@tokenops/sdk 1.5.1 → 1.6.0

package/dist/fhe/index.cjs

@@ -1,12 +1,12 @@
 'use strict';
 
-var chunkJYOTGRSO_cjs = require('../chunk-JYOTGRSO.cjs');
-var chunk2NCLOQ56_cjs = require('../chunk-2NCLOQ56.cjs');
-var chunkFAXIIH5R_cjs = require('../chunk-FAXIIH5R.cjs');
+var chunk4ZCXK4VI_cjs = require('../chunk-4ZCXK4VI.cjs');
+var chunkBD4LZBVF_cjs = require('../chunk-BD4LZBVF.cjs');
+var chunkSYHNZSZZ_cjs = require('../chunk-SYHNZSZZ.cjs');
 var chunkFWHYQZ5E_cjs = require('../chunk-FWHYQZ5E.cjs');
-var chunkJK4XMMKM_cjs = require('../chunk-JK4XMMKM.cjs');
+var chunkVR3FREBX_cjs = require('../chunk-VR3FREBX.cjs');
+var chunk2RNW4MIJ_cjs = require('../chunk-2RNW4MIJ.cjs');
 var chunkVJKZWYYJ_cjs = require('../chunk-VJKZWYYJ.cjs');
-var chunk67OV5CX2_cjs = require('../chunk-67OV5CX2.cjs');
 var sdk = require('@zama-fhe/sdk');
 
 // src/fhe/mock-encryptor.ts
@@ -23,7 +23,8 @@ async function requirePeerDep(spec, hint) {
     throw new Error(
       `@tokenops/sdk: peer dependency "${spec}" is required for createMockEncryptor.
   install it with: ${hint}
-  underlying error: ${String(err)}`
+  underlying error: ${String(err)}`,
+      { cause: err }
     );
   }
 }
@@ -216,18 +217,18 @@ var MOCK_ERC7984_MINT_ABI = [
 var UINT64_MAX = (1n << 64n) - 1n;
 async function mintMockERC7984(args) {
   const { publicClient, walletClient, account, waitForReceipt = true, telemetry } = args;
-  const token = chunkJK4XMMKM_cjs.normaliseAddress(args.token);
-  const to = chunkJK4XMMKM_cjs.normaliseAddress(args.to);
+  const token = chunkVR3FREBX_cjs.normaliseAddress(args.token);
+  const to = chunkVR3FREBX_cjs.normaliseAddress(args.to);
   return chunkVJKZWYYJ_cjs.withTelemetry(telemetry, "fhe.mintMockERC7984", async () => {
     const fromAccount = account ?? walletClient.account;
     if (!fromAccount) {
-      throw new chunk67OV5CX2_cjs.TokenOpsContractError(
+      throw new chunk2RNW4MIJ_cjs.TokenOpsContractError(
         "mintMockERC7984: no account available \u2014 pass `account` explicitly or attach an account to the walletClient",
         { contract: "ERC7984", call: "mint" }
       );
     }
     if (args.amount < 0n || args.amount > UINT64_MAX) {
-      throw new chunk67OV5CX2_cjs.TokenOpsContractError(
+      throw new chunk2RNW4MIJ_cjs.TokenOpsContractError(
         `mintMockERC7984: amount ${args.amount} out of uint64 range [0, ${UINT64_MAX}]`,
         { contract: "ERC7984", call: "mint", amount: args.amount.toString() }
       );
@@ -245,7 +246,7 @@ async function mintMockERC7984(args) {
         chain: walletClient.chain
       });
     } catch (err) {
-      throw new chunk67OV5CX2_cjs.TokenOpsContractError(
+      throw new chunk2RNW4MIJ_cjs.TokenOpsContractError(
         `mintMockERC7984: writeContract failed (token=${token}, to=${to})`,
         {
           contract: "ERC7984",
@@ -262,7 +263,7 @@ async function mintMockERC7984(args) {
         const receipt = await publicClient.waitForTransactionReceipt({ hash });
         blockNumber = receipt.blockNumber;
       } catch (err) {
-        throw new chunk67OV5CX2_cjs.TokenOpsContractError(`mintMockERC7984: receipt wait failed (tx=${hash})`, {
+        throw new chunk2RNW4MIJ_cjs.TokenOpsContractError(`mintMockERC7984: receipt wait failed (tx=${hash})`, {
           contract: "ERC7984",
           call: "mint",
           tx: hash,
@@ -274,7 +275,7 @@ async function mintMockERC7984(args) {
   });
 }
 function createMockErc7984Client(args) {
-  const address = chunkJK4XMMKM_cjs.normaliseAddress(args.address);
+  const address = chunkVR3FREBX_cjs.normaliseAddress(args.address);
   const { publicClient, walletClient, telemetry } = args;
   return {
     address,
@@ -303,7 +304,8 @@ async function requirePeerDep2(spec, hint) {
     throw new Error(
       `@tokenops/sdk: peer dependency "${spec}" is required for createSepoliaEncryptor.
   install it with: ${hint}
-  underlying error: ${String(err)}`
+  underlying error: ${String(err)}`,
+      { cause: err }
     );
   }
 }
@@ -416,11 +418,21 @@ function createSepoliaEncryptorWeb(opts) {
       firePhase("ready");
     }
   } : void 0;
+  if (opts.threads !== void 0 && opts.threads > 1) {
+    const isolated = globalThis.crossOriginIsolated === true;
+    if (!isolated) {
+      const warn = safeLogger?.warn ?? console.warn;
+      warn(
+        `@tokenops/sdk: createSepoliaEncryptorWeb({ threads: ${opts.threads} }) \u2014 this page is NOT cross-origin isolated, so SharedArrayBuffer is unavailable and encryption will run single-threaded. Serve \`Cross-Origin-Opener-Policy: same-origin\` + \`Cross-Origin-Embedder-Policy: require-corp\` to enable the worker pool, or omit \`threads\`.`
+      );
+    }
+  }
   const instance = new sdk.RelayerWeb({
     transports: { [chainId]: transportConfig },
     getChainId: () => Promise.resolve(chainId),
     logger: safeLogger,
-    onStatusChange
+    onStatusChange,
+    ...opts.threads !== void 0 ? { threads: opts.threads } : {}
   });
   return Promise.resolve({
     instance,
@@ -436,47 +448,55 @@ function createSepoliaEncryptorWeb(opts) {
 
