@zama-fhe/sdk 3.2.0-alpha.2 → 3.2.0

package/dist/cjs/relayer-sdk.worker.js

@@ -102,7 +102,7 @@
 	const relayerUrls = /* @__PURE__ */ new Set();
 	let csrfTokenBase = "";
 	const CSRF_HEADER_NAME = "x-csrf-token";
-	const MUTATING_METHODS = new Set([
+	const MUTATING_METHODS = /* @__PURE__ */ new Set([
 		"POST",
 		"PUT",
 		"DELETE",
@@ -142,7 +142,7 @@
 	}
 	const originalFetch = fetch;
 	/** Allowed CDN hostnames for loading the relayer SDK script. */
-	const ALLOWED_CDN_HOSTS = new Set(["cdn.zama.org"]);
+	const ALLOWED_CDN_HOSTS = /* @__PURE__ */ new Set(["cdn.zama.org"]);
 	/**
 	* Validate the CDN URL supplied by the caller.
 	* Ensures only HTTPS URLs from approved hosts are used when loading

package/dist/cjs/web/index.cjs

@@ -102,7 +102,7 @@ Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=requi
 	const relayerUrls = /* @__PURE__ */ new Set();
 	let csrfTokenBase = "";
 	const CSRF_HEADER_NAME = "x-csrf-token";
-	const MUTATING_METHODS = new Set([
+	const MUTATING_METHODS = /* @__PURE__ */ new Set([
 		"POST",
 		"PUT",
 		"DELETE",
@@ -142,7 +142,7 @@ Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=requi
 	}
 	const originalFetch = fetch;
 	/** Allowed CDN hostnames for loading the relayer SDK script. */
-	const ALLOWED_CDN_HOSTS = new Set(["cdn.zama.org"]);
+	const ALLOWED_CDN_HOSTS = /* @__PURE__ */ new Set(["cdn.zama.org"]);
 	/**
 	* Validate the CDN URL supplied by the caller.
 	* Ensures only HTTPS URLs from approved hosts are used when loading

