@tokenops/sdk 1.5.1 → 2.0.0-alpha.1

package/dist/chunk-456VDDA3.js

@@ -0,0 +1,370 @@
+import { resolveEncryptor, encryptUint64 } from './chunk-GKKDAW44.js';
+import { assertPredictionFresh, FeeCollectorSelfAdministeredError } from './chunk-O5676ZWY.js';
+import { normaliseAddress } from './chunk-ZA673I3O.js';
+import { InvalidArgumentError, MissingWalletClientError, MissingAccountError, ContractRevertError, MissingEncryptorError, isTokenOpsSdkError, UnknownWriteFailureError } from './chunk-QBJ7O2B4.js';
+import { StandardMerkleTree } from '@openzeppelin/merkle-tree';
+import { keccak256, encodeAbiParameters, isAddress, isAddressEqual, zeroAddress } from 'viem';
+
+function leafOf(args) {
+  const inner = keccak256(
+    encodeAbiParameters(
+      [{ type: "address" }, { type: "address" }, { type: "bytes32" }],
+      [args.instance, args.recipient, args.handle]
+    )
+  );
+  return keccak256(inner);
+}
+var HANDLE_PATTERN = /^0x[0-9a-fA-F]{64}$/;
+function assertLeaves(instance, leaves, method) {
+  if (!isAddress(instance, { strict: false })) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is not a 20-byte hex address",
+      value: instance
+    });
+  }
+  if (isAddressEqual(instance, zeroAddress)) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is the zero address; leaves must be scoped to the airdrop instance"
+    });
+  }
+  if (leaves.length === 0) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "leaves",
+      reason: "a tree needs at least one leaf"
+    });
+  }
+  const seen = /* @__PURE__ */ new Map();
+  leaves.forEach((leaf, index) => {
+    if (!isAddress(leaf.recipient, { strict: false })) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].recipient`,
+        reason: "is not a 20-byte hex address",
+        value: leaf.recipient
+      });
+    }
+    if (isAddressEqual(leaf.recipient, zeroAddress)) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].recipient`,
+        reason: "is the zero address, whose leaf can never be claimed"
+      });
+    }
+    if (!HANDLE_PATTERN.test(leaf.handle)) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].handle`,
+        reason: "is not a 32-byte hex handle; the tree would commit to a value no claim can reproduce",
+        value: leaf.handle
+      });
+    }
+    const key = leaf.recipient.toLowerCase();
+    const first = seen.get(key);
+    if (first !== void 0) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].recipient`,
+        reason: `appears twice (also at index ${first}); one root pays max, not sum, of a recipient's leaves \u2014 merge them into a single cumulative total`
+      });
+    }
+    seen.set(key, index);
+  });
+}
+function buildMerkleTree(args) {
+  return buildMerkleTreeInternal(args, "buildMerkleTree");
+}
+function buildMerkleTreeInternal({ instance, leaves }, method) {
+  assertLeaves(instance, leaves, method);
+  const airdrop = normaliseAddress(instance);
+  const accounts = leaves.map((leaf) => normaliseAddress(leaf.recipient));
+  const rows = accounts.map((account, i) => [airdrop, account, leaves[i].handle]);
+  const tree = StandardMerkleTree.of(rows, ["address", "address", "bytes32"]);
+  return {
+    root: tree.root,
+    // `getProof(i)` indexes the INPUT array, not the tree: `StandardMerkleTree`
+    // sorts leaves internally but keeps `values` in insertion order, so entry
+    // `i` always belongs to `leaves[i]`.
+    entries: leaves.map((leaf, i) => ({
+      ...leaf,
+      recipient: accounts[i],
+      merkleProof: tree.getProof(i)
+    }))
+  };
+}
+var MAX_UINT64 = (1n << 64n) - 1n;
+function validateCampaignRecipients(recipients) {
+  validateCampaignRecipientsInternal(recipients, "validateCampaignRecipients");
+}
+function validateCampaignRecipientsInternal(recipients, method) {
+  if (recipients.length === 0) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "recipients",
+      reason: "a campaign needs at least one recipient"
+    });
+  }
+  const seen = /* @__PURE__ */ new Map();
+  recipients.forEach((entry, index) => {
+    if (!isAddress(entry.recipient, { strict: false })) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].recipient`,
+        reason: "is not a 20-byte hex address",
+        value: entry.recipient
+      });
+    }
+    if (isAddressEqual(entry.recipient, zeroAddress)) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].recipient`,