 Object.defineProperty(exports, "ERC7984_OPERATOR_MAX_DEADLINE", {
   enumerable: true,
-  get: function () { return chunkJYOTGRSO_cjs.ERC7984_OPERATOR_MAX_DEADLINE; }
+  get: function () { return chunk4ZCXK4VI_cjs.ERC7984_OPERATOR_MAX_DEADLINE; }
 });
 Object.defineProperty(exports, "ERC7984_SET_OPERATOR_ABI", {
   enumerable: true,
-  get: function () { return chunkJYOTGRSO_cjs.ERC7984_SET_OPERATOR_ABI; }
+  get: function () { return chunk4ZCXK4VI_cjs.ERC7984_SET_OPERATOR_ABI; }
+});
+Object.defineProperty(exports, "ensureOperator", {
+  enumerable: true,
+  get: function () { return chunk4ZCXK4VI_cjs.ensureOperator; }
+});
+Object.defineProperty(exports, "isOperator", {
+  enumerable: true,
+  get: function () { return chunk4ZCXK4VI_cjs.isOperator; }
 });
 Object.defineProperty(exports, "revokeOperator", {
   enumerable: true,
-  get: function () { return chunkJYOTGRSO_cjs.revokeOperator; }
+  get: function () { return chunk4ZCXK4VI_cjs.revokeOperator; }
 });
 Object.defineProperty(exports, "setOperator", {
   enumerable: true,
-  get: function () { return chunkJYOTGRSO_cjs.setOperator; }
+  get: function () { return chunk4ZCXK4VI_cjs.setOperator; }
 });
 Object.defineProperty(exports, "FHE_SPLIT_DENOMINATOR", {
   enumerable: true,
-  get: function () { return chunk2NCLOQ56_cjs.FHE_SPLIT_DENOMINATOR; }
+  get: function () { return chunkBD4LZBVF_cjs.FHE_SPLIT_DENOMINATOR; }
 });
 Object.defineProperty(exports, "scaleRatio", {
   enumerable: true,
-  get: function () { return chunk2NCLOQ56_cjs.scaleRatio; }
+  get: function () { return chunkBD4LZBVF_cjs.scaleRatio; }
 });
 Object.defineProperty(exports, "share", {
   enumerable: true,
-  get: function () { return chunk2NCLOQ56_cjs.share; }
+  get: function () { return chunkBD4LZBVF_cjs.share; }
 });
 Object.defineProperty(exports, "ACL_ALLOWED_EVENT", {
   enumerable: true,
-  get: function () { return chunkFAXIIH5R_cjs.ACL_ALLOWED_EVENT; }
+  get: function () { return chunkSYHNZSZZ_cjs.ACL_ALLOWED_EVENT; }
 });
 Object.defineProperty(exports, "FHEVM_ACL_ADDRESS_BY_CHAIN", {
   enumerable: true,
-  get: function () { return chunkFAXIIH5R_cjs.FHEVM_ACL_ADDRESS_BY_CHAIN; }
+  get: function () { return chunkSYHNZSZZ_cjs.FHEVM_ACL_ADDRESS_BY_CHAIN; }
 });
 Object.defineProperty(exports, "getFhevmAclAddress", {
   enumerable: true,
-  get: function () { return chunkFAXIIH5R_cjs.getFhevmAclAddress; }
+  get: function () { return chunkSYHNZSZZ_cjs.getFhevmAclAddress; }
 });
 Object.defineProperty(exports, "requireFhevmAclAddress", {
   enumerable: true,
-  get: function () { return chunkFAXIIH5R_cjs.requireFhevmAclAddress; }
+  get: function () { return chunkSYHNZSZZ_cjs.requireFhevmAclAddress; }
 });
 Object.defineProperty(exports, "erc7984OperatorAbi", {
   enumerable: true,
@@ -484,155 +504,155 @@ Object.defineProperty(exports, "erc7984OperatorAbi", {
 });
 Object.defineProperty(exports, "AccessDeniedError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.AccessDeniedError; }
+  get: function () { return chunk2RNW4MIJ_cjs.AccessDeniedError; }
 });
 Object.defineProperty(exports, "AlreadyInitializedError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.AlreadyInitializedError; }
+  get: function () { return chunk2RNW4MIJ_cjs.AlreadyInitializedError; }
 });
 Object.defineProperty(exports, "BatchTooLargeError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.BatchTooLargeError; }
+  get: function () { return chunk2RNW4MIJ_cjs.BatchTooLargeError; }
 });
 Object.defineProperty(exports, "ContractRevertError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.ContractRevertError; }
+  get: function () { return chunk2RNW4MIJ_cjs.ContractRevertError; }
 });
 Object.defineProperty(exports, "DecryptionFailedError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.DecryptionFailedError; }
+  get: function () { return chunk2RNW4MIJ_cjs.DecryptionFailedError; }
 });
 Object.defineProperty(exports, "DeploymentAddressUnavailableError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.DeploymentAddressUnavailableError; }
+  get: function () { return chunk2RNW4MIJ_cjs.DeploymentAddressUnavailableError; }
 });
 Object.defineProperty(exports, "EncryptionFailedError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.EncryptionFailedError; }
+  get: function () { return chunk2RNW4MIJ_cjs.EncryptionFailedError; }
 });
 Object.defineProperty(exports, "FeatureDisabledError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.FeatureDisabledError; }
+  get: function () { return chunk2RNW4MIJ_cjs.FeatureDisabledError; }
 });
 Object.defineProperty(exports, "FheHandleNotAllowedError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.FheHandleNotAllowedError; }
+  get: function () { return chunk2RNW4MIJ_cjs.FheHandleNotAllowedError; }
 });
 Object.defineProperty(exports, "InsufficientBalanceError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.InsufficientBalanceError; }
+  get: function () { return chunk2RNW4MIJ_cjs.InsufficientBalanceError; }
 });
 Object.defineProperty(exports, "InsufficientFeeError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.InsufficientFeeError; }
+  get: function () { return chunk2RNW4MIJ_cjs.InsufficientFeeError; }
 });
 Object.defineProperty(exports, "InsufficientGasFundsError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.InsufficientGasFundsError; }
+  get: function () { return chunk2RNW4MIJ_cjs.InsufficientGasFundsError; }
 });
