@zama-fhe/sdk 3.5.1 → 3.5.2-beta.1

package/dist/esm/{token-DOYtYc7P.js.map → token-DTHiLih_.js.map}

@@ -1 +1 @@
-{"version":3,"file":"token-DOYtYc7P.js","names":["#requireSigner","submitSdkTransaction"],"sources":["../../src/errors/encryption.ts","../../src/errors/rpc.ts","../../src/errors/chain.ts","../../src/errors/balance.ts","../../src/errors/fatal-batch.ts","../../src/utils/fhe-type.ts","../../src/utils/handles.ts","../../src/utils/alignment.ts","../../src/utils/concurrency.ts","../../src/utils/submit-transaction.ts","../../src/token/token.ts"],"sourcesContent":["import { ZamaError, ZamaErrorCode } from \"./base\";\n\n/** FHE encryption failed. */\nexport class EncryptionFailedError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.EncryptionFailed, message, options);\n    this.name = \"EncryptionFailedError\";\n  }\n}\n\n/** FHE decryption failed. */\nexport class DecryptionFailedError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.DecryptionFailed, message, options);\n    this.name = \"DecryptionFailedError\";\n  }\n}\n","import { ZamaError, ZamaErrorCode } from \"./base\";\n\n/**\n * The consumer's RPC provider rate-limited an on-chain read the SDK performs\n * during decryption (e.g. the ACL check) — HTTP 429 or JSON-RPC `-32005`. An\n * RPC-endpoint problem, **not** a decryption/entitlement failure, and safe to\n * **retry**. Kept distinct from the relayer's own back-pressure\n * ({@link RelayerRequestFailedError}).\n *\n * Backoff for chain RPC is owned by the consumer's transport: viem/ethers\n * already honor the `Retry-After` header and retry internally before this error\n * surfaces, so it is configured on the transport you pass via `chain.network`\n * (not re-implemented here).\n *\n * @example\n * ```ts\n * try {\n *   await sdk.decryption.decryptValues([{ encryptedValue, contractAddress }]);\n * } catch (e) {\n *   if (e instanceof RpcRateLimitError) {\n *     // back off and retry; consider a higher-throughput RPC endpoint\n *   }\n * }\n * ```\n */\nexport class RpcRateLimitError extends ZamaError {\n  /**\n   * Suggested delay before retrying, in **seconds**, when a numeric `retryAfter`\n   * is present on the error. Usually `undefined` for chain RPC: the `Retry-After`\n   * header is consumed by the consumer's viem/ethers transport (which owns the\n   * backoff), not surfaced here — see the class doc.\n   */\n  readonly retryAfter: number | undefined;\n\n  constructor(message: string, options?: ErrorOptions & { retryAfter?: number }) {\n    const { retryAfter, ...errorOptions } = options ?? {};\n    super(ZamaErrorCode.RpcRateLimited, message, errorOptions);\n    this.name = \"RpcRateLimitError\";\n    this.retryAfter = retryAfter;\n  }\n}\n","import { ZamaError, ZamaErrorCode } from \"./base\";\n\n/**\n * Thrown when the signer and provider are connected to different chains at the\n * start of a write operation.\n *\n * Every write method runs a chain-alignment pre-flight check. If\n * `signer.getChainId()` and `provider.getChainId()` return different values,\n * this error is thrown before any RPC mutation is attempted.\n *\n * @example\n * ```ts\n * try {\n *   await token.shield(1000n);\n * } catch (e) {\n *   if (e instanceof ChainMismatchError) {\n *     console.error(\n *       `Signer is on chain ${e.signerChainId} but provider is on chain ${e.providerChainId}`,\n *     );\n *   }\n * }\n * ```\n */\nexport class ChainMismatchError extends ZamaError {\n  /** Name of the operation that triggered the check. */\n  readonly operation: string;\n  /** Chain ID the signer is connected to. */\n  readonly signerChainId: number;\n  /** Chain ID the provider is connected to. */\n  readonly providerChainId: number;\n\n  constructor(\n    {\n      operation,\n      signerChainId,\n      providerChainId,\n    }: { operation: string; signerChainId: number; providerChainId: number },\n    options?: ErrorOptions,\n  ) {\n    super(\n      ZamaErrorCode.ChainMismatch,\n      `Operation \"${operation}\" requires signer and provider to be on the same chain, ` +\n        `but signer is on chain ${signerChainId} and provider is on chain ${providerChainId}.`,\n      options,\n    );\n    this.name = \"ChainMismatchError\";\n    this.operation = operation;\n    this.signerChainId = signerChainId;\n    this.providerChainId = providerChainId;\n  }\n}\n","import type { Address } from \"viem\";\nimport { ZamaError, ZamaErrorCode } from \"./base\";\n\n/** Structured details shared by balance-related errors. */\nexport interface BalanceErrorDetails {\n  /** Amount the caller requested, in the token's base units. */\n  readonly requested: bigint;\n  /** Amount available at the time of the check, in the token's base units. */\n  readonly available: bigint;\n  /** Address of the token contract involved. */\n  readonly token: Address;\n}\n\n/** Confidential (cToken) balance is insufficient for the requested operation. */\nexport class InsufficientConfidentialBalanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The available balance at the time of the check. */\n  readonly available: bigint;\n  /** The token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientConfidentialBalance, message, options);\n    this.name = \"InsufficientConfidentialBalanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** ERC-20 balance is insufficient for the requested shield amount. */\nexport class InsufficientERC20BalanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The available balance at the time of the check. */\n  readonly available: bigint;\n  /** The ERC-20 token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientERC20Balance, message, options);\n    this.name = \"InsufficientERC20BalanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** ERC-20 allowance granted to the wrapper is insufficient for the requested wrap amount. */\nexport class InsufficientAllowanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The allowance available at the time of the check. */\n  readonly available: bigint;\n  /** The underlying ERC-20 token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientAllowance, message, options);\n    this.name = \"InsufficientAllowanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** Balance validation could not be performed (no cached credentials and decryption not possible). */\nexport class BalanceCheckUnavailableError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.BalanceCheckUnavailable, message, options);\n    this.name = \"BalanceCheckUnavailableError\";\n  }\n}\n\n/** A public ERC-20 read (e.g. balanceOf) failed due to a network or contract error. */\nexport class ERC20ReadFailedError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.ERC20ReadFailed, message, options);\n    this.name = \"ERC20ReadFailedError\";\n  }\n}\n","import { KeyWrappingError, RevokedKmsContextError } from \"./credential\";\nimport { ConfigurationError } from \"./relayer\";\nimport { RpcRateLimitError } from \"./rpc\";\nimport { SigningRejectedError, SigningFailedError } from \"./signing\";\n\n/**\n * Returns `true` for errors that should abort an entire batch operation\n * rather than be recorded per-item — wallet signature rejected, signing\n * infrastructure broken, SDK misconfigured, the RPC provider throttling, or\n * transport key pair wrapping unusable for the whole session (wrong or missing\n * `transportKeyPairDerivationSecret`, `crypto.subtle` unavailable).\n * These are systemic failures that won't recover within the same call; for a\n * rate-limit in particular, the per-item retry loop would only amplify the\n * throttle by re-hitting the already-rate-limited endpoint. A revoked KMS\n * context is likewise batch-wide: every item's permit shares the dead context,\n * and the per-item loop would trigger one evict-and-regrant wallet prompt per\n * item instead of the one the batch attempt already spent.\n *\n * Callers iterating over a batch (e.g. per-token decrypt) should rethrow when\n * this predicate is true so the whole batch aborts, and record the error\n * per-item otherwise.\n */\nexport function isFatalBatchError(error: unknown): boolean {\n  return (\n    error instanceof SigningRejectedError ||\n    error instanceof SigningFailedError ||\n    error instanceof ConfigurationError ||\n    error instanceof RpcRateLimitError ||\n    error instanceof KeyWrappingError ||\n    error instanceof RevokedKmsContextError\n  );\n}\n","// Copied from @zama-fhe/relayer-sdk/src/sdk/FheType.ts\n// Pure utility functions with zero WASM dependency.\n// Adapted to use simple errors instead of RelayerErrorBase hierarchy.\n\n////////////////////////////////////////////////////////////////////////////////\n// Types (from types/primitives.d.ts)\n////////////////////////////////////////////////////////////////////////////////\n\nexport interface FheTypeNameToIdMap {\n  ebool: 0;\n  //euint4: 1; deprecated\n  euint8: 2;\n  euint16: 3;\n  euint32: 4;\n  euint64: 5;\n  euint128: 6;\n  eaddress: 7;\n  euint256: 8;\n}\n\nexport interface FheTypeIdToNameMap {\n  0: \"ebool\";\n  //1: 'euint4'; deprecated\n  2: \"euint8\";\n  3: \"euint16\";\n  4: \"euint32\";\n  5: \"euint64\";\n  6: \"euint128\";\n  7: \"eaddress\";\n  8: \"euint256\";\n}\n\nexport interface FheTypeEncryptionBitwidthToIdMap {\n  2: FheTypeNameToIdMap[\"ebool\"];\n  8: FheTypeNameToIdMap[\"euint8\"];\n  16: FheTypeNameToIdMap[\"euint16\"];\n  32: FheTypeNameToIdMap[\"euint32\"];\n  64: FheTypeNameToIdMap[\"euint64\"];\n  128: FheTypeNameToIdMap[\"euint128\"];\n  160: FheTypeNameToIdMap[\"eaddress\"];\n  256: FheTypeNameToIdMap[\"euint256\"];\n}\n\nexport type FheTypeIdToEncryptionBitwidthMap = {\n  [K in keyof FheTypeEncryptionBitwidthToIdMap as FheTypeEncryptionBitwidthToIdMap[K]]: K;\n};\n\ntype Prettify<T> = { [K in keyof T]: T[K] } & {};\n\nexport type FheTypeName = Prettify<keyof FheTypeNameToIdMap>;\nexport type FheTypeId = Prettify<keyof FheTypeIdToNameMap>;\nexport type EncryptionBits = Prettify<keyof FheTypeEncryptionBitwidthToIdMap>;\n\n////////////////////////////////////////////////////////////////////////////////\n// Lookup Maps\n////////////////////////////////////////////////////////////////////////////////\n\nconst MINIMUM_ENCRYPTION_BIT_WIDTH = 2;\n\nconst FheTypeNameToId: FheTypeNameToIdMap = {\n  ebool: 0,\n  //euint4: 1, deprecated\n  euint8: 2,\n  euint16: 3,\n  euint32: 4,\n  euint64: 5,\n  euint128: 6,\n  eaddress: 7,\n  euint256: 8,\n} as const;\n\nconst FheTypeIdToName: FheTypeIdToNameMap = {\n  0: \"ebool\",\n  //1: 'euint4', deprecated\n  2: \"euint8\",\n  3: \"euint16\",\n  4: \"euint32\",\n  5: \"euint64\",\n  6: \"euint128\",\n  7: \"eaddress\",\n  8: \"euint256\",\n} as const;\n\nconst FheTypeIdToEncryptionBitwidth: FheTypeIdToEncryptionBitwidthMap = {\n  0: 2,\n  //1:?, euint4 deprecated\n  2: 8,\n  3: 16,\n  4: 32,\n  5: 64,\n  6: 128,\n  7: 160,\n  8: 256,\n} as const;\n\nconst EncryptionBitwidthToFheTypeId: FheTypeEncryptionBitwidthToIdMap = {\n  2: 0,\n  8: 2,\n  16: 3,\n  32: 4,\n  64: 5,\n  128: 6,\n  160: 7,\n  256: 8,\n} as const;\n\nObject.freeze(FheTypeNameToId);\nObject.freeze(FheTypeIdToName);\nObject.freeze(FheTypeIdToEncryptionBitwidth);\nObject.freeze(EncryptionBitwidthToFheTypeId);\n\n////////////////////////////////////////////////////////////////////////////////\n// Type Guards\n////////////////////////////////////////////////////////////////////////////////\n\nexport function isFheTypeId(value: unknown): value is FheTypeId {\n  switch (value as FheTypeId) {\n    case 0:\n    case 2:\n    case 3:\n    case 4:\n    case 5:\n    case 6:\n    case 7:\n    case 8:\n      return true;\n    default:\n      return false;\n  }\n}\n\nexport function isFheTypeName(value: unknown): value is FheTypeName {\n  if (typeof value !== \"string\") {\n    return false;\n  }\n  return value in FheTypeNameToId;\n}\n\nexport function isEncryptionBits(value: unknown): value is EncryptionBits {\n  if (typeof value !== \"number\") {\n    return false;\n  }\n  return value in EncryptionBitwidthToFheTypeId;\n}\n\n////////////////////////////////////////////////////////////////////////////////\n// Converters\n////////////////////////////////////////////////////////////////////////////////\n\nexport function fheTypeIdFromEncryptionBits(bitwidth: number): FheTypeId {\n  if (!isEncryptionBits(bitwidth)) {\n    throw new Error(`Invalid encryption bits ${bitwidth}`);\n  }\n  return EncryptionBitwidthToFheTypeId[bitwidth];\n}\n\nexport function fheTypeIdFromName(name: string): FheTypeId {\n  if (!isFheTypeName(name)) {\n    throw new Error(`Invalid FheType name '${name}'`);\n  }\n  return FheTypeNameToId[name];\n}\n\nexport function fheTypeNameFromId(id: number): FheTypeName {\n  if (!isFheTypeId(id)) {\n    throw new Error(`Invalid FheType id '${id}'`);\n  }\n  return FheTypeIdToName[id];\n}\n\nexport function encryptionBitsFromFheTypeId(typeId: number): EncryptionBits {\n  if (!isFheTypeId(typeId)) {\n    throw new Error(`Invalid FheType id '${typeId}'`);\n  }\n  const bw = FheTypeIdToEncryptionBitwidth[typeId];\n  if (bw < MINIMUM_ENCRYPTION_BIT_WIDTH) {\n    throw new Error(\n      `Invalid FheType encryption bit width: ${bw}. Minimum is ${MINIMUM_ENCRYPTION_BIT_WIDTH} bits.`,\n    );\n  }\n  return bw;\n}\n\nexport function encryptionBitsFromFheTypeName(name: string): EncryptionBits {\n  if (!isFheTypeName(name)) {\n    throw new Error(`Invalid FheType name '${name}'`);\n  }\n  const bw = FheTypeIdToEncryptionBitwidth[FheTypeNameToId[name]];\n  if (bw < MINIMUM_ENCRYPTION_BIT_WIDTH) {\n    throw new Error(\n      `Invalid FheType encryption bit width: ${bw}. Minimum is ${MINIMUM_ENCRYPTION_BIT_WIDTH} bits.`,\n    );\n  }\n  return bw;\n}\n","import type { EncryptedValue } from \"../relayer/types\";\nimport { encryptionBitsFromFheTypeId, isFheTypeId } from \"./fhe-type\";\n\n/** All-zero encrypted-value sentinel — a 32-byte zero handle representing the cleartext value `0`. */\nexport const ZERO_ENCRYPTED_VALUE =\n  \"0x0000000000000000000000000000000000000000000000000000000000000000\" as const;\n\n/**\n * Check whether an encrypted value represents the zero value.\n */\nexport function isEncryptedValueZero(encryptedValue: string): boolean {\n  return encryptedValue === ZERO_ENCRYPTED_VALUE || encryptedValue === \"0x\";\n}\n\n/**\n * Per-request cleartext-bit budget enforced by the KMS gateway, mirrored from\n * `@fhevm/sdk`'s `MAX_KMS_DECRYPT_DECRYPTION_BIT_LIMIT` (protocol-level constant,\n * not imported — see {@link MAX_CONTRACTS_PER_PERMIT} for why). Internal: decrypt\n * requests are chunked to respect it automatically, so callers never need this value.\n */\nexport const MAX_DECRYPTION_REQUEST_BITS = 2048;\n\n/** Max encryption bit width among all currently-known FHE types (euint256). */\nconst MAX_KNOWN_ENCRYPTION_BITS = 256;\n\n/**\n * Cleartext bit cost of decrypting a single handle, derived from its FHE\n * type (encoded at bits 8-15 of the handle — the same layout `@fhevm/sdk`'s\n * `FhevmHandle` decodes, byte 30 of the 32-byte handle).\n *\n * Falls back to {@link MAX_KNOWN_ENCRYPTION_BITS} for an unrecognized type\n * byte, or for a value that isn't parseable hex at all, instead of throwing.\n * A real on-chain handle is always well-formed with a valid type byte, so\n * this fallback only ever fires for synthetic test/placeholder handles —\n * deliberately more permissive than the relayer's own strict validation so\n * chunking stays safe without requiring every test fixture to encode a real\n * FHE handle. Do not tighten this to match relayer semantics.\n */\nexport function encryptionBitsForHandle(encryptedValue: EncryptedValue): number {\n  let handleValue: bigint;\n  try {\n    handleValue = BigInt(encryptedValue);\n  } catch {\n    return MAX_KNOWN_ENCRYPTION_BITS;\n  }\n  const typeByte = Number((handleValue >> 8n) & 0xffn);\n  return isFheTypeId(typeByte) ? encryptionBitsFromFheTypeId(typeByte) : MAX_KNOWN_ENCRYPTION_BITS;\n}\n\n/**\n * Split `handles` into groups whose cumulative cleartext-bit cost never\n * exceeds `maxBits`, preserving input order. Unlike {@link chunkContracts}\n * (fixed-size slices), a greedy accumulate-until-exceeded walk is required\n * since per-handle cost varies by FHE type. A handle whose own cost exceeds\n * `maxBits` still gets a solo chunk — always makes forward progress.\n */\nexport function chunkHandlesByBitBudget(\n  handles: readonly EncryptedValue[],\n  maxBits: number = MAX_DECRYPTION_REQUEST_BITS,\n): EncryptedValue[][] {\n  const chunks: EncryptedValue[][] = [];\n  let current: EncryptedValue[] = [];\n  let currentBits = 0;\n\n  for (const handle of handles) {\n    const bits = encryptionBitsForHandle(handle);\n    if (current.length > 0 && currentBits + bits > maxBits) {\n      chunks.push(current);\n      current = [];\n      currentBits = 0;\n    }\n    current.push(handle);\n    currentBits += bits;\n  }\n  if (current.length > 0) {\n    chunks.push(current);\n  }\n  return chunks;\n}\n","import {\n  ChainMismatchError,\n  SignerNotConfiguredError,\n  WalletAccountNotReadyError,\n} from \"../errors\";\nimport type { GenericProvider, GenericSigner, WalletAccount } from \"../types\";\n\n/**\n * Pre-flight guard for signer-required operations. Resolves the connected\n * wallet account (refreshing once if the signer reports it isn't ready) and\n * verifies the signer's chain matches the provider's.\n *\n * @internal\n */\nexport async function requireAlignedWalletAccount(\n  operation: string,\n  signer: GenericSigner | undefined,\n  provider: GenericProvider,\n): Promise<WalletAccount> {\n  if (!signer) {\n    throw new SignerNotConfiguredError(operation);\n  }\n  let account: WalletAccount;\n  try {\n    account = signer.requireWalletAccount(operation);\n  } catch (error) {\n    if (!(error instanceof WalletAccountNotReadyError) || !signer.refreshWalletAccount) {\n      throw error;\n    }\n    await signer.refreshWalletAccount();\n    account = signer.requireWalletAccount(operation);\n  }\n  const providerChainId = await provider.getChainId();\n  if (account.chainId !== providerChainId) {\n    throw new ChainMismatchError({ operation, signerChainId: account.chainId, providerChainId });\n  }\n  return account;\n}\n\n/**\n * Variant of {@link requireAlignedWalletAccount} that returns only the aligned\n * chain ID. Useful when a write path only needs to ensure signer/provider\n * coherence and doesn't otherwise consume the account.\n *\n * @internal\n */\nexport async function requireChainAlignment(\n  operation: string,\n  signer: GenericSigner | undefined,\n  provider: GenericProvider,\n): Promise<number> {\n  return (await requireAlignedWalletAccount(operation, signer, provider)).chainId;\n}\n","/**\n * Execute an array of async thunks with bounded concurrency.\n * Defaults to `Infinity` (equivalent to `Promise.all`).\n */\nexport async function pLimit<T>(\n  fns: (() => Promise<T>)[],\n  maxConcurrency = Infinity,\n): Promise<T[]> {\n  if (Number.isFinite(maxConcurrency) && maxConcurrency <= 0) {\n    throw new Error(\"maxConcurrency must be a positive number\");\n  }\n  if (!Number.isFinite(maxConcurrency) || maxConcurrency >= fns.length) {\n    return Promise.all(fns.map((f) => f()));\n  }\n\n  const results: T[] = Array.from({ length: fns.length });\n  let index = 0;\n\n  async function worker() {\n    while (index < fns.length) {\n      const i = index++;\n      if (fns[i]) {\n        results[i] = await fns[i]();\n      }\n    }\n  }\n\n  await Promise.all(Array.from({ length: maxConcurrency }, worker));\n  return results;\n}\n","import type { Hex } from \"viem\";\nimport { TransactionRevertedError, ZamaError } from \"../errors\";\nimport type { TransactionOperation, ZamaSDKEventInput } from \"../events/sdk-events\";\nimport { transactionOperationMetadata, ZamaSDKEvents } from \"../events/sdk-events\";\nimport type {\n  GenericLogger,\n  GenericProvider,\n  GenericSigner,\n  TransactionResult,\n  WriteContractConfig,\n} from \"../types\";\nimport { swallow } from \"./swallow\";\n\n/**\n * Shared write-transaction pipeline for SDK calls that submit a transaction.\n *\n * On success: writes the tx, emits the per-operation submitted event from\n * {@link transactionOperationMetadata}, fires `onSubmitted`, waits for the\n * receipt, and returns `{ txHash, receipt }`.\n *\n * On failure: emits a {@link ZamaSDKEvents.TransactionError} event with the\n * transaction-level error it will throw, then throws it. Existing `ZamaError`\n * instances are rethrown as-is; all other failures are wrapped in\n * `TransactionRevertedError` with the original error as `cause`.\n */\nexport async function submitTransaction(params: {\n  operation: TransactionOperation;\n  signer: GenericSigner;\n  provider: GenericProvider;\n  config: WriteContractConfig;\n  emit: (input: ZamaSDKEventInput) => void;\n  onSubmitted?: (txHash: Hex) => void;\n  logger: GenericLogger;\n}): Promise<TransactionResult> {\n  const { operation, signer, provider, config, emit, onSubmitted, logger } = params;\n  const metadata = transactionOperationMetadata[operation];\n\n  try {\n    const txHash = await signer.writeContract(config);\n    emit(metadata.submittedEvent(txHash));\n    void swallow(`${operation}: onSubmitted`, () => onSubmitted?.(txHash), logger);\n    const receipt = await provider.waitForTransactionReceipt(txHash);\n    return { txHash, receipt };\n  } catch (error) {\n    const failure =\n      error instanceof ZamaError\n        ? error\n        : new TransactionRevertedError(`Transaction failed during ${operation}`, { cause: error });\n\n    emit({ type: ZamaSDKEvents.TransactionError, operation, error: failure });\n    throw failure;\n  }\n}\n","import { type Address, getAddress, type Hex } from \"viem\";\nimport {\n  confidentialBalanceOfContract,\n  confidentialTransferAndCallContract,\n  confidentialTransferContract,\n  confidentialTransferFromAndCallContract,\n  confidentialTransferFromContract,\n  decimalsContract,\n  ERC7984_INTERFACE_ID,\n  ERC7984_WRAPPER_INTERFACE_ID,\n  isOperatorContract,\n  nameContract,\n  setOperatorContract,\n  supportsInterfaceContract,\n  symbolContract,\n} from \"../contracts\";\nimport {\n  BalanceCheckUnavailableError,\n  ConfigurationError,\n  DecryptionFailedError,\n  EncryptionFailedError,\n  InsufficientConfidentialBalanceError,\n  isFatalBatchError,\n  requireConfigured,\n  ZamaError,\n} from \"../errors\";\nimport type { TransactionOperation, ZamaSDKEventInput } from \"../events/sdk-events\";\nimport type { EncryptedValue } from \"../relayer/types\";\nimport { toError } from \"../utils\";\nimport { requireAlignedWalletAccount, requireChainAlignment } from \"../utils/alignment\";\nimport { assertBigint } from \"../utils/assertions\";\nimport { pLimit } from \"../utils/concurrency\";\nimport { isEncryptedValueZero } from \"../utils/handles\";\nimport { submitTransaction as submitSdkTransaction } from \"../utils/submit-transaction\";\nimport { swallow } from \"../utils/swallow\";\nimport type {\n  GenericSigner,\n  TransactionResult,\n  TransferCallbacks,\n  TransferOptions,\n  WriteContractConfig,\n} from \"../types\";\nimport type { ZamaSDK } from \"../zama-sdk\";\n\n/** Options for {@link Token.batchDecryptBalancesAs}. */\nexport interface BatchDecryptAsOptions {\n  /** The address of the account that delegated decryption rights. */\n  delegatorAddress: Address;\n  /** Pre-fetched encrypted values. When omitted, they are fetched from the chain. */\n  encryptedValues?: EncryptedValue[];\n  /**\n   * The account whose on-chain balance to read. Defaults to the delegator\n   * address, which is the common case (the delegator grants permission to\n   * decrypt their own balance). Only set this when the account differs\n   * from the delegator.\n   *\n   * Matches the `account` parameter of `confidentialBalanceOf(account)` on-chain.\n   */\n  accountAddress?: Address;\n  /** Maximum number of concurrent decrypt calls. Default: 10. */\n  maxConcurrency?: number;\n  /** Called when decryption fails for a single token. Return a fallback bigint. */\n  onError?: (error: Error, address: Address) => bigint;\n}\n\n/** Result of {@link Token.batchBalancesOf}. */\nexport interface BatchBalancesResult {\n  /** Successfully decrypted balances, keyed by token address. */\n  results: Map<Address, bigint>;\n  /** Per-token errors for tokens that failed to decrypt. */\n  errors: Map<Address, ZamaError>;\n}\n\n/**\n * High-level interface for an ERC-7984 confidential token.\n * Hides FHE complexity (encryption, decryption, EIP-712 signing) behind\n * familiar ERC-20-like methods.\n *\n * For ERC-7984 wrappers (shield/unshield), use {@link WrappedToken} instead —\n * it extends `Token` with wrapper-specific operations.\n *\n * Decryption, credentials, caching, and event emission are handled by the\n * owning {@link ZamaSDK} — this class only exposes token-scoped helpers\n * that delegate to `sdk.decryption.decryptValues` and `sdk.permits.grantPermit`.\n */\nexport class Token {\n  /** The SDK instance this token operates through. */\n  readonly sdk: ZamaSDK;\n  /** Checksummed address of the confidential token contract. */\n  readonly address: Address;\n\n  constructor(sdk: ZamaSDK, address: Address) {\n    this.sdk = sdk;\n    this.address = getAddress(address);\n  }\n\n  /** Resolve `sdk.signer` or throw {@link SignerNotConfiguredError} tagged with `operation`. */\n  #requireSigner(operation: string): GenericSigner {\n    return requireConfigured(this.sdk.signer, operation);\n  }\n\n  // METADATA\n\n  /** Read the token name from the contract. */\n  async name(): Promise<string> {\n    return this.sdk.provider.readContract(nameContract(this.address));\n  }\n\n  /** Read the token symbol from the contract. */\n  async symbol(): Promise<string> {\n    return this.sdk.provider.readContract(symbolContract(this.address));\n  }\n\n  /** Read the token decimals from the contract. */\n  async decimals(): Promise<number> {\n    return this.sdk.provider.readContract(decimalsContract(this.address));\n  }\n\n  // ERC-165 DISCOVERY\n\n  /**\n   * ERC-165 check for {@link ERC7984_INTERFACE_ID} support.\n   *\n   * @returns `true` if the contract implements the ERC-7984 confidential token interface.\n   */\n  async isConfidential(): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      supportsInterfaceContract(this.address, ERC7984_INTERFACE_ID),\n    );\n  }\n\n  /**\n   * ERC-165 check for IERC7984ERC20Wrapper support.\n   *\n   * @returns `true` if the contract implements the ERC-7984 wrapper interface\n   *   ({@link ERC7984_WRAPPER_INTERFACE_ID}, `0x1f1c62b2`).