package/dist/esm/base-signer-BVqcM5jt.js.map

@@ -1 +1 @@
-{"version":3,"file":"base-signer-BVqcM5jt.js","names":["#generator","#storage","#ttl","#logger","#pending","#storage","#logger","#deleteScope","#untrackScope","#trackScope","#readIndex","#vault","#store","#relayer","#signer","#permitTTL","#logger","#signPermit","#logger","#prefix","#chains","#relayers","#workers","#chainId","#active","#addresses","#ttlMs","#cache","#getCached","#setCached","#pairWithMetadata","#listeners","#snapshot","#resolved","#emit","#disposed"],"sources":["../../src/credentials/storage-keys.ts","../../src/schemas/primitives.ts","../../src/credentials/utils.ts","../../src/credentials/schemas.ts","../../src/credentials/keypair-vault.ts","../../src/credentials/permissions.ts","../../src/credentials/permission-store.ts","../../src/credentials/credential-service.ts","../../src/services/logger-service.ts","../../src/config/resolve.ts","../../src/relayer/relayer-dispatcher.ts","../../src/wrappers-registry.ts","../../src/config/build.ts","../../src/signer/wallet-account-store.ts","../../src/signer/base-signer.ts"],"sourcesContent":["import type { ChecksummedAddress } from \"../schemas/primitives\";\n\nexport interface PermissionScope {\n  signerAddress: ChecksummedAddress;\n  chainId: number;\n  delegatorAddress: ChecksummedAddress;\n}\n\nexport function transportKeyPairStorageKey(signerAddress: ChecksummedAddress): string {\n  // The \"keypair:\" prefix is intentionally preserved for back-compat with already-persisted entries.\n  return `keypair:${signerAddress}`;\n}\n\nexport function permissionScopeKey(scope: PermissionScope): string {\n  return `permits:${scope.signerAddress}:${scope.chainId}:${scope.delegatorAddress}`;\n}\n\nexport function permissionIndexKey(signerAddress: ChecksummedAddress): string {\n  return `permits-index:${signerAddress}`;\n}\n","import { type Address, getAddress, isAddress, isHex, type Hex } from \"viem\";\nimport { z } from \"zod/mini\";\n\ndeclare const checksummedTag: unique symbol;\n\n/** An EVM address that has been put through `getAddress` (EIP-55 checksum form). */\nexport type ChecksummedAddress = Address & { readonly [checksummedTag]: true };\n\n/** Stamp the brand on an arbitrary `Address` after normalizing it. */\nexport function checksum(value: Address): ChecksummedAddress {\n  return getAddress(value) as ChecksummedAddress;\n}\n\n/** `0x`-prefixed hex string. */\nexport const hex = z.custom<Hex>(\n  (v) => typeof v === \"string\" && isHex(v, { strict: true }),\n  \"expected 0x-prefixed hex string\",\n);\n\n/** Validates an EVM address string. Output type is `Address` (`` `0x${string}` ``). */\nexport const evmAddress = z.custom<Address>(\n  (v) => typeof v === \"string\" && isAddress(v, { strict: false }),\n  \"expected EVM address\",\n);\n\n/** Validates and EIP-55 checksums an EVM address. Output is {@link ChecksummedAddress}. */\nexport const checksummedAddress = z.pipe(evmAddress, z.transform(checksum));\n\n/** Non-negative integer Unix timestamp in seconds. */\nexport const unixSeconds = z.int().check(z.nonnegative());\n\n/** Positive integer count of seconds (e.g. a TTL). */\nexport const positiveSeconds = z.int().check(z.positive());\n\n/** Non-negative integer count of seconds (e.g. a cache TTL where 0 disables caching). */\nexport const nonNegativeSeconds = z.int().check(z.nonnegative());\n\n/** Positive integer count of days (e.g. a permit duration). */\nexport const positiveDays = z.int().check(z.positive());\n\n/** Positive integer EVM chain ID. */\nexport const chainId = z.int().check(z.positive());\n","import type { Address } from \"viem\";\nimport { type ChecksummedAddress, checksum } from \"../schemas/primitives\";\nexport { checksum, type ChecksummedAddress };\n\n/** Maximum number of contract addresses a single permit may bind, enforced by the FHE protocol. */\nexport const MAX_CONTRACTS_PER_PERMIT = 10;\n\nexport const SECONDS_PER_DAY = 86400;\n\n/** Current Unix time in whole seconds. */\nexport function nowSeconds(): number {\n  return Math.floor(Date.now() / 1000);\n}\n\n/** Deduplicate and sort a list of addresses by their checksummed form. */\nexport function normalizeAddresses(addresses: readonly Address[]): ChecksummedAddress[] {\n  return [...new Set(addresses.map(checksum))].toSorted();\n}\n","import { z } from \"zod/mini\";\nimport {\n  checksummedAddress,\n  chainId,\n  hex,\n  positiveDays,\n  positiveSeconds,\n  unixSeconds,\n} from \"../schemas/primitives\";\nimport { MAX_CONTRACTS_PER_PERMIT, SECONDS_PER_DAY } from \"./utils\";\n\nconst transportKeyPairTTLError = \"transportKeyPairTTL must be a positive integer number of seconds\";\nconst permitTTLError = \"permitTTL must be a positive integer number of days\";\n\n/** Maximum transportKeyPairTTL accepted by the fhevm ACL contract (365 days, in seconds). */\nexport const MAX_TRANSPORT_KEY_PAIR_TTL_SECONDS = 365 * SECONDS_PER_DAY;\n\n// z.int already rejects NaN, Infinity, and non-integers, so it covers\n// the previous .finite() + .int() combo with a single schema.\nexport const TransportKeyPairTTLSchema = z\n  .int({ error: transportKeyPairTTLError })\n  .check(\n    z.positive({ error: transportKeyPairTTLError }),\n    z.maximum(\n      MAX_TRANSPORT_KEY_PAIR_TTL_SECONDS,\n      `transportKeyPairTTL must not exceed the fhevm ACL maximum of ${MAX_TRANSPORT_KEY_PAIR_TTL_SECONDS}s (365 days)`,\n    ),\n  );\n\nexport const PermitTTLSchema = z\n  .int({ error: permitTTLError })\n  .check(z.positive({ error: permitTTLError }));\n\nexport const StoredTransportKeyPairSchema = z.object({\n  publicKey: hex,\n  privateKey: hex,\n  createdAt: unixSeconds,\n  expiresAt: positiveSeconds,\n});\n\nexport const PermissionSchema = z.object({\n  keypairPublicKey: hex,\n  signerAddress: checksummedAddress,\n  delegatorAddress: checksummedAddress,\n  chainId,\n  signedContractAddresses: z.array(checksummedAddress).check(z.maxLength(MAX_CONTRACTS_PER_PERMIT)),\n  signature: hex,\n  startTimestamp: unixSeconds,\n  durationDays: positiveDays,\n});\n\nexport const PermissionListSchema = z.array(PermissionSchema);\n\nexport const ScopeIndexSchema = z.array(z.string());\n","import type { GenericStorage } from \"../types\";\nimport { swallow } from \"../utils/swallow\";\nimport { transportKeyPairStorageKey } from \"./storage-keys\";\nimport { StoredTransportKeyPairSchema } from \"./schemas\";\nimport type { TransportKeyPair, StoredTransportKeyPair } from \"./types\";\nimport type { ChecksummedAddress } from \"../schemas/primitives\";\nimport type { GenericLogger } from \"../worker/worker.types\";\nimport { nowSeconds } from \"./utils\";\n\ninterface TransportKeyPairVaultConfig {\n  generator: () => Promise<TransportKeyPair>;\n  storage: GenericStorage;\n  /** Transport key pair lifetime in seconds. Pre-validated by the caller. */\n  ttl: number;\n  /** SDK-wide logger for best-effort storage diagnostics. */\n  logger: GenericLogger;\n}\n\n/**\n * Identity-scoped, chain-independent vault for ML-KEM transport key pairs.\n *\n * One transport key pair per signer address; the key pair survives chain switches and\n * permit revocations. Storage entries are keyed only by the signer address.\n */\nexport class TransportKeyPairVault {\n  readonly #generator: () => Promise<TransportKeyPair>;\n  readonly #storage: GenericStorage;\n  readonly #ttl: number;\n  readonly #logger: GenericLogger;\n  readonly #pending = new Map<ChecksummedAddress, Promise<StoredTransportKeyPair>>();\n\n  constructor(config: TransportKeyPairVaultConfig) {\n    this.#generator = config.generator;\n    this.#storage = config.storage;\n    this.#ttl = config.ttl;\n    this.#logger = config.logger;\n  }\n\n  async readStored(signerAddress: ChecksummedAddress): Promise<StoredTransportKeyPair | null> {\n    const key = transportKeyPairStorageKey(signerAddress);\n    const raw = await this.#storage.get(key);\n    if (raw === null || raw === undefined) {\n      return null;\n    }\n    const parsed = StoredTransportKeyPairSchema.safeParse(raw);\n    if (!parsed.success) {\n      await swallow(\n        \"delete transport key pair entry\",\n        () => this.#storage.delete(key),\n        this.#logger,\n      );\n      return null;\n    }\n    const stored = parsed.data;\n    if (nowSeconds() >= stored.expiresAt) {\n      await swallow(\n        \"delete transport key pair entry\",\n        () => this.#storage.delete(key),\n        this.#logger,\n      );\n      return null;\n    }\n    return stored;\n  }\n\n  /**\n   * Return the cached transport key pair, generating and persisting a fresh one if absent or expired.\n   *\n   * @remarks Deduplicates concurrent calls — simultaneous requests share one generation promise.\n   */\n  async getOrCreate(signerAddress: ChecksummedAddress): Promise<StoredTransportKeyPair> {\n    const existing = this.#pending.get(signerAddress);\n    if (existing) {\n      return existing;\n    }\n\n    const promise = (async () => {\n      const cached = await this.readStored(signerAddress);\n      if (cached !== null) {\n        return cached;\n      }\n      const fresh = await this.#generator();\n      const createdAt = nowSeconds();\n      const stored: StoredTransportKeyPair = {\n        publicKey: fresh.publicKey,\n        privateKey: fresh.privateKey,\n        createdAt,\n        expiresAt: createdAt + this.#ttl,\n      };\n      const key = transportKeyPairStorageKey(signerAddress);\n      await swallow(\n        \"persist transport key pair\",\n        () => this.#storage.set(key, stored),\n        this.#logger,\n      );\n      return stored;\n    })().finally(() => {\n      this.#pending.delete(signerAddress);\n    });\n\n    this.#pending.set(signerAddress, promise);\n    return promise;\n  }\n\n  /** Delete the stored transport key pair for the given address. */\n  async clear(signerAddress: ChecksummedAddress): Promise<void> {\n    const key = transportKeyPairStorageKey(signerAddress);\n    await swallow(\"delete transport key pair entry\", () => this.#storage.delete(key), this.#logger);\n  }\n}\n","import type { Hex } from \"viem\";\nimport type { Permission } from \"./types\";\nimport type { ChecksummedAddress } from \"../schemas/primitives\";\nimport { MAX_CONTRACTS_PER_PERMIT, SECONDS_PER_DAY } from \"./utils\";\n\n/** Contracts in `requested` not covered by the signed payload of any permission. */\nexport function uncoveredContracts(\n  permissions: readonly Permission[],\n  requested: readonly ChecksummedAddress[],\n): ChecksummedAddress[] {\n  const covered = new Set(permissions.flatMap((p) => p.signedContractAddresses));\n  return requested.filter((addr) => !covered.has(addr));\n}\n\n/** Split a list of addresses into permit-sized chunks (≤ {@link MAX_CONTRACTS_PER_PERMIT}). */\nexport function chunkContracts(addresses: readonly ChecksummedAddress[]): ChecksummedAddress[][] {\n  const chunks: ChecksummedAddress[][] = [];\n  for (let i = 0; i < addresses.length; i += MAX_CONTRACTS_PER_PERMIT) {\n    chunks.push(addresses.slice(i, i + MAX_CONTRACTS_PER_PERMIT));\n  }\n  return chunks;\n}\n\n/** Drop permissions that are time-expired or bound to a stale keypair. */\nexport function pruneUnusable(\n  permissions: readonly Permission[],\n  keypairPublicKey: Hex,\n  nowSeconds: number,\n): Permission[] {\n  return permissions.filter(\n    (p) =>\n      p.keypairPublicKey === keypairPublicKey &&\n      nowSeconds < p.startTimestamp + p.durationDays * SECONDS_PER_DAY,\n  );\n}\n\n/** Drop every permission whose signed payload touches any address in `contracts`. */\nexport function withoutPermitsTouching(\n  permissions: readonly Permission[],\n  contracts: readonly ChecksummedAddress[],\n): Permission[] {\n  const removeSet = new Set(contracts);\n  return permissions.filter((p) => !p.signedContractAddresses.some((a) => removeSet.has(a)));\n}\n\n/** Deduplicate and sort the union of two pre-checksummed address lists. */\nexport function sortedUnion<T extends string>(a: readonly T[], b: readonly T[]): T[] {\n  return [...new Set([...a, ...b])].toSorted();\n}\n\n/**\n * Find the in-scope permit best suited to be widened with `uncovered`.\n *\n * Returns the permit whose `signedContractAddresses ∪ uncovered` still fits\n * the 10-contract cap and that has the largest overlap with `requested`. Ties\n * broken by most-recent `startTimestamp`. Returns `null` when none fits.\n */\nexport function findPermitToWiden(\n  permits: readonly Permission[],\n  uncovered: readonly ChecksummedAddress[],\n  requested: readonly ChecksummedAddress[],\n): Permission | null {\n  const requestedSet = new Set(requested);\n  const feasible = permits.filter(\n    (p) => new Set([...p.signedContractAddresses, ...uncovered]).size <= MAX_CONTRACTS_PER_PERMIT,\n  );\n  if (feasible.length === 0) {\n    return null;\n  }\n\n  function overlap(p: Permission) {\n    return p.signedContractAddresses.reduce((n, a) => n + (requestedSet.has(a) ? 1 : 0), 0);\n  }\n\n  const maxOverlap = Math.max(...feasible.map(overlap));\n  const topTier = feasible.filter((p) => overlap(p) === maxOverlap);\n  return topTier.reduce((a, b) => (b.startTimestamp > a.startTimestamp ? b : a));\n}\n","import type { Hex } from \"viem\";\nimport type { GenericStorage } from \"../types\";\nimport { swallow } from \"../utils/swallow\";\nimport { pruneUnusable, withoutPermitsTouching } from \"./permissions\";\nimport { PermissionListSchema, PermissionSchema, ScopeIndexSchema } from \"./schemas\";\nimport { permissionIndexKey, permissionScopeKey, type PermissionScope } from \"./storage-keys\";\nimport type { Permission } from \"./types\";\nimport type { ChecksummedAddress } from \"../schemas/primitives\";\nimport type { GenericLogger } from \"../worker/worker.types\";\n\nexport type { PermissionScope };\n\ninterface PermissionStoreConfig {\n  storage: GenericStorage;\n  /** SDK-wide logger for best-effort storage diagnostics. */\n  logger: GenericLogger;\n}\n\n/**\n * Chain-scoped, 1-to-many store of EIP-712 permits.\n *\n * Permits are grouped by `(signerAddress, chainId, delegatorAddress)` so that\n * direct (`delegator === signer`) and delegated permits never collide. An\n * auxiliary per-signer index lists every scope so `clearAllForSigner` can\n * cascade across chains and delegators without enumerating storage keys.\n */\nexport class PermissionStore {\n  readonly #storage: GenericStorage;\n  readonly #logger: GenericLogger;\n\n  constructor(config: PermissionStoreConfig) {\n    this.#storage = config.storage;\n    this.#logger = config.logger;\n  }\n\n  /** Read all stored permissions for the given scope. Returns `[]` if none. */\n  async list(scope: PermissionScope): Promise<Permission[]> {\n    const key = permissionScopeKey(scope);\n    const raw = await this.#storage.get(key);\n    if (raw === null || raw === undefined) {\n      return [];\n    }\n    const parsed = PermissionListSchema.safeParse(raw);\n    if (!parsed.success) {\n      await this.#deleteScope(key);\n      await this.#untrackScope(scope);\n      return [];\n    }\n    return parsed.data;\n  }\n\n  /**\n   * Return permissions still live and bound to the current keypair.\n   * Expired or stale-keypair permissions are pruned in one storage pass.\n   */\n  async listUsableAndPrune(scope: PermissionScope, keypairPublicKey: Hex): Promise<Permission[]> {\n    const all = await this.list(scope);\n    const usable = pruneUnusable(all, keypairPublicKey, Math.floor(Date.now() / 1000));\n\n    if (usable.length !== all.length) {\n      const key = permissionScopeKey(scope);\n      if (usable.length === 0) {\n        await this.#deleteScope(key);\n        await this.#untrackScope(scope);\n      } else {\n        await swallow(\"update permit entry\", () => this.#storage.set(key, usable), this.#logger);\n      }\n    }\n    return usable;\n  }\n\n  /**\n   * Append signed permits to the given scope. Every permission is run through\n   * `PermissionSchema` so the schema is the single normalization point for both\n   * read and write paths. Signed payloads themselves are immutable and never\n   * edited — only addresses and types are normalized.\n   */\n  async append(scope: PermissionScope, permissions: readonly Permission[]): Promise<void> {\n    if (permissions.length === 0) {\n      return;\n    }\n    const validated = permissions.map((p) => PermissionSchema.parse(p));\n    const existing = await this.list(scope);\n    await this.#storage.set(permissionScopeKey(scope), [...existing, ...validated]);\n    await this.#trackScope(scope);\n  }\n\n  /**\n   * Replace the entry identified by `oldSignature` with `newPermission`.\n   *\n   * Atomic relative to the storage backend's `set`: the old entry survives in\n   * storage until the new list is written. If `oldSignature` is not found\n   * (raced eviction or concurrent prune), `newPermission` is still persisted —\n   * equivalent to {@link append}.\n   */\n  async replace(\n    scope: PermissionScope,\n    oldSignature: Hex,\n    newPermission: Permission,\n  ): Promise<void> {\n    const validated = PermissionSchema.parse(newPermission);\n    const existing = await this.list(scope);\n    const filtered = existing.filter((p) => p.signature !== oldSignature);\n    await this.#storage.set(permissionScopeKey(scope), [...filtered, validated]);\n    await this.#trackScope(scope);\n  }\n\n  /**\n   * Delete every permit whose signed payload touches any listed contract.\n   *\n   * The store never edits `signedContractAddresses`, because that field is part\n   * of the EIP-712 payload covered by `signature`.\n   */\n  async deletePermitsTouching(\n    scope: PermissionScope,\n    contractsToRemove: ChecksummedAddress[],\n  ): Promise<void> {\n    const existing = await this.list(scope);\n    if (existing.length === 0) {\n      return;\n    }\n    const key = permissionScopeKey(scope);\n    const next = withoutPermitsTouching(existing, contractsToRemove);\n    if (next.length === 0) {\n      await this.#deleteScope(key);\n      await this.#untrackScope(scope);\n    } else {\n      await this.#storage.set(key, next);\n    }\n  }\n\n  /**\n   * Delete every permission for the given signer across all chains and delegators.\n   * Uses the per-signer scope index to cascade without enumerating all storage keys.\n   */\n  async clearAllForSigner(signerAddress: ChecksummedAddress): Promise<void> {\n    const indexKey = permissionIndexKey(signerAddress);\n    const scopeKeys = await this.#readIndex(indexKey);\n    await Promise.all(scopeKeys.map((k) => this.#deleteScope(k)));\n    await swallow(\"delete permit index\", () => this.#storage.delete(indexKey), this.#logger);\n  }\n\n  async #readIndex(indexKey: string): Promise<string[]> {\n    const raw = await this.#storage.get(indexKey);\n    if (raw === null || raw === undefined) {\n      return [];\n    }\n    const parsed = ScopeIndexSchema.safeParse(raw);\n    if (!parsed.success) {\n      await swallow(\"delete permit index\", () => this.#storage.delete(indexKey), this.#logger);\n      return [];\n    }\n    return parsed.data;\n  }\n\n  async #trackScope(scope: PermissionScope): Promise<void> {\n    const indexKey = permissionIndexKey(scope.signerAddress);\n    const scopeKey = permissionScopeKey(scope);\n    const list = await this.#readIndex(indexKey);\n    if (list.includes(scopeKey)) {\n      return;\n    }\n    await this.#storage.set(indexKey, [...list, scopeKey]);\n  }\n\n  async #untrackScope(scope: PermissionScope): Promise<void> {\n    const indexKey = permissionIndexKey(scope.signerAddress);\n    const scopeKey = permissionScopeKey(scope);\n    const list = await this.#readIndex(indexKey);\n    const next = list.filter((entry) => entry !== scopeKey);\n    if (next.length === list.length) {\n      return;\n    }\n    if (next.length === 0) {\n      await swallow(\"delete permit index\", () => this.#storage.delete(indexKey), this.#logger);\n    } else {\n      await swallow(\"update permit index\", () => this.#storage.set(indexKey, next), this.#logger);\n    }\n  }\n\n  async #deleteScope(scopeKey: string): Promise<void> {\n    await swallow(\"delete permit entry\", () => this.#storage.delete(scopeKey), this.#logger);\n  }\n}\n","import type { Address } from \"viem\";\nimport type { GenericSigner, GenericStorage } from \"../types\";\nimport type { RelayerDispatcher } from \"../relayer/relayer-dispatcher\";\nimport { ZamaError } from \"../errors/base\";\nimport { wrapSigningError } from \"../errors/signing\";\nimport { swallow } from \"../utils/swallow\";\nimport { TransportKeyPairVault } from \"./keypair-vault\";\nimport { chunkContracts, findPermitToWiden, sortedUnion, uncoveredContracts } from \"./permissions\";\nimport { PermissionStore } from \"./permission-store\";\nimport type { PermissionScope } from \"./storage-keys\";\nimport type {\n  StoredTransportKeyPairWithPermits,\n  Permission,\n  StoredTransportKeyPair,\n} from \"./types\";\nimport type { ChecksummedAddress } from \"../schemas/primitives\";\nimport { checksum } from \"../schemas/primitives\";\nimport type { GenericLogger } from \"../worker/worker.types\";\nimport { normalizeAddresses, nowSeconds, SECONDS_PER_DAY } from \"./utils\";\n\nexport const DEFAULT_TRANSPORT_KEY_PAIR_TTL_SECONDS = 30 * SECONDS_PER_DAY;\nexport const DEFAULT_PERMIT_DURATION_DAYS = 30;\n\n/** Configuration for {@link CredentialService}. TTLs are pre-validated by the caller. */\nexport interface CredentialServiceConfig {\n  relayer: RelayerDispatcher;\n  signer: GenericSigner;\n  /** Transport key pair lifetime in seconds. Pre-validated. */\n  transportKeyPairTTL: number;\n  /** Permit lifetime in days. Pre-validated. */\n  permitTTL: number;\n  /** Backing storage for transport key pairs (and permits if `permitStorage` is omitted). */\n  storage: GenericStorage;\n  /** Optional dedicated storage for permits; defaults to `storage`. */\n  permitStorage?: GenericStorage;\n  /** SDK-wide logger for credential-path diagnostics. */\n  logger: GenericLogger;\n}\n\n/**\n * Single facade coordinating the keypair vault and the permission store.\n *\n * `CredentialService` is the only credentials object held by `ZamaSDK`. It accepts identity\n * transitions via `handleWalletAccountChange`.\n */\nexport class CredentialService {\n  readonly #vault: TransportKeyPairVault;\n  readonly #store: PermissionStore;\n  readonly #relayer: RelayerDispatcher;\n  readonly #signer: GenericSigner;\n  readonly #permitTTL: number;\n  readonly #logger: GenericLogger;\n\n  constructor(config: CredentialServiceConfig) {\n    this.#vault = new TransportKeyPairVault({\n      generator: () => config.relayer.generateTransportKeyPair(),\n      storage: config.storage,\n      ttl: config.transportKeyPairTTL,\n      logger: config.logger,\n    });\n    this.#store = new PermissionStore({\n      storage: config.permitStorage ?? config.storage,\n      logger: config.logger,\n    });\n    this.#relayer = config.relayer;\n    this.#signer = config.signer;\n    this.#permitTTL = config.permitTTL;\n    this.#logger = config.logger;\n  }\n\n  /**\n   * Resolve a keypair and permissions covering `contracts`, minimizing wallet\n   * prompts by reusing or widening existing permits where possible. Empty\n   * `contracts` warms the keypair without prompting.\n   *\n   * @returns The resolved keypair and permits covering the requested contracts.\n   * @throws if the user rejects a wallet signature prompt. {@link SigningRejectedError}\n   * @throws if signing fails for any other reason. {@link SigningFailedError}\n   */\n  async grantPermit(\n    contracts: readonly Address[],\n    delegator?: Address,\n  ): Promise<StoredTransportKeyPairWithPermits> {\n    const account = this.#signer.requireWalletAccount(\"grantPermit\");\n    const signerAddress = checksum(account.address);\n    const requested = normalizeAddresses(contracts);\n    const keypair = await this.#vault.getOrCreate(signerAddress);\n    if (requested.length === 0) {\n      return { keypair, permits: [] };\n    }\n\n    const chainId = account.chainId;\n    const scope: PermissionScope = {\n      signerAddress,\n      chainId,\n      delegatorAddress: delegator ? checksum(delegator) : signerAddress,\n    };\n    const permits = await this.#store.listUsableAndPrune(scope, keypair.publicKey);\n\n    const uncovered = uncoveredContracts(permits, requested);\n    if (uncovered.length > 0) {\n      const candidate = findPermitToWiden(permits, uncovered, requested);\n      if (candidate !== null) {\n        const widenedSet = sortedUnion(candidate.signedContractAddresses, uncovered);\n        const widened = await this.#signPermit({\n          chunk: widenedSet,\n          keypair,\n          scope,\n        });\n        await swallow(\n          \"replace permit\",\n          () => this.#store.replace(scope, candidate.signature, widened),\n          this.#logger,\n        );\n        permits[permits.indexOf(candidate)] = widened;\n      } else {\n        for (const chunk of chunkContracts(uncovered)) {\n          const permission = await this.#signPermit({ chunk, keypair, scope });\n          permits.push(permission);\n          await swallow(\n            \"persist permit\",\n            () => this.#store.append(scope, [permission]),\n            this.#logger,\n          );\n        }\n      }\n    }\n\n    const requestedSet = new Set(requested);\n    return {\n      keypair,\n      permits: permits.filter((p) => p.signedContractAddresses.some((a) => requestedSet.has(a))),\n    };\n  }\n\n  /**\n   * Pure store lookup: are stored permits sufficient to cover `contracts`? No wallet prompt.\n   *\n   * @returns `true` if cached permits cover all requested contracts (vacuously\n   *   true for an empty list); `false` if no keypair exists or coverage is\n   *   incomplete.\n   */\n  async hasPermit(contracts: readonly Address[], delegator?: Address): Promise<boolean> {\n    if (contracts.length === 0) {\n      return true;\n    }\n    const account = this.#signer.walletAccount.getSnapshot();\n    if (!account) {\n      return false;\n    }\n    const signerAddress = checksum(account.address);\n    const keypair = await this.#vault.readStored(signerAddress);\n    if (keypair === null) {\n      return false;\n    }\n    const chainId = account.chainId;\n    const delegatorAddress = delegator ? checksum(delegator) : signerAddress;\n    const scope: PermissionScope = { signerAddress, chainId, delegatorAddress };\n    const permits = await this.#store.listUsableAndPrune(scope, keypair.publicKey);\n    return uncoveredContracts(permits, normalizeAddresses(contracts)).length === 0;\n  }\n\n  /**\n   * Wipe FHE permits for the current signer.\n   *\n   * - With no argument: every permit referencing this signer is removed across\n   *   all chains and delegators. The keypair survives — use\n   *   {@link clearCredentials} to also wipe the keypair.\n   * - With a contract list: every signed permit in the direct-decrypt scope\n   *   (current chain) whose immutable payload touches any listed address is\n   *   removed. Delegated permits are not touched in this mode.\n   *\n   * @throws if reading the signer address fails. {@link SigningFailedError}\n   */\n  async revokePermits(contracts?: readonly Address[]): Promise<void> {\n    const account = this.#signer.requireWalletAccount(\"revokePermits\");\n    const signerAddress = checksum(account.address);\n    if (contracts === undefined) {\n      await this.#store.clearAllForSigner(signerAddress);\n      return;\n    }\n    const normalized = normalizeAddresses(contracts);\n    if (normalized.length === 0) {\n      return;\n    }\n    const chainId = account.chainId;\n    await this.#store.deletePermitsTouching(\n      { signerAddress, chainId, delegatorAddress: signerAddress },\n      normalized,\n    );\n  }\n\n  /**\n   * Wipe the keypair for the current signer and cascade-delete every\n   * permission referencing it across all chains and delegators.\n   *\n   * @throws if reading the signer address fails. {@link SigningFailedError}\n   */\n  async clearCredentials(): Promise<void> {\n    const account = this.#signer.requireWalletAccount(\"clearCredentials\");\n    const signerAddress = checksum(account.address);\n    await this.#vault.clear(signerAddress);\n    await this.#store.clearAllForSigner(signerAddress);\n  }\n\n  /**\n   * Warm the signer transport key pair cache for a known address.\n   *\n   * Best-effort prefetch primitive: correctness still comes from `grantPermit`,\n   * which lazily creates the transport key pair when needed. Errors (storage failure,\n   * relayer 4xx, missing Worker in SSR) are **not** swallowed here — the caller\n   * decides whether to log, ignore, or surface them.\n   */\n  async warmTransportKeyPair(address: Address): Promise<void> {\n    await this.