 Object.defineProperty(exports, "InvalidArgumentError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.InvalidArgumentError; }
+  get: function () { return chunk2RNW4MIJ_cjs.InvalidArgumentError; }
 });
 Object.defineProperty(exports, "InvalidSignatureError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.InvalidSignatureError; }
+  get: function () { return chunk2RNW4MIJ_cjs.InvalidSignatureError; }
 });
 Object.defineProperty(exports, "MissingAccountError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.MissingAccountError; }
+  get: function () { return chunk2RNW4MIJ_cjs.MissingAccountError; }
 });
 Object.defineProperty(exports, "MissingClientError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.MissingClientError; }
+  get: function () { return chunk2RNW4MIJ_cjs.MissingClientError; }
 });
 Object.defineProperty(exports, "MissingEncryptorError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.MissingEncryptorError; }
+  get: function () { return chunk2RNW4MIJ_cjs.MissingEncryptorError; }
 });
 Object.defineProperty(exports, "MissingPublicClientError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.MissingPublicClientError; }
+  get: function () { return chunk2RNW4MIJ_cjs.MissingPublicClientError; }
 });
 Object.defineProperty(exports, "MissingWalletClientError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.MissingWalletClientError; }
+  get: function () { return chunk2RNW4MIJ_cjs.MissingWalletClientError; }
 });
 Object.defineProperty(exports, "NetworkError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.NetworkError; }
+  get: function () { return chunk2RNW4MIJ_cjs.NetworkError; }
 });
 Object.defineProperty(exports, "OperatorNotApprovedError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.OperatorNotApprovedError; }
+  get: function () { return chunk2RNW4MIJ_cjs.OperatorNotApprovedError; }
 });
 Object.defineProperty(exports, "PausedError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.PausedError; }
+  get: function () { return chunk2RNW4MIJ_cjs.PausedError; }
 });
 Object.defineProperty(exports, "ReceiptEventAmbiguousError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.ReceiptEventAmbiguousError; }
+  get: function () { return chunk2RNW4MIJ_cjs.ReceiptEventAmbiguousError; }
 });
 Object.defineProperty(exports, "ReceiptEventNotFoundError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.ReceiptEventNotFoundError; }
+  get: function () { return chunk2RNW4MIJ_cjs.ReceiptEventNotFoundError; }
 });
 Object.defineProperty(exports, "ReentrancyError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.ReentrancyError; }
+  get: function () { return chunk2RNW4MIJ_cjs.ReentrancyError; }
 });
 Object.defineProperty(exports, "RelayerUnreachableError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.RelayerUnreachableError; }
+  get: function () { return chunk2RNW4MIJ_cjs.RelayerUnreachableError; }
 });
 Object.defineProperty(exports, "SigningFailedError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.SigningFailedError; }
+  get: function () { return chunk2RNW4MIJ_cjs.SigningFailedError; }
 });
 Object.defineProperty(exports, "TokenOpsContractError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.TokenOpsContractError; }
+  get: function () { return chunk2RNW4MIJ_cjs.TokenOpsContractError; }
 });
 Object.defineProperty(exports, "TokenOpsSdkError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.TokenOpsSdkError; }
+  get: function () { return chunk2RNW4MIJ_cjs.TokenOpsSdkError; }
 });
 Object.defineProperty(exports, "TokenOpsValidationError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.TokenOpsValidationError; }
+  get: function () { return chunk2RNW4MIJ_cjs.TokenOpsValidationError; }
 });
 Object.defineProperty(exports, "TransferFailedError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.TransferFailedError; }
+  get: function () { return chunk2RNW4MIJ_cjs.TransferFailedError; }
 });
 Object.defineProperty(exports, "UnknownWriteFailureError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.UnknownWriteFailureError; }
+  get: function () { return chunk2RNW4MIJ_cjs.UnknownWriteFailureError; }
 });
 Object.defineProperty(exports, "UnsupportedChainError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.UnsupportedChainError; }
+  get: function () { return chunk2RNW4MIJ_cjs.UnsupportedChainError; }
 });
 Object.defineProperty(exports, "UserDecryptNotAllowedError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.UserDecryptNotAllowedError; }
+  get: function () { return chunk2RNW4MIJ_cjs.UserDecryptNotAllowedError; }
 });
 Object.defineProperty(exports, "UserRejectedSignatureError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.UserRejectedSignatureError; }
+  get: function () { return chunk2RNW4MIJ_cjs.UserRejectedSignatureError; }
 });
 Object.defineProperty(exports, "WalletChainMismatchError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.WalletChainMismatchError; }
+  get: function () { return chunk2RNW4MIJ_cjs.WalletChainMismatchError; }
 });
 Object.defineProperty(exports, "WalletRejectedError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.WalletRejectedError; }
+  get: function () { return chunk2RNW4MIJ_cjs.WalletRejectedError; }
 });
 Object.defineProperty(exports, "isTokenOpsSdkError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.isTokenOpsSdkError; }
+  get: function () { return chunk2RNW4MIJ_cjs.isTokenOpsSdkError; }
 });
 exports.MAINNET_CHAIN_ID = MAINNET_CHAIN_ID;
 exports.MOCK_ERC7984_MINT_ABI = MOCK_ERC7984_MINT_ABI;

