@zama-fhe/sdk 3.7.0 → 3.8.0-beta.2

package/dist/cjs/internal/index.cjs

@@ -0,0 +1,2 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../fhevm-relayer.cjs"),t=require("../relayer.cjs"),n=require("../fatal-batch.cjs").t;function r(e,r,i){let a=n[e],o=a?new a(r):new t.r(e,r,e===t.i.RelayerRequestFailed?{retryable:i.retryable}:void 0);return o.retryable&&t.y(i.retryAfter)?Object.assign(o,{retryAfter:i.retryAfter}):o}function i(e,t){return e.onWalletAccountChange(t)}exports.reviveZamaError=r,exports.subscribeWalletAccountChanges=i,exports.toFhevmAuth=e.n;
+//# sourceMappingURL=index.cjs.map

package/dist/cjs/internal/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["fatalBatchErrors","ZamaError","ZamaErrorCode","isValidRetryAfterSeconds"],"sources":["../../../src/errors/revive.ts","../../../src/internal/wallet-events.ts"],"sourcesContent":["import { isValidRetryAfterSeconds } from \"../utils/error\";\nimport { ZamaError, ZamaErrorCode } from \"./base\";\nimport { fatalBatchErrors } from \"./fatal-batch\";\n\nconst callbackErrors: Partial<Record<ZamaErrorCode, new (message: string) => ZamaError>> =\n  fatalBatchErrors;\n\n/** Restores callback failures whose class identity controls batch termination. */\nexport function reviveZamaError(\n  code: ZamaErrorCode,\n  message: string,\n  options: { retryable: boolean; retryAfter?: number },\n): ZamaError {\n  const Constructor = callbackErrors[code];\n  const error = Constructor\n    ? new Constructor(message)\n    : new ZamaError(\n        code,\n        message,\n        code === ZamaErrorCode.RelayerRequestFailed ? { retryable: options.retryable } : undefined,\n      );\n  if (error.retryable && isValidRetryAfterSeconds(options.retryAfter)) {\n    return Object.assign(error, { retryAfter: options.retryAfter });\n  }\n  return error;\n}\n","import type { WalletAccountListener } from \"../types/signer\";\nimport type { ZamaSDK } from \"../zama-sdk\";\n\n/** Subscribe after the SDK's wallet cleanup, through the internal integration entry point. */\nexport function subscribeWalletAccountChanges(\n  sdk: ZamaSDK,\n  listener: WalletAccountListener,\n): () => void {\n  return sdk.onWalletAccountChange(listener);\n}\n"],"mappings":"uIAIM,8BACJA,CAAAA,CAAAA,EAGF,SAAgB,EACd,EACA,EACA,EACW,CACX,IAAM,EAAc,EAAe,GAC7B,EAAQ,EACV,IAAI,EAAY,CAAO,EACvB,IAAIC,EAAAA,EACF,EACA,EACA,IAASC,EAAAA,EAAc,qBAAuB,CAAE,UAAW,EAAQ,SAAU,EAAI,IAAA,EACnF,EAIJ,OAHI,EAAM,WAAaC,EAAAA,EAAyB,EAAQ,UAAU,EACzD,OAAO,OAAO,EAAO,CAAE,WAAY,EAAQ,UAAW,CAAC,EAEzD,CACT,CCrBA,SAAgB,EACd,EACA,EACY,CACZ,OAAO,EAAI,sBAAsB,CAAQ,CAC3C"}

package/dist/cjs/node/index.cjs

@@ -1,2 +1,2 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../fhevm-relayer.cjs"),t=require("../telemetry.cjs"),n=require("../cleartext.cjs"),r=require("../chains.cjs");let i=require("node:async_hooks");function a(n){return{type:`node`,createRelayer:(r,i,a)=>new e.t({chain:r,options:n,logger:i,telemetry:a&&!t.t(globalThis.process?.env??{})?{state:a,runtime:`node`}:void 0})}}var o=class{#e=new i.AsyncLocalStorage;run(e){return this.#e.run(new Map,e)}async get(e){return this.#e.getStore()?.get(e)??null}async set(e,t){this.#e.getStore()?.set(e,t)}async delete(e){this.#e.getStore()?.delete(e)}};const s=new o;exports.AsyncLocalMapStorage=o,exports.anvil=r.t,exports.asyncLocalStorage=s,exports.bscTestnet=r.n,exports.chains=r.r,exports.cleartext=n.t,exports.hardhat=r.i,exports.hoodi=r.a,exports.ingenTestnet=r.o,exports.mainnet=r.s,exports.node=a,exports.polygon=r.c,exports.polygonAmoy=r.l,exports.sepolia=r.u,exports.zenithTrexTestnet=r.d;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../fhevm-relayer.cjs"),t=require("../telemetry.cjs"),n=require("../cleartext.cjs"),r=require("../chains.cjs");let i=require("node:async_hooks");function a(n){return{type:`node`,createRelayer:(r,i,a)=>new e.t({chain:r,options:n,logger:i,telemetry:a&&!t.t(globalThis.process?.env??{})?{state:a,runtime:`node`}:void 0})}}var o=class{#e=new i.AsyncLocalStorage;run(e){return this.#e.run(new Map,e)}async get(e){return this.#e.getStore()?.get(e)??null}async set(e,t){this.#e.getStore()?.set(e,t)}async delete(e){this.#e.getStore()?.delete(e)}};const s=new o;exports.AsyncLocalMapStorage=o,exports.anvil=r.t,exports.asyncLocalStorage=s,exports.bscTestnet=r.n,exports.chains=r.r,exports.cleartext=n.t,exports.hardhat=r.i,exports.hoodi=r.a,exports.mainnet=r.o,exports.node=a,exports.polygon=r.s,exports.polygonAmoy=r.c,exports.sepolia=r.l,exports.zenithTrexTestnet=r.u;
 //# sourceMappingURL=index.cjs.map

package/dist/cjs/signing.cjs

@@ -0,0 +1,2 @@
+const e=require("./relayer.cjs");var t=class extends e.r{constructor(t,n){super(e.i.TransportKeyPairExpired,t,n),this.name=`TransportKeyPairExpiredError`}},n=class extends e.r{constructor(t,n){super(e.i.InvalidTransportKeyPair,t,n),this.name=`InvalidTransportKeyPairError`}},r=class extends e.r{constructor(t,n){super(e.i.RevokedKmsContext,t,n),this.name=`RevokedKmsContextError`}},i=class extends e.r{constructor(t,n){super(e.i.NoCiphertext,t,n),this.name=`NoCiphertextError`}},a=class extends e.r{constructor(t,n){super(e.i.KeyWrappingFailed,t,n),this.name=`KeyWrappingError`}},o=class extends e.r{constructor(t,n){super(e.i.TransportKeyPairChanged,t,n),this.name=`TransportKeyPairChangedError`}},s=class extends e.r{preparedChainId;activeChainId;constructor({preparedChainId:t,activeChainId:n},r){super(e.i.PreparedPermitChainMismatch,`registerPermit: prepared.chainId (${t}) does not match the active chain (${n}). Register the permit while the SDK is configured for the chain it was prepared for.`,r),this.name=`PreparedPermitChainMismatchError`,this.preparedChainId=t,this.activeChainId=n}},c=class extends e.r{constructor(t,n){super(e.i.PreparedPermitExpired,t,n),this.name=`PreparedPermitExpiredError`}},l=class extends e.r{operation;rpcCode;walletErrorName;constructor(t,n){let{operation:r,rpcCode:i,walletErrorName:a,...o}=n??{};super(e.i.SigningRejected,t,o),this.name=`SigningRejectedError`,this.operation=r,this.rpcCode=i,this.walletErrorName=a}},u=class extends e.r{operation;rpcCode;walletErrorName;constructor(t,n){let{operation:r,rpcCode:i,walletErrorName:a,...o}=n??{};super(e.i.SigningFailed,t,o),this.name=`SigningFailedError`,this.operation=r,this.rpcCode=i,this.walletErrorName=a}};function d(t,r){if(t instanceof e.r)return t;let{operation:i}=r,a=typeof t==`object`&&!!t&&`code`in t&&t.code===4001,o=t instanceof Error?t.message:String(t),s=o.toLowerCase(),c=s.includes(`user rejected`)||s.includes(`user denied`),d=`${i}: ${o}`;return a||c?new l(d,{cause:t,operation:i,rpcCode:e.l(t),walletErrorName:e.u(t)}):e.p(o)?new n(d,{cause:t}):new u(d,{cause:t,operation:i,rpcCode:e.l(t),walletErrorName:e.u(t)})}Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return a}}),Object.defineProperty(exports,"c",{enumerable:!0,get:function(){return c}}),Object.defineProperty(exports,"d",{enumerable:!0,get:function(){return t}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return n}}),Object.defineProperty(exports,"l",{enumerable:!0,get:function(){return r}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return l}}),Object.defineProperty(exports,"o",{enumerable:!0,get:function(){return i}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return d}}),Object.defineProperty(exports,"s",{enumerable:!0,get:function(){return s}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return u}}),Object.defineProperty(exports,"u",{enumerable:!0,get:function(){return o}});
+//# sourceMappingURL=signing.cjs.map

package/dist/cjs/signing.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.cjs","names":["ZamaError","ZamaErrorCode","ZamaError","ZamaErrorCode","extractRpcErrorCode","extractWalletErrorName","isInvalidTransportKeyPairMessage"],"sources":["../../src/errors/credential.ts","../../src/errors/signing.ts"],"sourcesContent":["import { ZamaError, ZamaErrorCode } from \"./base\";\n\n/** Transport key pair has expired and needs regeneration. */\nexport class TransportKeyPairExpiredError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.TransportKeyPairExpired, message, options);\n    this.name = \"TransportKeyPairExpiredError\";\n  }\n}\n\n/** Relayer rejected the transport key pair (stale, expired, or malformed). */\nexport class InvalidTransportKeyPairError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.InvalidTransportKeyPair, message, options);\n    this.name = \"InvalidTransportKeyPairError\";\n  }\n}\n\n/**\n * The permit's KMS context has been revoked on-chain, so the permit (and every\n * other permit signed under that context) is permanently unusable. The SDK\n * already tried to self-heal before surfacing this. Check `cause` to tell why\n * it failed: a `SigningFailedError` means the configured signer could not\n * produce a new permit, waiting will not help, establish a new permit with a\n * working signer. Any other cause means the retry hit the same revoked\n * context, typically because the upstream validity check caches a stale\n * \"valid\" verdict for up to 15 minutes; wait out that window and retry.\n */\nexport class RevokedKmsContextError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.RevokedKmsContext, message, options);\n    this.name = \"RevokedKmsContextError\";\n  }\n}\n\n/** No FHE ciphertext exists for this account (never shielded). */\nexport class NoCiphertextError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.NoCiphertext, message, options);\n    this.name = \"NoCiphertextError\";\n  }\n}\n\n/**\n * Wrapping or unwrapping the transport private key with `transportKeyPairDerivationSecret` failed:\n * a scoped entry that fails to unwrap may belong to a peer using a different secret, so it fails\n * loudly instead of silently regenerating and clobbering that peer's entry, or the underlying\n * WebCrypto operation itself failed (e.g. `crypto.subtle` unavailable in this environment).\n */\nexport class KeyWrappingError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.KeyWrappingFailed, message, options);\n    this.name = \"KeyWrappingError\";\n  }\n}\n\n/**\n * The transport key pair changed between `preparePermit` and `registerPermit`\n * (expired, evicted, or rotated in between). The prepared EIP-712 payload was\n * signed against the old key pair's public key — registering it under a\n * different one would persist a permit bound to the wrong key. Call\n * `preparePermit` again to rebind the signature request to the current key pair.\n */\nexport class TransportKeyPairChangedError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.TransportKeyPairChanged, message, options);\n    this.name = \"TransportKeyPairChangedError\";\n  }\n}\n\n/**\n * A prepared permit's `chainId` doesn't match the chain `registerPermit` is\n * running against. The EIP-712 payload's domain is bound to the chain it was\n * prepared for; registering it under a different chain would persist a permit\n * whose signed payload disagrees with its storage scope.\n */\nexport class PreparedPermitChainMismatchError extends ZamaError {\n  /** Chain ID the permit was prepared for. */\n  readonly preparedChainId: number;\n  /** Chain ID `registerPermit` is currently running against. */\n  readonly activeChainId: number;\n\n  constructor(\n    { preparedChainId, activeChainId }: { preparedChainId: number; activeChainId: number },\n    options?: ErrorOptions,\n  ) {\n    super(\n      ZamaErrorCode.PreparedPermitChainMismatch,\n      `registerPermit: prepared.chainId (${preparedChainId}) does not match the active chain ` +\n        `(${activeChainId}). Register the permit while the SDK is configured for the chain it was prepared for.`,\n      options,\n    );\n    this.name = \"PreparedPermitChainMismatchError\";\n    this.preparedChainId = preparedChainId;\n    this.activeChainId = activeChainId;\n  }\n}\n\n/** A prepared permit's validity window elapsed before its signature was registered. */\nexport class PreparedPermitExpiredError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.PreparedPermitExpired, message, options);\n    this.name = \"PreparedPermitExpiredError\";\n  }\n}\n","import {\n  extractRpcErrorCode,\n  extractWalletErrorName,\n  isInvalidTransportKeyPairMessage,\n} from \"../utils/error\";\nimport { ZamaError, ZamaErrorCode } from \"./base\";\nimport { InvalidTransportKeyPairError } from \"./credential\";\n\n/**\n * Diagnostic metadata attached to a signing-failure error, on top of the\n * inherited `cause`. All optional and best-effort: `operation` comes from the\n * caller, `rpcCode`/`walletErrorName` are extracted from the wallet's raw\n * error by {@link wrapSigningError}.\n */\nexport interface SigningErrorMetadata {\n  /** Name of the SDK operation that was signing when the wallet/provider failed (e.g. \"grantPermit\"). */\n  operation?: string;\n  /** JSON-RPC / EIP-1193 numeric error code found in the failure's cause chain, if any. */\n  rpcCode?: number;\n  /** `name` of the error class the wallet/provider library threw (e.g. viem's `InvalidParamsRpcError`). */\n  walletErrorName?: string;\n}\n\n/** User rejected the wallet signature prompt. */\nexport class SigningRejectedError extends ZamaError {\n  /** Name of the SDK operation that was signing when the user rejected. */\n  readonly operation: string | undefined;\n  /** JSON-RPC / EIP-1193 numeric error code found in the failure's cause chain, if any. */\n  readonly rpcCode: number | undefined;\n  /** `name` of the error class the wallet/provider library threw. */\n  readonly walletErrorName: string | undefined;\n\n  constructor(message: string, options?: ErrorOptions & SigningErrorMetadata) {\n    const { operation, rpcCode, walletErrorName, ...errorOptions } = options ?? {};\n    super(ZamaErrorCode.SigningRejected, message, errorOptions);\n    this.name = \"SigningRejectedError\";\n    this.operation = operation;\n    this.rpcCode = rpcCode;\n    this.walletErrorName = walletErrorName;\n  }\n}\n\n/** Wallet signature failed for a reason other than rejection. */\nexport class SigningFailedError extends ZamaError {\n  /** Name of the SDK operation that was signing when the wallet/provider failed. */\n  readonly operation: string | undefined;\n  /** JSON-RPC / EIP-1193 numeric error code found in the failure's cause chain, if any. */\n  readonly rpcCode: number | undefined;\n  /** `name` of the error class the wallet/provider library threw. */\n  readonly walletErrorName: string | undefined;\n\n  constructor(message: string, options?: ErrorOptions & SigningErrorMetadata) {\n    const { operation, rpcCode, walletErrorName, ...errorOptions } = options ?? {};\n    super(ZamaErrorCode.SigningFailed, message, errorOptions);\n    this.name = \"SigningFailedError\";\n    this.operation = operation;\n    this.rpcCode = rpcCode;\n    this.walletErrorName = walletErrorName;\n  }\n}\n\n/**\n * Classify a caught signing error into {@link SigningRejectedError},\n * {@link SigningFailedError}, or {@link InvalidTransportKeyPairError} and\n * return it rather than throw (mirroring {@link wrapDecryptError}/\n * {@link wrapEncryptError}), so a caller can emit an observability event\n * carrying the classified error before throwing it themselves. Enriches the\n * result with `rpcCode`/`walletErrorName` extracted from `error`'s cause\n * chain, and passes an already-typed `ZamaError` through unchanged.\n */\nexport function wrapSigningError(error: unknown, context: { operation: string }): ZamaError {\n  if (error instanceof ZamaError) {\n    return error;\n  }\n  const { operation } = context;\n  const hasCode4001 =\n    typeof error === \"object\" && error !== null && \"code\" in error && error.code === 4001;\n  const originalMsg = error instanceof Error ? error.message : String(error);\n  const lowerMsg = originalMsg.toLowerCase();\n  const hasRejectionMessage =\n    lowerMsg.includes(\"user rejected\") || lowerMsg.includes(\"user denied\");\n  const fullMessage = `${operation}: ${originalMsg}`;\n  if (hasCode4001 || hasRejectionMessage) {\n    return new SigningRejectedError(fullMessage, {\n      cause: error,\n      operation,\n      rpcCode: extractRpcErrorCode(error),\n      walletErrorName: extractWalletErrorName(error),\n    });\n  }\n  // A stale transport key pair the relayer can't re-derive (post-rotation) is\n  // not a signing failure per se — surface it as the typed, self-heal signal so\n  // the caller can evict the vault entry and regenerate.\n  if (isInvalidTransportKeyPairMessage(originalMsg)) {\n    return new InvalidTransportKeyPairError(fullMessage, { cause: error });\n  }\n  return new SigningFailedError(fullMessage, {\n    cause: error,\n    operation,\n    rpcCode: extractRpcErrorCode(error),\n    walletErrorName: extractWalletErrorName(error),\n  });\n}\n"],"mappings":"iCAGA,IAAa,EAAb,cAAkDA,EAAAA,CAAU,CAC1D,YAAY,EAAiB,EAAwB,CACnD,MAAMC,EAAAA,EAAc,wBAAyB,EAAS,CAAO,EAC7D,KAAK,KAAO,8BACd,CACF,EAGa,EAAb,cAAkDD,EAAAA,CAAU,CAC1D,YAAY,EAAiB,EAAwB,CACnD,MAAMC,EAAAA,EAAc,wBAAyB,EAAS,CAAO,EAC7D,KAAK,KAAO,8BACd,CACF,EAYa,EAAb,cAA4CD,EAAAA,CAAU,CACpD,YAAY,EAAiB,EAAwB,CACnD,MAAMC,EAAAA,EAAc,kBAAmB,EAAS,CAAO,EACvD,KAAK,KAAO,wBACd,CACF,EAGa,EAAb,cAAuCD,EAAAA,CAAU,CAC/C,YAAY,EAAiB,EAAwB,CACnD,MAAMC,EAAAA,EAAc,aAAc,EAAS,CAAO,EAClD,KAAK,KAAO,mBACd,CACF,EAQa,EAAb,cAAsCD,EAAAA,CAAU,CAC9C,YAAY,EAAiB,EAAwB,CACnD,MAAMC,EAAAA,EAAc,kBAAmB,EAAS,CAAO,EACvD,KAAK,KAAO,kBACd,CACF,EASa,EAAb,cAAkDD,EAAAA,CAAU,CAC1D,YAAY,EAAiB,EAAwB,CACnD,MAAMC,EAAAA,EAAc,wBAAyB,EAAS,CAAO,EAC7D,KAAK,KAAO,8BACd,CACF,EAQa,EAAb,cAAsDD,EAAAA,CAAU,CAE9D,gBAEA,cAEA,YACE,CAAE,kBAAiB,iBACnB,EACA,CACA,MACEC,EAAAA,EAAc,4BACd,qCAAqC,EAAgB,qCAC/C,EAAc,uFACpB,CACF,EACA,KAAK,KAAO,mCACZ,KAAK,gBAAkB,EACvB,KAAK,cAAgB,CACvB,CACF,EAGa,EAAb,cAAgDD,EAAAA,CAAU,CACxD,YAAY,EAAiB,EAAwB,CACnD,MAAMC,EAAAA,EAAc,sBAAuB,EAAS,CAAO,EAC3D,KAAK,KAAO,4BACd,CACF,EChFa,EAAb,cAA0CC,EAAAA,CAAU,CAElD,UAEA,QAEA,gBAEA,YAAY,EAAiB,EAA+C,CAC1E,GAAM,CAAE,YAAW,UAAS,kBAAiB,GAAG,GAAiB,GAAW,CAAC,EAC7E,MAAMC,EAAAA,EAAc,gBAAiB,EAAS,CAAY,EAC1D,KAAK,KAAO,uBACZ,KAAK,UAAY,EACjB,KAAK,QAAU,EACf,KAAK,gBAAkB,CACzB,CACF,EAGa,EAAb,cAAwCD,EAAAA,CAAU,CAEhD,UAEA,QAEA,gBAEA,YAAY,EAAiB,EAA+C,CAC1E,GAAM,CAAE,YAAW,UAAS,kBAAiB,GAAG,GAAiB,GAAW,CAAC,EAC7E,MAAMC,EAAAA,EAAc,cAAe,EAAS,CAAY,EACxD,KAAK,KAAO,qBACZ,KAAK,UAAY,EACjB,KAAK,QAAU,EACf,KAAK,gBAAkB,CACzB,CACF,EAWA,SAAgB,EAAiB,EAAgB,EAA2C,CAC1F,GAAI,aAAiBD,EAAAA,EACnB,OAAO,EAET,GAAM,CAAE,aAAc,EAChB,EACJ,OAAO,GAAU,YAAY,GAAkB,SAAU,GAAS,EAAM,OAAS,KAC7E,EAAc,aAAiB,MAAQ,EAAM,QAAU,OAAO,CAAK,EACnE,EAAW,EAAY,YAAY,EACnC,EACJ,EAAS,SAAS,eAAe,GAAK,EAAS,SAAS,aAAa,EACjE,EAAc,GAAG,EAAU,IAAI,IAerC,OAdI,GAAe,EACV,IAAI,EAAqB,EAAa,CAC3C,MAAO,EACP,YACA,QAASE,EAAAA,EAAoB,CAAK,EAClC,gBAAiBC,EAAAA,EAAuB,CAAK,CAC/C,CAAC,EAKCC,EAAAA,EAAiC,CAAW,EACvC,IAAI,EAA6B,EAAa,CAAE,MAAO,CAAM,CAAC,EAEhE,IAAI,EAAmB,EAAa,CACzC,MAAO,EACP,YACA,QAASF,EAAAA,EAAoB,CAAK,EAClC,gBAAiBC,EAAAA,EAAuB,CAAK,CAC/C,CAAC,CACH"}

package/dist/cjs/telemetry.cjs

@@ -1,2 +1,2 @@
-function e(e,t){return{"x-zama-sdk-version":`3.7.0`,"x-zama-sdk-layer":e.state.layer,"x-zama-sdk-runtime":e.runtime,...t!==void 0&&{"x-zama-sdk-operation":t}}}function t(e,t){return Object.assign({},e,{operation:e?.operation??t})}function n(e){let t=e.ZAMA_SDK_TELEMETRY?.trim().toLowerCase();return t===`0`||t===`false`}Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return e}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return t}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return n}});
+function e(e,t){return{"x-zama-sdk-version":`3.8.0-beta.2`,"x-zama-sdk-layer":e.state.layer,"x-zama-sdk-runtime":e.runtime,...t!==void 0&&{"x-zama-sdk-operation":t}}}function t(e,t){return Object.assign({},e,{operation:e?.operation??t})}function n(e){let t=e.ZAMA_SDK_TELEMETRY?.trim().toLowerCase();return t===`0`||t===`false`}Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return e}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return t}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return n}});
 //# sourceMappingURL=telemetry.cjs.map