+        reason: "is the zero address, whose leaf can never be claimed"
+      });
+    }
+    if (entry.cumulativeTotal < 0n || entry.cumulativeTotal > MAX_UINT64) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].cumulativeTotal`,
+        // Deliberately no `value`: the total is confidential.
+        reason: "is outside uint64 range (0..2^64-1)"
+      });
+    }
+    const key = entry.recipient.toLowerCase();
+    const first = seen.get(key);
+    if (first !== void 0) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].recipient`,
+        reason: `appears twice (also at index ${first}); one root pays max, not sum, of a recipient's leaves \u2014 merge them into a single cumulative total`
+      });
+    }
+    seen.set(key, index);
+  });
+}
+async function encryptRoster({ instance, recipients, encryptor }, method) {
+  validateCampaignRecipientsInternal(recipients, method);
+  if (!isAddress(instance, { strict: false })) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is not a 20-byte hex address",
+      value: instance
+    });
+  }
+  if (isAddressEqual(instance, zeroAddress)) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is the zero address; inputs must be bound to the airdrop instance"
+    });
+  }
+  const enc = resolveEncryptor(encryptor);
+  if (!enc) {
+    throw new MissingEncryptorError(method, {
+      hint: "Pass an encryptor instance, or a lazy factory that returns one."
+    });
+  }
+  const airdrop = normaliseAddress(instance);
+  const accounts = recipients.map((r) => normaliseAddress(r.recipient));
+  const encrypted = await Promise.all(
+    recipients.map(
+      (r, i) => encryptUint64({
+        encryptor: enc,
+        contractAddress: airdrop,
+        userAddress: accounts[i],
+        value: r.cumulativeTotal
+      })
+    )
+  );
+  return accounts.map((recipient, i) => ({
+    recipient,
+    handle: encrypted[i].handle,
+    inputProof: encrypted[i].inputProof
+  }));
+}
+async function encryptCampaignAmounts(args) {
+  return encryptRoster(args, "encryptCampaignAmounts");
+}
+async function buildMerkleCampaign({
+  instance,
+  recipients,
+  encryptor
+}) {
+  const leaves = await encryptRoster({ instance, recipients, encryptor }, "buildMerkleCampaign");
+  return buildMerkleTreeInternal({ instance, leaves }, "buildMerkleCampaign");
+}
+async function planMerkleCampaign({
+  factory,
+  params,
+  mode,
+  creator,
+  userSalt,
+  recipients,
+  encryptor
+}) {
+  validateCampaignRecipientsInternal(recipients, "planMerkleCampaign");
+  const initCodeHashBefore = await factory.getMerkleInitCodeHash({ params, mode });
+  const predictedAddress = await factory.predictMerkleAirdropAddress({
+    params,
+    mode,
+    deployer: creator,
+    userSalt
+  });
+  const campaign = await buildMerkleCampaign({
+    instance: predictedAddress,
+    recipients,
+    encryptor
+  });
+  const initCodeHashAfter = await factory.getMerkleInitCodeHash({ params, mode });
+  assertPredictionFresh({
+    variant: "merkle",
+    initCodeHashBefore,
+    initCodeHashAfter,
+    predictedAddress,
+    method: "planMerkleCampaign"
+  });
+  return { ...campaign, predictedAddress, initCodeHashBefore, initCodeHashAfter };
+}
+async function rotateMerkleRoot({
+  airdrop,
+  recipients,
+  encryptor,
+  account
+}) {
+  const campaign = await buildMerkleCampaign({
+    instance: airdrop.address,
+    recipients,
+    encryptor
+  });
+  const hash = await airdrop.setMerkleRoot({ newRoot: campaign.root, account });
+  return { ...campaign, hash };
+}
+var ASSIGNABLE_ROLES = [
+  { key: "pauser", role: "PAUSER_ROLE" },
+  { key: "windowAdmin", role: "WINDOW_ADMIN_ROLE" },
+  { key: "treasury", role: "TREASURY_ROLE" },
+  { key: "rescuer", role: "RESCUER_ROLE" },
+  { key: "disclosureAdmin", role: "DISCLOSURE_ADMIN_ROLE" },
+  { key: "upgrader", role: "UPGRADER_ROLE" },
+  { key: "merkleAdmin", role: "MERKLE_ADMIN_ROLE", variant: "merkle" },
+  { key: "signer", role: "SIGNER_ROLE", variant: "ecdsa" }
+];
+function planInstanceRoleSplit(args) {
+  const { assignment, caller, airdropType } = args;
+  if (assignment.feeCollector !== void 0) {
+    throw new FeeCollectorSelfAdministeredError({ requestedGrantee: assignment.feeCollector });
+  }
+  const steps = [];