package/dist/fhe/index.d.cts

@@ -7,5 +7,6 @@ export * from "./sepolia-encryptor.js";
 export * from "./sepolia-encryptor-web.js";
 export * from "./types.js";
 export { erc7984OperatorAbi } from "./erc7984-abi.js";
+export { type Encryptor, type EncryptorSource, type FheValueInput, } from "../fhe-vesting/encryption.js";
 export { TokenOpsSdkError, isTokenOpsSdkError, DeploymentAddressUnavailableError, UnsupportedChainError, MissingAccountError, MissingClientError, MissingEncryptorError, MissingPublicClientError, MissingWalletClientError, InvalidArgumentError, ReceiptEventAmbiguousError, ReceiptEventNotFoundError, TokenOpsValidationError, ContractRevertError, TokenOpsContractError, PausedError, AccessDeniedError, OperatorNotApprovedError, InsufficientFeeError, InsufficientBalanceError, BatchTooLargeError, FeatureDisabledError, TransferFailedError, FheHandleNotAllowedError, AlreadyInitializedError, ReentrancyError, InvalidSignatureError, WalletRejectedError, WalletChainMismatchError, NetworkError, InsufficientGasFundsError, UnknownWriteFailureError, UserRejectedSignatureError, SigningFailedError, RelayerUnreachableError, EncryptionFailedError, DecryptionFailedError, UserDecryptNotAllowedError, type DeploymentAddressUnavailableReason, type TokenOpsSdkErrorCode, } from "../core/errors.js";
 export { type PreflightResult } from "../core/preflight.js";

package/dist/fhe/index.d.ts

@@ -7,5 +7,6 @@ export * from "./sepolia-encryptor.js";
 export * from "./sepolia-encryptor-web.js";
 export * from "./types.js";
 export { erc7984OperatorAbi } from "./erc7984-abi.js";
+export { type Encryptor, type EncryptorSource, type FheValueInput, } from "../fhe-vesting/encryption.js";
 export { TokenOpsSdkError, isTokenOpsSdkError, DeploymentAddressUnavailableError, UnsupportedChainError, MissingAccountError, MissingClientError, MissingEncryptorError, MissingPublicClientError, MissingWalletClientError, InvalidArgumentError, ReceiptEventAmbiguousError, ReceiptEventNotFoundError, TokenOpsValidationError, ContractRevertError, TokenOpsContractError, PausedError, AccessDeniedError, OperatorNotApprovedError, InsufficientFeeError, InsufficientBalanceError, BatchTooLargeError, FeatureDisabledError, TransferFailedError, FheHandleNotAllowedError, AlreadyInitializedError, ReentrancyError, InvalidSignatureError, WalletRejectedError, WalletChainMismatchError, NetworkError, InsufficientGasFundsError, UnknownWriteFailureError, UserRejectedSignatureError, SigningFailedError, RelayerUnreachableError, EncryptionFailedError, DecryptionFailedError, UserDecryptNotAllowedError, type DeploymentAddressUnavailableReason, type TokenOpsSdkErrorCode, } from "../core/errors.js";
 export { type PreflightResult } from "../core/preflight.js";