package/dist/cjs/telemetry.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.cjs","names":["packageJson.version"],"sources":["../../package.json","../../src/version.ts","../../src/telemetry.ts"],"sourcesContent":["","import packageJson from \"../package.json\" with { type: \"json\" };\n\nexport const SDK_VERSION: string = packageJson.version;\n","import { SDK_VERSION } from \"./version\";\n\n// Usage telemetry: `x-zama-sdk-*` headers on the relayer calls the SDK already\n// makes. No header may carry a wallet address, encrypted value, amount or identifier.\n\nexport type TelemetryLayer = \"core\" | \"react\";\n\nexport type TelemetryRuntime = \"web\" | \"node\";\n\n/** Values are frozen once shipped, so that dashboards keyed on them survive method renames. */\nexport type TelemetryOperation =\n  | \"balance-of\"\n  | \"decrypt-balance-as\"\n  | \"batch-balances-of\"\n  | \"batch-decrypt-balances-as\"\n  | \"confidential-transfer\"\n  | \"confidential-transfer-from\"\n  | \"confidential-transfer-and-call\"\n  | \"confidential-transfer-from-and-call\"\n  | \"unshield\"\n  | \"unshield-all\"\n  | \"resume-unshield\"\n  | \"unwrap\"\n  | \"finalize-unwrap\"\n  | \"vault-deposit\"\n  | \"vault-redeem\"\n  | \"vault-join\"\n  | \"vault-deposit-of\"\n  | \"encrypt\"\n  | \"decrypt-values\"\n  | \"delegated-decrypt-values\"\n  | \"delegated-batch-decrypt-values\"\n  | \"decrypt-public-values\"\n  | \"offline-confidential-transfer\"\n  | \"offline-confidential-transfer-from\"\n  | \"offline-unwrap\"\n  | \"offline-finalize-unwrap\";\n\n/**\n * Shared by every relayer of a config. `layer` flips to `react` once\n * `ZamaProvider` marks the config, after the relayers exist.\n *\n * @internal\n */\nexport interface TelemetryState {\n  layer: TelemetryLayer;\n}\n\nexport interface RelayerTelemetry {\n  readonly state: TelemetryState;\n  readonly runtime: TelemetryRuntime;\n}\n\nexport function telemetryHeaders(\n  telemetry: RelayerTelemetry,\n  operation: TelemetryOperation | undefined,\n): Record<string, string> {\n  return {\n    \"x-zama-sdk-version\": SDK_VERSION,\n    \"x-zama-sdk-layer\": telemetry.state.layer,\n    \"x-zama-sdk-runtime\": telemetry.runtime,\n    ...(operation !== undefined && { \"x-zama-sdk-operation\": operation }),\n  };\n}\n\n/** `options` labelled with `operation`, unless the caller already labelled it. */\nexport function withOperation<T extends { readonly operation?: TelemetryOperation }>(\n  options: T | undefined,\n  operation: TelemetryOperation,\n): Partial<T> & { readonly operation: TelemetryOperation } {\n  return Object.assign({}, options, { operation: options?.operation ?? operation });\n}\n\nexport function isTelemetryDisabledByEnv(env: Record<string, string | undefined>): boolean {\n  const value = env.ZAMA_SDK_TELEMETRY?.trim().toLowerCase();\n  return value === \"0\" || value === \"false\";\n}\n"],"mappings":"AEqDA,SAAgB,EACd,EACA,EACwB,CACxB,MAAO,CACL,qBAAsB,QACtB,mBAAoB,EAAU,MAAM,MACpC,qBAAsB,EAAU,QAChC,GAAI,IAAc,IAAA,IAAa,CAAE,uBAAwB,CAAU,CACrE,CACF,CAGA,SAAgB,EACd,EACA,EACyD,CACzD,OAAO,OAAO,OAAO,CAAC,EAAG,EAAS,CAAE,UAAW,GAAS,WAAa,CAAU,CAAC,CAClF,CAEA,SAAgB,EAAyB,EAAkD,CACzF,IAAM,EAAQ,EAAI,oBAAoB,KAAK,CAAC,CAAC,YAAY,EACzD,OAAO,IAAU,KAAO,IAAU,OACpC"}
+{"version":3,"file":"telemetry.cjs","names":["packageJson.version"],"sources":["../../package.json","../../src/version.ts","../../src/telemetry.ts"],"sourcesContent":["","import packageJson from \"../package.json\" with { type: \"json\" };\n\nexport const SDK_VERSION: string = packageJson.version;\n","import { SDK_VERSION } from \"./version\";\n\n// Usage telemetry: `x-zama-sdk-*` headers on the relayer calls the SDK already\n// makes. No header may carry a wallet address, encrypted value, amount or identifier.\n\nexport type TelemetryLayer = \"core\" | \"react\";\n\nexport type TelemetryRuntime = \"web\" | \"node\";\n\n/** Values are frozen once shipped, so that dashboards keyed on them survive method renames. */\nexport type TelemetryOperation =\n  | \"balance-of\"\n  | \"decrypt-balance-as\"\n  | \"batch-balances-of\"\n  | \"batch-decrypt-balances-as\"\n  | \"confidential-transfer\"\n  | \"confidential-transfer-from\"\n  | \"confidential-transfer-and-call\"\n  | \"confidential-transfer-from-and-call\"\n  | \"unshield\"\n  | \"unshield-all\"\n  | \"resume-unshield\"\n  | \"unwrap\"\n  | \"finalize-unwrap\"\n  | \"vault-deposit\"\n  | \"vault-redeem\"\n  | \"vault-join\"\n  | \"vault-deposit-of\"\n  | \"encrypt\"\n  | \"decrypt-values\"\n  | \"delegated-decrypt-values\"\n  | \"delegated-batch-decrypt-values\"\n  | \"decrypt-public-values\"\n  | \"offline-confidential-transfer\"\n  | \"offline-confidential-transfer-from\"\n  | \"offline-unwrap\"\n  | \"offline-finalize-unwrap\";\n\n/**\n * Shared by every relayer of a config. `layer` flips to `react` once\n * `ZamaProvider` marks the config, after the relayers exist.\n *\n * @internal\n */\nexport interface TelemetryState {\n  layer: TelemetryLayer;\n}\n\nexport interface RelayerTelemetry {\n  readonly state: TelemetryState;\n  readonly runtime: TelemetryRuntime;\n}\n\nexport function telemetryHeaders(\n  telemetry: RelayerTelemetry,\n  operation: TelemetryOperation | undefined,\n): Record<string, string> {\n  return {\n    \"x-zama-sdk-version\": SDK_VERSION,\n    \"x-zama-sdk-layer\": telemetry.state.layer,\n    \"x-zama-sdk-runtime\": telemetry.runtime,\n    ...(operation !== undefined && { \"x-zama-sdk-operation\": operation }),\n  };\n}\n\n/** `options` labelled with `operation`, unless the caller already labelled it. */\nexport function withOperation<T extends { readonly operation?: TelemetryOperation }>(\n  options: T | undefined,\n  operation: TelemetryOperation,\n): Partial<T> & { readonly operation: TelemetryOperation } {\n  return Object.assign({}, options, { operation: options?.operation ?? operation });\n}\n\nexport function isTelemetryDisabledByEnv(env: Record<string, string | undefined>): boolean {\n  const value = env.ZAMA_SDK_TELEMETRY?.trim().toLowerCase();\n  return value === \"0\" || value === \"false\";\n}\n"],"mappings":"AEqDA,SAAgB,EACd,EACA,EACwB,CACxB,MAAO,CACL,qBAAsB,eACtB,mBAAoB,EAAU,MAAM,MACpC,qBAAsB,EAAU,QAChC,GAAI,IAAc,IAAA,IAAa,CAAE,uBAAwB,CAAU,CACrE,CACF,CAGA,SAAgB,EACd,EACA,EACyD,CACzD,OAAO,OAAO,OAAO,CAAC,EAAG,EAAS,CAAE,UAAW,GAAS,WAAa,CAAU,CAAC,CAClF,CAEA,SAAgB,EAAyB,EAAkD,CACzF,IAAM,EAAQ,EAAI,oBAAoB,KAAK,CAAC,CAAC,YAAY,EACzD,OAAO,IAAU,KAAO,IAAU,OACpC"}

package/dist/cjs/token.cjs

@@ -1,2 +1,2 @@
-const e=require("./relayer.cjs"),t=require("./erc165.cjs"),n=require("./encryption.cjs");let r=require("viem");var i=class extends e.r{retryAfter;constructor(t,n){let{retryAfter:r,...i}=n??{};super(e.i.RpcRateLimited,t,i),this.name=`RpcRateLimitError`,this.retryAfter=r}},a=class extends e.r{operation;signerChainId;providerChainId;constructor({operation:t,signerChainId:n,providerChainId:r},i){super(e.i.ChainMismatch,`Operation "${t}" requires signer and provider to be on the same chain, but signer is on chain ${n} and provider is on chain ${r}.`,i),this.name=`ChainMismatchError`,this.operation=t,this.signerChainId=n,this.providerChainId=r}},o=class extends e.r{requested;available;token;constructor(t,n,r){super(e.i.InsufficientConfidentialBalance,t,r),this.name=`InsufficientConfidentialBalanceError`,this.requested=n.requested,this.available=n.available,this.token=n.token}},s=class extends e.r{requested;available;token;constructor(t,n,r){super(e.i.InsufficientERC20Balance,t,r),this.name=`InsufficientERC20BalanceError`,this.requested=n.requested,this.available=n.available,this.token=n.token}},c=class extends e.r{requested;available;token;constructor(t,n,r){super(e.i.InsufficientAllowance,t,r),this.name=`InsufficientAllowanceError`,this.requested=n.requested,this.available=n.available,this.token=n.token}},l=class extends e.r{constructor(t,n){super(e.i.BalanceCheckUnavailable,t,n),this.name=`BalanceCheckUnavailableError`}},u=class extends e.r{constructor(t,n){super(e.i.ERC20ReadFailed,t,n),this.name=`ERC20ReadFailedError`}};function d(n){return n instanceof t.W||n instanceof t.U||n instanceof e.t||n instanceof i||n instanceof t.q||n instanceof t.Z}const f={ebool:0,euint8:2,euint16:3,euint32:4,euint64:5,euint128:6,eaddress:7,euint256:8},p={0:`ebool`,2:`euint8`,3:`euint16`,4:`euint32`,5:`euint64`,6:`euint128`,7:`eaddress`,8:`euint256`},m={0:2,2:8,3:16,4:32,5:64,6:128,7:160,8:256};Object.freeze(f),Object.freeze(p),Object.freeze(m),Object.freeze({2:0,8:2,16:3,32:4,64:5,128:6,160:7,256:8});function h(e){switch(e){case 0:case 2:case 3:case 4:case 5:case 6:case 7:case 8:return!0;default:return!1}}function g(e){if(!h(e))throw Error(`Invalid FheType id '${e}'`);let t=m[e];if(t<2)throw Error(`Invalid FheType encryption bit width: ${t}. Minimum is 2 bits.`);return t}function _(e){return e===`0x0000000000000000000000000000000000000000000000000000000000000000`||e===`0x`}function v(e){let t;try{t=BigInt(e)}catch{return 256}let n=Number(t>>8n&255n);return h(n)?g(n):256}function y(e,t=2048){let n=[],r=[],i=0;for(let a of e){let e=v(a);r.length>0&&i+e>t&&(n.push(r),r=[],i=0),r.push(a),i+=e}return r.length>0&&n.push(r),n}async function b(e,n,r){if(!n)throw new t.L(e);let i;try{i=n.requireWalletAccount(e)}catch(r){if(!(r instanceof t.z)||!n.refreshWalletAccount)throw r;await n.refreshWalletAccount(),i=n.requireWalletAccount(e)}let o=await r.getChainId();if(i.chainId!==o)throw new a({operation:e,signerChainId:i.chainId,providerChainId:o});return i}async function x(e,t,n){return(await b(e,t,n)).chainId}async function S(t){let{operation:n,tokenAddress:i,amount:a,signer:s,provider:c,readBalance:u}=t;if(a===0n)return;let d;try{d=await u((0,r.getAddress)((await b(n,s,c)).address))}catch(t){throw t instanceof e.r?t:new l(`Balance validation failed (token: ${i})`,{cause:t})}if(d<a)throw new o(`Insufficient confidential balance: requested ${a}, available ${d} (token: ${i})`,{requested:a,available:d,token:i})}async function C(e,t=1/0){if(Number.isFinite(t)&&t<=0)throw Error(`maxConcurrency must be a positive number`);if(!Number.isFinite(t)||t>=e.length)return Promise.all(e.map(e=>e()));let n=Array.from({length:e.length}),r=0;async function i(){for(;r<e.length;){let t=r++;e[t]&&(n[t]=await e[t]())}}return await Promise.all(Array.from({length:t},i)),n}async function w(n){let{operation:r,signer:i,provider:a,config:o,emit:s,onSubmitted:c,logger:l}=n,u=t.I[r];try{let e=await i.writeContract(o);return s(u.submittedEvent(e)),t.j(`${r}: onSubmitted`,()=>c?.(e),l),{txHash:e,receipt:await a.waitForTransactionReceipt(e)}}catch(n){let i=n instanceof e.r?n:new t.H(`Transaction failed during ${r}`,{cause:n});throw s({type:t.F.TransactionError,operation:r,error:i}),i}}var T=class i{sdk;address;constructor(e,t){this.sdk=e,this.address=(0,r.getAddress)(t)}#e(e){return t.V(this.sdk.signer,e)}async name(){return this.sdk.provider.readContract(t.p(this.address))}async symbol(){return this.sdk.provider.readContract(t.m(this.address))}async decimals(){return this.sdk.provider.readContract(t.d(this.address))}async isConfidential(){return this.sdk.provider.readContract(t.s(this.address,t.n))}async isWrapper(){return this.sdk.provider.readContract(t.s(this.address,t.r))}async balanceOf(e){return this.decryptBalance(e,`balance-of`)}async decryptBalance(e,i){let a=(0,r.getAddress)(e),o=await this.readConfidentialBalanceOf(a),s=(await this.sdk.decryption.decryptValues([{encryptedValue:o,contractAddress:this.address}],{operation:i}))[o];if(s===void 0)throw new n.t(`Decryption returned no value for ${o}`);return t.M(s,`balanceOf: result[encryptedValue]`),s}async confidentialBalanceOf(e){return this.readConfidentialBalanceOf((0,r.getAddress)(e))}async decryptBalanceAs({delegatorAddress:e,accountAddress:i}){await x(`decryptBalanceAs`,this.sdk.signer,this.sdk.provider);let a=(0,r.getAddress)(e),o=i?(0,r.getAddress)(i):a,s=await this.readConfidentialBalanceOf(o);if(_(s))return 0n;let c=(await this.sdk.decryption.delegatedDecryptValues([{encryptedValue:s,contractAddress:this.address}],a,o,{operation:`decrypt-balance-as`}))[s];if(c===void 0)throw new n.t(`Delegated decryption returned no value for ${s}`);return t.M(c,`decryptBalanceAs: result[encryptedValue]`),c}static async batchBalancesOf(t,r){let a=new Map,o=new Map;if(t.length===0)return{results:a,errors:o};let s=i.assertSameSdk(t);await x(`batchBalancesOf`,s.signer,s.provider),await s.permits.grantPermit(t.map(e=>e.address));let c=!1,l,u=await C(t.map(e=>async()=>{if(c)return{status:`aborted`};try{return{status:`fulfilled`,value:await e.decryptBalance(r,`batch-balances-of`)}}catch(e){return d(e)?(c=!0,l??=e,{status:`aborted`}):{status:`rejected`,reason:e}}}),5);if(l!==void 0)throw l;for(let r=0;r<t.length;r++){let i=t[r].address,s=u[r];if(s.status!==`aborted`)if(s.status===`fulfilled`)a.set(i,s.value);else{let t=s.reason,r=t instanceof e.r?t:new n.t(e.S(t).message,{cause:t});o.set(i,r)}}if(o.size===t.length)throw o.values().next().value??new n.t(`All token balance decryptions failed`);return{results:a,errors:o}}static async batchDecryptBalancesAs(a,o){if(a.length===0)return new Map;let s=i.assertSameSdk(a),c=new Map,l=new Map,u=o.accountAddress?(0,r.getAddress)(o.accountAddress):(0,r.getAddress)(o.delegatorAddress),d=o.maxConcurrency??10;if(o.encryptedValues&&a.length!==o.encryptedValues.length)throw new n.t(`tokens.length (${a.length}) must equal encryptedValues.length (${o.encryptedValues.length})`);let f=o.encryptedValues??await i.readBalanceHandlesBatch(a,u,l,d),p=[];for(let[e,t]of a.entries()){let n=f[e];!n||l.has(t.address)||(_(n)?c.set(t.address,0n):p.push({token:t,encryptedValue:n}))}if(p.length>0){let e=await s.decryption.delegatedBatchDecryptValues({encryptedInputs:p.map(({token:e,encryptedValue:t})=>({encryptedValue:t,contractAddress:e.address})),delegatorAddress:o.delegatorAddress,accountAddress:o.accountAddress,maxConcurrency:d,operation:`batch-decrypt-balances-as`});for(let[r,i]of e.items.entries()){let e=p[r];if(!e)continue;if(i.error){l.set(e.token.address,i.error);continue}let a=i.value;if(a===void 0){l.set(e.token.address,new n.t(`Batch delegated decryption returned no value for ${i.encryptedValue} on token ${e.token.address}`));continue}t.M(a,`batchDecryptBalancesAs: result[encryptedValue]`),c.set(e.token.address,a)}}if(l.size===0)return c;if(o.onError){let t=[];for(let[n,r]of l)try{c.set(n,o.onError(r,n))}catch(r){t.push({address:n,error:e.S(r)})}if(t.length>0){let e=t.map(({address:e,error:t})=>`${e}: ${t.message}`).join(`; `);throw new n.t(`Batch delegated decryption onError callback failed for ${t.length} token(s): ${e}`,{cause:t[0]?.error})}return c}let m=Array.from(l.entries()),h=m.map(([e,t])=>`${e}: ${t.message}`).join(`; `);throw new n.t(`Batch delegated decryption failed for ${l.size} token(s): ${h}`,{cause:m[0]?.[1]})}static async readBalanceHandlesBatch(t,r,i,a){let o=!1,s,c=await C(t.map(e=>async()=>{if(o)return{status:`aborted`};try{return{status:`fulfilled`,value:await e.readConfidentialBalanceOf(r)}}catch(e){return d(e)?(o=!0,s??=e,{status:`aborted`}):{status:`rejected`,reason:e}}}),a);if(s!==void 0)throw s;let l=[];for(let[r,a]of t.entries()){let t=c[r];if(!(!t||t.status===`aborted`)){if(t.status===`fulfilled`){l[r]=t.value;continue}i.set(a.address,t.reason instanceof e.r?t.reason:new n.t(e.S(t.reason).message,{cause:t.reason}))}}return l}async confidentialTransfer(e,i,a){this.#e(`confidentialTransfer`);let o=await b(`confidentialTransfer`,this.sdk.signer,this.sdk.provider),{skipBalanceCheck:s=!1,onEncryptComplete:c,onTransferSubmitted:l}=a??{},u=(0,r.getAddress)(e);s||await this.assertConfidentialBalance(i,`confidential-transfer`);let{encryptedValues:d,inputProof:f}=await this.sdk.encrypt({values:[{value:i,type:`euint64`}],contractAddress:this.address,userAddress:(0,r.getAddress)(o.address)},{operation:`confidential-transfer`});if(t.j(`transfer: onEncryptComplete`,()=>c?.(),this.sdk.logger),d.length===0)throw new n.r(`Encryption returned no encrypted values`);return this.submitTransaction({operation:`transfer`,config:t.v(this.address,u,d[0],f),onSubmitted:l})}async confidentialTransferFrom(e,i,a,o){this.#e(`confidentialTransferFrom`);let s=await b(`confidentialTransferFrom`,this.sdk.signer,this.sdk.provider),c=(0,r.getAddress)(e),l=(0,r.getAddress)(i),{encryptedValues:u,inputProof:d}=await this.sdk.encrypt({values:[{value:a,type:`euint64`}],contractAddress:this.address,userAddress:(0,r.getAddress)(s.address)},{operation:`confidential-transfer-from`});if(t.j(`transferFrom: onEncryptComplete`,()=>o?.onEncryptComplete?.(),this.sdk.logger),u.length===0)throw new n.r(`Encryption returned no encrypted values`);return this.submitTransaction({operation:`transferFrom`,config:t.b(this.address,c,l,u[0],d),onSubmitted:o?.onTransferSubmitted})}async confidentialTransferAndCall(e,i,a,o){this.#e(`confidentialTransferAndCall`);let s=await b(`confidentialTransferAndCall`,this.sdk.signer,this.sdk.provider),{skipBalanceCheck:c=!1,onEncryptComplete:l,onTransferSubmitted:u}=o??{},d=(0,r.getAddress)(e);c||await this.assertConfidentialBalance(i,`confidential-transfer-and-call`);let{encryptedValues:f,inputProof:p}=await this.sdk.encrypt({values:[{value:i,type:`euint64`}],contractAddress:this.address,userAddress:(0,r.getAddress)(s.address)},{operation:`confidential-transfer-and-call`});if(t.j(`transferAndCall: onEncryptComplete`,()=>l?.(),this.sdk.logger),f.length===0)throw new n.r(`Encryption returned no encrypted values`);return this.submitTransaction({operation:`transferAndCall`,config:t._(this.address,d,f[0],p,a),onSubmitted:u})}async confidentialTransferFromAndCall(e,i,a,o,s){this.#e(`confidentialTransferFromAndCall`);let c=await b(`confidentialTransferFromAndCall`,this.sdk.signer,this.sdk.provider),l=(0,r.getAddress)(e),u=(0,r.getAddress)(i),{encryptedValues:d,inputProof:f}=await this.sdk.encrypt({values:[{value:a,type:`euint64`}],contractAddress:this.address,userAddress:(0,r.getAddress)(c.address)},{operation:`confidential-transfer-from-and-call`});if(t.j(`transferFromAndCall: onEncryptComplete`,()=>s?.onEncryptComplete?.(),this.sdk.logger),d.length===0)throw new n.r(`Encryption returned no encrypted values`);return this.submitTransaction({operation:`transferFromAndCall`,config:t.y(this.address,l,u,d[0],f,o),onSubmitted:s?.onTransferSubmitted})}async setOperator(e,n){this.#e(`setOperator`),await x(`setOperator`,this.sdk.signer,this.sdk.provider);let i=(0,r.getAddress)(e);return this.submitTransaction({operation:`setOperator`,config:t.T(this.address,i,n)})}async isOperator(e,n){return this.sdk.provider.readContract(t.C(this.address,(0,r.getAddress)(e),(0,r.getAddress)(n)))}async readConfidentialBalanceOf(e){return await this.sdk.provider.readContract(t.h(this.address,e))}async assertConfidentialBalance(e,t){return S({operation:`assertConfidentialBalance`,tokenAddress:this.address,amount:e,signer:this.sdk.signer,provider:this.sdk.provider,readBalance:e=>this.decryptBalance(e,t)})}emit(e){this.sdk.emitEvent(e,this.address)}async submitTransaction(e){let{operation:t,config:n,onSubmitted:r}=e;return w({operation:t,signer:this.#e(t),provider:this.sdk.provider,config:n,emit:e=>this.emit(e),onSubmitted:r,logger:this.sdk.logger})}static assertSameSdk(t){let n=t[0].sdk;for(let r=1;r<t.length;r++)if(t[r].sdk!==n)throw new e.t(`All tokens in a batch operation must share the same ZamaSDK instance`);return n}};Object.defineProperty(exports,"_",{enumerable:!0,get:function(){return i}}),Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return b}}),Object.defineProperty(exports,"c",{enumerable:!0,get:function(){return y}}),Object.defineProperty(exports,"d",{enumerable:!0,get:function(){return l}}),Object.defineProperty(exports,"f",{enumerable:!0,get:function(){return u}}),Object.defineProperty(exports,"g",{enumerable:!0,get:function(){return a}}),Object.defineProperty(exports,"h",{enumerable:!0,get:function(){return s}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return S}}),Object.defineProperty(exports,"l",{enumerable:!0,get:function(){return _}}),Object.defineProperty(exports,"m",{enumerable:!0,get:function(){return o}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return w}}),Object.defineProperty(exports,"o",{enumerable:!0,get:function(){return x}}),Object.defineProperty(exports,"p",{enumerable:!0,get:function(){return c}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return C}}),Object.defineProperty(exports,"s",{enumerable:!0,get:function(){return`0x0000000000000000000000000000000000000000000000000000000000000000`}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return T}}),Object.defineProperty(exports,"u",{enumerable:!0,get:function(){return d}});