+  for (const { key, role, variant } of ASSIGNABLE_ROLES) {
+    const account = assignment[key];
+    if (account === void 0) continue;
+    if (variant !== void 0 && variant !== airdropType) {
+      throw new InvalidArgumentError({
+        method: "planInstanceRoleSplit",
+        argument: `assignment.${key}`,
+        reason: `${role} only exists on ${variant} campaigns; this is a(n) ${airdropType} campaign`
+      });
+    }
+    steps.push({ kind: "grant", role, account });
+  }
+  if (assignment.admin !== void 0) {
+    if (isAddressEqual(assignment.admin, zeroAddress)) {
+      throw new InvalidArgumentError({
+        method: "planInstanceRoleSplit",
+        argument: "assignment.admin",
+        reason: "granting DEFAULT_ADMIN_ROLE to the zero address is never valid"
+      });
+    }
+    steps.push({ kind: "grant", role: "DEFAULT_ADMIN_ROLE", account: assignment.admin });
+    steps.push({ kind: "revoke", role: "DEFAULT_ADMIN_ROLE", account: caller });
+  }
+  return steps;
+}
+function roleGetterAbiEntry(name) {
+  return {
+    inputs: [],
+    name,
+    outputs: [{ internalType: "bytes32", name: "", type: "bytes32" }],
+    stateMutability: "view",
+    type: "function"
+  };
+}
+var ROLE_GETTER_ABI = [
+  roleGetterAbiEntry("PAUSER_ROLE"),
+  roleGetterAbiEntry("WINDOW_ADMIN_ROLE"),
+  roleGetterAbiEntry("TREASURY_ROLE"),
+  roleGetterAbiEntry("RESCUER_ROLE"),
+  roleGetterAbiEntry("DISCLOSURE_ADMIN_ROLE"),
+  roleGetterAbiEntry("UPGRADER_ROLE"),
+  roleGetterAbiEntry("MERKLE_ADMIN_ROLE"),
+  roleGetterAbiEntry("SIGNER_ROLE")
+];
+var DEFAULT_ADMIN_ROLE_CONSTANT = `0x${"0".repeat(64)}`;
+async function resolveRoleConstant(airdrop, role) {
+  if (role === "DEFAULT_ADMIN_ROLE") return DEFAULT_ADMIN_ROLE_CONSTANT;
+  const result = await airdrop.publicClient.readContract({
+    address: airdrop.address,
+    abi: ROLE_GETTER_ABI,
+    functionName: role
+  });
+  return result;
+}
+function toOutcomeError(step, airdrop, error) {
+  if (isTokenOpsSdkError(error)) return error;
+  return new UnknownWriteFailureError({
+    method: `grantInstanceRoles.${step.kind}.${step.role}`,
+    contractAddress: airdrop.address,
+    cause: error
+  });
+}
+async function grantInstanceRoles(args) {
+  const { airdrop, assignment, revokeFromCreator = true } = args;
+  const wallet = airdrop.walletClient;
+  if (!wallet) {
+    throw new MissingWalletClientError("grantInstanceRoles");
+  }
+  const callerAccount = wallet.account;
+  if (!callerAccount) {
+    throw new MissingAccountError("grantInstanceRoles");
+  }
+  const caller = typeof callerAccount === "string" ? callerAccount : callerAccount.address;
+  const airdropType = await airdrop.airdropType() === 1 ? "merkle" : "ecdsa";
+  let steps = planInstanceRoleSplit({ assignment, caller, airdropType });
+  if (!revokeFromCreator) {
+    steps = steps.filter((step) => !(step.kind === "revoke" && step.role === "DEFAULT_ADMIN_ROLE"));
+  }
+  const outcomes = [];
+  for (const step of steps) {
+    try {
+      const role = await resolveRoleConstant(airdrop, step.role);
+      const hash = step.kind === "grant" ? await airdrop.grantRole({ role, holder: step.account, account: caller }) : await airdrop.revokeRole({ role, holder: step.account, account: caller });
+      const receipt = await airdrop.publicClient.waitForTransactionReceipt({ hash });
+      if (receipt.status !== "success") {
+        outcomes.push({
+          role: step.role,
+          account: step.account,
+          error: new ContractRevertError({
+            method: `grantInstanceRoles.${step.kind}.${step.role}`,
+            contractAddress: airdrop.address,
+            message: `grantInstanceRoles.${step.kind}.${step.role}: transaction ${hash} was mined with a reverted status; the role change did not apply.`
+          })
+        });
+        continue;
+      }
+      outcomes.push({ role: step.role, account: step.account, hash });
+    } catch (error) {
+      outcomes.push({
+        role: step.role,
+        account: step.account,
+        error: toOutcomeError(step, airdrop, error)
+      });
+    }
+  }
+  return outcomes;
+}
+
+export { buildMerkleCampaign, buildMerkleTree, encryptCampaignAmounts, grantInstanceRoles, leafOf, planInstanceRoleSplit, planMerkleCampaign, rotateMerkleRoot, validateCampaignRecipients };