\n   */\n  async isWrapper(): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      supportsInterfaceContract(this.address, ERC7984_WRAPPER_INTERFACE_ID),\n    );\n  }\n\n  // BALANCES\n\n  /**\n   * Decrypt and return the plaintext balance for the given owner.\n   * Acquires FHE credentials via a wallet signature if none are cached.\n   *\n   * @param owner - Balance owner address.\n   * @returns The decrypted plaintext balance as a bigint.\n   * @throws if FHE decryption fails. {@link DecryptionFailedError}\n   *\n   * @example\n   * ```ts\n   * const balance = await token.balanceOf(\"0xOwner\");\n   * ```\n   */\n  async balanceOf(owner: Address): Promise<bigint> {\n    const ownerAddress = getAddress(owner);\n    const encryptedValue = await this.readConfidentialBalanceOf(ownerAddress);\n    const result = await this.sdk.decryption.decryptValues([\n      { encryptedValue, contractAddress: this.address },\n    ]);\n    const value = result[encryptedValue];\n    if (value === undefined) {\n      throw new DecryptionFailedError(`Decryption returned no value for ${encryptedValue}`);\n    }\n    assertBigint(value, \"balanceOf: result[encryptedValue]\");\n    return value;\n  }\n\n  /**\n   * Return the raw encrypted balance without decrypting.\n   *\n   * @param owner - Balance owner address.\n   * @returns The encrypted balance as a hex string.\n   *\n   * @example\n   * ```ts\n   * const encryptedValue = await token.confidentialBalanceOf(\"0xOwner\");\n   * ```\n   */\n  async confidentialBalanceOf(owner: Address): Promise<EncryptedValue> {\n    return this.readConfidentialBalanceOf(getAddress(owner));\n  }\n\n  /**\n   * Decrypt the balance of a delegator using delegated decryption credentials.\n   * The connected signer acts as the delegatee who has been granted permission\n   * by the delegator to decrypt their balance.\n   *\n   * Clear values are cached in storage keyed by `(account, token, encryptedValue)`.\n   * Because every on-chain balance change produces a new encrypted value,\n   * stale cache entries are never served. Cache write failures are silently\n   * ignored — they do not affect the returned value.\n   *\n   * @param delegatorAddress - The address of the account that delegated decryption rights.\n   * @param accountAddress - The account whose on-chain balance to read. Defaults\n   *   to the delegator address.\n   * @returns The decrypted plaintext balance as a bigint.\n   * @throws if no active delegation exists. {@link DelegationNotFoundError}\n   * @throws if the delegation has expired. {@link DelegationExpiredError}\n   * @throws if delegated decryption fails. {@link DecryptionFailedError}\n   *\n   * @example\n   * ```ts\n   * const balance = await token.decryptBalanceAs({\n   *   delegatorAddress: \"0xDelegator\",\n   * });\n   * ```\n   */\n  async decryptBalanceAs({\n    delegatorAddress,\n    accountAddress,\n  }: {\n    delegatorAddress: Address;\n    accountAddress?: Address;\n  }): Promise<bigint> {\n    await requireChainAlignment(\"decryptBalanceAs\", this.sdk.signer, this.sdk.provider);\n    const normalizedDelegator = getAddress(delegatorAddress);\n    const normalizedAccount = accountAddress ? getAddress(accountAddress) : normalizedDelegator;\n\n    const encryptedValue = await this.readConfidentialBalanceOf(normalizedAccount);\n    if (isEncryptedValueZero(encryptedValue)) {\n      return 0n;\n    }\n\n    const result = await this.sdk.decryption.delegatedDecryptValues(\n      [{ encryptedValue, contractAddress: this.address }],\n      normalizedDelegator,\n      normalizedAccount,\n    );\n\n    const value = result[encryptedValue];\n    if (value === undefined) {\n      throw new DecryptionFailedError(\n        `Delegated decryption returned no value for ${encryptedValue}`,\n      );\n    }\n    assertBigint(value, \"decryptBalanceAs: result[encryptedValue]\");\n    return value;\n  }\n\n  // BATCH STATICS\n\n  /**\n   * Decrypt confidential balances for multiple tokens in parallel, returning\n   * successes and per-token errors separately. Pre-authorizes all token\n   * addresses in a single wallet signature, then delegates each decrypt to\n   * `sdk.decryption.decryptValues`.\n   *\n   * Tokens that fail to decrypt land in `errors`; the batch keeps going.\n   *\n   * @param tokens - Array of {@link Token} instances bound to the same SDK.\n   * @param owner - Balance owner address.\n   * @returns `{ results, errors }` partitioning the per-token outcomes.\n   * @throws A failure that affects the whole session (rejected signature,\n   * misconfiguration, RPC rate limit, key unwrapping failure, revoked KMS\n   * context) rejects the call instead of landing in `errors`.\n   *\n   * @example\n   * ```ts\n   * const { results, errors } = await Token.batchBalancesOf(tokens, owner);\n   * ```\n   */\n  static async batchBalancesOf(tokens: Token[], owner: Address): Promise<BatchBalancesResult> {\n    const results = new Map<Address, bigint>();\n    const errors = new Map<Address, ZamaError>();\n    if (tokens.length === 0) {\n      return { results, errors };\n    }\n\n    const sdk = Token.assertSameSdk(tokens);\n    // Fail fast on chain mismatch before prompting the wallet for a signature.\n    await requireChainAlignment(\"batchBalancesOf\", sdk.signer, sdk.provider);\n    // Pre-authorize the full token set in one wallet signature so subsequent\n    // per-token decryptValues calls reuse the cached credentials.\n    await sdk.permits.grantPermit(tokens.map((t) => t.address));\n\n    // `pLimit` cannot cancel calls that already started. The shared flag stops\n    // the queued tokens from starting once a fatal error is seen, so they do\n    // not each trigger their own recovery wallet prompt.\n    let aborted = false;\n    let fatal: unknown;\n\n    const outcomes = await pLimit(\n      tokens.map((t) => async () => {\n        if (aborted) {\n          return { status: \"aborted\" as const };\n        }\n        try {\n          return { status: \"fulfilled\" as const, value: await t.balanceOf(owner) };\n        } catch (reason) {\n          // A fatal error (rejected signature, revoked KMS context, rate\n          // limit) would fail every token: stop the batch.\n          if (isFatalBatchError(reason)) {\n            aborted = true;\n            fatal ??= reason;\n            return { status: \"aborted\" as const };\n          }\n          return { status: \"rejected\" as const, reason };\n        }\n      }),\n      5,\n    );\n\n    // Some tokens were never attempted after the abort, so a partial result\n    // would be wrong: reject the whole call.\n    if (fatal !== undefined) {\n      throw fatal;\n    }\n\n    for (let i = 0; i < tokens.length; i++) {\n      const tokenAddress = tokens[i]!.address;\n      const outcome = outcomes[i]!;\n      if (outcome.status === \"aborted\") {\n        continue;\n      }\n      if (outcome.status === \"fulfilled\") {\n        results.set(tokenAddress, outcome.value);\n      } else {\n        const reason = outcome.reason;\n        const error =\n          reason instanceof ZamaError\n            ? reason\n            : new DecryptionFailedError(toError(reason).message, { cause: reason });\n        errors.set(tokenAddress, error);\n      }\n    }\n\n    // Total failure: surface the first error so callers know nothing decrypted.\n    if (errors.size === tokens.length) {\n      const firstError = errors.values().next().value;\n      throw firstError ?? new DecryptionFailedError(\"All token balance decryptions failed\");\n    }\n\n    return { results, errors };\n  }\n\n  /**\n   * Batch decrypt confidential balances as a delegate across multiple tokens.\n   * Mirrors {@link batchBalancesOf} but uses delegated credentials.\n   *\n   * **Error handling:** If a per-token decryption fails and no `onError` callback\n   * is provided, errors are collected and thrown as an aggregated\n   * `DecryptionFailedError`. When the relayer returns no value for an encrypted value,\n   * a `DecryptionFailedError` is thrown for that token (never silently returns `0n`).\n   * Pass `onError: () => 0n` to opt into the silent zero behavior.\n   *\n   * @param tokens - Array of Token instances to decrypt balances for.\n   * @param options - Delegated decryption configuration.\n   * @returns A Map from token address to decrypted balance.\n   * @throws if no active delegation exists. {@link DelegationNotFoundError}\n   * @throws if the delegation has expired. {@link DelegationExpiredError}\n   * @throws if any decryption fails and no `onError` is provided. {@link DecryptionFailedError}\n   * @throws A failure that affects the whole session (rejected signature, RPC\n   * rate limit, revoked KMS context) rejects the call even when `onError` is\n   * provided.\n   *\n   * @example\n   * ```ts\n   * const balances = await Token.batchDecryptBalancesAs(tokens, {\n   *   delegatorAddress: \"0xDelegator\",\n   *   onError: (err, addr) => { console.error(addr, err); return 0n; },\n   * });\n   * ```\n   */\n  static async batchDecryptBalancesAs(\n    tokens: Token[],\n    options: BatchDecryptAsOptions,\n  ): Promise<Map<Address, bigint>> {\n    if (tokens.length === 0) {\n      return new Map();\n    }\n\n    const sdk = Token.assertSameSdk(tokens);\n    const results = new Map<Address, bigint>();\n    const errors = new Map<Address, ZamaError>();\n    const normalizedAccount = options.accountAddress\n      ? getAddress(options.accountAddress)\n      : getAddress(options.delegatorAddress);\n    const maxConcurrency = options.maxConcurrency ?? 10;\n    if (options.encryptedValues && tokens.length !== options.encryptedValues.length) {\n      throw new DecryptionFailedError(\n        `tokens.length (${tokens.length}) must equal encryptedValues.length (${options.encryptedValues.length})`,\n      );\n    }\n    const resolvedEncryptedValues =\n      options.encryptedValues ??\n      (await Token.readBalanceHandlesBatch(tokens, normalizedAccount, errors, maxConcurrency));\n\n    const decryptRequests: Array<{ token: Token; encryptedValue: EncryptedValue }> = [];\n    for (const [index, token] of tokens.entries()) {\n      const encryptedValue = resolvedEncryptedValues[index];\n      if (!encryptedValue || errors.has(token.address)) {\n        continue;\n      }\n      if (isEncryptedValueZero(encryptedValue)) {\n        // Zero balance → skip the relayer; no decryption needed.\n        results.set(token.address, 0n);\n      } else {\n        decryptRequests.push({ token, encryptedValue });\n      }\n    }\n\n    if (decryptRequests.length > 0) {\n      const decrypted = await sdk.decryption.delegatedBatchDecryptValues({\n        encryptedInputs: decryptRequests.map(({ token, encryptedValue }) => ({\n          encryptedValue,\n          contractAddress: token.address,\n        })),\n        delegatorAddress: options.delegatorAddress,\n        accountAddress: options.accountAddress,\n        maxConcurrency,\n      });\n\n      for (const [index, item] of decrypted.items.entries()) {\n        const request = decryptRequests[index];\n        if (!request) {\n          continue;\n        }\n        if (item.error) {\n          errors.set(request.token.address, item.error);\n          continue;\n        }\n        const value = item.value;\n        if (value === undefined) {\n          errors.set(\n            request.token.address,\n            new DecryptionFailedError(\n              `Batch delegated decryption returned no value for ${item.encryptedValue} on token ${request.token.address}`,\n            ),\n          );\n          continue;\n        }\n        assertBigint(value, \"batchDecryptBalancesAs: result[encryptedValue]\");\n        results.set(request.token.address, value);\n      }\n    }\n\n    if (errors.size === 0) {\n      return results;\n    }\n\n    if (options.onError) {\n      const callbackErrors: Array<{ address: Address; error: Error }> = [];\n      for (const [address, error] of errors) {\n        try {\n          results.set(address, options.onError(error, address));\n        } catch (callbackError) {\n          callbackErrors.push({ address, error: toError(callbackError) });\n        }\n      }\n      if (callbackErrors.length > 0) {\n        const message = callbackErrors\n          .map(({ address, error }) => `${address}: ${error.message}`)\n          .join(\"; \");\n        throw new DecryptionFailedError(\n          `Batch delegated decryption onError callback failed for ${callbackErrors.length} token(s): ${message}`,\n          { cause: callbackErrors[0]?.error },\n        );\n      }\n      return results;\n    }\n\n    const errorEntries = Array.from(errors.entries());\n    const message = errorEntries.map(([addr, e]) => `${addr}: ${e.message}`).join(\"; \");\n    throw new DecryptionFailedError(\n      `Batch delegated decryption failed for ${errors.size} token(s): ${message}`,\n      { cause: errorEntries[0]?.[1] },\n    );\n  }\n\n  private static async readBalanceHandlesBatch(\n    tokens: Token[],\n    accountAddress: Address,\n    errors: Map<Address, ZamaError>,\n    maxConcurrency: number,\n  ): Promise<Array<EncryptedValue | undefined>> {\n    // `pLimit` cannot cancel calls that already started. The shared flag stops\n    // the queued tokens from re-hitting an endpoint that already failed for\n    // the whole batch.\n    let aborted = false;\n    let fatal: unknown;\n\n    const outcomes = await pLimit(\n      tokens.map((token) => async () => {\n        if (aborted) {\n          return { status: \"aborted\" as const };\n        }\n        try {\n          return {\n            status: \"fulfilled\" as const,\n            value: await token.readConfidentialBalanceOf(accountAddress),\n          };\n        } catch (reason) {\n          if (isFatalBatchError(reason)) {\n            aborted = true;\n            fatal ??= reason;\n            return { status: \"aborted\" as const };\n          }\n          return { status: \"rejected\" as const, reason };\n        }\n      }),\n      maxConcurrency,\n    );\n\n    if (fatal !== undefined) {\n      throw fatal;\n    }\n\n    const encryptedValues: Array<EncryptedValue | undefined> = [];\n    for (const [index, token] of tokens.entries()) {\n      const outcome = outcomes[index];\n      if (!outcome || outcome.status === \"aborted\") {\n        continue;\n      }\n      if (outcome.status === \"fulfilled\") {\n        encryptedValues[index] = outcome.value;\n        continue;\n      }\n      errors.set(\n        token.address,\n        outcome.reason instanceof ZamaError\n          ? outcome.reason\n          : new DecryptionFailedError(toError(outcome.reason).message, { cause: outcome.reason }),\n      );\n    }\n    return encryptedValues;\n  }\n\n  // WRITE OPERATIONS\n\n  /**\n   * Confidential transfer. Encrypts the amount via FHE, then calls the contract.\n   *\n   * By default, the SDK validates the confidential balance before submitting.\n   * If a cached plaintext balance exists it is used; otherwise, if credentials\n   * are cached, it decrypts on the fly. Set `skipBalanceCheck: true` to bypass\n   * this validation (e.g. for smart wallets).\n   *\n   * @param to - Recipient address.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param options - Optional: `skipBalanceCheck` (default `false`).\n   * @returns The transaction hash and mined receipt.\n   * @throws if signer and provider are on different chains. {@link ChainMismatchError}\n   * @throws if the balance is less than `amount`. {@link InsufficientConfidentialBalanceError}\n   * @throws if balance validation requires decryption that is not possible. {@link BalanceCheckUnavailableError}\n   * @throws if FHE encryption fails. {@link EncryptionFailedError}\n   * @throws if the on-chain transfer reverts. {@link TransactionRevertedError}\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransfer(\"0xRecipient\", 1000n);\n   * ```\n   */\n  async confidentialTransfer(\n    to: Address,\n    amount: bigint,\n    options?: TransferOptions,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransfer\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransfer\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const { skipBalanceCheck = false, onEncryptComplete, onTransferSubmitted } = options ?? {};\n\n    const normalizedTo = getAddress(to);\n\n    if (!skipBalanceCheck) {\n      await this.assertConfidentialBalance(amount);\n    }\n\n    const { encryptedValues, inputProof } = await this.sdk.encrypt({\n      values: [{ value: amount, type: \"euint64\" }],\n      contractAddress: this.address,\n      userAddress: getAddress(account.address),\n    });\n    void swallow(\"transfer: onEncryptComplete\", () => onEncryptComplete?.(), this.sdk.logger);\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transfer\",\n      config: confidentialTransferContract(\n        this.address,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n      ),\n      onSubmitted: onTransferSubmitted,\n    });\n  }\n\n  /**\n   * Operator encrypted transfer on behalf of another address.\n   * The caller must be an approved operator for `from`.\n   *\n   * @param from - The address to transfer from (caller must be an approved operator).\n   * @param to - Recipient address.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferFrom(\"0xFrom\", \"0xTo\", 500n);\n   * ```\n   */\n  async confidentialTransferFrom(\n    from: Address,\n    to: Address,\n    amount: bigint,\n    callbacks?: TransferCallbacks,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferFrom\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferFrom\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const normalizedFrom = getAddress(from);\n    const normalizedTo = getAddress(to);\n\n    // The input proof is verified against msg.sender, so it binds to the caller, not `from`.\n    const { encryptedValues, inputProof } = await this.sdk.encrypt({\n      values: [{ value: amount, type: \"euint64\" }],\n      contractAddress: this.address,\n      userAddress: getAddress(account.address),\n    });\n    void swallow(\n      \"transferFrom: onEncryptComplete\",\n      () => callbacks?.onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferFrom\",\n      config: confidentialTransferFromContract(\n        this.address,\n        normalizedFrom,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n      ),\n      onSubmitted: callbacks?.onTransferSubmitted,\n    });\n  }\n\n  /**\n   * ERC-7984 `confidentialTransferAndCall`: encrypted transfer that also invokes\n   * the recipient's receiver hook (`onConfidentialTransferReceived`) in a single\n   * transaction. The caller crafts the opaque `data` payload — the SDK does not\n   * encode, validate, or interpret it.\n   *\n   * Balance validation follows the same rules as {@link Token.confidentialTransfer}.\n   *\n   * @param to - Recipient address. Must implement the ERC-7984 receiver hook.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param data - Opaque bytes forwarded to the recipient's receiver hook.\n   * @param options - Optional: `skipBalanceCheck` (default `false`).\n   * @returns The transaction hash and mined receipt.\n   *\n   * @throws if signer and provider are on different chains. {@link ChainMismatchError}\n   * @throws if the balance is less than `amount`. {@link InsufficientConfidentialBalanceError}\n   * @throws if balance validation requires decryption that is not possible. {@link BalanceCheckUnavailableError}\n   * @throws if FHE encryption fails. {@link EncryptionFailedError}\n   * @throws if the on-chain transfer reverts. {@link TransactionRevertedError}\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferAndCall(\n   *   \"0xRecipient\",\n   *   1000n,\n   *   \"0xabcd\", // caller-encoded payload forwarded to the receiver hook\n   * );\n   * ```\n   */\n  async confidentialTransferAndCall(\n    to: Address,\n    amount: bigint,\n    data: Hex,\n    options?: TransferOptions,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferAndCall\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferAndCall\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const { skipBalanceCheck = false, onEncryptComplete, onTransferSubmitted } = options ?? {};\n\n    const normalizedTo = getAddress(to);\n\n    if (!skipBalanceCheck) {\n      await this.assertConfidentialBalance(amount);\n    }\n\n    const { encryptedValues, inputProof } = await this.sdk.encrypt({\n      values: [{ value: amount, type: \"euint64\" }],\n      contractAddress: this.address,\n      userAddress: getAddress(account.address),\n    });\n    void swallow(\n      \"transferAndCall: onEncryptComplete\",\n      () => onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferAndCall\",\n      config: confidentialTransferAndCallContract(\n        this.address,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n        data,\n      ),\n      onSubmitted: onTransferSubmitted,\n    });\n  }\n\n  /**\n   * ERC-7984 `confidentialTransferFromAndCall`: operator-initiated encrypted\n   * transfer that also invokes the recipient's receiver hook in a single\n   * transaction. The caller must be an approved operator for `from` and crafts\n   * the opaque `data` payload — the SDK does not encode or interpret it.\n   *\n   * @param from - The address to transfer from (caller must be an approved operator).\n   * @param to - Recipient address. Must implement the ERC-7984 receiver hook.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param data - Opaque bytes forwarded to the recipient's receiver hook.\n   * @param callbacks - Optional progress callbacks.\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferFromAndCall(\n   *   \"0xFrom\",\n   *   \"0xRecipient\",\n   *   500n,\n   *   \"0xabcd\",\n   * );\n   * ```\n   */\n  async confidentialTransferFromAndCall(\n    from: Address,\n    to: Address,\n    amount: bigint,\n    data: Hex,\n    callbacks?: TransferCallbacks,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferFromAndCall\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferFromAndCall\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const normalizedFrom = getAddress(from);\n    const normalizedTo = getAddress(to);\n\n    // The input proof is verified against msg.sender, so it binds to the caller, not `from`.\n    const { encryptedValues, inputProof } = await this.sdk.encrypt({\n      values: [{ value: amount, type: \"euint64\" }],\n      contractAddress: this.address,\n      userAddress: getAddress(account.address),\n    });\n    void swallow(\n      \"transferFromAndCall: onEncryptComplete\",\n      () => callbacks?.onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferFromAndCall\",\n      config: confidentialTransferFromAndCallContract(\n        this.address,\n        normalizedFrom,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n        data,\n      ),\n      onSubmitted: callbacks?.onTransferSubmitted,\n    });\n  }\n\n  // OPERATOR APPROVAL\n\n  /**\n   * Set operator approval for the confidential token.\n   * Defaults to 1 hour from now if `until` is not specified.\n   *\n   * @param operator - The address to set as an operator.\n   * @param until - Optional Unix timestamp for approval expiry. Defaults to now + 1 hour.\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.setOperator(\"0xOperator\");\n   * ```\n   */\n  async setOperator(operator: Address, until?: number): Promise<TransactionResult> {\n    this.#requireSigner(\"setOperator\");\n    await requireChainAlignment(\"setOperator\", this.sdk.signer, this.sdk.provider);\n    const normalizedOperator = getAddress(operator);\n    return this.submitTransaction({\n      operation: \"setOperator\",\n      config: setOperatorContract(this.address, normalizedOperator, until),\n    });\n  }\n\n  /**\n   * Check if a spender is an approved operator for a given holder.\n   *\n   * @param holder - The token holder address.\n   * @param spender - The address to check operator approval for.\n   * @returns `true` if the spender is an approved operator for the holder.\n   *\n   * @example\n   * ```ts\n   * if (await token.isOperator(\"0xHolder\", \"0xSpender\")) {\n   *   // spender can call transferFrom on behalf of holder\n   * }\n   * ```\n   */\n  async isOperator(holder: Address, spender: Address): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      isOperatorContract(this.address, getAddress(holder), getAddress(spender)),\n    );\n  }\n\n  // PROTECTED HELPERS\n\n  /**\n   * Read the on-chain encrypted balance for a given owner.\n   *\n   * @internal\n   */\n  protected async readConfidentialBalanceOf(owner: Address): Promise<EncryptedValue> {\n    return await this.sdk.provider.readContract(confidentialBalanceOfContract(this.address, owner));\n  }\n\n  /**\n   * Pre-flight check: decrypt the confidential balance and compare against the\n   * requested amount. If credentials are cached the decrypt happens silently;\n   * if not, throws {@link BalanceCheckUnavailableError} instead of triggering\n   * a surprise EIP-712 popup.\n   *\n   * @internal\n   */\n  protected async assertConfidentialBalance(amount: bigint): Promise<void> {\n    if (amount === 0n) {\n      return;\n    }\n\n    let balance: bigint;\n    try {\n      const account = await requireAlignedWalletAccount(\n        \"assertConfidentialBalance\",\n        this.sdk.signer,\n        this.sdk.provider,\n      );\n      balance = await this.balanceOf(getAddress(account.address));\n    } catch (error) {\n      if (error instanceof ZamaError) {\n        throw error;\n      }\n      throw new BalanceCheckUnavailableError(`Balance validation failed (token: ${this.address})`, {\n        cause: error,\n      });\n    }\n\n    if (balance < amount) {\n      throw new InsufficientConfidentialBalanceError(\n        `Insufficient confidential balance: requested ${amount}, available ${balance} (token: ${this.address})`,\n        { requested: amount, available: balance, token: this.address },\n      );\n    }\n  }\n\n  /**\n   * Emit a token-scoped event through the owning {@link ZamaSDK} so that\n   * subscribers see a unified stream.\n   *\n   * @internal\n   */\n  protected emit(input: ZamaSDKEventInput): void {\n    this.sdk.emitEvent(input, this.address);\n  }\n\n  /**\n   * Submit a token-scoped write transaction through the shared SDK transaction\n   * pipeline. Callers keep pre-flight and operation-specific work local.\n   *\n   * @internal\n   */\n  protected async submitTransaction(params: {\n    operation: TransactionOperation;\n    config: WriteContractConfig;\n    onSubmitted?: (txHash: Hex) => void;\n  }): Promise<TransactionResult> {\n    const { operation, config, onSubmitted } = params;\n    return submitSdkTransaction({\n      operation,\n      signer: this.