+const e=require("./relayer.cjs"),t=require("./encryption.cjs"),n=require("./erc165.cjs"),r=require("./fatal-batch.cjs");let i=require("viem");var a=class extends e.r{operation;signerChainId;providerChainId;constructor({operation:t,signerChainId:n,providerChainId:r},i){super(e.i.ChainMismatch,`Operation "${t}" requires signer and provider to be on the same chain, but signer is on chain ${n} and provider is on chain ${r}.`,i),this.name=`ChainMismatchError`,this.operation=t,this.signerChainId=n,this.providerChainId=r}},o=class extends e.r{requested;available;token;constructor(t,n,r){super(e.i.InsufficientConfidentialBalance,t,r),this.name=`InsufficientConfidentialBalanceError`,this.requested=n.requested,this.available=n.available,this.token=n.token}},s=class extends e.r{requested;available;token;constructor(t,n,r){super(e.i.InsufficientERC20Balance,t,r),this.name=`InsufficientERC20BalanceError`,this.requested=n.requested,this.available=n.available,this.token=n.token}},c=class extends e.r{requested;available;token;constructor(t,n,r){super(e.i.InsufficientAllowance,t,r),this.name=`InsufficientAllowanceError`,this.requested=n.requested,this.available=n.available,this.token=n.token}},l=class extends e.r{constructor(t,n){super(e.i.BalanceCheckUnavailable,t,n),this.name=`BalanceCheckUnavailableError`}},u=class extends e.r{constructor(t,n){super(e.i.ERC20ReadFailed,t,n),this.name=`ERC20ReadFailedError`}};const d={ebool:0,euint8:2,euint16:3,euint32:4,euint64:5,euint128:6,eaddress:7,euint256:8},f={0:`ebool`,2:`euint8`,3:`euint16`,4:`euint32`,5:`euint64`,6:`euint128`,7:`eaddress`,8:`euint256`},p={0:2,2:8,3:16,4:32,5:64,6:128,7:160,8:256};Object.freeze(d),Object.freeze(f),Object.freeze(p),Object.freeze({2:0,8:2,16:3,32:4,64:5,128:6,160:7,256:8});function m(e){switch(e){case 0:case 2:case 3:case 4:case 5:case 6:case 7:case 8:return!0;default:return!1}}function h(e){if(!m(e))throw Error(`Invalid FheType id '${e}'`);let t=p[e];if(t<2)throw Error(`Invalid FheType encryption bit width: ${t}. Minimum is 2 bits.`);return t}function g(e){return e===`0x0000000000000000000000000000000000000000000000000000000000000000`||e===`0x`}function _(e){let t;try{t=BigInt(e)}catch{return 256}let n=Number(t>>8n&255n);return m(n)?h(n):256}function v(e,t=2048){let n=[],r=[],i=0;for(let a of e){let e=_(a);r.length>0&&i+e>t&&(n.push(r),r=[],i=0),r.push(a),i+=e}return r.length>0&&n.push(r),n}async function y(e,t,r){if(!t)throw new n.L(e);let i;try{i=t.requireWalletAccount(e)}catch(r){if(!(r instanceof n.z)||!t.refreshWalletAccount)throw r;await t.refreshWalletAccount(),i=t.requireWalletAccount(e)}let o=await r.getChainId();if(i.chainId!==o)throw new a({operation:e,signerChainId:i.chainId,providerChainId:o});return i}async function b(e,t,n){return(await y(e,t,n)).chainId}async function x(t){let{operation:n,tokenAddress:r,amount:a,signer:s,provider:c,readBalance:u}=t;if(a===0n)return;let d;try{d=await u((0,i.getAddress)((await y(n,s,c)).address))}catch(t){throw t instanceof e.r?t:new l(`Balance validation failed (token: ${r})`,{cause:t})}if(d<a)throw new o(`Insufficient confidential balance: requested ${a}, available ${d} (token: ${r})`,{requested:a,available:d,token:r})}async function S(e,t=1/0){if(Number.isFinite(t)&&t<=0)throw Error(`maxConcurrency must be a positive number`);if(!Number.isFinite(t)||t>=e.length)return Promise.all(e.map(e=>e()));let n=Array.from({length:e.length}),r=0;async function i(){for(;r<e.length;){let t=r++;e[t]&&(n[t]=await e[t]())}}return await Promise.all(Array.from({length:t},i)),n}async function C(t){let{operation:r,signer:i,provider:a,config:o,emit:s,onSubmitted:c,logger:l}=t,u=n.I[r];try{let e=await i.writeContract(o);return s(u.submittedEvent(e)),n.j(`${r}: onSubmitted`,()=>c?.(e),l),{txHash:e,receipt:await a.waitForTransactionReceipt(e)}}catch(t){let i=t instanceof e.r?t:new n.H(`Transaction failed during ${r}`,{cause:t});throw s({type:n.F.TransactionError,operation:r,error:i}),i}}var w=class a{sdk;address;constructor(e,t){this.sdk=e,this.address=(0,i.getAddress)(t)}#e(e){return n.V(this.sdk.signer,e)}async name(){return this.sdk.provider.readContract(n.p(this.address))}async symbol(){return this.sdk.provider.readContract(n.m(this.address))}async decimals(){return this.sdk.provider.readContract(n.d(this.address))}async isConfidential(){return this.sdk.provider.readContract(n.s(this.address,n.n))}async isWrapper(){return this.sdk.provider.readContract(n.s(this.address,n.r))}async balanceOf(e){return this.decryptBalance(e,`balance-of`)}async decryptBalance(e,r){let a=(0,i.getAddress)(e),o=await this.readConfidentialBalanceOf(a),s=(await this.sdk.decryption.decryptValues([{encryptedValue:o,contractAddress:this.address}],{operation:r}))[o];if(s===void 0)throw new t.t(`Decryption returned no value for ${o}`);return n.M(s,`balanceOf: result[encryptedValue]`),s}async confidentialBalanceOf(e){return this.readConfidentialBalanceOf((0,i.getAddress)(e))}async decryptBalanceAs({delegatorAddress:e,accountAddress:r}){await b(`decryptBalanceAs`,this.sdk.signer,this.sdk.provider);let a=(0,i.getAddress)(e),o=r?(0,i.getAddress)(r):a,s=await this.readConfidentialBalanceOf(o);if(g(s))return 0n;let c=(await this.sdk.decryption.delegatedDecryptValues([{encryptedValue:s,contractAddress:this.address}],a,o,{operation:`decrypt-balance-as`}))[s];if(c===void 0)throw new t.t(`Delegated decryption returned no value for ${s}`);return n.M(c,`decryptBalanceAs: result[encryptedValue]`),c}static async batchBalancesOf(n,i){let o=new Map,s=new Map;if(n.length===0)return{results:o,errors:s};let c=a.assertSameSdk(n);await b(`batchBalancesOf`,c.signer,c.provider),await c.permits.grantPermit(n.map(e=>e.address));let l=!1,u,d=await S(n.map(e=>async()=>{if(l)return{status:`aborted`};try{return{status:`fulfilled`,value:await e.decryptBalance(i,`batch-balances-of`)}}catch(e){return r.n(e)?(l=!0,u??=e,{status:`aborted`}):{status:`rejected`,reason:e}}}),5);if(u!==void 0)throw u;for(let r=0;r<n.length;r++){let i=n[r].address,a=d[r];if(a.status!==`aborted`)if(a.status===`fulfilled`)o.set(i,a.value);else{let n=a.reason,r=n instanceof e.r?n:new t.t(e.S(n).message,{cause:n});s.set(i,r)}}if(s.size===n.length)throw s.values().next().value??new t.t(`All token balance decryptions failed`);return{results:o,errors:s}}static async batchDecryptBalancesAs(r,o){if(r.length===0)return new Map;let s=a.assertSameSdk(r),c=new Map,l=new Map,u=o.accountAddress?(0,i.getAddress)(o.accountAddress):(0,i.getAddress)(o.delegatorAddress),d=o.maxConcurrency??10;if(o.encryptedValues&&r.length!==o.encryptedValues.length)throw new t.t(`tokens.length (${r.length}) must equal encryptedValues.length (${o.encryptedValues.length})`);let f=o.encryptedValues??await a.readBalanceHandlesBatch(r,u,l,d),p=[];for(let[e,t]of r.entries()){let n=f[e];!n||l.has(t.address)||(g(n)?c.set(t.address,0n):p.push({token:t,encryptedValue:n}))}if(p.length>0){let e=await s.decryption.delegatedBatchDecryptValues({encryptedInputs:p.map(({token:e,encryptedValue:t})=>({encryptedValue:t,contractAddress:e.address})),delegatorAddress:o.delegatorAddress,accountAddress:o.accountAddress,maxConcurrency:d,operation:`batch-decrypt-balances-as`});for(let[r,i]of e.items.entries()){let e=p[r];if(!e)continue;if(i.error){l.set(e.token.address,i.error);continue}let a=i.value;if(a===void 0){l.set(e.token.address,new t.t(`Batch delegated decryption returned no value for ${i.encryptedValue} on token ${e.token.address}`));continue}n.M(a,`batchDecryptBalancesAs: result[encryptedValue]`),c.set(e.token.address,a)}}if(l.size===0)return c;if(o.onError){let n=[];for(let[t,r]of l)try{c.set(t,o.onError(r,t))}catch(r){n.push({address:t,error:e.S(r)})}if(n.length>0){let e=n.map(({address:e,error:t})=>`${e}: ${t.message}`).join(`; `);throw new t.t(`Batch delegated decryption onError callback failed for ${n.length} token(s): ${e}`,{cause:n[0]?.error})}return c}let m=Array.from(l.entries()),h=m.map(([e,t])=>`${e}: ${t.message}`).join(`; `);throw new t.t(`Batch delegated decryption failed for ${l.size} token(s): ${h}`,{cause:m[0]?.[1]})}static async readBalanceHandlesBatch(n,i,a,o){let s=!1,c,l=await S(n.map(e=>async()=>{if(s)return{status:`aborted`};try{return{status:`fulfilled`,value:await e.readConfidentialBalanceOf(i)}}catch(e){return r.n(e)?(s=!0,c??=e,{status:`aborted`}):{status:`rejected`,reason:e}}}),o);if(c!==void 0)throw c;let u=[];for(let[r,i]of n.entries()){let n=l[r];if(!(!n||n.status===`aborted`)){if(n.status===`fulfilled`){u[r]=n.value;continue}a.set(i.address,n.reason instanceof e.r?n.reason:new t.t(e.S(n.reason).message,{cause:n.reason}))}}return u}async confidentialTransfer(e,r,a){this.#e(`confidentialTransfer`);let o=await y(`confidentialTransfer`,this.sdk.signer,this.sdk.provider),{skipBalanceCheck:s=!1,onEncryptComplete:c,onTransferSubmitted:l}=a??{},u=(0,i.getAddress)(e);s||await this.assertConfidentialBalance(r,`confidential-transfer`);let{encryptedValues:d,inputProof:f}=await this.sdk.encrypt({values:[{value:r,type:`euint64`}],contractAddress:this.address,userAddress:(0,i.getAddress)(o.address)},{operation:`confidential-transfer`});if(n.j(`transfer: onEncryptComplete`,()=>c?.(),this.sdk.logger),d.length===0)throw new t.r(`Encryption returned no encrypted values`);return this.submitTransaction({operation:`transfer`,config:n.v(this.address,u,d[0],f),onSubmitted:l})}async confidentialTransferFrom(e,r,a,o){this.#e(`confidentialTransferFrom`);let s=await y(`confidentialTransferFrom`,this.sdk.signer,this.sdk.provider),c=(0,i.getAddress)(e),l=(0,i.getAddress)(r),{encryptedValues:u,inputProof:d}=await this.sdk.encrypt({values:[{value:a,type:`euint64`}],contractAddress:this.address,userAddress:(0,i.getAddress)(s.address)},{operation:`confidential-transfer-from`});if(n.j(`transferFrom: onEncryptComplete`,()=>o?.onEncryptComplete?.(),this.sdk.logger),u.length===0)throw new t.r(`Encryption returned no encrypted values`);return this.submitTransaction({operation:`transferFrom`,config:n.b(this.address,c,l,u[0],d),onSubmitted:o?.onTransferSubmitted})}async confidentialTransferAndCall(e,r,a,o){this.#e(`confidentialTransferAndCall`);let s=await y(`confidentialTransferAndCall`,this.sdk.signer,this.sdk.provider),{skipBalanceCheck:c=!1,onEncryptComplete:l,onTransferSubmitted:u}=o??{},d=(0,i.getAddress)(e);c||await this.assertConfidentialBalance(r,`confidential-transfer-and-call`);let{encryptedValues:f,inputProof:p}=await this.sdk.encrypt({values:[{value:r,type:`euint64`}],contractAddress:this.address,userAddress:(0,i.getAddress)(s.address)},{operation:`confidential-transfer-and-call`});if(n.j(`transferAndCall: onEncryptComplete`,()=>l?.(),this.sdk.logger),f.length===0)throw new t.r(`Encryption returned no encrypted values`);return this.submitTransaction({operation:`transferAndCall`,config:n._(this.address,d,f[0],p,a),onSubmitted:u})}async confidentialTransferFromAndCall(e,r,a,o,s){this.#e(`confidentialTransferFromAndCall`);let c=await y(`confidentialTransferFromAndCall`,this.sdk.signer,this.sdk.provider),l=(0,i.getAddress)(e),u=(0,i.getAddress)(r),{encryptedValues:d,inputProof:f}=await this.sdk.encrypt({values:[{value:a,type:`euint64`}],contractAddress:this.address,userAddress:(0,i.getAddress)(c.address)},{operation:`confidential-transfer-from-and-call`});if(n.j(`transferFromAndCall: onEncryptComplete`,()=>s?.onEncryptComplete?.(),this.sdk.logger),d.length===0)throw new t.r(`Encryption returned no encrypted values`);return this.submitTransaction({operation:`transferFromAndCall`,config:n.y(this.address,l,u,d[0],f,o),onSubmitted:s?.onTransferSubmitted})}async setOperator(e,t){this.#e(`setOperator`),await b(`setOperator`,this.sdk.signer,this.sdk.provider);let r=(0,i.getAddress)(e);return this.submitTransaction({operation:`setOperator`,config:n.T(this.address,r,t)})}async isOperator(e,t){return this.sdk.provider.readContract(n.C(this.address,(0,i.getAddress)(e),(0,i.getAddress)(t)))}async readConfidentialBalanceOf(e){return await this.sdk.provider.readContract(n.h(this.address,e))}async assertConfidentialBalance(e,t){return x({operation:`assertConfidentialBalance`,tokenAddress:this.address,amount:e,signer:this.sdk.signer,provider:this.sdk.provider,readBalance:e=>this.decryptBalance(e,t)})}emit(e){this.sdk.emitEvent(e,this.address)}async submitTransaction(e){let{operation:t,config:n,onSubmitted:r}=e;return C({operation:t,signer:this.#e(t),provider:this.sdk.provider,config:n,emit:e=>this.emit(e),onSubmitted:r,logger:this.sdk.logger})}static assertSameSdk(t){let n=t[0].sdk;for(let r=1;r<t.length;r++)if(t[r].sdk!==n)throw new e.t(`All tokens in a batch operation must share the same ZamaSDK instance`);return n}};Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return y}}),Object.defineProperty(exports,"c",{enumerable:!0,get:function(){return v}}),Object.defineProperty(exports,"d",{enumerable:!0,get:function(){return u}}),Object.defineProperty(exports,"f",{enumerable:!0,get:function(){return c}}),Object.defineProperty(exports,"h",{enumerable:!0,get:function(){return a}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return x}}),Object.defineProperty(exports,"l",{enumerable:!0,get:function(){return g}}),Object.defineProperty(exports,"m",{enumerable:!0,get:function(){return s}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return C}}),Object.defineProperty(exports,"o",{enumerable:!0,get:function(){return b}}),Object.defineProperty(exports,"p",{enumerable:!0,get:function(){return o}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return S}}),Object.defineProperty(exports,"s",{enumerable:!0,get:function(){return`0x0000000000000000000000000000000000000000000000000000000000000000`}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return w}}),Object.defineProperty(exports,"u",{enumerable:!0,get:function(){return l}});
 //# sourceMappingURL=token.cjs.map

package/dist/cjs/token.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"token.cjs","names":["ZamaError","ZamaErrorCode","ZamaError","ZamaErrorCode","ZamaError","ZamaErrorCode","SigningRejectedError","SigningFailedError","ConfigurationError","KeyWrappingError","RevokedKmsContextError","SignerNotConfiguredError","WalletAccountNotReadyError","ZamaError","transactionOperationMetadata","swallow","ZamaError","TransactionRevertedError","ZamaSDKEvents","requireConfigured","nameContract","symbolContract","decimalsContract","supportsInterfaceContract","ERC7984_INTERFACE_ID","ERC7984_WRAPPER_INTERFACE_ID","DecryptionFailedError","ZamaError","toError","#requireSigner","swallow","EncryptionFailedError","confidentialTransferContract","confidentialTransferFromContract","confidentialTransferAndCallContract","confidentialTransferFromAndCallContract","setOperatorContract","isOperatorContract","confidentialBalanceOfContract","submitSdkTransaction","ConfigurationError"],"sources":["../../src/errors/rpc.ts","../../src/errors/chain.ts","../../src/errors/balance.ts","../../src/errors/fatal-batch.ts","../../src/utils/fhe-type.ts","../../src/utils/handles.ts","../../src/utils/alignment.ts","../../src/utils/assert-balance.ts","../../src/utils/concurrency.ts","../../src/utils/submit-transaction.ts","../../src/token/token.ts"],"sourcesContent":["import { ZamaError, ZamaErrorCode } from \"./base\";\n\n/**\n * The consumer's RPC provider rate-limited an on-chain read the SDK performs\n * during decryption (e.g. the ACL check) — HTTP 429 or JSON-RPC `-32005`. An\n * RPC-endpoint problem, **not** a decryption/entitlement failure, and safe to\n * **retry**. Kept distinct from the relayer's own back-pressure\n * ({@link RelayerRequestFailedError}).\n *\n * Backoff for chain RPC is owned by the consumer's transport: viem/ethers\n * already honor the `Retry-After` header and retry internally before this error\n * surfaces, so it is configured on the transport you pass via `chain.network`\n * (not re-implemented here).\n *\n * @example\n * ```ts\n * try {\n *   await sdk.decryption.decryptValues([{ encryptedValue, contractAddress }]);\n * } catch (e) {\n *   if (e instanceof RpcRateLimitError) {\n *     // back off and retry; consider a higher-throughput RPC endpoint\n *   }\n * }\n * ```\n */\nexport class RpcRateLimitError extends ZamaError {\n  /**\n   * Suggested delay before retrying, in **seconds**, when a numeric `retryAfter`\n   * is present on the error. Usually `undefined` for chain RPC: the `Retry-After`\n   * header is consumed by the consumer's viem/ethers transport (which owns the\n   * backoff), not surfaced here — see the class doc.\n   */\n  readonly retryAfter: number | undefined;\n\n  constructor(message: string, options?: ErrorOptions & { retryAfter?: number }) {\n    const { retryAfter, ...errorOptions } = options ?? {};\n    super(ZamaErrorCode.RpcRateLimited, message, errorOptions);\n    this.name = \"RpcRateLimitError\";\n    this.retryAfter = retryAfter;\n  }\n}\n","import { ZamaError, ZamaErrorCode } from \"./base\";\n\n/**\n * Thrown when the signer and provider are connected to different chains at the\n * start of a write operation.\n *\n * Every write method runs a chain-alignment pre-flight check. If\n * `signer.getChainId()` and `provider.getChainId()` return different values,\n * this error is thrown before any RPC mutation is attempted.\n *\n * @example\n * ```ts\n * try {\n *   await token.shield(1000n);\n * } catch (e) {\n *   if (e instanceof ChainMismatchError) {\n *     console.error(\n *       `Signer is on chain ${e.signerChainId} but provider is on chain ${e.providerChainId}`,\n *     );\n *   }\n * }\n * ```\n */\nexport class ChainMismatchError extends ZamaError {\n  /** Name of the operation that triggered the check. */\n  readonly operation: string;\n  /** Chain ID the signer is connected to. */\n  readonly signerChainId: number;\n  /** Chain ID the provider is connected to. */\n  readonly providerChainId: number;\n\n  constructor(\n    {\n      operation,\n      signerChainId,\n      providerChainId,\n    }: { operation: string; signerChainId: number; providerChainId: number },\n    options?: ErrorOptions,\n  ) {\n    super(\n      ZamaErrorCode.ChainMismatch,\n      `Operation \"${operation}\" requires signer and provider to be on the same chain, ` +\n        `but signer is on chain ${signerChainId} and provider is on chain ${providerChainId}.`,\n      options,\n    );\n    this.name = \"ChainMismatchError\";\n    this.operation = operation;\n    this.signerChainId = signerChainId;\n    this.providerChainId = providerChainId;\n  }\n}\n","import type { Address } from \"viem\";\nimport { ZamaError, ZamaErrorCode } from \"./base\";\n\n/** Structured details shared by balance-related errors. */\nexport interface BalanceErrorDetails {\n  /** Amount the caller requested, in the token's base units. */\n  readonly requested: bigint;\n  /** Amount available at the time of the check, in the token's base units. */\n  readonly available: bigint;\n  /** Address of the token contract involved. */\n  readonly token: Address;\n}\n\n/** Confidential (cToken) balance is insufficient for the requested operation. */\nexport class InsufficientConfidentialBalanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The available balance at the time of the check. */\n  readonly available: bigint;\n  /** The token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientConfidentialBalance, message, options);\n    this.name = \"InsufficientConfidentialBalanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** ERC-20 balance is insufficient for the requested shield amount. */\nexport class InsufficientERC20BalanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The available balance at the time of the check. */\n  readonly available: bigint;\n  /** The ERC-20 token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientERC20Balance, message, options);\n    this.name = \"InsufficientERC20BalanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** ERC-20 allowance granted to the wrapper is insufficient for the requested wrap amount. */\nexport class InsufficientAllowanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The allowance available at the time of the check. */\n  readonly available: bigint;\n  /** The underlying ERC-20 token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientAllowance, message, options);\n    this.name = \"InsufficientAllowanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** Balance validation could not be performed (no cached credentials and decryption not possible). */\nexport class BalanceCheckUnavailableError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.BalanceCheckUnavailable, message, options);\n    this.name = \"BalanceCheckUnavailableError\";\n  }\n}\n\n/** A public ERC-20 read (e.g. balanceOf) failed due to a network or contract error. */\nexport class ERC20ReadFailedError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.ERC20ReadFailed, message, options);\n    this.name = \"ERC20ReadFailedError\";\n  }\n}\n","import { KeyWrappingError, RevokedKmsContextError } from \"./credential\";\nimport { ConfigurationError } from \"./relayer\";\nimport { RpcRateLimitError } from \"./rpc\";\nimport { SigningRejectedError, SigningFailedError } from \"./signing\";\n\n/**\n * Returns `true` for errors that should abort an entire batch operation\n * rather than be recorded per-item — wallet signature rejected, signing\n * infrastructure broken, SDK misconfigured, the RPC provider throttling, or\n * transport key pair wrapping unusable for the whole session (wrong or missing\n * `transportKeyPairDerivationSecret`, `crypto.subtle` unavailable).\n * These are systemic failures that won't recover within the same call; for a\n * rate-limit in particular, the per-item retry loop would only amplify the\n * throttle by re-hitting the already-rate-limited endpoint. A revoked KMS\n * context is likewise batch-wide: every item's permit shares the dead context,\n * and the per-item loop would trigger one evict-and-regrant wallet prompt per\n * item instead of the one the batch attempt already spent.\n *\n * Callers iterating over a batch (e.g. per-token decrypt) should rethrow when\n * this predicate is true so the whole batch aborts, and record the error\n * per-item otherwise.\n */\nexport function isFatalBatchError(error: unknown): boolean {\n  return (\n    error instanceof SigningRejectedError ||\n    error instanceof SigningFailedError ||\n    error instanceof ConfigurationError ||\n    error instanceof RpcRateLimitError ||\n    error instanceof KeyWrappingError ||\n    error instanceof RevokedKmsContextError\n  );\n}\n","// Copied from @zama-fhe/relayer-sdk/src/sdk/FheType.ts\n// Pure utility functions with zero WASM dependency.\n// Adapted to use simple errors instead of RelayerErrorBase hierarchy.