#vault.getOrCreate(checksum(address));\n  }\n\n  /**\n   * Apply a wallet account transition.\n   *\n   * Address change clears persisted credentials for the previous account.\n   * Chain-only changes keep credentials intact because permits are chain-scoped\n   * already and stale decrypt plaintext is cleared by `ZamaSDK`.\n   */\n  async handleWalletAccountChange(\n    prev?: { address: Address },\n    next?: { address: Address },\n  ): Promise<void> {\n    const prevAddr = prev ? checksum(prev.address) : undefined;\n    const nextAddr = next ? checksum(next.address) : undefined;\n    if (prevAddr === nextAddr) {\n      return;\n    }\n    if (prevAddr) {\n      await this.#vault.clear(prevAddr);\n      await this.#store.clearAllForSigner(prevAddr);\n    }\n  }\n\n  async #signPermit(input: {\n    chunk: ChecksummedAddress[];\n    keypair: StoredTransportKeyPair;\n    scope: PermissionScope;\n  }): Promise<Permission> {\n    const { chunk, keypair, scope } = input;\n    const startTimestamp = nowSeconds();\n    const isDelegated = scope.delegatorAddress !== scope.signerAddress;\n\n    try {\n      const eip712 = isDelegated\n        ? await this.#relayer.createDelegatedUserDecryptEIP712(\n            keypair.publicKey,\n            chunk,\n            scope.delegatorAddress,\n            startTimestamp,\n            this.#permitTTL,\n          )\n        : await this.#relayer.createEIP712(\n            keypair.publicKey,\n            chunk,\n            startTimestamp,\n            this.#permitTTL,\n          );\n\n      const signature = await this.#signer.signTypedData(eip712);\n\n      return {\n        keypairPublicKey: keypair.publicKey,\n        signerAddress: scope.signerAddress,\n        delegatorAddress: scope.delegatorAddress,\n        chainId: scope.chainId,\n        signedContractAddresses: chunk,\n        signature,\n        startTimestamp,\n        durationDays: this.#permitTTL,\n      };\n    } catch (error) {\n      if (error instanceof ZamaError) {\n        throw error;\n      }\n      throw wrapSigningError(error, \"Credential signing failed\");\n    }\n  }\n}\n","import type { GenericLogger } from \"../worker/worker.types\";\n\n/**\n * Internal logger with a consistent, always-present shape.\n *\n * The consumer supplies an optional {@link GenericLogger} via configuration;\n * it is wrapped once into a `LoggerService` that is threaded through the SDK.\n * Internal code therefore calls `logger.warn(...)` directly — no optional\n * chaining, no per-call `undefined` checks — and a single place (this class)\n * owns the \"silent by default\" behavior: when no logger was supplied, every\n * level is a no-op.\n *\n * Every message is prefixed with `[zama-sdk]` here, so call sites pass only\n * their own message (and optional component tag) without repeating the prefix.\n *\n * `LoggerService` itself satisfies `GenericLogger`, so it can be passed\n * anywhere a logger is expected (e.g. the worker client).\n */\nexport class LoggerService implements GenericLogger {\n  readonly #logger: GenericLogger | undefined;\n  readonly #prefix = \"[zama-sdk]\";\n\n  constructor(logger?: GenericLogger) {\n    this.#logger = logger;\n  }\n\n  error(message: string, data?: Record<string, unknown>): void {\n    this.#logger?.error(`${this.#prefix} ${message}`, data);\n  }\n\n  warn(message: string, data?: Record<string, unknown>): void {\n    this.#logger?.warn(`${this.#prefix} ${message}`, data);\n  }\n\n  info(message: string, data?: Record<string, unknown>): void {\n    this.#logger?.info(`${this.#prefix} ${message}`, data);\n  }\n\n  debug(message: string, data?: Record<string, unknown>): void {\n    this.#logger?.debug(`${this.#prefix} ${message}`, data);\n  }\n}\n","import type { FheChain } from \"../chains\";\nimport { ConfigurationError } from \"../errors\";\nimport { IndexedDBStorage } from \"../storage/indexeddb-storage\";\nimport { MemoryStorage } from \"../storage/memory-storage\";\nimport type { GenericStorage } from \"../types\";\nimport type { RelayerConfig } from \"./types\";\n\n// ── Storage defaults ─────────────────────────────────────────────────────────\n\nfunction getDefaultStorage(): GenericStorage {\n  return typeof window !== \"undefined\"\n    ? new IndexedDBStorage(\"CredentialStore\")\n    : new MemoryStorage();\n}\n\nexport function resolveStorage(\n  storage: GenericStorage | undefined = getDefaultStorage(),\n  permitStorage: GenericStorage | undefined = storage,\n): { storage: GenericStorage; permitStorage: GenericStorage } {\n  return { storage, permitStorage };\n}\n\n// ── Chain relayer resolution ────────────────────────────────────────────────\n\nexport interface ResolvedChainRelayer {\n  chain: FheChain;\n  relayer: RelayerConfig;\n}\n\nexport function resolveChainRelayers(\n  chains: readonly FheChain[],\n  relayers: Readonly<Record<number, RelayerConfig>>,\n): Map<number, ResolvedChainRelayer> {\n  const chainMap = new Map(chains.map((c) => [c.id, c]));\n  if (chainMap.size !== chains.length) {\n    const ids = chains.map((c) => c.id);\n    const dupes = [...new Set(ids.filter((id, i) => ids.indexOf(id) !== i))];\n    throw new ConfigurationError(\n      `Duplicate chain id(s) [${dupes.join(\", \")}] in the chains array. ` +\n        `Each chain id must appear only once. Note: hardhat and anvil are aliases (both use 31337).`,\n    );\n  }\n  const relayerMap = new Map(Object.entries(relayers));\n  const result = new Map<number, ResolvedChainRelayer>();\n\n  for (const id of chainMap.keys()) {\n    const chainConfig = chainMap.get(id);\n    const relayerConfig = relayerMap.get(String(id));\n\n    if (!relayerConfig) {\n      throw new ConfigurationError(\n        `Chain ${id} has no relayer configured. ` +\n          `Add a relayer entry: relayers: { [${id}]: web() }`,\n      );\n    }\n\n    if (!chainConfig) {\n      throw new ConfigurationError(\n        `Chain ${id} has a relayer configured but no entry in the chains array. ` +\n          `Add the chain config to the chains array.`,\n      );\n    }\n\n    result.set(id, {\n      chain: chainConfig,\n      relayer: relayerConfig,\n    });\n  }\n\n  const relayerIdSet = new Set(Object.keys(relayers).map(Number));\n  const orphaned = new Set([...relayerIdSet].filter((id) => !chainMap.has(id)));\n  if (orphaned.size > 0) {\n    throw new ConfigurationError(\n      `Relayer entries for chain(s) [${[...orphaned].join(\", \")}] have no matching entry ` +\n        `in the chains array. Remove them or add the corresponding chain config.`,\n    );\n  }\n\n  return result;\n}\n","import type {\n  InputProofBytesType,\n  KmsDelegatedUserDecryptEIP712Type,\n  ZKProofLike,\n} from \"@zama-fhe/relayer-sdk/bundle\";\nimport type { Address, Hex } from \"viem\";\nimport type { FheChain } from \"../chains/types\";\nimport type { RelayerConfig } from \"../config/types\";\nimport { resolveChainRelayers } from \"../config/resolve\";\nimport type { TransportKeyPair } from \"../credentials/types\";\nimport { ConfigurationError } from \"../errors\";\nimport { assertNonNullable, toError } from \"../utils\";\nimport type { GenericLogger } from \"../worker/worker.types\";\nimport type { RelayerSDK } from \"./relayer-sdk\";\nimport type {\n  ClearValue,\n  DelegatedUserDecryptParams,\n  EIP712TypedData,\n  EncryptParams,\n  EncryptResult,\n  EncryptedValue,\n  FheEncryptionKey,\n  PublicDecryptResult,\n  PublicParamsData,\n  UserDecryptParams,\n} from \"./relayer-sdk.types\";\n\n/** Anything with a synchronous `terminate()` method (workers, pools). */\nexport interface WorkerLike {\n  terminate(): void;\n}\n\n/**\n * Owns chain management (chains / activeChain / switchChain) and delegates\n * every {@link RelayerSDK} operation to the relayer for the currently active\n * chain.\n *\n * Groups chains by relayer config reference identity, calls `createWorker`\n * once per group with all chain configs, then calls `createRelayer`\n * per chain with the shared worker.\n *\n * Workers/pools are held separately from relayers so the dispatcher can\n * terminate them directly — relayers never own worker lifecycle.\n */\nexport class RelayerDispatcher implements RelayerSDK, Disposable {\n  readonly #chains: Map<number, FheChain>;\n  readonly #relayers: Map<number, RelayerSDK>;\n  readonly #workers: readonly WorkerLike[];\n  #chainId: number;\n\n  constructor(\n    chains: readonly [FheChain, ...FheChain[]],\n    configs: Readonly<Record<number, RelayerConfig>>,\n    logger: GenericLogger,\n  ) {\n    if (chains.length === 0) {\n      throw new ConfigurationError(\"At least one chain is required.\");\n    }\n    this.#chains = new Map(chains.map((c) => [c.id, c]));\n    this.#chainId = chains[0].id;\n\n    const chainRelayers = resolveChainRelayers(chains, configs);\n\n    // Group chains by relayer config reference — same object = same group = shared worker.\n    const groups = new Map<RelayerConfig, Array<[number, FheChain]>>();\n    for (const [chainId, config] of chainRelayers) {\n      const key = config.relayer;\n      let group = groups.get(key);\n      if (!group) {\n        group = [];\n        groups.set(key, group);\n      }\n      group.push([chainId, config.chain]);\n    }\n\n    // For each group: create shared worker once, then create per-chain relayers.\n    const relayers = new Map<number, RelayerSDK>();\n    const workers: WorkerLike[] = [];\n    try {\n      for (const [relayerCfg, groupChains] of groups) {\n        const allChainConfigs = groupChains.map(([, chain]) => chain);\n        const worker = relayerCfg.createWorker?.(allChainConfigs, logger);\n        if (worker) {\n          workers.push(worker);\n        }\n        for (const [chainId, chain] of groupChains) {\n          relayers.set(chainId, relayerCfg.createRelayer(chain, worker, logger));\n        }\n      }\n    } catch (error) {\n      for (const w of workers) {\n        try {\n          w.terminate();\n        } catch {\n          /* best-effort cleanup */\n        }\n      }\n      throw error;\n    }\n\n    this.#relayers = relayers;\n    this.#workers = workers;\n  }\n\n  get chains(): readonly FheChain[] {\n    return [...this.#chains.values()];\n  }\n\n  get chain(): FheChain {\n    const chain = this.#chains.get(this.#chainId);\n    assertNonNullable(chain, \"RelayerDispatcher: chain\");\n    return chain;\n  }\n\n  switchChain(chainId: number): void {\n    if (!this.#chains.has(chainId)) {\n      throw new ConfigurationError(\n        `No relayer configured for chain ${chainId}. Add it to the chains array.`,\n      );\n    }\n    this.#chainId = chainId;\n  }\n\n  get #active(): RelayerSDK {\n    const relayer = this.#relayers.get(this.#chainId);\n    assertNonNullable(relayer, \"RelayerDispatcher: relayer\");\n    return relayer;\n  }\n\n  generateTransportKeyPair(): Promise<TransportKeyPair> {\n    return this.#active.generateTransportKeyPair();\n  }\n\n  createEIP712(\n    publicKey: Hex,\n    contractAddresses: Address[],\n    startTimestamp: number,\n    durationDays?: number,\n  ): Promise<EIP712TypedData> {\n    return this.#active.createEIP712(publicKey, contractAddresses, startTimestamp, durationDays);\n  }\n\n  encrypt(params: EncryptParams): Promise<EncryptResult> {\n    return this.#active.encrypt(params);\n  }\n\n  userDecrypt(params: UserDecryptParams): Promise<Readonly<Record<EncryptedValue, ClearValue>>> {\n    return this.#active.userDecrypt(params);\n  }\n\n  publicDecrypt(encryptedValues: EncryptedValue[]): Promise<PublicDecryptResult> {\n    return this.#active.publicDecrypt(encryptedValues);\n  }\n\n  createDelegatedUserDecryptEIP712(\n    publicKey: Hex,\n    contractAddresses: Address[],\n    delegatorAddress: Address,\n    startTimestamp: number,\n    durationDays?: number,\n  ): Promise<KmsDelegatedUserDecryptEIP712Type> {\n    return this.#active.createDelegatedUserDecryptEIP712(\n      publicKey,\n      contractAddresses,\n      delegatorAddress,\n      startTimestamp,\n      durationDays,\n    );\n  }\n\n  delegatedUserDecrypt(\n    params: DelegatedUserDecryptParams,\n  ): Promise<Readonly<Record<EncryptedValue, ClearValue>>> {\n    return this.#active.delegatedUserDecrypt(params);\n  }\n\n  requestZKProofVerification(zkProof: ZKProofLike): Promise<InputProofBytesType> {\n    return this.#active.requestZKProofVerification(zkProof);\n  }\n\n  fetchFheEncryptionKeyBytes(): Promise<FheEncryptionKey | null> {\n    return this.#active.fetchFheEncryptionKeyBytes();\n  }\n\n  getPublicParams(bits: number): Promise<PublicParamsData | null> {\n    return this.#active.getPublicParams(bits);\n  }\n\n  getAclAddress(): Promise<Address> {\n    return this.#active.getAclAddress();\n  }\n\n  terminate(): void {\n    const errors: Error[] = [];\n\n    // Clean up relayer-owned caches (no worker termination).\n    for (const r of new Set(this.#relayers.values())) {\n      try {\n        r.terminate();\n      } catch (e) {\n        errors.push(toError(e));\n      }\n    }\n\n    // Terminate the actual workers/pools (deduplicated).\n    for (const w of new Set(this.#workers)) {\n      try {\n        w.terminate();\n      } catch (e) {\n        errors.push(toError(e));\n      }\n    }\n\n    if (errors.length > 0) {\n      throw new AggregateError(errors, \"Failed to terminate relayer resources\");\n    }\n  }\n\n  [Symbol.dispose](): void {\n    this.terminate();\n  }\n}\n","import { type Address, getAddress, zeroAddress } from \"viem\";\nimport { z } from \"zod/mini\";\nimport type { TokenWrapperPairWithMetadata, PaginatedResult, TokenWrapperPair } from \"./contracts\";\nimport {\n  decimalsContract,\n  erc20TotalSupplyContract,\n  getConfidentialTokenAddressContract,\n  getTokenAddressContract,\n  getTokenPairContract,\n  getTokenPairsContract,\n  getTokenPairsLengthContract,\n  getTokenPairsSliceContract,\n  isConfidentialTokenValidContract,\n  nameContract,\n  symbolContract,\n} from \"./contracts\";\nimport { ConfigurationError } from \"./errors/relayer\";\nimport { mainnet, sepolia, hoodi, ingenTestnet, bscTestnet } from \"./chains\";\nimport { checksummedAddress, nonNegativeSeconds } from \"./schemas/primitives\";\nimport type { GenericProvider } from \"./types/provider\";\nimport { parseConfiguration } from \"./validation\";\n\n/**\n * Default wrappers registry addresses for known chains.\n * Only includes chains where a registry is deployed (excludes Hardhat).\n */\nexport const DefaultRegistryAddresses: Record<number, Address> = {\n  [mainnet.id]: mainnet.registryAddress,\n  [sepolia.id]: sepolia.registryAddress,\n  [hoodi.id]: hoodi.registryAddress,\n  [ingenTestnet.id]: ingenTestnet.registryAddress,\n  [bscTestnet.id]: bscTestnet.registryAddress,\n};\n\n/** Default registry TTL in seconds (24 hours). */\nexport const DEFAULT_REGISTRY_TTL_SECONDS = 86_400;\n\n/** Per-chain wrappers-registry address overrides. */\nexport const RegistryAddressesSchema = z.record(\n  z.string().check(z.regex(/^\\d+$/, \"expected numeric chain id key\")),\n  checksummedAddress,\n);\n\n/** TTL (seconds) for cached registry results. `0` means entries expire immediately. */\nexport const RegistryTTLSchema = nonNegativeSeconds;\n\n/** Default page size for {@link WrappersRegistry.listPairs}. */\nconst DEFAULT_PAGE_SIZE = 100;\n\n/** Configuration for {@link WrappersRegistry}. */\nexport interface WrappersRegistryConfig {\n  /** Read-only chain provider used for every registry lookup. */\n  provider: GenericProvider;\n  /**\n   * Per-chain registry address overrides, merged on top of\n   * {@link DefaultRegistryAddresses}. Use this to supply a registry\n   * address for custom or local chains (e.g. Hardhat).\n   *\n   * @example\n   * ```ts\n   * new WrappersRegistry({\n   *   provider,\n   *   registryAddresses: { [31337]: \"0xYourHardhatRegistry\" },\n   * });\n   * ```\n   */\n  registryAddresses?: Record<number, Address>;\n  /**\n   * How long cached registry results remain valid, in seconds.\n   * Default: `86400` (24 hours).\n   */\n  registryTTL?: number;\n}\n\n/** Options for {@link WrappersRegistry.listPairs}. */\nexport interface ListPairsOptions {\n  /** Page number (1-indexed). Default: `1`. */\n  page?: number;\n  /** Number of items per page. Default: `100`. */\n  pageSize?: number;\n  /**\n   * When `true`, fetches on-chain metadata (name, symbol, decimals) for both\n   * the ERC-20 and confidential token, plus totalSupply for the ERC-20.\n   * Default: `false`.\n   */\n  metadata?: boolean;\n}\n\n/** Shorter TTL for negative lookups (5 minutes) so newly registered tokens are discoverable quickly. */\nconst NEGATIVE_CACHE_TTL_MS = 5 * 60 * 1000;\n\n/** Cache entry with expiry timestamp. */\ninterface CacheEntry<T> {\n  data: T;\n  expiresAt: number;\n}\n\n/**\n * High-level interface for the on-chain token wrappers registry.\n *\n * Uses the configured {@link GenericProvider} to resolve the correct registry\n * contract address for the current chain and exposes typed read helpers for\n * every registry query. Results are cached in memory with a configurable TTL\n * (default 24 hours).\n *\n * @example\n * ```ts\n * const registry = new WrappersRegistry({ provider });\n *\n * // Paginated listing\n * const page1 = await registry.listPairs({ page: 1, pageSize: 20 });\n *\n * // Structured lookups\n * const result = await registry.getConfidentialToken(erc20Address);\n * if (result) console.log(result.confidentialTokenAddress);\n *\n * // Force refresh\n * registry.refresh();\n * ```\n */\nexport class WrappersRegistry {\n  readonly provider: GenericProvider;\n  readonly #addresses: Record<number, Address>;\n  readonly #ttlMs: number;\n  readonly #cache = new Map<string, CacheEntry<unknown>>();\n\n  constructor(config: WrappersRegistryConfig) {\n    this.provider = config.provider;\n    this.#addresses = Object.assign(\n      {},\n      DefaultRegistryAddresses,\n      parseConfiguration(z.optional(RegistryAddressesSchema), config.registryAddresses),\n    );\n    this.#ttlMs =\n      parseConfiguration(RegistryTTLSchema, config.registryTTL ?? DEFAULT_REGISTRY_TTL_SECONDS) *\n      1000;\n  }\n\n  /**\n   * Synchronous lookup of the registry address for a given chain ID.\n   * Returns `undefined` if no address is configured for that chain.\n   */\n  getAddress(chainId: number): Address | undefined {\n    return this.#addresses[chainId];\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cache helpers\n  // ---------------------------------------------------------------------------\n\n  #getCached<T>(key: string): T | undefined {\n    const entry = this.#cache.get(key);\n    if (!entry) {\n      return undefined;\n    }\n    if (Date.now() >= entry.expiresAt) {\n      this.#cache.delete(key);\n      return undefined;\n    }\n    return entry.data as T;\n  }\n\n  #setCached<T>(key: string, data: T, ttlMs = this.#ttlMs): T {\n    this.#cache.set(key, {\n      data,\n      expiresAt: Date.now() + ttlMs,\n    });\n    return data;\n  }\n\n  /**\n   * Force-invalidate the in-memory cache. The next call to any read method\n   * will fetch fresh data from the chain.\n   */\n  refresh(): void {\n    this.#cache.clear();\n  }\n\n  /**\n   * The cache TTL in milliseconds.\n   * Exposed so query option factories can set a matching `staleTime`.\n   */\n  get ttlMs(): number {\n    return this.#ttlMs;\n  }\n\n  // ---------------------------------------------------------------------------\n  // Registry address resolution\n  // ---------------------------------------------------------------------------\n\n  /**\n   * Resolve the registry contract address for the current chain.\n   *\n   * Priority: `registryAddresses[chainId]` \\> built-in default.\n   *\n   * @returns The registry contract address for the connected chain.\n   * @throws if no address is configured for the chain. {@link ConfigurationError}\n   */\n  async getRegistryAddress(): Promise<Address> {\n    const chainId = await this.provider.getChainId();\n    const address = this.#addresses[chainId];\n\n    if (!address) {\n      throw new ConfigurationError(\n        `No wrappers registry address configured for chain ${chainId}.\\n` +\n          `Pass a registryAddresses entry for this chain.`,\n      );\n    }\n\n    return getAddress(address);\n  }\n\n  // ---------------------------------------------------------------------------\n  // Paginated listing\n  // ---------------------------------------------------------------------------\n\n  /**\n   * List token wrapper pairs with page-based pagination.\n   *\n   * Internally maps to `getTokenConfidentialTokenPairsSlice` on-chain.\n   *\n   * @param options - Pagination and enrichment options.\n   * @returns A {@link PaginatedResult} of pairs.\n   *\n   * @example\n   * ```ts\n   * const result = await registry.listPairs({ page: 1, pageSize: 20 });\n   * console.log(`${result.total} pairs, showing page ${result.page}`);\n   *\n   * // With on-chain metadata\n   * const withMeta = await registry.listPairs({ metadata: true, pageSize: 10 });\n   * for (const pair of withMeta.items) {\n   *   console.log(pair.underlying.symbol, \"→\", pair.confidential.symbol);\n   * }\n   * ```\n   */\n  async listPairs(\n    options: ListPairsOptions & { metadata: true },\n  ): Promise<PaginatedResult<TokenWrapperPairWithMetadata>>;\n  async listPairs(options?: ListPairsOptions): Promise<PaginatedResult<TokenWrapperPair>>;\n  async listPairs(\n    options: ListPairsOptions = {},\n  ): Promise<PaginatedResult<TokenWrapperPair | TokenWrapperPairWithMetadata>> {\n    const page = options.page ?? 1;\n    const pageSize = options.pageSize ?? DEFAULT_PAGE_SIZE;\n    const metadata = options.metadata ?? false;\n\n    if (page < 1) {\n      throw new ConfigurationError(`page must be >= 1, got ${page}`);\n    }\n    if (pageSize < 1) {\n      throw new ConfigurationError(`pageSize must be >= 1, got ${pageSize}`);\n    }\n\n    const registry = await this.getRegistryAddress();\n\n    // Fetch total (cached)\n    const totalCacheKey = `total:${registry}`;\n    let total = this.#getCached<number>(totalCacheKey);\n    if (total === undefined) {\n      const raw = await this.provider.readContract(getTokenPairsLengthContract(registry));\n      total = this.#setCached(totalCacheKey, Number(raw));\n    }\n\n    // Compute slice indices, clamping toIndex to total\n    const fromIndex = BigInt((page - 1) * pageSize);\n    const clampedToIndex =\n      fromIndex + BigInt(pageSize) > BigInt(total) ? BigInt(total) : fromIndex + BigInt(pageSize);\n\n    // Page beyond total — return empty\n    if (fromIndex >= BigInt(total)) {\n      return { items: [], total, page, pageSize };\n    }\n\n    // Fetch slice (cached)\n    const sliceCacheKey = `slice:${registry}:${fromIndex}:${clampedToIndex}`;\n    let items = this.#getCached<TokenWrapperPair[]>(sliceCacheKey);\n    if (items === undefined) {\n      const raw = await this.provider.readContract(\n        getTokenPairsSliceContract(registry, fromIndex, clampedToIndex),\n      );\n      items = this.#setCached(sliceCacheKey, [...raw]);\n    }\n\n    if (!metadata) {\n      return { items, total, page, pageSize };\n    }\n\n    // Enrich with on-chain metadata (resilient — individual failures don't break the batch)\n    const metadataCacheKey = `metadata:${registry}:${fromIndex}:${clampedToIndex}`;\n    let metadataItems = this.#getCached<TokenWrapperPairWithMetadata[]>(metadataCacheKey);\n    if (metadataItems === undefined) {\n      const settled = await Promise.allSettled(items.map((pair) => this.#pairWithMetadata(pair)));\n      const hasFailures = settled.some((r) => r.status === \"rejected\");\n      const enriched = settled.map((result, i) =>\n        result.status === \"fulfilled\"\n          ? result.value\n          : Object.assign({}, items[i], {\n              metadataFailed: true as const,\n              underlying: {\n                name: \"Unknown\",\n                symbol: \"???\",\n                decimals: 0,\n                totalSupply: 0n,\n              },\n              confidential: { name: \"Unknown\", symbol: \"???\", decimals: 0 },\n            }),\n      );\n      // Use negative cache TTL when any metadata fetch failed so retries happen sooner\n      metadataItems = this.#setCached(\n        metadataCacheKey,\n        enriched,\n        hasFailures ? NEGATIVE_CACHE_TTL_MS : undefined,\n      );\n    }\n\n    return { items: metadataItems, total, page, pageSize };\n  }\n\n  async #pairWithMetadata(pair: TokenWrapperPair): Promise<TokenWrapperPairWithMetadata> {\n    const [uName, uSymbol, uDecimals, uTotalSupply, cName, cSymbol, cDecimals] = await Promise.all([\n      this.provider.readContract(nameContract(pair.tokenAddress)),\n      this.provider.readContract(symbolContract(pair.tokenAddress)),\n      this.provider.readContract(decimalsContract(pair.tokenAddress)),\n      this.provider.readContract(erc20TotalSupplyContract(pair.tokenAddress)),\n      this.provider.readContract(nameContract(pair.confidentialTokenAddress)),\n      this.provider.readContract(symbolContract(pair.confidentialTokenAddress)),\n      this.provider.readContract(decimalsContract(pair.confidentialTokenAddress)),\n    ]);\n\n    return {\n      ...pair,\n      underlying: {\n        name: uName,\n        symbol: uSymbol,\n        decimals: uDecimals,\n        totalSupply: uTotalSupply,\n      },\n      confidential: { name: cName, symbol: cSymbol, decimals: cDecimals },\n    };\n  }\n\n  // ---------------------------------------------------------------------------\n  // Structured single-pair lookups\n  // ---------------------------------------------------------------------------\n\n  /**\n   * Look up the confidential token for a given plain ERC-20 address.\n   *\n   * @param tokenAddress - The plain ERC-20 token address.\n   * @returns The lookup result, or `null` if the token has never been registered.\n   *   **Note:** revoked tokens (registered then invalidated) return a non-null result\n   *   with `isValid: false`. Check `result.isValid` explicitly rather than using\n   *   `if (result)` to guard against processing revoked tokens.\n   *\n   * @example\n   * ```ts\n   * const result = await registry.getConfidentialToken(usdcAddress);\n   * if (result?.isValid) {\n   *   console.log(result.confidentialTokenAddress);\n   * }\n   * ```\n   */\n  async getConfidentialToken(\n    tokenAddress: Address,\n  ): Promise<{ confidentialTokenAddress: Address; isValid: boolean } | null> {\n    const registry = await this.getRegistryAddress();\n    const normalized = getAddress(tokenAddress);\n\n    const cacheKey = `ct:${registry}:${normalized}`;\n    const cached = this.#getCached<{\n      confidentialTokenAddress: Address;\n      isValid: boolean;\n    } | null>(cacheKey);\n    if (cached !== undefined) {\n      return cached;\n    }\n\n    const [isValid, confidentialTokenAddress] = await this.provider.readContract(\n      getConfidentialTokenAddressContract(registry, normalized),\n    );\n\n    // Zero address means the token is not registered at all (never seen by the registry).\n    // A non-zero address with isValid=false means it was registered but later revoked.\n    if (confidentialTokenAddress === zeroAddress) {\n      return this.#setCached(cacheKey, null, NEGATIVE_CACHE_TTL_MS);\n    }\n\n    return this.#setCached(cacheKey, { confidentialTokenAddress, isValid });\n  }\n\n  /**\n   * Reverse lookup — find the plain ERC-20 for a given confidential token.\n   *\n   * @param confidentialTokenAddress - The confidential token address.\n   * @returns The lookup result, or `null` if no pair is registered.\n   *\n   * @example\n   * ```ts\n   * const result = await registry.getUnderlyingToken(cUsdcAddress);\n   * if (result) {\n   *   console.log(result.tokenAddress, result.isValid);\n   * }\n   * ```\n   */\n  async getUnderlyingToken(\n    confidentialTokenAddress: Address,\n  ): Promise<{ tokenAddress: Address; isValid: boolean } | null> {\n    const registry = await this.getRegistryAddress();\n    const normalized = getAddress(confidentialTokenAddress);\n\n    const cacheKey = `ut:${registry}:${normalized}`;\n    const cached = this.#getCached<{\n      tokenAddress: Address;\n      isValid: boolean;\n    } | null>(cacheKey);\n    if (cached !== undefined) {\n      return cached;\n    }\n\n    const [isValid, tokenAddress] = await this.provider.readContract(\n      getTokenAddressContract(registry, normalized),\n    );\n\n    // Zero address means the confidential token is not registered at all.\n    // A non-zero address with isValid=false means it was registered but later revoked.\n    if (tokenAddress === zeroAddress) {\n      return this.#setCached(cacheKey, null, NEGATIVE_CACHE_TTL_MS);\n    }\n\n    return this.