#requireSigner(operation),\n      provider: this.sdk.provider,\n      config,\n      emit: (input) => this.emit(input),\n      onSubmitted,\n      logger: this.sdk.logger,\n    });\n  }\n\n  /** Verify all tokens share the same SDK instance and return it. */\n  private static assertSameSdk(tokens: Token[]): ZamaSDK {\n    const sdk = tokens[0]!.sdk;\n    for (let i = 1; i < tokens.length; i++) {\n      if (tokens[i]!.sdk !== sdk) {\n        throw new ConfigurationError(\n          \"All tokens in a batch operation must share the same ZamaSDK instance\",\n        );\n      }\n    }\n    return sdk;\n  }\n}\n"],"mappings":"6VAGA,IAAa,EAAb,cAA2C,CAAU,CACnD,YAAY,EAAiB,EAAwB,CACnD,MAAM,EAAc,iBAAkB,EAAS,CAAO,EACtD,KAAK,KAAO,uBACd,CACF,EAGa,EAAb,cAA2C,CAAU,CACnD,YAAY,EAAiB,EAAwB,CACnD,MAAM,EAAc,iBAAkB,EAAS,CAAO,EACtD,KAAK,KAAO,uBACd,CACF,ECSa,EAAb,cAAuC,CAAU,CAO/C,WAEA,YAAY,EAAiB,EAAkD,CAC7E,GAAM,CAAE,aAAY,GAAG,GAAiB,GAAW,CAAC,EACpD,MAAM,EAAc,eAAgB,EAAS,CAAY,EACzD,KAAK,KAAO,oBACZ,KAAK,WAAa,CACpB,CACF,ECjBa,EAAb,cAAwC,CAAU,CAEhD,UAEA,cAEA,gBAEA,YACE,CACE,YACA,gBACA,mBAEF,EACA,CACA,MACE,EAAc,cACd,cAAc,EAAU,iFACI,EAAc,4BAA4B,EAAgB,GACtF,CACF,EACA,KAAK,KAAO,qBACZ,KAAK,UAAY,EACjB,KAAK,cAAgB,EACrB,KAAK,gBAAkB,CACzB,CACF,ECpCa,EAAb,cAA0D,CAAU,CAElE,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAM,EAAc,gCAAiC,EAAS,CAAO,EACrE,KAAK,KAAO,uCACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAmD,CAAU,CAE3D,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAM,EAAc,yBAA0B,EAAS,CAAO,EAC9D,KAAK,KAAO,gCACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAgD,CAAU,CAExD,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAM,EAAc,sBAAuB,EAAS,CAAO,EAC3D,KAAK,KAAO,6BACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAkD,CAAU,CAC1D,YAAY,EAAiB,EAAwB,CACnD,MAAM,EAAc,wBAAyB,EAAS,CAAO,EAC7D,KAAK,KAAO,8BACd,CACF,EAGa,EAAb,cAA0C,CAAU,CAClD,YAAY,EAAiB,EAAwB,CACnD,MAAM,EAAc,gBAAiB,EAAS,CAAO,EACrD,KAAK,KAAO,sBACd,CACF,EC3DA,SAAgB,EAAkB,EAAyB,CACzD,OACE,aAAiB,GACjB,aAAiB,GACjB,aAAiB,GACjB,aAAiB,GACjB,aAAiB,GACjB,aAAiB,CAErB,CC0BA,MAEM,EAAsC,CAC1C,MAAO,EAEP,OAAQ,EACR,QAAS,EACT,QAAS,EACT,QAAS,EACT,SAAU,EACV,SAAU,EACV,SAAU,CACZ,EAEM,EAAsC,CAC1C,EAAG,QAEH,EAAG,SACH,EAAG,UACH,EAAG,UACH,EAAG,UACH,EAAG,WACH,EAAG,WACH,EAAG,UACL,EAEM,EAAkE,CACtE,EAAG,EAEH,EAAG,EACH,EAAG,GACH,EAAG,GACH,EAAG,GACH,EAAG,IACH,EAAG,IACH,EAAG,GACL,EAaA,OAAO,OAAO,CAAe,EAC7B,OAAO,OAAO,CAAe,EAC7B,OAAO,OAAO,CAA6B,EAC3C,OAAO,OAAO,CAbZ,EAAG,EACH,EAAG,EACH,GAAI,EACJ,GAAI,EACJ,GAAI,EACJ,IAAK,EACL,IAAK,EACL,IAAK,CAMO,CAA6B,EAM3C,SAAgB,EAAY,EAAoC,CAC9D,OAAQ,EAAR,CACE,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACH,MAAO,GACT,QACE,MAAO,EACX,CACF,CAyCA,SAAgB,EAA4B,EAAgC,CAC1E,GAAI,CAAC,EAAY,CAAM,EACrB,MAAU,MAAM,uBAAuB,EAAO,EAAE,EAElD,IAAM,EAAK,EAA8B,GACzC,GAAI,EAAK,EACP,MAAU,MACR,yCAAyC,EAAG,qBAC9C,EAEF,OAAO,CACT,CCjLA,MAAa,EACX,qEAKF,SAAgB,EAAqB,EAAiC,CACpE,OAAO,IAAA,sEAA2C,IAAmB,IACvE,CA0BA,SAAgB,EAAwB,EAAwC,CAC9E,IAAI,EACJ,GAAI,CACF,EAAc,OAAO,CAAc,CACrC,MAAQ,CACN,MAAO,IACT,CACA,IAAM,EAAW,OAAQ,GAAe,GAAM,IAAK,EACnD,OAAO,EAAY,CAAQ,EAAI,EAA4B,CAAQ,EAAI,GACzE,CASA,SAAgB,EACd,EACA,EAAkB,KACE,CACpB,IAAM,EAA6B,CAAC,EAChC,EAA4B,CAAC,EAC7B,EAAc,EAElB,IAAK,IAAM,KAAU,EAAS,CAC5B,IAAM,EAAO,EAAwB,CAAM,EACvC,EAAQ,OAAS,GAAK,EAAc,EAAO,IAC7C,EAAO,KAAK,CAAO,EACnB,EAAU,CAAC,EACX,EAAc,GAEhB,EAAQ,KAAK,CAAM,EACnB,GAAe,CACjB,CAIA,OAHI,EAAQ,OAAS,GACnB,EAAO,KAAK,CAAO,EAEd,CACT,CChEA,eAAsB,EACpB,EACA,EACA,EACwB,CACxB,GAAI,CAAC,EACH,MAAM,IAAI,EAAyB,CAAS,EAE9C,IAAI,EACJ,GAAI,CACF,EAAU,EAAO,qBAAqB,CAAS,CACjD,OAAS,EAAO,CACd,GAAI,EAAE,aAAiB,IAA+B,CAAC,EAAO,qBAC5D,MAAM,EAER,MAAM,EAAO,qBAAqB,EAClC,EAAU,EAAO,qBAAqB,CAAS,CACjD,CACA,IAAM,EAAkB,MAAM,EAAS,WAAW,EAClD,GAAI,EAAQ,UAAY,EACtB,MAAM,IAAI,EAAmB,CAAE,YAAW,cAAe,EAAQ,QAAS,iBAAgB,CAAC,EAE7F,OAAO,CACT,CASA,eAAsB,EACpB,EACA,EACA,EACiB,CACjB,OAAQ,MAAM,EAA4B,EAAW,EAAQ,CAAQ,EAAA,CAAG,OAC1E,CChDA,eAAsB,EACpB,EACA,EAAiB,IACH,CACd,GAAI,OAAO,SAAS,CAAc,GAAK,GAAkB,EACvD,MAAU,MAAM,0CAA0C,EAE5D,GAAI,CAAC,OAAO,SAAS,CAAc,GAAK,GAAkB,EAAI,OAC5D,OAAO,QAAQ,IAAI,EAAI,IAAK,GAAM,EAAE,CAAC,CAAC,EAGxC,IAAM,EAAe,MAAM,KAAK,CAAE,OAAQ,EAAI,MAAO,CAAC,EAClD,EAAQ,EAEZ,eAAe,GAAS,CACtB,KAAO,EAAQ,EAAI,QAAQ,CACzB,IAAM,EAAI,IACN,EAAI,KACN,EAAQ,GAAK,MAAM,EAAI,EAAE,CAAC,EAE9B,CACF,CAGA,OADA,MAAM,QAAQ,IAAI,MAAM,KAAK,CAAE,OAAQ,CAAe,EAAG,CAAM,CAAC,EACzD,CACT,CCJA,eAAsB,EAAkB,EAQT,CAC7B,GAAM,CAAE,YAAW,SAAQ,WAAU,SAAQ,OAAM,cAAa,UAAW,EACrE,EAAW,EAA6B,GAE9C,GAAI,CACF,IAAM,EAAS,MAAM,EAAO,cAAc,CAAM,EAIhD,OAHA,EAAK,EAAS,eAAe,CAAM,CAAC,EACpC,EAAa,GAAG,EAAU,mBAAsB,IAAc,CAAM,EAAG,CAAM,EAEtE,CAAE,SAAQ,QAAA,MADK,EAAS,0BAA0B,CAAM,CACtC,CAC3B,OAAS,EAAO,CACd,IAAM,EACJ,aAAiB,EACb,EACA,IAAI,EAAyB,6BAA6B,IAAa,CAAE,MAAO,CAAM,CAAC,EAG7F,MADA,EAAK,CAAE,KAAM,EAAc,iBAAkB,YAAW,MAAO,CAAQ,CAAC,EAClE,CACR,CACF,CCiCA,IAAa,EAAb,MAAa,CAAM,CAEjB,IAEA,QAEA,YAAY,EAAc,EAAkB,CAC1C,KAAK,IAAM,EACX,KAAK,QAAU,EAAW,CAAO,CACnC,CAGA,GAAe,EAAkC,CAC/C,OAAO,EAAkB,KAAK,IAAI,OAAQ,CAAS,CACrD,CAKA,MAAM,MAAwB,CAC5B,OAAO,KAAK,IAAI,SAAS,aAAa,EAAa,KAAK,OAAO,CAAC,CAClE,CAGA,MAAM,QAA0B,CAC9B,OAAO,KAAK,IAAI,SAAS,aAAa,EAAe,KAAK,OAAO,CAAC,CACpE,CAGA,MAAM,UAA4B,CAChC,OAAO,KAAK,IAAI,SAAS,aAAa,EAAiB,KAAK,OAAO,CAAC,CACtE,CASA,MAAM,gBAAmC,CACvC,OAAO,KAAK,IAAI,SAAS,aACvB,EAA0B,KAAK,QAAS,CAAoB,CAC9D,CACF,CAQA,MAAM,WAA8B,CAClC,OAAO,KAAK,IAAI,SAAS,aACvB,EAA0B,KAAK,QAAS,CAA4B,CACtE,CACF,CAiBA,MAAM,UAAU,EAAiC,CAC/C,IAAM,EAAe,EAAW,CAAK,EAC/B,EAAiB,MAAM,KAAK,0BAA0B,CAAY,EAIlE,GAAQ,MAHO,KAAK,IAAI,WAAW,cAAc,CACrD,CAAE,iBAAgB,gBAAiB,KAAK,OAAQ,CAClD,CAAC,EAAA,CACoB,GACrB,GAAI,IAAU,IAAA,GACZ,MAAM,IAAI,EAAsB,oCAAoC,GAAgB,EAGtF,OADA,EAAa,EAAO,mCAAmC,EAChD,CACT,CAaA,MAAM,sBAAsB,EAAyC,CACnE,OAAO,KAAK,0BAA0B,EAAW,CAAK,CAAC,CACzD,CA2BA,MAAM,iBAAiB,CACrB,mBACA,kBAIkB,CAClB,MAAM,EAAsB,mBAAoB,KAAK,IAAI,OAAQ,KAAK,IAAI,QAAQ,EAClF,IAAM,EAAsB,EAAW,CAAgB,EACjD,EAAoB,EAAiB,EAAW,CAAc,EAAI,EAElE,EAAiB,MAAM,KAAK,0BAA0B,CAAiB,EAC7E,GAAI,EAAqB,CAAc,EACrC,OAAO,GAST,IAAM,GAAQ,MANO,KAAK,IAAI,WAAW,uBACvC,CAAC,CAAE,iBAAgB,gBAAiB,KAAK,OAAQ,CAAC,EAClD,EACA,CACF,EAAA,CAEqB,GACrB,GAAI,IAAU,IAAA,GACZ,MAAM,IAAI,EACR,8CAA8C,GAChD,EAGF,OADA,EAAa,EAAO,0CAA0C,EACvD,CACT,CAwBA,aAAa,gBAAgB,EAAiB,EAA8C,CAC1F,IAAM,EAAU,IAAI,IACd,EAAS,IAAI,IACnB,GAAI,EAAO,SAAW,EACpB,MAAO,CAAE,UAAS,QAAO,EAG3B,IAAM,EAAM,EAAM,cAAc,CAAM,EAEtC,MAAM,EAAsB,kBAAmB,EAAI,OAAQ,EAAI,QAAQ,EAGvE,MAAM,EAAI,QAAQ,YAAY,EAAO,IAAK,GAAM,EAAE,OAAO,CAAC,EAK1D,IAAI,EAAU,GACV,EAEE,EAAW,MAAM,EACrB,EAAO,IAAK,GAAM,SAAY,CAC5B,GAAI,EACF,MAAO,CAAE,OAAQ,SAAmB,EAEtC,GAAI,CACF,MAAO,CAAE,OAAQ,YAAsB,MAAO,MAAM,EAAE,UAAU,CAAK,CAAE,CACzE,OAAS,EAAQ,CAQf,OALI,EAAkB,CAAM,GAC1B,EAAU,GACV,IAAU,EACH,CAAE,OAAQ,SAAmB,GAE/B,CAAE,OAAQ,WAAqB,QAAO,CAC/C,CACF,CAAC,EACD,CACF,EAIA,GAAI,IAAU,IAAA,GACZ,MAAM,EAGR,IAAK,IAAI,EAAI,EAAG,EAAI,EAAO,OAAQ,IAAK,CACtC,IAAM,EAAe,EAAO,EAAE,CAAE,QAC1B,EAAU,EAAS,GACrB,KAAQ,SAAW,UAGvB,GAAI,EAAQ,SAAW,YACrB,EAAQ,IAAI,EAAc,EAAQ,KAAK,MAClC,CACL,IAAM,EAAS,EAAQ,OACjB,EACJ,aAAkB,EACd,EACA,IAAI,EAAsB,EAAQ,CAAM,CAAC,CAAC,QAAS,CAAE,MAAO,CAAO,CAAC,EAC1E,EAAO,IAAI,EAAc,CAAK,CAChC,CACF,CAGA,GAAI,EAAO,OAAS,EAAO,OAEzB,MADmB,EAAO,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,OACtB,IAAI,EAAsB,sCAAsC,EAGtF,MAAO,CAAE,UAAS,QAAO,CAC3B,CA8BA,aAAa,uBACX,EACA,EAC+B,CAC/B,GAAI,EAAO,SAAW,EACpB,OAAO,IAAI,IAGb,IAAM,EAAM,EAAM,cAAc,CAAM,EAChC,EAAU,IAAI,IACd,EAAS,IAAI,IACb,EAAoB,EAAQ,eAC9B,EAAW,EAAQ,cAAc,EACjC,EAAW,EAAQ,gBAAgB,EACjC,EAAiB,EAAQ,gBAAkB,GACjD,GAAI,EAAQ,iBAAmB,EAAO,SAAW,EAAQ,gBAAgB,OACvE,MAAM,IAAI,EACR,kBAAkB,EAAO,OAAO,uCAAuC,EAAQ,gBAAgB,OAAO,EACxG,EAEF,IAAM,EACJ,EAAQ,iBACP,MAAM,EAAM,wBAAwB,EAAQ,EAAmB,EAAQ,CAAc,EAElF,EAA2E,CAAC,EAClF,IAAK,GAAM,CAAC,EAAO,KAAU,EAAO,QAAQ,EAAG,CAC7C,IAAM,EAAiB,EAAwB,GAC3C,CAAC,GAAkB,EAAO,IAAI,EAAM,OAAO,IAG3C,EAAqB,CAAc,EAErC,EAAQ,IAAI,EAAM,QAAS,EAAE,EAE7B,EAAgB,KAAK,CAAE,QAAO,gBAAe,CAAC,EAElD,CAEA,GAAI,EAAgB,OAAS,EAAG,CAC9B,IAAM,EAAY,MAAM,EAAI,WAAW,4BAA4B,CACjE,gBAAiB,EAAgB,KAAK,CAAE,QAAO,qBAAsB,CACnE,iBACA,gBAAiB,EAAM,OACzB,EAAE,EACF,iBAAkB,EAAQ,iBAC1B,eAAgB,EAAQ,eACxB,gBACF,CAAC,EAED,IAAK,GAAM,CAAC,EAAO,KAAS,EAAU,MAAM,QAAQ,EAAG,CACrD,IAAM,EAAU,EAAgB,GAChC,GAAI,CAAC,EACH,SAEF,GAAI,EAAK,MAAO,CACd,EAAO,IAAI,EAAQ,MAAM,QAAS,EAAK,KAAK,EAC5C,QACF,CACA,IAAM,EAAQ,EAAK,MACnB,GAAI,IAAU,IAAA,GAAW,CACvB,EAAO,IACL,EAAQ,MAAM,QACd,IAAI,EACF,oDAAoD,EAAK,eAAe,YAAY,EAAQ,MAAM,SACpG,CACF,EACA,QACF,CACA,EAAa,EAAO,gDAAgD,EACpE,EAAQ,IAAI,EAAQ,MAAM,QAAS,CAAK,CAC1C,CACF,CAEA,GAAI,EAAO,OAAS,EAClB,OAAO,EAGT,GAAI,EAAQ,QAAS,CACnB,IAAM,EAA4D,CAAC,EACnE,IAAK,GAAM,CAAC,EAAS,KAAU,EAC7B,GAAI,CACF,EAAQ,IAAI,EAAS,EAAQ,QAAQ,EAAO,CAAO,CAAC,CACtD,OAAS,EAAe,CACtB,EAAe,KAAK,CAAE,UAAS,MAAO,EAAQ,CAAa,CAAE,CAAC,CAChE,CAEF,GAAI,EAAe,OAAS,EAAG,CAC7B,IAAM,EAAU,EACb,KAAK,CAAE,UAAS,WAAY,GAAG,EAAQ,IAAI,EAAM,SAAS,CAAC,CAC3D,KAAK,IAAI,EACZ,MAAM,IAAI,EACR,0DAA0D,EAAe,OAAO,aAAa,IAC7F,CAAE,MAAO,EAAe,EAAE,EAAE,KAAM,CACpC,CACF,CACA,OAAO,CACT,CAEA,IAAM,EAAe,MAAM,KAAK,EAAO,QAAQ,CAAC,EAC1C,EAAU,EAAa,KAAK,CAAC,EAAM,KAAO,GAAG,EAAK,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI,EAClF,MAAM,IAAI,EACR,yCAAyC,EAAO,KAAK,aAAa,IAClE,CAAE,MAAO,EAAa,EAAE,GAAG,EAAG,CAChC,CACF,CAEA,aAAqB,wBACnB,EACA,EACA,EACA,EAC4C,CAI5C,IAAI,EAAU,GACV,EAEE,EAAW,MAAM,EACrB,EAAO,IAAK,GAAU,SAAY,CAChC,GAAI,EACF,MAAO,CAAE,OAAQ,SAAmB,EAEtC,GAAI,CACF,MAAO,CACL,OAAQ,YACR,MAAO,MAAM,EAAM,0BAA0B,CAAc,CAC7D,CACF,OAAS,EAAQ,CAMf,OALI,EAAkB,CAAM,GAC1B,EAAU,GACV,IAAU,EACH,CAAE,OAAQ,SAAmB,GAE/B,CAAE,OAAQ,WAAqB,QAAO,CAC/C,CACF,CAAC,EACD,CACF,EAEA,GAAI,IAAU,IAAA,GACZ,MAAM,EAGR,IAAM,EAAqD,CAAC,EAC5D,IAAK,GAAM,CAAC,EAAO,KAAU,EAAO,QAAQ,EAAG,CAC7C,IAAM,EAAU,EAAS,GACrB,MAAC,GAAW,EAAQ,SAAW,WAGnC,IAAI,EAAQ,SAAW,YAAa,CAClC,EAAgB,GAAS,EAAQ,MACjC,QACF,CACA,EAAO,IACL,EAAM,QACN,EAAQ,kBAAkB,EACtB,EAAQ,OACR,IAAI,EAAsB,EAAQ,EAAQ,MAAM,CAAC,CAAC,QAAS,CAAE,MAAO,EAAQ,MAAO,CAAC,CAC1F,CANA,CAOF,CACA,OAAO,CACT,CA2BA,MAAM,qBACJ,EACA,EACA,EAC4B,CAC5B,KAAKA,GAAe,sBAAsB,EAC1C,IAAM,EAAU,MAAM,EACpB,uBACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,CAAE,mBAAmB,GAAO,oBAAmB,uBAAwB,GAAW,CAAC,EAEnF,EAAe,EAAW,CAAE,EAE7B,GACH,MAAM,KAAK,0BAA0B,CAAM,EAG7C,GAAM,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QAAQ,CAC7D,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,YAAa,EAAW,EAAQ,OAAO,CACzC,CAAC,EAGD,GAFA,EAAa,kCAAqC,IAAoB,EAAG,KAAK,IAAI,MAAM,EAEpF,EAAgB,SAAW,EAC7B,MAAM,IAAI,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,WACX,OAAQ,EACN,KAAK,QACL,EACA,EAAgB,GAChB,CACF,EACA,YAAa,CACf,CAAC,CACH,CAgBA,MAAM,yBACJ,EACA,EACA,EACA,EAC4B,CAC5B,KAAKA,GAAe,0BAA0B,EAC9C,IAAM,EAAU,MAAM,EACpB,2BACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,EAAiB,EAAW,CAAI,EAChC,EAAe,EAAW,CAAE,EAG5B,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QAAQ,CAC7D,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,YAAa,EAAW,EAAQ,OAAO,CACzC,CAAC,EAOD,GANA,EACE,sCACM,GAAW,oBAAoB,EACrC,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAI,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,eACX,OAAQ,EACN,KAAK,QACL,EACA,EACA,EAAgB,GAChB,CACF,EACA,YAAa,GAAW,mBAC1B,CAAC,CACH,CA+BA,MAAM,4BACJ,EACA,EACA,EACA,EAC4B,CAC5B,KAAKA,GAAe,6BAA6B,EACjD,IAAM,EAAU,MAAM,EACpB,8BACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,CAAE,mBAAmB,GAAO,oBAAmB,uBAAwB,GAAW,CAAC,EAEnF,EAAe,EAAW,CAAE,EAE7B,GACH,MAAM,KAAK,0BAA0B,CAAM,EAG7C,GAAM,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QAAQ,CAC7D,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,YAAa,EAAW,EAAQ,OAAO,CACzC,CAAC,EAOD,GANA,EACE,yCACM,IAAoB,EAC1B,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAI,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,kBACX,OAAQ,EACN,KAAK,QACL,EACA,EAAgB,GAChB,EACA,CACF,EACA,YAAa,CACf,CAAC,CACH,CAyBA,MAAM,gCACJ,EACA,EACA,EACA,EACA,EAC4B,CAC5B,KAAKA,GAAe,iCAAiC,EACrD,IAAM,EAAU,MAAM,EACpB,kCACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,EAAiB,EAAW,CAAI,EAChC,EAAe,EAAW,CAAE,EAG5B,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QAAQ,CAC7D,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,YAAa,EAAW,EAAQ,OAAO,CACzC,CAAC,EAOD,GANA,EACE,6CACM,GAAW,oBAAoB,EACrC,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAI,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,sBACX,OAAQ,EACN,KAAK,QACL,EACA,EACA,EAAgB,GAChB,EACA,CACF,EACA,YAAa,GAAW,mBAC1B,CAAC,CACH,CAiBA,MAAM,YAAY,EAAmB,EAA4C,CAC/E,KAAKA,GAAe,aAAa,EACjC,MAAM,EAAsB,cAAe,KAAK,IAAI,OAAQ,KAAK,IAAI,QAAQ,EAC7E,IAAM,EAAqB,EAAW,CAAQ,EAC9C,OAAO,KAAK,kBAAkB,CAC5B,UAAW,cACX,OAAQ,EAAoB,KAAK,QAAS,EAAoB,CAAK,CACrE,CAAC,CACH,CAgBA,MAAM,WAAW,EAAiB,EAAoC,CACpE,OAAO,KAAK,IAAI,SAAS,aACvB,EAAmB,KAAK,QAAS,EAAW,CAAM,EAAG,EAAW,CAAO,CAAC,CAC1E,CACF,CASA,MAAgB,0BAA0B,EAAyC,CACjF,OAAO,MAAM,KAAK,IAAI,SAAS,aAAa,EAA8B,KAAK,QAAS,CAAK,CAAC,CAChG,CAUA,MAAgB,0BAA0B,EAA+B,CACvE,GAAI,IAAW,GACb,OAGF,IAAI,EACJ,GAAI,CACF,IAAM,EAAU,MAAM,EACpB,4BACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACA,EAAU,MAAM,KAAK,UAAU,EAAW,EAAQ,OAAO,CAAC,CAC5D,OAAS,EAAO,CAId,MAHI,aAAiB,EACb,EAEF,IAAI,EAA6B,qCAAqC,KAAK,QAAQ,GAAI,CAC3F,MAAO,CACT,CAAC,CACH,CAEA,GAAI,EAAU,EACZ,MAAM,IAAI,EACR,gDAAgD,EAAO,cAAc,EAAQ,WAAW,KAAK,QAAQ,GACrG,CAAE,UAAW,EAAQ,UAAW,EAAS,MAAO,KAAK,OAAQ,CAC/D,CAEJ,CAQA,KAAe,EAAgC,CAC7C,KAAK,IAAI,UAAU,EAAO,KAAK,OAAO,CACxC,CAQA,MAAgB,kBAAkB,EAIH,CAC7B,GAAM,CAAE,YAAW,SAAQ,eAAgB,EAC3C,OAAOC,EAAqB,CAC1B,YACA,OAAQ,KAAKD,GAAe,CAAS,EACrC,SAAU,KAAK,IAAI,SACnB,SACA,KAAO,GAAU,KAAK,KAAK,CAAK,EAChC,cACA,OAAQ,KAAK,IAAI,MACnB,CAAC,CACH,CAGA,OAAe,cAAc,EAA0B,CACrD,IAAM,EAAM,EAAO,EAAE,CAAE,IACvB,IAAK,IAAI,EAAI,EAAG,EAAI,EAAO,OAAQ,IACjC,GAAI,EAAO,EAAE,CAAE,MAAQ,EACrB,MAAM,IAAI,EACR,sEACF,EAGJ,OAAO,CACT,CACF"}
+{"version":3,"file":"token-DTHiLih_.js","names":["#requireSigner","submitSdkTransaction"],"sources":["../../src/errors/encryption.ts","../../src/errors/rpc.ts","../../src/errors/chain.ts","../../src/errors/balance.ts","../../src/errors/fatal-batch.ts","../../src/utils/fhe-type.ts","../../src/utils/handles.ts","../../src/utils/alignment.ts","../../src/utils/concurrency.ts","../../src/utils/submit-transaction.ts","../../src/token/token.ts"],"sourcesContent":["import { ZamaError, ZamaErrorCode } from \"./base\";\n\n/** FHE encryption failed. */\nexport class EncryptionFailedError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.EncryptionFailed, message, options);\n    this.name = \"EncryptionFailedError\";\n  }\n}\n\n/** FHE decryption failed. */\nexport class DecryptionFailedError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.DecryptionFailed, message, options);\n    this.name = \"DecryptionFailedError\";\n  }\n}\n","import { ZamaError, ZamaErrorCode } from \"./base\";\n\n/**\n * The consumer's RPC provider rate-limited an on-chain read the SDK performs\n * during decryption (e.g. the ACL check) — HTTP 429 or JSON-RPC `-32005`. An\n * RPC-endpoint problem, **not** a decryption/entitlement failure, and safe to\n * **retry**. Kept distinct from the relayer's own back-pressure\n * ({@link RelayerRequestFailedError}).\n *\n * Backoff for chain RPC is owned by the consumer's transport: viem/ethers\n * already honor the `Retry-After` header and retry internally before this error\n * surfaces, so it is configured on the transport you pass via `chain.network`\n * (not re-implemented here).\n *\n * @example\n * ```ts\n * try {\n *   await sdk.decryption.decryptValues([{ encryptedValue, contractAddress }]);\n * } catch (e) {\n *   if (e instanceof RpcRateLimitError) {\n *     // back off and retry; consider a higher-throughput RPC endpoint\n *   }\n * }\n * ```\n */\nexport class RpcRateLimitError extends ZamaError {\n  /**\n   * Suggested delay before retrying, in **seconds**, when a numeric `retryAfter`\n   * is present on the error. Usually `undefined` for chain RPC: the `Retry-After`\n   * header is consumed by the consumer's viem/ethers transport (which owns the\n   * backoff), not surfaced here — see the class doc.\n   */\n  readonly retryAfter: number | undefined;\n\n  constructor(message: string, options?: ErrorOptions & { retryAfter?: number }) {\n    const { retryAfter, ...errorOptions } = options ?? {};\n    super(ZamaErrorCode.RpcRateLimited, message, errorOptions);\n    this.name = \"RpcRateLimitError\";\n    this.retryAfter = retryAfter;\n  }\n}\n","import { ZamaError, ZamaErrorCode } from \"./base\";\n\n/**\n * Thrown when the signer and provider are connected to different chains at the\n * start of a write operation.\n *\n * Every write method runs a chain-alignment pre-flight check. If\n * `signer.getChainId()` and `provider.getChainId()` return different values,\n * this error is thrown before any RPC mutation is attempted.\n *\n * @example\n * ```ts\n * try {\n *   await token.shield(1000n);\n * } catch (e) {\n *   if (e instanceof ChainMismatchError) {\n *     console.error(\n *       `Signer is on chain ${e.signerChainId} but provider is on chain ${e.providerChainId}`,\n *     );\n *   }\n * }\n * ```\n */\nexport class ChainMismatchError extends ZamaError {\n  /** Name of the operation that triggered the check. */\n  readonly operation: string;\n  /** Chain ID the signer is connected to. */\n  readonly signerChainId: number;\n  /** Chain ID the provider is connected to. */\n  readonly providerChainId: number;\n\n  constructor(\n    {\n      operation,\n      signerChainId,\n      providerChainId,\n    }: { operation: string; signerChainId: number; providerChainId: number },\n    options?: ErrorOptions,\n  ) {\n    super(\n      ZamaErrorCode.ChainMismatch,\n      `Operation \"${operation}\" requires signer and provider to be on the same chain, ` +\n        `but signer is on chain ${signerChainId} and provider is on chain ${providerChainId}.`,\n      options,\n    );\n    this.name = \"ChainMismatchError\";\n    this.operation = operation;\n    this.signerChainId = signerChainId;\n    this.providerChainId = providerChainId;\n  }\n}\n","import type { Address } from \"viem\";\nimport { ZamaError, ZamaErrorCode } from \"./base\";\n\n/** Structured details shared by balance-related errors. */\nexport interface BalanceErrorDetails {\n  /** Amount the caller requested, in the token's base units. */\n  readonly requested: bigint;\n  /** Amount available at the time of the check, in the token's base units. */\n  readonly available: bigint;\n  /** Address of the token contract involved. */\n  readonly token: Address;\n}\n\n/** Confidential (cToken) balance is insufficient for the requested operation. */\nexport class InsufficientConfidentialBalanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The available balance at the time of the check. */\n  readonly available: bigint;\n  /** The token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientConfidentialBalance, message, options);\n    this.name = \"InsufficientConfidentialBalanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** ERC-20 balance is insufficient for the requested shield amount. */\nexport class InsufficientERC20BalanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The available balance at the time of the check. */\n  readonly available: bigint;\n  /** The ERC-20 token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientERC20Balance, message, options);\n    this.name = \"InsufficientERC20BalanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** ERC-20 allowance granted to the wrapper is insufficient for the requested wrap amount. */\nexport class InsufficientAllowanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The allowance available at the time of the check. */\n  readonly available: bigint;\n  /** The underlying ERC-20 token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientAllowance, message, options);\n    this.name = \"InsufficientAllowanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** Balance validation could not be performed (no cached credentials and decryption not possible). */\nexport class BalanceCheckUnavailableError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.BalanceCheckUnavailable, message, options);\n    this.name = \"BalanceCheckUnavailableError\";\n  }\n}\n\n/** A public ERC-20 read (e.g. balanceOf) failed due to a network or contract error. */\nexport class ERC20ReadFailedError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.ERC20ReadFailed, message, options);\n    this.name = \"ERC20ReadFailedError\";\n  }\n}\n","import { KeyWrappingError, RevokedKmsContextError } from \"./credential\";\nimport { ConfigurationError } from \"./relayer\";\nimport { RpcRateLimitError } from \"./rpc\";\nimport { SigningRejectedError, SigningFailedError } from \"./signing\";\n\n/**\n * Returns `true` for errors that should abort an entire batch operation\n * rather than be recorded per-item — wallet signature rejected, signing\n * infrastructure broken, SDK misconfigured, the RPC provider throttling, or\n * transport key pair wrapping unusable for the whole session (wrong or missing\n * `transportKeyPairDerivationSecret`, `crypto.subtle` unavailable).\n * These are systemic failures that won't recover within the same call; for a\n * rate-limit in particular, the per-item retry loop would only amplify the\n * throttle by re-hitting the already-rate-limited endpoint. A revoked KMS\n * context is likewise batch-wide: every item's permit shares the dead context,\n * and the per-item loop would trigger one evict-and-regrant wallet prompt per\n * item instead of the one the batch attempt already spent.\n *\n * Callers iterating over a batch (e.g. per-token decrypt) should rethrow when\n * this predicate is true so the whole batch aborts, and record the error\n * per-item otherwise.\n */\nexport function isFatalBatchError(error: unknown): boolean {\n  return (\n    error instanceof SigningRejectedError ||\n    error instanceof SigningFailedError ||\n    error instanceof ConfigurationError ||\n    error instanceof RpcRateLimitError ||\n    error instanceof KeyWrappingError ||\n    error instanceof RevokedKmsContextError\n  );\n}\n","// Copied from @zama-fhe/relayer-sdk/src/sdk/FheType.ts\n// Pure utility functions with zero WASM dependency.\n// Adapted to use simple errors instead of RelayerErrorBase hierarchy.\n\n////////////////////////////////////////////////////////////////////////////////\n// Types (from types/primitives.d.ts)\n////////////////////////////////////////////////////////////////////////////////\n\nexport interface FheTypeNameToIdMap {\n  ebool: 0;\n  //euint4: 1; deprecated\n  euint8: 2;\n  euint16: 3;\n  euint32: 4;\n  euint64: 5;\n  euint128: 6;\n  eaddress: 7;\n  euint256: 8;\n}\n\nexport interface FheTypeIdToNameMap {\n  0: \"ebool\";\n  //1: 'euint4'; deprecated\n  2: \"euint8\";\n  3: \"euint16\";\n  4: \"euint32\";\n  5: \"euint64\";\n  6: \"euint128\";\n  7: \"eaddress\";\n  8: \"euint256\";\n}\n\nexport interface FheTypeEncryptionBitwidthToIdMap {\n  2: FheTypeNameToIdMap[\"ebool\"];\n  8: FheTypeNameToIdMap[\"euint8\"];\n  16: FheTypeNameToIdMap[\"euint16\"];\n  32: FheTypeNameToIdMap[\"euint32\"];\n  64: FheTypeNameToIdMap[\"euint64\"];\n  128: FheTypeNameToIdMap[\"euint128\"];\n  160: FheTypeNameToIdMap[\"eaddress\"];\n  256: FheTypeNameToIdMap[\"euint256\"];\n}\n\nexport type FheTypeIdToEncryptionBitwidthMap = {\n  [K in keyof FheTypeEncryptionBitwidthToIdMap as FheTypeEncryptionBitwidthToIdMap[K]]: K;\n};\n\ntype Prettify<T> = { [K in keyof T]: T[K] } & {};\n\nexport type FheTypeName = Prettify<keyof FheTypeNameToIdMap>;\nexport type FheTypeId = Prettify<keyof FheTypeIdToNameMap>;\nexport type EncryptionBits = Prettify<keyof FheTypeEncryptionBitwidthToIdMap>;\n\n////////////////////////////////////////////////////////////////////////////////\n// Lookup Maps\n////////////////////////////////////////////////////////////////////////////////\n\nconst MINIMUM_ENCRYPTION_BIT_WIDTH = 2;\n\nconst FheTypeNameToId: FheTypeNameToIdMap = {\n  ebool: 0,\n  //euint4: 1, deprecated\n  euint8: 2,\n  euint16: 3,\n  euint32: 4,\n  euint64: 5,\n  euint128: 6,\n  eaddress: 7,\n  euint256: 8,\n} as const;\n\nconst FheTypeIdToName: FheTypeIdToNameMap = {\n  0: \"ebool\",\n  //1: 'euint4', deprecated\n  2: \"euint8\",\n  3: \"euint16\",\n  4: \"euint32\",\n  5: \"euint64\",\n  6: \"euint128\",\n  7: \"eaddress\",\n  8: \"euint256\",\n} as const;\n\nconst FheTypeIdToEncryptionBitwidth: FheTypeIdToEncryptionBitwidthMap = {\n  0: 2,\n  //1:?, euint4 deprecated\n  2: 8,\n  3: 16,\n  4: 32,\n  5: 64,\n  6: 128,\n  7: 160,\n  8: 256,\n} as const;\n\nconst EncryptionBitwidthToFheTypeId: FheTypeEncryptionBitwidthToIdMap = {\n  2: 0,\n  8: 2,\n  16: 3,\n  32: 4,\n  64: 5,\n  128: 6,\n  160: 7,\n  256: 8,\n} as const;\n\nObject.freeze(FheTypeNameToId);\nObject.freeze(FheTypeIdToName);\nObject.freeze(FheTypeIdToEncryptionBitwidth);\nObject.freeze(EncryptionBitwidthToFheTypeId);\n\n////////////////////////////////////////////////////////////////////////////////\n// Type Guards\n////////////////////////////////////////////////////////////////////////////////\n\nexport function isFheTypeId(value: unknown): value is FheTypeId {\n  switch (value as FheTypeId) {\n    case 0:\n    case 2:\n    case 3:\n    case 4:\n    case 5:\n    case 6:\n    case 7:\n    case 8:\n      return true;\n    default:\n      return false;\n  }\n}\n\nexport function isFheTypeName(value: unknown): value is FheTypeName {\n  if (typeof value !== \"string\") {\n    return false;\n  }\n  return value in FheTypeNameToId;\n}\n\nexport function isEncryptionBits(value: unknown): value is EncryptionBits {\n  if (typeof value !== \"number\") {\n    return false;\n  }\n  return value in EncryptionBitwidthToFheTypeId;\n}\n\n////////////////////////////////////////////////////////////////////////////////\n// Converters\n////////////////////////////////////////////////////////////////////////////////\n\nexport function fheTypeIdFromEncryptionBits(bitwidth: number): FheTypeId {\n  if (!isEncryptionBits(bitwidth)) {\n    throw new Error(`Invalid encryption bits ${bitwidth}`);\n  }\n  return EncryptionBitwidthToFheTypeId[bitwidth];\n}\n\nexport function fheTypeIdFromName(name: string): FheTypeId {\n  if (!isFheTypeName(name)) {\n    throw new Error(`Invalid FheType name '${name}'`);\n  }\n  return FheTypeNameToId[name];\n}\n\nexport function fheTypeNameFromId(id: number): FheTypeName {\n  if (!isFheTypeId(id)) {\n    throw new Error(`Invalid FheType id '${id}'`);\n  }\n  return FheTypeIdToName[id];\n}\n\nexport function encryptionBitsFromFheTypeId(typeId: number): EncryptionBits {\n  if (!isFheTypeId(typeId)) {\n    throw new Error(`Invalid FheType id '${typeId}'`);\n  }\n  const bw = FheTypeIdToEncryptionBitwidth[typeId];\n  if (bw < MINIMUM_ENCRYPTION_BIT_WIDTH) {\n    throw new Error(\n      `Invalid FheType encryption bit width: ${bw}. Minimum is ${MINIMUM_ENCRYPTION_BIT_WIDTH} bits.