf,CAAC,CAAC;IACL,CAAC;IAED,+BAA+B;IAC/B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;YAC/D,IAAI,EAAE,SAAS,CAAC,MAAM;YACtB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,MAAM;SAClC,CAAC,CAAC;IACL,CAAC;IAED,8CAA8C;IAC9C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE;YAC5D,MAAM;YACN,QAAQ;YACR,IAAI,EAAE,MAAM,GAAG,QAAQ;SACxB,CAAC,CAAC;QACH,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,0CAA0C,MAAM,kBAAkB,QAAQ,GAAG,EAAE,CAAC,CAAC;IAC9I,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,0DAA0D,EAAE;QACvE,UAAU,EAAE,QAAQ;QACpB,UAAU;QACV,aAAa,EAAE,SAAS,CAAC,MAAM;KAChC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAmB,EACnB,MAGC;IAED,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAEjD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,QAAQ,CAClC,kBAAkB,EAClB,MAAM,EACN,QAAQ,CACT,CAAC;IAEF,oCAAoC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;YACrE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,sDAAsD,EAAE;gBACnE,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YACH,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,iCAAiC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnJ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,yDAAyD,EAAE;QACtE,YAAY,EAAE,SAAS,CAAC,MAAM;KAC/B,CAAC,CAAC;AAEL,CAAC"}

package/dist/jazz/public-decrypt.d.ts

@@ -0,0 +1,48 @@
+import { HandleLike, Plaintext } from "../core/fhe-type.js";
+import { BytesHex } from "../core/primitives.js";
+import type { IJazzClient } from "./jazz-client-i.js";
+import { JazzProcessOptions } from "./types/common.js";
+/**
+ * Configuration options for public decryption operations.
+ */
+export type PublicDecryptOptions = JazzProcessOptions & {
+    checkPermissions?: boolean;
+};
+/**
+ * Payload can be a single handle or an array of handles.
+ */
+export type PublicDecryptPayload = HandleLike | HandleLike[];
+/**
+ * Parameters for public decryption operations.
+ */
+export type PublicDecryptParameters<T extends PublicDecryptPayload> = {
+    /** Handle(s) to decrypt */
+    readonly payloads: T;
+    /** Additional options */
+    readonly options?: PublicDecryptOptions;
+};
+/**
+ * Result of a public decryption operation.
+ */
+export type PublicDecryptResult<T extends PublicDecryptPayload> = {
+    /** Decrypted plaintexts (single item or array matching input) */
+    readonly plaintexts: T extends HandleLike[] ? Plaintext[] : Plaintext;
+    /** Decryption proof as hex with 0x prefix */
+    readonly decryptionProof: BytesHex;
+};
+/**
+ * Decrypts a value or batch of values using public decryption.
+ *
+ * This function handles the complete public decryption flow:
+ * 1. Validates ACL permissions for each handle
+ * 2. Calls Jazz service for decryption
+ * 3. Verifies KMS signatures
+ * 4. Creates decryption proof
+ * 5. Decodes the clear values
+ *
+ * @param client - The Jazz client instance
+ * @param parameters - Public decryption parameters
+ * @returns PublicDecryptResult containing plaintexts and decryption proof
+ * @throws Error if ACL check fails, decryption fails, or signature verification fails
+ */
+export declare function decryptPublicValue<T extends PublicDecryptPayload>(client: IJazzClient, parameters: PublicDecryptParameters<T>): Promise<PublicDecryptResult<T>>;