\n\n////////////////////////////////////////////////////////////////////////////////\n// Types (from types/primitives.d.ts)\n////////////////////////////////////////////////////////////////////////////////\n\nexport interface FheTypeNameToIdMap {\n  ebool: 0;\n  //euint4: 1; deprecated\n  euint8: 2;\n  euint16: 3;\n  euint32: 4;\n  euint64: 5;\n  euint128: 6;\n  eaddress: 7;\n  euint256: 8;\n}\n\nexport interface FheTypeIdToNameMap {\n  0: \"ebool\";\n  //1: 'euint4'; deprecated\n  2: \"euint8\";\n  3: \"euint16\";\n  4: \"euint32\";\n  5: \"euint64\";\n  6: \"euint128\";\n  7: \"eaddress\";\n  8: \"euint256\";\n}\n\nexport interface FheTypeEncryptionBitwidthToIdMap {\n  2: FheTypeNameToIdMap[\"ebool\"];\n  8: FheTypeNameToIdMap[\"euint8\"];\n  16: FheTypeNameToIdMap[\"euint16\"];\n  32: FheTypeNameToIdMap[\"euint32\"];\n  64: FheTypeNameToIdMap[\"euint64\"];\n  128: FheTypeNameToIdMap[\"euint128\"];\n  160: FheTypeNameToIdMap[\"eaddress\"];\n  256: FheTypeNameToIdMap[\"euint256\"];\n}\n\nexport type FheTypeIdToEncryptionBitwidthMap = {\n  [K in keyof FheTypeEncryptionBitwidthToIdMap as FheTypeEncryptionBitwidthToIdMap[K]]: K;\n};\n\ntype Prettify<T> = { [K in keyof T]: T[K] } & {};\n\nexport type FheTypeName = Prettify<keyof FheTypeNameToIdMap>;\nexport type FheTypeId = Prettify<keyof FheTypeIdToNameMap>;\nexport type EncryptionBits = Prettify<keyof FheTypeEncryptionBitwidthToIdMap>;\n\n////////////////////////////////////////////////////////////////////////////////\n// Lookup Maps\n////////////////////////////////////////////////////////////////////////////////\n\nconst MINIMUM_ENCRYPTION_BIT_WIDTH = 2;\n\nconst FheTypeNameToId: FheTypeNameToIdMap = {\n  ebool: 0,\n  //euint4: 1, deprecated\n  euint8: 2,\n  euint16: 3,\n  euint32: 4,\n  euint64: 5,\n  euint128: 6,\n  eaddress: 7,\n  euint256: 8,\n} as const;\n\nconst FheTypeIdToName: FheTypeIdToNameMap = {\n  0: \"ebool\",\n  //1: 'euint4', deprecated\n  2: \"euint8\",\n  3: \"euint16\",\n  4: \"euint32\",\n  5: \"euint64\",\n  6: \"euint128\",\n  7: \"eaddress\",\n  8: \"euint256\",\n} as const;\n\nconst FheTypeIdToEncryptionBitwidth: FheTypeIdToEncryptionBitwidthMap = {\n  0: 2,\n  //1:?, euint4 deprecated\n  2: 8,\n  3: 16,\n  4: 32,\n  5: 64,\n  6: 128,\n  7: 160,\n  8: 256,\n} as const;\n\nconst EncryptionBitwidthToFheTypeId: FheTypeEncryptionBitwidthToIdMap = {\n  2: 0,\n  8: 2,\n  16: 3,\n  32: 4,\n  64: 5,\n  128: 6,\n  160: 7,\n  256: 8,\n} as const;\n\nObject.freeze(FheTypeNameToId);\nObject.freeze(FheTypeIdToName);\nObject.freeze(FheTypeIdToEncryptionBitwidth);\nObject.freeze(EncryptionBitwidthToFheTypeId);\n\n////////////////////////////////////////////////////////////////////////////////\n// Type Guards\n////////////////////////////////////////////////////////////////////////////////\n\nexport function isFheTypeId(value: unknown): value is FheTypeId {\n  switch (value as FheTypeId) {\n    case 0:\n    case 2:\n    case 3:\n    case 4:\n    case 5:\n    case 6:\n    case 7:\n    case 8:\n      return true;\n    default:\n      return false;\n  }\n}\n\nexport function isFheTypeName(value: unknown): value is FheTypeName {\n  if (typeof value !== \"string\") {\n    return false;\n  }\n  return value in FheTypeNameToId;\n}\n\nexport function isEncryptionBits(value: unknown): value is EncryptionBits {\n  if (typeof value !== \"number\") {\n    return false;\n  }\n  return value in EncryptionBitwidthToFheTypeId;\n}\n\n////////////////////////////////////////////////////////////////////////////////\n// Converters\n////////////////////////////////////////////////////////////////////////////////\n\nexport function fheTypeIdFromEncryptionBits(bitwidth: number): FheTypeId {\n  if (!isEncryptionBits(bitwidth)) {\n    throw new Error(`Invalid encryption bits ${bitwidth}`);\n  }\n  return EncryptionBitwidthToFheTypeId[bitwidth];\n}\n\nexport function fheTypeIdFromName(name: string): FheTypeId {\n  if (!isFheTypeName(name)) {\n    throw new Error(`Invalid FheType name '${name}'`);\n  }\n  return FheTypeNameToId[name];\n}\n\nexport function fheTypeNameFromId(id: number): FheTypeName {\n  if (!isFheTypeId(id)) {\n    throw new Error(`Invalid FheType id '${id}'`);\n  }\n  return FheTypeIdToName[id];\n}\n\nexport function encryptionBitsFromFheTypeId(typeId: number): EncryptionBits {\n  if (!isFheTypeId(typeId)) {\n    throw new Error(`Invalid FheType id '${typeId}'`);\n  }\n  const bw = FheTypeIdToEncryptionBitwidth[typeId];\n  if (bw < MINIMUM_ENCRYPTION_BIT_WIDTH) {\n    throw new Error(\n      `Invalid FheType encryption bit width: ${bw}. Minimum is ${MINIMUM_ENCRYPTION_BIT_WIDTH} bits.`,\n    );\n  }\n  return bw;\n}\n\nexport function encryptionBitsFromFheTypeName(name: string): EncryptionBits {\n  if (!isFheTypeName(name)) {\n    throw new Error(`Invalid FheType name '${name}'`);\n  }\n  const bw = FheTypeIdToEncryptionBitwidth[FheTypeNameToId[name]];\n  if (bw < MINIMUM_ENCRYPTION_BIT_WIDTH) {\n    throw new Error(\n      `Invalid FheType encryption bit width: ${bw}. Minimum is ${MINIMUM_ENCRYPTION_BIT_WIDTH} bits.`,\n    );\n  }\n  return bw;\n}\n","import type { EncryptedValue } from \"../relayer/types\";\nimport { encryptionBitsFromFheTypeId, isFheTypeId } from \"./fhe-type\";\n\n/** All-zero encrypted-value sentinel — a 32-byte zero handle representing the cleartext value `0`. */\nexport const ZERO_ENCRYPTED_VALUE =\n  \"0x0000000000000000000000000000000000000000000000000000000000000000\" as const;\n\n/**\n * Check whether an encrypted value represents the zero value.\n */\nexport function isEncryptedValueZero(encryptedValue: string): boolean {\n  return encryptedValue === ZERO_ENCRYPTED_VALUE || encryptedValue === \"0x\";\n}\n\n/**\n * Per-request cleartext-bit budget enforced by the KMS gateway, mirrored from\n * `@fhevm/sdk`'s `MAX_KMS_DECRYPT_DECRYPTION_BIT_LIMIT` (protocol-level constant,\n * not imported — see {@link MAX_CONTRACTS_PER_PERMIT} for why). Internal: decrypt\n * requests are chunked to respect it automatically, so callers never need this value.\n */\nexport const MAX_DECRYPTION_REQUEST_BITS = 2048;\n\n/** Max encryption bit width among all currently-known FHE types (euint256). */\nconst MAX_KNOWN_ENCRYPTION_BITS = 256;\n\n/**\n * Cleartext bit cost of decrypting a single handle, derived from its FHE\n * type (encoded at bits 8-15 of the handle — the same layout `@fhevm/sdk`'s\n * `FhevmHandle` decodes, byte 30 of the 32-byte handle).\n *\n * Falls back to {@link MAX_KNOWN_ENCRYPTION_BITS} for an unrecognized type\n * byte, or for a value that isn't parseable hex at all, instead of throwing.\n * A real on-chain handle is always well-formed with a valid type byte, so\n * this fallback only ever fires for synthetic test/placeholder handles —\n * deliberately more permissive than the relayer's own strict validation so\n * chunking stays safe without requiring every test fixture to encode a real\n * FHE handle. Do not tighten this to match relayer semantics.\n */\nexport function encryptionBitsForHandle(encryptedValue: EncryptedValue): number {\n  let handleValue: bigint;\n  try {\n    handleValue = BigInt(encryptedValue);\n  } catch {\n    return MAX_KNOWN_ENCRYPTION_BITS;\n  }\n  const typeByte = Number((handleValue >> 8n) & 0xffn);\n  return isFheTypeId(typeByte) ? encryptionBitsFromFheTypeId(typeByte) : MAX_KNOWN_ENCRYPTION_BITS;\n}\n\n/**\n * Split `handles` into groups whose cumulative cleartext-bit cost never\n * exceeds `maxBits`, preserving input order. Unlike {@link chunkContracts}\n * (fixed-size slices), a greedy accumulate-until-exceeded walk is required\n * since per-handle cost varies by FHE type. A handle whose own cost exceeds\n * `maxBits` still gets a solo chunk — always makes forward progress.\n */\nexport function chunkHandlesByBitBudget(\n  handles: readonly EncryptedValue[],\n  maxBits: number = MAX_DECRYPTION_REQUEST_BITS,\n): EncryptedValue[][] {\n  const chunks: EncryptedValue[][] = [];\n  let current: EncryptedValue[] = [];\n  let currentBits = 0;\n\n  for (const handle of handles) {\n    const bits = encryptionBitsForHandle(handle);\n    if (current.length > 0 && currentBits + bits > maxBits) {\n      chunks.push(current);\n      current = [];\n      currentBits = 0;\n    }\n    current.push(handle);\n    currentBits += bits;\n  }\n  if (current.length > 0) {\n    chunks.push(current);\n  }\n  return chunks;\n}\n","import {\n  ChainMismatchError,\n  SignerNotConfiguredError,\n  WalletAccountNotReadyError,\n} from \"../errors\";\nimport type { GenericProvider, GenericSigner, WalletAccount } from \"../types\";\n\n/**\n * Pre-flight guard for signer-required operations. Resolves the connected\n * wallet account (refreshing once if the signer reports it isn't ready) and\n * verifies the signer's chain matches the provider's.\n *\n * @internal\n */\nexport async function requireAlignedWalletAccount(\n  operation: string,\n  signer: GenericSigner | undefined,\n  provider: GenericProvider,\n): Promise<WalletAccount> {\n  if (!signer) {\n    throw new SignerNotConfiguredError(operation);\n  }\n  let account: WalletAccount;\n  try {\n    account = signer.requireWalletAccount(operation);\n  } catch (error) {\n    if (!(error instanceof WalletAccountNotReadyError) || !signer.refreshWalletAccount) {\n      throw error;\n    }\n    await signer.refreshWalletAccount();\n    account = signer.requireWalletAccount(operation);\n  }\n  const providerChainId = await provider.getChainId();\n  if (account.chainId !== providerChainId) {\n    throw new ChainMismatchError({ operation, signerChainId: account.chainId, providerChainId });\n  }\n  return account;\n}\n\n/**\n * Variant of {@link requireAlignedWalletAccount} that returns only the aligned\n * chain ID. Useful when a write path only needs to ensure signer/provider\n * coherence and doesn't otherwise consume the account.\n *\n * @internal\n */\nexport async function requireChainAlignment(\n  operation: string,\n  signer: GenericSigner | undefined,\n  provider: GenericProvider,\n): Promise<number> {\n  return (await requireAlignedWalletAccount(operation, signer, provider)).chainId;\n}\n","import type { Address } from \"viem\";\nimport { getAddress } from \"viem\";\nimport {\n  BalanceCheckUnavailableError,\n  InsufficientConfidentialBalanceError,\n  ZamaError,\n} from \"../errors\";\nimport type { GenericProvider, GenericSigner } from \"../types\";\nimport { requireAlignedWalletAccount } from \"./alignment\";\n\n/**\n * Pre-flight for a write that would silently move zero on a short balance:\n * decrypt the connected account's balance on `tokenAddress` and throw if it\n * is below `amount`. Decrypting can prompt for a permit signature when none\n * is cached. A failure that is not already a typed SDK error surfaces as\n * {@link BalanceCheckUnavailableError}.\n *\n * @internal\n */\nexport async function assertConfidentialBalance(params: {\n  operation: string;\n  tokenAddress: Address;\n  amount: bigint;\n  signer: GenericSigner | undefined;\n  provider: GenericProvider;\n  readBalance: (owner: Address) => Promise<bigint>;\n}): Promise<void> {\n  const { operation, tokenAddress, amount, signer, provider, readBalance } = params;\n  if (amount === 0n) {\n    return;\n  }\n\n  let balance: bigint;\n  try {\n    const account = await requireAlignedWalletAccount(operation, signer, provider);\n    balance = await readBalance(getAddress(account.address));\n  } catch (error) {\n    if (error instanceof ZamaError) {\n      throw error;\n    }\n    throw new BalanceCheckUnavailableError(`Balance validation failed (token: ${tokenAddress})`, {\n      cause: error,\n    });\n  }\n\n  if (balance < amount) {\n    throw new InsufficientConfidentialBalanceError(\n      `Insufficient confidential balance: requested ${amount}, available ${balance} (token: ${tokenAddress})`,\n      { requested: amount, available: balance, token: tokenAddress },\n    );\n  }\n}\n","/**\n * Execute an array of async thunks with bounded concurrency.\n * Defaults to `Infinity` (equivalent to `Promise.all`).\n */\nexport async function pLimit<T>(\n  fns: (() => Promise<T>)[],\n  maxConcurrency = Infinity,\n): Promise<T[]> {\n  if (Number.isFinite(maxConcurrency) && maxConcurrency <= 0) {\n    throw new Error(\"maxConcurrency must be a positive number\");\n  }\n  if (!Number.isFinite(maxConcurrency) || maxConcurrency >= fns.length) {\n    return Promise.all(fns.map((f) => f()));\n  }\n\n  const results: T[] = Array.from({ length: fns.length });\n  let index = 0;\n\n  async function worker() {\n    while (index < fns.length) {\n      const i = index++;\n      if (fns[i]) {\n        results[i] = await fns[i]();\n      }\n    }\n  }\n\n  await Promise.all(Array.from({ length: maxConcurrency }, worker));\n  return results;\n}\n","import type { Hex } from \"viem\";\nimport { TransactionRevertedError, ZamaError } from \"../errors\";\nimport type { TransactionOperation, ZamaSDKEventInput } from \"../events/sdk-events\";\nimport { transactionOperationMetadata, ZamaSDKEvents } from \"../events/sdk-events\";\nimport type {\n  GenericLogger,\n  GenericProvider,\n  GenericSigner,\n  TransactionResult,\n  WriteContractConfig,\n} from \"../types\";\nimport { swallow } from \"./swallow\";\n\n/**\n * Shared write-transaction pipeline for SDK calls that submit a transaction.\n *\n * On success: writes the tx, emits the per-operation submitted event from\n * {@link transactionOperationMetadata}, fires `onSubmitted`, waits for the\n * receipt, and returns `{ txHash, receipt }`.\n *\n * On failure: emits a {@link ZamaSDKEvents.TransactionError} event with the\n * transaction-level error it will throw, then throws it. Existing `ZamaError`\n * instances are rethrown as-is; all other failures are wrapped in\n * `TransactionRevertedError` with the original error as `cause`.\n */\nexport async function submitTransaction(params: {\n  operation: TransactionOperation;\n  signer: GenericSigner;\n  provider: GenericProvider;\n  config: WriteContractConfig;\n  emit: (input: ZamaSDKEventInput) => void;\n  onSubmitted?: (txHash: Hex) => void;\n  logger: GenericLogger;\n}): Promise<TransactionResult> {\n  const { operation, signer, provider, config, emit, onSubmitted, logger } = params;\n  const metadata = transactionOperationMetadata[operation];\n\n  try {\n    const txHash = await signer.writeContract(config);\n    emit(metadata.submittedEvent(txHash));\n    void swallow(`${operation}: onSubmitted`, () => onSubmitted?.(txHash), logger);\n    const receipt = await provider.waitForTransactionReceipt(txHash);\n    return { txHash, receipt };\n  } catch (error) {\n    const failure =\n      error instanceof ZamaError\n        ? error\n        : new TransactionRevertedError(`Transaction failed during ${operation}`, { cause: error });\n\n    emit({ type: ZamaSDKEvents.TransactionError, operation, error: failure });\n    throw failure;\n  }\n}\n","import { type Address, getAddress, type Hex } from \"viem\";\nimport {\n  confidentialBalanceOfContract,\n  confidentialTransferAndCallContract,\n  confidentialTransferContract,\n  confidentialTransferFromAndCallContract,\n  confidentialTransferFromContract,\n  decimalsContract,\n  ERC7984_INTERFACE_ID,\n  ERC7984_WRAPPER_INTERFACE_ID,\n  isOperatorContract,\n  nameContract,\n  setOperatorContract,\n  supportsInterfaceContract,\n  symbolContract,\n} from \"../contracts\";\nimport {\n  ConfigurationError,\n  DecryptionFailedError,\n  EncryptionFailedError,\n  isFatalBatchError,\n  requireConfigured,\n  ZamaError,\n} from \"../errors\";\nimport type { TransactionOperation, ZamaSDKEventInput } from \"../events/sdk-events\";\nimport type { EncryptedValue } from \"../relayer/types\";\nimport { toError } from \"../utils\";\nimport { requireAlignedWalletAccount, requireChainAlignment } from \"../utils/alignment\";\nimport { assertConfidentialBalance } from \"../utils/assert-balance\";\nimport type { TelemetryOperation } from \"../telemetry\";\nimport { assertBigint } from \"../utils/assertions\";\nimport { pLimit } from \"../utils/concurrency\";\nimport { isEncryptedValueZero } from \"../utils/handles\";\nimport { submitTransaction as submitSdkTransaction } from \"../utils/submit-transaction\";\nimport { swallow } from \"../utils/swallow\";\nimport type {\n  GenericSigner,\n  TransactionResult,\n  TransferCallbacks,\n  TransferOptions,\n  WriteContractConfig,\n} from \"../types\";\nimport type { ZamaSDK } from \"../zama-sdk\";\n\n/** Options for {@link Token.batchDecryptBalancesAs}. */\nexport interface BatchDecryptAsOptions {\n  /** The address of the account that delegated decryption rights. */\n  delegatorAddress: Address;\n  /** Pre-fetched encrypted values. When omitted, they are fetched from the chain. */\n  encryptedValues?: EncryptedValue[];\n  /**\n   * The account whose on-chain balance to read. Defaults to the delegator\n   * address, which is the common case (the delegator grants permission to\n   * decrypt their own balance). Only set this when the account differs\n   * from the delegator.\n   *\n   * Matches the `account` parameter of `confidentialBalanceOf(account)` on-chain.\n   */\n  accountAddress?: Address;\n  /** Maximum number of concurrent decrypt calls. Default: 10. */\n  maxConcurrency?: number;\n  /** Called when decryption fails for a single token. Return a fallback bigint. */\n  onError?: (error: Error, address: Address) => bigint;\n}\n\n/** Result of {@link Token.batchBalancesOf}. */\nexport interface BatchBalancesResult {\n  /** Successfully decrypted balances, keyed by token address. */\n  results: Map<Address, bigint>;\n  /** Per-token errors for tokens that failed to decrypt. */\n  errors: Map<Address, ZamaError>;\n}\n\n/**\n * High-level interface for an ERC-7984 confidential token.\n * Hides FHE complexity (encryption, decryption, EIP-712 signing) behind\n * familiar ERC-20-like methods.\n *\n * For ERC-7984 wrappers (shield/unshield), use {@link WrappedToken} instead —\n * it extends `Token` with wrapper-specific operations.\n *\n * Decryption, credentials, caching, and event emission are handled by the\n * owning {@link ZamaSDK} — this class only exposes token-scoped helpers\n * that delegate to `sdk.decryption.decryptValues` and `sdk.permits.grantPermit`.\n */\nexport class Token {\n  /** The SDK instance this token operates through. */\n  readonly sdk: ZamaSDK;\n  /** Checksummed address of the confidential token contract. */\n  readonly address: Address;\n\n  constructor(sdk: ZamaSDK, address: Address) {\n    this.sdk = sdk;\n    this.address = getAddress(address);\n  }\n\n  /** Resolve `sdk.signer` or throw {@link SignerNotConfiguredError} tagged with `operation`. */\n  #requireSigner(operation: string): GenericSigner {\n    return requireConfigured(this.sdk.signer, operation);\n  }\n\n  // METADATA\n\n  /** Read the token name from the contract. */\n  async name(): Promise<string> {\n    return this.sdk.provider.readContract(nameContract(this.address));\n  }\n\n  /** Read the token symbol from the contract. */\n  async symbol(): Promise<string> {\n    return this.sdk.provider.readContract(symbolContract(this.address));\n  }\n\n  /** Read the token decimals from the contract. */\n  async decimals(): Promise<number> {\n    return this.sdk.provider.readContract(decimalsContract(this.address));\n  }\n\n  // ERC-165 DISCOVERY\n\n  /**\n   * ERC-165 check for {@link ERC7984_INTERFACE_ID} support.\n   *\n   * @returns `true` if the contract implements the ERC-7984 confidential token interface.\n   */\n  async isConfidential(): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      supportsInterfaceContract(this.address, ERC7984_INTERFACE_ID),\n    );\n  }\n\n  /**\n   * ERC-165 check for IERC7984ERC20Wrapper support.\n   *\n   * @returns `true` if the contract implements the ERC-7984 wrapper interface\n   *   ({@link ERC7984_WRAPPER_INTERFACE_ID}, `0x1f1c62b2`).\n   */\n  async isWrapper(): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      supportsInterfaceContract(this.address, ERC7984_WRAPPER_INTERFACE_ID),\n    );\n  }\n\n  // BALANCES\n\n  /**\n   * Decrypt and return the plaintext balance for the given owner.\n   * Acquires FHE credentials via a wallet signature if none are cached.\n   *\n   * @param owner - Balance owner address.\n   * @returns The decrypted plaintext balance as a bigint.\n   * @throws if FHE decryption fails. {@link DecryptionFailedError}\n   *\n   * @example\n   * ```ts\n   * const balance = await token.balanceOf(\"0xOwner\");\n   * ```\n   */\n  async balanceOf(owner: Address): Promise<bigint> {\n    return this.decryptBalance(owner, \"balance-of\");\n  }\n\n  /**\n   * {@link balanceOf} with the telemetry label of the public method that needs the balance.\n   *\n   * @internal\n   */\n  async decryptBalance(owner: Address, telemetryOperation: TelemetryOperation): Promise<bigint> {\n    const ownerAddress = getAddress(owner);\n    const encryptedValue = await this.readConfidentialBalanceOf(ownerAddress);\n    const result = await this.sdk.decryption.decryptValues(\n      [{ encryptedValue, contractAddress: this.address }],\n      { operation: telemetryOperation },\n    );\n    const value = result[encryptedValue];\n    if (value === undefined) {\n      throw new DecryptionFailedError(`Decryption returned no value for ${encryptedValue}`);\n    }\n    assertBigint(value, \"balanceOf: result[encryptedValue]\");\n    return value;\n  }\n\n  /**\n   * Return the raw encrypted balance without decrypting.\n   *\n   * @param owner - Balance owner address.\n   * @returns The encrypted balance as a hex string.\n   *\n   * @example\n   * ```ts\n   * const encryptedValue = await token.confidentialBalanceOf(\"0xOwner\");\n   * ```\n   */\n  async confidentialBalanceOf(owner: Address): Promise<EncryptedValue> {\n    return this.readConfidentialBalanceOf(getAddress(owner));\n  }\n\n  /**\n   * Decrypt the balance of a delegator using delegated decryption credentials.