#setCached(cacheKey, { tokenAddress, isValid });\n  }\n\n  // ---------------------------------------------------------------------------\n  // Low-level pass-through methods (backward compatible)\n  // ---------------------------------------------------------------------------\n\n  /**\n   * Fetch all token wrapper pairs from the registry.\n   *\n   * @returns All registered `TokenWrapperPair` entries.\n   */\n  async getTokenPairs(): Promise<readonly TokenWrapperPair[]> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(getTokenPairsContract(registry));\n  }\n\n  /**\n   * Get the total number of token wrapper pairs.\n   *\n   * @returns The count as a bigint.\n   */\n  async getTokenPairsLength(): Promise<bigint> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(getTokenPairsLengthContract(registry));\n  }\n\n  /**\n   * Fetch a range of token wrapper pairs (paginated by index).\n   *\n   * @param fromIndex - Start index (inclusive).\n   * @param toIndex - End index (exclusive).\n   * @returns The slice of `TokenWrapperPair` entries.\n   */\n  async getTokenPairsSlice(\n    fromIndex: bigint,\n    toIndex: bigint,\n  ): Promise<readonly TokenWrapperPair[]> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(getTokenPairsSliceContract(registry, fromIndex, toIndex));\n  }\n\n  /**\n   * Fetch a single token wrapper pair by index.\n   *\n   * @param index - Zero-based pair index.\n   * @returns The `TokenWrapperPair` at that index.\n   */\n  async getTokenPair(index: bigint): Promise<TokenWrapperPair> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(getTokenPairContract(registry, index));\n  }\n\n  /**\n   * Look up the confidential token address for a given plain ERC-20 token.\n   *\n   * @param tokenAddress - The plain ERC-20 token address.\n   * @returns A tuple `[isValid, confidentialTokenAddress]`. `isValid` is `true` only for a\n   *   registered, non-revoked wrapper. The address is the zero address when no pair is registered.\n   *   A non-zero address with `isValid=false` means the wrapper was registered but later revoked.\n   */\n  async getConfidentialTokenAddress(tokenAddress: Address): Promise<readonly [boolean, Address]> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(\n      getConfidentialTokenAddressContract(registry, getAddress(tokenAddress)),\n    );\n  }\n\n  /**\n   * Reverse lookup — find the plain ERC-20 for a given confidential token.\n   *\n   * @param confidentialTokenAddress - The confidential token address.\n   * @returns A tuple `[isValid, tokenAddress]`. `isValid` is `true` only for a registered,\n   *   non-revoked wrapper. The address is the zero address when no pair is registered.\n   *   A non-zero address with `isValid=false` means the wrapper was registered but later revoked.\n   */\n  async getTokenAddress(confidentialTokenAddress: Address): Promise<readonly [boolean, Address]> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(\n      getTokenAddressContract(registry, getAddress(confidentialTokenAddress)),\n    );\n  }\n\n  /**\n   * Check whether a confidential token is registered and valid.\n   *\n   * @param confidentialTokenAddress - The confidential token address to check.\n   * @returns `true` if the token is a known valid wrapper in the registry.\n   */\n  async isConfidentialTokenValid(confidentialTokenAddress: Address): Promise<boolean> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(\n      isConfidentialTokenValidContract(registry, getAddress(confidentialTokenAddress)),\n    );\n  }\n}\n","import {\n  DEFAULT_TRANSPORT_KEY_PAIR_TTL_SECONDS,\n  DEFAULT_PERMIT_DURATION_DAYS,\n} from \"../credentials/credential-service\";\nimport { TransportKeyPairTTLSchema, PermitTTLSchema } from \"../credentials/schemas\";\nimport { LoggerService } from \"../services/logger-service\";\nimport { RelayerDispatcher } from \"../relayer/relayer-dispatcher\";\nimport type { GenericProvider, GenericSigner } from \"../types\";\nimport { DEFAULT_REGISTRY_TTL_SECONDS, RegistryTTLSchema } from \"../wrappers-registry\";\nimport { parseConfiguration } from \"../validation\";\nimport { resolveStorage } from \"./resolve\";\nimport type { ZamaConfig, ZamaConfigBase } from \"./types\";\n\n/**\n * @internal Shared config builder — not part of the public API.\n *\n * Applies defaults, validates TTLs, and resolves storage so the\n * returned config is fully populated and ready for `ZamaSDK`.\n */\nexport function buildZamaConfig(\n  signer: GenericSigner | undefined,\n  provider: GenericProvider,\n  params: ZamaConfigBase,\n): ZamaConfig {\n  const { storage, permitStorage } = resolveStorage(params.storage, params.permitStorage);\n  const logger = new LoggerService(params.logger);\n  const relayer = new RelayerDispatcher(params.chains, params.relayers, logger);\n\n  return {\n    chains: params.chains,\n    relayer,\n    provider,\n    signer,\n    storage,\n    permitStorage,\n    transportKeyPairTTL: parseConfiguration(\n      TransportKeyPairTTLSchema,\n      params.transportKeyPairTTL ?? DEFAULT_TRANSPORT_KEY_PAIR_TTL_SECONDS,\n    ),\n    permitTTL: parseConfiguration(\n      PermitTTLSchema,\n      params.permitTTL ?? DEFAULT_PERMIT_DURATION_DAYS,\n    ),\n    registryTTL: parseConfiguration(\n      RegistryTTLSchema,\n      params.registryTTL ?? DEFAULT_REGISTRY_TTL_SECONDS,\n    ),\n    logger,\n    onEvent: params.onEvent,\n  } as unknown as ZamaConfig;\n}\n","import type {\n  WalletAccount,\n  WalletAccountChange,\n  WalletAccountListener,\n  WalletAccountStore,\n} from \"../types\";\n\nexport function walletAccountsEqual(\n  a: WalletAccount | undefined,\n  b: WalletAccount | undefined,\n): boolean {\n  return a?.address === b?.address && a?.chainId === b?.chainId;\n}\n\n/**\n * Writable {@link WalletAccountStore} for custom signer adapters. Adapters call\n * {@link MutableWalletAccountStore.setSnapshot} when their underlying wallet\n * provider notifies of a connect, disconnect, account change, or chain change.\n *\n * Most custom adapters should use the {@link createWalletAccountStore} factory\n * rather than instantiating this class directly.\n */\nexport class MutableWalletAccountStore implements WalletAccountStore {\n  readonly #listeners = new Set<WalletAccountListener>();\n  #snapshot: WalletAccount | undefined;\n  #resolved: boolean;\n\n  constructor(initial?: WalletAccount) {\n    this.#snapshot = initial;\n    this.#resolved = initial !== undefined;\n  }\n\n  getSnapshot(): WalletAccount | undefined {\n    return this.#snapshot;\n  }\n\n  /**\n   * Whether the store has received at least one snapshot (via the constructor\n   * or {@link setSnapshot}). Adapters whose initial account is only available\n   * asynchronously start unresolved; callers can distinguish \"still loading\"\n   * from \"wallet not connected\".\n   */\n  isReady(): boolean {\n    return this.#resolved;\n  }\n\n  /**\n   * Push a new wallet account snapshot. No-op when the next value is\n   * value-equal to the current one. Emits `{ previous, next }` to every\n   * subscriber otherwise.\n   */\n  setSnapshot(next: WalletAccount | undefined): void {\n    this.#resolved = true;\n    const previous = this.#snapshot;\n    if (walletAccountsEqual(previous, next)) {\n      return;\n    }\n    this.#snapshot = next;\n    this.#emit({ previous, next });\n  }\n\n  subscribe(listener: WalletAccountListener): () => void {\n    this.#listeners.add(listener);\n    const snapshot = this.#snapshot;\n    if (snapshot) {\n      listener({ previous: undefined, next: snapshot });\n    }\n    return () => {\n      this.#listeners.delete(listener);\n    };\n  }\n\n  #emit(change: WalletAccountChange): void {\n    for (const listener of this.#listeners) {\n      listener(change);\n    }\n  }\n}\n\n/**\n * Create a {@link MutableWalletAccountStore} for a custom {@link GenericSigner}\n * adapter.\n *\n * @param initial - Optional initial wallet account snapshot.\n */\nexport function createWalletAccountStore(initial?: WalletAccount): MutableWalletAccountStore {\n  return new MutableWalletAccountStore(initial);\n}\n","import type { Hex } from \"viem\";\nimport { WalletNotConnectedError } from \"../errors\";\nimport type { EIP712TypedData } from \"../relayer/relayer-sdk.types\";\nimport type {\n  ContractAbi,\n  GenericSigner,\n  WalletAccount,\n  WriteContractArgs,\n  WriteContractConfig,\n  WriteFunctionName,\n} from \"../types\";\nimport { MutableWalletAccountStore } from \"./wallet-account-store\";\n\n/**\n * Abstract base class that implements the shared {@link GenericSigner}\n * boilerplate: wallet-account store, `requireWalletAccount`, idempotent\n * `dispose` / `Disposable`. Subclasses provide `signTypedData`,\n * `writeContract`, and optionally override `onDispose` for cleanup.\n *\n * Using this class is optional — implementing {@link GenericSigner} directly\n * with {@link createWalletAccountStore} remains fully supported.\n */\nexport abstract class BaseSigner implements GenericSigner, Disposable {\n  readonly walletAccount: MutableWalletAccountStore;\n  #disposed = false;\n\n  constructor(initial?: WalletAccount) {\n    this.walletAccount = new MutableWalletAccountStore(initial);\n  }\n\n  requireWalletAccount(operation: string): WalletAccount {\n    const account = this.walletAccount.getSnapshot();\n    if (!account) {\n      throw new WalletNotConnectedError(operation);\n    }\n    return account;\n  }\n\n  abstract signTypedData(typedData: EIP712TypedData): Promise<Hex>;\n\n  abstract writeContract<\n    const TAbi extends ContractAbi,\n    TFunctionName extends WriteFunctionName<TAbi>,\n    const TArgs extends WriteContractArgs<TAbi, TFunctionName>,\n  >(config: WriteContractConfig<TAbi, TFunctionName, TArgs>): Promise<Hex>;\n\n  dispose(): void {\n    if (this.#disposed) {\n      return;\n    }\n    this.#disposed = true;\n    this.onDispose();\n  }\n\n  [Symbol.dispose](): void {\n    this.dispose();\n  }\n\n  protected onDispose(): void {}\n}\n"],"mappings":"qlBAQA,SAAgB,EAA2B,EAA2C,CAEpF,MAAO,WAAW,GACpB,CAEA,SAAgB,EAAmB,EAAgC,CACjE,MAAO,WAAW,EAAM,cAAc,GAAG,EAAM,QAAQ,GAAG,EAAM,kBAClE,CAEA,SAAgB,EAAmB,EAA2C,CAC5E,MAAO,iBAAiB,GAC1B,CCVA,SAAgB,EAAS,EAAoC,CAC3D,OAAO,EAAW,CAAK,CACzB,CAGA,MAAa,EAAM,EAAE,OAClB,GAAM,OAAO,GAAM,UAAY,GAAM,EAAG,CAAE,OAAQ,EAAK,CAAC,EACzD,iCACF,EAGa,GAAa,EAAE,OACzB,GAAM,OAAO,GAAM,UAAY,GAAU,EAAG,CAAE,OAAQ,EAAM,CAAC,EAC9D,sBACF,EAGa,EAAqB,EAAE,KAAK,GAAY,EAAE,UAAU,CAAQ,CAAC,EAG7D,EAAc,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,EAG3C,EAAkB,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EAG5C,GAAqB,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,EAGlD,GAAe,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EAGzC,GAAU,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EC/BjD,SAAgB,GAAqB,CACnC,OAAO,KAAK,MAAM,KAAK,IAAI,EAAI,GAAI,CACrC,CAGA,SAAgB,EAAmB,EAAqD,CACtF,MAAO,CAAC,GAAG,IAAI,IAAI,EAAU,IAAI,CAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CACxD,CCNA,MAAM,EAA2B,mEAC3B,EAAiB,sDAGV,EAAqC,IAAM,MAI3C,EAA4B,EACtC,IAAI,CAAE,MAAO,CAAyB,CAAC,CAAC,CACxC,MACC,EAAE,SAAS,CAAE,MAAO,CAAyB,CAAC,EAC9C,EAAE,QACA,EACA,gEAAgE,EAAmC,aACrG,CACF,EAEW,EAAkB,EAC5B,IAAI,CAAE,MAAO,CAAe,CAAC,CAAC,CAC9B,MAAM,EAAE,SAAS,CAAE,MAAO,CAAe,CAAC,CAAC,EAEjC,EAA+B,EAAE,OAAO,CACnD,UAAW,EACX,WAAY,EACZ,UAAW,EACX,UAAW,CACb,CAAC,EAEY,EAAmB,EAAE,OAAO,CACvC,iBAAkB,EAClB,cAAe,EACf,iBAAkB,EAClB,WACA,wBAAyB,EAAE,MAAM,CAAkB,CAAC,CAAC,MAAM,EAAE,UAAA,EAAkC,CAAC,EAChG,UAAW,EACX,eAAgB,EAChB,aAAc,EAChB,CAAC,EAEY,EAAuB,EAAE,MAAM,CAAgB,EAE/C,EAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,EC7BlD,IAAa,GAAb,KAAmC,CACjC,GACA,GACA,GACA,GACA,GAAoB,IAAI,IAExB,YAAY,EAAqC,CAC/C,KAAKA,GAAa,EAAO,UACzB,KAAKC,GAAW,EAAO,QACvB,KAAKC,GAAO,EAAO,IACnB,KAAKC,GAAU,EAAO,MACxB,CAEA,MAAM,WAAW,EAA2E,CAC1F,IAAM,EAAM,EAA2B,CAAa,EAC9C,EAAM,MAAM,KAAKF,GAAS,IAAI,CAAG,EACvC,GAAI,GAAQ,KACV,OAAO,KAET,IAAM,EAAS,EAA6B,UAAU,CAAG,EACzD,GAAI,CAAC,EAAO,QAMV,OALA,MAAM,EACJ,sCACM,KAAKA,GAAS,OAAO,CAAG,EAC9B,KAAKE,EACP,EACO,KAET,IAAM,EAAS,EAAO,KAStB,OARI,EAAW,GAAK,EAAO,WACzB,MAAM,EACJ,sCACM,KAAKF,GAAS,OAAO,CAAG,EAC9B,KAAKE,EACP,EACO,MAEF,CACT,CAOA,MAAM,YAAY,EAAoE,CACpF,IAAM,EAAW,KAAKC,GAAS,IAAI,CAAa,EAChD,GAAI,EACF,OAAO,EAGT,IAAM,GAAW,SAAY,CAC3B,IAAM,EAAS,MAAM,KAAK,WAAW,CAAa,EAClD,GAAI,IAAW,KACb,OAAO,EAET,IAAM,EAAQ,MAAM,KAAKJ,GAAW,EAC9B,EAAY,EAAW,EACvB,EAAiC,CACrC,UAAW,EAAM,UACjB,WAAY,EAAM,WAClB,YACA,UAAW,EAAY,KAAKE,EAC9B,EACM,EAAM,EAA2B,CAAa,EAMpD,OALA,MAAM,EACJ,iCACM,KAAKD,GAAS,IAAI,EAAK,CAAM,EACnC,KAAKE,EACP,EACO,CACT,EAAA,CAAG,CAAC,CAAC,YAAc,CACjB,KAAKC,GAAS,OAAO,CAAa,CACpC,CAAC,EAGD,OADA,KAAKA,GAAS,IAAI,EAAe,CAAO,EACjC,CACT,CAGA,MAAM,MAAM,EAAkD,CAC5D,IAAM,EAAM,EAA2B,CAAa,EACpD,MAAM,EAAQ,sCAAyC,KAAKH,GAAS,OAAO,CAAG,EAAG,KAAKE,EAAO,CAChG,CACF,ECvGA,SAAgB,EACd,EACA,EACsB,CACtB,IAAM,EAAU,IAAI,IAAI,EAAY,QAAS,GAAM,EAAE,uBAAuB,CAAC,EAC7E,OAAO,EAAU,OAAQ,GAAS,CAAC,EAAQ,IAAI,CAAI,CAAC,CACtD,CAGA,SAAgB,GAAe,EAAkE,CAC/F,IAAM,EAAiC,CAAC,EACxC,IAAK,IAAI,EAAI,EAAG,EAAI,EAAU,OAAQ,GAAA,GACpC,EAAO,KAAK,EAAU,MAAM,EAAG,EAAA,EAA4B,CAAC,EAE9D,OAAO,CACT,CAGA,SAAgB,GACd,EACA,EACA,EACc,CACd,OAAO,EAAY,OAChB,GACC,EAAE,mBAAqB,GACvB,EAAa,EAAE,eAAiB,EAAE,aAAA,KACtC,CACF,CAGA,SAAgB,GACd,EACA,EACc,CACd,IAAM,EAAY,IAAI,IAAI,CAAS,EACnC,OAAO,EAAY,OAAQ,GAAM,CAAC,EAAE,wBAAwB,KAAM,GAAM,EAAU,IAAI,CAAC,CAAC,CAAC,CAC3F,CAGA,SAAgB,GAA8B,EAAiB,EAAsB,CACnF,MAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAC7C,CASA,SAAgB,GACd,EACA,EACA,EACmB,CACnB,IAAM,EAAe,IAAI,IAAI,CAAS,EAChC,EAAW,EAAQ,OACtB,GAAM,IAAI,IAAI,CAAC,GAAG,EAAE,wBAAyB,GAAG,CAAS,CAAC,CAAC,CAAC,MAAA,EAC/D,EACA,GAAI,EAAS,SAAW,EACtB,OAAO,KAGT,SAAS,EAAQ,EAAe,CAC9B,OAAO,EAAE,wBAAwB,QAAQ,EAAG,IAAM,GAAK,KAAa,IAAI,CAAC,EAAY,CAAC,CACxF,CAEA,IAAM,EAAa,KAAK,IAAI,GAAG,EAAS,IAAI,CAAO,CAAC,EAEpD,OADgB,EAAS,OAAQ,GAAM,EAAQ,CAAC,IAAM,CACzC,CAAC,CAAC,QAAQ,EAAG,IAAO,EAAE,eAAiB,EAAE,eAAiB,EAAI,CAAE,CAC/E,CCnDA,IAAa,GAAb,KAA6B,CAC3B,GACA,GAEA,YAAY,EAA+B,CACzC,KAAKE,GAAW,EAAO,QACvB,KAAKC,GAAU,EAAO,MACxB,CAGA,MAAM,KAAK,EAA+C,CACxD,IAAM,EAAM,EAAmB,CAAK,EAC9B,EAAM,MAAM,KAAKD,GAAS,IAAI,CAAG,EACvC,GAAI,GAAQ,KACV,MAAO,CAAC,EAEV,IAAM,EAAS,EAAqB,UAAU,CAAG,EAMjD,OALK,EAAO,QAKL,EAAO,MAJZ,MAAM,KAAKE,GAAa,CAAG,EAC3B,MAAM,KAAKC,GAAc,CAAK,EACvB,CAAC,EAGZ,CAMA,MAAM,mBAAmB,EAAwB,EAA8C,CAC7F,IAAM,EAAM,MAAM,KAAK,KAAK,CAAK,EAC3B,EAAS,GAAc,EAAK,EAAkB,KAAK,MAAM,KAAK,IAAI,EAAI,GAAI,CAAC,EAEjF,GAAI,EAAO,SAAW,EAAI,OAAQ,CAChC,IAAM,EAAM,EAAmB,CAAK,EAChC,EAAO,SAAW,GACpB,MAAM,KAAKD,GAAa,CAAG,EAC3B,MAAM,KAAKC,GAAc,CAAK,GAE9B,MAAM,EAAQ,0BAA6B,KAAKH,GAAS,IAAI,EAAK,CAAM,EAAG,KAAKC,EAAO,CAE3F,CACA,OAAO,CACT,CAQA,MAAM,OAAO,EAAwB,EAAmD,CACtF,GAAI,EAAY,SAAW,EACzB,OAEF,IAAM,EAAY,EAAY,IAAK,GAAM,EAAiB,MAAM,CAAC,CAAC,EAC5D,EAAW,MAAM,KAAK,KAAK,CAAK,EACtC,MAAM,KAAKD,GAAS,IAAI,EAAmB,CAAK,EAAG,CAAC,GAAG,EAAU,GAAG,CAAS,CAAC,EAC9E,MAAM,KAAKI,GAAY,CAAK,CAC9B,CAUA,MAAM,QACJ,EACA,EACA,EACe,CACf,IAAM,EAAY,EAAiB,MAAM,CAAa,EAEhD,GAAW,MADM,KAAK,KAAK,CAAK,EAAA,CACZ,OAAQ,GAAM,EAAE,YAAc,CAAY,EACpE,MAAM,KAAKJ,GAAS,IAAI,EAAmB,CAAK,EAAG,CAAC,GAAG,EAAU,CAAS,CAAC,EAC3E,MAAM,KAAKI,GAAY,CAAK,CAC9B,CAQA,MAAM,sBACJ,EACA,EACe,CACf,IAAM,EAAW,MAAM,KAAK,KAAK,CAAK,EACtC,GAAI,EAAS,SAAW,EACtB,OAEF,IAAM,EAAM,EAAmB,CAAK,EAC9B,EAAO,GAAuB,EAAU,CAAiB,EAC3D,EAAK,SAAW,GAClB,MAAM,KAAKF,GAAa,CAAG,EAC3B,MAAM,KAAKC,GAAc,CAAK,GAE9B,MAAM,KAAKH,GAAS,IAAI,EAAK,CAAI,CAErC,CAMA,MAAM,kBAAkB,EAAkD,CACxE,IAAM,EAAW,EAAmB,CAAa,EAC3C,EAAY,MAAM,KAAKK,GAAW,CAAQ,EAChD,MAAM,QAAQ,IAAI,EAAU,IAAK,GAAM,KAAKH,GAAa,CAAC,CAAC,CAAC,EAC5D,MAAM,EAAQ,0BAA6B,KAAKF,GAAS,OAAO,CAAQ,EAAG,KAAKC,EAAO,CACzF,CAEA,KAAMI,GAAW,EAAqC,CACpD,IAAM,EAAM,MAAM,KAAKL,GAAS,IAAI,CAAQ,EAC5C,GAAI,GAAQ,KACV,MAAO,CAAC,EAEV,IAAM,EAAS,EAAiB,UAAU,CAAG,EAK7C,OAJK,EAAO,QAIL,EAAO,MAHZ,MAAM,EAAQ,0BAA6B,KAAKA,GAAS,OAAO,CAAQ,EAAG,KAAKC,EAAO,EAChF,CAAC,EAGZ,CAEA,KAAMG,GAAY,EAAuC,CACvD,IAAM,EAAW,EAAmB,EAAM,aAAa,EACjD,EAAW,EAAmB,CAAK,EACnC,EAAO,MAAM,KAAKC,GAAW,CAAQ,EACvC,EAAK,SAAS,CAAQ,GAG1B,MAAM,KAAKL,GAAS,IAAI,EAAU,CAAC,GAAG,EAAM,CAAQ,CAAC,CACvD,CAEA,KAAMG,GAAc,EAAuC,CACzD,IAAM,EAAW,EAAmB,EAAM,aAAa,EACjD,EAAW,EAAmB,CAAK,EACnC,EAAO,MAAM,KAAKE,GAAW,CAAQ,EACrC,EAAO,EAAK,OAAQ,GAAU,IAAU,CAAQ,EAClD,EAAK,SAAW,EAAK,SAGrB,EAAK,SAAW,EAClB,MAAM,EAAQ,0BAA6B,KAAKL,GAAS,OAAO,CAAQ,EAAG,KAAKC,EAAO,EAEvF,MAAM,EAAQ,0BAA6B,KAAKD,GAAS,IAAI,EAAU,CAAI,EAAG,KAAKC,EAAO,EAE9F,CAEA,KAAMC,GAAa,EAAiC,CAClD,MAAM,EAAQ,0BAA6B,KAAKF,GAAS,OAAO,CAAQ,EAAG,KAAKC,EAAO,CACzF,CACF,EC1Ia,GAAb,KAA+B,CAC7B,GACA,GACA,GACA,GACA,GACA,GAEA,YAAY,EAAiC,CAC3C,KAAKK,GAAS,IAAI,GAAsB,CACtC,cAAiB,EAAO,QAAQ,yBAAyB,EACzD,QAAS,EAAO,QAChB,IAAK,EAAO,oBACZ,OAAQ,EAAO,MACjB,CAAC,EACD,KAAKC,GAAS,IAAI,GAAgB,CAChC,QAAS,EAAO,eAAiB,EAAO,QACxC,OAAQ,EAAO,MACjB,CAAC,EACD,KAAKC,GAAW,EAAO,QACvB,KAAKC,GAAU,EAAO,OACtB,KAAKC,GAAa,EAAO,UACzB,KAAKC,GAAU,EAAO,MACxB,CAWA,MAAM,YACJ,EACA,EAC4C,CAC5C,IAAM,EAAU,KAAKF,GAAQ,qBAAqB,aAAa,EACzD,EAAgB,EAAS,EAAQ,OAAO,EACxC,EAAY,EAAmB,CAAS,EACxC,EAAU,MAAM,KAAKH,GAAO,YAAY,CAAa,EAC3D,GAAI,EAAU,SAAW,EACvB,MAAO,CAAE,UAAS,QAAS,CAAC,CAAE,EAIhC,IAAM,EAAyB,CAC7B,gBACA,QAHc,EAAQ,QAItB,iBAAkB,EAAY,EAAS,CAAS,EAAI,CACtD,EACM,EAAU,MAAM,KAAKC,GAAO,mBAAmB,EAAO,EAAQ,SAAS,EAEvE,EAAY,EAAmB,EAAS,CAAS,EACvD,GAAI,EAAU,OAAS,EAAG,CACxB,IAAM,EAAY,GAAkB,EAAS,EAAW,CAAS,EACjE,GAAI,IAAc,KAAM,CACtB,IAAM,EAAa,GAAY,EAAU,wBAAyB,CAAS,EACrE,EAAU,MAAM,KAAKK,GAAY,CACrC,MAAO,EACP,UACA,OACF,CAAC,EACD,MAAM,EACJ,qBACM,KAAKL,GAAO,QAAQ,EAAO,EAAU,UAAW,CAAO,EAC7D,KAAKI,EACP,EACA,EAAQ,EAAQ,QAAQ,CAAS,GAAK,CACxC,MACE,IAAK,IAAM,KAAS,GAAe,CAAS,EAAG,CAC7C,IAAM,EAAa,MAAM,KAAKC,GAAY,CAAE,QAAO,UAAS,OAAM,CAAC,EACnE,EAAQ,KAAK,CAAU,EACvB,MAAM,EACJ,qBACM,KAAKL,GAAO,OAAO,EAAO,CAAC,CAAU,CAAC,EAC5C,KAAKI,EACP,CACF,CAEJ,CAEA,IAAM,EAAe,IAAI,IAAI,CAAS,EACtC,MAAO,CACL,UACA,QAAS,EAAQ,OAAQ,GAAM,EAAE,wBAAwB,KAAM,GAAM,EAAa,IAAI,CAAC,CAAC,CAAC,CAC3F,CACF,CASA,MAAM,UAAU,EAA+B,EAAuC,CACpF,GAAI,EAAU,SAAW,EACvB,MAAO,GAET,IAAM,EAAU,KAAKF,GAAQ,cAAc,YAAY,EACvD,GAAI,CAAC,EACH,MAAO,GAET,IAAM,EAAgB,EAAS,EAAQ,OAAO,EACxC,EAAU,MAAM,KAAKH,GAAO,WAAW,CAAa,EAC1D,GAAI,IAAY,KACd,MAAO,GAIT,IAAM,EAAyB,CAAE,gBAAe,QAFhC,EAAQ,QAEiC,iBADhC,EAAY,EAAS,CAAS,EAAI,CACe,EAE1E,OAAO,EAAmB,MADJ,KAAKC,GAAO,mBAAmB,EAAO,EAAQ,SAAS,EAC1C,EAAmB,CAAS,CAAC,CAAC,CAAC,SAAW,CAC/E,CAcA,MAAM,cAAc,EAA+C,CACjE,IAAM,EAAU,KAAKE,GAAQ,qBAAqB,eAAe,EAC3D,EAAgB,EAAS,EAAQ,OAAO,EAC9C,GAAI,IAAc,IAAA,GAAW,CAC3B,MAAM,KAAKF,GAAO,kBAAkB,CAAa,EACjD,MACF,CACA,IAAM,EAAa,EAAmB,CAAS,EAC/C,GAAI,EAAW,SAAW,EACxB,OAEF,IAAM,EAAU,EAAQ,QACxB,MAAM,KAAKA,GAAO,sBAChB,CAAE,gBAAe,UAAS,iBAAkB,CAAc,EAC1D,CACF,CACF,CAQA,MAAM,kBAAkC,CAEtC,IAAM,EAAgB,EADN,KAAKE,GAAQ,qBAAqB,kBACb,CAAC,CAAC,OAAO,EAC9C,MAAM,KAAKH,GAAO,MAAM,CAAa,EACrC,MAAM,KAAKC,GAAO,kBAAkB,CAAa,CACnD,CAUA,MAAM,qBAAqB,EAAiC,CAC1D,MAAM,KAAKD,GAAO,YAAY,EAAS,CAAO,CAAC,CACjD,CASA,MAAM,0BACJ,EACA,EACe,CACf,IAAM,EAAW,EAAO,EAAS,EAAK,OAAO,EAAI,IAAA,GAE7C,KADa,EAAO,EAAS,EAAK,OAAO,EAAI,IAAA,KAI7C,IACF,MAAM,KAAKA,GAAO,MAAM,CAAQ,EAChC,MAAM,KAAKC,GAAO,kBAAkB,CAAQ,EAEhD,CAEA,KAAMK,GAAY,EAIM,CACtB,GAAM,CAAE,QAAO,UAAS,SAAU,EAC5B,EAAiB,EAAW,EAC5B,EAAc,EAAM,mBAAqB,EAAM,cAErD,GAAI,CACF,IAAM,EAAS,EACX,MAAM,KAAKJ,GAAS,iCAClB,EAAQ,UACR,EACA,EAAM,iBACN,EACA,KAAKE,EACP,EACA,MAAM,KAAKF,GAAS,aAClB,EAAQ,UACR,EACA,EACA,KAAKE,EACP,EAEE,EAAY,MAAM,KAAKD,GAAQ,cAAc,CAAM,EAEzD,MAAO,CACL,iBAAkB,EAAQ,UAC1B,cAAe,EAAM,cACrB,iBAAkB,EAAM,iBACxB,QAAS,EAAM,QACf,wBAAyB,EACzB,YACA,iBACA,aAAc,KAAKC,EACrB,CACF,OAAS,EAAO,CAId,MAHI,aAAiB,EACb,EAEF,EAAiB,EAAO,2BAA2B,CAC3D,CACF,CACF,ECzQa,GAAb,KAAoD,CAClD,GACA,GAAmB,aAEnB,YAAY,EAAwB,CAClC,KAAKG,GAAU,CACjB,CAEA,MAAM,EAAiB,EAAsC,CAC3D,KAAKA,IAAS,MAAM,GAAG,KAAKC,GAAQ,GAAG,IAAW,CAAI,CACxD,CAEA,KAAK,EAAiB,EAAsC,CAC1D,KAAKD,IAAS,KAAK,GAAG,KAAKC,GAAQ,GAAG,IAAW,CAAI,CACvD,CAEA,KAAK,EAAiB,EAAsC,CAC1D,KAAKD,IAAS,KAAK,GAAG,KAAKC,GAAQ,GAAG,IAAW,CAAI,CACvD,CAEA,MAAM,EAAiB,EAAsC,CAC3D,KAAKD,IAAS,MAAM,GAAG,KAAKC,GAAQ,GAAG,IAAW,CAAI,CACxD,CACF,EChCA,SAAS,IAAoC,CAC3C,OAAO,OAAO,OAAW,IACrB,IAAI,GAAiB,iBAAiB,EACtC,IAAI,EACV,CAEA,SAAgB,EACd,EAAsC,GAAkB,EACxD,EAA4C,EACgB,CAC5D,MAAO,CAAE,UAAS,eAAc,CAClC,CASA,SAAgB,EACd,EACA,EACmC,CACnC,IAAM,EAAW,IAAI,IAAI,EAAO,IAAK,GAAM,CAAC,EAAE,GAAI,CAAC,CAAC,CAAC,EACrD,GAAI,EAAS,OAAS,EAAO,OAAQ,CACnC,IAAM,EAAM,EAAO,IAAK,GAAM,EAAE,EAAE,EAElC,MAAM,IAAI,EACR,0BAA0B,CAFb,GAAG,IAAI,IAAI,EAAI,QAAQ,EAAI,IAAM,EAAI,QAAQ,CAAE,IAAM,CAAC,CAAC,CAEtC,CAAC,CAAC,KAAK,IAAI,EAAE,kHAE7C,CACF,CACA,IAAM,EAAa,IAAI,IAAI,OAAO,QAAQ,CAAQ,CAAC,EAC7C,EAAS,IAAI,IAEnB,IAAK,IAAM,KAAM,EAAS,KAAK,EAAG,CAChC,IAAM,EAAc,EAAS,IAAI,CAAE,EAC7B,EAAgB,EAAW,IAAI,OAAO,CAAE,CAAC,EAE/C,GAAI,CAAC,EACH,MAAM,IAAI,EACR,SAAS,EAAG,gEAC2B,EAAG,WAC5C,EAGF,GAAI,CAAC,EACH,MAAM,IAAI,EACR,SAAS,EAAG,sGAEd,EAGF,EAAO,IAAI,EAAI,CACb,MAAO,EACP,QAAS,CACX,CAAC,CACH,CAEA,IAAM,EAAe,IAAI,IAAI,OAAO,KAAK,CAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,EACxD,EAAW,IAAI,IAAI,CAAC,GAAG,CAAY,CAAC,CAAC,OAAQ,GAAO,CAAC,EAAS,IAAI,CAAE,CAAC,CAAC,EAC5E,GAAI,EAAS,KAAO,EAClB,MAAM,IAAI,EACR,iCAAiC,CAAC,GAAG,CAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,iGAE5D,EAGF,OAAO,CACT,CCnCA,IAAa,EAAb,KAAiE,CAC/D,GACA,GACA,GACA,GAEA,YACE,EACA,EACA,EACA,CACA,GAAI,EAAO,SAAW,EACpB,MAAM,IAAI,EAAmB,iCAAiC,EAEhE,KAAKC,GAAU,IAAI,IAAI,EAAO,IAAK,GAAM,CAAC,EAAE,GAAI,CAAC,CAAC,CAAC,EACnD,KAAKG,GAAW,EAAO,EAAE,CAAC,GAE1B,IAAM,EAAgB,EAAqB,EAAQ,CAAO,EAGpD,EAAS,IAAI,IACnB,IAAK,GAAM,CAAC,EAAS,KAAW,EAAe,CAC7C,IAAM,EAAM,EAAO,QACf,EAAQ,EAAO,IAAI,CAAG,EACrB,IACH,EAAQ,CAAC,EACT,EAAO,IAAI,EAAK,CAAK,GAEvB,EAAM,KAAK,CAAC,EAAS,EAAO,KAAK,CAAC,CACpC,CAGA,IAAM,EAAW,IAAI,IACf,EAAwB,CAAC,EAC/B,GAAI,CACF,IAAK,GAAM,CAAC,EAAY,KAAgB,EAAQ,CAC9C,IAAM,EAAkB,EAAY,KAAK,EAAG,KAAW,CAAK,EACtD,EAAS,EAAW,eAAe,EAAiB,CAAM,EAC5D,GACF,EAAQ,KAAK,CAAM,EAErB,IAAK,GAAM,CAAC,EAAS,KAAU,EAC7B,EAAS,IAAI,EAAS,EAAW,cAAc,EAAO,EAAQ,CAAM,CAAC,CAEzE,CACF,OAAS,EAAO,CACd,IAAK,IAAM,KAAK,EACd,GAAI,CACF,EAAE,UAAU,CACd,MAAQ,CAER,CAEF,MAAM,CACR,CAEA,KAAKF,GAAY,EACjB,KAAKC,GAAW,CAClB,CAEA,IAAI,QAA8B,CAChC,MAAO,CAAC,GAAG,KAAKF,GAAQ,OAAO,CAAC,CAClC,CAEA,IAAI,OAAkB,CACpB,IAAM,EAAQ,KAAKA,GAAQ,IAAI,KAAKG,EAAQ,EAE5C,OADA,EAAkB,EAAO,0BAA0B,EAC5C,CACT,CAEA,YAAY,EAAuB,CACjC,GAAI,CAAC,KAAKH,GAAQ,IAAI,CAAO,EAC3B,MAAM,IAAI,EACR,mCAAmC,EAAQ,8BAC7C,EAEF,KAAKG,GAAW,CAClB,CAEA,GAAIC,IAAsB,CACxB,IAAM,EAAU,KAAKH,GAAU,IAAI,KAAKE,EAAQ,EAEhD,OADA,EAAkB,EAAS,4BAA4B,EAChD,CACT,CAEA,0BAAsD,CACpD,OAAO,KAAKC,GAAQ,yBAAyB,CAC/C,CAEA,aACE,EACA,EACA,EACA,EAC0B,CAC1B,OAAO,KAAKA,GAAQ,aAAa,EAAW,EAAmB,EAAgB,CAAY,CAC7F,CAEA,QAAQ,EAA+C,CACrD,OAAO,KAAKA,GAAQ,QAAQ,CAAM,CACpC,CAEA,YAAY,EAAkF,CAC5F,OAAO,KAAKA,GAAQ,YAAY,CAAM,CACxC,CAEA,cAAc,EAAiE,CAC7E,OAAO,KAAKA,GAAQ,cAAc,CAAe,CACnD,CAEA,iCACE,EACA,EACA,EACA,EACA,EAC4C,CAC5C,OAAO,KAAKA,GAAQ,iCAClB,EACA,EACA,EACA,EACA,CACF,CACF,CAEA,qBACE,EACuD,CACvD,OAAO,KAAKA,GAAQ,qBAAqB,CAAM,CACjD,CAEA,2BAA2B,EAAoD,CAC7E,OAAO,KAAKA,GAAQ,2BAA2B,CAAO,CACxD,CAEA,4BAA+D,CAC7D,OAAO,KAAKA,GAAQ,2BAA2B,CACjD,CAEA,gBAAgB,EAAgD,CAC9D,OAAO,KAAKA,GAAQ,gBAAgB,CAAI,CAC1C,CAEA,eAAkC,CAChC,OAAO,KAAKA,GAAQ,cAAc,CACpC,CAEA,WAAkB,CAChB,IAAM,EAAkB,CAAC,EAGzB,IAAK,IAAM,KAAK,IAAI,IAAI,KAAKH,GAAU,OAAO,CAAC,EAC7C,GAAI,CACF,EAAE,UAAU,CACd,OAAS,EAAG,CACV,EAAO,KAAK,EAAQ,CAAC,CAAC,CACxB,CAIF,IAAK,IAAM,KAAK,IAAI,IAAI,KAAKC,EAAQ,EACnC,GAAI,CACF,EAAE,UAAU,CACd,OAAS,EAAG,CACV,EAAO,KAAK,EAAQ,CAAC,CAAC,CACxB,CAGF,GAAI,EAAO,OAAS,EAClB,MAAU,eAAe,EAAQ,uCAAuC,CAE5E,CAEA,CAAC,OAAO,UAAiB,CACvB,KAAK,UAAU,CACjB,CACF,ECnMA,MAAa,EAAoD,EAC9D,EAAQ,IAAK,EAAQ,iBACrB,EAAQ,IAAK,EAAQ,iBACrB,EAAM,IAAK,EAAM,iBACjB,EAAa,IAAK,EAAa,iBAC/B,EAAW,IAAK,EAAW,eAC9B,EAMa,GAA0B,EAAE,OACvC,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,QAAS,+BAA+B,CAAC,EAClE,CACF,EAGa,EAAoB,GA6C3B,EAAwB,IAAS,IA+BvC,IAAa,GAAb,KAA8B,CAC5B,SACA,GACA,GACA,GAAkB,IAAI,IAEtB,YAAY,EAAgC,CAC1C,KAAK,SAAW,EAAO,SACvB,KAAKG,GAAa,OAAO,OACvB,CAAC,EACD,EACA,EAAmB,EAAE,SAAS,EAAuB,EAAG,EAAO,iBAAiB,CAClF,EACA,KAAKC,GACH,EAAmB,EAAmB,EAAO,aAAA,KAA2C,EACxF,GACJ,CAMA,WAAW,EAAsC,CAC/C,OAAO,KAAKD,GAAW,EACzB,CAMA,GAAc,EAA4B,CACxC,IAAM,EAAQ,KAAKE,GAAO,IAAI,CAAG,EAC5B,KAGL,IAAI,KAAK,IAAI,GAAK,EAAM,UAAW,CACjC,KAAKA,GAAO,OAAO,CAAG,EACtB,MACF,CACA,OAAO,EAAM,IADb,CAEF,CAEA,GAAc,EAAa,EAAS,EAAQ,KAAKD,GAAW,CAK1D,OAJA,KAAKC,GAAO,IAAI,EAAK,CACnB,OACA,UAAW,KAAK,IAAI,EAAI,CAC1B,CAAC,EACM,CACT,CAMA,SAAgB,CACd,KAAKA,GAAO,MAAM,CACpB,CAMA,IAAI,OAAgB,CAClB,OAAO,KAAKD,EACd,CAcA,MAAM,oBAAuC,CAC3C,IAAM,EAAU,MAAM,KAAK,SAAS,WAAW,EACzC,EAAU,KAAKD,GAAW,GAEhC,GAAI,CAAC,EACH,MAAM,IAAI,EACR,qDAAqD,EAAQ,kDAE/D,EAGF,OAAO,EAAW,CAAO,CAC3B,CA8BA,MAAM,UACJ,EAA4B,CAAC,EAC8C,CAC3E,IAAM,EAAO,EAAQ,MAAQ,EACvB,EAAW,EAAQ,UAAY,IAC/B,EAAW,EAAQ,UAAY,GAErC,GAAI,EAAO,EACT,MAAM,IAAI,EAAmB,0BAA0B,GAAM,EAE/D,GAAI,EAAW,EACb,MAAM,IAAI,EAAmB,8BAA8B,GAAU,EAGvE,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAGzC,EAAgB,SAAS,IAC3B,EAAQ,KAAKG,GAAmB,CAAa,EACjD,GAAI,IAAU,IAAA,GAAW,CACvB,IAAM,EAAM,MAAM,KAAK,SAAS,aAAa,EAA4B,CAAQ,CAAC,EAClF,EAAQ,KAAKC,GAAW,EAAe,OAAO,CAAG,CAAC,CACpD,CAGA,IAAM,EAAY,QAAQ,EAAO,GAAK,CAAQ,EACxC,EACJ,EAAY,OAAO,CAAQ,EAAI,OAAO,CAAK,EAAI,OAAO,CAAK,EAAI,EAAY,OAAO,CAAQ,EAG5F,GAAI,GAAa,OAAO,CAAK,EAC3B,MAAO,CAAE,MAAO,CAAC,EAAG,QAAO,OAAM,UAAS,EAI5C,IAAM,EAAgB,SAAS,EAAS,GAAG,EAAU,GAAG,IACpD,EAAQ,KAAKD,GAA+B,CAAa,EAC7D,GAAI,IAAU,IAAA,GAAW,CACvB,IAAM,EAAM,MAAM,KAAK,SAAS,aAC9B,EAA2B,EAAU,EAAW,CAAc,CAChE,EACA,EAAQ,KAAKC,GAAW,EAAe,CAAC,GAAG,CAAG,CAAC,CACjD,CAEA,GAAI,CAAC,EACH,MAAO,CAAE,QAAO,QAAO,OAAM,UAAS,EAIxC,IAAM,EAAmB,YAAY,EAAS,GAAG,EAAU,GAAG,IAC1D,EAAgB,KAAKD,GAA2C,CAAgB,EACpF,GAAI,IAAkB,IAAA,GAAW,CAC/B,IAAM,EAAU,MAAM,QAAQ,WAAW,EAAM,IAAK,GAAS,KAAKE,GAAkB,CAAI,CAAC,CAAC,EACpF,EAAc,EAAQ,KAAM,GAAM,EAAE,SAAW,UAAU,EACzD,EAAW,EAAQ,KAAK,EAAQ,IACpC,EAAO,SAAW,YACd,EAAO,MACP,OAAO,OAAO,CAAC,EAAG,EAAM,GAAI,CAC1B,eAAgB,GAChB,WAAY,CACV,KAAM,UACN,OAAQ,MACR,SAAU,EACV,YAAa,EACf,EACA,aAAc,CAAE,KAAM,UAAW,OAAQ,MAAO,SAAU,CAAE,CAC9D,CAAC,CACP,EAEA,EAAgB,KAAKD,GACnB,EACA,EACA,EAAc,EAAwB,IAAA,EACxC,CACF,CAEA,MAAO,CAAE,MAAO,EAAe,QAAO,OAAM,UAAS,CACvD,CAEA,KAAMC,GAAkB,EAA+D,CACrF,GAAM,CAAC,EAAO,EAAS,EAAW,EAAc,EAAO,EAAS,GAAa,MAAM,QAAQ,IAAI,CAC7F,KAAK,SAAS,aAAa,EAAa,EAAK,YAAY,CAAC,EAC1D,KAAK,SAAS,aAAa,EAAe,EAAK,YAAY,CAAC,EAC5D,KAAK,SAAS,aAAa,EAAiB,EAAK,YAAY,CAAC,EAC9D,KAAK,SAAS,aAAa,EAAyB,EAAK,YAAY,CAAC,EACtE,KAAK,SAAS,aAAa,EAAa,EAAK,wBAAwB,CAAC,EACtE,KAAK,SAAS,aAAa,EAAe,EAAK,wBAAwB,CAAC,EACxE,KAAK,SAAS,aAAa,EAAiB,EAAK,wBAAwB,CAAC,CAC5E,CAAC,EAED,MAAO,CACL,GAAG,EACH,WAAY,CACV,KAAM,EACN,OAAQ,EACR,SAAU,EACV,YAAa,CACf,EACA,aAAc,CAAE,KAAM,EAAO,OAAQ,EAAS,SAAU,CAAU,CACpE,CACF,CAuBA,MAAM,qBACJ,EACyE,CACzE,IAAM,EAAW,MAAM,KAAK,mBAAmB,EACzC,EAAa,EAAW,CAAY,EAEpC,EAAW,MAAM,EAAS,GAAG,IAC7B,EAAS,KAAKF,GAGV,CAAQ,EAClB,GAAI,IAAW,IAAA,GACb,OAAO,EAGT,GAAM,CAAC,EAAS,GAA4B,MAAM,KAAK,SAAS,aAC9D,EAAoC,EAAU,CAAU,CAC1D,EAQA,OAJI,IAA6B,EACxB,KAAKC,GAAW,EAAU,KAAM,CAAqB,EAGvD,KAAKA,GAAW,EAAU,CAAE,2BAA0B,SAAQ,CAAC,CACxE,CAgBA,MAAM,mBACJ,EAC6D,CAC7D,IAAM,EAAW,MAAM,KAAK,mBAAmB,EACzC,EAAa,EAAW,CAAwB,EAEhD,EAAW,MAAM,EAAS,GAAG,IAC7B,EAAS,KAAKD,GAGV,CAAQ,EAClB,GAAI,IAAW,IAAA,GACb,OAAO,EAGT,GAAM,CAAC,EAAS,GAAgB,MAAM,KAAK,SAAS,aAClD,EAAwB,EAAU,CAAU,CAC9C,EAQA,OAJI,IAAiB,EACZ,KAAKC,GAAW,EAAU,KAAM,CAAqB,EAGvD,KAAKA,GAAW,EAAU,CAAE,eAAc,SAAQ,CAAC,CAC5D,CAWA,MAAM,eAAsD,CAC1D,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aAAa,EAAsB,CAAQ,CAAC,CACnE,CAOA,MAAM,qBAAuC,CAC3C,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aAAa,EAA4B,CAAQ,CAAC,CACzE,CASA,MAAM,mBACJ,EACA,EACsC,CACtC,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aAAa,EAA2B,EAAU,EAAW,CAAO,CAAC,CAC5F,CAQA,MAAM,aAAa,EAA0C,CAC3D,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aAAa,EAAqB,EAAU,CAAK,CAAC,CACzE,CAUA,MAAM,4BAA4B,EAA6D,CAC7F,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aACnB,EAAoC,EAAU,EAAW,CAAY,CAAC,CACxE,CACF,CAUA,MAAM,gBAAgB,EAAyE,CAC7F,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aACnB,EAAwB,EAAU,EAAW,CAAwB,CAAC,CACxE,CACF,CAQA,MAAM,yBAAyB,EAAqD,CAClF,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aACnB,EAAiC,EAAU,EAAW,CAAwB,CAAC,CACjF,CACF,CACF,EC1fA,SAAgB,GACd,EACA,EACA,EACY,CACZ,GAAM,CAAE,UAAS,iBAAkB,EAAe,EAAO,QAAS,EAAO,aAAa,EAChF,EAAS,IAAI,GAAc,EAAO,MAAM,EACxC,EAAU,IAAI,EAAkB,EAAO,OAAQ,EAAO,SAAU,CAAM,EAE5E,MAAO,CACL,OAAQ,EAAO,OACf,UACA,WACA,SACA,UACA,gBACA,oBAAqB,EACnB,EACA,EAAO,qBAAuB,MAChC,EACA,UAAW,EACT,EACA,EAAO,WAAA,EACT,EACA,YAAa,EACX,EACA,EAAO,aAAA,KACT,EACA,SACA,QAAS,EAAO,OAClB,CACF,CC3CA,SAAgB,GACd,EACA,EACS,CACT,OAAO,GAAG,UAAY,GAAG,SAAW,GAAG,UAAY,GAAG,OACxD,CAUA,IAAa,EAAb,KAAqE,CACnE,GAAsB,IAAI,IAC1B,GACA,GAEA,YAAY,EAAyB,CACnC,KAAKG,GAAY,EACjB,KAAKC,GAAY,IAAY,IAAA,EAC/B,CAEA,aAAyC,CACvC,OAAO,KAAKD,EACd,CAQA,SAAmB,CACjB,OAAO,KAAKC,EACd,CAOA,YAAY,EAAuC,CACjD,KAAKA,GAAY,GACjB,IAAM,EAAW,KAAKD,GAClB,GAAoB,EAAU,CAAI,IAGtC,KAAKA,GAAY,EACjB,KAAKE,GAAM,CAAE,WAAU,MAAK,CAAC,EAC/B,CAEA,UAAU,EAA6C,CACrD,KAAKH,GAAW,IAAI,CAAQ,EAC5B,IAAM,EAAW,KAAKC,GAItB,OAHI,GACF,EAAS,CAAE,SAAU,IAAA,GAAW,KAAM,CAAS,CAAC,MAErC,CACX,KAAKD,GAAW,OAAO,CAAQ,CACjC,CACF,CAEA,GAAM,EAAmC,CACvC,IAAK,IAAM,KAAY,KAAKA,GAC1B,EAAS,CAAM,CAEnB,CACF,EAQA,SAAgB,GAAyB,EAAoD,CAC3F,OAAO,IAAI,EAA0B,CAAO,CAC9C,CCjEA,IAAsB,GAAtB,KAAsE,CACpE,cACA,GAAY,GAEZ,YAAY,EAAyB,CACnC,KAAK,cAAgB,IAAI,EAA0B,CAAO,CAC5D,CAEA,qBAAqB,EAAkC,CACrD,IAAM,EAAU,KAAK,cAAc,YAAY,EAC/C,GAAI,CAAC,EACH,MAAM,IAAI,EAAwB,CAAS,EAE7C,OAAO,CACT,CAUA,SAAgB,CACV,KAAKI,KAGT,KAAKA,GAAY,GACjB,KAAK,UAAU,EACjB,CAEA,CAAC,OAAO,UAAiB,CACvB,KAAK,QAAQ,CACf,CAEA,WAA4B,CAAC,CAC/B"}