`,\n    );\n  }\n  return bw;\n}\n\nexport function encryptionBitsFromFheTypeName(name: string): EncryptionBits {\n  if (!isFheTypeName(name)) {\n    throw new Error(`Invalid FheType name '${name}'`);\n  }\n  const bw = FheTypeIdToEncryptionBitwidth[FheTypeNameToId[name]];\n  if (bw < MINIMUM_ENCRYPTION_BIT_WIDTH) {\n    throw new Error(\n      `Invalid FheType encryption bit width: ${bw}. Minimum is ${MINIMUM_ENCRYPTION_BIT_WIDTH} bits.`,\n    );\n  }\n  return bw;\n}\n","import type { EncryptedValue } from \"../relayer/types\";\nimport { encryptionBitsFromFheTypeId, isFheTypeId } from \"./fhe-type\";\n\n/** All-zero encrypted-value sentinel — a 32-byte zero handle representing the cleartext value `0`. */\nexport const ZERO_ENCRYPTED_VALUE =\n  \"0x0000000000000000000000000000000000000000000000000000000000000000\" as const;\n\n/**\n * Check whether an encrypted value represents the zero value.\n */\nexport function isEncryptedValueZero(encryptedValue: string): boolean {\n  return encryptedValue === ZERO_ENCRYPTED_VALUE || encryptedValue === \"0x\";\n}\n\n/**\n * Per-request cleartext-bit budget enforced by the KMS gateway, mirrored from\n * `@fhevm/sdk`'s `MAX_KMS_DECRYPT_DECRYPTION_BIT_LIMIT` (protocol-level constant,\n * not imported — see {@link MAX_CONTRACTS_PER_PERMIT} for why). Internal: decrypt\n * requests are chunked to respect it automatically, so callers never need this value.\n */\nexport const MAX_DECRYPTION_REQUEST_BITS = 2048;\n\n/** Max encryption bit width among all currently-known FHE types (euint256). */\nconst MAX_KNOWN_ENCRYPTION_BITS = 256;\n\n/**\n * Cleartext bit cost of decrypting a single handle, derived from its FHE\n * type (encoded at bits 8-15 of the handle — the same layout `@fhevm/sdk`'s\n * `FhevmHandle` decodes, byte 30 of the 32-byte handle).\n *\n * Falls back to {@link MAX_KNOWN_ENCRYPTION_BITS} for an unrecognized type\n * byte, or for a value that isn't parseable hex at all, instead of throwing.\n * A real on-chain handle is always well-formed with a valid type byte, so\n * this fallback only ever fires for synthetic test/placeholder handles —\n * deliberately more permissive than the relayer's own strict validation so\n * chunking stays safe without requiring every test fixture to encode a real\n * FHE handle. Do not tighten this to match relayer semantics.\n */\nexport function encryptionBitsForHandle(encryptedValue: EncryptedValue): number {\n  let handleValue: bigint;\n  try {\n    handleValue = BigInt(encryptedValue);\n  } catch {\n    return MAX_KNOWN_ENCRYPTION_BITS;\n  }\n  const typeByte = Number((handleValue >> 8n) & 0xffn);\n  return isFheTypeId(typeByte) ? encryptionBitsFromFheTypeId(typeByte) : MAX_KNOWN_ENCRYPTION_BITS;\n}\n\n/**\n * Split `handles` into groups whose cumulative cleartext-bit cost never\n * exceeds `maxBits`, preserving input order. Unlike {@link chunkContracts}\n * (fixed-size slices), a greedy accumulate-until-exceeded walk is required\n * since per-handle cost varies by FHE type. A handle whose own cost exceeds\n * `maxBits` still gets a solo chunk — always makes forward progress.\n */\nexport function chunkHandlesByBitBudget(\n  handles: readonly EncryptedValue[],\n  maxBits: number = MAX_DECRYPTION_REQUEST_BITS,\n): EncryptedValue[][] {\n  const chunks: EncryptedValue[][] = [];\n  let current: EncryptedValue[] = [];\n  let currentBits = 0;\n\n  for (const handle of handles) {\n    const bits = encryptionBitsForHandle(handle);\n    if (current.length > 0 && currentBits + bits > maxBits) {\n      chunks.push(current);\n      current = [];\n      currentBits = 0;\n    }\n    current.push(handle);\n    currentBits += bits;\n  }\n  if (current.length > 0) {\n    chunks.push(current);\n  }\n  return chunks;\n}\n","import {\n  ChainMismatchError,\n  SignerNotConfiguredError,\n  WalletAccountNotReadyError,\n} from \"../errors\";\nimport type { GenericProvider, GenericSigner, WalletAccount } from \"../types\";\n\n/**\n * Pre-flight guard for signer-required operations. Resolves the connected\n * wallet account (refreshing once if the signer reports it isn't ready) and\n * verifies the signer's chain matches the provider's.\n *\n * @internal\n */\nexport async function requireAlignedWalletAccount(\n  operation: string,\n  signer: GenericSigner | undefined,\n  provider: GenericProvider,\n): Promise<WalletAccount> {\n  if (!signer) {\n    throw new SignerNotConfiguredError(operation);\n  }\n  let account: WalletAccount;\n  try {\n    account = signer.requireWalletAccount(operation);\n  } catch (error) {\n    if (!(error instanceof WalletAccountNotReadyError) || !signer.refreshWalletAccount) {\n      throw error;\n    }\n    await signer.refreshWalletAccount();\n    account = signer.requireWalletAccount(operation);\n  }\n  const providerChainId = await provider.getChainId();\n  if (account.chainId !== providerChainId) {\n    throw new ChainMismatchError({ operation, signerChainId: account.chainId, providerChainId });\n  }\n  return account;\n}\n\n/**\n * Variant of {@link requireAlignedWalletAccount} that returns only the aligned\n * chain ID. Useful when a write path only needs to ensure signer/provider\n * coherence and doesn't otherwise consume the account.\n *\n * @internal\n */\nexport async function requireChainAlignment(\n  operation: string,\n  signer: GenericSigner | undefined,\n  provider: GenericProvider,\n): Promise<number> {\n  return (await requireAlignedWalletAccount(operation, signer, provider)).chainId;\n}\n","/**\n * Execute an array of async thunks with bounded concurrency.\n * Defaults to `Infinity` (equivalent to `Promise.all`).\n */\nexport async function pLimit<T>(\n  fns: (() => Promise<T>)[],\n  maxConcurrency = Infinity,\n): Promise<T[]> {\n  if (Number.isFinite(maxConcurrency) && maxConcurrency <= 0) {\n    throw new Error(\"maxConcurrency must be a positive number\");\n  }\n  if (!Number.isFinite(maxConcurrency) || maxConcurrency >= fns.length) {\n    return Promise.all(fns.map((f) => f()));\n  }\n\n  const results: T[] = Array.from({ length: fns.length });\n  let index = 0;\n\n  async function worker() {\n    while (index < fns.length) {\n      const i = index++;\n      if (fns[i]) {\n        results[i] = await fns[i]();\n      }\n    }\n  }\n\n  await Promise.all(Array.from({ length: maxConcurrency }, worker));\n  return results;\n}\n","import type { Hex } from \"viem\";\nimport { TransactionRevertedError, ZamaError } from \"../errors\";\nimport type { TransactionOperation, ZamaSDKEventInput } from \"../events/sdk-events\";\nimport { transactionOperationMetadata, ZamaSDKEvents } from \"../events/sdk-events\";\nimport type {\n  GenericLogger,\n  GenericProvider,\n  GenericSigner,\n  TransactionResult,\n  WriteContractConfig,\n} from \"../types\";\nimport { swallow } from \"./swallow\";\n\n/**\n * Shared write-transaction pipeline for SDK calls that submit a transaction.\n *\n * On success: writes the tx, emits the per-operation submitted event from\n * {@link transactionOperationMetadata}, fires `onSubmitted`, waits for the\n * receipt, and returns `{ txHash, receipt }`.\n *\n * On failure: emits a {@link ZamaSDKEvents.TransactionError} event with the\n * transaction-level error it will throw, then throws it. Existing `ZamaError`\n * instances are rethrown as-is; all other failures are wrapped in\n * `TransactionRevertedError` with the original error as `cause`.\n */\nexport async function submitTransaction(params: {\n  operation: TransactionOperation;\n  signer: GenericSigner;\n  provider: GenericProvider;\n  config: WriteContractConfig;\n  emit: (input: ZamaSDKEventInput) => void;\n  onSubmitted?: (txHash: Hex) => void;\n  logger: GenericLogger;\n}): Promise<TransactionResult> {\n  const { operation, signer, provider, config, emit, onSubmitted, logger } = params;\n  const metadata = transactionOperationMetadata[operation];\n\n  try {\n    const txHash = await signer.writeContract(config);\n    emit(metadata.submittedEvent(txHash));\n    void swallow(`${operation}: onSubmitted`, () => onSubmitted?.(txHash), logger);\n    const receipt = await provider.waitForTransactionReceipt(txHash);\n    return { txHash, receipt };\n  } catch (error) {\n    const failure =\n      error instanceof ZamaError\n        ? error\n        : new TransactionRevertedError(`Transaction failed during ${operation}`, { cause: error });\n\n    emit({ type: ZamaSDKEvents.TransactionError, operation, error: failure });\n    throw failure;\n  }\n}\n","import { type Address, getAddress, type Hex } from \"viem\";\nimport {\n  confidentialBalanceOfContract,\n  confidentialTransferAndCallContract,\n  confidentialTransferContract,\n  confidentialTransferFromAndCallContract,\n  confidentialTransferFromContract,\n  decimalsContract,\n  ERC7984_INTERFACE_ID,\n  ERC7984_WRAPPER_INTERFACE_ID,\n  isOperatorContract,\n  nameContract,\n  setOperatorContract,\n  supportsInterfaceContract,\n  symbolContract,\n} from \"../contracts\";\nimport {\n  BalanceCheckUnavailableError,\n  ConfigurationError,\n  DecryptionFailedError,\n  EncryptionFailedError,\n  InsufficientConfidentialBalanceError,\n  isFatalBatchError,\n  requireConfigured,\n  ZamaError,\n} from \"../errors\";\nimport type { TransactionOperation, ZamaSDKEventInput } from \"../events/sdk-events\";\nimport type { EncryptedValue } from \"../relayer/types\";\nimport { toError } from \"../utils\";\nimport { requireAlignedWalletAccount, requireChainAlignment } from \"../utils/alignment\";\nimport { assertBigint } from \"../utils/assertions\";\nimport { pLimit } from \"../utils/concurrency\";\nimport { isEncryptedValueZero } from \"../utils/handles\";\nimport { submitTransaction as submitSdkTransaction } from \"../utils/submit-transaction\";\nimport { swallow } from \"../utils/swallow\";\nimport type {\n  GenericSigner,\n  TransactionResult,\n  TransferCallbacks,\n  TransferOptions,\n  WriteContractConfig,\n} from \"../types\";\nimport type { ZamaSDK } from \"../zama-sdk\";\n\n/** Options for {@link Token.batchDecryptBalancesAs}. */\nexport interface BatchDecryptAsOptions {\n  /** The address of the account that delegated decryption rights. */\n  delegatorAddress: Address;\n  /** Pre-fetched encrypted values. When omitted, they are fetched from the chain. */\n  encryptedValues?: EncryptedValue[];\n  /**\n   * The account whose on-chain balance to read. Defaults to the delegator\n   * address, which is the common case (the delegator grants permission to\n   * decrypt their own balance). Only set this when the account differs\n   * from the delegator.\n   *\n   * Matches the `account` parameter of `confidentialBalanceOf(account)` on-chain.\n   */\n  accountAddress?: Address;\n  /** Maximum number of concurrent decrypt calls. Default: 10. */\n  maxConcurrency?: number;\n  /** Called when decryption fails for a single token. Return a fallback bigint. */\n  onError?: (error: Error, address: Address) => bigint;\n}\n\n/** Result of {@link Token.batchBalancesOf}. */\nexport interface BatchBalancesResult {\n  /** Successfully decrypted balances, keyed by token address. */\n  results: Map<Address, bigint>;\n  /** Per-token errors for tokens that failed to decrypt. */\n  errors: Map<Address, ZamaError>;\n}\n\n/**\n * High-level interface for an ERC-7984 confidential token.\n * Hides FHE complexity (encryption, decryption, EIP-712 signing) behind\n * familiar ERC-20-like methods.\n *\n * For ERC-7984 wrappers (shield/unshield), use {@link WrappedToken} instead —\n * it extends `Token` with wrapper-specific operations.\n *\n * Decryption, credentials, caching, and event emission are handled by the\n * owning {@link ZamaSDK} — this class only exposes token-scoped helpers\n * that delegate to `sdk.decryption.decryptValues` and `sdk.permits.grantPermit`.\n */\nexport class Token {\n  /** The SDK instance this token operates through. */\n  readonly sdk: ZamaSDK;\n  /** Checksummed address of the confidential token contract. */\n  readonly address: Address;\n\n  constructor(sdk: ZamaSDK, address: Address) {\n    this.sdk = sdk;\n    this.address = getAddress(address);\n  }\n\n  /** Resolve `sdk.signer` or throw {@link SignerNotConfiguredError} tagged with `operation`. */\n  #requireSigner(operation: string): GenericSigner {\n    return requireConfigured(this.sdk.signer, operation);\n  }\n\n  // METADATA\n\n  /** Read the token name from the contract. */\n  async name(): Promise<string> {\n    return this.sdk.provider.readContract(nameContract(this.address));\n  }\n\n  /** Read the token symbol from the contract. */\n  async symbol(): Promise<string> {\n    return this.sdk.provider.readContract(symbolContract(this.address));\n  }\n\n  /** Read the token decimals from the contract. */\n  async decimals(): Promise<number> {\n    return this.sdk.provider.readContract(decimalsContract(this.address));\n  }\n\n  // ERC-165 DISCOVERY\n\n  /**\n   * ERC-165 check for {@link ERC7984_INTERFACE_ID} support.\n   *\n   * @returns `true` if the contract implements the ERC-7984 confidential token interface.\n   */\n  async isConfidential(): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      supportsInterfaceContract(this.address, ERC7984_INTERFACE_ID),\n    );\n  }\n\n  /**\n   * ERC-165 check for IERC7984ERC20Wrapper support.\n   *\n   * @returns `true` if the contract implements the ERC-7984 wrapper interface\n   *   ({@link ERC7984_WRAPPER_INTERFACE_ID}, `0x1f1c62b2`).\n   */\n  async isWrapper(): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      supportsInterfaceContract(this.address, ERC7984_WRAPPER_INTERFACE_ID),\n    );\n  }\n\n  // BALANCES\n\n  /**\n   * Decrypt and return the plaintext balance for the given owner.\n   * Acquires FHE credentials via a wallet signature if none are cached.\n   *\n   * @param owner - Balance owner address.\n   * @returns The decrypted plaintext balance as a bigint.\n   * @throws if FHE decryption fails. {@link DecryptionFailedError}\n   *\n   * @example\n   * ```ts\n   * const balance = await token.balanceOf(\"0xOwner\");\n   * ```\n   */\n  async balanceOf(owner: Address): Promise<bigint> {\n    const ownerAddress = getAddress(owner);\n    const encryptedValue = await this.readConfidentialBalanceOf(ownerAddress);\n    const result = await this.sdk.decryption.decryptValues([\n      { encryptedValue, contractAddress: this.address },\n    ]);\n    const value = result[encryptedValue];\n    if (value === undefined) {\n      throw new DecryptionFailedError(`Decryption returned no value for ${encryptedValue}`);\n    }\n    assertBigint(value, \"balanceOf: result[encryptedValue]\");\n    return value;\n  }\n\n  /**\n   * Return the raw encrypted balance without decrypting.\n   *\n   * @param owner - Balance owner address.\n   * @returns The encrypted balance as a hex string.\n   *\n   * @example\n   * ```ts\n   * const encryptedValue = await token.confidentialBalanceOf(\"0xOwner\");\n   * ```\n   */\n  async confidentialBalanceOf(owner: Address): Promise<EncryptedValue> {\n    return this.readConfidentialBalanceOf(getAddress(owner));\n  }\n\n  /**\n   * Decrypt the balance of a delegator using delegated decryption credentials.\n   * The connected signer acts as the delegatee who has been granted permission\n   * by the delegator to decrypt their balance.\n   *\n   * Clear values are cached in storage keyed by `(account, token, encryptedValue)`.\n   * Because every on-chain balance change produces a new encrypted value,\n   * stale cache entries are never served. Cache write failures are silently\n   * ignored — they do not affect the returned value.\n   *\n   * @param delegatorAddress - The address of the account that delegated decryption rights.\n   * @param accountAddress - The account whose on-chain balance to read. Defaults\n   *   to the delegator address.\n   * @returns The decrypted plaintext balance as a bigint.\n   * @throws if no active delegation exists. {@link DelegationNotFoundError}\n   * @throws if the delegation has expired. {@link DelegationExpiredError}\n   * @throws if delegated decryption fails. {@link DecryptionFailedError}\n   *\n   * @example\n   * ```ts\n   * const balance = await token.decryptBalanceAs({\n   *   delegatorAddress: \"0xDelegator\",\n   * });\n   * ```\n   */\n  async decryptBalanceAs({\n    delegatorAddress,\n    accountAddress,\n  }: {\n    delegatorAddress: Address;\n    accountAddress?: Address;\n  }): Promise<bigint> {\n    await requireChainAlignment(\"decryptBalanceAs\", this.sdk.signer, this.sdk.provider);\n    const normalizedDelegator = getAddress(delegatorAddress);\n    const normalizedAccount = accountAddress ? getAddress(accountAddress) : normalizedDelegator;\n\n    const encryptedValue = await this.readConfidentialBalanceOf(normalizedAccount);\n    if (isEncryptedValueZero(encryptedValue)) {\n      return 0n;\n    }\n\n    const result = await this.sdk.decryption.delegatedDecryptValues(\n      [{ encryptedValue, contractAddress: this.address }],\n      normalizedDelegator,\n      normalizedAccount,\n    );\n\n    const value = result[encryptedValue];\n    if (value === undefined) {\n      throw new DecryptionFailedError(\n        `Delegated decryption returned no value for ${encryptedValue}`,\n      );\n    }\n    assertBigint(value, \"decryptBalanceAs: result[encryptedValue]\");\n    return value;\n  }\n\n  // BATCH STATICS\n\n  /**\n   * Decrypt confidential balances for multiple tokens in parallel, returning\n   * successes and per-token errors separately. Pre-authorizes all token\n   * addresses in a single wallet signature, then delegates each decrypt to\n   * `sdk.decryption.decryptValues`.\n   *\n   * Tokens that fail to decrypt land in `errors`; the batch keeps going.\n   *\n   * @param tokens - Array of {@link Token} instances bound to the same SDK.\n   * @param owner - Balance owner address.\n   * @returns `{ results, errors }` partitioning the per-token outcomes.\n   * @throws A failure that affects the whole session (rejected signature,\n   * misconfiguration, RPC rate limit, key unwrapping failure, revoked KMS\n   * context) rejects the call instead of landing in `errors`.\n   *\n   * @example\n   * ```ts\n   * const { results, errors } = await Token.batchBalancesOf(tokens, owner);\n   * ```\n   */\n  static async batchBalancesOf(tokens: Token[], owner: Address): Promise<BatchBalancesResult> {\n    const results = new Map<Address, bigint>();\n    const errors = new Map<Address, ZamaError>();\n    if (tokens.length === 0) {\n      return { results, errors };\n    }\n\n    const sdk = Token.assertSameSdk(tokens);\n    // Fail fast on chain mismatch before prompting the wallet for a signature.\n    await requireChainAlignment(\"batchBalancesOf\", sdk.signer, sdk.provider);\n    // Pre-authorize the full token set in one wallet signature so subsequent\n    // per-token decryptValues calls reuse the cached credentials.\n    await sdk.permits.grantPermit(tokens.map((t) => t.address));\n\n    // `pLimit` cannot cancel calls that already started. The shared flag stops\n    // the queued tokens from starting once a fatal error is seen, so they do\n    // not each trigger their own recovery wallet prompt.\n    let aborted = false;\n    let fatal: unknown;\n\n    const outcomes = await pLimit(\n      tokens.map((t) => async () => {\n        if (aborted) {\n          return { status: \"aborted\" as const };\n        }\n        try {\n          return { status: \"fulfilled\" as const, value: await t.balanceOf(owner) };\n        } catch (reason) {\n          // A fatal error (rejected signature, revoked KMS context, rate\n          // limit) would fail every token: stop the batch.\n          if (isFatalBatchError(reason)) {\n            aborted = true;\n            fatal ??= reason;\n            return { status: \"aborted\" as const };\n          }\n          return { status: \"rejected\" as const, reason };\n        }\n      }),\n      5,\n    );\n\n    // Some tokens were never attempted after the abort, so a partial result\n    // would be wrong: reject the whole call.\n    if (fatal !== undefined) {\n      throw fatal;\n    }\n\n    for (let i = 0; i < tokens.length; i++) {\n      const tokenAddress = tokens[i]!.address;\n      const outcome = outcomes[i]!;\n      if (outcome.status === \"aborted\") {\n        continue;\n      }\n      if (outcome.status === \"fulfilled\") {\n        results.set(tokenAddress, outcome.value);\n      } else {\n        const reason = outcome.reason;\n        const error =\n          reason instanceof ZamaError\n            ? reason\n            : new DecryptionFailedError(toError(reason).message, { cause: reason });\n        errors.set(tokenAddress, error);\n      }\n    }\n\n    // Total failure: surface the first error so callers know nothing decrypted.\n    if (errors.size === tokens.length) {\n      const firstError = errors.values().next().value;\n      throw firstError ?? new DecryptionFailedError(\"All token balance decryptions failed\");\n    }\n\n    return { results, errors };\n  }\n\n  /**\n   * Batch decrypt confidential balances as a delegate across multiple tokens.\n   * Mirrors {@link batchBalancesOf} but uses delegated credentials.\n   *\n   * **Error handling:** If a per-token decryption fails and no `onError` callback\n   * is provided, errors are collected and thrown as an aggregated\n   * `DecryptionFailedError`. When the relayer returns no value for an encrypted value,\n   * a `DecryptionFailedError` is thrown for that token (never silently returns `0n`).\n   * Pass `onError: () => 0n` to opt into the silent zero behavior.\n   *\n   * @param tokens - Array of Token instances to decrypt balances for.\n   * @param options - Delegated decryption configuration.\n   * @returns A Map from token address to decrypted balance.\n   * @throws if no active delegation exists. {@link DelegationNotFoundError}\n   * @throws if the delegation has expired. {@link DelegationExpiredError}\n   * @throws if any decryption fails and no `onError` is provided. {@link DecryptionFailedError}\n   * @throws A failure that affects the whole session (rejected signature, RPC\n   * rate limit, revoked KMS context) rejects the call even when `onError` is\n   * provided.\n   *\n   * @example\n   * ```ts\n   * const balances = await Token.batchDecryptBalancesAs(tokens, {\n   *   delegatorAddress: \"0xDelegator\",\n   *   onError: (err, addr) => { console.error(addr, err); return 0n; },\n   * });\n   * ```\n   */\n  static async batchDecryptBalancesAs(\n    tokens: Token[],\n    options: BatchDecryptAsOptions,\n  ): Promise<Map<Address, bigint>> {\n    if (tokens.length === 0) {\n      return new Map();\n    }\n\n    const sdk = Token.assertSameSdk(tokens);\n    const results = new Map<Address, bigint>();\n    const errors = new Map<Address, ZamaError>();\n    const normalizedAccount = options.accountAddress\n      ? getAddress(options.accountAddress)\n      : getAddress(options.delegatorAddress);\n    const maxConcurrency = options.maxConcurrency ?? 10;\n    if (options.encryptedValues && tokens.length !== options.encryptedValues.length) {\n      throw new DecryptionFailedError(\n        `tokens.length (${tokens.length}) must equal encryptedValues.length (${options.encryptedValues.length})`,\n      );\n    }\n    const resolvedEncryptedValues =\n      options.encryptedValues ??\n      (await Token.readBalanceHandlesBatch(tokens, normalizedAccount, errors, maxConcurrency));\n\n    const decryptRequests: Array<{ token: Token; encryptedValue: EncryptedValue }> = [];\n    for (const [index, token] of tokens.entries()) {\n      const encryptedValue = resolvedEncryptedValues[index];\n      if (!encryptedValue || errors.has(token.address)) {\n        continue;\n      }\n      if (isEncryptedValueZero(encryptedValue)) {\n        // Zero balance → skip the relayer; no decryption needed.\n        results.set(token.address, 0n);\n      } else {\n        decryptRequests.push({ token, encryptedValue });\n      }\n    }\n\n    if (decryptRequests.length > 0) {\n      const decrypted = await sdk.decryption.delegatedBatchDecryptValues({\n        encryptedInputs: decryptRequests.map(({ token, encryptedValue }) => ({\n          encryptedValue,\n          contractAddress: token.address,\n        })),\n        delegatorAddress: options.delegatorAddress,\n        accountAddress: options.accountAddress,\n        maxConcurrency,\n      });\n\n      for (const [index, item] of decrypted.items.entries()) {\n        const request = decryptRequests[index];\n        if (!request) {\n          continue;\n        }\n        if (item.error) {\n          errors.set(request.token.address, item.error);\n          continue;\n        }\n        const value = item.value;\n        if (value === undefined) {\n          errors.set(\n            request.token.address,\n            new DecryptionFailedError(\n              `Batch delegated decryption returned no value for ${item.encryptedValue} on token ${request.token.address}`,\n            ),\n          );\n          continue;\n        }\n        assertBigint(value, \"batchDecryptBalancesAs: result[encryptedValue]\");\n        results.set(request.token.address, value);\n      }\n    }\n\n    if (errors.size === 0) {\n      return results;\n    }\n\n    if (options.onError) {\n      const callbackErrors: Array<{ address: Address; error: Error }> = [];\n      for (const [address, error] of errors) {\n        try {\n          results.set(address, options.onError(error, address));\n        } catch (callbackError) {\n          callbackErrors.push({ address, error: toError(callbackError) });\n        }\n      }\n      if (callbackErrors.length > 0) {\n        const message = callbackErrors\n          .map(({ address, error }) => `${address}: ${error.message}`)\n          .join(\"; \");\n        throw new DecryptionFailedError(\n          `Batch delegated decryption onError callback failed for ${callbackErrors.length} token(s): ${message}`,\n          { cause: callbackErrors[0]?.error },\n        );\n      }\n      return results;\n    }\n\n    const errorEntries = Array.from(errors.entries());\n    const message = errorEntries.map(([addr, e]) => `${addr}: ${e.message}`).join(\"; \");\n    throw new DecryptionFailedError(\n      `Batch delegated decryption failed for ${errors.size} token(s): ${message}`,\n      { cause: errorEntries[0]?.[1] },\n    );\n  }\n\n  private static async readBalanceHandlesBatch(\n    tokens: Token[],\n    accountAddress: Address,\n    errors: Map<Address, ZamaError>,\n    maxConcurrency: number,\n  ): Promise<Array<EncryptedValue | undefined>> {\n    // `pLimit` cannot cancel calls that already started. The shared flag stops\n    // the queued tokens from re-hitting an endpoint that already failed for\n    // the whole batch.