package/dist/fhe/index.js

@@ -1,11 +1,11 @@
-export { ERC7984_OPERATOR_MAX_DEADLINE, ERC7984_SET_OPERATOR_ABI, revokeOperator, setOperator } from '../chunk-6BMP4ICG.js';
-export { FHE_SPLIT_DENOMINATOR, scaleRatio, share } from '../chunk-AOP6HMPW.js';
-export { ACL_ALLOWED_EVENT, FHEVM_ACL_ADDRESS_BY_CHAIN, getFhevmAclAddress, requireFhevmAclAddress } from '../chunk-ZWXJTBZO.js';
+export { ERC7984_OPERATOR_MAX_DEADLINE, ERC7984_SET_OPERATOR_ABI, ensureOperator, isOperator, revokeOperator, setOperator } from '../chunk-4KJ66YRH.js';
+export { FHE_SPLIT_DENOMINATOR, scaleRatio, share } from '../chunk-PD7ME2BT.js';
+export { ACL_ALLOWED_EVENT, FHEVM_ACL_ADDRESS_BY_CHAIN, getFhevmAclAddress, requireFhevmAclAddress } from '../chunk-YPYCWLYP.js';
 export { erc7984OperatorAbi } from '../chunk-7VELUOMI.js';
-import { normaliseAddress } from '../chunk-ZA673I3O.js';
+import { normaliseAddress } from '../chunk-46T67CE2.js';
+import { TokenOpsContractError } from '../chunk-DRSPMIZ7.js';
+export { AccessDeniedError, AlreadyInitializedError, BatchTooLargeError, ContractRevertError, DecryptionFailedError, DeploymentAddressUnavailableError, EncryptionFailedError, FeatureDisabledError, FheHandleNotAllowedError, InsufficientBalanceError, InsufficientFeeError, InsufficientGasFundsError, InvalidArgumentError, InvalidSignatureError, MissingAccountError, MissingClientError, MissingEncryptorError, MissingPublicClientError, MissingWalletClientError, NetworkError, OperatorNotApprovedError, PausedError, ReceiptEventAmbiguousError, ReceiptEventNotFoundError, ReentrancyError, RelayerUnreachableError, SigningFailedError, TokenOpsContractError, TokenOpsSdkError, TokenOpsValidationError, TransferFailedError, UnknownWriteFailureError, UnsupportedChainError, UserDecryptNotAllowedError, UserRejectedSignatureError, WalletChainMismatchError, WalletRejectedError, isTokenOpsSdkError } from '../chunk-DRSPMIZ7.js';
 import { withTelemetry } from '../chunk-Q2GP5UDC.js';
-import { TokenOpsContractError } from '../chunk-QBJ7O2B4.js';
-export { AccessDeniedError, AlreadyInitializedError, BatchTooLargeError, ContractRevertError, DecryptionFailedError, DeploymentAddressUnavailableError, EncryptionFailedError, FeatureDisabledError, FheHandleNotAllowedError, InsufficientBalanceError, InsufficientFeeError, InsufficientGasFundsError, InvalidArgumentError, InvalidSignatureError, MissingAccountError, MissingClientError, MissingEncryptorError, MissingPublicClientError, MissingWalletClientError, NetworkError, OperatorNotApprovedError, PausedError, ReceiptEventAmbiguousError, ReceiptEventNotFoundError, ReentrancyError, RelayerUnreachableError, SigningFailedError, TokenOpsContractError, TokenOpsSdkError, TokenOpsValidationError, TransferFailedError, UnknownWriteFailureError, UnsupportedChainError, UserDecryptNotAllowedError, UserRejectedSignatureError, WalletChainMismatchError, WalletRejectedError, isTokenOpsSdkError } from '../chunk-QBJ7O2B4.js';
 import { RelayerWeb, MainnetConfig, SepoliaConfig } from '@zama-fhe/sdk';
 
 // src/fhe/mock-encryptor.ts
@@ -22,7 +22,8 @@ async function requirePeerDep(spec, hint) {
     throw new Error(
       `@tokenops/sdk: peer dependency "${spec}" is required for createMockEncryptor.
   install it with: ${hint}
-  underlying error: ${String(err)}`
+  underlying error: ${String(err)}`,
+      { cause: err }
     );
   }
 }
@@ -302,7 +303,8 @@ async function requirePeerDep2(spec, hint) {
     throw new Error(
       `@tokenops/sdk: peer dependency "${spec}" is required for createSepoliaEncryptor.
   install it with: ${hint}
-  underlying error: ${String(err)}`
+  underlying error: ${String(err)}`,
+      { cause: err }
     );
   }
 }
@@ -415,11 +417,21 @@ function createSepoliaEncryptorWeb(opts) {
       firePhase("ready");
     }
   } : void 0;
+  if (opts.threads !== void 0 && opts.threads > 1) {
+    const isolated = globalThis.crossOriginIsolated === true;
+    if (!isolated) {
+      const warn = safeLogger?.warn ?? console.warn;
+      warn(
+        `@tokenops/sdk: createSepoliaEncryptorWeb({ threads: ${opts.threads} }) \u2014 this page is NOT cross-origin isolated, so SharedArrayBuffer is unavailable and encryption will run single-threaded. Serve \`Cross-Origin-Opener-Policy: same-origin\` + \`Cross-Origin-Embedder-Policy: require-corp\` to enable the worker pool, or omit \`threads\`.`
+      );
+    }
+  }
   const instance = new RelayerWeb({
     transports: { [chainId]: transportConfig },
     getChainId: () => Promise.resolve(chainId),
     logger: safeLogger,
-    onStatusChange
+    onStatusChange,
+    ...opts.threads !== void 0 ? { threads: opts.threads } : {}
   });
   return Promise.resolve({
     instance,