+{"version":3,"file":"base-signer-BVqcM5jt.js","names":["#generator","#storage","#ttl","#logger","#pending","#storage","#logger","#deleteScope","#untrackScope","#trackScope","#readIndex","#vault","#store","#relayer","#signer","#permitTTL","#logger","#signPermit","#logger","#prefix","#chains","#relayers","#workers","#chainId","#active","#addresses","#ttlMs","#cache","#getCached","#setCached","#pairWithMetadata","#listeners","#snapshot","#resolved","#emit","#disposed"],"sources":["../../src/credentials/storage-keys.ts","../../src/schemas/primitives.ts","../../src/credentials/utils.ts","../../src/credentials/schemas.ts","../../src/credentials/keypair-vault.ts","../../src/credentials/permissions.ts","../../src/credentials/permission-store.ts","../../src/credentials/credential-service.ts","../../src/services/logger-service.ts","../../src/config/resolve.ts","../../src/relayer/relayer-dispatcher.ts","../../src/wrappers-registry.ts","../../src/config/build.ts","../../src/signer/wallet-account-store.ts","../../src/signer/base-signer.ts"],"sourcesContent":["import type { ChecksummedAddress } from \"../schemas/primitives\";\n\nexport interface PermissionScope {\n  signerAddress: ChecksummedAddress;\n  chainId: number;\n  delegatorAddress: ChecksummedAddress;\n}\n\nexport function transportKeyPairStorageKey(signerAddress: ChecksummedAddress): string {\n  // The \"keypair:\" prefix is intentionally preserved for back-compat with already-persisted entries.\n  return `keypair:${signerAddress}`;\n}\n\nexport function permissionScopeKey(scope: PermissionScope): string {\n  return `permits:${scope.signerAddress}:${scope.chainId}:${scope.delegatorAddress}`;\n}\n\nexport function permissionIndexKey(signerAddress: ChecksummedAddress): string {\n  return `permits-index:${signerAddress}`;\n}\n","import { type Address, getAddress, isAddress, isHex, type Hex } from \"viem\";\nimport { z } from \"zod/mini\";\n\ndeclare const checksummedTag: unique symbol;\n\n/** An EVM address that has been put through `getAddress` (EIP-55 checksum form). */\nexport type ChecksummedAddress = Address & { readonly [checksummedTag]: true };\n\n/** Stamp the brand on an arbitrary `Address` after normalizing it. */\nexport function checksum(value: Address): ChecksummedAddress {\n  return getAddress(value) as ChecksummedAddress;\n}\n\n/** `0x`-prefixed hex string. */\nexport const hex = z.custom<Hex>(\n  (v) => typeof v === \"string\" && isHex(v, { strict: true }),\n  \"expected 0x-prefixed hex string\",\n);\n\n/** Validates an EVM address string. Output type is `Address` (`` `0x${string}` ``). */\nexport const evmAddress = z.custom<Address>(\n  (v) => typeof v === \"string\" && isAddress(v, { strict: false }),\n  \"expected EVM address\",\n);\n\n/** Validates and EIP-55 checksums an EVM address. Output is {@link ChecksummedAddress}. */\nexport const checksummedAddress = z.pipe(evmAddress, z.transform(checksum));\n\n/** Non-negative integer Unix timestamp in seconds. */\nexport const unixSeconds = z.int().check(z.nonnegative());\n\n/** Positive integer count of seconds (e.g. a TTL). */\nexport const positiveSeconds = z.int().check(z.positive());\n\n/** Non-negative integer count of seconds (e.g. a cache TTL where 0 disables caching). */\nexport const nonNegativeSeconds = z.int().check(z.nonnegative());\n\n/** Positive integer count of days (e.g. a permit duration). */\nexport const positiveDays = z.int().check(z.positive());\n\n/** Positive integer EVM chain ID. */\nexport const chainId = z.int().check(z.positive());\n","import type { Address } from \"viem\";\nimport { type ChecksummedAddress, checksum } from \"../schemas/primitives\";\nexport { checksum, type ChecksummedAddress };\n\n/** Maximum number of contract addresses a single permit may bind, enforced by the FHE protocol. */\nexport const MAX_CONTRACTS_PER_PERMIT = 10;\n\nexport const SECONDS_PER_DAY = 86400;\n\n/** Current Unix time in whole seconds. */\nexport function nowSeconds(): number {\n  return Math.floor(Date.now() / 1000);\n}\n\n/** Deduplicate and sort a list of addresses by their checksummed form. */\nexport function normalizeAddresses(addresses: readonly Address[]): ChecksummedAddress[] {\n  return [...new Set(addresses.map(checksum))].toSorted();\n}\n","import { z } from \"zod/mini\";\nimport {\n  checksummedAddress,\n  chainId,\n  hex,\n  positiveDays,\n  positiveSeconds,\n  unixSeconds,\n} from \"../schemas/primitives\";\nimport { MAX_CONTRACTS_PER_PERMIT, SECONDS_PER_DAY } from \"./utils\";\n\nconst transportKeyPairTTLError = \"transportKeyPairTTL must be a positive integer number of seconds\";\nconst permitTTLError = \"permitTTL must be a positive integer number of days\";\n\n/** Maximum transportKeyPairTTL accepted by the fhevm ACL contract (365 days, in seconds). */\nexport const MAX_TRANSPORT_KEY_PAIR_TTL_SECONDS = 365 * SECONDS_PER_DAY;\n\n// z.int already rejects NaN, Infinity, and non-integers, so it covers\n// the previous .finite() + .int() combo with a single schema.\nexport const TransportKeyPairTTLSchema = z\n  .int({ error: transportKeyPairTTLError })\n  .check(\n    z.positive({ error: transportKeyPairTTLError }),\n    z.maximum(\n      MAX_TRANSPORT_KEY_PAIR_TTL_SECONDS,\n      `transportKeyPairTTL must not exceed the fhevm ACL maximum of ${MAX_TRANSPORT_KEY_PAIR_TTL_SECONDS}s (365 days)`,\n    ),\n  );\n\nexport const PermitTTLSchema = z\n  .int({ error: permitTTLError })\n  .check(z.positive({ error: permitTTLError }));\n\nexport const StoredTransportKeyPairSchema = z.object({\n  publicKey: hex,\n  privateKey: hex,\n  createdAt: unixSeconds,\n  expiresAt: positiveSeconds,\n});\n\nexport const PermissionSchema = z.object({\n  keypairPublicKey: hex,\n  signerAddress: checksummedAddress,\n  delegatorAddress: checksummedAddress,\n  chainId,\n  signedContractAddresses: z.array(checksummedAddress).check(z.maxLength(MAX_CONTRACTS_PER_PERMIT)),\n  signature: hex,\n  startTimestamp: unixSeconds,\n  durationDays: positiveDays,\n});\n\nexport const PermissionListSchema = z.array(PermissionSchema);\n\nexport const ScopeIndexSchema = z.array(z.string());\n","import type { GenericStorage } from \"../types\";\nimport { swallow } from \"../utils/swallow\";\nimport { transportKeyPairStorageKey } from \"./storage-keys\";\nimport { StoredTransportKeyPairSchema } from \"./schemas\";\nimport type { TransportKeyPair, StoredTransportKeyPair } from \"./types\";\nimport type { ChecksummedAddress } from \"../schemas/primitives\";\nimport type { GenericLogger } from \"../worker/worker.types\";\nimport { nowSeconds } from \"./utils\";\n\ninterface TransportKeyPairVaultConfig {\n  generator: () => Promise<TransportKeyPair>;\n  storage: GenericStorage;\n  /** Transport key pair lifetime in seconds. Pre-validated by the caller. */\n  ttl: number;\n  /** SDK-wide logger for best-effort storage diagnostics. */\n  logger: GenericLogger;\n}\n\n/**\n * Identity-scoped, chain-independent vault for ML-KEM transport key pairs.\n *\n * One transport key pair per signer address; the key pair survives chain switches and\n * permit revocations. Storage entries are keyed only by the signer address.\n */\nexport class TransportKeyPairVault {\n  readonly #generator: () => Promise<TransportKeyPair>;\n  readonly #storage: GenericStorage;\n  readonly #ttl: number;\n  readonly #logger: GenericLogger;\n  readonly #pending = new Map<ChecksummedAddress, Promise<StoredTransportKeyPair>>();\n\n  constructor(config: TransportKeyPairVaultConfig) {\n    this.#generator = config.generator;\n    this.#storage = config.storage;\n    this.#ttl = config.ttl;\n    this.#logger = config.logger;\n  }\n\n  async readStored(signerAddress: ChecksummedAddress): Promise<StoredTransportKeyPair | null> {\n    const key = transportKeyPairStorageKey(signerAddress);\n    const raw = await this.#storage.get(key);\n    if (raw === null || raw === undefined) {\n      return null;\n    }\n    const parsed = StoredTransportKeyPairSchema.safeParse(raw);\n    if (!parsed.success) {\n      await swallow(\n        \"delete transport key pair entry\",\n        () => this.#storage.delete(key),\n        this.#logger,\n      );\n      return null;\n    }\n    const stored = parsed.data;\n    if (nowSeconds() >= stored.expiresAt) {\n      await swallow(\n        \"delete transport key pair entry\",\n        () => this.#storage.delete(key),\n        this.#logger,\n      );\n      return null;\n    }\n    return stored;\n  }\n\n  /**\n   * Return the cached transport key pair, generating and persisting a fresh one if absent or expired.\n   *\n   * @remarks Deduplicates concurrent calls — simultaneous requests share one generation promise.\n   */\n  async getOrCreate(signerAddress: ChecksummedAddress): Promise<StoredTransportKeyPair> {\n    const existing = this.#pending.get(signerAddress);\n    if (existing) {\n      return existing;\n    }\n\n    const promise = (async () => {\n      const cached = await this.readStored(signerAddress);\n      if (cached !== null) {\n        return cached;\n      }\n      const fresh = await this.#generator();\n      const createdAt = nowSeconds();\n      const stored: StoredTransportKeyPair = {\n        publicKey: fresh.publicKey,\n        privateKey: fresh.privateKey,\n        createdAt,\n        expiresAt: createdAt + this.#ttl,\n      };\n      const key = transportKeyPairStorageKey(signerAddress);\n      await swallow(\n        \"persist transport key pair\",\n        () => this.#storage.set(key, stored),\n        this.#logger,\n      );\n      return stored;\n    })().finally(() => {\n      this.#pending.delete(signerAddress);\n    });\n\n    this.#pending.set(signerAddress, promise);\n    return promise;\n  }\n\n  /** Delete the stored transport key pair for the given address. */\n  async clear(signerAddress: ChecksummedAddress): Promise<void> {\n    const key = transportKeyPairStorageKey(signerAddress);\n    await swallow(\"delete transport key pair entry\", () => this.#storage.delete(key), this.#logger);\n  }\n}\n","import type { Hex } from \"viem\";\nimport type { Permission } from \"./types\";\nimport type { ChecksummedAddress } from \"../schemas/primitives\";\nimport { MAX_CONTRACTS_PER_PERMIT, SECONDS_PER_DAY } from \"./utils\";\n\n/** Contracts in `requested` not covered by the signed payload of any permission. */\nexport function uncoveredContracts(\n  permissions: readonly Permission[],\n  requested: readonly ChecksummedAddress[],\n): ChecksummedAddress[] {\n  const covered = new Set(permissions.flatMap((p) => p.signedContractAddresses));\n  return requested.filter((addr) => !covered.has(addr));\n}\n\n/** Split a list of addresses into permit-sized chunks (≤ {@link MAX_CONTRACTS_PER_PERMIT}). */\nexport function chunkContracts(addresses: readonly ChecksummedAddress[]): ChecksummedAddress[][] {\n  const chunks: ChecksummedAddress[][] = [];\n  for (let i = 0; i < addresses.length; i += MAX_CONTRACTS_PER_PERMIT) {\n    chunks.push(addresses.slice(i, i + MAX_CONTRACTS_PER_PERMIT));\n  }\n  return chunks;\n}\n\n/** Drop permissions that are time-expired or bound to a stale keypair. */\nexport function pruneUnusable(\n  permissions: readonly Permission[],\n  keypairPublicKey: Hex,\n  nowSeconds: number,\n): Permission[] {\n  return permissions.filter(\n    (p) =>\n      p.keypairPublicKey === keypairPublicKey &&\n      nowSeconds < p.startTimestamp + p.durationDays * SECONDS_PER_DAY,\n  );\n}\n\n/** Drop every permission whose signed payload touches any address in `contracts`. */\nexport function withoutPermitsTouching(\n  permissions: readonly Permission[],\n  contracts: readonly ChecksummedAddress[],\n): Permission[] {\n  const removeSet = new Set(contracts);\n  return permissions.filter((p) => !p.signedContractAddresses.some((a) => removeSet.has(a)));\n}\n\n/** Deduplicate and sort the union of two pre-checksummed address lists. */\nexport function sortedUnion<T extends string>(a: readonly T[], b: readonly T[]): T[] {\n  return [...new Set([...a, ...b])].toSorted();\n}\n\n/**\n * Find the in-scope permit best suited to be widened with `uncovered`.\n *\n * Returns the permit whose `signedContractAddresses ∪ uncovered` still fits\n * the 10-contract cap and that has the largest overlap with `requested`. Ties\n * broken by most-recent `startTimestamp`. Returns `null` when none fits.\n */\nexport function findPermitToWiden(\n  permits: readonly Permission[],\n  uncovered: readonly ChecksummedAddress[],\n  requested: readonly ChecksummedAddress[],\n): Permission | null {\n  const requestedSet = new Set(requested);\n  const feasible = permits.filter(\n    (p) => new Set([...p.signedContractAddresses, ...uncovered]).size <= MAX_CONTRACTS_PER_PERMIT,\n  );\n  if (feasible.length === 0) {\n    return null;\n  }\n\n  function overlap(p: Permission) {\n    return p.signedContractAddresses.reduce((n, a) => n + (requestedSet.has(a) ? 1 : 0), 0);\n  }\n\n  const maxOverlap = Math.max(...feasible.map(overlap));\n  const topTier = feasible.filter((p) => overlap(p) === maxOverlap);\n  return topTier.reduce((a, b) => (b.startTimestamp > a.startTimestamp ? b : a));\n}\n","import type { Hex } from \"viem\";\nimport type { GenericStorage } from \"../types\";\nimport { swallow } from \"../utils/swallow\";\nimport { pruneUnusable, withoutPermitsTouching } from \"./permissions\";\nimport { PermissionListSchema, PermissionSchema, ScopeIndexSchema } from \"./schemas\";\nimport { permissionIndexKey, permissionScopeKey, type PermissionScope } from \"./storage-keys\";\nimport type { Permission } from \"./types\";\nimport type { ChecksummedAddress } from \"../schemas/primitives\";\nimport type { GenericLogger } from \"../worker/worker.types\";\n\nexport type { PermissionScope };\n\ninterface PermissionStoreConfig {\n  storage: GenericStorage;\n  /** SDK-wide logger for best-effort storage diagnostics. */\n  logger: GenericLogger;\n}\n\n/**\n * Chain-scoped, 1-to-many store of EIP-712 permits.\n *\n * Permits are grouped by `(signerAddress, chainId, delegatorAddress)` so that\n * direct (`delegator === signer`) and delegated permits never collide. An\n * auxiliary per-signer index lists every scope so `clearAllForSigner` can\n * cascade across chains and delegators without enumerating storage keys.\n */\nexport class PermissionStore {\n  readonly #storage: GenericStorage;\n  readonly #logger: GenericLogger;\n\n  constructor(config: PermissionStoreConfig) {\n    this.#storage = config.storage;\n    this.#logger = config.logger;\n  }\n\n  /** Read all stored permissions for the given scope. Returns `[]` if none. */\n  async list(scope: PermissionScope): Promise<Permission[]> {\n    const key = permissionScopeKey(scope);\n    const raw = await this.#storage.get(key);\n    if (raw === null || raw === undefined) {\n      return [];\n    }\n    const parsed = PermissionListSchema.safeParse(raw);\n    if (!parsed.success) {\n      await this.#deleteScope(key);\n      await this.#untrackScope(scope);\n      return [];\n    }\n    return parsed.data;\n  }\n\n  /**\n   * Return permissions still live and bound to the current keypair.\n   * Expired or stale-keypair permissions are pruned in one storage pass.\n   */\n  async listUsableAndPrune(scope: PermissionScope, keypairPublicKey: Hex): Promise<Permission[]> {\n    const all = await this.list(scope);\n    const usable = pruneUnusable(all, keypairPublicKey, Math.floor(Date.now() / 1000));\n\n    if (usable.length !== all.length) {\n      const key = permissionScopeKey(scope);\n      if (usable.length === 0) {\n        await this.#deleteScope(key);\n        await this.#untrackScope(scope);\n      } else {\n        await swallow(\"update permit entry\", () => this.#storage.set(key, usable), this.#logger);\n      }\n    }\n    return usable;\n  }\n\n  /**\n   * Append signed permits to the given scope. Every permission is run through\n   * `PermissionSchema` so the schema is the single normalization point for both\n   * read and write paths. Signed payloads themselves are immutable and never\n   * edited — only addresses and types are normalized.\n   */\n  async append(scope: PermissionScope, permissions: readonly Permission[]): Promise<void> {\n    if (permissions.length === 0) {\n      return;\n    }\n    const validated = permissions.map((p) => PermissionSchema.parse(p));\n    const existing = await this.list(scope);\n    await this.#storage.set(permissionScopeKey(scope), [...existing, ...validated]);\n    await this.#trackScope(scope);\n  }\n\n  /**\n   * Replace the entry identified by `oldSignature` with `newPermission`.\n   *\n   * Atomic relative to the storage backend's `set`: the old entry survives in\n   * storage until the new list is written. If `oldSignature` is not found\n   * (raced eviction or concurrent prune), `newPermission` is still persisted —\n   * equivalent to {@link append}.\n   */\n  async replace(\n    scope: PermissionScope,\n    oldSignature: Hex,\n    newPermission: Permission,\n  ): Promise<void> {\n    const validated = PermissionSchema.parse(newPermission);\n    const existing = await this.list(scope);\n    const filtered = existing.filter((p) => p.signature !== oldSignature);\n    await this.#storage.set(permissionScopeKey(scope), [...filtered, validated]);\n    await this.#trackScope(scope);\n  }\n\n  /**\n   * Delete every permit whose signed payload touches any listed contract.\n   *\n   * The store never edits `signedContractAddresses`, because that field is part\n   * of the EIP-712 payload covered by `signature`.\n   */\n  async deletePermitsTouching(\n    scope: PermissionScope,\n    contractsToRemove: ChecksummedAddress[],\n  ): Promise<void> {\n    const existing = await this.list(scope);\n    if (existing.length === 0) {\n      return;\n    }\n    const key = permissionScopeKey(scope);\n    const next = withoutPermitsTouching(existing, contractsToRemove);\n    if (next.length === 0) {\n      await this.#deleteScope(key);\n      await this.#untrackScope(scope);\n    } else {\n      await this.#storage.set(key, next);\n    }\n  }\n\n  /**\n   * Delete every permission for the given signer across all chains and delegators.\n   * Uses the per-signer scope index to cascade without enumerating all storage keys.\n   */\n  async clearAllForSigner(signerAddress: ChecksummedAddress): Promise<void> {\n    const indexKey = permissionIndexKey(signerAddress);\n    const scopeKeys = await this.#readIndex(indexKey);\n    await Promise.all(scopeKeys.map((k) => this.#deleteScope(k)));\n    await swallow(\"delete permit index\", () => this.#storage.delete(indexKey), this.#logger);\n  }\n\n  async #readIndex(indexKey: string): Promise<string[]> {\n    const raw = await this.#storage.get(indexKey);\n    if (raw === null || raw === undefined) {\n      return [];\n    }\n    const parsed = ScopeIndexSchema.safeParse(raw);\n    if (!parsed.success) {\n      await swallow(\"delete permit index\", () => this.#storage.delete(indexKey), this.#logger);\n      return [];\n    }\n    return parsed.data;\n  }\n\n  async #trackScope(scope: PermissionScope): Promise<void> {\n    const indexKey = permissionIndexKey(scope.signerAddress);\n    const scopeKey = permissionScopeKey(scope);\n    const list = await this.#readIndex(indexKey);\n    if (list.includes(scopeKey)) {\n      return;\n    }\n    await this.#storage.set(indexKey, [...list, scopeKey]);\n  }\n\n  async #untrackScope(scope: PermissionScope): Promise<void> {\n    const indexKey = permissionIndexKey(scope.signerAddress);\n    const scopeKey = permissionScopeKey(scope);\n    const list = await this.#readIndex(indexKey);\n    const next = list.filter((entry) => entry !== scopeKey);\n    if (next.length === list.length) {\n      return;\n    }\n    if (next.length === 0) {\n      await swallow(\"delete permit index\", () => this.#storage.delete(indexKey), this.#logger);\n    } else {\n      await swallow(\"update permit index\", () => this.#storage.set(indexKey, next), this.#logger);\n    }\n  }\n\n  async #deleteScope(scopeKey: string): Promise<void> {\n    await swallow(\"delete permit entry\", () => this.#storage.delete(scopeKey), this.#logger);\n  }\n}\n","import type { Address } from \"viem\";\nimport type { GenericSigner, GenericStorage } from \"../types\";\nimport type { RelayerDispatcher } from \"../relayer/relayer-dispatcher\";\nimport { ZamaError } from \"../errors/base\";\nimport { wrapSigningError } from \"../errors/signing\";\nimport { swallow } from \"../utils/swallow\";\nimport { TransportKeyPairVault } from \"./keypair-vault\";\nimport { chunkContracts, findPermitToWiden, sortedUnion, uncoveredContracts } from \"./permissions\";\nimport { PermissionStore } from \"./permission-store\";\nimport type { PermissionScope } from \"./storage-keys\";\nimport type {\n  StoredTransportKeyPairWithPermits,\n  Permission,\n  StoredTransportKeyPair,\n} from \"./types\";\nimport type { ChecksummedAddress } from \"../schemas/primitives\";\nimport { checksum } from \"../schemas/primitives\";\nimport type { GenericLogger } from \"../worker/worker.types\";\nimport { normalizeAddresses, nowSeconds, SECONDS_PER_DAY } from \"./utils\";\n\nexport const DEFAULT_TRANSPORT_KEY_PAIR_TTL_SECONDS = 30 * SECONDS_PER_DAY;\nexport const DEFAULT_PERMIT_DURATION_DAYS = 30;\n\n/** Configuration for {@link CredentialService}. TTLs are pre-validated by the caller. */\nexport interface CredentialServiceConfig {\n  relayer: RelayerDispatcher;\n  signer: GenericSigner;\n  /** Transport key pair lifetime in seconds. Pre-validated. */\n  transportKeyPairTTL: number;\n  /** Permit lifetime in days. Pre-validated. */\n  permitTTL: number;\n  /** Backing storage for transport key pairs (and permits if `permitStorage` is omitted). */\n  storage: GenericStorage;\n  /** Optional dedicated storage for permits; defaults to `storage`. */\n  permitStorage?: GenericStorage;\n  /** SDK-wide logger for credential-path diagnostics. */\n  logger: GenericLogger;\n}\n\n/**\n * Single facade coordinating the keypair vault and the permission store.\n *\n * `CredentialService` is the only credentials object held by `ZamaSDK`. It accepts identity\n * transitions via `handleWalletAccountChange`.\n */\nexport class CredentialService {\n  readonly #vault: TransportKeyPairVault;\n  readonly #store: PermissionStore;\n  readonly #relayer: RelayerDispatcher;\n  readonly #signer: GenericSigner;\n  readonly #permitTTL: number;\n  readonly #logger: GenericLogger;\n\n  constructor(config: CredentialServiceConfig) {\n    this.#vault = new TransportKeyPairVault({\n      generator: () => config.relayer.generateTransportKeyPair(),\n      storage: config.storage,\n      ttl: config.transportKeyPairTTL,\n      logger: config.logger,\n    });\n    this.#store = new PermissionStore({\n      storage: config.permitStorage ?? config.storage,\n      logger: config.logger,\n    });\n    this.#relayer = config.relayer;\n    this.#signer = config.signer;\n    this.#permitTTL = config.permitTTL;\n    this.#logger = config.logger;\n  }\n\n  /**\n   * Resolve a keypair and permissions covering `contracts`, minimizing wallet\n   * prompts by reusing or widening existing permits where possible. Empty\n   * `contracts` warms the keypair without prompting.\n   *\n   * @returns The resolved keypair and permits covering the requested contracts.\n   * @throws if the user rejects a wallet signature prompt. {@link SigningRejectedError}\n   * @throws if signing fails for any other reason. {@link SigningFailedError}\n   */\n  async grantPermit(\n    contracts: readonly Address[],\n    delegator?: Address,\n  ): Promise<StoredTransportKeyPairWithPermits> {\n    const account = this.#signer.requireWalletAccount(\"grantPermit\");\n    const signerAddress = checksum(account.address);\n    const requested = normalizeAddresses(contracts);\n    const keypair = await this.#vault.getOrCreate(signerAddress);\n    if (requested.length === 0) {\n      return { keypair, permits: [] };\n    }\n\n    const chainId = account.chainId;\n    const scope: PermissionScope = {\n      signerAddress,\n      chainId,\n      delegatorAddress: delegator ? checksum(delegator) : signerAddress,\n    };\n    const permits = await this.#store.listUsableAndPrune(scope, keypair.publicKey);\n\n    const uncovered = uncoveredContracts(permits, requested);\n    if (uncovered.length > 0) {\n      const candidate = findPermitToWiden(permits, uncovered, requested);\n      if (candidate !== null) {\n        const widenedSet = sortedUnion(candidate.signedContractAddresses, uncovered);\n        const widened = await this.#signPermit({\n          chunk: widenedSet,\n          keypair,\n          scope,\n        });\n        await swallow(\n          \"replace permit\",\n          () => this.#store.replace(scope, candidate.signature, widened),\n          this.#logger,\n        );\n        permits[permits.indexOf(candidate)] = widened;\n      } else {\n        for (const chunk of chunkContracts(uncovered)) {\n          const permission = await this.#signPermit({ chunk, keypair, scope });\n          permits.push(permission);\n          await swallow(\n            \"persist permit\",\n            () => this.#store.append(scope, [permission]),\n            this.#logger,\n          );\n        }\n      }\n    }\n\n    const requestedSet = new Set(requested);\n    return {\n      keypair,\n      permits: permits.filter((p) => p.signedContractAddresses.some((a) => requestedSet.has(a))),\n    };\n  }\n\n  /**\n   * Pure store lookup: are stored permits sufficient to cover `contracts`? No wallet prompt.\n   *\n   * @returns `true` if cached permits cover all requested contracts (vacuously\n   *   true for an empty list); `false` if no keypair exists or coverage is\n   *   incomplete.\n   */\n  async hasPermit(contracts: readonly Address[], delegator?: Address): Promise<boolean> {\n    if (contracts.length === 0) {\n      return true;\n    }\n    const account = this.#signer.walletAccount.getSnapshot();\n    if (!account) {\n      return false;\n    }\n    const signerAddress = checksum(account.address);\n    const keypair = await this.#vault.readStored(signerAddress);\n    if (keypair === null) {\n      return false;\n    }\n    const chainId = account.chainId;\n    const delegatorAddress = delegator ? checksum(delegator) : signerAddress;\n    const scope: PermissionScope = { signerAddress, chainId, delegatorAddress };\n    const permits = await this.#store.listUsableAndPrune(scope, keypair.publicKey);\n    return uncoveredContracts(permits, normalizeAddresses(contracts)).length === 0;\n  }\n\n  /**\n   * Wipe FHE permits for the current signer.\n   *\n   * - With no argument: every permit referencing this signer is removed across\n   *   all chains and delegators. The keypair survives — use\n   *   {@link clearCredentials} to also wipe the keypair.\n   * - With a contract list: every signed permit in the direct-decrypt scope\n   *   (current chain) whose immutable payload touches any listed address is\n   *   removed. Delegated permits are not touched in this mode.\n   *\n   * @throws if reading the signer address fails. {@link SigningFailedError}\n   */\n  async revokePermits(contracts?: readonly Address[]): Promise<void> {\n    const account = this.#signer.requireWalletAccount(\"revokePermits\");\n    const signerAddress = checksum(account.address);\n    if (contracts === undefined) {\n      await this.#store.clearAllForSigner(signerAddress);\n      return;\n    }\n    const normalized = normalizeAddresses(contracts);\n    if (normalized.length === 0) {\n      return;\n    }\n    const chainId = account.chainId;\n    await this.#store.deletePermitsTouching(\n      { signerAddress, chainId, delegatorAddress: signerAddress },\n      normalized,\n    );\n  }\n\n  /**\n   * Wipe the keypair for the current signer and cascade-delete every\n   * permission referencing it across all chains and delegators.\n   *\n   * @throws if reading the signer address fails. {@link SigningFailedError}\n   */\n  async clearCredentials(): Promise<void> {\n    const account = this.#signer.requireWalletAccount(\"clearCredentials\");\n    const signerAddress = checksum(account.address);\n    await this.#vault.clear(signerAddress);\n    await this.#store.clearAllForSigner(signerAddress);\n  }\n\n  /**\n   * Warm the signer transport key pair cache for a known address.\n   *\n   * Best-effort prefetch primitive: correctness still comes from `grantPermit`,\n   * which lazily creates the transport key pair when needed. Errors (storage failure,\n   * relayer 4xx, missing Worker in SSR) are **not** swallowed here — the caller\n   * decides whether to log, ignore, or surface them.\n   */\n  async warmTransportKeyPair(address: Address): Promise<void> {\n    await this.