package/dist/jazz/public-decrypt.js

@@ -0,0 +1,156 @@
+import { fetchPublicDecrypt } from "./module/fetch-public-decrypt.js";
+import { fetchPublicDecrypt as fetchPublicDecryptMock } from "./mock/fetch-public-decrypt.js";
+import { ethers } from "ethers";
+import { bytesToHex, fromHexString } from "../core/bytes.js";
+import { getHandleAbiType, getHandleFheType } from "../core/handle.js";
+import { checkPublicDecryptPermission, createPublicDecryptionProof, verifyPublicDecryptionSignatures } from "./public-decrypt-p.js";
+import { logger } from "../core/logger.js";
+import { FheErrorCode } from "../core/errors/error-codes.js";
+import { FheError } from "../core/errors/fhe-error.js";
+import { formatValue } from "../core/pretty-print.js";
+import { FheTransformSDKEvents } from "../core/event.js";
+// ============================================================================
+// Main Public Decryption Function
+// ============================================================================
+/**
+ * Decrypts a value or batch of values using public decryption.
+ *
+ * This function handles the complete public decryption flow:
+ * 1. Validates ACL permissions for each handle
+ * 2. Calls Jazz service for decryption
+ * 3. Verifies KMS signatures
+ * 4. Creates decryption proof
+ * 5. Decodes the clear values
+ *
+ * @param client - The Jazz client instance
+ * @param parameters - Public decryption parameters
+ * @returns PublicDecryptResult containing plaintexts and decryption proof
+ * @throws Error if ACL check fails, decryption fails, or signature verification fails
+ */
+export async function decryptPublicValue(client, parameters) {
+    let t0;
+    // Enter method
+    logger.debug(() => ['[decryptPublicValue] Enter', formatValue({ parameters })]);
+    const isArray = Array.isArray(parameters.payloads);
+    const ctHandles = (isArray ? parameters.payloads : [parameters.payloads]);
+    const isMock = client.sdk.isMock();
+    const chainId = await client.sdk.getChainID();
+    const sysContractInfo = await client.sdk.getSystemContractInfo();
+    // ============================================================================
+    // Step 0: Input Validation
+    // ============================================================================
+    // TODO: Add input validation here
+    // - Validate ctHandles are not empty
+    // - Validate each handle is valid
+    // ============================================================================
+    // Step 1: Check ACL Permissions
+    // ============================================================================
+    if (parameters.options?.checkPermissions === true) {
+        logger.debug('[decryptPublicValue] Step 1: Checking ACL permissions');
+        t0 = Date.now();
+        await checkPublicDecryptPermission(client, {
+            aclContractAddress: sysContractInfo.aclContractAddress,
+            ctHandles: [...ctHandles],
+        });
+        client.sdk.emitEvent({ type: FheTransformSDKEvents.PublicDecryptionPermissionCheckEnd, durationMs: Date.now() - t0 });
+    }
+    // ============================================================================
+    // Step 2: Call Jazz for Decryption
+    // ============================================================================
+    logger.debug('[decryptPublicValue] Step 2: Fetching public decryption from Jazz');
+    const fetchPublicDecryptParameters = {
+        payload: {
+            orderedHandles: ctHandles,
+            extraData: "0x00",
+        },
+        options: { ...parameters.options },
+    };
+    let result;
+    client.sdk.emitEvent({ type: FheTransformSDKEvents.FetchPublicDecryptStart });
+    t0 = Date.now();
+    if (isMock) {
+        logger.trace('[decryptPublicValue] Using mock mode for public decryption');
+        result = await fetchPublicDecryptMock(client, fetchPublicDecryptParameters);
+    }
+    else {
+        logger.trace('[decryptPublicValue] Using production mode for public decryption');
+        result = await fetchPublicDecrypt(client, fetchPublicDecryptParameters);
+    }
+    client.sdk.emitEvent({ type: FheTransformSDKEvents.FetchPublicDecryptEnd, durationMs: Date.now() - t0 });
+    logger.debug('[decryptPublicValue] Public decryption fetched', {
+        decryptedValueLength: result.orderedAbiEncodedClearValues.length,
+        signaturesCount: result.kmsPublicDecryptEIP712Signatures.length,
+        extraData: result.extraData,
+    });
+    // ============================================================================
+    // Step 3: Verify KMS Signatures
+    // ============================================================================
+    t0 = Date.now();
+    logger.debug('[decryptPublicValue] Step 3: Verifying KMS signatures');
+    await verifyPublicDecryptionSignatures(client, {
+        chainId: chainId,
+        verifyingContract: sysContractInfo.decryptionContractAddress,
+        handles: [...ctHandles],
+    }, result);
+    logger.debug('[decryptPublicValue] KMS signatures verified successfully');
+    client.sdk.emitEvent({ type: FheTransformSDKEvents.VerifyPublicDecryptionSignaturesEnd, durationMs: Date.now() - t0 });
+    // ============================================================================
+    // Step 4: Create Decryption Proof
+    // ============================================================================
+    logger.debug('[decryptPublicValue] Step 4: Creating decryption proof');
+    const decryptionProofBytes = createPublicDecryptionProof([...result.kmsPublicDecryptEIP712Signatures], fromHexString(result.extraData));
+    const decryptionProof = bytesToHex(decryptionProofBytes);
+    logger.trace('[decryptPublicValue] Decryption proof created', {
+        proofSize: decryptionProofBytes.length,
+        proofHexLength: decryptionProof.length,
+    });
+    // ============================================================================
+    // Step 5: Decode Clear Values
+    // ============================================================================
+    logger.debug('[decryptPublicValue] Step 5: Decoding clear values');
+    // Build ABI types for each handle
+    const abiTypes = ctHandles.map(h => getHandleAbiType(h));
+    logger.trace('[decryptPublicValue] ABI types', {
+        types: abiTypes,
+    });
+    // Decode the concatenated ABI-encoded values
+    const abiCoder = ethers.AbiCoder.defaultAbiCoder();
+    const decoded = abiCoder.decode(abiTypes, result.orderedAbiEncodedClearValues);
+    if (decoded.length !== ctHandles.length) {
+        throw new FheError({
+            code: FheErrorCode.DecryptionFailed,
+            message: `Decoded value count (${decoded.length}) does not match handles (${ctHandles.length})`,
+        });
+    }
+    logger.debug('[decryptPublicValue] Values decoded', {
+        decodedCount: decoded.length,
+        decodedValues: decoded.map((v) => v.toString()),
+    });
+    // Build plaintext results
+    const results = [];
+    for (let i = 0; i < ctHandles.length; i++) {
+        const plaintext = {
+            type: getHandleFheType(ctHandles[i]),
+            value: decoded[i],
+        };
+        results.push(plaintext);
+        logger.trace('[decryptPublicValue] Plaintext constructed', {
+            index: i,
+            type: plaintext.type,
+            value: plaintext.value.toString(),
+        });
+    }
+    // ============================================================================
+    // Step 6: Return Result
+    // ============================================================================
+    logger.info('[decryptPublicValue] Public decryption completed successfully', {
+        resultCount: results.length,
+        isArray,
+        proofSize: decryptionProof.length,
+    });
+    return {
+        plaintexts: isArray ? results : results[0],
+        decryptionProof: decryptionProof,
+    };
+}
+//# sourceMappingURL=public-decrypt.js.map