package/dist/fhe/mock-erc7984.d.ts

@@ -76,12 +76,12 @@ export interface MintMockERC7984Result {
  *
  * @example
  * ```ts
- * import { mintMockERC7984, DEPLOYED_ADDRESSES } from "@tokenops/sdk";
+ * import { mintMockERC7984 } from "@tokenops/sdk/fhe";
  *
  * const { hash, blockNumber } = await mintMockERC7984({
  *   publicClient,
  *   walletClient,
- *   token: DEPLOYED_ADDRESSES.tokens.testConfidential[11155111]!,
+ *   token: "0xYourMockToken", // MockERC7984Token address
  *   to: walletClient.account!.address,
  *   amount: 1_000_000n,
  * });
@@ -119,12 +119,12 @@ export interface MockErc7984Client {
  *
  * @example
  * ```ts
- * import { createMockErc7984Client, DEPLOYED_ADDRESSES } from "@tokenops/sdk/fhe";
+ * import { createMockErc7984Client } from "@tokenops/sdk/fhe";
  *
  * const token = createMockErc7984Client({
  *   publicClient,
  *   walletClient,
- *   address: DEPLOYED_ADDRESSES.tokens.testConfidential[11155111]!,
+ *   address: "0xYourMockToken", // MockERC7984Token address
  * });
  *
  * await token.mint({ to: alice, amount: 1_000_000n });