\n   * The connected signer acts as the delegatee who has been granted permission\n   * by the delegator to decrypt their balance.\n   *\n   * Clear values are cached in storage keyed by `(account, token, encryptedValue)`.\n   * Because every on-chain balance change produces a new encrypted value,\n   * stale cache entries are never served. Cache write failures are silently\n   * ignored — they do not affect the returned value.\n   *\n   * @param delegatorAddress - The address of the account that delegated decryption rights.\n   * @param accountAddress - The account whose on-chain balance to read. Defaults\n   *   to the delegator address.\n   * @returns The decrypted plaintext balance as a bigint.\n   * @throws if no active delegation exists. {@link DelegationNotFoundError}\n   * @throws if the delegation has expired. {@link DelegationExpiredError}\n   * @throws if delegated decryption fails. {@link DecryptionFailedError}\n   *\n   * @example\n   * ```ts\n   * const balance = await token.decryptBalanceAs({\n   *   delegatorAddress: \"0xDelegator\",\n   * });\n   * ```\n   */\n  async decryptBalanceAs({\n    delegatorAddress,\n    accountAddress,\n  }: {\n    delegatorAddress: Address;\n    accountAddress?: Address;\n  }): Promise<bigint> {\n    await requireChainAlignment(\"decryptBalanceAs\", this.sdk.signer, this.sdk.provider);\n    const normalizedDelegator = getAddress(delegatorAddress);\n    const normalizedAccount = accountAddress ? getAddress(accountAddress) : normalizedDelegator;\n\n    const encryptedValue = await this.readConfidentialBalanceOf(normalizedAccount);\n    if (isEncryptedValueZero(encryptedValue)) {\n      return 0n;\n    }\n\n    const result = await this.sdk.decryption.delegatedDecryptValues(\n      [{ encryptedValue, contractAddress: this.address }],\n      normalizedDelegator,\n      normalizedAccount,\n      { operation: \"decrypt-balance-as\" },\n    );\n\n    const value = result[encryptedValue];\n    if (value === undefined) {\n      throw new DecryptionFailedError(\n        `Delegated decryption returned no value for ${encryptedValue}`,\n      );\n    }\n    assertBigint(value, \"decryptBalanceAs: result[encryptedValue]\");\n    return value;\n  }\n\n  // BATCH STATICS\n\n  /**\n   * Decrypt confidential balances for multiple tokens in parallel, returning\n   * successes and per-token errors separately. Pre-authorizes all token\n   * addresses in a single wallet signature, then delegates each decrypt to\n   * `sdk.decryption.decryptValues`.\n   *\n   * Tokens that fail to decrypt land in `errors`; the batch keeps going.\n   *\n   * @param tokens - Array of {@link Token} instances bound to the same SDK.\n   * @param owner - Balance owner address.\n   * @returns `{ results, errors }` partitioning the per-token outcomes.\n   * @throws A failure that affects the whole session (rejected signature,\n   * misconfiguration, RPC rate limit, key unwrapping failure, revoked KMS\n   * context) rejects the call instead of landing in `errors`.\n   *\n   * @example\n   * ```ts\n   * const { results, errors } = await Token.batchBalancesOf(tokens, owner);\n   * ```\n   */\n  static async batchBalancesOf(tokens: Token[], owner: Address): Promise<BatchBalancesResult> {\n    const results = new Map<Address, bigint>();\n    const errors = new Map<Address, ZamaError>();\n    if (tokens.length === 0) {\n      return { results, errors };\n    }\n\n    const sdk = Token.assertSameSdk(tokens);\n    // Fail fast on chain mismatch before prompting the wallet for a signature.\n    await requireChainAlignment(\"batchBalancesOf\", sdk.signer, sdk.provider);\n    // Pre-authorize the full token set in one wallet signature so subsequent\n    // per-token decryptValues calls reuse the cached credentials.\n    await sdk.permits.grantPermit(tokens.map((t) => t.address));\n\n    // `pLimit` cannot cancel calls that already started. The shared flag stops\n    // the queued tokens from starting once a fatal error is seen, so they do\n    // not each trigger their own recovery wallet prompt.\n    let aborted = false;\n    let fatal: unknown;\n\n    const outcomes = await pLimit(\n      tokens.map((t) => async () => {\n        if (aborted) {\n          return { status: \"aborted\" as const };\n        }\n        try {\n          return {\n            status: \"fulfilled\" as const,\n            value: await t.decryptBalance(owner, \"batch-balances-of\"),\n          };\n        } catch (reason) {\n          // A fatal error (rejected signature, revoked KMS context, rate\n          // limit) would fail every token: stop the batch.\n          if (isFatalBatchError(reason)) {\n            aborted = true;\n            fatal ??= reason;\n            return { status: \"aborted\" as const };\n          }\n          return { status: \"rejected\" as const, reason };\n        }\n      }),\n      5,\n    );\n\n    // Some tokens were never attempted after the abort, so a partial result\n    // would be wrong: reject the whole call.\n    if (fatal !== undefined) {\n      throw fatal;\n    }\n\n    for (let i = 0; i < tokens.length; i++) {\n      const tokenAddress = tokens[i]!.address;\n      const outcome = outcomes[i]!;\n      if (outcome.status === \"aborted\") {\n        continue;\n      }\n      if (outcome.status === \"fulfilled\") {\n        results.set(tokenAddress, outcome.value);\n      } else {\n        const reason = outcome.reason;\n        const error =\n          reason instanceof ZamaError\n            ? reason\n            : new DecryptionFailedError(toError(reason).message, { cause: reason });\n        errors.set(tokenAddress, error);\n      }\n    }\n\n    // Total failure: surface the first error so callers know nothing decrypted.\n    if (errors.size === tokens.length) {\n      const firstError = errors.values().next().value;\n      throw firstError ?? new DecryptionFailedError(\"All token balance decryptions failed\");\n    }\n\n    return { results, errors };\n  }\n\n  /**\n   * Batch decrypt confidential balances as a delegate across multiple tokens.\n   * Mirrors {@link batchBalancesOf} but uses delegated credentials.\n   *\n   * **Error handling:** If a per-token decryption fails and no `onError` callback\n   * is provided, errors are collected and thrown as an aggregated\n   * `DecryptionFailedError`. When the relayer returns no value for an encrypted value,\n   * a `DecryptionFailedError` is thrown for that token (never silently returns `0n`).\n   * Pass `onError: () => 0n` to opt into the silent zero behavior.\n   *\n   * @param tokens - Array of Token instances to decrypt balances for.\n   * @param options - Delegated decryption configuration.\n   * @returns A Map from token address to decrypted balance.\n   * @throws if no active delegation exists. {@link DelegationNotFoundError}\n   * @throws if the delegation has expired. {@link DelegationExpiredError}\n   * @throws if any decryption fails and no `onError` is provided. {@link DecryptionFailedError}\n   * @throws A failure that affects the whole session (rejected signature, RPC\n   * rate limit, revoked KMS context) rejects the call even when `onError` is\n   * provided.\n   *\n   * @example\n   * ```ts\n   * const balances = await Token.batchDecryptBalancesAs(tokens, {\n   *   delegatorAddress: \"0xDelegator\",\n   *   onError: (err, addr) => { console.error(addr, err); return 0n; },\n   * });\n   * ```\n   */\n  static async batchDecryptBalancesAs(\n    tokens: Token[],\n    options: BatchDecryptAsOptions,\n  ): Promise<Map<Address, bigint>> {\n    if (tokens.length === 0) {\n      return new Map();\n    }\n\n    const sdk = Token.assertSameSdk(tokens);\n    const results = new Map<Address, bigint>();\n    const errors = new Map<Address, ZamaError>();\n    const normalizedAccount = options.accountAddress\n      ? getAddress(options.accountAddress)\n      : getAddress(options.delegatorAddress);\n    const maxConcurrency = options.maxConcurrency ?? 10;\n    if (options.encryptedValues && tokens.length !== options.encryptedValues.length) {\n      throw new DecryptionFailedError(\n        `tokens.length (${tokens.length}) must equal encryptedValues.length (${options.encryptedValues.length})`,\n      );\n    }\n    const resolvedEncryptedValues =\n      options.encryptedValues ??\n      (await Token.readBalanceHandlesBatch(tokens, normalizedAccount, errors, maxConcurrency));\n\n    const decryptRequests: Array<{ token: Token; encryptedValue: EncryptedValue }> = [];\n    for (const [index, token] of tokens.entries()) {\n      const encryptedValue = resolvedEncryptedValues[index];\n      if (!encryptedValue || errors.has(token.address)) {\n        continue;\n      }\n      if (isEncryptedValueZero(encryptedValue)) {\n        // Zero balance → skip the relayer; no decryption needed.\n        results.set(token.address, 0n);\n      } else {\n        decryptRequests.push({ token, encryptedValue });\n      }\n    }\n\n    if (decryptRequests.length > 0) {\n      const decrypted = await sdk.decryption.delegatedBatchDecryptValues({\n        encryptedInputs: decryptRequests.map(({ token, encryptedValue }) => ({\n          encryptedValue,\n          contractAddress: token.address,\n        })),\n        delegatorAddress: options.delegatorAddress,\n        accountAddress: options.accountAddress,\n        maxConcurrency,\n        operation: \"batch-decrypt-balances-as\",\n      });\n\n      for (const [index, item] of decrypted.items.entries()) {\n        const request = decryptRequests[index];\n        if (!request) {\n          continue;\n        }\n        if (item.error) {\n          errors.set(request.token.address, item.error);\n          continue;\n        }\n        const value = item.value;\n        if (value === undefined) {\n          errors.set(\n            request.token.address,\n            new DecryptionFailedError(\n              `Batch delegated decryption returned no value for ${item.encryptedValue} on token ${request.token.address}`,\n            ),\n          );\n          continue;\n        }\n        assertBigint(value, \"batchDecryptBalancesAs: result[encryptedValue]\");\n        results.set(request.token.address, value);\n      }\n    }\n\n    if (errors.size === 0) {\n      return results;\n    }\n\n    if (options.onError) {\n      const callbackErrors: Array<{ address: Address; error: Error }> = [];\n      for (const [address, error] of errors) {\n        try {\n          results.set(address, options.onError(error, address));\n        } catch (callbackError) {\n          callbackErrors.push({ address, error: toError(callbackError) });\n        }\n      }\n      if (callbackErrors.length > 0) {\n        const message = callbackErrors\n          .map(({ address, error }) => `${address}: ${error.message}`)\n          .join(\"; \");\n        throw new DecryptionFailedError(\n          `Batch delegated decryption onError callback failed for ${callbackErrors.length} token(s): ${message}`,\n          { cause: callbackErrors[0]?.error },\n        );\n      }\n      return results;\n    }\n\n    const errorEntries = Array.from(errors.entries());\n    const message = errorEntries.map(([addr, e]) => `${addr}: ${e.message}`).join(\"; \");\n    throw new DecryptionFailedError(\n      `Batch delegated decryption failed for ${errors.size} token(s): ${message}`,\n      { cause: errorEntries[0]?.[1] },\n    );\n  }\n\n  private static async readBalanceHandlesBatch(\n    tokens: Token[],\n    accountAddress: Address,\n    errors: Map<Address, ZamaError>,\n    maxConcurrency: number,\n  ): Promise<Array<EncryptedValue | undefined>> {\n    // `pLimit` cannot cancel calls that already started. The shared flag stops\n    // the queued tokens from re-hitting an endpoint that already failed for\n    // the whole batch.\n    let aborted = false;\n    let fatal: unknown;\n\n    const outcomes = await pLimit(\n      tokens.map((token) => async () => {\n        if (aborted) {\n          return { status: \"aborted\" as const };\n        }\n        try {\n          return {\n            status: \"fulfilled\" as const,\n            value: await token.readConfidentialBalanceOf(accountAddress),\n          };\n        } catch (reason) {\n          if (isFatalBatchError(reason)) {\n            aborted = true;\n            fatal ??= reason;\n            return { status: \"aborted\" as const };\n          }\n          return { status: \"rejected\" as const, reason };\n        }\n      }),\n      maxConcurrency,\n    );\n\n    if (fatal !== undefined) {\n      throw fatal;\n    }\n\n    const encryptedValues: Array<EncryptedValue | undefined> = [];\n    for (const [index, token] of tokens.entries()) {\n      const outcome = outcomes[index];\n      if (!outcome || outcome.status === \"aborted\") {\n        continue;\n      }\n      if (outcome.status === \"fulfilled\") {\n        encryptedValues[index] = outcome.value;\n        continue;\n      }\n      errors.set(\n        token.address,\n        outcome.reason instanceof ZamaError\n          ? outcome.reason\n          : new DecryptionFailedError(toError(outcome.reason).message, { cause: outcome.reason }),\n      );\n    }\n    return encryptedValues;\n  }\n\n  // WRITE OPERATIONS\n\n  /**\n   * Confidential transfer. Encrypts the amount via FHE, then calls the contract.\n   *\n   * By default, the SDK validates the confidential balance before submitting.\n   * If a cached plaintext balance exists it is used; otherwise, if credentials\n   * are cached, it decrypts on the fly. Set `skipBalanceCheck: true` to bypass\n   * this validation (e.g. for smart wallets).\n   *\n   * @param to - Recipient address.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param options - Optional: `skipBalanceCheck` (default `false`).\n   * @returns The transaction hash and mined receipt.\n   * @throws if signer and provider are on different chains. {@link ChainMismatchError}\n   * @throws if the balance is less than `amount`. {@link InsufficientConfidentialBalanceError}\n   * @throws if balance validation requires decryption that is not possible. {@link BalanceCheckUnavailableError}\n   * @throws if FHE encryption fails. {@link EncryptionFailedError}\n   * @throws if the on-chain transfer reverts. {@link TransactionRevertedError}\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransfer(\"0xRecipient\", 1000n);\n   * ```\n   */\n  async confidentialTransfer(\n    to: Address,\n    amount: bigint,\n    options?: TransferOptions,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransfer\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransfer\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const { skipBalanceCheck = false, onEncryptComplete, onTransferSubmitted } = options ?? {};\n\n    const normalizedTo = getAddress(to);\n\n    if (!skipBalanceCheck) {\n      await this.assertConfidentialBalance(amount, \"confidential-transfer\");\n    }\n\n    const { encryptedValues, inputProof } = await this.sdk.encrypt(\n      {\n        values: [{ value: amount, type: \"euint64\" }],\n        contractAddress: this.address,\n        userAddress: getAddress(account.address),\n      },\n      { operation: \"confidential-transfer\" },\n    );\n    void swallow(\"transfer: onEncryptComplete\", () => onEncryptComplete?.(), this.sdk.logger);\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transfer\",\n      config: confidentialTransferContract(\n        this.address,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n      ),\n      onSubmitted: onTransferSubmitted,\n    });\n  }\n\n  /**\n   * Operator encrypted transfer on behalf of another address.\n   * The caller must be an approved operator for `from`.\n   *\n   * @param from - The address to transfer from (caller must be an approved operator).\n   * @param to - Recipient address.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferFrom(\"0xFrom\", \"0xTo\", 500n);\n   * ```\n   */\n  async confidentialTransferFrom(\n    from: Address,\n    to: Address,\n    amount: bigint,\n    callbacks?: TransferCallbacks,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferFrom\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferFrom\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const normalizedFrom = getAddress(from);\n    const normalizedTo = getAddress(to);\n\n    // The input proof is verified against msg.sender, so it binds to the caller, not `from`.\n    const { encryptedValues, inputProof } = await this.sdk.encrypt(\n      {\n        values: [{ value: amount, type: \"euint64\" }],\n        contractAddress: this.address,\n        userAddress: getAddress(account.address),\n      },\n      { operation: \"confidential-transfer-from\" },\n    );\n    void swallow(\n      \"transferFrom: onEncryptComplete\",\n      () => callbacks?.onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferFrom\",\n      config: confidentialTransferFromContract(\n        this.address,\n        normalizedFrom,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n      ),\n      onSubmitted: callbacks?.onTransferSubmitted,\n    });\n  }\n\n  /**\n   * ERC-7984 `confidentialTransferAndCall`: encrypted transfer that also invokes\n   * the recipient's receiver hook (`onConfidentialTransferReceived`) in a single\n   * transaction. The caller crafts the opaque `data` payload — the SDK does not\n   * encode, validate, or interpret it.\n   *\n   * Balance validation follows the same rules as {@link Token.confidentialTransfer}.\n   *\n   * @param to - Recipient address. Must implement the ERC-7984 receiver hook.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param data - Opaque bytes forwarded to the recipient's receiver hook.\n   * @param options - Optional: `skipBalanceCheck` (default `false`).\n   * @returns The transaction hash and mined receipt.\n   *\n   * @throws if signer and provider are on different chains. {@link ChainMismatchError}\n   * @throws if the balance is less than `amount`. {@link InsufficientConfidentialBalanceError}\n   * @throws if balance validation requires decryption that is not possible. {@link BalanceCheckUnavailableError}\n   * @throws if FHE encryption fails. {@link EncryptionFailedError}\n   * @throws if the on-chain transfer reverts. {@link TransactionRevertedError}\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferAndCall(\n   *   \"0xRecipient\",\n   *   1000n,\n   *   \"0xabcd\", // caller-encoded payload forwarded to the receiver hook\n   * );\n   * ```\n   */\n  async confidentialTransferAndCall(\n    to: Address,\n    amount: bigint,\n    data: Hex,\n    options?: TransferOptions,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferAndCall\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferAndCall\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const { skipBalanceCheck = false, onEncryptComplete, onTransferSubmitted } = options ?? {};\n\n    const normalizedTo = getAddress(to);\n\n    if (!skipBalanceCheck) {\n      await this.assertConfidentialBalance(amount, \"confidential-transfer-and-call\");\n    }\n\n    const { encryptedValues, inputProof } = await this.sdk.encrypt(\n      {\n        values: [{ value: amount, type: \"euint64\" }],\n        contractAddress: this.address,\n        userAddress: getAddress(account.address),\n      },\n      { operation: \"confidential-transfer-and-call\" },\n    );\n    void swallow(\n      \"transferAndCall: onEncryptComplete\",\n      () => onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferAndCall\",\n      config: confidentialTransferAndCallContract(\n        this.address,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n        data,\n      ),\n      onSubmitted: onTransferSubmitted,\n    });\n  }\n\n  /**\n   * ERC-7984 `confidentialTransferFromAndCall`: operator-initiated encrypted\n   * transfer that also invokes the recipient's receiver hook in a single\n   * transaction. The caller must be an approved operator for `from` and crafts\n   * the opaque `data` payload — the SDK does not encode or interpret it.\n   *\n   * @param from - The address to transfer from (caller must be an approved operator).\n   * @param to - Recipient address. Must implement the ERC-7984 receiver hook.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param data - Opaque bytes forwarded to the recipient's receiver hook.\n   * @param callbacks - Optional progress callbacks.\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferFromAndCall(\n   *   \"0xFrom\",\n   *   \"0xRecipient\",\n   *   500n,\n   *   \"0xabcd\",\n   * );\n   * ```\n   */\n  async confidentialTransferFromAndCall(\n    from: Address,\n    to: Address,\n    amount: bigint,\n    data: Hex,\n    callbacks?: TransferCallbacks,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferFromAndCall\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferFromAndCall\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const normalizedFrom = getAddress(from);\n    const normalizedTo = getAddress(to);\n\n    // The input proof is verified against msg.sender, so it binds to the caller, not `from`.