\n    let aborted = false;\n    let fatal: unknown;\n\n    const outcomes = await pLimit(\n      tokens.map((token) => async () => {\n        if (aborted) {\n          return { status: \"aborted\" as const };\n        }\n        try {\n          return {\n            status: \"fulfilled\" as const,\n            value: await token.readConfidentialBalanceOf(accountAddress),\n          };\n        } catch (reason) {\n          if (isFatalBatchError(reason)) {\n            aborted = true;\n            fatal ??= reason;\n            return { status: \"aborted\" as const };\n          }\n          return { status: \"rejected\" as const, reason };\n        }\n      }),\n      maxConcurrency,\n    );\n\n    if (fatal !== undefined) {\n      throw fatal;\n    }\n\n    const encryptedValues: Array<EncryptedValue | undefined> = [];\n    for (const [index, token] of tokens.entries()) {\n      const outcome = outcomes[index];\n      if (!outcome || outcome.status === \"aborted\") {\n        continue;\n      }\n      if (outcome.status === \"fulfilled\") {\n        encryptedValues[index] = outcome.value;\n        continue;\n      }\n      errors.set(\n        token.address,\n        outcome.reason instanceof ZamaError\n          ? outcome.reason\n          : new DecryptionFailedError(toError(outcome.reason).message, { cause: outcome.reason }),\n      );\n    }\n    return encryptedValues;\n  }\n\n  // WRITE OPERATIONS\n\n  /**\n   * Confidential transfer. Encrypts the amount via FHE, then calls the contract.\n   *\n   * By default, the SDK validates the confidential balance before submitting.\n   * If a cached plaintext balance exists it is used; otherwise, if credentials\n   * are cached, it decrypts on the fly. Set `skipBalanceCheck: true` to bypass\n   * this validation (e.g. for smart wallets).\n   *\n   * @param to - Recipient address.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param options - Optional: `skipBalanceCheck` (default `false`).\n   * @returns The transaction hash and mined receipt.\n   * @throws if signer and provider are on different chains. {@link ChainMismatchError}\n   * @throws if the balance is less than `amount`. {@link InsufficientConfidentialBalanceError}\n   * @throws if balance validation requires decryption that is not possible. {@link BalanceCheckUnavailableError}\n   * @throws if FHE encryption fails. {@link EncryptionFailedError}\n   * @throws if the on-chain transfer reverts. {@link TransactionRevertedError}\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransfer(\"0xRecipient\", 1000n);\n   * ```\n   */\n  async confidentialTransfer(\n    to: Address,\n    amount: bigint,\n    options?: TransferOptions,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransfer\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransfer\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const { skipBalanceCheck = false, onEncryptComplete, onTransferSubmitted } = options ?? {};\n\n    const normalizedTo = getAddress(to);\n\n    if (!skipBalanceCheck) {\n      await this.assertConfidentialBalance(amount);\n    }\n\n    const { encryptedValues, inputProof } = await this.sdk.encrypt({\n      values: [{ value: amount, type: \"euint64\" }],\n      contractAddress: this.address,\n      userAddress: getAddress(account.address),\n    });\n    void swallow(\"transfer: onEncryptComplete\", () => onEncryptComplete?.(), this.sdk.logger);\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transfer\",\n      config: confidentialTransferContract(\n        this.address,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n      ),\n      onSubmitted: onTransferSubmitted,\n    });\n  }\n\n  /**\n   * Operator encrypted transfer on behalf of another address.\n   * The caller must be an approved operator for `from`.\n   *\n   * @param from - The address to transfer from (caller must be an approved operator).\n   * @param to - Recipient address.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferFrom(\"0xFrom\", \"0xTo\", 500n);\n   * ```\n   */\n  async confidentialTransferFrom(\n    from: Address,\n    to: Address,\n    amount: bigint,\n    callbacks?: TransferCallbacks,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferFrom\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferFrom\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const normalizedFrom = getAddress(from);\n    const normalizedTo = getAddress(to);\n\n    // The input proof is verified against msg.sender, so it binds to the caller, not `from`.\n    const { encryptedValues, inputProof } = await this.sdk.encrypt({\n      values: [{ value: amount, type: \"euint64\" }],\n      contractAddress: this.address,\n      userAddress: getAddress(account.address),\n    });\n    void swallow(\n      \"transferFrom: onEncryptComplete\",\n      () => callbacks?.onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferFrom\",\n      config: confidentialTransferFromContract(\n        this.address,\n        normalizedFrom,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n      ),\n      onSubmitted: callbacks?.onTransferSubmitted,\n    });\n  }\n\n  /**\n   * ERC-7984 `confidentialTransferAndCall`: encrypted transfer that also invokes\n   * the recipient's receiver hook (`onConfidentialTransferReceived`) in a single\n   * transaction. The caller crafts the opaque `data` payload — the SDK does not\n   * encode, validate, or interpret it.\n   *\n   * Balance validation follows the same rules as {@link Token.confidentialTransfer}.\n   *\n   * @param to - Recipient address. Must implement the ERC-7984 receiver hook.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param data - Opaque bytes forwarded to the recipient's receiver hook.\n   * @param options - Optional: `skipBalanceCheck` (default `false`).\n   * @returns The transaction hash and mined receipt.\n   *\n   * @throws if signer and provider are on different chains. {@link ChainMismatchError}\n   * @throws if the balance is less than `amount`. {@link InsufficientConfidentialBalanceError}\n   * @throws if balance validation requires decryption that is not possible. {@link BalanceCheckUnavailableError}\n   * @throws if FHE encryption fails. {@link EncryptionFailedError}\n   * @throws if the on-chain transfer reverts. {@link TransactionRevertedError}\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferAndCall(\n   *   \"0xRecipient\",\n   *   1000n,\n   *   \"0xabcd\", // caller-encoded payload forwarded to the receiver hook\n   * );\n   * ```\n   */\n  async confidentialTransferAndCall(\n    to: Address,\n    amount: bigint,\n    data: Hex,\n    options?: TransferOptions,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferAndCall\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferAndCall\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const { skipBalanceCheck = false, onEncryptComplete, onTransferSubmitted } = options ?? {};\n\n    const normalizedTo = getAddress(to);\n\n    if (!skipBalanceCheck) {\n      await this.assertConfidentialBalance(amount);\n    }\n\n    const { encryptedValues, inputProof } = await this.sdk.encrypt({\n      values: [{ value: amount, type: \"euint64\" }],\n      contractAddress: this.address,\n      userAddress: getAddress(account.address),\n    });\n    void swallow(\n      \"transferAndCall: onEncryptComplete\",\n      () => onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferAndCall\",\n      config: confidentialTransferAndCallContract(\n        this.address,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n        data,\n      ),\n      onSubmitted: onTransferSubmitted,\n    });\n  }\n\n  /**\n   * ERC-7984 `confidentialTransferFromAndCall`: operator-initiated encrypted\n   * transfer that also invokes the recipient's receiver hook in a single\n   * transaction. The caller must be an approved operator for `from` and crafts\n   * the opaque `data` payload — the SDK does not encode or interpret it.\n   *\n   * @param from - The address to transfer from (caller must be an approved operator).\n   * @param to - Recipient address. Must implement the ERC-7984 receiver hook.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param data - Opaque bytes forwarded to the recipient's receiver hook.\n   * @param callbacks - Optional progress callbacks.\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferFromAndCall(\n   *   \"0xFrom\",\n   *   \"0xRecipient\",\n   *   500n,\n   *   \"0xabcd\",\n   * );\n   * ```\n   */\n  async confidentialTransferFromAndCall(\n    from: Address,\n    to: Address,\n    amount: bigint,\n    data: Hex,\n    callbacks?: TransferCallbacks,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferFromAndCall\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferFromAndCall\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const normalizedFrom = getAddress(from);\n    const normalizedTo = getAddress(to);\n\n    // The input proof is verified against msg.sender, so it binds to the caller, not `from`.\n    const { encryptedValues, inputProof } = await this.sdk.encrypt({\n      values: [{ value: amount, type: \"euint64\" }],\n      contractAddress: this.address,\n      userAddress: getAddress(account.address),\n    });\n    void swallow(\n      \"transferFromAndCall: onEncryptComplete\",\n      () => callbacks?.onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferFromAndCall\",\n      config: confidentialTransferFromAndCallContract(\n        this.address,\n        normalizedFrom,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n        data,\n      ),\n      onSubmitted: callbacks?.onTransferSubmitted,\n    });\n  }\n\n  // OPERATOR APPROVAL\n\n  /**\n   * Set operator approval for the confidential token.\n   * Defaults to 1 hour from now if `until` is not specified.\n   *\n   * @param operator - The address to set as an operator.\n   * @param until - Optional Unix timestamp for approval expiry. Defaults to now + 1 hour.\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.setOperator(\"0xOperator\");\n   * ```\n   */\n  async setOperator(operator: Address, until?: number): Promise<TransactionResult> {\n    this.#requireSigner(\"setOperator\");\n    await requireChainAlignment(\"setOperator\", this.sdk.signer, this.sdk.provider);\n    const normalizedOperator = getAddress(operator);\n    return this.submitTransaction({\n      operation: \"setOperator\",\n      config: setOperatorContract(this.address, normalizedOperator, until),\n    });\n  }\n\n  /**\n   * Check if a spender is an approved operator for a given holder.\n   *\n   * @param holder - The token holder address.\n   * @param spender - The address to check operator approval for.\n   * @returns `true` if the spender is an approved operator for the holder.\n   *\n   * @example\n   * ```ts\n   * if (await token.isOperator(\"0xHolder\", \"0xSpender\")) {\n   *   // spender can call transferFrom on behalf of holder\n   * }\n   * ```\n   */\n  async isOperator(holder: Address, spender: Address): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      isOperatorContract(this.address, getAddress(holder), getAddress(spender)),\n    );\n  }\n\n  // PROTECTED HELPERS\n\n  /**\n   * Read the on-chain encrypted balance for a given owner.\n   *\n   * @internal\n   */\n  protected async readConfidentialBalanceOf(owner: Address): Promise<EncryptedValue> {\n    return await this.sdk.provider.readContract(confidentialBalanceOfContract(this.address, owner));\n  }\n\n  /**\n   * Pre-flight check: decrypt the confidential balance and compare against the\n   * requested amount. If credentials are cached the decrypt happens silently;\n   * if not, throws {@link BalanceCheckUnavailableError} instead of triggering\n   * a surprise EIP-712 popup.\n   *\n   * @internal\n   */\n  protected async assertConfidentialBalance(amount: bigint): Promise<void> {\n    if (amount === 0n) {\n      return;\n    }\n\n    let balance: bigint;\n    try {\n      const account = await requireAlignedWalletAccount(\n        \"assertConfidentialBalance\",\n        this.sdk.signer,\n        this.sdk.provider,\n      );\n      balance = await this.balanceOf(getAddress(account.address));\n    } catch (error) {\n      if (error instanceof ZamaError) {\n        throw error;\n      }\n      throw new BalanceCheckUnavailableError(`Balance validation failed (token: ${this.address})`, {\n        cause: error,\n      });\n    }\n\n    if (balance < amount) {\n      throw new InsufficientConfidentialBalanceError(\n        `Insufficient confidential balance: requested ${amount}, available ${balance} (token: ${this.address})`,\n        { requested: amount, available: balance, token: this.address },\n      );\n    }\n  }\n\n  /**\n   * Emit a token-scoped event through the owning {@link ZamaSDK} so that\n   * subscribers see a unified stream.\n   *\n   * @internal\n   */\n  protected emit(input: ZamaSDKEventInput): void {\n    this.sdk.emitEvent(input, this.address);\n  }\n\n  /**\n   * Submit a token-scoped write transaction through the shared SDK transaction\n   * pipeline. Callers keep pre-flight and operation-specific work local.\n   *\n   * @internal\n   */\n  protected async submitTransaction(params: {\n    operation: TransactionOperation;\n    config: WriteContractConfig;\n    onSubmitted?: (txHash: Hex) => void;\n  }): Promise<TransactionResult> {\n    const { operation, config, onSubmitted } = params;\n    return submitSdkTransaction({\n      operation,\n      signer: this.#requireSigner(operation),\n      provider: this.sdk.provider,\n      config,\n      emit: (input) => this.emit(input),\n      onSubmitted,\n      logger: this.sdk.logger,\n    });\n  }\n\n  /** Verify all tokens share the same SDK instance and return it. */\n  private static assertSameSdk(tokens: Token[]): ZamaSDK {\n    const sdk = tokens[0]!.sdk;\n    for (let i = 1; i < tokens.length; i++) {\n      if (tokens[i]!.sdk !== sdk) {\n        throw new ConfigurationError(\n          \"All tokens in a batch operation must share the same ZamaSDK instance\",\n        );\n      }\n    }\n    return sdk;\n  }\n}\n"],"mappings":"6VAGA,IAAa,EAAb,cAA2C,CAAU,CACnD,YAAY,EAAiB,EAAwB,CACnD,MAAM,EAAc,iBAAkB,EAAS,CAAO,EACtD,KAAK,KAAO,uBACd,CACF,EAGa,EAAb,cAA2C,CAAU,CACnD,YAAY,EAAiB,EAAwB,CACnD,MAAM,EAAc,iBAAkB,EAAS,CAAO,EACtD,KAAK,KAAO,uBACd,CACF,ECSa,EAAb,cAAuC,CAAU,CAO/C,WAEA,YAAY,EAAiB,EAAkD,CAC7E,GAAM,CAAE,aAAY,GAAG,GAAiB,GAAW,CAAC,EACpD,MAAM,EAAc,eAAgB,EAAS,CAAY,EACzD,KAAK,KAAO,oBACZ,KAAK,WAAa,CACpB,CACF,ECjBa,EAAb,cAAwC,CAAU,CAEhD,UAEA,cAEA,gBAEA,YACE,CACE,YACA,gBACA,mBAEF,EACA,CACA,MACE,EAAc,cACd,cAAc,EAAU,iFACI,EAAc,4BAA4B,EAAgB,GACtF,CACF,EACA,KAAK,KAAO,qBACZ,KAAK,UAAY,EACjB,KAAK,cAAgB,EACrB,KAAK,gBAAkB,CACzB,CACF,ECpCa,EAAb,cAA0D,CAAU,CAElE,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAM,EAAc,gCAAiC,EAAS,CAAO,EACrE,KAAK,KAAO,uCACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAmD,CAAU,CAE3D,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAM,EAAc,yBAA0B,EAAS,CAAO,EAC9D,KAAK,KAAO,gCACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAgD,CAAU,CAExD,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAM,EAAc,sBAAuB,EAAS,CAAO,EAC3D,KAAK,KAAO,6BACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAkD,CAAU,CAC1D,YAAY,EAAiB,EAAwB,CACnD,MAAM,EAAc,wBAAyB,EAAS,CAAO,EAC7D,KAAK,KAAO,8BACd,CACF,EAGa,EAAb,cAA0C,CAAU,CAClD,YAAY,EAAiB,EAAwB,CACnD,MAAM,EAAc,gBAAiB,EAAS,CAAO,EACrD,KAAK,KAAO,sBACd,CACF,EC3DA,SAAgB,EAAkB,EAAyB,CACzD,OACE,aAAiB,GACjB,aAAiB,GACjB,aAAiB,GACjB,aAAiB,GACjB,aAAiB,GACjB,aAAiB,CAErB,CC0BA,MAEM,EAAsC,CAC1C,MAAO,EAEP,OAAQ,EACR,QAAS,EACT,QAAS,EACT,QAAS,EACT,SAAU,EACV,SAAU,EACV,SAAU,CACZ,EAEM,EAAsC,CAC1C,EAAG,QAEH,EAAG,SACH,EAAG,UACH,EAAG,UACH,EAAG,UACH,EAAG,WACH,EAAG,WACH,EAAG,UACL,EAEM,EAAkE,CACtE,EAAG,EAEH,EAAG,EACH,EAAG,GACH,EAAG,GACH,EAAG,GACH,EAAG,IACH,EAAG,IACH,EAAG,GACL,EAaA,OAAO,OAAO,CAAe,EAC7B,OAAO,OAAO,CAAe,EAC7B,OAAO,OAAO,CAA6B,EAC3C,OAAO,OAAO,CAbZ,EAAG,EACH,EAAG,EACH,GAAI,EACJ,GAAI,EACJ,GAAI,EACJ,IAAK,EACL,IAAK,EACL,IAAK,CAMO,CAA6B,EAM3C,SAAgB,EAAY,EAAoC,CAC9D,OAAQ,EAAR,CACE,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACH,MAAO,GACT,QACE,MAAO,EACX,CACF,CAyCA,SAAgB,EAA4B,EAAgC,CAC1E,GAAI,CAAC,EAAY,CAAM,EACrB,MAAU,MAAM,uBAAuB,EAAO,EAAE,EAElD,IAAM,EAAK,EAA8B,GACzC,GAAI,EAAK,EACP,MAAU,MACR,yCAAyC,EAAG,qBAC9C,EAEF,OAAO,CACT,CCjLA,MAAa,EACX,qEAKF,SAAgB,EAAqB,EAAiC,CACpE,OAAO,IAAA,sEAA2C,IAAmB,IACvE,CA0BA,SAAgB,EAAwB,EAAwC,CAC9E,IAAI,EACJ,GAAI,CACF,EAAc,OAAO,CAAc,CACrC,MAAQ,CACN,MAAO,IACT,CACA,IAAM,EAAW,OAAQ,GAAe,GAAM,IAAK,EACnD,OAAO,EAAY,CAAQ,EAAI,EAA4B,CAAQ,EAAI,GACzE,CASA,SAAgB,EACd,EACA,EAAkB,KACE,CACpB,IAAM,EAA6B,CAAC,EAChC,EAA4B,CAAC,EAC7B,EAAc,EAElB,IAAK,IAAM,KAAU,EAAS,CAC5B,IAAM,EAAO,EAAwB,CAAM,EACvC,EAAQ,OAAS,GAAK,EAAc,EAAO,IAC7C,EAAO,KAAK,CAAO,EACnB,EAAU,CAAC,EACX,EAAc,GAEhB,EAAQ,KAAK,CAAM,EACnB,GAAe,CACjB,CAIA,OAHI,EAAQ,OAAS,GACnB,EAAO,KAAK,CAAO,EAEd,CACT,CChEA,eAAsB,EACpB,EACA,EACA,EACwB,CACxB,GAAI,CAAC,EACH,MAAM,IAAI,EAAyB,CAAS,EAE9C,IAAI,EACJ,GAAI,CACF,EAAU,EAAO,qBAAqB,CAAS,CACjD,OAAS,EAAO,CACd,GAAI,EAAE,aAAiB,IAA+B,CAAC,EAAO,qBAC5D,MAAM,EAER,MAAM,EAAO,qBAAqB,EAClC,EAAU,EAAO,qBAAqB,CAAS,CACjD,CACA,IAAM,EAAkB,MAAM,EAAS,WAAW,EAClD,GAAI,EAAQ,UAAY,EACtB,MAAM,IAAI,EAAmB,CAAE,YAAW,cAAe,EAAQ,QAAS,iBAAgB,CAAC,EAE7F,OAAO,CACT,CASA,eAAsB,EACpB,EACA,EACA,EACiB,CACjB,OAAQ,MAAM,EAA4B,EAAW,EAAQ,CAAQ,EAAA,CAAG,OAC1E,CChDA,eAAsB,EACpB,EACA,EAAiB,IACH,CACd,GAAI,OAAO,SAAS,CAAc,GAAK,GAAkB,EACvD,MAAU,MAAM,0CAA0C,EAE5D,GAAI,CAAC,OAAO,SAAS,CAAc,GAAK,GAAkB,EAAI,OAC5D,OAAO,QAAQ,IAAI,EAAI,IAAK,GAAM,EAAE,CAAC,CAAC,EAGxC,IAAM,EAAe,MAAM,KAAK,CAAE,OAAQ,EAAI,MAAO,CAAC,EAClD,EAAQ,EAEZ,eAAe,GAAS,CACtB,KAAO,EAAQ,EAAI,QAAQ,CACzB,IAAM,EAAI,IACN,EAAI,KACN,EAAQ,GAAK,MAAM,EAAI,EAAE,CAAC,EAE9B,CACF,CAGA,OADA,MAAM,QAAQ,IAAI,MAAM,KAAK,CAAE,OAAQ,CAAe,EAAG,CAAM,CAAC,EACzD,CACT,CCJA,eAAsB,EAAkB,EAQT,CAC7B,GAAM,CAAE,YAAW,SAAQ,WAAU,SAAQ,OAAM,cAAa,UAAW,EACrE,EAAW,EAA6B,GAE9C,GAAI,CACF,IAAM,EAAS,MAAM,EAAO,cAAc,CAAM,EAIhD,OAHA,EAAK,EAAS,eAAe,CAAM,CAAC,EACpC,EAAa,GAAG,EAAU,mBAAsB,IAAc,CAAM,EAAG,CAAM,EAEtE,CAAE,SAAQ,QAAA,MADK,EAAS,0BAA0B,CAAM,CACtC,CAC3B,OAAS,EAAO,CACd,IAAM,EACJ,aAAiB,EACb,EACA,IAAI,EAAyB,6BAA6B,IAAa,CAAE,MAAO,CAAM,CAAC,EAG7F,MADA,EAAK,CAAE,KAAM,EAAc,iBAAkB,YAAW,MAAO,CAAQ,CAAC,EAClE,CACR,CACF,CCiCA,IAAa,EAAb,MAAa,CAAM,CAEjB,IAEA,QAEA,YAAY,EAAc,EAAkB,CAC1C,KAAK,IAAM,EACX,KAAK,QAAU,EAAW,CAAO,CACnC,CAGA,GAAe,EAAkC,CAC/C,OAAO,EAAkB,KAAK,IAAI,OAAQ,CAAS,CACrD,CAKA,MAAM,MAAwB,CAC5B,OAAO,KAAK,IAAI,SAAS,aAAa,EAAa,KAAK,OAAO,CAAC,CAClE,CAGA,MAAM,QAA0B,CAC9B,OAAO,KAAK,IAAI,SAAS,aAAa,EAAe,KAAK,OAAO,CAAC,CACpE,CAGA,MAAM,UAA4B,CAChC,OAAO,KAAK,IAAI,SAAS,aAAa,EAAiB,KAAK,OAAO,CAAC,CACtE,CASA,MAAM,gBAAmC,CACvC,OAAO,KAAK,IAAI,SAAS,aACvB,EAA0B,KAAK,QAAS,CAAoB,CAC9D,CACF,CAQA,MAAM,WAA8B,CAClC,OAAO,KAAK,IAAI,SAAS,aACvB,EAA0B,KAAK,QAAS,CAA4B,CACtE,CACF,CAiBA,MAAM,UAAU,EAAiC,CAC/C,IAAM,EAAe,EAAW,CAAK,EAC/B,EAAiB,MAAM,KAAK,0BAA0B,CAAY,EAIlE,GAAQ,MAHO,KAAK,IAAI,WAAW,cAAc,CACrD,CAAE,iBAAgB,gBAAiB,KAAK,OAAQ,CAClD,CAAC,EAAA,CACoB,GACrB,GAAI,IAAU,IAAA,GACZ,MAAM,IAAI,EAAsB,oCAAoC,GAAgB,EAGtF,OADA,EAAa,EAAO,mCAAmC,EAChD,CACT,CAaA,MAAM,sBAAsB,EAAyC,CACnE,OAAO,KAAK,0BAA0B,EAAW,CAAK,CAAC,CACzD,CA2BA,MAAM,iBAAiB,CACrB,mBACA,kBAIkB,CAClB,MAAM,EAAsB,mBAAoB,KAAK,IAAI,OAAQ,KAAK,IAAI,QAAQ,EAClF,IAAM,EAAsB,EAAW,CAAgB,EACjD,EAAoB,EAAiB,EAAW,CAAc,EAAI,EAElE,EAAiB,MAAM,KAAK,0BAA0B,CAAiB,EAC7E,GAAI,EAAqB,CAAc,EACrC,OAAO,GAST,IAAM,GAAQ,MANO,KAAK,IAAI,WAAW,uBACvC,CAAC,CAAE,iBAAgB,gBAAiB,KAAK,OAAQ,CAAC,EAClD,EACA,CACF,EAAA,CAEqB,GACrB,GAAI,IAAU,IAAA,GACZ,MAAM,IAAI,EACR,8CAA8C,GAChD,EAGF,OADA,EAAa,EAAO,0CAA0C,EACvD,CACT,CAwBA,aAAa,gBAAgB,EAAiB,EAA8C,CAC1F,IAAM,EAAU,IAAI,IACd,EAAS,IAAI,IACnB,GAAI,EAAO,SAAW,EACpB,MAAO,CAAE,UAAS,QAAO,EAG3B,IAAM,EAAM,EAAM,cAAc,CAAM,EAEtC,MAAM,EAAsB,kBAAmB,EAAI,OAAQ,EAAI,QAAQ,EAGvE,MAAM,EAAI,QAAQ,YAAY,EAAO,IAAK,GAAM,EAAE,OAAO,CAAC,EAK1D,IAAI,EAAU,GACV,EAEE,EAAW,MAAM,EACrB,EAAO,IAAK,GAAM,SAAY,CAC5B,GAAI,EACF,MAAO,CAAE,OAAQ,SAAmB,EAEtC,GAAI,CACF,MAAO,CAAE,OAAQ,YAAsB,MAAO,MAAM,EAAE,UAAU,CAAK,CAAE,CACzE,OAAS,EAAQ,CAQf,OALI,EAAkB,CAAM,GAC1B,EAAU,GACV,IAAU,EACH,CAAE,OAAQ,SAAmB,GAE/B,CAAE,OAAQ,WAAqB,QAAO,CAC/C,CACF,CAAC,EACD,CACF,EAIA,GAAI,IAAU,IAAA,GACZ,MAAM,EAGR,IAAK,IAAI,EAAI,EAAG,EAAI,EAAO,OAAQ,IAAK,CACtC,IAAM,EAAe,EAAO,EAAE,CAAE,QAC1B,EAAU,EAAS,GACrB,KAAQ,SAAW,UAGvB,GAAI,EAAQ,SAAW,YACrB,EAAQ,IAAI,EAAc,EAAQ,KAAK,MAClC,CACL,IAAM,EAAS,EAAQ,OACjB,EACJ,aAAkB,EACd,EACA,IAAI,EAAsB,EAAQ,CAAM,CAAC,CAAC,QAAS,CAAE,MAAO,CAAO,CAAC,EAC1E,EAAO,IAAI,EAAc,CAAK,CAChC,CACF,CAGA,GAAI,EAAO,OAAS,EAAO,OAEzB,MADmB,EAAO,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,OACtB,IAAI,EAAsB,sCAAsC,EAGtF,MAAO,CAAE,UAAS,QAAO,CAC3B,CA8BA,aAAa,uBACX,EACA,EAC+B,CAC/B,GAAI,EAAO,SAAW,EACpB,OAAO,IAAI,IAGb,IAAM,EAAM,EAAM,cAAc,CAAM,EAChC,EAAU,IAAI,IACd,EAAS,IAAI,IACb,EAAoB,EAAQ,eAC9B,EAAW,EAAQ,cAAc,EACjC,EAAW,EAAQ,gBAAgB,EACjC,EAAiB,EAAQ,gBAAkB,GACjD,GAAI,EAAQ,iBAAmB,EAAO,SAAW,EAAQ,gBAAgB,OACvE,MAAM,IAAI,EACR,kBAAkB,EAAO,OAAO,uCAAuC,EAAQ,gBAAgB,OAAO,EACxG,EAEF,IAAM,EACJ,EAAQ,iBACP,MAAM,EAAM,wBAAwB,EAAQ,EAAmB,EAAQ,CAAc,EAElF,EAA2E,CAAC,EAClF,IAAK,GAAM,CAAC,EAAO,KAAU,EAAO,QAAQ,EAAG,CAC7C,IAAM,EAAiB,EAAwB,GAC3C,CAAC,GAAkB,EAAO,IAAI,EAAM,OAAO,IAG3C,EAAqB,CAAc,EAErC,EAAQ,IAAI,EAAM,QAAS,EAAE,EAE7B,EAAgB,KAAK,CAAE,QAAO,gBAAe,CAAC,EAElD,CAEA,GAAI,EAAgB,OAAS,EAAG,CAC9B,IAAM,EAAY,MAAM,EAAI,WAAW,4BAA4B,CACjE,gBAAiB,EAAgB,KAAK,CAAE,QAAO,qBAAsB,CACnE,iBACA,gBAAiB,EAAM,OACzB,EAAE,EACF,iBAAkB,EAAQ,iBAC1B,eAAgB,EAAQ,eACxB,gBACF,CAAC,EAED,IAAK,GAAM,CAAC,EAAO,KAAS,EAAU,MAAM,QAAQ,EAAG,CACrD,IAAM,EAAU,EAAgB,GAChC,GAAI,CAAC,EACH,SAEF,GAAI,EAAK,MAAO,CACd,EAAO,IAAI,EAAQ,MAAM,QAAS,EAAK,KAAK,EAC5C,QACF,CACA,IAAM,EAAQ,EAAK,MACnB,GAAI,IAAU,IAAA,GAAW,CACvB,EAAO,IACL,EAAQ,MAAM,QACd,IAAI,EACF,oDAAoD,EAAK,eAAe,YAAY,EAAQ,MAAM,SACpG,CACF,EACA,QACF,CACA,EAAa,EAAO,gDAAgD,EACpE,EAAQ,IAAI,EAAQ,MAAM,QAAS,CAAK,CAC1C,CACF,CAEA,GAAI,EAAO,OAAS,EAClB,OAAO,EAGT,GAAI,EAAQ,QAAS,CACnB,IAAM,EAA4D,CAAC,EACnE,IAAK,GAAM,CAAC,EAAS,KAAU,EAC7B,GAAI,CACF,EAAQ,IAAI,EAAS,EAAQ,QAAQ,EAAO,CAAO,CAAC,CACtD,OAAS,EAAe,CACtB,EAAe,KAAK,CAAE,UAAS,MAAO,EAAQ,CAAa,CAAE,CAAC,CAChE,CAEF,GAAI,EAAe,OAAS,EAAG,CAC7B,IAAM,EAAU,EACb,KAAK,CAAE,UAAS,WAAY,GAAG,EAAQ,IAAI,EAAM,SAAS,CAAC,CAC3D,KAAK,IAAI,EACZ,MAAM,IAAI,EACR,0DAA0D,EAAe,OAAO,aAAa,IAC7F,CAAE,MAAO,EAAe,EAAE,EAAE,KAAM,CACpC,CACF,CACA,OAAO,CACT,CAEA,IAAM,EAAe,MAAM,KAAK,EAAO,QAAQ,CAAC,EAC1C,EAAU,EAAa,KAAK,CAAC,EAAM,KAAO,GAAG,EAAK,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI,EAClF,MAAM,IAAI,EACR,yCAAyC,EAAO,KAAK,aAAa,IAClE,CAAE,MAAO,EAAa,EAAE,GAAG,EAAG,CAChC,CACF,CAEA,aAAqB,wBACnB,EACA,EACA,EACA,EAC4C,CAI5C,IAAI,EAAU,GACV,EAEE,EAAW,MAAM,EACrB,EAAO,IAAK,GAAU,SAAY,CAChC,GAAI,EACF,MAAO,CAAE,OAAQ,SAAmB,EAEtC,GAAI,CACF,MAAO,CACL,OAAQ,YACR,MAAO,MAAM,EAAM,0BAA0B,CAAc,CAC7D,CACF,OAAS,EAAQ,CAMf,OALI,EAAkB,CAAM,GAC1B,EAAU,GACV,IAAU,EACH,CAAE,OAAQ,SAAmB,GAE/B,CAAE,OAAQ,WAAqB,QAAO,CAC/C,CACF,CAAC,EACD,CACF,EAEA,GAAI,IAAU,IAAA,GACZ,MAAM,EAGR,IAAM,EAAqD,CAAC,EAC5D,IAAK,GAAM,CAAC,EAAO,KAAU,EAAO,QAAQ,EAAG,CAC7C,IAAM,EAAU,EAAS,GACrB,MAAC,GAAW,EAAQ,SAAW,WAGnC,IAAI,EAAQ,SAAW,YAAa,CAClC,EAAgB,GAAS,EAAQ,MACjC,QACF,CACA,EAAO,IACL,EAAM,QACN,EAAQ,kBAAkB,EACtB,EAAQ,OACR,IAAI,EAAsB,EAAQ,EAAQ,MAAM,CAAC,CAAC,QAAS,CAAE,MAAO,EAAQ,MAAO,CAAC,CAC1F,CANA,CAOF,CACA,OAAO,CACT,CA2BA,MAAM,qBACJ,EACA,EACA,EAC4B,CAC5B,KAAKA,GAAe,sBAAsB,EAC1C,IAAM,EAAU,MAAM,EACpB,uBACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,CAAE,mBAAmB,GAAO,oBAAmB,uBAAwB,GAAW,CAAC,EAEnF,EAAe,EAAW,CAAE,EAE7B,GACH,MAAM,KAAK,0BAA0B,CAAM,EAG7C,GAAM,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QAAQ,CAC7D,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,YAAa,EAAW,EAAQ,OAAO,CACzC,CAAC,EAGD,GAFA,EAAa,kCAAqC,IAAoB,EAAG,KAAK,IAAI,MAAM,EAEpF,EAAgB,SAAW,EAC7B,MAAM,IAAI,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,WACX,OAAQ,EACN,KAAK,QACL,EACA,EAAgB,GAChB,CACF,EACA,YAAa,CACf,CAAC,CACH,CAgBA,MAAM,yBACJ,EACA,EACA,EACA,EAC4B,CAC5B,KAAKA,GAAe,0BAA0B,EAC9C,IAAM,EAAU,MAAM,EACpB,2BACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,EAAiB,EAAW,CAAI,EAChC,EAAe,EAAW,CAAE,EAG5B,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QAAQ,CAC7D,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,YAAa,EAAW,EAAQ,OAAO,CACzC,CAAC,EAOD,GANA,EACE,sCACM,GAAW,oBAAoB,EACrC,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAI,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,eACX,OAAQ,EACN,KAAK,QACL,EACA,EACA,EAAgB,GAChB,CACF,EACA,YAAa,GAAW,mBAC1B,CAAC,CACH,CA+BA,MAAM,4BACJ,EACA,EACA,EACA,EAC4B,CAC5B,KAAKA,GAAe,6BAA6B,EACjD,IAAM,EAAU,MAAM,EACpB,8BACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,CAAE,mBAAmB,GAAO,oBAAmB,uBAAwB,GAAW,CAAC,EAEnF,EAAe,EAAW,CAAE,EAE7B,GACH,MAAM,KAAK,0BAA0B,CAAM,EAG7C,GAAM,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QAAQ,CAC7D,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,YAAa,EAAW,EAAQ,OAAO,CACzC,CAAC,EAOD,GANA,EACE,yCACM,IAAoB,EAC1B,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAI,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,kBACX,OAAQ,EACN,KAAK,QACL,EACA,EAAgB,GAChB,EACA,CACF,EACA,YAAa,CACf,CAAC,CACH,CAyBA,MAAM,gCACJ,EACA,EACA,EACA,EACA,EAC4B,CAC5B,KAAKA,GAAe,iCAAiC,EACrD,IAAM,EAAU,MAAM,EACpB,kCACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,EAAiB,EAAW,CAAI,EAChC,EAAe,EAAW,CAAE,EAG5B,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QAAQ,CAC7D,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,YAAa,EAAW,EAAQ,OAAO,CACzC,CAAC,EAOD,GANA,EACE,6CACM,GAAW,oBAAoB,EACrC,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAI,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,sBACX,OAAQ,EACN,KAAK,QACL,EACA,EACA,EAAgB,GAChB,EACA,CACF,EACA,YAAa,GAAW,mBAC1B,CAAC,CACH,CAiBA,MAAM,YAAY,EAAmB,EAA4C,CAC/E,KAAKA,GAAe,aAAa,EACjC,MAAM,EAAsB,cAAe,KAAK,IAAI,OAAQ,KAAK,IAAI,QAAQ,EAC7E,IAAM,EAAqB,EAAW,CAAQ,EAC9C,OAAO,KAAK,kBAAkB,CAC5B,UAAW,cACX,OAAQ,EAAoB,KAAK,QAAS,EAAoB,CAAK,CACrE,CAAC,CACH,CAgBA,MAAM,WAAW,EAAiB,EAAoC,CACpE,OAAO,KAAK,IAAI,SAAS,aACvB,EAAmB,KAAK,QAAS,EAAW,CAAM,EAAG,EAAW,CAAO,CAAC,CAC1E,CACF,CASA,MAAgB,0BAA0B,EAAyC,CACjF,OAAO,MAAM,KAAK,IAAI,SAAS,aAAa,EAA8B,KAAK,QAAS,CAAK,CAAC,CAChG,CAUA,MAAgB,0BAA0B,EAA+B,CACvE,GAAI,IAAW,GACb,OAGF,IAAI,EACJ,GAAI,CACF,IAAM,EAAU,MAAM,EACpB,4BACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACA,EAAU,MAAM,KAAK,UAAU,EAAW,EAAQ,OAAO,CAAC,CAC5D,OAAS,EAAO,CAId,MAHI,aAAiB,EACb,EAEF,IAAI,EAA6B,qCAAqC,KAAK,QAAQ,GAAI,CAC3F,MAAO,CACT,CAAC,CACH,CAEA,GAAI,EAAU,EACZ,MAAM,IAAI,EACR,gDAAgD,EAAO,cAAc,EAAQ,WAAW,KAAK,QAAQ,GACrG,CAAE,UAAW,EAAQ,UAAW,EAAS,MAAO,KAAK,OAAQ,CAC/D,CAEJ,CAQA,KAAe,EAAgC,CAC7C,KAAK,IAAI,UAAU,EAAO,KAAK,OAAO,CACxC,CAQA,MAAgB,kBAAkB,EAIH,CAC7B,GAAM,CAAE,YAAW,SAAQ,eAAgB,EAC3C,OAAOC,EAAqB,CAC1B,YACA,OAAQ,KAAKD,GAAe,CAAS,EACrC,SAAU,KAAK,IAAI,SACnB,SACA,KAAO,GAAU,KAAK,KAAK,CAAK,EAChC,cACA,OAAQ,KAAK,IAAI,MACnB,CAAC,CACH,CAGA,OAAe,cAAc,EAA0B,CACrD,IAAM,EAAM,EAAO,EAAE,CAAE,IACvB,IAAK,IAAI,EAAI,EAAG,EAAI,EAAO,OAAQ,IACjC,GAAI,EAAO,EAAE,CAAE,MAAQ,EACrB,MAAM,IAAI,EACR,sEACF,EAGJ,OAAO,CACT,CACF"}