#vault.getOrCreate(checksum(address));\n  }\n\n  /**\n   * Apply a wallet account transition.\n   *\n   * Address change clears persisted credentials for the previous account.\n   * Chain-only changes keep credentials intact because permits are chain-scoped\n   * already and stale decrypt plaintext is cleared by `ZamaSDK`.\n   */\n  async handleWalletAccountChange(\n    prev?: { address: Address },\n    next?: { address: Address },\n  ): Promise<void> {\n    const prevAddr = prev ? checksum(prev.address) : undefined;\n    const nextAddr = next ? checksum(next.address) : undefined;\n    if (prevAddr === nextAddr) {\n      return;\n    }\n    if (prevAddr) {\n      await this.#vault.clear(prevAddr);\n      await this.#store.clearAllForSigner(prevAddr);\n    }\n  }\n\n  async #signPermit(input: {\n    chunk: ChecksummedAddress[];\n    keypair: StoredTransportKeyPair;\n    scope: PermissionScope;\n  }): Promise<Permission> {\n    const { chunk, keypair, scope } = input;\n    const startTimestamp = nowSeconds();\n    const isDelegated = scope.delegatorAddress !== scope.signerAddress;\n\n    try {\n      const eip712 = isDelegated\n        ? await this.#relayer.createDelegatedUserDecryptEIP712(\n            keypair.publicKey,\n            chunk,\n            scope.delegatorAddress,\n            startTimestamp,\n            this.#permitTTL,\n          )\n        : await this.#relayer.createEIP712(\n            keypair.publicKey,\n            chunk,\n            startTimestamp,\n            this.#permitTTL,\n          );\n\n      const signature = await this.#signer.signTypedData(eip712);\n\n      return {\n        keypairPublicKey: keypair.publicKey,\n        signerAddress: scope.signerAddress,\n        delegatorAddress: scope.delegatorAddress,\n        chainId: scope.chainId,\n        signedContractAddresses: chunk,\n        signature,\n        startTimestamp,\n        durationDays: this.#permitTTL,\n      };\n    } catch (error) {\n      if (error instanceof ZamaError) {\n        throw error;\n      }\n      throw wrapSigningError(error, \"Credential signing failed\");\n    }\n  }\n}\n","import type { GenericLogger } from \"../worker/worker.types\";\n\n/**\n * Internal logger with a consistent, always-present shape.\n *\n * The consumer supplies an optional {@link GenericLogger} via configuration;\n * it is wrapped once into a `LoggerService` that is threaded through the SDK.\n * Internal code therefore calls `logger.warn(...)` directly — no optional\n * chaining, no per-call `undefined` checks — and a single place (this class)\n * owns the \"silent by default\" behavior: when no logger was supplied, every\n * level is a no-op.\n *\n * Every message is prefixed with `[zama-sdk]` here, so call sites pass only\n * their own message (and optional component tag) without repeating the prefix.\n *\n * `LoggerService` itself satisfies `GenericLogger`, so it can be passed\n * anywhere a logger is expected (e.g. the worker client).\n */\nexport class LoggerService implements GenericLogger {\n  readonly #logger: GenericLogger | undefined;\n  readonly #prefix = \"[zama-sdk]\";\n\n  constructor(logger?: GenericLogger) {\n    this.#logger = logger;\n  }\n\n  error(message: string, data?: Record<string, unknown>): void {\n    this.#logger?.error(`${this.#prefix} ${message}`, data);\n  }\n\n  warn(message: string, data?: Record<string, unknown>): void {\n    this.#logger?.warn(`${this.#prefix} ${message}`, data);\n  }\n\n  info(message: string, data?: Record<string, unknown>): void {\n    this.#logger?.info(`${this.#prefix} ${message}`, data);\n  }\n\n  debug(message: string, data?: Record<string, unknown>): void {\n    this.#logger?.debug(`${this.#prefix} ${message}`, data);\n  }\n}\n","import type { FheChain } from \"../chains\";\nimport { ConfigurationError } from \"../errors\";\nimport { IndexedDBStorage } from \"../storage/indexeddb-storage\";\nimport { MemoryStorage } from \"../storage/memory-storage\";\nimport type { GenericStorage } from \"../types\";\nimport type { RelayerConfig } from \"./types\";\n\n// ── Storage defaults ─────────────────────────────────────────────────────────\n\nfunction getDefaultStorage(): GenericStorage {\n  return typeof window !== \"undefined\"\n    ? new IndexedDBStorage(\"CredentialStore\")\n    : new MemoryStorage();\n}\n\nexport function resolveStorage(\n  storage: GenericStorage | undefined = getDefaultStorage(),\n  permitStorage: GenericStorage | undefined = storage,\n): { storage: GenericStorage; permitStorage: GenericStorage } {\n  return { storage, permitStorage };\n}\n\n// ── Chain relayer resolution ────────────────────────────────────────────────\n\nexport interface ResolvedChainRelayer {\n  chain: FheChain;\n  relayer: RelayerConfig;\n}\n\nexport function resolveChainRelayers(\n  chains: readonly FheChain[],\n  relayers: Readonly<Record<number, RelayerConfig>>,\n): Map<number, ResolvedChainRelayer> {\n  const chainMap = new Map(chains.map((c) => [c.id, c]));\n  if (chainMap.size !== chains.length) {\n    const ids = chains.map((c) => c.id);\n    const dupes = [...new Set(ids.filter((id, i) => ids.indexOf(id) !== i))];\n    throw new ConfigurationError(\n      `Duplicate chain id(s) [${dupes.join(\", \")}] in the chains array. ` +\n        `Each chain id must appear only once. Note: hardhat and anvil are aliases (both use 31337).`,\n    );\n  }\n  const relayerMap = new Map(Object.entries(relayers));\n  const result = new Map<number, ResolvedChainRelayer>();\n\n  for (const id of chainMap.keys()) {\n    const chainConfig = chainMap.get(id);\n    const relayerConfig = relayerMap.get(String(id));\n\n    if (!relayerConfig) {\n      throw new ConfigurationError(\n        `Chain ${id} has no relayer configured. ` +\n          `Add a relayer entry: relayers: { [${id}]: web() }`,\n      );\n    }\n\n    if (!chainConfig) {\n      throw new ConfigurationError(\n        `Chain ${id} has a relayer configured but no entry in the chains array. ` +\n          `Add the chain config to the chains array.`,\n      );\n    }\n\n    result.set(id, {\n      chain: chainConfig,\n      relayer: relayerConfig,\n    });\n  }\n\n  const relayerIdSet = new Set(Object.keys(relayers).map(Number));\n  const orphaned = new Set([...relayerIdSet].filter((id) => !chainMap.has(id)));\n  if (orphaned.size > 0) {\n    throw new ConfigurationError(\n      `Relayer entries for chain(s) [${[...orphaned].join(\", \")}] have no matching entry ` +\n        `in the chains array. Remove them or add the corresponding chain config.`,\n    );\n  }\n\n  return result;\n}\n","import type {\n  InputProofBytesType,\n  KmsDelegatedUserDecryptEIP712Type,\n  ZKProofLike,\n} from \"@zama-fhe/relayer-sdk/bundle\";\nimport type { Address, Hex } from \"viem\";\nimport type { FheChain } from \"../chains/types\";\nimport type { RelayerConfig } from \"../config/types\";\nimport { resolveChainRelayers } from \"../config/resolve\";\nimport type { TransportKeyPair } from \"../credentials/types\";\nimport { ConfigurationError } from \"../errors\";\nimport { assertNonNullable, toError } from \"../utils\";\nimport type { GenericLogger } from \"../worker/worker.types\";\nimport type { RelayerSDK } from \"./relayer-sdk\";\nimport type {\n  ClearValue,\n  DelegatedUserDecryptParams,\n  EIP712TypedData,\n  EncryptParams,\n  EncryptResult,\n  EncryptedValue,\n  FheEncryptionKey,\n  PublicDecryptResult,\n  PublicParamsData,\n  UserDecryptParams,\n} from \"./relayer-sdk.types\";\n\n/** Anything with a synchronous `terminate()` method (workers, pools). */\nexport interface WorkerLike {\n  terminate(): void;\n}\n\n/**\n * Owns chain management (chains / activeChain / switchChain) and delegates\n * every {@link RelayerSDK} operation to the relayer for the currently active\n * chain.\n *\n * Groups chains by relayer config reference identity, calls `createWorker`\n * once per group with all chain configs, then calls `createRelayer`\n * per chain with the shared worker.\n *\n * Workers/pools are held separately from relayers so the dispatcher can\n * terminate them directly — relayers never own worker lifecycle.\n */\nexport class RelayerDispatcher implements RelayerSDK, Disposable {\n  readonly #chains: Map<number, FheChain>;\n  readonly #relayers: Map<number, RelayerSDK>;\n  readonly #workers: readonly WorkerLike[];\n  #chainId: number;\n\n  constructor(\n    chains: readonly [FheChain, ...FheChain[]],\n    configs: Readonly<Record<number, RelayerConfig>>,\n    logger: GenericLogger,\n  ) {\n    if (chains.length === 0) {\n      throw new ConfigurationError(\"At least one chain is required.\");\n    }\n    this.#chains = new Map(chains.map((c) => [c.id, c]));\n    this.#chainId = chains[0].id;\n\n    const chainRelayers = resolveChainRelayers(chains, configs);\n\n    // Group chains by relayer config reference — same object = same group = shared worker.\n    const groups = new Map<RelayerConfig, Array<[number, FheChain]>>();\n    for (const [chainId, config] of chainRelayers) {\n      const key = config.relayer;\n      let group = groups.get(key);\n      if (!group) {\n        group = [];\n        groups.set(key, group);\n      }\n      group.push([chainId, config.chain]);\n    }\n\n    // For each group: create shared worker once, then create per-chain relayers.\n    const relayers = new Map<number, RelayerSDK>();\n    const workers: WorkerLike[] = [];\n    try {\n      for (const [relayerCfg, groupChains] of groups) {\n        const allChainConfigs = groupChains.map(([, chain]) => chain);\n        const worker = relayerCfg.createWorker?.(allChainConfigs, logger);\n        if (worker) {\n          workers.push(worker);\n        }\n        for (const [chainId, chain] of groupChains) {\n          relayers.set(chainId, relayerCfg.createRelayer(chain, worker, logger));\n        }\n      }\n    } catch (error) {\n      for (const w of workers) {\n        try {\n          w.terminate();\n        } catch {\n          /* best-effort cleanup */\n        }\n      }\n      throw error;\n    }\n\n    this.#relayers = relayers;\n    this.#workers = workers;\n  }\n\n  get chains(): readonly FheChain[] {\n    return [...this.#chains.values()];\n  }\n\n  get chain(): FheChain {\n    const chain = this.#chains.get(this.#chainId);\n    assertNonNullable(chain, \"RelayerDispatcher: chain\");\n    return chain;\n  }\n\n  switchChain(chainId: number): void {\n    if (!this.#chains.has(chainId)) {\n      throw new ConfigurationError(\n        `No relayer configured for chain ${chainId}. Add it to the chains array.`,\n      );\n    }\n    this.#chainId = chainId;\n  }\n\n  get #active(): RelayerSDK {\n    const relayer = this.#relayers.get(this.#chainId);\n    assertNonNullable(relayer, \"RelayerDispatcher: relayer\");\n    return relayer;\n  }\n\n  generateTransportKeyPair(): Promise<TransportKeyPair> {\n    return this.#active.generateTransportKeyPair();\n  }\n\n  createEIP712(\n    publicKey: Hex,\n    contractAddresses: Address[],\n    startTimestamp: number,\n    durationDays?: number,\n  ): Promise<EIP712TypedData> {\n    return this.#active.createEIP712(publicKey, contractAddresses, startTimestamp, durationDays);\n  }\n\n  encrypt(params: EncryptParams): Promise<EncryptResult> {\n    return this.#active.encrypt(params);\n  }\n\n  userDecrypt(params: UserDecryptParams): Promise<Readonly<Record<EncryptedValue, ClearValue>>> {\n    return this.#active.userDecrypt(params);\n  }\n\n  publicDecrypt(encryptedValues: EncryptedValue[]): Promise<PublicDecryptResult> {\n    return this.#active.publicDecrypt(encryptedValues);\n  }\n\n  createDelegatedUserDecryptEIP712(\n    publicKey: Hex,\n    contractAddresses: Address[],\n    delegatorAddress: Address,\n    startTimestamp: number,\n    durationDays?: number,\n  ): Promise<KmsDelegatedUserDecryptEIP712Type> {\n    return this.#active.createDelegatedUserDecryptEIP712(\n      publicKey,\n      contractAddresses,\n      delegatorAddress,\n      startTimestamp,\n      durationDays,\n    );\n  }\n\n  delegatedUserDecrypt(\n    params: DelegatedUserDecryptParams,\n  ): Promise<Readonly<Record<EncryptedValue, ClearValue>>> {\n    return this.#active.delegatedUserDecrypt(params);\n  }\n\n  requestZKProofVerification(zkProof: ZKProofLike): Promise<InputProofBytesType> {\n    return this.#active.requestZKProofVerification(zkProof);\n  }\n\n  fetchFheEncryptionKeyBytes(): Promise<FheEncryptionKey | null> {\n    return this.#active.fetchFheEncryptionKeyBytes();\n  }\n\n  getPublicParams(bits: number): Promise<PublicParamsData | null> {\n    return this.#active.getPublicParams(bits);\n  }\n\n  getAclAddress(): Promise<Address> {\n    return this.#active.getAclAddress();\n  }\n\n  terminate(): void {\n    const errors: Error[] = [];\n\n    // Clean up relayer-owned caches (no worker termination).\n    for (const r of new Set(this.#relayers.values())) {\n      try {\n        r.terminate();\n      } catch (e) {\n        errors.push(toError(e));\n      }\n    }\n\n    // Terminate the actual workers/pools (deduplicated).\n    for (const w of new Set(this.#workers)) {\n      try {\n        w.terminate();\n      } catch (e) {\n        errors.push(toError(e));\n      }\n    }\n\n    if (errors.length > 0) {\n      throw new AggregateError(errors, \"Failed to terminate relayer resources\");\n    }\n  }\n\n  [Symbol.dispose](): void {\n    this.terminate();\n  }\n}\n","import { type Address, getAddress, zeroAddress } from \"viem\";\nimport { z } from \"zod/mini\";\nimport type { TokenWrapperPairWithMetadata, PaginatedResult, TokenWrapperPair } from \"./contracts\";\nimport {\n  decimalsContract,\n  erc20TotalSupplyContract,\n  getConfidentialTokenAddressContract,\n  getTokenAddressContract,\n  getTokenPairContract,\n  getTokenPairsContract,\n  getTokenPairsLengthContract,\n  getTokenPairsSliceContract,\n  isConfidentialTokenValidContract,\n  nameContract,\n  symbolContract,\n} from \"./contracts\";\nimport { ConfigurationError } from \"./errors/relayer\";\nimport { mainnet, sepolia, hoodi, ingenTestnet, bscTestnet } from \"./chains\";\nimport { checksummedAddress, nonNegativeSeconds } from \"./schemas/primitives\";\nimport type { GenericProvider } from \"./types/provider\";\nimport { parseConfiguration } from \"./validation\";\n\n/**\n * Default wrappers registry addresses for known chains.\n * Only includes chains where a registry is deployed (excludes Hardhat).\n */\nexport const DefaultRegistryAddresses: Record<number, Address> = {\n  [mainnet.id]: mainnet.registryAddress,\n  [sepolia.id]: sepolia.registryAddress,\n  [hoodi.id]: hoodi.registryAddress,\n  [ingenTestnet.id]: ingenTestnet.registryAddress,\n  [bscTestnet.id]: bscTestnet.registryAddress,\n};\n\n/** Default registry TTL in seconds (24 hours). */\nexport const DEFAULT_REGISTRY_TTL_SECONDS = 86_400;\n\n/** Per-chain wrappers-registry address overrides. */\nexport const RegistryAddressesSchema = z.record(\n  z.string().check(z.regex(/^\\d+$/, \"expected numeric chain id key\")),\n  checksummedAddress,\n);\n\n/** TTL (seconds) for cached registry results. `0` means entries expire immediately. */\nexport const RegistryTTLSchema = nonNegativeSeconds;\n\n/** Default page size for {@link WrappersRegistry.listPairs}. */\nconst DEFAULT_PAGE_SIZE = 100;\n\n/** Configuration for {@link WrappersRegistry}. */\nexport interface WrappersRegistryConfig {\n  /** Read-only chain provider used for every registry lookup. */\n  provider: GenericProvider;\n  /**\n   * Per-chain registry address overrides, merged on top of\n   * {@link DefaultRegistryAddresses}. Use this to supply a registry\n   * address for custom or local chains (e.g. Hardhat).\n   *\n   * @example\n   * ```ts\n   * new WrappersRegistry({\n   *   provider,\n   *   registryAddresses: { [31337]: \"0xYourHardhatRegistry\" },\n   * });\n   * ```\n   */\n  registryAddresses?: Record<number, Address>;\n  /**\n   * How long cached registry results remain valid, in seconds.\n   * Default: `86400` (24 hours).\n   */\n  registryTTL?: number;\n}\n\n/** Options for {@link WrappersRegistry.listPairs}. */\nexport interface ListPairsOptions {\n  /** Page number (1-indexed). Default: `1`. */\n  page?: number;\n  /** Number of items per page. Default: `100`. */\n  pageSize?: number;\n  /**\n   * When `true`, fetches on-chain metadata (name, symbol, decimals) for both\n   * the ERC-20 and confidential token, plus totalSupply for the ERC-20.\n   * Default: `false`.\n   */\n  metadata?: boolean;\n}\n\n/** Shorter TTL for negative lookups (5 minutes) so newly registered tokens are discoverable quickly. */\nconst NEGATIVE_CACHE_TTL_MS = 5 * 60 * 1000;\n\n/** Cache entry with expiry timestamp. */\ninterface CacheEntry<T> {\n  data: T;\n  expiresAt: number;\n}\n\n/**\n * High-level interface for the on-chain token wrappers registry.\n *\n * Uses the configured {@link GenericProvider} to resolve the correct registry\n * contract address for the current chain and exposes typed read helpers for\n * every registry query. Results are cached in memory with a configurable TTL\n * (default 24 hours).\n *\n * @example\n * ```ts\n * const registry = new WrappersRegistry({ provider });\n *\n * // Paginated listing\n * const page1 = await registry.listPairs({ page: 1, pageSize: 20 });\n *\n * // Structured lookups\n * const result = await registry.getConfidentialToken(erc20Address);\n * if (result) console.log(result.confidentialTokenAddress);\n *\n * // Force refresh\n * registry.refresh();\n * ```\n */\nexport class WrappersRegistry {\n  readonly provider: GenericProvider;\n  readonly #addresses: Record<number, Address>;\n  readonly #ttlMs: number;\n  readonly #cache = new Map<string, CacheEntry<unknown>>();\n\n  constructor(config: WrappersRegistryConfig) {\n    this.provider = config.provider;\n    this.#addresses = Object.assign(\n      {},\n      DefaultRegistryAddresses,\n      parseConfiguration(z.optional(RegistryAddressesSchema), config.registryAddresses),\n    );\n    this.#ttlMs =\n      parseConfiguration(RegistryTTLSchema, config.registryTTL ?? DEFAULT_REGISTRY_TTL_SECONDS) *\n      1000;\n  }\n\n  /**\n   * Synchronous lookup of the registry address for a given chain ID.\n   * Returns `undefined` if no address is configured for that chain.\n   */\n  getAddress(chainId: number): Address | undefined {\n    return this.#addresses[chainId];\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cache helpers\n  // ---------------------------------------------------------------------------\n\n  #getCached<T>(key: string): T | undefined {\n    const entry = this.#cache.get(key);\n    if (!entry) {\n      return undefined;\n    }\n    if (Date.now() >= entry.expiresAt) {\n      this.#cache.delete(key);\n      return undefined;\n    }\n    return entry.data as T;\n  }\n\n  #setCached<T>(key: string, data: T, ttlMs = this.#ttlMs): T {\n    this.#cache.set(key, {\n      data,\n      expiresAt: Date.now() + ttlMs,\n    });\n    return data;\n  }\n\n  /**\n   * Force-invalidate the in-memory cache. The next call to any read method\n   * will fetch fresh data from the chain.\n   */\n  refresh(): void {\n    this.#cache.clear();\n  }\n\n  /**\n   * The cache TTL in milliseconds.\n   * Exposed so query option factories can set a matching `staleTime`.\n   */\n  get ttlMs(): number {\n    return this.#ttlMs;\n  }\n\n  // ---------------------------------------------------------------------------\n  // Registry address resolution\n  // ---------------------------------------------------------------------------\n\n  /**\n   * Resolve the registry contract address for the current chain.\n   *\n   * Priority: `registryAddresses[chainId]` \\> built-in default.\n   *\n   * @returns The registry contract address for the connected chain.\n   * @throws if no address is configured for the chain. {@link ConfigurationError}\n   */\n  async getRegistryAddress(): Promise<Address> {\n    const chainId = await this.provider.getChainId();\n    const address = this.#addresses[chainId];\n\n    if (!address) {\n      throw new ConfigurationError(\n        `No wrappers registry address configured for chain ${chainId}.\\n` +\n          `Pass a registryAddresses entry for this chain.`,\n      );\n    }\n\n    return getAddress(address);\n  }\n\n  // ---------------------------------------------------------------------------\n  // Paginated listing\n  // ---------------------------------------------------------------------------\n\n  /**\n   * List token wrapper pairs with page-based pagination.\n   *\n   * Internally maps to `getTokenConfidentialTokenPairsSlice` on-chain.\n   *\n   * @param options - Pagination and enrichment options.\n   * @returns A {@link PaginatedResult} of pairs.\n   *\n   * @example\n   * ```ts\n   * const result = await registry.listPairs({ page: 1, pageSize: 20 });\n   * console.log(`${result.total} pairs, showing page ${result.page}`);\n   *\n   * // With on-chain metadata\n   * const withMeta = await registry.listPairs({ metadata: true, pageSize: 10 });\n   * for (const pair of withMeta.items) {\n   *   console.log(pair.underlying.symbol, \"→\", pair.confidential.symbol);\n   * }\n   * ```\n   */\n  async listPairs(\n    options: ListPairsOptions & { metadata: true },\n  ): Promise<PaginatedResult<TokenWrapperPairWithMetadata>>;\n  async listPairs(options?: ListPairsOptions): Promise<PaginatedResult<TokenWrapperPair>>;\n  async listPairs(\n    options: ListPairsOptions = {},\n  ): Promise<PaginatedResult<TokenWrapperPair | TokenWrapperPairWithMetadata>> {\n    const page = options.page ?? 1;\n    const pageSize = options.pageSize ?? DEFAULT_PAGE_SIZE;\n    const metadata = options.metadata ?? false;\n\n    if (page < 1) {\n      throw new ConfigurationError(`page must be >= 1, got ${page}`);\n    }\n    if (pageSize < 1) {\n      throw new ConfigurationError(`pageSize must be >= 1, got ${pageSize}`);\n    }\n\n    const registry = await this.getRegistryAddress();\n\n    // Fetch total (cached)\n    const totalCacheKey = `total:${registry}`;\n    let total = this.#getCached<number>(totalCacheKey);\n    if (total === undefined) {\n      const raw = await this.provider.readContract(getTokenPairsLengthContract(registry));\n      total = this.#setCached(totalCacheKey, Number(raw));\n    }\n\n    // Compute slice indices, clamping toIndex to total\n    const fromIndex = BigInt((page - 1) * pageSize);\n    const clampedToIndex =\n      fromIndex + BigInt(pageSize) > BigInt(total) ? BigInt(total) : fromIndex + BigInt(pageSize);\n\n    // Page beyond total — return empty\n    if (fromIndex >= BigInt(total)) {\n      return { items: [], total, page, pageSize };\n    }\n\n    // Fetch slice (cached)\n    const sliceCacheKey = `slice:${registry}:${fromIndex}:${clampedToIndex}`;\n    let items = this.#getCached<TokenWrapperPair[]>(sliceCacheKey);\n    if (items === undefined) {\n      const raw = await this.provider.readContract(\n        getTokenPairsSliceContract(registry, fromIndex, clampedToIndex),\n      );\n      items = this.#setCached(sliceCacheKey, [...raw]);\n    }\n\n    if (!metadata) {\n      return { items, total, page, pageSize };\n    }\n\n    // Enrich with on-chain metadata (resilient — individual failures don't break the batch)\n    const metadataCacheKey = `metadata:${registry}:${fromIndex}:${clampedToIndex}`;\n    let metadataItems = this.#getCached<TokenWrapperPairWithMetadata[]>(metadataCacheKey);\n    if (metadataItems === undefined) {\n      const settled = await Promise.allSettled(items.map((pair) => this.#pairWithMetadata(pair)));\n      const hasFailures = settled.some((r) => r.status === \"rejected\");\n      const enriched = settled.map((result, i) =>\n        result.status === \"fulfilled\"\n          ? result.value\n          : Object.assign({}, items[i], {\n              metadataFailed: true as const,\n              underlying: {\n                name: \"Unknown\",\n                symbol: \"???\",\n                decimals: 0,\n                totalSupply: 0n,\n              },\n              confidential: { name: \"Unknown\", symbol: \"???\", decimals: 0 },\n            }),\n      );\n      // Use negative cache TTL when any metadata fetch failed so retries happen sooner\n      metadataItems = this.#setCached(\n        metadataCacheKey,\n        enriched,\n        hasFailures ? NEGATIVE_CACHE_TTL_MS : undefined,\n      );\n    }\n\n    return { items: metadataItems, total, page, pageSize };\n  }\n\n  async #pairWithMetadata(pair: TokenWrapperPair): Promise<TokenWrapperPairWithMetadata> {\n    const [uName, uSymbol, uDecimals, uTotalSupply, cName, cSymbol, cDecimals] = await Promise.all([\n      this.provider.readContract(nameContract(pair.tokenAddress)),\n      this.provider.readContract(symbolContract(pair.tokenAddress)),\n      this.provider.readContract(decimalsContract(pair.tokenAddress)),\n      this.provider.readContract(erc20TotalSupplyContract(pair.tokenAddress)),\n      this.provider.readContract(nameContract(pair.confidentialTokenAddress)),\n      this.provider.readContract(symbolContract(pair.confidentialTokenAddress)),\n      this.provider.readContract(decimalsContract(pair.confidentialTokenAddress)),\n    ]);\n\n    return {\n      ...pair,\n      underlying: {\n        name: uName,\n        symbol: uSymbol,\n        decimals: uDecimals,\n        totalSupply: uTotalSupply,\n      },\n      confidential: { name: cName, symbol: cSymbol, decimals: cDecimals },\n    };\n  }\n\n  // ---------------------------------------------------------------------------\n  // Structured single-pair lookups\n  // ---------------------------------------------------------------------------\n\n  /**\n   * Look up the confidential token for a given plain ERC-20 address.\n   *\n   * @param tokenAddress - The plain ERC-20 token address.\n   * @returns The lookup result, or `null` if the token has never been registered.\n   *   **Note:** revoked tokens (registered then invalidated) return a non-null result\n   *   with `isValid: false`. Check `result.isValid` explicitly rather than using\n   *   `if (result)` to guard against processing revoked tokens.\n   *\n   * @example\n   * ```ts\n   * const result = await registry.getConfidentialToken(usdcAddress);\n   * if (result?.isValid) {\n   *   console.log(result.confidentialTokenAddress);\n   * }\n   * ```\n   */\n  async getConfidentialToken(\n    tokenAddress: Address,\n  ): Promise<{ confidentialTokenAddress: Address; isValid: boolean } | null> {\n    const registry = await this.getRegistryAddress();\n    const normalized = getAddress(tokenAddress);\n\n    const cacheKey = `ct:${registry}:${normalized}`;\n    const cached = this.#getCached<{\n      confidentialTokenAddress: Address;\n      isValid: boolean;\n    } | null>(cacheKey);\n    if (cached !== undefined) {\n      return cached;\n    }\n\n    const [isValid, confidentialTokenAddress] = await this.provider.readContract(\n      getConfidentialTokenAddressContract(registry, normalized),\n    );\n\n    // Zero address means the token is not registered at all (never seen by the registry).\n    // A non-zero address with isValid=false means it was registered but later revoked.\n    if (confidentialTokenAddress === zeroAddress) {\n      return this.#setCached(cacheKey, null, NEGATIVE_CACHE_TTL_MS);\n    }\n\n    return this.#setCached(cacheKey, { confidentialTokenAddress, isValid });\n  }\n\n  /**\n   * Reverse lookup — find the plain ERC-20 for a given confidential token.\n   *\n   * @param confidentialTokenAddress - The confidential token address.\n   * @returns The lookup result, or `null` if no pair is registered.\n   *\n   * @example\n   * ```ts\n   * const result = await registry.getUnderlyingToken(cUsdcAddress);\n   * if (result) {\n   *   console.log(result.tokenAddress, result.isValid);\n   * }\n   * ```\n   */\n  async getUnderlyingToken(\n    confidentialTokenAddress: Address,\n  ): Promise<{ tokenAddress: Address; isValid: boolean } | null> {\n    const registry = await this.getRegistryAddress();\n    const normalized = getAddress(confidentialTokenAddress);\n\n    const cacheKey = `ut:${registry}:${normalized}`;\n    const cached = this.#getCached<{\n      tokenAddress: Address;\n      isValid: boolean;\n    } | null>(cacheKey);\n    if (cached !== undefined) {\n      return cached;\n    }\n\n    const [isValid, tokenAddress] = await this.provider.readContract(\n      getTokenAddressContract(registry, normalized),\n    );\n\n    // Zero address means the confidential token is not registered at all.\n    // A non-zero address with isValid=false means it was registered but later revoked.\n    if (tokenAddress === zeroAddress) {\n      return this.#setCached(cacheKey, null, NEGATIVE_CACHE_TTL_MS);\n    }\n\n    return this.