package/dist/{chunk-SG65XWH7.js → chunk-4RAAATVY.js}

@@ -1,8 +1,6 @@
 import { TokenOpsSdkError, ContractRevertError, InvalidArgumentError, OperatorNotApprovedError, InvalidSignatureError, FheHandleNotAllowedError, TransferFailedError, FeatureDisabledError, BatchTooLargeError, InsufficientBalanceError, InsufficientFeeError, ReentrancyError, AlreadyInitializedError, AccessDeniedError, PausedError, UnknownWriteFailureError, WalletRejectedError, WalletChainMismatchError, InsufficientGasFundsError, NetworkError } from './chunk-QBJ7O2B4.js';
 import { decodeErrorResult, BaseError, ContractFunctionRevertedError, UserRejectedRequestError, TransactionRejectedRpcError, ChainMismatchError, InsufficientFundsError, HttpRequestError, TimeoutError } from 'viem';
 
-// src/core/version.ts
-var SDK_VERSION = "1.0.0";
 var ERC7984_ERRORS_ABI = [
   {
     type: "error",
@@ -378,4 +376,4 @@ function coerceRevertHex(value) {
   return void 0;
 }
 
-export { SDK_VERSION, isContractRevert, mapContractRevert };
+export { isContractRevert, mapContractRevert };

package/dist/{chunk-6BMP4ICG.js → chunk-4TSDNZQ3.js}

@@ -1,6 +1,7 @@
+import { erc7984OperatorAbi } from './chunk-7VELUOMI.js';
 import { normaliseAddress } from './chunk-ZA673I3O.js';
-import { withTelemetry } from './chunk-Q2GP5UDC.js';
 import { TokenOpsContractError } from './chunk-QBJ7O2B4.js';
+import { withTelemetry } from './chunk-Q2GP5UDC.js';
 