package/dist/esm/{types-CuDiV0Wy.d.ts → types-D2Wc2kuN.d.ts}

@@ -1,7 +1,7 @@
 import { d as AtLeastOneChain, f as FheChain } from "./index-ijgDL4IC.js";
+import { Abi, Address, ContractFunctionArgs, ContractFunctionName, ContractFunctionReturnType, Hex } from "viem";
 import { CreateUnsignedLegacyDecryptionPermitEip712Parameters, CreateUnsignedLegacyDecryptionPermitEip712ReturnType } from "@fhevm/sdk/actions/base";
 import { createFhevmClient, setFhevmRuntimeConfig } from "@fhevm/sdk/viem";
-import { Abi, Address, ContractFunctionArgs, ContractFunctionName, ContractFunctionReturnType, Hex } from "viem";
 import { Eip712Like, TypedValue, TypedValue as TypedValue$1 } from "@fhevm/sdk/types";
 import { DecryptValuesParameters } from "@fhevm/sdk/actions/decrypt";
 //#region src/relayer/types.d.ts
@@ -196,6 +196,8 @@ interface RelayerSDK extends Pick<FhevmClient, "encryptValue" | "encryptValues"
 //#region src/types/transaction.d.ts
 /** Framework-agnostic log shape compatible with any Ethereum provider. */
 interface RawLog {
+  /** Address of the contract that emitted the log. Optional for adapter compatibility. */
+  readonly address?: Hex;
   /** Indexed event topics (topic[0] is the event signature hash). */
   readonly topics: readonly Hex[];
   /** ABI-encoded non-indexed event data. */
@@ -1316,4 +1318,4 @@ type ZamaConfig = {
 };
 //#endregion
 export { TransactionErrorEvent as $, DecryptValuesParameters as $t, WalletAccountListener as A, Topics as At, ApproveUnderlyingSubmittedEvent as B, decodeRevokedDelegationForUserDecryption as Bt, TransferAndCallRequest as C, AclEvent as Ct, GenericSigner as D, OnChainEvent as Dt, WrapRequest as E, DelegatedForUserDecryptionEvent as Et, ReadContractReturnType as F, decodeAclEvents as Ft, DelegationSubmittedEvent as G, findRevokedDelegationForUserDecryption as Gt, DecryptEndEvent as H, decodeUnwrapRequested as Ht, ReadFunctionName as I, decodeConfidentialTransfer as It, EncryptStartEvent as J, RawLog as Jt, EncryptEndEvent as K, findUnwrapRequested as Kt, WriteContractArgs as L, decodeDelegatedForUserDecryption as Lt, ContractAbi as M, UnwrapRequestedEvent as Mt, ReadContractArgs as N, WrapEvent as Nt, WalletAccount as O, RevokedDelegationForUserDecryptionEvent as Ot, ReadContractConfig as P, decodeAclEvent as Pt, ShieldSubmittedEvent as Q, DecryptPublicValuesResult as Qt, WriteContractConfig as R, decodeOnChainEvent as Rt, TransactionKind as S, ACL_TOPICS as St, UnwrapRequest as T, ConfidentialTransferEvent as Tt, DecryptErrorEvent as U, decodeWrap as Ut, BaseEvent as V, decodeUnwrapFinalized as Vt, DecryptStartEvent as W, findDelegatedForUserDecryption as Wt, RevokeDelegationSubmittedEvent as X, TransactionResult as Xt, FinalizeUnwrapSubmittedEvent as Y, TransactionReceipt as Yt, SetOperatorSubmittedEvent as Z, ClearValue as Zt, PrepareTransactionRequest as _, UnwrapResult as _t, ZamaConfigBase as a, FhevmClient as an, UnshieldPhase2SubmittedEvent as at, RevokeDelegationRequest as b, TransferCallbacks as bt, GenericStorage as c, FhevmRuntimeConfig as cn, ZamaSDKEvent as ct, ConfidentialTransferFromRequest as d, TypedValue$1 as dn, ZamaSDKEvents as dt, EIP712TypedData as en, TransactionOperation as et, ConfidentialTransferRequest as f, ApprovalStrategy as ft, PrepareOptions as g, UnshieldOptions as gt, PrepareFees as h, TransferOptions as ht, ZamaConfig as i, EncryptedValue as in, UnshieldPhase2StartedEvent as it, WalletAccountStore as j, UnwrapFinalizedEvent as jt, WalletAccountChange as k, TOKEN_TOPICS as kt, GenericProvider as l, RelayerOptions as ln, ZamaSDKEventListener as lt, FinalizeUnwrapRequest as m, ShieldPath as mt, RelayerConfig as n, EncryptParams as nn, TransferSubmittedEvent as nt, ZamaConfigGeneric as o, FhevmClientOptions as on, UnwrapSubmittedEvent as ot, DelegateDecryptionRequest as p, ShieldOptions as pt, EncryptErrorEvent as q, findWrap as qt, WebRelayerConfig as r, EncryptResult as rn, UnshieldPhase1SubmittedEvent as rt, GenericLogger as s, FhevmRelayerOptions as sn, WrapSubmittedEvent as st, CleartextRelayerConfig as t, EncryptInput as tn, TransferFromSubmittedEvent as tt, ApproveUnderlyingRequest as u, RelayerSDK as un, ZamaSDKEventType as ut, PreparedFor as v, WrapOptions as vt, UnwrapAllRequest as w, AclTopics as wt, SetOperatorRequest as x, UnshieldCallbacks as xt, PreparedTransaction as y, ShieldCallbacks as yt, WriteFunctionName as z, decodeOnChainEvents as zt };
-//# sourceMappingURL=types-CuDiV0Wy.d.ts.map
+//# sourceMappingURL=types-D2Wc2kuN.d.ts.map