#setCached(cacheKey, { tokenAddress, isValid });\n  }\n\n  // ---------------------------------------------------------------------------\n  // Low-level pass-through methods (backward compatible)\n  // ---------------------------------------------------------------------------\n\n  /**\n   * Fetch all token wrapper pairs from the registry.\n   *\n   * @returns All registered `TokenWrapperPair` entries.\n   */\n  async getTokenPairs(): Promise<readonly TokenWrapperPair[]> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(getTokenPairsContract(registry));\n  }\n\n  /**\n   * Get the total number of token wrapper pairs.\n   *\n   * @returns The count as a bigint.\n   */\n  async getTokenPairsLength(): Promise<bigint> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(getTokenPairsLengthContract(registry));\n  }\n\n  /**\n   * Fetch a range of token wrapper pairs (paginated by index).\n   *\n   * @param fromIndex - Start index (inclusive).\n   * @param toIndex - End index (exclusive).\n   * @returns The slice of `TokenWrapperPair` entries.\n   */\n  async getTokenPairsSlice(\n    fromIndex: bigint,\n    toIndex: bigint,\n  ): Promise<readonly TokenWrapperPair[]> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(getTokenPairsSliceContract(registry, fromIndex, toIndex));\n  }\n\n  /**\n   * Fetch a single token wrapper pair by index.\n   *\n   * @param index - Zero-based pair index.\n   * @returns The `TokenWrapperPair` at that index.\n   */\n  async getTokenPair(index: bigint): Promise<TokenWrapperPair> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(getTokenPairContract(registry, index));\n  }\n\n  /**\n   * Look up the confidential token address for a given plain ERC-20 token.\n   *\n   * @param tokenAddress - The plain ERC-20 token address.\n   * @returns A tuple `[isValid, confidentialTokenAddress]`. `isValid` is `true` only for a\n   *   registered, non-revoked wrapper. The address is the zero address when no pair is registered.\n   *   A non-zero address with `isValid=false` means the wrapper was registered but later revoked.\n   */\n  async getConfidentialTokenAddress(tokenAddress: Address): Promise<readonly [boolean, Address]> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(\n      getConfidentialTokenAddressContract(registry, getAddress(tokenAddress)),\n    );\n  }\n\n  /**\n   * Reverse lookup — find the plain ERC-20 for a given confidential token.\n   *\n   * @param confidentialTokenAddress - The confidential token address.\n   * @returns A tuple `[isValid, tokenAddress]`. `isValid` is `true` only for a registered,\n   *   non-revoked wrapper. The address is the zero address when no pair is registered.\n   *   A non-zero address with `isValid=false` means the wrapper was registered but later revoked.\n   */\n  async getTokenAddress(confidentialTokenAddress: Address): Promise<readonly [boolean, Address]> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(\n      getTokenAddressContract(registry, getAddress(confidentialTokenAddress)),\n    );\n  }\n\n  /**\n   * Check whether a confidential token is registered and valid.\n   *\n   * @param confidentialTokenAddress - The confidential token address to check.\n   * @returns `true` if the token is a known valid wrapper in the registry.\n   */\n  async isConfidentialTokenValid(confidentialTokenAddress: Address): Promise<boolean> {\n    const registry = await this.getRegistryAddress();\n    return this.provider.readContract(\n      isConfidentialTokenValidContract(registry, getAddress(confidentialTokenAddress)),\n    );\n  }\n}\n","import {\n  DEFAULT_TRANSPORT_KEY_PAIR_TTL_SECONDS,\n  DEFAULT_PERMIT_DURATION_DAYS,\n} from \"../credentials/credential-service\";\nimport { TransportKeyPairTTLSchema, PermitTTLSchema } from \"../credentials/schemas\";\nimport { LoggerService } from \"../services/logger-service\";\nimport { RelayerDispatcher } from \"../relayer/relayer-dispatcher\";\nimport type { GenericProvider, GenericSigner } from \"../types\";\nimport { DEFAULT_REGISTRY_TTL_SECONDS, RegistryTTLSchema } from \"../wrappers-registry\";\nimport { parseConfiguration } from \"../validation\";\nimport { resolveStorage } from \"./resolve\";\nimport type { ZamaConfig, ZamaConfigBase } from \"./types\";\n\n/**\n * @internal Shared config builder — not part of the public API.\n *\n * Applies defaults, validates TTLs, and resolves storage so the\n * returned config is fully populated and ready for `ZamaSDK`.\n */\nexport function buildZamaConfig(\n  signer: GenericSigner | undefined,\n  provider: GenericProvider,\n  params: ZamaConfigBase,\n): ZamaConfig {\n  const { storage, permitStorage } = resolveStorage(params.storage, params.permitStorage);\n  const logger = new LoggerService(params.logger);\n  const relayer = new RelayerDispatcher(params.chains, params.relayers, logger);\n\n  return {\n    chains: params.chains,\n    relayer,\n    provider,\n    signer,\n    storage,\n    permitStorage,\n    transportKeyPairTTL: parseConfiguration(\n      TransportKeyPairTTLSchema,\n      params.transportKeyPairTTL ?? DEFAULT_TRANSPORT_KEY_PAIR_TTL_SECONDS,\n    ),\n    permitTTL: parseConfiguration(\n      PermitTTLSchema,\n      params.permitTTL ?? DEFAULT_PERMIT_DURATION_DAYS,\n    ),\n    registryTTL: parseConfiguration(\n      RegistryTTLSchema,\n      params.registryTTL ?? DEFAULT_REGISTRY_TTL_SECONDS,\n    ),\n    logger,\n    onEvent: params.onEvent,\n  } as unknown as ZamaConfig;\n}\n","import type {\n  WalletAccount,\n  WalletAccountChange,\n  WalletAccountListener,\n  WalletAccountStore,\n} from \"../types\";\n\nexport function walletAccountsEqual(\n  a: WalletAccount | undefined,\n  b: WalletAccount | undefined,\n): boolean {\n  return a?.address === b?.address && a?.chainId === b?.chainId;\n}\n\n/**\n * Writable {@link WalletAccountStore} for custom signer adapters. Adapters call\n * {@link MutableWalletAccountStore.setSnapshot} when their underlying wallet\n * provider notifies of a connect, disconnect, account change, or chain change.\n *\n * Most custom adapters should use the {@link createWalletAccountStore} factory\n * rather than instantiating this class directly.\n */\nexport class MutableWalletAccountStore implements WalletAccountStore {\n  readonly #listeners = new Set<WalletAccountListener>();\n  #snapshot: WalletAccount | undefined;\n  #resolved: boolean;\n\n  constructor(initial?: WalletAccount) {\n    this.#snapshot = initial;\n    this.#resolved = initial !== undefined;\n  }\n\n  getSnapshot(): WalletAccount | undefined {\n    return this.#snapshot;\n  }\n\n  /**\n   * Whether the store has received at least one snapshot (via the constructor\n   * or {@link setSnapshot}). Adapters whose initial account is only available\n   * asynchronously start unresolved; callers can distinguish \"still loading\"\n   * from \"wallet not connected\".\n   */\n  isReady(): boolean {\n    return this.#resolved;\n  }\n\n  /**\n   * Push a new wallet account snapshot. No-op when the next value is\n   * value-equal to the current one. Emits `{ previous, next }` to every\n   * subscriber otherwise.\n   */\n  setSnapshot(next: WalletAccount | undefined): void {\n    this.#resolved = true;\n    const previous = this.#snapshot;\n    if (walletAccountsEqual(previous, next)) {\n      return;\n    }\n    this.#snapshot = next;\n    this.#emit({ previous, next });\n  }\n\n  subscribe(listener: WalletAccountListener): () => void {\n    this.#listeners.add(listener);\n    const snapshot = this.#snapshot;\n    if (snapshot) {\n      listener({ previous: undefined, next: snapshot });\n    }\n    return () => {\n      this.#listeners.delete(listener);\n    };\n  }\n\n  #emit(change: WalletAccountChange): void {\n    for (const listener of this.#listeners) {\n      listener(change);\n    }\n  }\n}\n\n/**\n * Create a {@link MutableWalletAccountStore} for a custom {@link GenericSigner}\n * adapter.\n *\n * @param initial - Optional initial wallet account snapshot.\n */\nexport function createWalletAccountStore(initial?: WalletAccount): MutableWalletAccountStore {\n  return new MutableWalletAccountStore(initial);\n}\n","import type { Hex } from \"viem\";\nimport { WalletNotConnectedError } from \"../errors\";\nimport type { EIP712TypedData } from \"../relayer/relayer-sdk.types\";\nimport type {\n  ContractAbi,\n  GenericSigner,\n  WalletAccount,\n  WriteContractArgs,\n  WriteContractConfig,\n  WriteFunctionName,\n} from \"../types\";\nimport { MutableWalletAccountStore } from \"./wallet-account-store\";\n\n/**\n * Abstract base class that implements the shared {@link GenericSigner}\n * boilerplate: wallet-account store, `requireWalletAccount`, idempotent\n * `dispose` / `Disposable`. Subclasses provide `signTypedData`,\n * `writeContract`, and optionally override `onDispose` for cleanup.\n *\n * Using this class is optional — implementing {@link GenericSigner} directly\n * with {@link createWalletAccountStore} remains fully supported.\n */\nexport abstract class BaseSigner implements GenericSigner, Disposable {\n  readonly walletAccount: MutableWalletAccountStore;\n  #disposed = false;\n\n  constructor(initial?: WalletAccount) {\n    this.walletAccount = new MutableWalletAccountStore(initial);\n  }\n\n  requireWalletAccount(operation: string): WalletAccount {\n    const account = this.walletAccount.getSnapshot();\n    if (!account) {\n      throw new WalletNotConnectedError(operation);\n    }\n    return account;\n  }\n\n  abstract signTypedData(typedData: EIP712TypedData): Promise<Hex>;\n\n  abstract writeContract<\n    const TAbi extends ContractAbi,\n    TFunctionName extends WriteFunctionName<TAbi>,\n    const TArgs extends WriteContractArgs<TAbi, TFunctionName>,\n  >(config: WriteContractConfig<TAbi, TFunctionName, TArgs>): Promise<Hex>;\n\n  dispose(): void {\n    if (this.#disposed) {\n      return;\n    }\n    this.#disposed = true;\n    this.onDispose();\n  }\n\n  [Symbol.dispose](): void {\n    this.dispose();\n  }\n\n  protected onDispose(): void {}\n}\n"],"mappings":"qlBAQA,SAAgB,EAA2B,EAA2C,CAEpF,MAAO,WAAW,GACpB,CAEA,SAAgB,EAAmB,EAAgC,CACjE,MAAO,WAAW,EAAM,cAAc,GAAG,EAAM,QAAQ,GAAG,EAAM,kBAClE,CAEA,SAAgB,EAAmB,EAA2C,CAC5E,MAAO,iBAAiB,GAC1B,CCVA,SAAgB,EAAS,EAAoC,CAC3D,OAAO,EAAW,CAAK,CACzB,CAGA,MAAa,EAAM,EAAE,OAClB,GAAM,OAAO,GAAM,UAAY,GAAM,EAAG,CAAE,OAAQ,EAAK,CAAC,EACzD,iCACF,EAGa,GAAa,EAAE,OACzB,GAAM,OAAO,GAAM,UAAY,GAAU,EAAG,CAAE,OAAQ,EAAM,CAAC,EAC9D,sBACF,EAGa,EAAqB,EAAE,KAAK,GAAY,EAAE,UAAU,CAAQ,CAAC,EAG7D,EAAc,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,EAG3C,EAAkB,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EAG5C,GAAqB,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,EAGlD,GAAe,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EAGzC,GAAU,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EC/BjD,SAAgB,GAAqB,CACnC,OAAO,KAAK,MAAM,KAAK,IAAI,EAAI,GAAI,CACrC,CAGA,SAAgB,EAAmB,EAAqD,CACtF,MAAO,CAAC,GAAG,IAAI,IAAI,EAAU,IAAI,CAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CACxD,CCNA,MAAM,EAA2B,mEAC3B,EAAiB,sDAGV,EAAqC,IAAM,MAI3C,EAA4B,EACtC,IAAI,CAAE,MAAO,CAAyB,CAAC,CAAC,CACxC,MACC,EAAE,SAAS,CAAE,MAAO,CAAyB,CAAC,EAC9C,EAAE,QACA,EACA,gEAAgE,EAAmC,aACrG,CACF,EAEW,EAAkB,EAC5B,IAAI,CAAE,MAAO,CAAe,CAAC,CAAC,CAC9B,MAAM,EAAE,SAAS,CAAE,MAAO,CAAe,CAAC,CAAC,EAEjC,EAA+B,EAAE,OAAO,CACnD,UAAW,EACX,WAAY,EACZ,UAAW,EACX,UAAW,CACb,CAAC,EAEY,EAAmB,EAAE,OAAO,CACvC,iBAAkB,EAClB,cAAe,EACf,iBAAkB,EAClB,WACA,wBAAyB,EAAE,MAAM,CAAkB,CAAC,CAAC,MAAM,EAAE,UAAA,EAAkC,CAAC,EAChG,UAAW,EACX,eAAgB,EAChB,aAAc,EAChB,CAAC,EAEY,EAAuB,EAAE,MAAM,CAAgB,EAE/C,EAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,EC7BlD,IAAa,GAAb,KAAmC,CACjC,GACA,GACA,GACA,GACA,GAAoB,IAAI,IAExB,YAAY,EAAqC,CAC/C,KAAKA,GAAa,EAAO,UACzB,KAAKC,GAAW,EAAO,QACvB,KAAKC,GAAO,EAAO,IACnB,KAAKC,GAAU,EAAO,MACxB,CAEA,MAAM,WAAW,EAA2E,CAC1F,IAAM,EAAM,EAA2B,CAAa,EAC9C,EAAM,MAAM,KAAKF,GAAS,IAAI,CAAG,EACvC,GAAI,GAAQ,KACV,OAAO,KAET,IAAM,EAAS,EAA6B,UAAU,CAAG,EACzD,GAAI,CAAC,EAAO,QAMV,OALA,MAAM,EACJ,sCACM,KAAKA,GAAS,OAAO,CAAG,EAC9B,KAAKE,EACP,EACO,KAET,IAAM,EAAS,EAAO,KAStB,OARI,EAAW,GAAK,EAAO,WACzB,MAAM,EACJ,sCACM,KAAKF,GAAS,OAAO,CAAG,EAC9B,KAAKE,EACP,EACO,MAEF,CACT,CAOA,MAAM,YAAY,EAAoE,CACpF,IAAM,EAAW,KAAKC,GAAS,IAAI,CAAa,EAChD,GAAI,EACF,OAAO,EAGT,IAAM,GAAW,SAAY,CAC3B,IAAM,EAAS,MAAM,KAAK,WAAW,CAAa,EAClD,GAAI,IAAW,KACb,OAAO,EAET,IAAM,EAAQ,MAAM,KAAKJ,GAAW,EAC9B,EAAY,EAAW,EACvB,EAAiC,CACrC,UAAW,EAAM,UACjB,WAAY,EAAM,WAClB,YACA,UAAW,EAAY,KAAKE,EAC9B,EACM,EAAM,EAA2B,CAAa,EAMpD,OALA,MAAM,EACJ,iCACM,KAAKD,GAAS,IAAI,EAAK,CAAM,EACnC,KAAKE,EACP,EACO,CACT,EAAA,CAAG,CAAC,CAAC,YAAc,CACjB,KAAKC,GAAS,OAAO,CAAa,CACpC,CAAC,EAGD,OADA,KAAKA,GAAS,IAAI,EAAe,CAAO,EACjC,CACT,CAGA,MAAM,MAAM,EAAkD,CAC5D,IAAM,EAAM,EAA2B,CAAa,EACpD,MAAM,EAAQ,sCAAyC,KAAKH,GAAS,OAAO,CAAG,EAAG,KAAKE,EAAO,CAChG,CACF,ECvGA,SAAgB,EACd,EACA,EACsB,CACtB,IAAM,EAAU,IAAI,IAAI,EAAY,QAAS,GAAM,EAAE,uBAAuB,CAAC,EAC7E,OAAO,EAAU,OAAQ,GAAS,CAAC,EAAQ,IAAI,CAAI,CAAC,CACtD,CAGA,SAAgB,GAAe,EAAkE,CAC/F,IAAM,EAAiC,CAAC,EACxC,IAAK,IAAI,EAAI,EAAG,EAAI,EAAU,OAAQ,GAAA,GACpC,EAAO,KAAK,EAAU,MAAM,EAAG,EAAA,EAA4B,CAAC,EAE9D,OAAO,CACT,CAGA,SAAgB,GACd,EACA,EACA,EACc,CACd,OAAO,EAAY,OAChB,GACC,EAAE,mBAAqB,GACvB,EAAa,EAAE,eAAiB,EAAE,aAAA,KACtC,CACF,CAGA,SAAgB,GACd,EACA,EACc,CACd,IAAM,EAAY,IAAI,IAAI,CAAS,EACnC,OAAO,EAAY,OAAQ,GAAM,CAAC,EAAE,wBAAwB,KAAM,GAAM,EAAU,IAAI,CAAC,CAAC,CAAC,CAC3F,CAGA,SAAgB,GAA8B,EAAiB,EAAsB,CACnF,MAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAC7C,CASA,SAAgB,GACd,EACA,EACA,EACmB,CACnB,IAAM,EAAe,IAAI,IAAI,CAAS,EAChC,EAAW,EAAQ,OACtB,GAAM,IAAI,IAAI,CAAC,GAAG,EAAE,wBAAyB,GAAG,CAAS,CAAC,CAAA,CAAE,MAAA,EAC/D,EACA,GAAI,EAAS,SAAW,EACtB,OAAO,KAGT,SAAS,EAAQ,EAAe,CAC9B,OAAO,EAAE,wBAAwB,QAAQ,EAAG,IAAM,GAAK,KAAa,IAAI,CAAC,EAAY,CAAC,CACxF,CAEA,IAAM,EAAa,KAAK,IAAI,GAAG,EAAS,IAAI,CAAO,CAAC,EAEpD,OADgB,EAAS,OAAQ,GAAM,EAAQ,CAAC,IAAM,CACzC,CAAC,CAAC,QAAQ,EAAG,IAAO,EAAE,eAAiB,EAAE,eAAiB,EAAI,CAAE,CAC/E,CCnDA,IAAa,GAAb,KAA6B,CAC3B,GACA,GAEA,YAAY,EAA+B,CACzC,KAAKE,GAAW,EAAO,QACvB,KAAKC,GAAU,EAAO,MACxB,CAGA,MAAM,KAAK,EAA+C,CACxD,IAAM,EAAM,EAAmB,CAAK,EAC9B,EAAM,MAAM,KAAKD,GAAS,IAAI,CAAG,EACvC,GAAI,GAAQ,KACV,MAAO,CAAC,EAEV,IAAM,EAAS,EAAqB,UAAU,CAAG,EAMjD,OALK,EAAO,QAKL,EAAO,MAJZ,MAAM,KAAKE,GAAa,CAAG,EAC3B,MAAM,KAAKC,GAAc,CAAK,EACvB,CAAC,EAGZ,CAMA,MAAM,mBAAmB,EAAwB,EAA8C,CAC7F,IAAM,EAAM,MAAM,KAAK,KAAK,CAAK,EAC3B,EAAS,GAAc,EAAK,EAAkB,KAAK,MAAM,KAAK,IAAI,EAAI,GAAI,CAAC,EAEjF,GAAI,EAAO,SAAW,EAAI,OAAQ,CAChC,IAAM,EAAM,EAAmB,CAAK,EAChC,EAAO,SAAW,GACpB,MAAM,KAAKD,GAAa,CAAG,EAC3B,MAAM,KAAKC,GAAc,CAAK,GAE9B,MAAM,EAAQ,0BAA6B,KAAKH,GAAS,IAAI,EAAK,CAAM,EAAG,KAAKC,EAAO,CAE3F,CACA,OAAO,CACT,CAQA,MAAM,OAAO,EAAwB,EAAmD,CACtF,GAAI,EAAY,SAAW,EACzB,OAEF,IAAM,EAAY,EAAY,IAAK,GAAM,EAAiB,MAAM,CAAC,CAAC,EAC5D,EAAW,MAAM,KAAK,KAAK,CAAK,EACtC,MAAM,KAAKD,GAAS,IAAI,EAAmB,CAAK,EAAG,CAAC,GAAG,EAAU,GAAG,CAAS,CAAC,EAC9E,MAAM,KAAKI,GAAY,CAAK,CAC9B,CAUA,MAAM,QACJ,EACA,EACA,EACe,CACf,IAAM,EAAY,EAAiB,MAAM,CAAa,EAEhD,GAAW,MADM,KAAK,KAAK,CAAK,EAAA,CACZ,OAAQ,GAAM,EAAE,YAAc,CAAY,EACpE,MAAM,KAAKJ,GAAS,IAAI,EAAmB,CAAK,EAAG,CAAC,GAAG,EAAU,CAAS,CAAC,EAC3E,MAAM,KAAKI,GAAY,CAAK,CAC9B,CAQA,MAAM,sBACJ,EACA,EACe,CACf,IAAM,EAAW,MAAM,KAAK,KAAK,CAAK,EACtC,GAAI,EAAS,SAAW,EACtB,OAEF,IAAM,EAAM,EAAmB,CAAK,EAC9B,EAAO,GAAuB,EAAU,CAAiB,EAC3D,EAAK,SAAW,GAClB,MAAM,KAAKF,GAAa,CAAG,EAC3B,MAAM,KAAKC,GAAc,CAAK,GAE9B,MAAM,KAAKH,GAAS,IAAI,EAAK,CAAI,CAErC,CAMA,MAAM,kBAAkB,EAAkD,CACxE,IAAM,EAAW,EAAmB,CAAa,EAC3C,EAAY,MAAM,KAAKK,GAAW,CAAQ,EAChD,MAAM,QAAQ,IAAI,EAAU,IAAK,GAAM,KAAKH,GAAa,CAAC,CAAC,CAAC,EAC5D,MAAM,EAAQ,0BAA6B,KAAKF,GAAS,OAAO,CAAQ,EAAG,KAAKC,EAAO,CACzF,CAEA,KAAMI,GAAW,EAAqC,CACpD,IAAM,EAAM,MAAM,KAAKL,GAAS,IAAI,CAAQ,EAC5C,GAAI,GAAQ,KACV,MAAO,CAAC,EAEV,IAAM,EAAS,EAAiB,UAAU,CAAG,EAK7C,OAJK,EAAO,QAIL,EAAO,MAHZ,MAAM,EAAQ,0BAA6B,KAAKA,GAAS,OAAO,CAAQ,EAAG,KAAKC,EAAO,EAChF,CAAC,EAGZ,CAEA,KAAMG,GAAY,EAAuC,CACvD,IAAM,EAAW,EAAmB,EAAM,aAAa,EACjD,EAAW,EAAmB,CAAK,EACnC,EAAO,MAAM,KAAKC,GAAW,CAAQ,EACvC,EAAK,SAAS,CAAQ,GAG1B,MAAM,KAAKL,GAAS,IAAI,EAAU,CAAC,GAAG,EAAM,CAAQ,CAAC,CACvD,CAEA,KAAMG,GAAc,EAAuC,CACzD,IAAM,EAAW,EAAmB,EAAM,aAAa,EACjD,EAAW,EAAmB,CAAK,EACnC,EAAO,MAAM,KAAKE,GAAW,CAAQ,EACrC,EAAO,EAAK,OAAQ,GAAU,IAAU,CAAQ,EAClD,EAAK,SAAW,EAAK,SAGrB,EAAK,SAAW,EAClB,MAAM,EAAQ,0BAA6B,KAAKL,GAAS,OAAO,CAAQ,EAAG,KAAKC,EAAO,EAEvF,MAAM,EAAQ,0BAA6B,KAAKD,GAAS,IAAI,EAAU,CAAI,EAAG,KAAKC,EAAO,EAE9F,CAEA,KAAMC,GAAa,EAAiC,CAClD,MAAM,EAAQ,0BAA6B,KAAKF,GAAS,OAAO,CAAQ,EAAG,KAAKC,EAAO,CACzF,CACF,EC1Ia,GAAb,KAA+B,CAC7B,GACA,GACA,GACA,GACA,GACA,GAEA,YAAY,EAAiC,CAC3C,KAAKK,GAAS,IAAI,GAAsB,CACtC,cAAiB,EAAO,QAAQ,yBAAyB,EACzD,QAAS,EAAO,QAChB,IAAK,EAAO,oBACZ,OAAQ,EAAO,MACjB,CAAC,EACD,KAAKC,GAAS,IAAI,GAAgB,CAChC,QAAS,EAAO,eAAiB,EAAO,QACxC,OAAQ,EAAO,MACjB,CAAC,EACD,KAAKC,GAAW,EAAO,QACvB,KAAKC,GAAU,EAAO,OACtB,KAAKC,GAAa,EAAO,UACzB,KAAKC,GAAU,EAAO,MACxB,CAWA,MAAM,YACJ,EACA,EAC4C,CAC5C,IAAM,EAAU,KAAKF,GAAQ,qBAAqB,aAAa,EACzD,EAAgB,EAAS,EAAQ,OAAO,EACxC,EAAY,EAAmB,CAAS,EACxC,EAAU,MAAM,KAAKH,GAAO,YAAY,CAAa,EAC3D,GAAI,EAAU,SAAW,EACvB,MAAO,CAAE,UAAS,QAAS,CAAC,CAAE,EAIhC,IAAM,EAAyB,CAC7B,gBACA,QAHc,EAAQ,QAItB,iBAAkB,EAAY,EAAS,CAAS,EAAI,CACtD,EACM,EAAU,MAAM,KAAKC,GAAO,mBAAmB,EAAO,EAAQ,SAAS,EAEvE,EAAY,EAAmB,EAAS,CAAS,EACvD,GAAI,EAAU,OAAS,EAAG,CACxB,IAAM,EAAY,GAAkB,EAAS,EAAW,CAAS,EACjE,GAAI,IAAc,KAAM,CACtB,IAAM,EAAa,GAAY,EAAU,wBAAyB,CAAS,EACrE,EAAU,MAAM,KAAKK,GAAY,CACrC,MAAO,EACP,UACA,OACF,CAAC,EACD,MAAM,EACJ,qBACM,KAAKL,GAAO,QAAQ,EAAO,EAAU,UAAW,CAAO,EAC7D,KAAKI,EACP,EACA,EAAQ,EAAQ,QAAQ,CAAS,GAAK,CACxC,MACE,IAAK,IAAM,KAAS,GAAe,CAAS,EAAG,CAC7C,IAAM,EAAa,MAAM,KAAKC,GAAY,CAAE,QAAO,UAAS,OAAM,CAAC,EACnE,EAAQ,KAAK,CAAU,EACvB,MAAM,EACJ,qBACM,KAAKL,GAAO,OAAO,EAAO,CAAC,CAAU,CAAC,EAC5C,KAAKI,EACP,CACF,CAEJ,CAEA,IAAM,EAAe,IAAI,IAAI,CAAS,EACtC,MAAO,CACL,UACA,QAAS,EAAQ,OAAQ,GAAM,EAAE,wBAAwB,KAAM,GAAM,EAAa,IAAI,CAAC,CAAC,CAAC,CAC3F,CACF,CASA,MAAM,UAAU,EAA+B,EAAuC,CACpF,GAAI,EAAU,SAAW,EACvB,MAAO,GAET,IAAM,EAAU,KAAKF,GAAQ,cAAc,YAAY,EACvD,GAAI,CAAC,EACH,MAAO,GAET,IAAM,EAAgB,EAAS,EAAQ,OAAO,EACxC,EAAU,MAAM,KAAKH,GAAO,WAAW,CAAa,EAC1D,GAAI,IAAY,KACd,MAAO,GAIT,IAAM,EAAyB,CAAE,gBAAe,QAFhC,EAAQ,QAEiC,iBADhC,EAAY,EAAS,CAAS,EAAI,CACe,EAE1E,OAAO,EAAmB,MADJ,KAAKC,GAAO,mBAAmB,EAAO,EAAQ,SAAS,EAC1C,EAAmB,CAAS,CAAC,CAAC,CAAC,SAAW,CAC/E,CAcA,MAAM,cAAc,EAA+C,CACjE,IAAM,EAAU,KAAKE,GAAQ,qBAAqB,eAAe,EAC3D,EAAgB,EAAS,EAAQ,OAAO,EAC9C,GAAI,IAAc,IAAA,GAAW,CAC3B,MAAM,KAAKF,GAAO,kBAAkB,CAAa,EACjD,MACF,CACA,IAAM,EAAa,EAAmB,CAAS,EAC/C,GAAI,EAAW,SAAW,EACxB,OAEF,IAAM,EAAU,EAAQ,QACxB,MAAM,KAAKA,GAAO,sBAChB,CAAE,gBAAe,UAAS,iBAAkB,CAAc,EAC1D,CACF,CACF,CAQA,MAAM,kBAAkC,CAEtC,IAAM,EAAgB,EADN,KAAKE,GAAQ,qBAAqB,kBACb,CAAC,CAAC,OAAO,EAC9C,MAAM,KAAKH,GAAO,MAAM,CAAa,EACrC,MAAM,KAAKC,GAAO,kBAAkB,CAAa,CACnD,CAUA,MAAM,qBAAqB,EAAiC,CAC1D,MAAM,KAAKD,GAAO,YAAY,EAAS,CAAO,CAAC,CACjD,CASA,MAAM,0BACJ,EACA,EACe,CACf,IAAM,EAAW,EAAO,EAAS,EAAK,OAAO,EAAI,IAAA,GAE7C,KADa,EAAO,EAAS,EAAK,OAAO,EAAI,IAAA,KAI7C,IACF,MAAM,KAAKA,GAAO,MAAM,CAAQ,EAChC,MAAM,KAAKC,GAAO,kBAAkB,CAAQ,EAEhD,CAEA,KAAMK,GAAY,EAIM,CACtB,GAAM,CAAE,QAAO,UAAS,SAAU,EAC5B,EAAiB,EAAW,EAC5B,EAAc,EAAM,mBAAqB,EAAM,cAErD,GAAI,CACF,IAAM,EAAS,EACX,MAAM,KAAKJ,GAAS,iCAClB,EAAQ,UACR,EACA,EAAM,iBACN,EACA,KAAKE,EACP,EACA,MAAM,KAAKF,GAAS,aAClB,EAAQ,UACR,EACA,EACA,KAAKE,EACP,EAEE,EAAY,MAAM,KAAKD,GAAQ,cAAc,CAAM,EAEzD,MAAO,CACL,iBAAkB,EAAQ,UAC1B,cAAe,EAAM,cACrB,iBAAkB,EAAM,iBACxB,QAAS,EAAM,QACf,wBAAyB,EACzB,YACA,iBACA,aAAc,KAAKC,EACrB,CACF,OAAS,EAAO,CAId,MAHI,aAAiB,EACb,EAEF,EAAiB,EAAO,2BAA2B,CAC3D,CACF,CACF,ECzQa,GAAb,KAAoD,CAClD,GACA,GAAmB,aAEnB,YAAY,EAAwB,CAClC,KAAKG,GAAU,CACjB,CAEA,MAAM,EAAiB,EAAsC,CAC3D,KAAKA,IAAS,MAAM,GAAG,KAAKC,GAAQ,GAAG,IAAW,CAAI,CACxD,CAEA,KAAK,EAAiB,EAAsC,CAC1D,KAAKD,IAAS,KAAK,GAAG,KAAKC,GAAQ,GAAG,IAAW,CAAI,CACvD,CAEA,KAAK,EAAiB,EAAsC,CAC1D,KAAKD,IAAS,KAAK,GAAG,KAAKC,GAAQ,GAAG,IAAW,CAAI,CACvD,CAEA,MAAM,EAAiB,EAAsC,CAC3D,KAAKD,IAAS,MAAM,GAAG,KAAKC,GAAQ,GAAG,IAAW,CAAI,CACxD,CACF,EChCA,SAAS,IAAoC,CAC3C,OAAO,OAAO,OAAW,IACrB,IAAI,GAAiB,iBAAiB,EACtC,IAAI,EACV,CAEA,SAAgB,EACd,EAAsC,GAAkB,EACxD,EAA4C,EACgB,CAC5D,MAAO,CAAE,UAAS,eAAc,CAClC,CASA,SAAgB,EACd,EACA,EACmC,CACnC,IAAM,EAAW,IAAI,IAAI,EAAO,IAAK,GAAM,CAAC,EAAE,GAAI,CAAC,CAAC,CAAC,EACrD,GAAI,EAAS,OAAS,EAAO,OAAQ,CACnC,IAAM,EAAM,EAAO,IAAK,GAAM,EAAE,EAAE,EAElC,MAAM,IAAI,EACR,0BAA0B,CAFb,GAAG,IAAI,IAAI,EAAI,QAAQ,EAAI,IAAM,EAAI,QAAQ,CAAE,IAAM,CAAC,CAAC,CAEtC,CAAC,CAAC,KAAK,IAAI,EAAE,kHAE7C,CACF,CACA,IAAM,EAAa,IAAI,IAAI,OAAO,QAAQ,CAAQ,CAAC,EAC7C,EAAS,IAAI,IAEnB,IAAK,IAAM,KAAM,EAAS,KAAK,EAAG,CAChC,IAAM,EAAc,EAAS,IAAI,CAAE,EAC7B,EAAgB,EAAW,IAAI,OAAO,CAAE,CAAC,EAE/C,GAAI,CAAC,EACH,MAAM,IAAI,EACR,SAAS,EAAG,gEAC2B,EAAG,WAC5C,EAGF,GAAI,CAAC,EACH,MAAM,IAAI,EACR,SAAS,EAAG,sGAEd,EAGF,EAAO,IAAI,EAAI,CACb,MAAO,EACP,QAAS,CACX,CAAC,CACH,CAEA,IAAM,EAAe,IAAI,IAAI,OAAO,KAAK,CAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,EACxD,EAAW,IAAI,IAAI,CAAC,GAAG,CAAY,CAAC,CAAC,OAAQ,GAAO,CAAC,EAAS,IAAI,CAAE,CAAC,CAAC,EAC5E,GAAI,EAAS,KAAO,EAClB,MAAM,IAAI,EACR,iCAAiC,CAAC,GAAG,CAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,iGAE5D,EAGF,OAAO,CACT,CCnCA,IAAa,EAAb,KAAiE,CAC/D,GACA,GACA,GACA,GAEA,YACE,EACA,EACA,EACA,CACA,GAAI,EAAO,SAAW,EACpB,MAAM,IAAI,EAAmB,iCAAiC,EAEhE,KAAKC,GAAU,IAAI,IAAI,EAAO,IAAK,GAAM,CAAC,EAAE,GAAI,CAAC,CAAC,CAAC,EACnD,KAAKG,GAAW,EAAO,EAAE,CAAC,GAE1B,IAAM,EAAgB,EAAqB,EAAQ,CAAO,EAGpD,EAAS,IAAI,IACnB,IAAK,GAAM,CAAC,EAAS,KAAW,EAAe,CAC7C,IAAM,EAAM,EAAO,QACf,EAAQ,EAAO,IAAI,CAAG,EACrB,IACH,EAAQ,CAAC,EACT,EAAO,IAAI,EAAK,CAAK,GAEvB,EAAM,KAAK,CAAC,EAAS,EAAO,KAAK,CAAC,CACpC,CAGA,IAAM,EAAW,IAAI,IACf,EAAwB,CAAC,EAC/B,GAAI,CACF,IAAK,GAAM,CAAC,EAAY,KAAgB,EAAQ,CAC9C,IAAM,EAAkB,EAAY,KAAK,EAAG,KAAW,CAAK,EACtD,EAAS,EAAW,eAAe,EAAiB,CAAM,EAC5D,GACF,EAAQ,KAAK,CAAM,EAErB,IAAK,GAAM,CAAC,EAAS,KAAU,EAC7B,EAAS,IAAI,EAAS,EAAW,cAAc,EAAO,EAAQ,CAAM,CAAC,CAEzE,CACF,OAAS,EAAO,CACd,IAAK,IAAM,KAAK,EACd,GAAI,CACF,EAAE,UAAU,CACd,MAAQ,CAER,CAEF,MAAM,CACR,CAEA,KAAKF,GAAY,EACjB,KAAKC,GAAW,CAClB,CAEA,IAAI,QAA8B,CAChC,MAAO,CAAC,GAAG,KAAKF,GAAQ,OAAO,CAAC,CAClC,CAEA,IAAI,OAAkB,CACpB,IAAM,EAAQ,KAAKA,GAAQ,IAAI,KAAKG,EAAQ,EAE5C,OADA,EAAkB,EAAO,0BAA0B,EAC5C,CACT,CAEA,YAAY,EAAuB,CACjC,GAAI,CAAC,KAAKH,GAAQ,IAAI,CAAO,EAC3B,MAAM,IAAI,EACR,mCAAmC,EAAQ,8BAC7C,EAEF,KAAKG,GAAW,CAClB,CAEA,GAAIC,IAAsB,CACxB,IAAM,EAAU,KAAKH,GAAU,IAAI,KAAKE,EAAQ,EAEhD,OADA,EAAkB,EAAS,4BAA4B,EAChD,CACT,CAEA,0BAAsD,CACpD,OAAO,KAAKC,GAAQ,yBAAyB,CAC/C,CAEA,aACE,EACA,EACA,EACA,EAC0B,CAC1B,OAAO,KAAKA,GAAQ,aAAa,EAAW,EAAmB,EAAgB,CAAY,CAC7F,CAEA,QAAQ,EAA+C,CACrD,OAAO,KAAKA,GAAQ,QAAQ,CAAM,CACpC,CAEA,YAAY,EAAkF,CAC5F,OAAO,KAAKA,GAAQ,YAAY,CAAM,CACxC,CAEA,cAAc,EAAiE,CAC7E,OAAO,KAAKA,GAAQ,cAAc,CAAe,CACnD,CAEA,iCACE,EACA,EACA,EACA,EACA,EAC4C,CAC5C,OAAO,KAAKA,GAAQ,iCAClB,EACA,EACA,EACA,EACA,CACF,CACF,CAEA,qBACE,EACuD,CACvD,OAAO,KAAKA,GAAQ,qBAAqB,CAAM,CACjD,CAEA,2BAA2B,EAAoD,CAC7E,OAAO,KAAKA,GAAQ,2BAA2B,CAAO,CACxD,CAEA,4BAA+D,CAC7D,OAAO,KAAKA,GAAQ,2BAA2B,CACjD,CAEA,gBAAgB,EAAgD,CAC9D,OAAO,KAAKA,GAAQ,gBAAgB,CAAI,CAC1C,CAEA,eAAkC,CAChC,OAAO,KAAKA,GAAQ,cAAc,CACpC,CAEA,WAAkB,CAChB,IAAM,EAAkB,CAAC,EAGzB,IAAK,IAAM,KAAK,IAAI,IAAI,KAAKH,GAAU,OAAO,CAAC,EAC7C,GAAI,CACF,EAAE,UAAU,CACd,OAAS,EAAG,CACV,EAAO,KAAK,EAAQ,CAAC,CAAC,CACxB,CAIF,IAAK,IAAM,KAAK,IAAI,IAAI,KAAKC,EAAQ,EACnC,GAAI,CACF,EAAE,UAAU,CACd,OAAS,EAAG,CACV,EAAO,KAAK,EAAQ,CAAC,CAAC,CACxB,CAGF,GAAI,EAAO,OAAS,EAClB,MAAU,eAAe,EAAQ,uCAAuC,CAE5E,CAEA,CAAC,OAAO,UAAiB,CACvB,KAAK,UAAU,CACjB,CACF,ECnMA,MAAa,EAAoD,EAC9D,EAAQ,IAAK,EAAQ,iBACrB,EAAQ,IAAK,EAAQ,iBACrB,EAAM,IAAK,EAAM,iBACjB,EAAa,IAAK,EAAa,iBAC/B,EAAW,IAAK,EAAW,eAC9B,EAMa,GAA0B,EAAE,OACvC,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,QAAS,+BAA+B,CAAC,EAClE,CACF,EAGa,EAAoB,GA6C3B,EAAwB,IAAS,IA+BvC,IAAa,GAAb,KAA8B,CAC5B,SACA,GACA,GACA,GAAkB,IAAI,IAEtB,YAAY,EAAgC,CAC1C,KAAK,SAAW,EAAO,SACvB,KAAKG,GAAa,OAAO,OACvB,CAAC,EACD,EACA,EAAmB,EAAE,SAAS,EAAuB,EAAG,EAAO,iBAAiB,CAClF,EACA,KAAKC,GACH,EAAmB,EAAmB,EAAO,aAAA,KAA2C,EACxF,GACJ,CAMA,WAAW,EAAsC,CAC/C,OAAO,KAAKD,GAAW,EACzB,CAMA,GAAc,EAA4B,CACxC,IAAM,EAAQ,KAAKE,GAAO,IAAI,CAAG,EAC5B,KAGL,IAAI,KAAK,IAAI,GAAK,EAAM,UAAW,CACjC,KAAKA,GAAO,OAAO,CAAG,EACtB,MACF,CACA,OAAO,EAAM,IADb,CAEF,CAEA,GAAc,EAAa,EAAS,EAAQ,KAAKD,GAAW,CAK1D,OAJA,KAAKC,GAAO,IAAI,EAAK,CACnB,OACA,UAAW,KAAK,IAAI,EAAI,CAC1B,CAAC,EACM,CACT,CAMA,SAAgB,CACd,KAAKA,GAAO,MAAM,CACpB,CAMA,IAAI,OAAgB,CAClB,OAAO,KAAKD,EACd,CAcA,MAAM,oBAAuC,CAC3C,IAAM,EAAU,MAAM,KAAK,SAAS,WAAW,EACzC,EAAU,KAAKD,GAAW,GAEhC,GAAI,CAAC,EACH,MAAM,IAAI,EACR,qDAAqD,EAAQ,kDAE/D,EAGF,OAAO,EAAW,CAAO,CAC3B,CA8BA,MAAM,UACJ,EAA4B,CAAC,EAC8C,CAC3E,IAAM,EAAO,EAAQ,MAAQ,EACvB,EAAW,EAAQ,UAAY,IAC/B,EAAW,EAAQ,UAAY,GAErC,GAAI,EAAO,EACT,MAAM,IAAI,EAAmB,0BAA0B,GAAM,EAE/D,GAAI,EAAW,EACb,MAAM,IAAI,EAAmB,8BAA8B,GAAU,EAGvE,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAGzC,EAAgB,SAAS,IAC3B,EAAQ,KAAKG,GAAmB,CAAa,EACjD,GAAI,IAAU,IAAA,GAAW,CACvB,IAAM,EAAM,MAAM,KAAK,SAAS,aAAa,EAA4B,CAAQ,CAAC,EAClF,EAAQ,KAAKC,GAAW,EAAe,OAAO,CAAG,CAAC,CACpD,CAGA,IAAM,EAAY,QAAQ,EAAO,GAAK,CAAQ,EACxC,EACJ,EAAY,OAAO,CAAQ,EAAI,OAAO,CAAK,EAAI,OAAO,CAAK,EAAI,EAAY,OAAO,CAAQ,EAG5F,GAAI,GAAa,OAAO,CAAK,EAC3B,MAAO,CAAE,MAAO,CAAC,EAAG,QAAO,OAAM,UAAS,EAI5C,IAAM,EAAgB,SAAS,EAAS,GAAG,EAAU,GAAG,IACpD,EAAQ,KAAKD,GAA+B,CAAa,EAC7D,GAAI,IAAU,IAAA,GAAW,CACvB,IAAM,EAAM,MAAM,KAAK,SAAS,aAC9B,EAA2B,EAAU,EAAW,CAAc,CAChE,EACA,EAAQ,KAAKC,GAAW,EAAe,CAAC,GAAG,CAAG,CAAC,CACjD,CAEA,GAAI,CAAC,EACH,MAAO,CAAE,QAAO,QAAO,OAAM,UAAS,EAIxC,IAAM,EAAmB,YAAY,EAAS,GAAG,EAAU,GAAG,IAC1D,EAAgB,KAAKD,GAA2C,CAAgB,EACpF,GAAI,IAAkB,IAAA,GAAW,CAC/B,IAAM,EAAU,MAAM,QAAQ,WAAW,EAAM,IAAK,GAAS,KAAKE,GAAkB,CAAI,CAAC,CAAC,EACpF,EAAc,EAAQ,KAAM,GAAM,EAAE,SAAW,UAAU,EACzD,EAAW,EAAQ,KAAK,EAAQ,IACpC,EAAO,SAAW,YACd,EAAO,MACP,OAAO,OAAO,CAAC,EAAG,EAAM,GAAI,CAC1B,eAAgB,GAChB,WAAY,CACV,KAAM,UACN,OAAQ,MACR,SAAU,EACV,YAAa,EACf,EACA,aAAc,CAAE,KAAM,UAAW,OAAQ,MAAO,SAAU,CAAE,CAC9D,CAAC,CACP,EAEA,EAAgB,KAAKD,GACnB,EACA,EACA,EAAc,EAAwB,IAAA,EACxC,CACF,CAEA,MAAO,CAAE,MAAO,EAAe,QAAO,OAAM,UAAS,CACvD,CAEA,KAAMC,GAAkB,EAA+D,CACrF,GAAM,CAAC,EAAO,EAAS,EAAW,EAAc,EAAO,EAAS,GAAa,MAAM,QAAQ,IAAI,CAC7F,KAAK,SAAS,aAAa,EAAa,EAAK,YAAY,CAAC,EAC1D,KAAK,SAAS,aAAa,EAAe,EAAK,YAAY,CAAC,EAC5D,KAAK,SAAS,aAAa,EAAiB,EAAK,YAAY,CAAC,EAC9D,KAAK,SAAS,aAAa,EAAyB,EAAK,YAAY,CAAC,EACtE,KAAK,SAAS,aAAa,EAAa,EAAK,wBAAwB,CAAC,EACtE,KAAK,SAAS,aAAa,EAAe,EAAK,wBAAwB,CAAC,EACxE,KAAK,SAAS,aAAa,EAAiB,EAAK,wBAAwB,CAAC,CAC5E,CAAC,EAED,MAAO,CACL,GAAG,EACH,WAAY,CACV,KAAM,EACN,OAAQ,EACR,SAAU,EACV,YAAa,CACf,EACA,aAAc,CAAE,KAAM,EAAO,OAAQ,EAAS,SAAU,CAAU,CACpE,CACF,CAuBA,MAAM,qBACJ,EACyE,CACzE,IAAM,EAAW,MAAM,KAAK,mBAAmB,EACzC,EAAa,EAAW,CAAY,EAEpC,EAAW,MAAM,EAAS,GAAG,IAC7B,EAAS,KAAKF,GAGV,CAAQ,EAClB,GAAI,IAAW,IAAA,GACb,OAAO,EAGT,GAAM,CAAC,EAAS,GAA4B,MAAM,KAAK,SAAS,aAC9D,EAAoC,EAAU,CAAU,CAC1D,EAQA,OAJI,IAA6B,EACxB,KAAKC,GAAW,EAAU,KAAM,CAAqB,EAGvD,KAAKA,GAAW,EAAU,CAAE,2BAA0B,SAAQ,CAAC,CACxE,CAgBA,MAAM,mBACJ,EAC6D,CAC7D,IAAM,EAAW,MAAM,KAAK,mBAAmB,EACzC,EAAa,EAAW,CAAwB,EAEhD,EAAW,MAAM,EAAS,GAAG,IAC7B,EAAS,KAAKD,GAGV,CAAQ,EAClB,GAAI,IAAW,IAAA,GACb,OAAO,EAGT,GAAM,CAAC,EAAS,GAAgB,MAAM,KAAK,SAAS,aAClD,EAAwB,EAAU,CAAU,CAC9C,EAQA,OAJI,IAAiB,EACZ,KAAKC,GAAW,EAAU,KAAM,CAAqB,EAGvD,KAAKA,GAAW,EAAU,CAAE,eAAc,SAAQ,CAAC,CAC5D,CAWA,MAAM,eAAsD,CAC1D,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aAAa,EAAsB,CAAQ,CAAC,CACnE,CAOA,MAAM,qBAAuC,CAC3C,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aAAa,EAA4B,CAAQ,CAAC,CACzE,CASA,MAAM,mBACJ,EACA,EACsC,CACtC,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aAAa,EAA2B,EAAU,EAAW,CAAO,CAAC,CAC5F,CAQA,MAAM,aAAa,EAA0C,CAC3D,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aAAa,EAAqB,EAAU,CAAK,CAAC,CACzE,CAUA,MAAM,4BAA4B,EAA6D,CAC7F,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aACnB,EAAoC,EAAU,EAAW,CAAY,CAAC,CACxE,CACF,CAUA,MAAM,gBAAgB,EAAyE,CAC7F,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aACnB,EAAwB,EAAU,EAAW,CAAwB,CAAC,CACxE,CACF,CAQA,MAAM,yBAAyB,EAAqD,CAClF,IAAM,EAAW,MAAM,KAAK,mBAAmB,EAC/C,OAAO,KAAK,SAAS,aACnB,EAAiC,EAAU,EAAW,CAAwB,CAAC,CACjF,CACF,CACF,EC1fA,SAAgB,GACd,EACA,EACA,EACY,CACZ,GAAM,CAAE,UAAS,iBAAkB,EAAe,EAAO,QAAS,EAAO,aAAa,EAChF,EAAS,IAAI,GAAc,EAAO,MAAM,EACxC,EAAU,IAAI,EAAkB,EAAO,OAAQ,EAAO,SAAU,CAAM,EAE5E,MAAO,CACL,OAAQ,EAAO,OACf,UACA,WACA,SACA,UACA,gBACA,oBAAqB,EACnB,EACA,EAAO,qBAAuB,MAChC,EACA,UAAW,EACT,EACA,EAAO,WAAA,EACT,EACA,YAAa,EACX,EACA,EAAO,aAAA,KACT,EACA,SACA,QAAS,EAAO,OAClB,CACF,CC3CA,SAAgB,GACd,EACA,EACS,CACT,OAAO,GAAG,UAAY,GAAG,SAAW,GAAG,UAAY,GAAG,OACxD,CAUA,IAAa,EAAb,KAAqE,CACnE,GAAsB,IAAI,IAC1B,GACA,GAEA,YAAY,EAAyB,CACnC,KAAKG,GAAY,EACjB,KAAKC,GAAY,IAAY,IAAA,EAC/B,CAEA,aAAyC,CACvC,OAAO,KAAKD,EACd,CAQA,SAAmB,CACjB,OAAO,KAAKC,EACd,CAOA,YAAY,EAAuC,CACjD,KAAKA,GAAY,GACjB,IAAM,EAAW,KAAKD,GAClB,GAAoB,EAAU,CAAI,IAGtC,KAAKA,GAAY,EACjB,KAAKE,GAAM,CAAE,WAAU,MAAK,CAAC,EAC/B,CAEA,UAAU,EAA6C,CACrD,KAAKH,GAAW,IAAI,CAAQ,EAC5B,IAAM,EAAW,KAAKC,GAItB,OAHI,GACF,EAAS,CAAE,SAAU,IAAA,GAAW,KAAM,CAAS,CAAC,MAErC,CACX,KAAKD,GAAW,OAAO,CAAQ,CACjC,CACF,CAEA,GAAM,EAAmC,CACvC,IAAK,IAAM,KAAY,KAAKA,GAC1B,EAAS,CAAM,CAEnB,CACF,EAQA,SAAgB,GAAyB,EAAoD,CAC3F,OAAO,IAAI,EAA0B,CAAO,CAC9C,CCjEA,IAAsB,GAAtB,KAAsE,CACpE,cACA,GAAY,GAEZ,YAAY,EAAyB,CACnC,KAAK,cAAgB,IAAI,EAA0B,CAAO,CAC5D,CAEA,qBAAqB,EAAkC,CACrD,IAAM,EAAU,KAAK,cAAc,YAAY,EAC/C,GAAI,CAAC,EACH,MAAM,IAAI,EAAwB,CAAS,EAE7C,OAAO,CACT,CAUA,SAAgB,CACV,KAAKI,KAGT,KAAKA,GAAY,GACjB,KAAK,UAAU,EACjB,CAEA,CAAC,OAAO,UAAiB,CACvB,KAAK,QAAQ,CACf,CAEA,WAA4B,CAAC,CAC/B"}