 // src/fhe/operators.ts
 var ERC7984_SET_OPERATOR_ABI = [
@@ -92,5 +93,62 @@ async function revokeOperator(args) {
     });
   });
 }
+async function isOperator(args) {
+  const token = normaliseAddress(args.token);
+  const holder = normaliseAddress(args.holder);
+  const spender = normaliseAddress(args.spender);
+  return withTelemetry(args.telemetry, "fhe.isOperator", async () => {
+    try {
+      return await args.publicClient.readContract({
+        address: token,
+        abi: erc7984OperatorAbi,
+        functionName: "isOperator",
+        args: [holder, spender]
+      });
+    } catch (err) {
+      throw new TokenOpsContractError(
+        `isOperator: readContract failed (token=${token}, holder=${holder}, spender=${spender})`,
+        { contract: "ERC7984", call: "isOperator", token, holder, spender, cause: err }
+      );
+    }
+  });
+}
+async function ensureOperator(args) {
+  return withTelemetry(args.telemetry, "fhe.ensureOperator", async () => {
+    if (args.deadline <= 0n || args.deadline > ERC7984_OPERATOR_MAX_DEADLINE) {
+      throw new TokenOpsContractError(
+        `ensureOperator: deadline ${args.deadline} out of range (0, ${ERC7984_OPERATOR_MAX_DEADLINE}]`,
+        { contract: "ERC7984", call: "ensureOperator", deadline: args.deadline.toString() }
+      );
+    }
+    const fromAccount = args.account ?? args.walletClient.account;
+    if (!fromAccount) {
+      throw new TokenOpsContractError(
+        "ensureOperator: no account available \u2014 pass `account` explicitly or attach an account to the walletClient",
+        { contract: "ERC7984", call: "ensureOperator" }
+      );
+    }
+    const holder = typeof fromAccount === "string" ? fromAccount : fromAccount.address;
+    const authorized = await isOperator({
+      publicClient: args.publicClient,
+      token: args.token,
+      holder,
+      spender: args.spender
+    });
+    if (authorized) {
+      return { alreadyOperator: true, hash: null };
+    }
+    const hash = await setOperator({
+      publicClient: args.publicClient,
+      walletClient: args.walletClient,
+      ...args.account !== void 0 ? { account: args.account } : {},
+      token: args.token,
+      spender: args.spender,
+      deadline: args.deadline,
+      ...args.waitForReceipt !== void 0 ? { waitForReceipt: args.waitForReceipt } : {}
+    });
+    return { alreadyOperator: false, hash };
+  });
+}
 
-export { ERC7984_OPERATOR_MAX_DEADLINE, ERC7984_SET_OPERATOR_ABI, revokeOperator, setOperator };
+export { ERC7984_OPERATOR_MAX_DEADLINE, ERC7984_SET_OPERATOR_ABI, ensureOperator, isOperator, revokeOperator, setOperator };