package/dist/esm/{types-BxJzdNur.d.ts → types-DSLyoJuI.d.ts}

@@ -1,5 +1,5 @@
 import { d as AtLeastOneChain } from "./index-ijgDL4IC.js";
-import { a as ZamaConfigBase } from "./types-CuDiV0Wy.js";
+import { a as ZamaConfigBase } from "./types-D2Wc2kuN.js";
 import { EIP1193Provider } from "viem";
 import { Provider, Signer } from "ethers";
 //#region src/ethers/types.d.ts
@@ -26,4 +26,4 @@ type ZamaConfigEthers<TChains extends AtLeastOneChain = AtLeastOneChain> = ZamaC
 });
 //#endregion
 export { ZamaConfigEthers as t };
-//# sourceMappingURL=types-BxJzdNur.d.ts.map
+//# sourceMappingURL=types-DSLyoJuI.d.ts.map

package/dist/esm/{types-BSRyQBTx.d.ts → types-kAGT-Vls.d.ts}

@@ -1,5 +1,5 @@
 import { d as AtLeastOneChain } from "./index-ijgDL4IC.js";
-import { a as ZamaConfigBase } from "./types-CuDiV0Wy.js";
+import { a as ZamaConfigBase } from "./types-D2Wc2kuN.js";
 import { EIP1193Provider, PublicClient, WalletClient } from "viem";
 //#region src/viem/types.d.ts
 /** Viem config — pass native viem clients directly. */
@@ -13,4 +13,4 @@ interface ZamaConfigViem<TChains extends AtLeastOneChain = AtLeastOneChain> exte
 }
 //#endregion
 export { ZamaConfigViem as t };
-//# sourceMappingURL=types-BSRyQBTx.d.ts.map
+//# sourceMappingURL=types-kAGT-Vls.d.ts.map

package/dist/esm/viem/index.d.ts

@@ -1,7 +1,7 @@
 import { d as AtLeastOneChain, f as FheChain, p as FheChainAuth } from "../index-ijgDL4IC.js";
-import { $ as TransactionErrorEvent, A as WalletAccountListener, B as ApproveUnderlyingSubmittedEvent, D as GenericSigner, F as ReadContractReturnType, G as DelegationSubmittedEvent, H as DecryptEndEvent, I as ReadFunctionName, J as EncryptStartEvent, Jt as RawLog, K as EncryptEndEvent, L as WriteContractArgs, M as ContractAbi, N as ReadContractArgs, O as WalletAccount, P as ReadContractConfig, Q as ShieldSubmittedEvent, R as WriteContractConfig, U as DecryptErrorEvent, V as BaseEvent, W as DecryptStartEvent, X as RevokeDelegationSubmittedEvent, Y as FinalizeUnwrapSubmittedEvent, Yt as TransactionReceipt, Z as SetOperatorSubmittedEvent, Zt as ClearValue, a as ZamaConfigBase, at as UnshieldPhase2SubmittedEvent, c as GenericStorage, cn as FhevmRuntimeConfig, ct as ZamaSDKEvent, dt as ZamaSDKEvents, en as EIP712TypedData, et as TransactionOperation, i as ZamaConfig, in as EncryptedValue, it as UnshieldPhase2StartedEvent, j as WalletAccountStore, k as WalletAccountChange, l as GenericProvider, lt as ZamaSDKEventListener, mt as ShieldPath, n as RelayerConfig, nt as TransferSubmittedEvent, ot as UnwrapSubmittedEvent, q as EncryptErrorEvent, rt as UnshieldPhase1SubmittedEvent, s as GenericLogger, st as WrapSubmittedEvent, tt as TransferFromSubmittedEvent, ut as ZamaSDKEventType, z as WriteFunctionName } from "../types-CuDiV0Wy.js";
-import { n as MutableWalletAccountStore, t as BaseSigner } from "../base-signer-DttMQOKx.js";
-import { t as ZamaConfigViem } from "../types-BSRyQBTx.js";
+import { $ as TransactionErrorEvent, A as WalletAccountListener, B as ApproveUnderlyingSubmittedEvent, D as GenericSigner, F as ReadContractReturnType, G as DelegationSubmittedEvent, H as DecryptEndEvent, I as ReadFunctionName, J as EncryptStartEvent, Jt as RawLog, K as EncryptEndEvent, L as WriteContractArgs, M as ContractAbi, N as ReadContractArgs, O as WalletAccount, P as ReadContractConfig, Q as ShieldSubmittedEvent, R as WriteContractConfig, U as DecryptErrorEvent, V as BaseEvent, W as DecryptStartEvent, X as RevokeDelegationSubmittedEvent, Y as FinalizeUnwrapSubmittedEvent, Yt as TransactionReceipt, Z as SetOperatorSubmittedEvent, Zt as ClearValue, a as ZamaConfigBase, at as UnshieldPhase2SubmittedEvent, c as GenericStorage, cn as FhevmRuntimeConfig, ct as ZamaSDKEvent, dt as ZamaSDKEvents, en as EIP712TypedData, et as TransactionOperation, i as ZamaConfig, in as EncryptedValue, it as UnshieldPhase2StartedEvent, j as WalletAccountStore, k as WalletAccountChange, l as GenericProvider, lt as ZamaSDKEventListener, mt as ShieldPath, n as RelayerConfig, nt as TransferSubmittedEvent, ot as UnwrapSubmittedEvent, q as EncryptErrorEvent, rt as UnshieldPhase1SubmittedEvent, s as GenericLogger, st as WrapSubmittedEvent, tt as TransferFromSubmittedEvent, ut as ZamaSDKEventType, z as WriteFunctionName } from "../types-D2Wc2kuN.js";
+import { n as MutableWalletAccountStore, t as BaseSigner } from "../base-signer-Ds1OunIh.js";
+import { t as ZamaConfigViem } from "../types-kAGT-Vls.js";
 import { Abi, Address, ContractFunctionArgs, ContractFunctionName, ContractFunctionReturnType, EIP1193Provider, Hex, Hex as Hex$1, PublicClient, WalletClient } from "viem";
 //#region src/viem/config.d.ts
 /** Create a {@link ZamaConfig} from viem clients. */

package/dist/esm/viem/index.js

@@ -1,2 +1,2 @@
-import{A as e,D as t,F as n,G as r,I as i,L as a,P as o,R as s,U as c,a as l,c as u,g as d,i as f,l as p,o as m,r as h,s as g,t as _,w as v}from"../sdk-events-B1sUunjZ.js";import{i as y,t as b}from"../base-signer-GatxEuGN.js";import{t as x}from"../eip1193-subscribe-CNxVHW6y.js";import{encodeFunctionData as S,getAddress as C,serializeTransaction as w}from"viem";var T=class{#e;constructor(e){this.#e=e.publicClient}async getChainId(){return this.#e.getChainId()}async readContract(e){return this.#e.readContract(e)}async waitForTransactionReceipt(e){return this.#e.waitForTransactionReceipt({hash:e})}async getBlockTimestamp(){return(await this.#e.getBlock()).timestamp}async prepareTransaction(e){let{from:t,calldata:n}=e,i=S({abi:n.abi,functionName:n.functionName,args:n.args}),a=this.#e.getChainId(),o=e.nonce===void 0?this.#e.getTransactionCount({address:t,blockTag:`pending`}):Promise.resolve(e.nonce),s=e.gasLimit===void 0?n.gas??this.#e.estimateGas({account:t,to:n.address,data:i,value:n.value??0n}).catch(e=>{throw new r(`ViemProvider.prepareTransaction: gas estimation reverted for ${n.functionName} on ${n.address}`,{cause:e})}):Promise.resolve(e.gasLimit),c=e.fees??this.#e.estimateFeesPerGas(),[l,u,d,f]=await Promise.all([a,o,s,c]);return w({type:`eip1559`,chainId:l,nonce:u,to:n.address,data:i,value:n.value??0n,gas:d,maxFeePerGas:f.maxFeePerGas,maxPriorityFeePerGas:f.maxPriorityFeePerGas})}};function E(e){let t=(e.primaryType?e.types[e.primaryType]:void 0)??[],n={...e.message};for(let{name:e,type:r}of t)/^uint\d*$/.test(r)&&(n[e]=BigInt(n[e]));return n}function D(e){if(!(!e.account||!e.chain))return{address:C(e.account.address),chainId:e.chain.id}}var O=class extends b{#e;#t;#n;constructor(e){super(D(e.walletClient)),this.#e=e.walletClient,this.#t=e.ethereum,this.#n=this.#i()}#r(e){if(!this.#e.account)throw new c(e);return{walletClient:this.#e,account:this.#e.account}}async signTypedData(e){let{walletClient:t,account:n}=this.#r(`signTypedData`),{EIP712Domain:r,...i}=e.types;return t.signTypedData({account:n,primaryType:e.primaryType,types:i,domain:e.domain,message:E(e)})}async writeContract(e){let{walletClient:t,account:n}=this.#r(`writeContract`);return t.writeContract({chain:t.chain,account:n,...e})}#i(){return this.#t?x({provider:this.#t,getInitialWalletAccount:()=>D(this.#e),onWalletAccountChange:({next:e})=>{this.walletAccount.setSnapshot(e)}}):()=>{}}onDispose(){this.#n()}};function k(e){return y(new O({walletClient:e.walletClient,ethereum:e.ethereum}),new T({publicClient:e.publicClient}),e)}function A(e){if(!e.account)throw TypeError(`WalletClient has no account`);return e.account}function j(e,t,n){return e.readContract(v(t,n))}function M(e,t){return e.readContract(n(t))}function N(e,t,n){return e.readContract(d(t,n))}function P(e,n,r,i,a){return e.writeContract({chain:e.chain,account:A(e),...t(n,r,i,a)})}function F(e,t,n,r,a,o){return e.writeContract({chain:e.chain,account:A(e),...i(t,n,r,a,o)})}function I(e,t,n,r,i){return e.writeContract({chain:e.chain,account:A(e),...a(t,n,r,i)})}function L(t,n,r,i,a){return t.writeContract({chain:t.chain,account:A(t),...e(n,r,i,a)})}function R(e,t,n,r){return e.writeContract({chain:e.chain,account:A(e),...o(t,n,r)})}function z(e,t,n,r){return e.writeContract({chain:e.chain,account:A(e),...s(t,n,r)})}function B(e,t){return e.readContract(m(t))}function V(e,t){return e.readContract(g(t))}function H(e,t,n,r){return e.readContract(u(t,n,r))}function U(e,t,n){return e.readContract(l(t,n))}function W(e,t,n){return e.readContract(h(t,n))}function G(e,t,n){return e.readContract(f(t,n))}function K(e,t,n){return e.readContract(p(t,n))}export{b as BaseSigner,T as ViemProvider,O as ViemSigner,_ as ZamaSDKEvents,k as createConfig,j as readConfidentialBalanceOfContract,W as readConfidentialTokenAddressContract,K as readIsConfidentialTokenValidContract,N as readSupportsInterfaceContract,G as readTokenAddressContract,U as readTokenPairContract,B as readTokenPairsContract,V as readTokenPairsLengthContract,H as readTokenPairsSliceContract,M as readUnderlyingTokenContract,P as writeConfidentialTransferContract,L as writeFinalizeUnwrapContract,R as writeSetOperatorContract,F as writeUnwrapContract,I as writeUnwrapFromBalanceContract,z as writeWrapContract};
+import{A as e,D as t,F as n,I as r,K as i,L as a,P as o,W as s,a as c,c as l,g as u,i as d,l as f,o as p,r as m,s as h,t as g,w as _,z as v}from"../sdk-events-Bxw_ZfyZ.js";import{i as y,t as b}from"../base-signer-BK-hbCF0.js";import{t as x}from"../eip1193-subscribe-CNxVHW6y.js";import{encodeFunctionData as S,getAddress as C,serializeTransaction as w}from"viem";var T=class{#e;constructor(e){this.#e=e.publicClient}async getChainId(){return this.#e.getChainId()}async readContract(e){return this.#e.readContract(e)}async waitForTransactionReceipt(e){return this.#e.waitForTransactionReceipt({hash:e})}async getBlockTimestamp(){return(await this.#e.getBlock()).timestamp}async prepareTransaction(e){let{from:t,calldata:n}=e,r=S({abi:n.abi,functionName:n.functionName,args:n.args}),a=this.#e.getChainId(),o=e.nonce===void 0?this.#e.getTransactionCount({address:t,blockTag:`pending`}):Promise.resolve(e.nonce),s=e.gasLimit===void 0?n.gas??this.#e.estimateGas({account:t,to:n.address,data:r,value:n.value??0n}).catch(e=>{throw new i(`ViemProvider.prepareTransaction: gas estimation reverted for ${n.functionName} on ${n.address}`,{cause:e})}):Promise.resolve(e.gasLimit),c=e.fees??this.#e.estimateFeesPerGas(),[l,u,d,f]=await Promise.all([a,o,s,c]);return w({type:`eip1559`,chainId:l,nonce:u,to:n.address,data:r,value:n.value??0n,gas:d,maxFeePerGas:f.maxFeePerGas,maxPriorityFeePerGas:f.maxPriorityFeePerGas})}};function E(e){let t=(e.primaryType?e.types[e.primaryType]:void 0)??[],n={...e.message};for(let{name:e,type:r}of t)/^uint\d*$/.test(r)&&(n[e]=BigInt(n[e]));return n}function D(e){if(!(!e.account||!e.chain))return{address:C(e.account.address),chainId:e.chain.id}}var O=class extends b{#e;#t;#n;constructor(e){super(D(e.walletClient)),this.#e=e.walletClient,this.#t=e.ethereum,this.#n=this.#i()}#r(e){if(!this.#e.account)throw new s(e);return{walletClient:this.#e,account:this.#e.account}}async signTypedData(e){let{walletClient:t,account:n}=this.#r(`signTypedData`),{EIP712Domain:r,...i}=e.types;return t.signTypedData({account:n,primaryType:e.primaryType,types:i,domain:e.domain,message:E(e)})}async writeContract(e){let{walletClient:t,account:n}=this.#r(`writeContract`);return t.writeContract({chain:t.chain,account:n,...e})}#i(){return this.#t?x({provider:this.#t,getInitialWalletAccount:()=>D(this.#e),onWalletAccountChange:({next:e})=>{this.walletAccount.setSnapshot(e)}}):()=>{}}onDispose(){this.#n()}};function k(e){return y(new O({walletClient:e.walletClient,ethereum:e.ethereum}),new T({publicClient:e.publicClient}),e)}function A(e){if(!e.account)throw TypeError(`WalletClient has no account`);return e.account}function j(e,t,n){return e.readContract(_(t,n))}function M(e,t){return e.readContract(n(t))}function N(e,t,n){return e.readContract(u(t,n))}function P(e,n,r,i,a){return e.writeContract({chain:e.chain,account:A(e),...t(n,r,i,a)})}function F(e,t,n,i,a,o){return e.writeContract({chain:e.chain,account:A(e),...r(t,n,i,a,o)})}function I(e,t,n,r,i){return e.writeContract({chain:e.chain,account:A(e),...a(t,n,r,i)})}function L(t,n,r,i,a){return t.writeContract({chain:t.chain,account:A(t),...e(n,r,i,a)})}function R(e,t,n,r){return e.writeContract({chain:e.chain,account:A(e),...o(t,n,r)})}function z(e,t,n,r){return e.writeContract({chain:e.chain,account:A(e),...v(t,n,r)})}function B(e,t){return e.readContract(p(t))}function V(e,t){return e.readContract(h(t))}function H(e,t,n,r){return e.readContract(l(t,n,r))}function U(e,t,n){return e.readContract(c(t,n))}function W(e,t,n){return e.readContract(m(t,n))}function G(e,t,n){return e.readContract(d(t,n))}function K(e,t,n){return e.readContract(f(t,n))}export{b as BaseSigner,T as ViemProvider,O as ViemSigner,g as ZamaSDKEvents,k as createConfig,j as readConfidentialBalanceOfContract,W as readConfidentialTokenAddressContract,K as readIsConfidentialTokenValidContract,N as readSupportsInterfaceContract,G as readTokenAddressContract,U as readTokenPairContract,B as readTokenPairsContract,V as readTokenPairsLengthContract,H as readTokenPairsSliceContract,M as readUnderlyingTokenContract,P as writeConfidentialTransferContract,L as writeFinalizeUnwrapContract,R as writeSetOperatorContract,F as writeUnwrapContract,I as writeUnwrapFromBalanceContract,z as writeWrapContract};
 //# sourceMappingURL=index.js.map

package/dist/esm/web/index.d.ts

@@ -1,4 +1,4 @@
-import { cn as FhevmRuntimeConfig, ln as RelayerOptions, n as RelayerConfig, on as FhevmClientOptions, r as WebRelayerConfig, sn as FhevmRelayerOptions } from "../types-CuDiV0Wy.js";
+import { cn as FhevmRuntimeConfig, ln as RelayerOptions, n as RelayerConfig, on as FhevmClientOptions, r as WebRelayerConfig, sn as FhevmRelayerOptions } from "../types-D2Wc2kuN.js";
 //#region src/config/web.d.ts
 /**
  * Browser relayer — drives `@fhevm/sdk` via {@link FhevmRelayer}.

package/dist/esm/web/index.js

@@ -1,2 +1,2 @@
-import{t as e}from"../fhevm-relayer-CTwFyl0v.js";function t(t){return{type:`web`,createRelayer:n=>new e({chain:n,options:t})}}export{t as web};
+import{t as e}from"../fhevm-relayer-b4VMx_9M.js";function t(t){return{type:`web`,createRelayer:n=>new e({chain:n,options:t})}}export{t as web};
 //# sourceMappingURL=index.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zama-fhe/sdk",
-  "version": "3.5.1",
+  "version": "3.5.2-beta.1",
   "description": "TypeScript SDK for Zama fhEVM confidential smart contracts",
   "keywords": [
     "blockchain",
@@ -173,7 +173,7 @@
   "devDependencies": {
     "@dfns/sdk": "^0.8.20",
     "@dfns/sdk-keysigner": "^0.8.20",
-    "@tanstack/query-core": "^5.101.2"
+    "@tanstack/query-core": "^5.102.2"
   },
   "peerDependencies": {
     "@tanstack/query-core": ">=5",