\n    const { encryptedValues, inputProof } = await this.sdk.encrypt(\n      {\n        values: [{ value: amount, type: \"euint64\" }],\n        contractAddress: this.address,\n        userAddress: getAddress(account.address),\n      },\n      { operation: \"confidential-transfer-from-and-call\" },\n    );\n    void swallow(\n      \"transferFromAndCall: onEncryptComplete\",\n      () => callbacks?.onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferFromAndCall\",\n      config: confidentialTransferFromAndCallContract(\n        this.address,\n        normalizedFrom,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n        data,\n      ),\n      onSubmitted: callbacks?.onTransferSubmitted,\n    });\n  }\n\n  // OPERATOR APPROVAL\n\n  /**\n   * Set operator approval for the confidential token.\n   * Defaults to 1 hour from now if `until` is not specified.\n   *\n   * @param operator - The address to set as an operator.\n   * @param until - Optional Unix timestamp for approval expiry. Defaults to now + 1 hour.\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.setOperator(\"0xOperator\");\n   * ```\n   */\n  async setOperator(operator: Address, until?: number): Promise<TransactionResult> {\n    this.#requireSigner(\"setOperator\");\n    await requireChainAlignment(\"setOperator\", this.sdk.signer, this.sdk.provider);\n    const normalizedOperator = getAddress(operator);\n    return this.submitTransaction({\n      operation: \"setOperator\",\n      config: setOperatorContract(this.address, normalizedOperator, until),\n    });\n  }\n\n  /**\n   * Check if a spender is an approved operator for a given holder.\n   *\n   * @param holder - The token holder address.\n   * @param spender - The address to check operator approval for.\n   * @returns `true` if the spender is an approved operator for the holder.\n   *\n   * @example\n   * ```ts\n   * if (await token.isOperator(\"0xHolder\", \"0xSpender\")) {\n   *   // spender can call transferFrom on behalf of holder\n   * }\n   * ```\n   */\n  async isOperator(holder: Address, spender: Address): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      isOperatorContract(this.address, getAddress(holder), getAddress(spender)),\n    );\n  }\n\n  // PROTECTED HELPERS\n\n  /**\n   * Read the on-chain encrypted balance for a given owner.\n   *\n   * @internal\n   */\n  protected async readConfidentialBalanceOf(owner: Address): Promise<EncryptedValue> {\n    return await this.sdk.provider.readContract(confidentialBalanceOfContract(this.address, owner));\n  }\n\n  /**\n   * Pre-flight the connected account's balance on this token before a write\n   * that would otherwise move zero on a short balance.\n   *\n   * @internal\n   */\n  protected async assertConfidentialBalance(\n    amount: bigint,\n    telemetryOperation: TelemetryOperation,\n  ): Promise<void> {\n    return assertConfidentialBalance({\n      operation: \"assertConfidentialBalance\",\n      tokenAddress: this.address,\n      amount,\n      signer: this.sdk.signer,\n      provider: this.sdk.provider,\n      readBalance: (owner) => this.decryptBalance(owner, telemetryOperation),\n    });\n  }\n\n  /**\n   * Emit a token-scoped event through the owning {@link ZamaSDK} so that\n   * subscribers see a unified stream.\n   *\n   * @internal\n   */\n  protected emit(input: ZamaSDKEventInput): void {\n    this.sdk.emitEvent(input, this.address);\n  }\n\n  /**\n   * Submit a token-scoped write transaction through the shared SDK transaction\n   * pipeline. Callers keep pre-flight and operation-specific work local.\n   *\n   * @internal\n   */\n  protected async submitTransaction(params: {\n    operation: TransactionOperation;\n    config: WriteContractConfig;\n    onSubmitted?: (txHash: Hex) => void;\n  }): Promise<TransactionResult> {\n    const { operation, config, onSubmitted } = params;\n    return submitSdkTransaction({\n      operation,\n      signer: this.#requireSigner(operation),\n      provider: this.sdk.provider,\n      config,\n      emit: (input) => this.emit(input),\n      onSubmitted,\n      logger: this.sdk.logger,\n    });\n  }\n\n  /** Verify all tokens share the same SDK instance and return it. */\n  private static assertSameSdk(tokens: Token[]): ZamaSDK {\n    const sdk = tokens[0]!.sdk;\n    for (let i = 1; i < tokens.length; i++) {\n      if (tokens[i]!.sdk !== sdk) {\n        throw new ConfigurationError(\n          \"All tokens in a batch operation must share the same ZamaSDK instance\",\n        );\n      }\n    }\n    return sdk;\n  }\n}\n"],"mappings":"+GAyBA,IAAa,EAAb,cAAuCA,EAAAA,CAAU,CAO/C,WAEA,YAAY,EAAiB,EAAkD,CAC7E,GAAM,CAAE,aAAY,GAAG,GAAiB,GAAW,CAAC,EACpD,MAAMC,EAAAA,EAAc,eAAgB,EAAS,CAAY,EACzD,KAAK,KAAO,oBACZ,KAAK,WAAa,CACpB,CACF,ECjBa,EAAb,cAAwCC,EAAAA,CAAU,CAEhD,UAEA,cAEA,gBAEA,YACE,CACE,YACA,gBACA,mBAEF,EACA,CACA,MACEC,EAAAA,EAAc,cACd,cAAc,EAAU,iFACI,EAAc,4BAA4B,EAAgB,GACtF,CACF,EACA,KAAK,KAAO,qBACZ,KAAK,UAAY,EACjB,KAAK,cAAgB,EACrB,KAAK,gBAAkB,CACzB,CACF,ECpCa,EAAb,cAA0DC,EAAAA,CAAU,CAElE,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAMC,EAAAA,EAAc,gCAAiC,EAAS,CAAO,EACrE,KAAK,KAAO,uCACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAmDD,EAAAA,CAAU,CAE3D,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAMC,EAAAA,EAAc,yBAA0B,EAAS,CAAO,EAC9D,KAAK,KAAO,gCACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAgDD,EAAAA,CAAU,CAExD,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAMC,EAAAA,EAAc,sBAAuB,EAAS,CAAO,EAC3D,KAAK,KAAO,6BACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAkDD,EAAAA,CAAU,CAC1D,YAAY,EAAiB,EAAwB,CACnD,MAAMC,EAAAA,EAAc,wBAAyB,EAAS,CAAO,EAC7D,KAAK,KAAO,8BACd,CACF,EAGa,EAAb,cAA0CD,EAAAA,CAAU,CAClD,YAAY,EAAiB,EAAwB,CACnD,MAAMC,EAAAA,EAAc,gBAAiB,EAAS,CAAO,EACrD,KAAK,KAAO,sBACd,CACF,EC3DA,SAAgB,EAAkB,EAAyB,CACzD,OACE,aAAiBC,EAAAA,GACjB,aAAiBC,EAAAA,GACjB,aAAiBC,EAAAA,GACjB,aAAiB,GACjB,aAAiBC,EAAAA,GACjB,aAAiBC,EAAAA,CAErB,CC0BA,MAEM,EAAsC,CAC1C,MAAO,EAEP,OAAQ,EACR,QAAS,EACT,QAAS,EACT,QAAS,EACT,SAAU,EACV,SAAU,EACV,SAAU,CACZ,EAEM,EAAsC,CAC1C,EAAG,QAEH,EAAG,SACH,EAAG,UACH,EAAG,UACH,EAAG,UACH,EAAG,WACH,EAAG,WACH,EAAG,UACL,EAEM,EAAkE,CACtE,EAAG,EAEH,EAAG,EACH,EAAG,GACH,EAAG,GACH,EAAG,GACH,EAAG,IACH,EAAG,IACH,EAAG,GACL,EAaA,OAAO,OAAO,CAAe,EAC7B,OAAO,OAAO,CAAe,EAC7B,OAAO,OAAO,CAA6B,EAC3C,OAAO,OAAO,CAbZ,EAAG,EACH,EAAG,EACH,GAAI,EACJ,GAAI,EACJ,GAAI,EACJ,IAAK,EACL,IAAK,EACL,IAAK,CAMO,CAA6B,EAM3C,SAAgB,EAAY,EAAoC,CAC9D,OAAQ,EAAR,CACE,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACH,MAAO,GACT,QACE,MAAO,EACX,CACF,CAyCA,SAAgB,EAA4B,EAAgC,CAC1E,GAAI,CAAC,EAAY,CAAM,EACrB,MAAU,MAAM,uBAAuB,EAAO,EAAE,EAElD,IAAM,EAAK,EAA8B,GACzC,GAAI,EAAK,EACP,MAAU,MACR,yCAAyC,EAAG,qBAC9C,EAEF,OAAO,CACT,CC3KA,SAAgB,EAAqB,EAAiC,CACpE,OAAO,IAAA,sEAA2C,IAAmB,IACvE,CA0BA,SAAgB,EAAwB,EAAwC,CAC9E,IAAI,EACJ,GAAI,CACF,EAAc,OAAO,CAAc,CACrC,MAAQ,CACN,MAAO,IACT,CACA,IAAM,EAAW,OAAQ,GAAe,GAAM,IAAK,EACnD,OAAO,EAAY,CAAQ,EAAI,EAA4B,CAAQ,EAAI,GACzE,CASA,SAAgB,EACd,EACA,EAAkB,KACE,CACpB,IAAM,EAA6B,CAAC,EAChC,EAA4B,CAAC,EAC7B,EAAc,EAElB,IAAK,IAAM,KAAU,EAAS,CAC5B,IAAM,EAAO,EAAwB,CAAM,EACvC,EAAQ,OAAS,GAAK,EAAc,EAAO,IAC7C,EAAO,KAAK,CAAO,EACnB,EAAU,CAAC,EACX,EAAc,GAEhB,EAAQ,KAAK,CAAM,EACnB,GAAe,CACjB,CAIA,OAHI,EAAQ,OAAS,GACnB,EAAO,KAAK,CAAO,EAEd,CACT,CChEA,eAAsB,EACpB,EACA,EACA,EACwB,CACxB,GAAI,CAAC,EACH,MAAM,IAAIC,EAAAA,EAAyB,CAAS,EAE9C,IAAI,EACJ,GAAI,CACF,EAAU,EAAO,qBAAqB,CAAS,CACjD,OAAS,EAAO,CACd,GAAI,EAAE,aAAiBC,EAAAA,IAA+B,CAAC,EAAO,qBAC5D,MAAM,EAER,MAAM,EAAO,qBAAqB,EAClC,EAAU,EAAO,qBAAqB,CAAS,CACjD,CACA,IAAM,EAAkB,MAAM,EAAS,WAAW,EAClD,GAAI,EAAQ,UAAY,EACtB,MAAM,IAAI,EAAmB,CAAE,YAAW,cAAe,EAAQ,QAAS,iBAAgB,CAAC,EAE7F,OAAO,CACT,CASA,eAAsB,EACpB,EACA,EACA,EACiB,CACjB,OAAQ,MAAM,EAA4B,EAAW,EAAQ,CAAQ,EAAA,CAAG,OAC1E,CCjCA,eAAsB,EAA0B,EAO9B,CAChB,GAAM,CAAE,YAAW,eAAc,SAAQ,SAAQ,WAAU,eAAgB,EAC3E,GAAI,IAAW,GACb,OAGF,IAAI,EACJ,GAAI,CAEF,EAAU,MAAM,GAAA,EAAA,EAAA,WAAA,EAAuB,MADjB,EAA4B,EAAW,EAAQ,CAAQ,EAAA,CAC9B,OAAO,CAAC,CACzD,OAAS,EAAO,CAId,MAHI,aAAiBC,EAAAA,EACb,EAEF,IAAI,EAA6B,qCAAqC,EAAa,GAAI,CAC3F,MAAO,CACT,CAAC,CACH,CAEA,GAAI,EAAU,EACZ,MAAM,IAAI,EACR,gDAAgD,EAAO,cAAc,EAAQ,WAAW,EAAa,GACrG,CAAE,UAAW,EAAQ,UAAW,EAAS,MAAO,CAAa,CAC/D,CAEJ,CC/CA,eAAsB,EACpB,EACA,EAAiB,IACH,CACd,GAAI,OAAO,SAAS,CAAc,GAAK,GAAkB,EACvD,MAAU,MAAM,0CAA0C,EAE5D,GAAI,CAAC,OAAO,SAAS,CAAc,GAAK,GAAkB,EAAI,OAC5D,OAAO,QAAQ,IAAI,EAAI,IAAK,GAAM,EAAE,CAAC,CAAC,EAGxC,IAAM,EAAe,MAAM,KAAK,CAAE,OAAQ,EAAI,MAAO,CAAC,EAClD,EAAQ,EAEZ,eAAe,GAAS,CACtB,KAAO,EAAQ,EAAI,QAAQ,CACzB,IAAM,EAAI,IACN,EAAI,KACN,EAAQ,GAAK,MAAM,EAAI,EAAE,CAAC,EAE9B,CACF,CAGA,OADA,MAAM,QAAQ,IAAI,MAAM,KAAK,CAAE,OAAQ,CAAe,EAAG,CAAM,CAAC,EACzD,CACT,CCJA,eAAsB,EAAkB,EAQT,CAC7B,GAAM,CAAE,YAAW,SAAQ,WAAU,SAAQ,OAAM,cAAa,UAAW,EACrE,EAAWC,EAAAA,EAA6B,GAE9C,GAAI,CACF,IAAM,EAAS,MAAM,EAAO,cAAc,CAAM,EAIhD,OAHA,EAAK,EAAS,eAAe,CAAM,CAAC,EACpC,EAAKC,EAAQ,GAAG,EAAU,mBAAsB,IAAc,CAAM,EAAG,CAAM,EAEtE,CAAE,SAAQ,QAAA,MADK,EAAS,0BAA0B,CAAM,CACtC,CAC3B,OAAS,EAAO,CACd,IAAM,EACJ,aAAiBC,EAAAA,EACb,EACA,IAAIC,EAAAA,EAAyB,6BAA6B,IAAa,CAAE,MAAO,CAAM,CAAC,EAG7F,MADA,EAAK,CAAE,KAAMC,EAAAA,EAAc,iBAAkB,YAAW,MAAO,CAAQ,CAAC,EAClE,CACR,CACF,CCiCA,IAAa,EAAb,MAAa,CAAM,CAEjB,IAEA,QAEA,YAAY,EAAc,EAAkB,CAC1C,KAAK,IAAM,EACX,KAAK,SAAA,EAAA,EAAA,WAAA,CAAqB,CAAO,CACnC,CAGA,GAAe,EAAkC,CAC/C,OAAOC,EAAAA,EAAkB,KAAK,IAAI,OAAQ,CAAS,CACrD,CAKA,MAAM,MAAwB,CAC5B,OAAO,KAAK,IAAI,SAAS,aAAaC,EAAAA,EAAa,KAAK,OAAO,CAAC,CAClE,CAGA,MAAM,QAA0B,CAC9B,OAAO,KAAK,IAAI,SAAS,aAAaC,EAAAA,EAAe,KAAK,OAAO,CAAC,CACpE,CAGA,MAAM,UAA4B,CAChC,OAAO,KAAK,IAAI,SAAS,aAAaC,EAAAA,EAAiB,KAAK,OAAO,CAAC,CACtE,CASA,MAAM,gBAAmC,CACvC,OAAO,KAAK,IAAI,SAAS,aACvBC,EAAAA,EAA0B,KAAK,QAASC,EAAAA,CAAoB,CAC9D,CACF,CAQA,MAAM,WAA8B,CAClC,OAAO,KAAK,IAAI,SAAS,aACvBD,EAAAA,EAA0B,KAAK,QAASE,EAAAA,CAA4B,CACtE,CACF,CAiBA,MAAM,UAAU,EAAiC,CAC/C,OAAO,KAAK,eAAe,EAAO,YAAY,CAChD,CAOA,MAAM,eAAe,EAAgB,EAAyD,CAC5F,IAAM,GAAA,EAAA,EAAA,WAAA,CAA0B,CAAK,EAC/B,EAAiB,MAAM,KAAK,0BAA0B,CAAY,EAKlE,GAAQ,MAJO,KAAK,IAAI,WAAW,cACvC,CAAC,CAAE,iBAAgB,gBAAiB,KAAK,OAAQ,CAAC,EAClD,CAAE,UAAW,CAAmB,CAClC,EAAA,CACqB,GACrB,GAAI,IAAU,IAAA,GACZ,MAAM,IAAIC,EAAAA,EAAsB,oCAAoC,GAAgB,EAGtF,OADA,EAAA,EAAa,EAAO,mCAAmC,EAChD,CACT,CAaA,MAAM,sBAAsB,EAAyC,CACnE,OAAO,KAAK,2BAAA,EAAA,EAAA,WAAA,CAAqC,CAAK,CAAC,CACzD,CA2BA,MAAM,iBAAiB,CACrB,mBACA,kBAIkB,CAClB,MAAM,EAAsB,mBAAoB,KAAK,IAAI,OAAQ,KAAK,IAAI,QAAQ,EAClF,IAAM,GAAA,EAAA,EAAA,WAAA,CAAiC,CAAgB,EACjD,EAAoB,GAAA,EAAA,EAAA,WAAA,CAA4B,CAAc,EAAI,EAElE,EAAiB,MAAM,KAAK,0BAA0B,CAAiB,EAC7E,GAAI,EAAqB,CAAc,EACrC,OAAO,GAUT,IAAM,GAAQ,MAPO,KAAK,IAAI,WAAW,uBACvC,CAAC,CAAE,iBAAgB,gBAAiB,KAAK,OAAQ,CAAC,EAClD,EACA,EACA,CAAE,UAAW,oBAAqB,CACpC,EAAA,CAEqB,GACrB,GAAI,IAAU,IAAA,GACZ,MAAM,IAAIA,EAAAA,EACR,8CAA8C,GAChD,EAGF,OADA,EAAA,EAAa,EAAO,0CAA0C,EACvD,CACT,CAwBA,aAAa,gBAAgB,EAAiB,EAA8C,CAC1F,IAAM,EAAU,IAAI,IACd,EAAS,IAAI,IACnB,GAAI,EAAO,SAAW,EACpB,MAAO,CAAE,UAAS,QAAO,EAG3B,IAAM,EAAM,EAAM,cAAc,CAAM,EAEtC,MAAM,EAAsB,kBAAmB,EAAI,OAAQ,EAAI,QAAQ,EAGvE,MAAM,EAAI,QAAQ,YAAY,EAAO,IAAK,GAAM,EAAE,OAAO,CAAC,EAK1D,IAAI,EAAU,GACV,EAEE,EAAW,MAAM,EACrB,EAAO,IAAK,GAAM,SAAY,CAC5B,GAAI,EACF,MAAO,CAAE,OAAQ,SAAmB,EAEtC,GAAI,CACF,MAAO,CACL,OAAQ,YACR,MAAO,MAAM,EAAE,eAAe,EAAO,mBAAmB,CAC1D,CACF,OAAS,EAAQ,CAQf,OALI,EAAkB,CAAM,GAC1B,EAAU,GACV,IAAU,EACH,CAAE,OAAQ,SAAmB,GAE/B,CAAE,OAAQ,WAAqB,QAAO,CAC/C,CACF,CAAC,EACD,CACF,EAIA,GAAI,IAAU,IAAA,GACZ,MAAM,EAGR,IAAK,IAAI,EAAI,EAAG,EAAI,EAAO,OAAQ,IAAK,CACtC,IAAM,EAAe,EAAO,EAAE,CAAE,QAC1B,EAAU,EAAS,GACrB,KAAQ,SAAW,UAGvB,GAAI,EAAQ,SAAW,YACrB,EAAQ,IAAI,EAAc,EAAQ,KAAK,MAClC,CACL,IAAM,EAAS,EAAQ,OACjB,EACJ,aAAkBC,EAAAA,EACd,EACA,IAAID,EAAAA,EAAsBE,EAAAA,EAAQ,CAAM,CAAC,CAAC,QAAS,CAAE,MAAO,CAAO,CAAC,EAC1E,EAAO,IAAI,EAAc,CAAK,CAChC,CACF,CAGA,GAAI,EAAO,OAAS,EAAO,OAEzB,MADmB,EAAO,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,OACtB,IAAIF,EAAAA,EAAsB,sCAAsC,EAGtF,MAAO,CAAE,UAAS,QAAO,CAC3B,CA8BA,aAAa,uBACX,EACA,EAC+B,CAC/B,GAAI,EAAO,SAAW,EACpB,OAAO,IAAI,IAGb,IAAM,EAAM,EAAM,cAAc,CAAM,EAChC,EAAU,IAAI,IACd,EAAS,IAAI,IACb,EAAoB,EAAQ,gBAAA,EAAA,EAAA,WAAA,CACnB,EAAQ,cAAc,GAAA,EAAA,EAAA,WAAA,CACtB,EAAQ,gBAAgB,EACjC,EAAiB,EAAQ,gBAAkB,GACjD,GAAI,EAAQ,iBAAmB,EAAO,SAAW,EAAQ,gBAAgB,OACvE,MAAM,IAAIA,EAAAA,EACR,kBAAkB,EAAO,OAAO,uCAAuC,EAAQ,gBAAgB,OAAO,EACxG,EAEF,IAAM,EACJ,EAAQ,iBACP,MAAM,EAAM,wBAAwB,EAAQ,EAAmB,EAAQ,CAAc,EAElF,EAA2E,CAAC,EAClF,IAAK,GAAM,CAAC,EAAO,KAAU,EAAO,QAAQ,EAAG,CAC7C,IAAM,EAAiB,EAAwB,GAC3C,CAAC,GAAkB,EAAO,IAAI,EAAM,OAAO,IAG3C,EAAqB,CAAc,EAErC,EAAQ,IAAI,EAAM,QAAS,EAAE,EAE7B,EAAgB,KAAK,CAAE,QAAO,gBAAe,CAAC,EAElD,CAEA,GAAI,EAAgB,OAAS,EAAG,CAC9B,IAAM,EAAY,MAAM,EAAI,WAAW,4BAA4B,CACjE,gBAAiB,EAAgB,KAAK,CAAE,QAAO,qBAAsB,CACnE,iBACA,gBAAiB,EAAM,OACzB,EAAE,EACF,iBAAkB,EAAQ,iBAC1B,eAAgB,EAAQ,eACxB,iBACA,UAAW,2BACb,CAAC,EAED,IAAK,GAAM,CAAC,EAAO,KAAS,EAAU,MAAM,QAAQ,EAAG,CACrD,IAAM,EAAU,EAAgB,GAChC,GAAI,CAAC,EACH,SAEF,GAAI,EAAK,MAAO,CACd,EAAO,IAAI,EAAQ,MAAM,QAAS,EAAK,KAAK,EAC5C,QACF,CACA,IAAM,EAAQ,EAAK,MACnB,GAAI,IAAU,IAAA,GAAW,CACvB,EAAO,IACL,EAAQ,MAAM,QACd,IAAIA,EAAAA,EACF,oDAAoD,EAAK,eAAe,YAAY,EAAQ,MAAM,SACpG,CACF,EACA,QACF,CACA,EAAA,EAAa,EAAO,gDAAgD,EACpE,EAAQ,IAAI,EAAQ,MAAM,QAAS,CAAK,CAC1C,CACF,CAEA,GAAI,EAAO,OAAS,EAClB,OAAO,EAGT,GAAI,EAAQ,QAAS,CACnB,IAAM,EAA4D,CAAC,EACnE,IAAK,GAAM,CAAC,EAAS,KAAU,EAC7B,GAAI,CACF,EAAQ,IAAI,EAAS,EAAQ,QAAQ,EAAO,CAAO,CAAC,CACtD,OAAS,EAAe,CACtB,EAAe,KAAK,CAAE,UAAS,MAAOE,EAAAA,EAAQ,CAAa,CAAE,CAAC,CAChE,CAEF,GAAI,EAAe,OAAS,EAAG,CAC7B,IAAM,EAAU,EACb,KAAK,CAAE,UAAS,WAAY,GAAG,EAAQ,IAAI,EAAM,SAAS,CAAC,CAC3D,KAAK,IAAI,EACZ,MAAM,IAAIF,EAAAA,EACR,0DAA0D,EAAe,OAAO,aAAa,IAC7F,CAAE,MAAO,EAAe,EAAE,EAAE,KAAM,CACpC,CACF,CACA,OAAO,CACT,CAEA,IAAM,EAAe,MAAM,KAAK,EAAO,QAAQ,CAAC,EAC1C,EAAU,EAAa,KAAK,CAAC,EAAM,KAAO,GAAG,EAAK,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI,EAClF,MAAM,IAAIA,EAAAA,EACR,yCAAyC,EAAO,KAAK,aAAa,IAClE,CAAE,MAAO,EAAa,EAAE,GAAG,EAAG,CAChC,CACF,CAEA,aAAqB,wBACnB,EACA,EACA,EACA,EAC4C,CAI5C,IAAI,EAAU,GACV,EAEE,EAAW,MAAM,EACrB,EAAO,IAAK,GAAU,SAAY,CAChC,GAAI,EACF,MAAO,CAAE,OAAQ,SAAmB,EAEtC,GAAI,CACF,MAAO,CACL,OAAQ,YACR,MAAO,MAAM,EAAM,0BAA0B,CAAc,CAC7D,CACF,OAAS,EAAQ,CAMf,OALI,EAAkB,CAAM,GAC1B,EAAU,GACV,IAAU,EACH,CAAE,OAAQ,SAAmB,GAE/B,CAAE,OAAQ,WAAqB,QAAO,CAC/C,CACF,CAAC,EACD,CACF,EAEA,GAAI,IAAU,IAAA,GACZ,MAAM,EAGR,IAAM,EAAqD,CAAC,EAC5D,IAAK,GAAM,CAAC,EAAO,KAAU,EAAO,QAAQ,EAAG,CAC7C,IAAM,EAAU,EAAS,GACrB,MAAC,GAAW,EAAQ,SAAW,WAGnC,IAAI,EAAQ,SAAW,YAAa,CAClC,EAAgB,GAAS,EAAQ,MACjC,QACF,CACA,EAAO,IACL,EAAM,QACN,EAAQ,kBAAkBC,EAAAA,EACtB,EAAQ,OACR,IAAID,EAAAA,EAAsBE,EAAAA,EAAQ,EAAQ,MAAM,CAAC,CAAC,QAAS,CAAE,MAAO,EAAQ,MAAO,CAAC,CAC1F,CANA,CAOF,CACA,OAAO,CACT,CA2BA,MAAM,qBACJ,EACA,EACA,EAC4B,CAC5B,KAAKC,GAAe,sBAAsB,EAC1C,IAAM,EAAU,MAAM,EACpB,uBACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,CAAE,mBAAmB,GAAO,oBAAmB,uBAAwB,GAAW,CAAC,EAEnF,GAAA,EAAA,EAAA,WAAA,CAA0B,CAAE,EAE7B,GACH,MAAM,KAAK,0BAA0B,EAAQ,uBAAuB,EAGtE,GAAM,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QACrD,CACE,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,aAAA,EAAA,EAAA,WAAA,CAAwB,EAAQ,OAAO,CACzC,EACA,CAAE,UAAW,uBAAwB,CACvC,EAGA,GAFA,EAAKC,EAAQ,kCAAqC,IAAoB,EAAG,KAAK,IAAI,MAAM,EAEpF,EAAgB,SAAW,EAC7B,MAAM,IAAIC,EAAAA,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,WACX,OAAQC,EAAAA,EACN,KAAK,QACL,EACA,EAAgB,GAChB,CACF,EACA,YAAa,CACf,CAAC,CACH,CAgBA,MAAM,yBACJ,EACA,EACA,EACA,EAC4B,CAC5B,KAAKH,GAAe,0BAA0B,EAC9C,IAAM,EAAU,MAAM,EACpB,2BACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,GAAA,EAAA,EAAA,WAAA,CAA4B,CAAI,EAChC,GAAA,EAAA,EAAA,WAAA,CAA0B,CAAE,EAG5B,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QACrD,CACE,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,aAAA,EAAA,EAAA,WAAA,CAAwB,EAAQ,OAAO,CACzC,EACA,CAAE,UAAW,4BAA6B,CAC5C,EAOA,GANA,EAAKC,EACH,sCACM,GAAW,oBAAoB,EACrC,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAIC,EAAAA,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,eACX,OAAQE,EAAAA,EACN,KAAK,QACL,EACA,EACA,EAAgB,GAChB,CACF,EACA,YAAa,GAAW,mBAC1B,CAAC,CACH,CA+BA,MAAM,4BACJ,EACA,EACA,EACA,EAC4B,CAC5B,KAAKJ,GAAe,6BAA6B,EACjD,IAAM,EAAU,MAAM,EACpB,8BACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,CAAE,mBAAmB,GAAO,oBAAmB,uBAAwB,GAAW,CAAC,EAEnF,GAAA,EAAA,EAAA,WAAA,CAA0B,CAAE,EAE7B,GACH,MAAM,KAAK,0BAA0B,EAAQ,gCAAgC,EAG/E,GAAM,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QACrD,CACE,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,aAAA,EAAA,EAAA,WAAA,CAAwB,EAAQ,OAAO,CACzC,EACA,CAAE,UAAW,gCAAiC,CAChD,EAOA,GANA,EAAKC,EACH,yCACM,IAAoB,EAC1B,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAIC,EAAAA,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,kBACX,OAAQG,EAAAA,EACN,KAAK,QACL,EACA,EAAgB,GAChB,EACA,CACF,EACA,YAAa,CACf,CAAC,CACH,CAyBA,MAAM,gCACJ,EACA,EACA,EACA,EACA,EAC4B,CAC5B,KAAKL,GAAe,iCAAiC,EACrD,IAAM,EAAU,MAAM,EACpB,kCACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,GAAA,EAAA,EAAA,WAAA,CAA4B,CAAI,EAChC,GAAA,EAAA,EAAA,WAAA,CAA0B,CAAE,EAG5B,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QACrD,CACE,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,aAAA,EAAA,EAAA,WAAA,CAAwB,EAAQ,OAAO,CACzC,EACA,CAAE,UAAW,qCAAsC,CACrD,EAOA,GANA,EAAKC,EACH,6CACM,GAAW,oBAAoB,EACrC,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAIC,EAAAA,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,sBACX,OAAQI,EAAAA,EACN,KAAK,QACL,EACA,EACA,EAAgB,GAChB,EACA,CACF,EACA,YAAa,GAAW,mBAC1B,CAAC,CACH,CAiBA,MAAM,YAAY,EAAmB,EAA4C,CAC/E,KAAKN,GAAe,aAAa,EACjC,MAAM,EAAsB,cAAe,KAAK,IAAI,OAAQ,KAAK,IAAI,QAAQ,EAC7E,IAAM,GAAA,EAAA,EAAA,WAAA,CAAgC,CAAQ,EAC9C,OAAO,KAAK,kBAAkB,CAC5B,UAAW,cACX,OAAQO,EAAAA,EAAoB,KAAK,QAAS,EAAoB,CAAK,CACrE,CAAC,CACH,CAgBA,MAAM,WAAW,EAAiB,EAAoC,CACpE,OAAO,KAAK,IAAI,SAAS,aACvBC,EAAAA,EAAmB,KAAK,SAAA,EAAA,EAAA,WAAA,CAAoB,CAAM,GAAA,EAAA,EAAA,WAAA,CAAc,CAAO,CAAC,CAC1E,CACF,CASA,MAAgB,0BAA0B,EAAyC,CACjF,OAAO,MAAM,KAAK,IAAI,SAAS,aAAaC,EAAAA,EAA8B,KAAK,QAAS,CAAK,CAAC,CAChG,CAQA,MAAgB,0BACd,EACA,EACe,CACf,OAAO,EAA0B,CAC/B,UAAW,4BACX,aAAc,KAAK,QACnB,SACA,OAAQ,KAAK,IAAI,OACjB,SAAU,KAAK,IAAI,SACnB,YAAc,GAAU,KAAK,eAAe,EAAO,CAAkB,CACvE,CAAC,CACH,CAQA,KAAe,EAAgC,CAC7C,KAAK,IAAI,UAAU,EAAO,KAAK,OAAO,CACxC,CAQA,MAAgB,kBAAkB,EAIH,CAC7B,GAAM,CAAE,YAAW,SAAQ,eAAgB,EAC3C,OAAOC,EAAqB,CAC1B,YACA,OAAQ,KAAKV,GAAe,CAAS,EACrC,SAAU,KAAK,IAAI,SACnB,SACA,KAAO,GAAU,KAAK,KAAK,CAAK,EAChC,cACA,OAAQ,KAAK,IAAI,MACnB,CAAC,CACH,CAGA,OAAe,cAAc,EAA0B,CACrD,IAAM,EAAM,EAAO,EAAE,CAAE,IACvB,IAAK,IAAI,EAAI,EAAG,EAAI,EAAO,OAAQ,IACjC,GAAI,EAAO,EAAE,CAAE,MAAQ,EACrB,MAAM,IAAIW,EAAAA,EACR,sEACF,EAGJ,OAAO,CACT,CACF"}
+{"version":3,"file":"token.cjs","names":["ZamaError","ZamaErrorCode","ZamaError","ZamaErrorCode","SignerNotConfiguredError","WalletAccountNotReadyError","ZamaError","transactionOperationMetadata","swallow","ZamaError","TransactionRevertedError","ZamaSDKEvents","requireConfigured","nameContract","symbolContract","decimalsContract","supportsInterfaceContract","ERC7984_INTERFACE_ID","ERC7984_WRAPPER_INTERFACE_ID","DecryptionFailedError","isFatalBatchError","ZamaError","toError","#requireSigner","swallow","EncryptionFailedError","confidentialTransferContract","confidentialTransferFromContract","confidentialTransferAndCallContract","confidentialTransferFromAndCallContract","setOperatorContract","isOperatorContract","confidentialBalanceOfContract","submitSdkTransaction","ConfigurationError"],"sources":["../../src/errors/chain.ts","../../src/errors/balance.ts","../../src/utils/fhe-type.ts","../../src/utils/handles.ts","../../src/utils/alignment.ts","../../src/utils/assert-balance.ts","../../src/utils/concurrency.ts","../../src/utils/submit-transaction.ts","../../src/token/token.ts"],"sourcesContent":["import { ZamaError, ZamaErrorCode } from \"./base\";\n\n/**\n * Thrown when the signer and provider are connected to different chains at the\n * start of a write operation.\n *\n * Every write method runs a chain-alignment pre-flight check. If\n * `signer.getChainId()` and `provider.getChainId()` return different values,\n * this error is thrown before any RPC mutation is attempted.\n *\n * @example\n * ```ts\n * try {\n *   await token.shield(1000n);\n * } catch (e) {\n *   if (e instanceof ChainMismatchError) {\n *     console.error(\n *       `Signer is on chain ${e.signerChainId} but provider is on chain ${e.providerChainId}`,\n *     );\n *   }\n * }\n * ```\n */\nexport class ChainMismatchError extends ZamaError {\n  /** Name of the operation that triggered the check. */\n  readonly operation: string;\n  /** Chain ID the signer is connected to. */\n  readonly signerChainId: number;\n  /** Chain ID the provider is connected to. */\n  readonly providerChainId: number;\n\n  constructor(\n    {\n      operation,\n      signerChainId,\n      providerChainId,\n    }: { operation: string; signerChainId: number; providerChainId: number },\n    options?: ErrorOptions,\n  ) {\n    super(\n      ZamaErrorCode.ChainMismatch,\n      `Operation \"${operation}\" requires signer and provider to be on the same chain, ` +\n        `but signer is on chain ${signerChainId} and provider is on chain ${providerChainId}.