package/dist/fhe/operators.d.ts

@@ -108,7 +108,7 @@ export interface SetOperatorArgs {
  * await setOperator({
  *   publicClient,
  *   walletClient,
- *   token: DEPLOYED_ADDRESSES.tokens.testConfidential[31337]!,
+ *   token: "0xYourToken", // ERC-7984 token address
  *   spender: manager,
  *   // deadline defaults to ERC7984_OPERATOR_MAX_DEADLINE (forever).
  * });
@@ -177,7 +177,7 @@ export interface RevokeOperatorArgs {
  * await revokeOperator({
  *   publicClient,
  *   walletClient,
- *   token: DEPLOYED_ADDRESSES.tokens.testConfidential[31337]!,
+ *   token: "0xYourToken", // ERC-7984 token address
  *   spender: staleManager, // old manager clone after deploying a new one
  * });
  * // `staleManager` can no longer call `confidentialTransferFrom` against
@@ -188,3 +188,143 @@ export interface RevokeOperatorArgs {
  *   step throws. The original viem error is attached as the cause.
  */
 export declare function revokeOperator(args: RevokeOperatorArgs): Promise<Hex>;
+/** Arguments for {@link isOperator}. Read-only — no wallet required. */
+export interface IsOperatorArgs {
+    /** Read-only viem client the `isOperator` view call goes through. */
+    publicClient: PublicClient;
+    /** ERC-7984 token contract address. */
+    token: Address;
+    /** Account that owns the tokens (the operator-authorization granter). */
+    holder: Address;
+    /**
+     * Address whose operator status is being checked — typically a manager
+     * clone (`/fhe-vesting`), an airdrop clone/factory (`/fhe-airdrop`), or
+     * the disperse singleton (`/fhe-disperse`).
+     */
+    spender: Address;
+    /** Optional telemetry sink — span emits as `fhe.isOperator`. */
+    telemetry?: SdkTelemetry;
+}
+/**
+ * Check whether `spender` is currently an authorized ERC-7984 operator for
+ * `holder` on `token`. Read-only sibling of {@link setOperator} — the
+ * contract-side check is `until >= block.timestamp`, so an expired grant
+ * reads `false` here without any revoke transaction having happened.
+ *
+ * Use this to gate UX ("Approve operator" button vs "Create vesting" button)
+ * or as a cheap pre-check before flows that would otherwise fail with
+ * {@link OperatorNotApprovedError} — the SDK's mapping of the on-chain
+ * `ERC7984UnauthorizedSpender` revert, whose message is the canonical
+ * {@link OPERATOR_NOT_APPROVED_REMEDIATION} copy. For a check-then-set in
+ * one call, see {@link ensureOperator}.
+ *
+ * @example
+ * ```ts
+ * import { isOperator } from "@tokenops/sdk/fhe";
+ *
+ * const authorized = await isOperator({
+ *   publicClient,
+ *   token,
+ *   holder: account.address,
+ *   spender: manager,
+ * });
+ * if (!authorized) {
+ *   // prompt the user to run setOperator / ensureOperator first
+ * }
+ * ```
+ *
+ * @throws {@link TokenOpsContractError} if the read call itself fails (RPC
+ *   error, non-ERC-7984 token). The original viem error is attached as the
+ *   cause.
+ */
+export declare function isOperator(args: IsOperatorArgs): Promise<boolean>;
+/**
+ * Arguments for {@link ensureOperator}. Same shape as {@link SetOperatorArgs}
+ * except `deadline` is **required**: `ensureOperator` only sends a
+ * transaction when the authorization is missing, so the expiry it would
+ * grant must be an explicit caller decision — the SDK refuses to default a
+ * security-sensitive approval window (a silent
+ * {@link ERC7984_OPERATOR_MAX_DEADLINE} would grant "forever").
+ */
+export interface EnsureOperatorArgs {