package/dist/esm/base-signer-GatxEuGN.js

@@ -1,2 +0,0 @@
-import{d as e,r as t,t as n}from"./relayer-DC1OKWzW.js";import{$ as r,B as i,C as a,J as o,Q as s,S as c,U as l,X as u,a as d,b as f,c as p,i as m,l as h,o as g,r as _,s as v,tt as y,x as b,z as x}from"./sdk-events-B1sUunjZ.js";import{a as S,c as C,l as w,n as ee,o as te,s as ne,u as re}from"./chains-ByyCdrrd.js";import{hasFhevmRuntimeConfig as ie,setFhevmRuntimeConfig as ae}from"@fhevm/sdk/viem";import{getAddress as T,isAddress as oe,isHex as se,toBytes as E,toHex as D,zeroAddress as ce}from"viem";import{z as O}from"zod/mini";var k=class{#e=null;#t=null;#n;#r;#i;constructor(e=`CredentialStore`,t=1,n=`credentials`){this.#n=e,this.#r=t,this.#i=n}#a(){return this.#e?Promise.resolve(this.#e):(this.#t||=new Promise((e,t)=>{let n=indexedDB.open(this.#n,this.#r);n.onupgradeneeded=()=>{let e=n.result;e.objectStoreNames.contains(this.#i)||e.createObjectStore(this.#i,{keyPath:`key`})},n.onsuccess=()=>{this.#e=n.result,this.#t=null,this.#e.onversionchange=()=>{this.#e?.close(),this.#e=null,this.#t=null},this.#e.onclose=()=>{this.#e=null,this.#t=null},e(this.#e)},n.onerror=()=>{this.#e=null,this.#t=null,t(n.error)}}),this.#t)}async#o(e,t){let n=await this.#a();return new Promise((r,i)=>{let a=n.transaction(this.#i,e);a.onabort=()=>i(a.error??Error(`Transaction aborted`));let o=t(a.objectStore(this.#i));e===`readonly`?o.onsuccess=()=>r(o.result):a.oncomplete=()=>r(o.result),o.onerror=()=>i(o.error)})}async get(e){return(await this.#o(`readonly`,t=>t.get(e)))?.value??null}async set(e,t){await this.#o(`readwrite`,n=>n.put({key:e,value:t}))}async delete(e){await this.#o(`readwrite`,t=>t.delete(e))}async clear(){await this.#o(`readwrite`,e=>e.clear())}};const le=new k;var A=class{#e=new Map;async get(e){return this.#e.get(e)??null}async set(e,t){this.#e.set(e,t)}async delete(e){this.#e.delete(e)}};const ue=new A;function de(){return typeof window<`u`?new k(`CredentialStore`):new A}function fe(e=de(),t=e){return{storage:e,permitStorage:t}}function pe(e,t){let r=new Map(e.map(e=>[e.id,e]));if(r.size!==e.length){let t=e.map(e=>e.id);throw new n(`Duplicate chain id(s) [${[...new Set(t.filter((e,n)=>t.indexOf(e)!==n))].join(`, `)}] in the chains array. Each chain id must appear only once. Note: hardhat and anvil are aliases (both use 31337).`)}let i=new Map(Object.entries(t)),a=new Map;for(let e of r.keys()){let t=r.get(e),o=i.get(String(e));if(!o)throw new n(`Chain ${e} has no relayer configured. Add a relayer entry: relayers: { [${e}]: web() }`);if(!t)throw new n(`Chain ${e} has a relayer configured but no entry in the chains array. Add the chain config to the chains array.`);a.set(e,{chain:t,relayerConfig:o})}let o=new Set(Object.keys(t).map(Number)),s=new Set([...o].filter(e=>!r.has(e)));if(s.size>0)throw new n(`Relayer entries for chain(s) [${[...s].join(`, `)}] have no matching entry in the chains array. Remove them or add the corresponding chain config.`);return a}var me=class{#e;#t;#n;constructor(e,t){if(e.length===0)throw new n(`At least one chain is required.`);this.#e=new Map(e.map(e=>[e.id,e])),this.#n=e[0].id;let r=new Map;for(let[n,{relayerConfig:i,chain:a}]of pe(e,t))r.set(n,i.createRelayer(a));this.#t=r}get chains(){return[...this.#e.values()]}get chain(){let e=this.#e.get(this.#n);if(e===void 0)throw new n(`Chain ${this.#n} is not configured. Add it to the chains array.`);return e}switchChain(e){this.#n=e}get relayer(){let e=this.#t.get(this.chain.id);if(e===void 0)throw new n(`No relayer configured for chain ${this.#n}. Add it to the relayers object.`);return e}};function j(e){return T(e)}const M=O.custom(e=>typeof e==`string`&&se(e,{strict:!0}),`expected 0x-prefixed hex string`),he=O.custom(e=>typeof e==`string`&&oe(e,{strict:!1}),`expected EVM address`),N=O.pipe(he,O.transform(j)),P=O.int().check(O.nonnegative()),F=O.int().check(O.positive()),ge=O.int().check(O.nonnegative()),_e=O.int().check(O.positive());O.int().check(O.positive());function I(e,t){let r=O.safeParse(e,t);if(r.success)return r.data;throw new n(O.prettifyError(r.error),{cause:r.error})}const L={version:1,info:`zama-sdk-keypair-wrapping-v1`,ivLengthBytes:12,tagLengthBytes:16};function R(e){return new Uint8Array(e)}function z(e){return R(new TextEncoder().encode(JSON.stringify([e.publicKey,e.createdAt,e.expiresAt,e.tkmsVersion??null])))}function ve(e){return typeof e==`string`?new TextEncoder().encode(e):R(e)}var ye=class{#e;#t;constructor(e){this.#e=e}async baseKey(){return this.#t??=this.#n(this.#e),this.#t}async#n(e){let t=ve(e),n=await crypto.subtle.importKey(`raw`,t,`HKDF`,!1,[`deriveKey`]);return t.fill(0),e instanceof Uint8Array&&e.fill(0),this.#e=void 0,n}};async function B(e,t){let n=await e.baseKey();return crypto.subtle.deriveKey({name:`HKDF`,hash:`SHA-256`,salt:new TextEncoder().encode(t),info:new TextEncoder().encode(L.info)},n,{name:`AES-GCM`,length:256},!1,[`encrypt`,`decrypt`])}async function be(e,t,n,r){let i=await B(t,n),a=crypto.getRandomValues(new Uint8Array(L.ivLengthBytes)),o=await crypto.subtle.encrypt({name:`AES-GCM`,iv:a,additionalData:z(r)},i,R(E(e)));return{wrappedPrivateKey:D(new Uint8Array(o)),iv:D(a)}}async function xe(e,t,n,r){let i=await B(t,n),a=await crypto.subtle.decrypt({name:`AES-GCM`,iv:R(E(e.iv)),additionalData:z(r)},i,R(E(e.wrappedPrivateKey)));return D(new Uint8Array(a))}function Se(e){return typeof e==`object`&&!!e&&`name`in e&&e.name===`OperationError`}const V=86400;function H(){return Math.floor(Date.now()/1e3)}function U(e){return[...new Set(e.map(j))].sort()}function Ce(e){let{chainId:t}=e.domain;return typeof t==`bigint`?{...e,domain:{...e.domain,chainId:t.toString()}}:e}const we=`transportKeyPairTTL must be a positive integer number of seconds`,Te=`permitTTL must be a positive integer number of days`,Ee=`transportKeyPairScope must be a non-empty string`,W=`transportKeyPairDerivationSecret must be a Uint8Array of at least 32 bytes or a string of at least 64 characters (256 bits of entropy): source it from a CSPRNG or secrets manager, not a human-memorable passphrase`,De=365*V,Oe=O.int({error:we}).check(O.positive({error:we}),O.maximum(De,`transportKeyPairTTL must not exceed the fhevm ACL maximum of ${De}s (365 days)`)),ke=O.int({error:Te}).check(O.positive({error:Te}),O.maximum(365,`permitTTL must not exceed the V1 permit maximum of 365 days`)),Ae=O.string({error:Ee}).check(O.minLength(1,Ee)),je=O.union([O.string({error:W}).check(O.minLength(64,W)),O.instanceof(Uint8Array,{error:W}).check(O.refine(e=>e.byteLength>=32,{error:W}))],{error:W}),Me=O.object({publicKey:M,privateKey:M,createdAt:P,expiresAt:F,tkmsVersion:O.optional(O.string())}),G=O.object({domain:O.record(O.string(),O.unknown()),primaryType:O.optional(O.string()),types:O.record(O.string(),O.array(O.object({name:O.string(),type:O.string()}))),message:O.record(O.string(),O.unknown())}),K=O.object({version:O.int().check(O.positive()),eip712:G,signature:M,signerAddress:N}),q=O.object({keypairPublicKey:M,contractAddresses:O.array(N).check(O.maxLength(10)),serializedPermit:K,startTimestamp:P,durationDays:_e}),Ne=O.array(q),Pe=O.array(O.string()),Fe=O.object({version:O.literal(1),eip712:G,signerAddress:N}),Ie=`iv must be a ${L.ivLengthBytes}-byte hex string`,Le=`wrappedPrivateKey must be a whole number of bytes and at least ${L.tagLengthBytes} bytes (the AES-GCM authentication tag)`;function Re(e){return(e.length-2)/2}const ze=O.object({wrappingVersion:O.literal(L.version,{error:`wrappingVersion must be a wrapping scheme this SDK can read`}),publicKey:M,wrappedPrivateKey:M.check(O.refine(e=>e.length%2==0&&Re(e)>=L.tagLengthBytes,{error:Le})),iv:M.check(O.refine(e=>Re(e)===L.ivLengthBytes,{error:Ie})),createdAt:P,expiresAt:F,tkmsVersion:O.optional(O.string())});function Be(e){let t={publicKey:e.publicKey,createdAt:e.createdAt,expiresAt:e.expiresAt};return e.tkmsVersion&&(t.tkmsVersion=e.tkmsVersion),t}const J={version:L.version,schema:ze,async encode(e,t,n){let{wrappedPrivateKey:r,iv:i}=await be(e.privateKey,t,n,Be(e)),a={wrappingVersion:L.version,publicKey:e.publicKey,wrappedPrivateKey:r,iv:i,createdAt:e.createdAt,expiresAt:e.expiresAt};return e.tkmsVersion&&(a.tkmsVersion=e.tkmsVersion),a},async decode(e,t,n){let r=await xe({wrappedPrivateKey:e.wrappedPrivateKey,iv:e.iv},t,n,Be(e)),i={publicKey:e.publicKey,privateKey:r,createdAt:e.createdAt,expiresAt:e.expiresAt};return e.tkmsVersion&&(i.tkmsVersion=e.tkmsVersion),i}},Ve=new Map([[J.version,J]]),He=J;function Ue(e){let t=e;return t.wrappingVersion!==void 0||t.wrappedPrivateKey!==void 0&&t.iv!==void 0}function We(e){if(typeof e!=`object`||!e||!Ue(e)){let t=Me.safeParse(e);return t.success?{kind:`plaintext`,keyPair:t.data}:{kind:`unrecognized`}}let t=e.wrappingVersion,n=typeof t==`number`?Ve.get(t):void 0;if(n===void 0)return{kind:`unsupported-version`,version:t};let r=n.schema.safeParse(e);if(!r.success)return{kind:`corrupt-wrapped`};let i=r.data;return{kind:`wrapped`,expiresAt:i.expiresAt,decode:(e,t)=>n.decode(i,e,t)}}function Ge(e,t,n){return He.encode(e,t,n)}function Ke(e){return`keypair:${e}`}function Y(e){return`keypair:scope:${e}`}function X(e){return`permits:${e.signerAddress}:${e.chainId}:${e.delegatorAddress}`}function Z(e){return`permits-index:${e}`}function qe(e){return`scope:${e}`}function Je(e,t){return{"wrapped-without-secret":`Transport key pair for scope "${t}" is wrapped, but this instance has no transportKeyPairDerivationSecret configured. Every instance sharing this scope must use the same transportKeyPairDerivationSecret; once they do, call permits.revokeTransportKeyPair() to rotate the entry.`,"unwrapped-under-secret":`Transport key pair for scope "${t}" is stored unwrapped, but this instance is configured with a transportKeyPairDerivationSecret. A peer instance sharing this scope is running without the secret: configure the same transportKeyPairDerivationSecret everywhere, then call permits.revokeTransportKeyPair() to migrate the scope to a wrapped entry.`,"unwrap-failed":`Transport key pair for scope "${t}" failed to unwrap. This usually means another instance created it with a different transportKeyPairDerivationSecret: every instance sharing this scope must use the same secret. It can also mean the stored entry is corrupted.`,"corrupt-wrapped":`Transport key pair for scope "${t}" is wrapped but structurally invalid: the stored iv or ciphertext is not a shape this wrapping scheme can produce. This usually means the stored entry is corrupted, or instances sharing this scope are running mismatched wrapping-scheme versions.`}[e]}const Ye={"unwrapped-under-secret":`unwrapped transport key pair entry found while a transportKeyPairDerivationSecret is configured`,"unwrap-failed":`transport key pair entry failed to unwrap (wrong transportKeyPairDerivationSecret?)`,"corrupt-wrapped":`structurally invalid wrapped transport key pair entry`};function Xe(e,t){let n=typeof e==`number`?`wrappingVersion ${e}`:`no wrappingVersion this build recognizes`;return`Transport key pair ${t===void 0?`for this signer`:`for scope "${t}"`} was written under a wrapping scheme this SDK build cannot read (${n}). The entry is preserved instead of regenerated, since an instance that understands the scheme may still be using it: ${t===void 0?`run a build that supports it, or call permits.clear() to discard the entry deliberately`:`run a build that supports it everywhere, or call permits.revokeTransportKeyPair() to rotate the scope`}.`}var Ze=class{#e;#t;#n;#r;#i;#a;#o=new Map;#s=new Map;constructor(e){this.#e=e.generator,this.#t=e.storage,this.#n=e.ttl,this.#r=e.logger,this.#i=e.scope,this.#a=e.derivationSecret}#c(e){return this.#i===void 0?`signer:${e}`:qe(this.#i)}#l(e){return this.#i===void 0?Ke(e):Y(this.#i)}async readStored(e){return this.#u(this.#l(e),this.#c(e))}async#u(e,t){let n=await this.#t.get(e);if(n==null)return null;let r=We(n);if(r.kind===`unsupported-version`)throw this.#f(e,Xe(r.version,this.#i));if(r.kind===`unrecognized`)return await this.#m(e,`malformed transport key pair entry`),null;let i=this.#a;if(i===void 0)return r.kind===`plaintext`?await this.#p(e,r.keyPair.expiresAt)?null:r.keyPair:this.#d(e,`wrapped-without-secret`);if(r.kind===`plaintext`)return this.#d(e,`unwrapped-under-secret`);if(r.kind===`corrupt-wrapped`)return this.#d(e,`corrupt-wrapped`);if(await this.#p(e,r.expiresAt))return null;try{return await r.decode(i,t)}catch(t){if(!Se(t))throw this.#r.error(`transport key pair unwrap failed unexpectedly`,{key:e,error:t}),new u(`Transport key pair unwrap failed unexpectedly.`,{cause:t});return this.#d(e,`unwrap-failed`,t)}}async#d(e,t,n){if(this.#i!==void 0)throw this.#f(e,Je(t,this.#i),n);if(t===`wrapped-without-secret`)throw this.#f(e,`Transport key pair for this signer is wrapped, but this instance has no transportKeyPairDerivationSecret configured. Configure the same transportKeyPairDerivationSecret the entry was written with. To downgrade to plaintext at rest on purpose, discard the stored entry first by calling permits.clear(), then run without the secret.`,n);let r=Ye[t];return this.#r.warn(r,{key:e}),await this.#m(e,r),null}#f(e,t,n){return this.#r.error(t,{key:e}),new u(t,{cause:n})}async#p(e,t){return H()<t?!1:(await this.#m(e,`expired transport key pair entry`),!0)}async#m(e,t){this.#r.debug(`discarding transport key pair entry`,{key:e,reason:t}),await x(`delete transport key pair entry`,()=>this.#t.delete(e),this.#r)}async getOrCreate(e,t){return this.#h(this.#l(e),this.#c(e),{strict:t?.strict})}async#h(e,t,n){let r=n?.strict??!1,i=`${e}::${r}`,a=this.#o.get(i);if(a)return a;let o=this.#s.get(e)??0,s=(async()=>{let n=await this.#u(e,t);if(n!==null)return n;let i=await this.#e(),a=H(),s=a+this.#n,c={publicKey:i.publicKey,privateKey:i.privateKey,createdAt:a,expiresAt:s};i.tkmsVersion&&(c.tkmsVersion=i.tkmsVersion);let l=c;if(this.#a!==void 0)try{l=await Ge(c,this.#a,t)}catch(t){let n=`Failed to wrap the transport private key for at-rest storage.`;throw this.#r.error(n,{key:e,error:t}),new u(n,{cause:t})}if((this.#s.get(e)??0)===o)r?await this.#t.set(e,l):await x(`persist transport key pair`,()=>this.#t.set(e,l),this.#r);else if(r)throw new y(`The transport key pair was rotated while it was being generated, so the freshly generated key pair could not be persisted. Retry.`);return c})().finally(()=>{this.#o.delete(i)});return this.#o.set(i,s),s}async clear(e){let t=Ke(e);await x(`delete transport key pair entry`,()=>this.#t.delete(t),this.#r)}async evict(e){let t=this.#l(e);await x(`evict transport key pair entry`,()=>this.#t.delete(t),this.#r)}async clearScope(){if(this.#i===void 0)return;let e=Y(this.#i);this.#s.set(e,(this.#s.get(e)??0)+1),await this.#t.delete(e)}async warmScope(){this.#i!==void 0&&await this.#h(Y(this.#i),qe(this.#i),{strict:!0})}};function Qe(e,t){let n=new Set(e.flatMap(e=>e.contractAddresses));return t.filter(e=>!n.has(e))}function $e(e){let t=[];for(let n=0;n<e.length;n+=10)t.push(e.slice(n,n+10));return t}function et(e,t,n){return e.filter(e=>e.keypairPublicKey===t&&n<e.startTimestamp+e.durationDays*86400)}function tt(e,t){let n=new Set(t);return e.filter(e=>!e.contractAddresses.some(e=>n.has(e)))}function nt(e,t){return[...new Set([...e,...t])].sort()}function rt(e,t,n){let r=new Set(n),i=e.filter(e=>new Set([...e.contractAddresses,...t]).size<=10);if(i.length===0)return null;function a(e){return e.contractAddresses.reduce((e,t)=>e+ +!!r.has(t),0)}let o=Math.max(...i.map(a));return i.filter(e=>a(e)===o).reduce((e,t)=>t.startTimestamp>e.startTimestamp?t:e)}var it=class{#e;#t;constructor(e){this.#e=e.storage,this.#t=e.logger}async list(e){let t=X(e),n=await this.#e.get(t);if(n==null)return[];let r=Ne.safeParse(n);return r.success?r.data:(await this.clearScope(e),[])}async listUsableAndPrune(e,t){let n=await this.list(e),r=et(n,t,Math.floor(Date.now()/1e3));return r.length!==n.length&&(r.length===0?await this.clearScope(e):await x(`update permit entry`,()=>this.#e.set(X(e),r),this.#t)),r}async append(e,t){if(t.length===0)return;let n=t.map(e=>q.parse(e)),r=await this.list(e);await this.#e.set(X(e),[...r,...n]),await this.#r(e)}async replace(e,t,n){let r=q.parse(n),i=(await this.list(e)).filter(e=>e.serializedPermit.signature!==t);await this.#e.set(X(e),[...i,r]),await this.#r(e)}async deletePermitsTouching(e,t){let n=await this.list(e);if(n.length===0)return;let r=tt(n,t);r.length===0?await this.clearScope(e):await this.#e.set(X(e),r)}async clearScope(e){await this.#a(X(e)),await this.#i(e)}async clearAllForSigner(e){let t=Z(e),n=await this.#n(t);await Promise.all(n.map(e=>this.#a(e))),await x(`delete permit index`,()=>this.#e.delete(t),this.#t)}async#n(e){let t=await this.#e.get(e);if(t==null)return[];let n=Pe.safeParse(t);return n.success?n.data:(await x(`delete permit index`,()=>this.#e.delete(e),this.#t),[])}async#r(e){let t=Z(e.signerAddress),n=X(e),r=await this.#n(t);r.includes(n)||await this.#e.set(t,[...r,n])}async#i(e){let t=Z(e.signerAddress),n=X(e),r=await this.#n(t),i=r.filter(e=>e!==n);i.length!==r.length&&(i.length===0?await x(`delete permit index`,()=>this.#e.delete(t),this.#t):await x(`update permit index`,()=>this.#e.set(t,i),this.#t))}async#a(e){await x(`delete permit entry`,()=>this.#e.delete(e),this.#t)}},at=class{#e;#t;#n;#r;#i;#a;#o;#s=new Map;constructor(e){this.#e=new Ze({generator:async()=>{let t=e.router.relayer,n=await t.generateTransportKeyPair();return t.serializeTransportKeyPair({transportKeyPair:n})},storage:e.storage,ttl:e.transportKeyPairTTL,logger:e.logger,scope:e.scope,derivationSecret:e.derivationSecret}),this.#t=new it({storage:e.permitStorage??e.storage,logger:e.logger}),this.#n=e.router,this.#r=e.signer,this.#i=e.permitTTL,this.#a=e.logger,this.#o=e.scope}#c(e){if(!this.#r)throw new i(e);return this.#r}async grantPermit(e,t){let n=j(this.#c(`grantPermit`).requireWalletAccount(`grantPermit`).address),r=U(e),i=await this.#e.getOrCreate(n);if(r.length===0)return{keypair:i,permissions:[]};let a=this.#l(n,t),o=await this.#t.listUsableAndPrune(a,i.publicKey),s=Qe(o,r);if(s.length>0){let e=rt(o,s,r);if(e!==null){let t=nt(e.contractAddresses,s),n=await this.#u({chunk:t,keypair:i,scope:a});await x(`replace permit`,()=>this.#t.replace(a,e.serializedPermit.signature,n),this.#a),o[o.indexOf(e)]=n}else for(let e of $e(s)){let t=await this.#u({chunk:e,keypair:i,scope:a});o.push(t),await x(`persist permit`,()=>this.#t.append(a,[t]),this.#a)}}let c=new Set(r);return{keypair:i,permissions:o.filter(e=>e.contractAddresses.some(e=>c.has(e)))}}async preparePermit(e){let t=j(e.signer),r=U(e.contracts);if(r.length===0)throw new n(`preparePermit: request.contracts must not be empty.`);if(r.length>10)throw new n(`preparePermit: request.contracts must not exceed 10 addresses per call (got ${r.length}) — grantPermit chunks automatically, preparePermit does not.`);let i=e.delegator?j(e.delegator):void 0;if(i!==void 0&&i===t)throw new n(`preparePermit: request.delegator must differ from request.signer — self-delegation is not allowed.`);let a=e.durationDays===void 0?this.#i:I(ke,e.durationDays),o=this.#n.relayer,s=await this.#e.getOrCreate(t,{strict:!0}),c=await o.parseTransportKeyPair(s),l=H();return{version:1,eip712:Ce(G.parse(await o.createUnsignedLegacyDecryptionPermitEip712({transportKeyPair:c,contractAddresses:r,startTimestamp:l,durationSeconds:a*V,...i&&{delegatorAddress:i}}))),signerAddress:t}}async registerPermit(e,i){let a=I(Fe,e),c=this.#n.relayer,l=this.#n.chain.id,{domain:u,message:d}=a.eip712,f=Number(u.chainId);if(f!==l)throw new s({preparedChainId:f,activeChainId:l});let p=Number(d.startTimestamp),m=Number(d.durationDays);if(H()>=p+m*86400)throw new r(`registerPermit: the prepared permit's validity window (starting ${p}, ${m}d) has already elapsed — call preparePermit again.`);let h=a.signerAddress,g=await this.#e.readStored(h);if(g===null||g.publicKey!==d.publicKey)throw new y(`registerPermit: the transport key pair changed since preparePermit ran — call preparePermit again to rebind the signature request to the current key pair.`);let _=await c.parseTransportKeyPair(g),v;try{v=await c.parseSignedDecryptionPermit({serializedPermit:{version:a.version,eip712:a.eip712,signature:i,signerAddress:h},transportKeyPair:_})}catch(e){throw e instanceof t?e:o(e,`registerPermit: signature verification failed`)}if(v.version!==1)throw new n(`registerPermit: expected a V1 signed permit, got version ${v.version}.`);let b=K.parse(await c.serializeSignedDecryptionPermit({signedPermit:v})),x={keypairPublicKey:g.publicKey,contractAddresses:U(v.eip712.message.contractAddresses),serializedPermit:b,startTimestamp:Number(v.eip712.message.startTimestamp),durationDays:Number(v.eip712.message.durationDays)},S={signerAddress:h,chainId:l,delegatorAddress:j(v.encryptedDataOwnerAddress)};await this.#t.replace(S,b.signature,x)}async hasPermit(e,t){if(e.length===0)return!0;let n=this.#r?.walletAccount.getSnapshot();if(!n)return!1;let r=j(n.address),i;try{i=await this.#e.readStored(r)}catch(e){if(!(e instanceof u))throw e;return!1}if(i===null)return!1;let a=this.#l(r,t);return Qe(await this.#t.listUsableAndPrune(a,i.publicKey),U(e)).length===0}async revokePermits(e){let t=j(this.#c(`revokePermits`).requireWalletAccount(`revokePermits`).address);if(e===void 0){await this.#t.clearAllForSigner(t);return}let n=U(e);n.length!==0&&await this.#t.deletePermitsTouching(this.#l(t),n)}#l(e,t){return{signerAddress:e,chainId:this.#n.chain.id,delegatorAddress:t?j(t):e}}async clearCredentials(){let e=j(this.#c(`clearCredentials`).requireWalletAccount(`clearCredentials`).address);await this.#e.clear(e),await this.#t.clearAllForSigner(e)}async revokeTransportKeyPair(e){if(this.#o===void 0)throw new n(`revokeTransportKeyPair() requires a transportKeyPairScope to be configured on this SDK instance — there is no shared key pair to revoke.`);if(e!==this.#o)throw new n(`revokeTransportKeyPair("${e}") does not match the configured scope ("${this.#o}").`);await this.#e.clearScope()}async warmTransportKeyPair(e){await this.#e.getOrCreate(j(e))}async warmTransportKeyPairScope(e){if(this.#o===void 0)throw new n(`warmTransportKeyPairScope() requires a transportKeyPairScope to be configured on this SDK instance — there is no shared key pair to warm.`);if(e!==this.#o)throw new n(`warmTransportKeyPairScope("${e}") does not match the configured scope ("${this.#o}").`);await this.#e.warmScope()}async handleWalletAccountChange(e,t){let n=e?j(e.address):void 0;n!==(t?j(t.address):void 0)&&n&&(await this.#e.clear(n),await this.#t.clearAllForSigner(n))}async#u(n){let{chunk:r,keypair:i,scope:a}=n,s=H(),c=a.delegatorAddress!==a.signerAddress,l=this.#n.relayer;try{let e={transportKeyPair:await l.parseTransportKeyPair(i),contractAddresses:r,startTimestamp:s,durationSeconds:this.#i*V,signerAddress:a.signerAddress,signer:this.#c(`signPermit`)},t=c?await l.signDecryptionPermit({...e,delegatorAddress:a.delegatorAddress}):await l.signDecryptionPermit(e),n=K.parse(await l.serializeSignedDecryptionPermit({signedPermit:t}));return{keypairPublicKey:i.publicKey,contractAddresses:r,serializedPermit:n,startTimestamp:s,durationDays:this.#i}}catch(n){throw n instanceof t?n:(n instanceof Error&&e(n.message)&&await this.#e.evict(a.signerAddress),o(n,`Credential signing failed`))}}async evictTransportKeyPair(){let e=this.#r?.walletAccount.getSnapshot();e&&await this.#e.evict(j(e.address))}async recoverPermits(e,t,n){let r=this.#c(`recoverPermits`).requireWalletAccount(`recoverPermits`),i=this.#l(j(r.address),t),a=X(i),o=this.#s.get(a);if(o)return await o,this.grantPermit(e,t);let s=await this.#d(i),c=this.#s.get(a);if(c)return await c,this.grantPermit(e,t);if(s===null)return this.grantPermit(e,t);let l=new Set(n??[]);if(l.size>0&&!s.some(e=>l.has(e.serializedPermit.signature)))return this.grantPermit(e,t);let u=s.filter(e=>!l.has(e.serializedPermit.signature)),d=s.flatMap(e=>e.contractAddresses),f=this.#f(i,d,e,u,t).finally(()=>{this.#s.delete(a)});return this.#s.set(a,f),await f,this.grantPermit(e,t)}async#d(e){try{return await this.#t.list(e)}catch(e){return this.#a.warn(`read permits for recovery failed`,{error:e}),null}}async#f(e,t,n,r,i){await x(`evict revoked permits`,()=>this.#t.clearScope(e),this.#a);try{await this.grantPermit(nt(t,U(n)),i)}catch(t){throw r.length>0&&await x(`restore surviving permits`,async()=>{let t=await this.#t.list(e),n=new Set(t.map(e=>e.serializedPermit.signature)),i=r.filter(e=>!n.has(e.serializedPermit.signature));i.length>0&&await this.#t.append(e,i)},this.#a),t}}},ot=class{#e;#t=`[zama-sdk]`;constructor(e){this.#e=e}error(e,t){this.#e?.error(`${this.#t} ${e}`,t)}warn(e,t){this.#e?.warn(`${this.#t} ${e}`,t)}info(e,t){this.#e?.info(`${this.#t} ${e}`,t)}debug(e,t){this.#e?.debug(`${this.#t} ${e}`,t)}};const st={[ne.id]:ne.registryAddress,[C.id]:C.registryAddress,[re.id]:re.registryAddress,[w.id]:w.registryAddress,[S.id]:S.registryAddress,[te.id]:te.registryAddress,[ee.id]:ee.registryAddress},ct=O.record(O.string().check(O.regex(/^\d+$/,`expected numeric chain id key`)),N),lt=ge,Q=300*1e3;var ut=class{provider;#e;#t;#n=new Map;constructor(e){this.provider=e.provider,this.#e=Object.assign({},st,I(O.optional(ct),e.registryAddresses)),this.#t=I(lt,e.registryTTL??86400)*1e3}getAddress(e){return this.#e[e]}#r(e){let t=this.#n.get(e);if(t){if(Date.now()>=t.expiresAt){this.#n.delete(e);return}return t.data}}#i(e,t,n=this.#t){return this.#n.set(e,{data:t,expiresAt:Date.now()+n}),t}refresh(){this.#n.clear()}get ttlMs(){return this.#t}async getRegistryAddress(){let e=await this.provider.getChainId(),t=this.#e[e];if(!t)throw new n(`No wrappers registry address configured for chain ${e}.\nPass a registryAddresses entry for this chain.`);return T(t)}async listPairs(e={}){let t=e.page??1,r=e.pageSize??100,i=e.metadata??!1;if(t<1)throw new n(`page must be >= 1, got ${t}`);if(r<1)throw new n(`pageSize must be >= 1, got ${r}`);let a=await this.getRegistryAddress(),o=`total:${a}`,s=this.#r(o);if(s===void 0){let e=await this.provider.readContract(v(a));s=this.#i(o,Number(e))}let c=BigInt((t-1)*r),l=c+BigInt(r)>BigInt(s)?BigInt(s):c+BigInt(r);if(c>=BigInt(s))return{items:[],total:s,page:t,pageSize:r};let u=`slice:${a}:${c}:${l}`,d=this.#r(u);if(d===void 0){let e=await this.provider.readContract(p(a,c,l));d=this.#i(u,[...e])}if(!i)return{items:d,total:s,page:t,pageSize:r};let f=`metadata:${a}:${c}:${l}`,m=this.#r(f);if(m===void 0){let e=await Promise.allSettled(d.map(e=>this.#a(e))),t=e.some(e=>e.status===`rejected`),n=e.map((e,t)=>e.status===`fulfilled`?e.value:Object.assign({},d[t],{metadataFailed:!0,underlying:{name:`Unknown`,symbol:`???`,decimals:0,totalSupply:0n},confidential:{name:`Unknown`,symbol:`???`,decimals:0}}));m=this.#i(f,n,t?Q:void 0)}return{items:m,total:s,page:t,pageSize:r}}async#a(e){let[t,n,r,i,o,s,l]=await Promise.all([this.provider.readContract(c(e.tokenAddress)),this.provider.readContract(a(e.tokenAddress)),this.provider.readContract(f(e.tokenAddress)),this.provider.readContract(b(e.tokenAddress)),this.provider.readContract(c(e.confidentialTokenAddress)),this.provider.readContract(a(e.confidentialTokenAddress)),this.provider.readContract(f(e.confidentialTokenAddress))]);return{...e,underlying:{name:t,symbol:n,decimals:r,totalSupply:i},confidential:{name:o,symbol:s,decimals:l}}}async getConfidentialToken(e){let t=await this.getRegistryAddress(),n=T(e),r=`ct:${t}:${n}`,i=this.#r(r);if(i!==void 0)return i;let[a,o]=await this.provider.readContract(_(t,n));return o===ce?this.#i(r,null,Q):this.#i(r,{confidentialTokenAddress:o,isValid:a})}async getUnderlyingToken(e){let t=await this.getRegistryAddress(),n=T(e),r=`ut:${t}:${n}`,i=this.#r(r);if(i!==void 0)return i;let[a,o]=await this.provider.readContract(m(t,n));return o===ce?this.#i(r,null,Q):this.#i(r,{tokenAddress:o,isValid:a})}async getTokenPairs(){let e=await this.getRegistryAddress();return this.provider.readContract(g(e))}async getTokenPairsLength(){let e=await this.getRegistryAddress();return this.provider.readContract(v(e))}async getTokenPairsSlice(e,t){let n=await this.getRegistryAddress();return this.provider.readContract(p(n,e,t))}async getTokenPair(e){let t=await this.getRegistryAddress();return this.provider.readContract(d(t,e))}async getConfidentialTokenAddress(e){let t=await this.getRegistryAddress();return this.provider.readContract(_(t,T(e)))}async getTokenAddress(e){let t=await this.getRegistryAddress();return this.provider.readContract(m(t,T(e)))}async isConfidentialTokenValid(e){let t=await this.getRegistryAddress();return this.provider.readContract(h(t,T(e)))}};function dt(e,t,n){let r=new ot(n.logger),i=n.logger;if(ie()){let e=`runtime configuration is already set and cannot be changed.`;n.runtime===void 0?r.debug(e):r.warn(e)}else ae({wasmAssetLoadMode:`auto`,moduleVersions:`auto`,logger:{error:(e,t)=>i?.error(e,{cause:t}),warn:e=>i?.warn(e),debug:e=>i?.debug(e)},...n.runtime});let{storage:a,permitStorage:o}=fe(n.storage,n.permitStorage),s=new me(n.chains,n.relayers);return{chains:n.chains,router:s,provider:t,signer:e,storage:a,permitStorage:o,transportKeyPairTTL:I(Oe,n.transportKeyPairTTL??2592e3),permitTTL:I(ke,n.permitTTL??30),transportKeyPairScope:n.transportKeyPairScope===void 0?void 0:I(Ae,n.transportKeyPairScope),registryTTL:I(lt,n.registryTTL??86400),logger:r,onEvent:n.onEvent}}function ft(e,t){return e?.address===t?.address&&e?.chainId===t?.chainId}var $=class{#e=new Set;#t;#n;constructor(e){this.#t=e,this.#n=e!==void 0}getSnapshot(){return this.#t}isReady(){return this.#n}setSnapshot(e){this.#n=!0;let t=this.#t;ft(t,e)||(this.#t=e,this.#r({previous:t,next:e}))}subscribe(e){this.#e.add(e);let t=this.#t;return t&&e({previous:void 0,next:t}),()=>{this.#e.delete(e)}}#r(e){for(let t of this.#e)t(e)}};function pt(e){return new $(e)}var mt=class{walletAccount;#e=!1;constructor(e){this.walletAccount=new $(e)}requireWalletAccount(e){let t=this.walletAccount.getSnapshot();if(!t)throw new l(e);return t}dispose(){this.#e||(this.#e=!0,this.onDispose())}[Symbol.dispose](){this.dispose()}onDispose(){}};export{k as _,st as a,je as c,j as d,N as f,ue as g,A as h,dt as i,ye as l,P as m,$ as n,ut as o,M as p,pt as r,at as s,mt as t,I as u,le as v};
-//# sourceMappingURL=base-signer-GatxEuGN.js.map