package/dist/jazz/public-decrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-decrypt.js","sourceRoot":"","sources":["../../src/jazz/public-decrypt.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,kBAAkB,IAAI,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE9F,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AACpI,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAsCzD,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAE/E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAmB,EACnB,UAAsC;IAEtC,IAAI,EAAU,CAAC;IAEf,eAAe;IACf,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,4BAA4B,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAiB,CAAC;IAE1F,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;IAC9C,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;IAGjE,+EAA+E;IAC/E,2BAA2B;IAC3B,+EAA+E;IAE/E,kCAAkC;IAClC,qCAAqC;IACrC,kCAAkC;IAElC,+EAA+E;IAC/E,gCAAgC;IAChC,+EAA+E;IAC/E,IAAI,UAAU,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAEtE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,4BAA4B,CAAC,MAAM,EAAE;YACzC,kBAAkB,EAAE,eAAe,CAAC,kBAAkB;YACtD,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,kCAAkC,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACxH,CAAC;IAED,+EAA+E;IAC/E,mCAAmC;IACnC,+EAA+E;IAE/E,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;IAElF,MAAM,4BAA4B,GAAG;QACnC,OAAO,EAAE;YACP,cAAc,EAAE,SAAS;YACzB,SAAS,EAAE,MAAkB;SAC9B;QACD,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE;KACnC,CAAC;IAEF,IAAI,MAAgC,CAAC;IAErC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC9E,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC3E,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACjF,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,qBAAqB,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEzG,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE;QAC7D,oBAAoB,EAAE,MAAM,CAAC,4BAA4B,CAAC,MAAM;QAChE,eAAe,EAAE,MAAM,CAAC,gCAAgC,CAAC,MAAM;QAC/D,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IAEH,+EAA+E;IAC/E,gCAAgC;IAChC,+EAA+E;IAE/E,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChB,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACtE,MAAM,gCAAgC,CACpC,MAAM,EACN;QACE,OAAO,EAAE,OAAO;QAChB,iBAAiB,EAAE,eAAe,CAAC,yBAAyB;QAC5D,OAAO,EAAE,CAAC,GAAG,SAAS,CAAC;KACxB,EACD,MAAM,CACP,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC1E,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,mCAAmC,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEvH,+EAA+E;IAC/E,kCAAkC;IAClC,+EAA+E;IAE/E,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAEvE,MAAM,oBAAoB,GAAG,2BAA2B,CACtD,CAAC,GAAG,MAAM,CAAC,gCAAgC,CAAC,EAC5C,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAChC,CAAC;IACF,MAAM,eAAe,GAAG,UAAU,CAAC,oBAAoB,CAAa,CAAC;IAErE,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE;QAC5D,SAAS,EAAE,oBAAoB,CAAC,MAAM;QACtC,cAAc,EAAE,eAAe,CAAC,MAAM;KACvC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,8BAA8B;IAC9B,+EAA+E;IAE/E,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAEnE,kCAAkC;IAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;QAC7C,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC;IAEH,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAE/E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,YAAY,CAAC,gBAAgB;YACnC,OAAO,EAAE,wBAAwB,OAAO,CAAC,MAAM,6BAA6B,SAAS,CAAC,MAAM,GAAG;SAChG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;QAClD,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;KACrD,CAAC,CAAC;IAEH,0BAA0B;IAC1B,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAc;YAC3B,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACpC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;SAClB,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAExB,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;YACzD,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;SAClC,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,wBAAwB;IACxB,+EAA+E;IAE/E,MAAM,CAAC,IAAI,CAAC,+DAA+D,EAAE;QAC3E,WAAW,EAAE,OAAO,CAAC,MAAM;QAC3B,OAAO;QACP,SAAS,EAAE,eAAe,CAAC,MAAM;KAClC,CAAC,CAAC;IAEH,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1C,eAAe,EAAE,eAAe;KACP,CAAC;AAC9B,CAAC"}