+    /** Read-only viem client for the `isOperator` pre-check + receipt waiting. */
+    publicClient: PublicClient;
+    /** Wallet client used to send the `setOperator` call (only when needed). */
+    walletClient: WalletClient;
+    /**
+     * Account that owns the tokens. Same `Account | Address` semantics and
+     * fallback hierarchy as {@link SetOperatorArgs} — also used to derive the
+     * `holder` for the read-side `isOperator` pre-check.
+     */
+    account?: Account | Address;
+    /** ERC-7984 token contract address. */
+    token: Address;
+    /** Address being authorized to pull tokens. */
+    spender: Address;
+    /**
+     * `uint48` unix timestamp after which the operator authorization expires.
+     * Required — scope it to the expected operation window (e.g.
+     * `BigInt(Math.floor(Date.now() / 1000) + 3600)` for one hour). Pass
+     * {@link ERC7984_OPERATOR_MAX_DEADLINE} only when you explicitly want a
+     * never-expiring grant (local dev loops, test fixtures).
+     */
+    deadline: bigint;
+    /**
+     * If `true` (default), waits for the transaction to be mined before
+     * returning. Only relevant when a transaction is actually sent.
+     */
+    waitForReceipt?: boolean;
+    /** Optional telemetry sink — span emits as `fhe.ensureOperator`. */
+    telemetry?: SdkTelemetry;
+}
+/** Result of {@link ensureOperator}. */
+export interface EnsureOperatorResult {
+    /**
+     * `true` when the authorization was already in place and no transaction
+     * was sent; `false` when this call performed the `setOperator` write.
+     */
+    alreadyOperator: boolean;
+    /**
+     * Transaction hash of the `setOperator` call, or `null` when no
+     * transaction was needed (`alreadyOperator === true`).
+     */
+    hash: Hex | null;
+}
+/**
+ * Idempotent operator authorization: check {@link isOperator} first and call
+ * {@link setOperator} only when the grant is missing. The no-op path sends
+ * no transaction and costs one `eth_call`.
+ *
+ * This is the recommended pre-step before any flow that pulls tokens from
+ * the caller's balance (`createVesting` / `batchCreateVesting`,
+ * `fundConfidentialAirdrop` / `createAndFundConfidentialAirdrop`, disperse
+ * registration) — skipping it fails with {@link OperatorNotApprovedError},
+ * the SDK's mapping of the on-chain `ERC7984UnauthorizedSpender` revert,
+ * whose message is the canonical {@link OPERATOR_NOT_APPROVED_REMEDIATION}
+ * copy.
+ *
+ * **Note on expiry:** the pre-check only tells you the grant is currently
+ * active, not until when. If an existing grant expires mid-flow,
+ * `ensureOperator` will not have refreshed it — pass a fresh
+ * {@link setOperator} call instead when you need to extend a window.
+ *
+ * @example
+ * ```ts
+ * import { ensureOperator } from "@tokenops/sdk/fhe";
+ *
+ * const oneHour = BigInt(Math.floor(Date.now() / 1000) + 3600);
+ * const { alreadyOperator, hash } = await ensureOperator({
+ *   publicClient,
+ *   walletClient,
+ *   token,
+ *   spender: manager,
+ *   deadline: oneHour,
+ * });
+ * // Now safe to call manager.createVesting / factory.fundConfidentialAirdrop / etc.
+ * ```
+ *
+ * @throws {@link TokenOpsContractError} if no holder account can be
+ *   resolved, if `deadline` is outside `(0, 2**48 - 1]`, or if the
+ *   read/write/receipt step fails.
+ */
+export declare function ensureOperator(args: EnsureOperatorArgs): Promise<EnsureOperatorResult>;