package/dist/esm/{cleartext-CCfrFze1.d.ts → cleartext-DMW5nK1M.d.ts}

@@ -1,4 +1,4 @@
-import { t as CleartextRelayerConfig } from "./types-DdUTTFUy.js";
+import { t as CleartextRelayerConfig } from "./types-BjDu-RZg.js";
 
 //#region src/config/cleartext.d.ts
 /**
@@ -16,4 +16,4 @@ import { t as CleartextRelayerConfig } from "./types-DdUTTFUy.js";
 declare function cleartext(): CleartextRelayerConfig;
 //#endregion
 export { cleartext as t };
-//# sourceMappingURL=cleartext-CCfrFze1.d.ts.map
+//# sourceMappingURL=cleartext-DMW5nK1M.d.ts.map

package/dist/esm/ethers/index.d.ts

@@ -1,7 +1,7 @@
 import { n as FheChain } from "../types-BgczXqW2.js";
 import { B as TransactionReceipt, F as WalletAccount, J as WriteContractConfig, N as GenericProvider, W as ReadContractConfig, l as EIP712TypedData, p as EncryptedValue } from "../relayer-cleartext-DkKKjfI6.js";
-import { a as ZamaConfig } from "../types-DdUTTFUy.js";
-import { t as ZamaConfigEthers } from "../types-BAp_HdIk.js";
+import { a as ZamaConfig } from "../types-BjDu-RZg.js";
+import { t as ZamaConfigEthers } from "../types-Xg_On_yY.js";
 import { t as BaseSigner } from "../base-signer-ByGw5ReU.js";
 import { Abi, Address, ContractFunctionArgs, ContractFunctionName, ContractFunctionReturnType, EIP1193EventMap, EIP1193Events, EIP1193Provider, EIP1193Provider as EIP1193Provider$1, Hex, Hex as Hex$1, ProviderConnectInfo, ProviderMessage, ProviderRpcError } from "viem";
 import { Signer, ethers } from "ethers";

package/dist/esm/{index-Dxizm4rJ.d.ts → index-DoVo9J1n.d.ts}

@@ -1,6 +1,6 @@
 import { n as FheChain } from "./types-BgczXqW2.js";
 import { A as TransferCallbacks, D as TransferOptions, F as WalletAccount, J as WriteContractConfig, L as WalletAccountListener, M as GenericStorage, N as GenericProvider, O as UnshieldOptions, P as GenericSigner, T as ShieldOptions, V as TransactionResult, a as StoredTransportKeyPairWithPermits, d as EncryptParams, f as EncryptResult, ft as GenericLogger, g as PublicDecryptResult, j as UnshieldCallbacks, p as EncryptedValue, s as ClearValue } from "./relayer-cleartext-DkKKjfI6.js";
-import { E as TransactionOperation, P as ZamaSDKEventInput, a as ZamaConfig, n as RelayerConfig, s as ZamaConfigGeneric, u as RelayerDispatcher } from "./types-DdUTTFUy.js";
+import { E as TransactionOperation, P as ZamaSDKEventInput, a as ZamaConfig, n as RelayerConfig, s as ZamaConfigGeneric, u as RelayerDispatcher } from "./types-BjDu-RZg.js";
 import { Address, Hex } from "viem";
 import { z } from "zod/mini";
 import { UserDecryptResults } from "@zama-fhe/relayer-sdk/bundle";
@@ -20346,4 +20346,4 @@ declare function loadPendingUnshieldRequest(storage: GenericStorage, wrapperAddr
 declare function clearPendingUnshield(storage: GenericStorage, wrapperAddress: Address): Promise<void>;
 //#endregion
 export { DecryptResult as $, DelegationExpiredError as A, decimalsContract as At, ConfigurationError as B, rateContract as Bt, InsufficientConfidentialBalanceError as C, ERC7984_WRAPPER_INTERFACE_ID as Ct, DelegationCooldownError as D, allowanceContract as Dt, DelegationContractIsSelfError as E, supportsInterfaceContract as Et, SignerNotConfiguredError as F, confidentialTransferContract as Ft, TransactionRevertedError as G, wrapContract as Gt, InvalidTransportKeyPairError as H, underlyingContract as Ht, SignerRequiredError as I, confidentialTransferFromContract as It, SigningFailedError as J, resolveStorage as Jt, DecryptionFailedError as K, ResolvedChainRelayer as Kt, WalletAccountNotReadyError as L, finalizeUnwrapContract as Lt, DelegationNotFoundError as M, symbolContract as Mt, DelegationNotPropagatedError as N, confidentialBalanceOfContract as Nt, DelegationDelegateEqualsContractError as O, approveContract as Ot, DelegationSelfNotAllowedError as P, confidentialTotalSupplyContract as Pt, matchZamaError as Q, WalletNotConnectedError as R, inferredTotalSupplyContract as Rt, ERC20ReadFailedError as S, ERC7984_INTERFACE_ID as St, AclPausedError as T, isConfidentialWrapperContract as Tt, NoCiphertextError as U, unwrapContract as Ut, RelayerRequestFailedError as V, setOperatorContract as Vt, TransportKeyPairExpiredError as W, unwrapFromBalanceContract as Wt, ZamaError as X, SigningRejectedError as Y, createConfig as Yt, ZamaErrorCode as Z, Decryption as _, getDelegationExpiryContract as _t, savePendingUnshield as a, QueryFactoryOptions as at, BalanceCheckUnavailableError as b, transferAndCallContract as bt, ListPairsOptions as c, TokenWrapperPairWithMetadata as ct, WrappedToken as d, getTokenPairContract as dt, EncryptedInput as et, BatchBalancesResult as f, getTokenPairsContract as ft, Delegations as g, delegateForUserDecryptionContract as gt, Permits as h, isConfidentialTokenValidContract as ht, loadPendingUnshieldRequest as i, MutationFactoryOptions as it, DelegationExpiryUnchangedError as j, nameContract as jt, DelegationExpirationTooSoonError as k, balanceOfContract as kt, WrappersRegistry as l, getConfidentialTokenAddressContract as lt, Token as m, getTokenPairsSliceContract as mt, clearPendingUnshield as n, SignerQueryContext as nt, ZamaSDK as o, PaginatedResult as ot, BatchDecryptAsOptions as p, getTokenPairsLengthContract as pt, EncryptionFailedError as q, resolveChainRelayers as qt, loadPendingUnshield as r, zamaQueryKeys as rt, DefaultRegistryAddresses as s, TokenWrapperPair as st, PendingUnshieldRequest as t, decryptValuesQueryOptions as tt, WrappersRegistryConfig as u, getTokenAddressContract as ut, BatchDecryptItem as v, isHandleDelegatedContract as vt, InsufficientERC20BalanceError as w, isConfidentialTokenContract as wt, BalanceErrorDetails as x, ERC1363_INTERFACE_ID as xt, BatchDecryptResult as y, revokeDelegationContract as yt, ChainMismatchError as z, isOperatorContract as zt };
-//# sourceMappingURL=index-Dxizm4rJ.d.ts.map
+//# sourceMappingURL=index-DoVo9J1n.d.ts.map

package/dist/esm/index.d.ts

@@ -1,12 +1,12 @@
 import { n as FheChain, t as AtLeastOneChain } from "./types-BgczXqW2.js";
 import { a as hoodi, c as sepolia, i as hardhat, n as bscTestnet, o as ingenTestnet, r as chains, s as mainnet, t as anvil } from "./index-CYBH0nyo.js";
 import { A as TransferCallbacks, B as TransactionReceipt, D as TransferOptions, E as ShieldPath, F as WalletAccount, G as ReadContractReturnType, H as ContractAbi, I as WalletAccountChange, J as WriteContractConfig, K as ReadFunctionName, L as WalletAccountListener, M as GenericStorage, N as GenericProvider, O as UnshieldOptions, P as GenericSigner, R as WalletAccountStore, T as ShieldOptions, U as ReadContractArgs, V as TransactionResult, W as ReadContractConfig, Y as WriteFunctionName, _ as PublicParamsData, c as DelegatedUserDecryptParams, d as EncryptParams, f as EncryptResult, ft as GenericLogger, g as PublicDecryptResult, h as NetworkType, i as StoredTransportKeyPair, j as UnshieldCallbacks, k as ShieldCallbacks, l as EIP712TypedData, m as FheEncryptionKey, n as RelayerSDK, o as TransportKeyPair, p as EncryptedValue, q as WriteContractArgs, r as Permission, s as ClearValue, u as EncryptInput, v as RelayerSDKStatus, w as ApprovalStrategy, x as UserDecryptParams, z as RawLog } from "./relayer-cleartext-DkKKjfI6.js";
-import { $ as decodeDelegatedForUserDecryption, A as UnshieldPhase2StartedEvent, B as AclTopics, C as SetOperatorSubmittedEvent, D as TransferFromSubmittedEvent, E as TransactionOperation, F as ZamaSDKEventListener, G as TOKEN_TOPICS, H as DelegatedForUserDecryptionEvent, I as ZamaSDKEventType, J as UnwrapRequestedEvent, K as Topics, L as ZamaSDKEvents, M as UnwrapSubmittedEvent, N as ZamaSDKEvent, O as TransferSubmittedEvent, P as ZamaSDKEventInput, Q as decodeConfidentialTransfer, R as ACL_TOPICS, S as RevokeDelegationSubmittedEvent, T as TransactionErrorEvent, U as OnChainEvent, V as ConfidentialTransferEvent, W as RevokedDelegationForUserDecryptionEvent, X as decodeAclEvent, Y as WrappedEvent, Z as decodeAclEvents, _ as DelegationSubmittedEvent, a as ZamaConfig, at as decodeWrapped, b as EncryptStartEvent, ct as findUnwrapRequested, d as WorkerLike, et as decodeOnChainEvent, f as ApproveUnderlyingSubmittedEvent, g as DecryptStartEvent, h as DecryptErrorEvent, it as decodeUnwrapRequested, j as UnshieldPhase2SubmittedEvent, k as UnshieldPhase1SubmittedEvent, lt as findWrapped, m as DecryptEndEvent, n as RelayerConfig, nt as decodeRevokedDelegationForUserDecryption, o as ZamaConfigBase, ot as findDelegatedForUserDecryption, p as BaseEvent, q as UnwrapFinalizedEvent, rt as decodeUnwrapFinalized, s as ZamaConfigGeneric, st as findRevokedDelegationForUserDecryption, t as CleartextRelayerConfig, tt as decodeOnChainEvents, u as RelayerDispatcher, v as EncryptEndEvent, w as ShieldSubmittedEvent, x as FinalizeUnwrapSubmittedEvent, y as EncryptErrorEvent, z as AclEvent } from "./types-DdUTTFUy.js";
-import { t as ZamaConfigEthers } from "./types-BAp_HdIk.js";
+import { $ as decodeDelegatedForUserDecryption, A as UnshieldPhase2StartedEvent, B as AclTopics, C as SetOperatorSubmittedEvent, D as TransferFromSubmittedEvent, E as TransactionOperation, F as ZamaSDKEventListener, G as TOKEN_TOPICS, H as DelegatedForUserDecryptionEvent, I as ZamaSDKEventType, J as UnwrapRequestedEvent, K as Topics, L as ZamaSDKEvents, M as UnwrapSubmittedEvent, N as ZamaSDKEvent, O as TransferSubmittedEvent, P as ZamaSDKEventInput, Q as decodeConfidentialTransfer, R as ACL_TOPICS, S as RevokeDelegationSubmittedEvent, T as TransactionErrorEvent, U as OnChainEvent, V as ConfidentialTransferEvent, W as RevokedDelegationForUserDecryptionEvent, X as decodeAclEvent, Y as WrapEvent, Z as decodeAclEvents, _ as DelegationSubmittedEvent, a as ZamaConfig, at as decodeWrap, b as EncryptStartEvent, ct as findUnwrapRequested, d as WorkerLike, et as decodeOnChainEvent, f as ApproveUnderlyingSubmittedEvent, g as DecryptStartEvent, h as DecryptErrorEvent, it as decodeUnwrapRequested, j as UnshieldPhase2SubmittedEvent, k as UnshieldPhase1SubmittedEvent, lt as findWrap, m as DecryptEndEvent, n as RelayerConfig, nt as decodeRevokedDelegationForUserDecryption, o as ZamaConfigBase, ot as findDelegatedForUserDecryption, p as BaseEvent, q as UnwrapFinalizedEvent, rt as decodeUnwrapFinalized, s as ZamaConfigGeneric, st as findRevokedDelegationForUserDecryption, t as CleartextRelayerConfig, tt as decodeOnChainEvents, u as RelayerDispatcher, v as EncryptEndEvent, w as ShieldSubmittedEvent, x as FinalizeUnwrapSubmittedEvent, y as EncryptErrorEvent, z as AclEvent } from "./types-BjDu-RZg.js";
+import { t as ZamaConfigEthers } from "./types-Xg_On_yY.js";
 import { n as MutableWalletAccountStore, r as createWalletAccountStore, t as BaseSigner } from "./base-signer-ByGw5ReU.js";
-import { t as cleartext } from "./cleartext-CCfrFze1.js";
-import { $ as DecryptResult, A as DelegationExpiredError, At as decimalsContract, B as ConfigurationError, Bt as rateContract, C as InsufficientConfidentialBalanceError, Ct as ERC7984_WRAPPER_INTERFACE_ID, D as DelegationCooldownError, Dt as allowanceContract, E as DelegationContractIsSelfError, Et as supportsInterfaceContract, F as SignerNotConfiguredError, Ft as confidentialTransferContract, G as TransactionRevertedError, Gt as wrapContract, H as InvalidTransportKeyPairError, Ht as underlyingContract, I as SignerRequiredError, It as confidentialTransferFromContract, J as SigningFailedError, Jt as resolveStorage, K as DecryptionFailedError, Kt as ResolvedChainRelayer, L as WalletAccountNotReadyError, Lt as finalizeUnwrapContract, M as DelegationNotFoundError, Mt as symbolContract, N as DelegationNotPropagatedError, Nt as confidentialBalanceOfContract, O as DelegationDelegateEqualsContractError, Ot as approveContract, P as DelegationSelfNotAllowedError, Pt as confidentialTotalSupplyContract, Q as matchZamaError, R as WalletNotConnectedError, Rt as inferredTotalSupplyContract, S as ERC20ReadFailedError, St as ERC7984_INTERFACE_ID, T as AclPausedError, Tt as isConfidentialWrapperContract, U as NoCiphertextError, Ut as unwrapContract, V as RelayerRequestFailedError, Vt as setOperatorContract, W as TransportKeyPairExpiredError, Wt as unwrapFromBalanceContract, X as ZamaError, Y as SigningRejectedError, Yt as createConfig, Z as ZamaErrorCode, _ as Decryption, _t as getDelegationExpiryContract, a as savePendingUnshield, b as BalanceCheckUnavailableError, bt as transferAndCallContract, c as ListPairsOptions, ct as TokenWrapperPairWithMetadata, d as WrappedToken, dt as getTokenPairContract, et as EncryptedInput, f as BatchBalancesResult, ft as getTokenPairsContract, g as Delegations, gt as delegateForUserDecryptionContract, h as Permits, ht as isConfidentialTokenValidContract, i as loadPendingUnshieldRequest, j as DelegationExpiryUnchangedError, jt as nameContract, k as DelegationExpirationTooSoonError, kt as balanceOfContract, l as WrappersRegistry, lt as getConfidentialTokenAddressContract, m as Token, mt as getTokenPairsSliceContract, n as clearPendingUnshield, o as ZamaSDK, ot as PaginatedResult, p as BatchDecryptAsOptions, pt as getTokenPairsLengthContract, q as EncryptionFailedError, qt as resolveChainRelayers, r as loadPendingUnshield, s as DefaultRegistryAddresses, st as TokenWrapperPair, t as PendingUnshieldRequest, u as WrappersRegistryConfig, ut as getTokenAddressContract, v as BatchDecryptItem, vt as isHandleDelegatedContract, w as InsufficientERC20BalanceError, wt as isConfidentialTokenContract, x as BalanceErrorDetails, xt as ERC1363_INTERFACE_ID, y as BatchDecryptResult, yt as revokeDelegationContract, z as ChainMismatchError, zt as isOperatorContract } from "./index-Dxizm4rJ.js";
-import { t as ZamaConfigViem } from "./types-DF2ClIc_.js";
+import { t as cleartext } from "./cleartext-DMW5nK1M.js";
+import { $ as DecryptResult, A as DelegationExpiredError, At as decimalsContract, B as ConfigurationError, Bt as rateContract, C as InsufficientConfidentialBalanceError, Ct as ERC7984_WRAPPER_INTERFACE_ID, D as DelegationCooldownError, Dt as allowanceContract, E as DelegationContractIsSelfError, Et as supportsInterfaceContract, F as SignerNotConfiguredError, Ft as confidentialTransferContract, G as TransactionRevertedError, Gt as wrapContract, H as InvalidTransportKeyPairError, Ht as underlyingContract, I as SignerRequiredError, It as confidentialTransferFromContract, J as SigningFailedError, Jt as resolveStorage, K as DecryptionFailedError, Kt as ResolvedChainRelayer, L as WalletAccountNotReadyError, Lt as finalizeUnwrapContract, M as DelegationNotFoundError, Mt as symbolContract, N as DelegationNotPropagatedError, Nt as confidentialBalanceOfContract, O as DelegationDelegateEqualsContractError, Ot as approveContract, P as DelegationSelfNotAllowedError, Pt as confidentialTotalSupplyContract, Q as matchZamaError, R as WalletNotConnectedError, Rt as inferredTotalSupplyContract, S as ERC20ReadFailedError, St as ERC7984_INTERFACE_ID, T as AclPausedError, Tt as isConfidentialWrapperContract, U as NoCiphertextError, Ut as unwrapContract, V as RelayerRequestFailedError, Vt as setOperatorContract, W as TransportKeyPairExpiredError, Wt as unwrapFromBalanceContract, X as ZamaError, Y as SigningRejectedError, Yt as createConfig, Z as ZamaErrorCode, _ as Decryption, _t as getDelegationExpiryContract, a as savePendingUnshield, b as BalanceCheckUnavailableError, bt as transferAndCallContract, c as ListPairsOptions, ct as TokenWrapperPairWithMetadata, d as WrappedToken, dt as getTokenPairContract, et as EncryptedInput, f as BatchBalancesResult, ft as getTokenPairsContract, g as Delegations, gt as delegateForUserDecryptionContract, h as Permits, ht as isConfidentialTokenValidContract, i as loadPendingUnshieldRequest, j as DelegationExpiryUnchangedError, jt as nameContract, k as DelegationExpirationTooSoonError, kt as balanceOfContract, l as WrappersRegistry, lt as getConfidentialTokenAddressContract, m as Token, mt as getTokenPairsSliceContract, n as clearPendingUnshield, o as ZamaSDK, ot as PaginatedResult, p as BatchDecryptAsOptions, pt as getTokenPairsLengthContract, q as EncryptionFailedError, qt as resolveChainRelayers, r as loadPendingUnshield, s as DefaultRegistryAddresses, st as TokenWrapperPair, t as PendingUnshieldRequest, u as WrappersRegistryConfig, ut as getTokenAddressContract, v as BatchDecryptItem, vt as isHandleDelegatedContract, w as InsufficientERC20BalanceError, wt as isConfidentialTokenContract, x as BalanceErrorDetails, xt as ERC1363_INTERFACE_ID, y as BatchDecryptResult, yt as revokeDelegationContract, z as ChainMismatchError, zt as isOperatorContract } from "./index-DoVo9J1n.js";
+import { t as ZamaConfigViem } from "./types-DiZhtG8i.js";
 import { Address, Hex } from "viem";
 import { FheTypeName, FhevmInstanceConfig, InputProofBytesType, KmsDelegatedUserDecryptEIP712Type as KmsDelegatedDecryptEIP712Type, ZKProofLike } from "@zama-fhe/relayer-sdk/bundle";
 
@@ -75,5 +75,5 @@ declare class ChromeSessionStorage implements GenericStorage {
 /** Default singleton for application-wide use. */
 declare const chromeSessionStorage: ChromeSessionStorage;
 //#endregion
-export { ACL_TOPICS, type AclEvent, AclPausedError, AclTopics, type Address, type ApprovalStrategy, type ApproveUnderlyingSubmittedEvent, type AtLeastOneChain, BalanceCheckUnavailableError, type BalanceErrorDetails, type BaseEvent, BaseSigner, type BatchBalancesResult, type BatchDecryptAsOptions, type BatchDecryptItem, type BatchDecryptResult, ChainMismatchError, ChromeSessionStorage, type ClearValue, type CleartextRelayerConfig, type ConfidentialTransferEvent, ConfigurationError, type ContractAbi, type DecryptEndEvent, type DecryptErrorEvent, type EncryptedInput as DecryptInput, type PublicDecryptResult as DecryptPublicValuesResult, type DecryptResult, type DecryptStartEvent, type UserDecryptParams as DecryptValuesParams, Decryption, DecryptionFailedError, DefaultRegistryAddresses, type DelegatedUserDecryptParams as DelegatedDecryptValuesParams, type DelegatedForUserDecryptionEvent, DelegationContractIsSelfError, DelegationCooldownError, DelegationDelegateEqualsContractError, DelegationExpirationTooSoonError, DelegationExpiredError, DelegationExpiryUnchangedError, DelegationNotFoundError, DelegationNotPropagatedError, DelegationSelfNotAllowedError, type DelegationSubmittedEvent, Delegations, type EIP712TypedData, ERC1363_INTERFACE_ID, ERC20ReadFailedError, ERC7984_INTERFACE_ID, ERC7984_WRAPPER_INTERFACE_ID, type EncryptEndEvent, type EncryptErrorEvent, type EncryptInput, type EncryptParams, type EncryptResult, type EncryptStartEvent, type EncryptedValue, EncryptionFailedError, type FheChain, type FheEncryptionKey, type FheTypeName, type FhevmInstanceConfig, type FinalizeUnwrapSubmittedEvent, type GenericLogger, type GenericProvider, type GenericSigner, type GenericStorage, type Hex, IndexedDBStorage, type InputProofBytesType, InsufficientConfidentialBalanceError, InsufficientERC20BalanceError, InvalidTransportKeyPairError, type KmsDelegatedDecryptEIP712Type, type ListPairsOptions, MemoryStorage, MutableWalletAccountStore, type NetworkType, NoCiphertextError, type OnChainEvent, type PaginatedResult, type PendingUnshieldRequest, type Permission, Permits, type PublicParamsData, type RawLog, type ReadContractArgs, type ReadContractConfig, type ReadContractReturnType, type ReadFunctionName, type RelayerConfig, type RelayerDispatcher, RelayerRequestFailedError, type RelayerSDK, type RelayerSDKStatus, type ResolvedChainRelayer, type RevokeDelegationSubmittedEvent, type RevokedDelegationForUserDecryptionEvent, type SetOperatorSubmittedEvent, type ShieldCallbacks, type ShieldOptions, type ShieldPath, type ShieldSubmittedEvent, SignerNotConfiguredError, SignerRequiredError, SigningFailedError, SigningRejectedError, type StoredTransportKeyPair, TOKEN_TOPICS, Token, type TokenWrapperPair, type TokenWrapperPairWithMetadata, Topics, type TransactionErrorEvent, type TransactionOperation, type TransactionReceipt, type TransactionResult, TransactionRevertedError, type TransferCallbacks, type TransferFromSubmittedEvent, type TransferOptions, type TransferSubmittedEvent, type TransportKeyPair, TransportKeyPairExpiredError, type UnshieldCallbacks, type UnshieldOptions, type UnshieldPhase1SubmittedEvent, type UnshieldPhase2StartedEvent, type UnshieldPhase2SubmittedEvent, type UnwrapFinalizedEvent, type UnwrapRequestedEvent, type UnwrapSubmittedEvent, type WalletAccount, type WalletAccountChange, type WalletAccountListener, WalletAccountNotReadyError, type WalletAccountStore, WalletNotConnectedError, type WorkerLike, type WrappedEvent, WrappedToken, WrappersRegistry, type WrappersRegistryConfig, type WriteContractArgs, type WriteContractConfig, type WriteFunctionName, ZERO_ENCRYPTED_VALUE, type ZKProofLike, type ZamaConfig, type ZamaConfigBase, type ZamaConfigEthers, type ZamaConfigGeneric, type ZamaConfigViem, ZamaError, ZamaErrorCode, ZamaSDK, type ZamaSDKEvent, type ZamaSDKEventInput, type ZamaSDKEventListener, type ZamaSDKEventType, ZamaSDKEvents, allowanceContract, anvil, approveContract, balanceOfContract, bscTestnet, chains, chromeSessionStorage, clearPendingUnshield, cleartext, confidentialBalanceOfContract, confidentialTotalSupplyContract, confidentialTransferContract, confidentialTransferFromContract, createConfig, createWalletAccountStore, decimalsContract, decodeAclEvent, decodeAclEvents, decodeConfidentialTransfer, decodeDelegatedForUserDecryption, decodeOnChainEvent, decodeOnChainEvents, decodeRevokedDelegationForUserDecryption, decodeUnwrapFinalized, decodeUnwrapRequested, decodeWrapped, delegateForUserDecryptionContract, finalizeUnwrapContract, findDelegatedForUserDecryption, findRevokedDelegationForUserDecryption, findUnwrapRequested, findWrapped, getConfidentialTokenAddressContract, getDelegationExpiryContract, getTokenAddressContract, getTokenPairContract, getTokenPairsContract, getTokenPairsLengthContract, getTokenPairsSliceContract, hardhat, hoodi, indexedDBStorage, inferredTotalSupplyContract, ingenTestnet, isConfidentialTokenContract, isConfidentialTokenValidContract, isConfidentialWrapperContract, isEncryptedValueZero, isHandleDelegatedContract, isOperatorContract, loadPendingUnshield, loadPendingUnshieldRequest, mainnet, matchZamaError, memoryStorage, nameContract, rateContract, resolveChainRelayers, resolveStorage, revokeDelegationContract, savePendingUnshield, sepolia, setOperatorContract, supportsInterfaceContract, symbolContract, transferAndCallContract, underlyingContract, unwrapContract, unwrapFromBalanceContract, wrapContract };
+export { ACL_TOPICS, type AclEvent, AclPausedError, AclTopics, type Address, type ApprovalStrategy, type ApproveUnderlyingSubmittedEvent, type AtLeastOneChain, BalanceCheckUnavailableError, type BalanceErrorDetails, type BaseEvent, BaseSigner, type BatchBalancesResult, type BatchDecryptAsOptions, type BatchDecryptItem, type BatchDecryptResult, ChainMismatchError, ChromeSessionStorage, type ClearValue, type CleartextRelayerConfig, type ConfidentialTransferEvent, ConfigurationError, type ContractAbi, type DecryptEndEvent, type DecryptErrorEvent, type EncryptedInput as DecryptInput, type PublicDecryptResult as DecryptPublicValuesResult, type DecryptResult, type DecryptStartEvent, type UserDecryptParams as DecryptValuesParams, Decryption, DecryptionFailedError, DefaultRegistryAddresses, type DelegatedUserDecryptParams as DelegatedDecryptValuesParams, type DelegatedForUserDecryptionEvent, DelegationContractIsSelfError, DelegationCooldownError, DelegationDelegateEqualsContractError, DelegationExpirationTooSoonError, DelegationExpiredError, DelegationExpiryUnchangedError, DelegationNotFoundError, DelegationNotPropagatedError, DelegationSelfNotAllowedError, type DelegationSubmittedEvent, Delegations, type EIP712TypedData, ERC1363_INTERFACE_ID, ERC20ReadFailedError, ERC7984_INTERFACE_ID, ERC7984_WRAPPER_INTERFACE_ID, type EncryptEndEvent, type EncryptErrorEvent, type EncryptInput, type EncryptParams, type EncryptResult, type EncryptStartEvent, type EncryptedValue, EncryptionFailedError, type FheChain, type FheEncryptionKey, type FheTypeName, type FhevmInstanceConfig, type FinalizeUnwrapSubmittedEvent, type GenericLogger, type GenericProvider, type GenericSigner, type GenericStorage, type Hex, IndexedDBStorage, type InputProofBytesType, InsufficientConfidentialBalanceError, InsufficientERC20BalanceError, InvalidTransportKeyPairError, type KmsDelegatedDecryptEIP712Type, type ListPairsOptions, MemoryStorage, MutableWalletAccountStore, type NetworkType, NoCiphertextError, type OnChainEvent, type PaginatedResult, type PendingUnshieldRequest, type Permission, Permits, type PublicParamsData, type RawLog, type ReadContractArgs, type ReadContractConfig, type ReadContractReturnType, type ReadFunctionName, type RelayerConfig, type RelayerDispatcher, RelayerRequestFailedError, type RelayerSDK, type RelayerSDKStatus, type ResolvedChainRelayer, type RevokeDelegationSubmittedEvent, type RevokedDelegationForUserDecryptionEvent, type SetOperatorSubmittedEvent, type ShieldCallbacks, type ShieldOptions, type ShieldPath, type ShieldSubmittedEvent, SignerNotConfiguredError, SignerRequiredError, SigningFailedError, SigningRejectedError, type StoredTransportKeyPair, TOKEN_TOPICS, Token, type TokenWrapperPair, type TokenWrapperPairWithMetadata, Topics, type TransactionErrorEvent, type TransactionOperation, type TransactionReceipt, type TransactionResult, TransactionRevertedError, type TransferCallbacks, type TransferFromSubmittedEvent, type TransferOptions, type TransferSubmittedEvent, type TransportKeyPair, TransportKeyPairExpiredError, type UnshieldCallbacks, type UnshieldOptions, type UnshieldPhase1SubmittedEvent, type UnshieldPhase2StartedEvent, type UnshieldPhase2SubmittedEvent, type UnwrapFinalizedEvent, type UnwrapRequestedEvent, type UnwrapSubmittedEvent, type WalletAccount, type WalletAccountChange, type WalletAccountListener, WalletAccountNotReadyError, type WalletAccountStore, WalletNotConnectedError, type WorkerLike, type WrapEvent, WrappedToken, WrappersRegistry, type WrappersRegistryConfig, type WriteContractArgs, type WriteContractConfig, type WriteFunctionName, ZERO_ENCRYPTED_VALUE, type ZKProofLike, type ZamaConfig, type ZamaConfigBase, type ZamaConfigEthers, type ZamaConfigGeneric, type ZamaConfigViem, ZamaError, ZamaErrorCode, ZamaSDK, type ZamaSDKEvent, type ZamaSDKEventInput, type ZamaSDKEventListener, type ZamaSDKEventType, ZamaSDKEvents, allowanceContract, anvil, approveContract, balanceOfContract, bscTestnet, chains, chromeSessionStorage, clearPendingUnshield, cleartext, confidentialBalanceOfContract, confidentialTotalSupplyContract, confidentialTransferContract, confidentialTransferFromContract, createConfig, createWalletAccountStore, decimalsContract, decodeAclEvent, decodeAclEvents, decodeConfidentialTransfer, decodeDelegatedForUserDecryption, decodeOnChainEvent, decodeOnChainEvents, decodeRevokedDelegationForUserDecryption, decodeUnwrapFinalized, decodeUnwrapRequested, decodeWrap, delegateForUserDecryptionContract, finalizeUnwrapContract, findDelegatedForUserDecryption, findRevokedDelegationForUserDecryption, findUnwrapRequested, findWrap, getConfidentialTokenAddressContract, getDelegationExpiryContract, getTokenAddressContract, getTokenPairContract, getTokenPairsContract, getTokenPairsLengthContract, getTokenPairsSliceContract, hardhat, hoodi, indexedDBStorage, inferredTotalSupplyContract, ingenTestnet, isConfidentialTokenContract, isConfidentialTokenValidContract, isConfidentialWrapperContract, isEncryptedValueZero, isHandleDelegatedContract, isOperatorContract, loadPendingUnshield, loadPendingUnshieldRequest, mainnet, matchZamaError, memoryStorage, nameContract, rateContract, resolveChainRelayers, resolveStorage, revokeDelegationContract, savePendingUnshield, sepolia, setOperatorContract, supportsInterfaceContract, symbolContract, transferAndCallContract, underlyingContract, unwrapContract, unwrapFromBalanceContract, wrapContract };
 //# sourceMappingURL=index.d.ts.map