package/dist/{chunk-PUPKNW3R.cjs → chunk-5576FRT3.cjs}

@@ -6,14 +6,26 @@ var chains = require('viem/chains');
 var DEPLOYED_ADDRESSES = {
   fheVesting: {
     confidentialVestingFactory: {
-      [chains.sepolia.id]: "0xA87701CE9A52D43681600583a99c85b50DbE3150"
+      [chains.sepolia.id]: "0x059d6Bb8ff9a13E794fe416d4757d7310CdC69ab"
       // mainnet omitted — not deployed.
     }
   },
+  // Airdrop v2 (tokenops-fhe-airdrop-v2 @ 8e5b144). The four contracts deploy
+  // together in one scripted run, so a chain either has all of them or none —
+  // which is what `chainsWithDeployment` assumes.
   fheAirdrop: {
-    confidentialAirdropFactory: {
-      [chains.sepolia.id]: "0xbE6A3B78B36684fFee48De77d47Bc3393F5Acd4c"
-      // mainnet omitted — not deployed.
+    airdropFactory: {
+      [chains.sepolia.id]: "0x383083B6f13a0ee513596A6750B511c5E482d2d1"
+      // mainnet omitted — ZamaConfig-gated, not deployed.
+    },
+    ecdsaImplementation: {
+      [chains.sepolia.id]: "0xefE40570C1837210f8E4Ae938635e11bd1ae788E"
+    },
+    merkleImplementation: {
+      [chains.sepolia.id]: "0x9f3156546744F3ceE98Dc44bed817d98A8b8ae74"
+    },
+    complianceManagerImplementation: {
+      [chains.sepolia.id]: "0x6adA841250C048364d1d3027958C662Dd4E62136"
     }
   },
   fheDisperse: {
@@ -64,10 +76,19 @@ function requireFheVestingFactoryAddress(chainId) {
   return requireDeployedAddress("fheVesting", "confidentialVestingFactory", chainId);
 }
 function getFheAirdropFactoryAddress(chainId) {
-  return getDeployedAddress("fheAirdrop", "confidentialAirdropFactory", chainId);
+  return getDeployedAddress("fheAirdrop", "airdropFactory", chainId);
 }
 function requireFheAirdropFactoryAddress(chainId) {
-  return requireDeployedAddress("fheAirdrop", "confidentialAirdropFactory", chainId);
+  return requireDeployedAddress("fheAirdrop", "airdropFactory", chainId);
+}
+function getFheAirdropEcdsaImplementationAddress(chainId) {
+  return getDeployedAddress("fheAirdrop", "ecdsaImplementation", chainId);
+}
+function getFheAirdropMerkleImplementationAddress(chainId) {
+  return getDeployedAddress("fheAirdrop", "merkleImplementation", chainId);
+}
+function getFheAirdropComplianceImplementationAddress(chainId) {
+  return getDeployedAddress("fheAirdrop", "complianceManagerImplementation", chainId);
 }
 function getFheDisperseSingletonAddress(chainId) {
   return getDeployedAddress("fheDisperse", "disperseConfidentialSingleton", chainId);
@@ -115,7 +136,10 @@ exports.chainsWithDeployment = chainsWithDeployment;
 exports.chainsWithKnownRegistryEntry = chainsWithKnownRegistryEntry;
 exports.getConfidentialTestTokenAddress = getConfidentialTestTokenAddress;
 exports.getDeployedAddress = getDeployedAddress;
+exports.getFheAirdropComplianceImplementationAddress = getFheAirdropComplianceImplementationAddress;
+exports.getFheAirdropEcdsaImplementationAddress = getFheAirdropEcdsaImplementationAddress;
 exports.getFheAirdropFactoryAddress = getFheAirdropFactoryAddress;
+exports.getFheAirdropMerkleImplementationAddress = getFheAirdropMerkleImplementationAddress;
 exports.getFheDisperseSingletonAddress = getFheDisperseSingletonAddress;
 exports.getFheVestingFactoryAddress = getFheVestingFactoryAddress;
 exports.getTestTokenAddress = getTestTokenAddress;

package/dist/{chunk-AOP6HMPW.js → chunk-6GNR22OV.js}

@@ -1,4 +1,6 @@
+import { asExternalInputProof, asEncryptedHandle } from './chunk-KWFFIJYX.js';
 import { InvalidArgumentError } from './chunk-QBJ7O2B4.js';
+import { bytesToHex } from 'viem';
 