package/dist/jazz/read-contract.d.ts

@@ -0,0 +1,81 @@
+import type { IJazzClient } from "./jazz-client-i.js";
+/**
+ * Type definition for Alphatrion signers information retrieved from the contract.
+ */
+export type ReadAlphatrionSignersInfo = {
+    /** Array of Alphatrion signer addresses */
+    alphatrionSigners: string[];
+    /** Threshold number of signatures required for Alphatrion operations */
+    alphatrionThreshold: number;
+};
+/**
+ * Retrieves Alphatrion signers and threshold from the SpaceBridge configuration contract.
+ * Results are cached to minimize expensive blockchain RPC calls.
+ *
+ * @param client - The Jazz client instance providing SDK and provider access
+ * @param forceRefresh - If true, bypasses cache and fetches fresh data from the contract
+ * @returns Promise containing Alphatrion signers array and threshold
+ *
+ * @example
+ * ```typescript
+ * // Get cached data (or fetch if expired)
+ * const info = await readAlphatrionSignersInfo(client);
+ *
+ * // Force fresh data from contract
+ * const freshInfo = await readAlphatrionSignersInfo(client, true);
+ * ```
+ */
+export declare function readAlphatrionSignersInfo(client: IJazzClient, forceRefresh?: boolean): Promise<ReadAlphatrionSignersInfo>;
+/**
+ * Type definition for KMS signers information retrieved from the contract.
+ */
+export type ReadKmsSignersInfo = {
+    /** Array of KMS signer addresses */
+    kmsSigners: string[];
+    /** Threshold for public decryption operations */
+    publicDecryptionThreshold: number;
+    /** Threshold for user decryption operations */
+    userDecryptionThreshold: number;
+};
+/**
+ * Retrieves KMS signers and decryption thresholds from the SpaceBridge configuration contract.
+ * Results are cached to minimize expensive blockchain RPC calls.
+ *
+ * @param client - The Jazz client instance providing SDK and provider access
+ * @param forceRefresh - If true, bypasses cache and fetches fresh data from the contract
+ * @returns Promise containing KMS signers array and decryption thresholds
+ *
+ * @example
+ * ```typescript
+ * // Get cached data (or fetch if expired)
+ * const info = await readKmsSignersInfo(client);
+ *
+ * // Force fresh data from contract
+ * const freshInfo = await readKmsSignersInfo(client, true);
+ * ```
+ */
+export declare function readKmsSignersInfo(client: IJazzClient, forceRefresh?: boolean): Promise<ReadKmsSignersInfo>;
+/**
+ * Utility function to clear all cached contract information.
+ * Useful when the contract configuration is known to have changed.
+ *
+ * @example
+ * ```typescript
+ * // Clear all caches after a contract upgrade
+ * clearAllContractCaches();
+ * ```
+ */
+export declare function clearAllContractCaches(): void;
+/**
+ * Utility function to refresh all cached contract information simultaneously.
+ *
+ * @param client - The Jazz client instance
+ * @returns Promise that resolves when all data has been refreshed
+ *
+ * @example
+ * ```typescript
+ * // Force refresh all cached contract data
+ * await refreshAllContractCaches(client);
+ * ```
+ */
+export declare function refreshAllContractCaches(client: IJazzClient): Promise<void>;