`,\n      options,\n    );\n    this.name = \"ChainMismatchError\";\n    this.operation = operation;\n    this.signerChainId = signerChainId;\n    this.providerChainId = providerChainId;\n  }\n}\n","import type { Address } from \"viem\";\nimport { ZamaError, ZamaErrorCode } from \"./base\";\n\n/** Structured details shared by balance-related errors. */\nexport interface BalanceErrorDetails {\n  /** Amount the caller requested, in the token's base units. */\n  readonly requested: bigint;\n  /** Amount available at the time of the check, in the token's base units. */\n  readonly available: bigint;\n  /** Address of the token contract involved. */\n  readonly token: Address;\n}\n\n/** Confidential (cToken) balance is insufficient for the requested operation. */\nexport class InsufficientConfidentialBalanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The available balance at the time of the check. */\n  readonly available: bigint;\n  /** The token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientConfidentialBalance, message, options);\n    this.name = \"InsufficientConfidentialBalanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** ERC-20 balance is insufficient for the requested shield amount. */\nexport class InsufficientERC20BalanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The available balance at the time of the check. */\n  readonly available: bigint;\n  /** The ERC-20 token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientERC20Balance, message, options);\n    this.name = \"InsufficientERC20BalanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** ERC-20 allowance granted to the wrapper is insufficient for the requested wrap amount. */\nexport class InsufficientAllowanceError extends ZamaError {\n  /** The amount the caller requested. */\n  readonly requested: bigint;\n  /** The allowance available at the time of the check. */\n  readonly available: bigint;\n  /** The underlying ERC-20 token contract address. */\n  readonly token: Address;\n\n  constructor(message: string, details: BalanceErrorDetails, options?: ErrorOptions) {\n    super(ZamaErrorCode.InsufficientAllowance, message, options);\n    this.name = \"InsufficientAllowanceError\";\n    this.requested = details.requested;\n    this.available = details.available;\n    this.token = details.token;\n  }\n}\n\n/** Balance validation could not be performed (no cached credentials and decryption not possible). */\nexport class BalanceCheckUnavailableError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.BalanceCheckUnavailable, message, options);\n    this.name = \"BalanceCheckUnavailableError\";\n  }\n}\n\n/** A public ERC-20 read (e.g. balanceOf) failed due to a network or contract error. */\nexport class ERC20ReadFailedError extends ZamaError {\n  constructor(message: string, options?: ErrorOptions) {\n    super(ZamaErrorCode.ERC20ReadFailed, message, options);\n    this.name = \"ERC20ReadFailedError\";\n  }\n}\n","// Copied from @zama-fhe/relayer-sdk/src/sdk/FheType.ts\n// Pure utility functions with zero WASM dependency.\n// Adapted to use simple errors instead of RelayerErrorBase hierarchy.\n\n////////////////////////////////////////////////////////////////////////////////\n// Types (from types/primitives.d.ts)\n////////////////////////////////////////////////////////////////////////////////\n\nexport interface FheTypeNameToIdMap {\n  ebool: 0;\n  //euint4: 1; deprecated\n  euint8: 2;\n  euint16: 3;\n  euint32: 4;\n  euint64: 5;\n  euint128: 6;\n  eaddress: 7;\n  euint256: 8;\n}\n\nexport interface FheTypeIdToNameMap {\n  0: \"ebool\";\n  //1: 'euint4'; deprecated\n  2: \"euint8\";\n  3: \"euint16\";\n  4: \"euint32\";\n  5: \"euint64\";\n  6: \"euint128\";\n  7: \"eaddress\";\n  8: \"euint256\";\n}\n\nexport interface FheTypeEncryptionBitwidthToIdMap {\n  2: FheTypeNameToIdMap[\"ebool\"];\n  8: FheTypeNameToIdMap[\"euint8\"];\n  16: FheTypeNameToIdMap[\"euint16\"];\n  32: FheTypeNameToIdMap[\"euint32\"];\n  64: FheTypeNameToIdMap[\"euint64\"];\n  128: FheTypeNameToIdMap[\"euint128\"];\n  160: FheTypeNameToIdMap[\"eaddress\"];\n  256: FheTypeNameToIdMap[\"euint256\"];\n}\n\nexport type FheTypeIdToEncryptionBitwidthMap = {\n  [K in keyof FheTypeEncryptionBitwidthToIdMap as FheTypeEncryptionBitwidthToIdMap[K]]: K;\n};\n\ntype Prettify<T> = { [K in keyof T]: T[K] } & {};\n\nexport type FheTypeName = Prettify<keyof FheTypeNameToIdMap>;\nexport type FheTypeId = Prettify<keyof FheTypeIdToNameMap>;\nexport type EncryptionBits = Prettify<keyof FheTypeEncryptionBitwidthToIdMap>;\n\n////////////////////////////////////////////////////////////////////////////////\n// Lookup Maps\n////////////////////////////////////////////////////////////////////////////////\n\nconst MINIMUM_ENCRYPTION_BIT_WIDTH = 2;\n\nconst FheTypeNameToId: FheTypeNameToIdMap = {\n  ebool: 0,\n  //euint4: 1, deprecated\n  euint8: 2,\n  euint16: 3,\n  euint32: 4,\n  euint64: 5,\n  euint128: 6,\n  eaddress: 7,\n  euint256: 8,\n} as const;\n\nconst FheTypeIdToName: FheTypeIdToNameMap = {\n  0: \"ebool\",\n  //1: 'euint4', deprecated\n  2: \"euint8\",\n  3: \"euint16\",\n  4: \"euint32\",\n  5: \"euint64\",\n  6: \"euint128\",\n  7: \"eaddress\",\n  8: \"euint256\",\n} as const;\n\nconst FheTypeIdToEncryptionBitwidth: FheTypeIdToEncryptionBitwidthMap = {\n  0: 2,\n  //1:?, euint4 deprecated\n  2: 8,\n  3: 16,\n  4: 32,\n  5: 64,\n  6: 128,\n  7: 160,\n  8: 256,\n} as const;\n\nconst EncryptionBitwidthToFheTypeId: FheTypeEncryptionBitwidthToIdMap = {\n  2: 0,\n  8: 2,\n  16: 3,\n  32: 4,\n  64: 5,\n  128: 6,\n  160: 7,\n  256: 8,\n} as const;\n\nObject.freeze(FheTypeNameToId);\nObject.freeze(FheTypeIdToName);\nObject.freeze(FheTypeIdToEncryptionBitwidth);\nObject.freeze(EncryptionBitwidthToFheTypeId);\n\n////////////////////////////////////////////////////////////////////////////////\n// Type Guards\n////////////////////////////////////////////////////////////////////////////////\n\nexport function isFheTypeId(value: unknown): value is FheTypeId {\n  switch (value as FheTypeId) {\n    case 0:\n    case 2:\n    case 3:\n    case 4:\n    case 5:\n    case 6:\n    case 7:\n    case 8:\n      return true;\n    default:\n      return false;\n  }\n}\n\nexport function isFheTypeName(value: unknown): value is FheTypeName {\n  if (typeof value !== \"string\") {\n    return false;\n  }\n  return value in FheTypeNameToId;\n}\n\nexport function isEncryptionBits(value: unknown): value is EncryptionBits {\n  if (typeof value !== \"number\") {\n    return false;\n  }\n  return value in EncryptionBitwidthToFheTypeId;\n}\n\n////////////////////////////////////////////////////////////////////////////////\n// Converters\n////////////////////////////////////////////////////////////////////////////////\n\nexport function fheTypeIdFromEncryptionBits(bitwidth: number): FheTypeId {\n  if (!isEncryptionBits(bitwidth)) {\n    throw new Error(`Invalid encryption bits ${bitwidth}`);\n  }\n  return EncryptionBitwidthToFheTypeId[bitwidth];\n}\n\nexport function fheTypeIdFromName(name: string): FheTypeId {\n  if (!isFheTypeName(name)) {\n    throw new Error(`Invalid FheType name '${name}'`);\n  }\n  return FheTypeNameToId[name];\n}\n\nexport function fheTypeNameFromId(id: number): FheTypeName {\n  if (!isFheTypeId(id)) {\n    throw new Error(`Invalid FheType id '${id}'`);\n  }\n  return FheTypeIdToName[id];\n}\n\nexport function encryptionBitsFromFheTypeId(typeId: number): EncryptionBits {\n  if (!isFheTypeId(typeId)) {\n    throw new Error(`Invalid FheType id '${typeId}'`);\n  }\n  const bw = FheTypeIdToEncryptionBitwidth[typeId];\n  if (bw < MINIMUM_ENCRYPTION_BIT_WIDTH) {\n    throw new Error(\n      `Invalid FheType encryption bit width: ${bw}. Minimum is ${MINIMUM_ENCRYPTION_BIT_WIDTH} bits.`,\n    );\n  }\n  return bw;\n}\n\nexport function encryptionBitsFromFheTypeName(name: string): EncryptionBits {\n  if (!isFheTypeName(name)) {\n    throw new Error(`Invalid FheType name '${name}'`);\n  }\n  const bw = FheTypeIdToEncryptionBitwidth[FheTypeNameToId[name]];\n  if (bw < MINIMUM_ENCRYPTION_BIT_WIDTH) {\n    throw new Error(\n      `Invalid FheType encryption bit width: ${bw}. Minimum is ${MINIMUM_ENCRYPTION_BIT_WIDTH} bits.`,\n    );\n  }\n  return bw;\n}\n","import type { EncryptedValue } from \"../relayer/types\";\nimport { encryptionBitsFromFheTypeId, isFheTypeId } from \"./fhe-type\";\n\n/** All-zero encrypted-value sentinel — a 32-byte zero handle representing the cleartext value `0`. */\nexport const ZERO_ENCRYPTED_VALUE =\n  \"0x0000000000000000000000000000000000000000000000000000000000000000\" as const;\n\n/**\n * Check whether an encrypted value represents the zero value.\n */\nexport function isEncryptedValueZero(encryptedValue: string): boolean {\n  return encryptedValue === ZERO_ENCRYPTED_VALUE || encryptedValue === \"0x\";\n}\n\n/**\n * Per-request cleartext-bit budget enforced by the KMS gateway, mirrored from\n * `@fhevm/sdk`'s `MAX_KMS_DECRYPT_DECRYPTION_BIT_LIMIT` (protocol-level constant,\n * not imported — see {@link MAX_CONTRACTS_PER_PERMIT} for why). Internal: decrypt\n * requests are chunked to respect it automatically, so callers never need this value.\n */\nexport const MAX_DECRYPTION_REQUEST_BITS = 2048;\n\n/** Max encryption bit width among all currently-known FHE types (euint256). */\nconst MAX_KNOWN_ENCRYPTION_BITS = 256;\n\n/**\n * Cleartext bit cost of decrypting a single handle, derived from its FHE\n * type (encoded at bits 8-15 of the handle — the same layout `@fhevm/sdk`'s\n * `FhevmHandle` decodes, byte 30 of the 32-byte handle).\n *\n * Falls back to {@link MAX_KNOWN_ENCRYPTION_BITS} for an unrecognized type\n * byte, or for a value that isn't parseable hex at all, instead of throwing.\n * A real on-chain handle is always well-formed with a valid type byte, so\n * this fallback only ever fires for synthetic test/placeholder handles —\n * deliberately more permissive than the relayer's own strict validation so\n * chunking stays safe without requiring every test fixture to encode a real\n * FHE handle. Do not tighten this to match relayer semantics.\n */\nexport function encryptionBitsForHandle(encryptedValue: EncryptedValue): number {\n  let handleValue: bigint;\n  try {\n    handleValue = BigInt(encryptedValue);\n  } catch {\n    return MAX_KNOWN_ENCRYPTION_BITS;\n  }\n  const typeByte = Number((handleValue >> 8n) & 0xffn);\n  return isFheTypeId(typeByte) ? encryptionBitsFromFheTypeId(typeByte) : MAX_KNOWN_ENCRYPTION_BITS;\n}\n\n/**\n * Split `handles` into groups whose cumulative cleartext-bit cost never\n * exceeds `maxBits`, preserving input order. Unlike {@link chunkContracts}\n * (fixed-size slices), a greedy accumulate-until-exceeded walk is required\n * since per-handle cost varies by FHE type. A handle whose own cost exceeds\n * `maxBits` still gets a solo chunk — always makes forward progress.\n */\nexport function chunkHandlesByBitBudget(\n  handles: readonly EncryptedValue[],\n  maxBits: number = MAX_DECRYPTION_REQUEST_BITS,\n): EncryptedValue[][] {\n  const chunks: EncryptedValue[][] = [];\n  let current: EncryptedValue[] = [];\n  let currentBits = 0;\n\n  for (const handle of handles) {\n    const bits = encryptionBitsForHandle(handle);\n    if (current.length > 0 && currentBits + bits > maxBits) {\n      chunks.push(current);\n      current = [];\n      currentBits = 0;\n    }\n    current.push(handle);\n    currentBits += bits;\n  }\n  if (current.length > 0) {\n    chunks.push(current);\n  }\n  return chunks;\n}\n","import {\n  ChainMismatchError,\n  SignerNotConfiguredError,\n  WalletAccountNotReadyError,\n} from \"../errors\";\nimport type { GenericProvider, GenericSigner, WalletAccount } from \"../types\";\n\n/**\n * Pre-flight guard for signer-required operations. Resolves the connected\n * wallet account (refreshing once if the signer reports it isn't ready) and\n * verifies the signer's chain matches the provider's.\n *\n * @internal\n */\nexport async function requireAlignedWalletAccount(\n  operation: string,\n  signer: GenericSigner | undefined,\n  provider: GenericProvider,\n): Promise<WalletAccount> {\n  if (!signer) {\n    throw new SignerNotConfiguredError(operation);\n  }\n  let account: WalletAccount;\n  try {\n    account = signer.requireWalletAccount(operation);\n  } catch (error) {\n    if (!(error instanceof WalletAccountNotReadyError) || !signer.refreshWalletAccount) {\n      throw error;\n    }\n    await signer.refreshWalletAccount();\n    account = signer.requireWalletAccount(operation);\n  }\n  const providerChainId = await provider.getChainId();\n  if (account.chainId !== providerChainId) {\n    throw new ChainMismatchError({ operation, signerChainId: account.chainId, providerChainId });\n  }\n  return account;\n}\n\n/**\n * Variant of {@link requireAlignedWalletAccount} that returns only the aligned\n * chain ID. Useful when a write path only needs to ensure signer/provider\n * coherence and doesn't otherwise consume the account.\n *\n * @internal\n */\nexport async function requireChainAlignment(\n  operation: string,\n  signer: GenericSigner | undefined,\n  provider: GenericProvider,\n): Promise<number> {\n  return (await requireAlignedWalletAccount(operation, signer, provider)).chainId;\n}\n","import type { Address } from \"viem\";\nimport { getAddress } from \"viem\";\nimport {\n  BalanceCheckUnavailableError,\n  InsufficientConfidentialBalanceError,\n  ZamaError,\n} from \"../errors\";\nimport type { GenericProvider, GenericSigner } from \"../types\";\nimport { requireAlignedWalletAccount } from \"./alignment\";\n\n/**\n * Pre-flight for a write that would silently move zero on a short balance:\n * decrypt the connected account's balance on `tokenAddress` and throw if it\n * is below `amount`. Decrypting can prompt for a permit signature when none\n * is cached. A failure that is not already a typed SDK error surfaces as\n * {@link BalanceCheckUnavailableError}.\n *\n * @internal\n */\nexport async function assertConfidentialBalance(params: {\n  operation: string;\n  tokenAddress: Address;\n  amount: bigint;\n  signer: GenericSigner | undefined;\n  provider: GenericProvider;\n  readBalance: (owner: Address) => Promise<bigint>;\n}): Promise<void> {\n  const { operation, tokenAddress, amount, signer, provider, readBalance } = params;\n  if (amount === 0n) {\n    return;\n  }\n\n  let balance: bigint;\n  try {\n    const account = await requireAlignedWalletAccount(operation, signer, provider);\n    balance = await readBalance(getAddress(account.address));\n  } catch (error) {\n    if (error instanceof ZamaError) {\n      throw error;\n    }\n    throw new BalanceCheckUnavailableError(`Balance validation failed (token: ${tokenAddress})`, {\n      cause: error,\n    });\n  }\n\n  if (balance < amount) {\n    throw new InsufficientConfidentialBalanceError(\n      `Insufficient confidential balance: requested ${amount}, available ${balance} (token: ${tokenAddress})`,\n      { requested: amount, available: balance, token: tokenAddress },\n    );\n  }\n}\n","/**\n * Execute an array of async thunks with bounded concurrency.\n * Defaults to `Infinity` (equivalent to `Promise.all`).\n */\nexport async function pLimit<T>(\n  fns: (() => Promise<T>)[],\n  maxConcurrency = Infinity,\n): Promise<T[]> {\n  if (Number.isFinite(maxConcurrency) && maxConcurrency <= 0) {\n    throw new Error(\"maxConcurrency must be a positive number\");\n  }\n  if (!Number.isFinite(maxConcurrency) || maxConcurrency >= fns.length) {\n    return Promise.all(fns.map((f) => f()));\n  }\n\n  const results: T[] = Array.from({ length: fns.length });\n  let index = 0;\n\n  async function worker() {\n    while (index < fns.length) {\n      const i = index++;\n      if (fns[i]) {\n        results[i] = await fns[i]();\n      }\n    }\n  }\n\n  await Promise.all(Array.from({ length: maxConcurrency }, worker));\n  return results;\n}\n","import type { Hex } from \"viem\";\nimport { TransactionRevertedError, ZamaError } from \"../errors\";\nimport type { TransactionOperation, ZamaSDKEventInput } from \"../events/sdk-events\";\nimport { transactionOperationMetadata, ZamaSDKEvents } from \"../events/sdk-events\";\nimport type {\n  GenericLogger,\n  GenericProvider,\n  GenericSigner,\n  TransactionResult,\n  WriteContractConfig,\n} from \"../types\";\nimport { swallow } from \"./swallow\";\n\n/**\n * Shared write-transaction pipeline for SDK calls that submit a transaction.\n *\n * On success: writes the tx, emits the per-operation submitted event from\n * {@link transactionOperationMetadata}, fires `onSubmitted`, waits for the\n * receipt, and returns `{ txHash, receipt }`.\n *\n * On failure: emits a {@link ZamaSDKEvents.TransactionError} event with the\n * transaction-level error it will throw, then throws it. Existing `ZamaError`\n * instances are rethrown as-is; all other failures are wrapped in\n * `TransactionRevertedError` with the original error as `cause`.\n */\nexport async function submitTransaction(params: {\n  operation: TransactionOperation;\n  signer: GenericSigner;\n  provider: GenericProvider;\n  config: WriteContractConfig;\n  emit: (input: ZamaSDKEventInput) => void;\n  onSubmitted?: (txHash: Hex) => void;\n  logger: GenericLogger;\n}): Promise<TransactionResult> {\n  const { operation, signer, provider, config, emit, onSubmitted, logger } = params;\n  const metadata = transactionOperationMetadata[operation];\n\n  try {\n    const txHash = await signer.writeContract(config);\n    emit(metadata.submittedEvent(txHash));\n    void swallow(`${operation}: onSubmitted`, () => onSubmitted?.(txHash), logger);\n    const receipt = await provider.waitForTransactionReceipt(txHash);\n    return { txHash, receipt };\n  } catch (error) {\n    const failure =\n      error instanceof ZamaError\n        ? error\n        : new TransactionRevertedError(`Transaction failed during ${operation}`, { cause: error });\n\n    emit({ type: ZamaSDKEvents.TransactionError, operation, error: failure });\n    throw failure;\n  }\n}\n","import { type Address, getAddress, type Hex } from \"viem\";\nimport {\n  confidentialBalanceOfContract,\n  confidentialTransferAndCallContract,\n  confidentialTransferContract,\n  confidentialTransferFromAndCallContract,\n  confidentialTransferFromContract,\n  decimalsContract,\n  ERC7984_INTERFACE_ID,\n  ERC7984_WRAPPER_INTERFACE_ID,\n  isOperatorContract,\n  nameContract,\n  setOperatorContract,\n  supportsInterfaceContract,\n  symbolContract,\n} from \"../contracts\";\nimport {\n  ConfigurationError,\n  DecryptionFailedError,\n  EncryptionFailedError,\n  isFatalBatchError,\n  requireConfigured,\n  ZamaError,\n} from \"../errors\";\nimport type { TransactionOperation, ZamaSDKEventInput } from \"../events/sdk-events\";\nimport type { EncryptedValue } from \"../relayer/types\";\nimport { toError } from \"../utils\";\nimport { requireAlignedWalletAccount, requireChainAlignment } from \"../utils/alignment\";\nimport { assertConfidentialBalance } from \"../utils/assert-balance\";\nimport type { TelemetryOperation } from \"../telemetry\";\nimport { assertBigint } from \"../utils/assertions\";\nimport { pLimit } from \"../utils/concurrency\";\nimport { isEncryptedValueZero } from \"../utils/handles\";\nimport { submitTransaction as submitSdkTransaction } from \"../utils/submit-transaction\";\nimport { swallow } from \"../utils/swallow\";\nimport type {\n  GenericSigner,\n  TransactionResult,\n  TransferCallbacks,\n  TransferOptions,\n  WriteContractConfig,\n} from \"../types\";\nimport type { ZamaSDK } from \"../zama-sdk\";\n\n/** Options for {@link Token.batchDecryptBalancesAs}. */\nexport interface BatchDecryptAsOptions {\n  /** The address of the account that delegated decryption rights. */\n  delegatorAddress: Address;\n  /** Pre-fetched encrypted values. When omitted, they are fetched from the chain. */\n  encryptedValues?: EncryptedValue[];\n  /**\n   * The account whose on-chain balance to read. Defaults to the delegator\n   * address, which is the common case (the delegator grants permission to\n   * decrypt their own balance). Only set this when the account differs\n   * from the delegator.\n   *\n   * Matches the `account` parameter of `confidentialBalanceOf(account)` on-chain.\n   */\n  accountAddress?: Address;\n  /** Maximum number of concurrent decrypt calls. Default: 10. */\n  maxConcurrency?: number;\n  /** Called when decryption fails for a single token. Return a fallback bigint. */\n  onError?: (error: Error, address: Address) => bigint;\n}\n\n/** Result of {@link Token.batchBalancesOf}. */\nexport interface BatchBalancesResult {\n  /** Successfully decrypted balances, keyed by token address. */\n  results: Map<Address, bigint>;\n  /** Per-token errors for tokens that failed to decrypt. */\n  errors: Map<Address, ZamaError>;\n}\n\n/**\n * High-level interface for an ERC-7984 confidential token.\n * Hides FHE complexity (encryption, decryption, EIP-712 signing) behind\n * familiar ERC-20-like methods.\n *\n * For ERC-7984 wrappers (shield/unshield), use {@link WrappedToken} instead —\n * it extends `Token` with wrapper-specific operations.\n *\n * Decryption, credentials, caching, and event emission are handled by the\n * owning {@link ZamaSDK} — this class only exposes token-scoped helpers\n * that delegate to `sdk.decryption.decryptValues` and `sdk.permits.grantPermit`.\n */\nexport class Token {\n  /** The SDK instance this token operates through. */\n  readonly sdk: ZamaSDK;\n  /** Checksummed address of the confidential token contract. */\n  readonly address: Address;\n\n  constructor(sdk: ZamaSDK, address: Address) {\n    this.sdk = sdk;\n    this.address = getAddress(address);\n  }\n\n  /** Resolve `sdk.signer` or throw {@link SignerNotConfiguredError} tagged with `operation`. */\n  #requireSigner(operation: string): GenericSigner {\n    return requireConfigured(this.sdk.signer, operation);\n  }\n\n  // METADATA\n\n  /** Read the token name from the contract. */\n  async name(): Promise<string> {\n    return this.sdk.provider.readContract(nameContract(this.address));\n  }\n\n  /** Read the token symbol from the contract. */\n  async symbol(): Promise<string> {\n    return this.sdk.provider.readContract(symbolContract(this.address));\n  }\n\n  /** Read the token decimals from the contract. */\n  async decimals(): Promise<number> {\n    return this.sdk.provider.readContract(decimalsContract(this.address));\n  }\n\n  // ERC-165 DISCOVERY\n\n  /**\n   * ERC-165 check for {@link ERC7984_INTERFACE_ID} support.