 // src/fhe/scale-ratio.ts
 var FHE_SPLIT_DENOMINATOR = 90090000n;
@@ -131,5 +133,77 @@ function toIntegerBigInt(value, method, argument) {
   }
   return BigInt(value);
 }
+function resolveEncryptor(source) {
+  if (source === void 0) return void 0;
+  return typeof source === "function" ? source() : source;
+}
+var MAX_UINT642 = (1n << 64n) - 1n;
+function assertUint64(value, label) {
+  if (value < 0n || value > MAX_UINT642) {
+    throw new InvalidArgumentError({
+      method: "encryptUint64",
+      argument: label,
+      reason: `does not fit in uint64 (0..2^64-1)`,
+      value
+    });
+  }
+}
+async function encryptUint64({
+  encryptor,
+  contractAddress,
+  userAddress,
+  value
+}) {
+  assertUint64(value, "value");
+  const { handles, inputProof } = await encryptor.encrypt({
+    values: [{ value, type: "euint64" }],
+    contractAddress,
+    userAddress
+  });
+  if (handles.length !== 1) {
+    throw new InvalidArgumentError({
+      method: "encryptUint64",
+      argument: "handles",
+      reason: `expected 1 handle, got ${handles.length}`,
+      value: handles.length
+    });
+  }
+  return {
+    handle: asEncryptedHandle(bytesToHex(handles[0])),
+    inputProof: asExternalInputProof(bytesToHex(inputProof))
+  };
+}
+async function encryptUint64Batch({
+  encryptor,
+  contractAddress,
+  userAddress,
+  values
+}) {
+  if (values.length === 0) {
+    throw new InvalidArgumentError({
+      method: "encryptUint64Batch",
+      argument: "values",
+      reason: "must be non-empty"
+    });
+  }
+  values.forEach((v, i) => assertUint64(v, `values[${i}]`));
+  const { handles, inputProof } = await encryptor.encrypt({
+    values: values.map((value) => ({ value, type: "euint64" })),
+    contractAddress,
+    userAddress
+  });
+  if (handles.length !== values.length) {
+    throw new InvalidArgumentError({
+      method: "encryptUint64Batch",
+      argument: "handles",
+      reason: `expected ${values.length} handles, got ${handles.length}`,
+      value: handles.length
+    });
+  }
+  return {
+    handles: handles.map((h) => asEncryptedHandle(bytesToHex(h))),
+    inputProof: asExternalInputProof(bytesToHex(inputProof))
+  };
+}
 
-export { FHE_SPLIT_DENOMINATOR, scaleRatio, share };
+export { FHE_SPLIT_DENOMINATOR, encryptUint64, encryptUint64Batch, resolveEncryptor, scaleRatio, share };

package/dist/{chunk-NTZY6IB7.js → chunk-6NAVMWZQ.js}

@@ -1,6 +1,7 @@
-import { createConfidentialVestingManagerClient, resolveEncryptor } from './chunk-IXLO7GO5.js';
-import { createConfidentialVestingFactoryClient } from './chunk-OXTLPTO3.js';
-import { getFheVestingFactoryAddress } from './chunk-XGGTQQFH.js';
+import { createConfidentialVestingManagerClient } from './chunk-TWT3STIX.js';
+import { resolveEncryptor } from './chunk-6GNR22OV.js';
+import { createConfidentialVestingFactoryClient } from './chunk-EAJ7SYHE.js';
+import { getFheVestingFactoryAddress } from './chunk-DZHYSUGY.js';
 import { DeploymentAddressUnavailableError } from './chunk-QBJ7O2B4.js';
 import { useMemo, useRef, useEffect } from 'react';
 import { usePublicClient, useWalletClient } from 'wagmi';

package/dist/{chunk-C7BRZXJA.cjs → chunk-6PXXGACR.cjs}

@@ -1,11 +1,12 @@
 'use strict';
 
-var chunkKLKI352M_cjs = require('./chunk-KLKI352M.cjs');
-var chunkPUPKNW3R_cjs = require('./chunk-PUPKNW3R.cjs');
+var chunkUG5RKLU2_cjs = require('./chunk-UG5RKLU2.cjs');
+var chunkMVDQMV25_cjs = require('./chunk-MVDQMV25.cjs');
+var chunk5576FRT3_cjs = require('./chunk-5576FRT3.cjs');
 var chunkJK4XMMKM_cjs = require('./chunk-JK4XMMKM.cjs');
-var chunkVJKZWYYJ_cjs = require('./chunk-VJKZWYYJ.cjs');
 var chunk66IHPTOK_cjs = require('./chunk-66IHPTOK.cjs');
 var chunk67OV5CX2_cjs = require('./chunk-67OV5CX2.cjs');
+var chunkVJKZWYYJ_cjs = require('./chunk-VJKZWYYJ.cjs');
 var viem = require('viem');
 
 // src/fhe-vesting/abis/factory.ts
@@ -445,7 +446,7 @@ var ConfidentialVestingFactoryClient = class {
     this.walletClient = config.walletClient;
     const chainId = config.chainId ?? config.publicClient.chain?.id;
     const addressOverride = config.address ? chunkJK4XMMKM_cjs.normaliseAddress(config.address) : void 0;
-    const resolved = addressOverride ?? (chainId === void 0 ? void 0 : chunkPUPKNW3R_cjs.getFheVestingFactoryAddress(chainId));
+    const resolved = addressOverride ?? (chainId === void 0 ? void 0 : chunk5576FRT3_cjs.getFheVestingFactoryAddress(chainId));
     if (!resolved) {
       throw new chunk67OV5CX2_cjs.DeploymentAddressUnavailableError({
         reason: chainId === void 0 ? "chain-id-missing" : "registry-not-deployed",
@@ -463,7 +464,7 @@ var ConfidentialVestingFactoryClient = class {
       hasWallet: !!this.walletClient,
       aclResolved: true,
       // factory has no ACL dependency; constant for funnel-shape parity with manager.
-      sdkVersion: chunkKLKI352M_cjs.SDK_VERSION
+      sdkVersion: chunkUG5RKLU2_cjs.SDK_VERSION
     });
   }
   // ----------------------- writes -----------------------
@@ -691,7 +692,7 @@ var ConfidentialVestingFactoryClient = class {
     }
   }
   #mapRevert(method, err, account) {
-    return chunkKLKI352M_cjs.mapContractRevert(err, {
+    return chunkMVDQMV25_cjs.mapContractRevert(err, {
       method,
       contractAddress: this.address,
       abi: confidentialVestingFactoryAbi,
@@ -716,7 +717,7 @@ var ConfidentialVestingFactoryClient = class {
         ...value !== void 0 ? { value } : {}
       });
     } catch (err) {
-      if (chunkKLKI352M_cjs.isContractRevert(err)) {
+      if (chunkMVDQMV25_cjs.isContractRevert(err)) {
         throw this.#mapRevert(method, err, accountAddress(account));
       }
     }

package/dist/{chunk-IJFQ5L4I.js → chunk-74QFZ5MK.js}

@@ -1,9 +1,10 @@
-import { SDK_VERSION, isContractRevert, mapContractRevert } from './chunk-SG65XWH7.js';
-import { getConfidentialTestTokenAddress, getTestTokenAddress } from './chunk-XGGTQQFH.js';
+import { SDK_VERSION } from './chunk-NWFMBLSQ.js';
+import { isContractRevert, mapContractRevert } from './chunk-4RAAATVY.js';
+import { getConfidentialTestTokenAddress, getTestTokenAddress } from './chunk-DZHYSUGY.js';
 import { normaliseAddress } from './chunk-ZA673I3O.js';
-import { withTelemetry } from './chunk-Q2GP5UDC.js';
 import { asEncryptedHandle, asTxHash } from './chunk-KWFFIJYX.js';
 import { TokenOpsSdkError, UnsupportedChainError, DeploymentAddressUnavailableError, TokenOpsContractError, ReceiptEventNotFoundError, ReceiptEventAmbiguousError, MissingWalletClientError, MissingAccountError, InvalidArgumentError } from './chunk-QBJ7O2B4.js';
+import { withTelemetry } from './chunk-Q2GP5UDC.js';
 import { sepolia } from 'viem/chains';
 import { parseEventLogs } from 'viem';