\n   *\n   * @returns `true` if the contract implements the ERC-7984 confidential token interface.\n   */\n  async isConfidential(): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      supportsInterfaceContract(this.address, ERC7984_INTERFACE_ID),\n    );\n  }\n\n  /**\n   * ERC-165 check for IERC7984ERC20Wrapper support.\n   *\n   * @returns `true` if the contract implements the ERC-7984 wrapper interface\n   *   ({@link ERC7984_WRAPPER_INTERFACE_ID}, `0x1f1c62b2`).\n   */\n  async isWrapper(): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      supportsInterfaceContract(this.address, ERC7984_WRAPPER_INTERFACE_ID),\n    );\n  }\n\n  // BALANCES\n\n  /**\n   * Decrypt and return the plaintext balance for the given owner.\n   * Acquires FHE credentials via a wallet signature if none are cached.\n   *\n   * @param owner - Balance owner address.\n   * @returns The decrypted plaintext balance as a bigint.\n   * @throws if FHE decryption fails. {@link DecryptionFailedError}\n   *\n   * @example\n   * ```ts\n   * const balance = await token.balanceOf(\"0xOwner\");\n   * ```\n   */\n  async balanceOf(owner: Address): Promise<bigint> {\n    return this.decryptBalance(owner, \"balance-of\");\n  }\n\n  /**\n   * {@link balanceOf} with the telemetry label of the public method that needs the balance.\n   *\n   * @internal\n   */\n  async decryptBalance(owner: Address, telemetryOperation: TelemetryOperation): Promise<bigint> {\n    const ownerAddress = getAddress(owner);\n    const encryptedValue = await this.readConfidentialBalanceOf(ownerAddress);\n    const result = await this.sdk.decryption.decryptValues(\n      [{ encryptedValue, contractAddress: this.address }],\n      { operation: telemetryOperation },\n    );\n    const value = result[encryptedValue];\n    if (value === undefined) {\n      throw new DecryptionFailedError(`Decryption returned no value for ${encryptedValue}`);\n    }\n    assertBigint(value, \"balanceOf: result[encryptedValue]\");\n    return value;\n  }\n\n  /**\n   * Return the raw encrypted balance without decrypting.\n   *\n   * @param owner - Balance owner address.\n   * @returns The encrypted balance as a hex string.\n   *\n   * @example\n   * ```ts\n   * const encryptedValue = await token.confidentialBalanceOf(\"0xOwner\");\n   * ```\n   */\n  async confidentialBalanceOf(owner: Address): Promise<EncryptedValue> {\n    return this.readConfidentialBalanceOf(getAddress(owner));\n  }\n\n  /**\n   * Decrypt the balance of a delegator using delegated decryption credentials.\n   * The connected signer acts as the delegatee who has been granted permission\n   * by the delegator to decrypt their balance.\n   *\n   * Clear values are cached in storage keyed by `(account, token, encryptedValue)`.\n   * Because every on-chain balance change produces a new encrypted value,\n   * stale cache entries are never served. Cache write failures are silently\n   * ignored — they do not affect the returned value.\n   *\n   * @param delegatorAddress - The address of the account that delegated decryption rights.\n   * @param accountAddress - The account whose on-chain balance to read. Defaults\n   *   to the delegator address.\n   * @returns The decrypted plaintext balance as a bigint.\n   * @throws if no active delegation exists. {@link DelegationNotFoundError}\n   * @throws if the delegation has expired. {@link DelegationExpiredError}\n   * @throws if delegated decryption fails. {@link DecryptionFailedError}\n   *\n   * @example\n   * ```ts\n   * const balance = await token.decryptBalanceAs({\n   *   delegatorAddress: \"0xDelegator\",\n   * });\n   * ```\n   */\n  async decryptBalanceAs({\n    delegatorAddress,\n    accountAddress,\n  }: {\n    delegatorAddress: Address;\n    accountAddress?: Address;\n  }): Promise<bigint> {\n    await requireChainAlignment(\"decryptBalanceAs\", this.sdk.signer, this.sdk.provider);\n    const normalizedDelegator = getAddress(delegatorAddress);\n    const normalizedAccount = accountAddress ? getAddress(accountAddress) : normalizedDelegator;\n\n    const encryptedValue = await this.readConfidentialBalanceOf(normalizedAccount);\n    if (isEncryptedValueZero(encryptedValue)) {\n      return 0n;\n    }\n\n    const result = await this.sdk.decryption.delegatedDecryptValues(\n      [{ encryptedValue, contractAddress: this.address }],\n      normalizedDelegator,\n      normalizedAccount,\n      { operation: \"decrypt-balance-as\" },\n    );\n\n    const value = result[encryptedValue];\n    if (value === undefined) {\n      throw new DecryptionFailedError(\n        `Delegated decryption returned no value for ${encryptedValue}`,\n      );\n    }\n    assertBigint(value, \"decryptBalanceAs: result[encryptedValue]\");\n    return value;\n  }\n\n  // BATCH STATICS\n\n  /**\n   * Decrypt confidential balances for multiple tokens in parallel, returning\n   * successes and per-token errors separately. Pre-authorizes all token\n   * addresses in a single wallet signature, then delegates each decrypt to\n   * `sdk.decryption.decryptValues`.\n   *\n   * Tokens that fail to decrypt land in `errors`; the batch keeps going.\n   *\n   * @param tokens - Array of {@link Token} instances bound to the same SDK.\n   * @param owner - Balance owner address.\n   * @returns `{ results, errors }` partitioning the per-token outcomes.\n   * @throws A failure that affects the whole session (rejected signature,\n   * misconfiguration, RPC rate limit, key unwrapping failure, revoked KMS\n   * context) rejects the call instead of landing in `errors`.\n   *\n   * @example\n   * ```ts\n   * const { results, errors } = await Token.batchBalancesOf(tokens, owner);\n   * ```\n   */\n  static async batchBalancesOf(tokens: Token[], owner: Address): Promise<BatchBalancesResult> {\n    const results = new Map<Address, bigint>();\n    const errors = new Map<Address, ZamaError>();\n    if (tokens.length === 0) {\n      return { results, errors };\n    }\n\n    const sdk = Token.assertSameSdk(tokens);\n    // Fail fast on chain mismatch before prompting the wallet for a signature.\n    await requireChainAlignment(\"batchBalancesOf\", sdk.signer, sdk.provider);\n    // Pre-authorize the full token set in one wallet signature so subsequent\n    // per-token decryptValues calls reuse the cached credentials.\n    await sdk.permits.grantPermit(tokens.map((t) => t.address));\n\n    // `pLimit` cannot cancel calls that already started. The shared flag stops\n    // the queued tokens from starting once a fatal error is seen, so they do\n    // not each trigger their own recovery wallet prompt.\n    let aborted = false;\n    let fatal: unknown;\n\n    const outcomes = await pLimit(\n      tokens.map((t) => async () => {\n        if (aborted) {\n          return { status: \"aborted\" as const };\n        }\n        try {\n          return {\n            status: \"fulfilled\" as const,\n            value: await t.decryptBalance(owner, \"batch-balances-of\"),\n          };\n        } catch (reason) {\n          // A fatal error (rejected signature, revoked KMS context, rate\n          // limit) would fail every token: stop the batch.\n          if (isFatalBatchError(reason)) {\n            aborted = true;\n            fatal ??= reason;\n            return { status: \"aborted\" as const };\n          }\n          return { status: \"rejected\" as const, reason };\n        }\n      }),\n      5,\n    );\n\n    // Some tokens were never attempted after the abort, so a partial result\n    // would be wrong: reject the whole call.\n    if (fatal !== undefined) {\n      throw fatal;\n    }\n\n    for (let i = 0; i < tokens.length; i++) {\n      const tokenAddress = tokens[i]!.address;\n      const outcome = outcomes[i]!;\n      if (outcome.status === \"aborted\") {\n        continue;\n      }\n      if (outcome.status === \"fulfilled\") {\n        results.set(tokenAddress, outcome.value);\n      } else {\n        const reason = outcome.reason;\n        const error =\n          reason instanceof ZamaError\n            ? reason\n            : new DecryptionFailedError(toError(reason).message, { cause: reason });\n        errors.set(tokenAddress, error);\n      }\n    }\n\n    // Total failure: surface the first error so callers know nothing decrypted.\n    if (errors.size === tokens.length) {\n      const firstError = errors.values().next().value;\n      throw firstError ?? new DecryptionFailedError(\"All token balance decryptions failed\");\n    }\n\n    return { results, errors };\n  }\n\n  /**\n   * Batch decrypt confidential balances as a delegate across multiple tokens.\n   * Mirrors {@link batchBalancesOf} but uses delegated credentials.\n   *\n   * **Error handling:** If a per-token decryption fails and no `onError` callback\n   * is provided, errors are collected and thrown as an aggregated\n   * `DecryptionFailedError`. When the relayer returns no value for an encrypted value,\n   * a `DecryptionFailedError` is thrown for that token (never silently returns `0n`).\n   * Pass `onError: () => 0n` to opt into the silent zero behavior.\n   *\n   * @param tokens - Array of Token instances to decrypt balances for.\n   * @param options - Delegated decryption configuration.\n   * @returns A Map from token address to decrypted balance.\n   * @throws if no active delegation exists. {@link DelegationNotFoundError}\n   * @throws if the delegation has expired. {@link DelegationExpiredError}\n   * @throws if any decryption fails and no `onError` is provided. {@link DecryptionFailedError}\n   * @throws A failure that affects the whole session (rejected signature, RPC\n   * rate limit, revoked KMS context) rejects the call even when `onError` is\n   * provided.\n   *\n   * @example\n   * ```ts\n   * const balances = await Token.batchDecryptBalancesAs(tokens, {\n   *   delegatorAddress: \"0xDelegator\",\n   *   onError: (err, addr) => { console.error(addr, err); return 0n; },\n   * });\n   * ```\n   */\n  static async batchDecryptBalancesAs(\n    tokens: Token[],\n    options: BatchDecryptAsOptions,\n  ): Promise<Map<Address, bigint>> {\n    if (tokens.length === 0) {\n      return new Map();\n    }\n\n    const sdk = Token.assertSameSdk(tokens);\n    const results = new Map<Address, bigint>();\n    const errors = new Map<Address, ZamaError>();\n    const normalizedAccount = options.accountAddress\n      ? getAddress(options.accountAddress)\n      : getAddress(options.delegatorAddress);\n    const maxConcurrency = options.maxConcurrency ?? 10;\n    if (options.encryptedValues && tokens.length !== options.encryptedValues.length) {\n      throw new DecryptionFailedError(\n        `tokens.length (${tokens.length}) must equal encryptedValues.length (${options.encryptedValues.length})`,\n      );\n    }\n    const resolvedEncryptedValues =\n      options.encryptedValues ??\n      (await Token.readBalanceHandlesBatch(tokens, normalizedAccount, errors, maxConcurrency));\n\n    const decryptRequests: Array<{ token: Token; encryptedValue: EncryptedValue }> = [];\n    for (const [index, token] of tokens.entries()) {\n      const encryptedValue = resolvedEncryptedValues[index];\n      if (!encryptedValue || errors.has(token.address)) {\n        continue;\n      }\n      if (isEncryptedValueZero(encryptedValue)) {\n        // Zero balance → skip the relayer; no decryption needed.\n        results.set(token.address, 0n);\n      } else {\n        decryptRequests.push({ token, encryptedValue });\n      }\n    }\n\n    if (decryptRequests.length > 0) {\n      const decrypted = await sdk.decryption.delegatedBatchDecryptValues({\n        encryptedInputs: decryptRequests.map(({ token, encryptedValue }) => ({\n          encryptedValue,\n          contractAddress: token.address,\n        })),\n        delegatorAddress: options.delegatorAddress,\n        accountAddress: options.accountAddress,\n        maxConcurrency,\n        operation: \"batch-decrypt-balances-as\",\n      });\n\n      for (const [index, item] of decrypted.items.entries()) {\n        const request = decryptRequests[index];\n        if (!request) {\n          continue;\n        }\n        if (item.error) {\n          errors.set(request.token.address, item.error);\n          continue;\n        }\n        const value = item.value;\n        if (value === undefined) {\n          errors.set(\n            request.token.address,\n            new DecryptionFailedError(\n              `Batch delegated decryption returned no value for ${item.encryptedValue} on token ${request.token.address}`,\n            ),\n          );\n          continue;\n        }\n        assertBigint(value, \"batchDecryptBalancesAs: result[encryptedValue]\");\n        results.set(request.token.address, value);\n      }\n    }\n\n    if (errors.size === 0) {\n      return results;\n    }\n\n    if (options.onError) {\n      const callbackErrors: Array<{ address: Address; error: Error }> = [];\n      for (const [address, error] of errors) {\n        try {\n          results.set(address, options.onError(error, address));\n        } catch (callbackError) {\n          callbackErrors.push({ address, error: toError(callbackError) });\n        }\n      }\n      if (callbackErrors.length > 0) {\n        const message = callbackErrors\n          .map(({ address, error }) => `${address}: ${error.message}`)\n          .join(\"; \");\n        throw new DecryptionFailedError(\n          `Batch delegated decryption onError callback failed for ${callbackErrors.length} token(s): ${message}`,\n          { cause: callbackErrors[0]?.error },\n        );\n      }\n      return results;\n    }\n\n    const errorEntries = Array.from(errors.entries());\n    const message = errorEntries.map(([addr, e]) => `${addr}: ${e.message}`).join(\"; \");\n    throw new DecryptionFailedError(\n      `Batch delegated decryption failed for ${errors.size} token(s): ${message}`,\n      { cause: errorEntries[0]?.[1] },\n    );\n  }\n\n  private static async readBalanceHandlesBatch(\n    tokens: Token[],\n    accountAddress: Address,\n    errors: Map<Address, ZamaError>,\n    maxConcurrency: number,\n  ): Promise<Array<EncryptedValue | undefined>> {\n    // `pLimit` cannot cancel calls that already started. The shared flag stops\n    // the queued tokens from re-hitting an endpoint that already failed for\n    // the whole batch.\n    let aborted = false;\n    let fatal: unknown;\n\n    const outcomes = await pLimit(\n      tokens.map((token) => async () => {\n        if (aborted) {\n          return { status: \"aborted\" as const };\n        }\n        try {\n          return {\n            status: \"fulfilled\" as const,\n            value: await token.readConfidentialBalanceOf(accountAddress),\n          };\n        } catch (reason) {\n          if (isFatalBatchError(reason)) {\n            aborted = true;\n            fatal ??= reason;\n            return { status: \"aborted\" as const };\n          }\n          return { status: \"rejected\" as const, reason };\n        }\n      }),\n      maxConcurrency,\n    );\n\n    if (fatal !== undefined) {\n      throw fatal;\n    }\n\n    const encryptedValues: Array<EncryptedValue | undefined> = [];\n    for (const [index, token] of tokens.entries()) {\n      const outcome = outcomes[index];\n      if (!outcome || outcome.status === \"aborted\") {\n        continue;\n      }\n      if (outcome.status === \"fulfilled\") {\n        encryptedValues[index] = outcome.value;\n        continue;\n      }\n      errors.set(\n        token.address,\n        outcome.reason instanceof ZamaError\n          ? outcome.reason\n          : new DecryptionFailedError(toError(outcome.reason).message, { cause: outcome.reason }),\n      );\n    }\n    return encryptedValues;\n  }\n\n  // WRITE OPERATIONS\n\n  /**\n   * Confidential transfer. Encrypts the amount via FHE, then calls the contract.\n   *\n   * By default, the SDK validates the confidential balance before submitting.\n   * If a cached plaintext balance exists it is used; otherwise, if credentials\n   * are cached, it decrypts on the fly. Set `skipBalanceCheck: true` to bypass\n   * this validation (e.g. for smart wallets).\n   *\n   * @param to - Recipient address.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param options - Optional: `skipBalanceCheck` (default `false`).\n   * @returns The transaction hash and mined receipt.\n   * @throws if signer and provider are on different chains. {@link ChainMismatchError}\n   * @throws if the balance is less than `amount`. {@link InsufficientConfidentialBalanceError}\n   * @throws if balance validation requires decryption that is not possible. {@link BalanceCheckUnavailableError}\n   * @throws if FHE encryption fails. {@link EncryptionFailedError}\n   * @throws if the on-chain transfer reverts. {@link TransactionRevertedError}\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransfer(\"0xRecipient\", 1000n);\n   * ```\n   */\n  async confidentialTransfer(\n    to: Address,\n    amount: bigint,\n    options?: TransferOptions,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransfer\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransfer\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const { skipBalanceCheck = false, onEncryptComplete, onTransferSubmitted } = options ?? {};\n\n    const normalizedTo = getAddress(to);\n\n    if (!skipBalanceCheck) {\n      await this.assertConfidentialBalance(amount, \"confidential-transfer\");\n    }\n\n    const { encryptedValues, inputProof } = await this.sdk.encrypt(\n      {\n        values: [{ value: amount, type: \"euint64\" }],\n        contractAddress: this.address,\n        userAddress: getAddress(account.address),\n      },\n      { operation: \"confidential-transfer\" },\n    );\n    void swallow(\"transfer: onEncryptComplete\", () => onEncryptComplete?.(), this.sdk.logger);\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transfer\",\n      config: confidentialTransferContract(\n        this.address,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n      ),\n      onSubmitted: onTransferSubmitted,\n    });\n  }\n\n  /**\n   * Operator encrypted transfer on behalf of another address.\n   * The caller must be an approved operator for `from`.\n   *\n   * @param from - The address to transfer from (caller must be an approved operator).\n   * @param to - Recipient address.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferFrom(\"0xFrom\", \"0xTo\", 500n);\n   * ```\n   */\n  async confidentialTransferFrom(\n    from: Address,\n    to: Address,\n    amount: bigint,\n    callbacks?: TransferCallbacks,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferFrom\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferFrom\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const normalizedFrom = getAddress(from);\n    const normalizedTo = getAddress(to);\n\n    // The input proof is verified against msg.sender, so it binds to the caller, not `from`.\n    const { encryptedValues, inputProof } = await this.sdk.encrypt(\n      {\n        values: [{ value: amount, type: \"euint64\" }],\n        contractAddress: this.address,\n        userAddress: getAddress(account.address),\n      },\n      { operation: \"confidential-transfer-from\" },\n    );\n    void swallow(\n      \"transferFrom: onEncryptComplete\",\n      () => callbacks?.onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferFrom\",\n      config: confidentialTransferFromContract(\n        this.address,\n        normalizedFrom,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n      ),\n      onSubmitted: callbacks?.onTransferSubmitted,\n    });\n  }\n\n  /**\n   * ERC-7984 `confidentialTransferAndCall`: encrypted transfer that also invokes\n   * the recipient's receiver hook (`onConfidentialTransferReceived`) in a single\n   * transaction. The caller crafts the opaque `data` payload — the SDK does not\n   * encode, validate, or interpret it.\n   *\n   * Balance validation follows the same rules as {@link Token.confidentialTransfer}.\n   *\n   * @param to - Recipient address. Must implement the ERC-7984 receiver hook.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param data - Opaque bytes forwarded to the recipient's receiver hook.\n   * @param options - Optional: `skipBalanceCheck` (default `false`).\n   * @returns The transaction hash and mined receipt.\n   *\n   * @throws if signer and provider are on different chains. {@link ChainMismatchError}\n   * @throws if the balance is less than `amount`. {@link InsufficientConfidentialBalanceError}\n   * @throws if balance validation requires decryption that is not possible. {@link BalanceCheckUnavailableError}\n   * @throws if FHE encryption fails. {@link EncryptionFailedError}\n   * @throws if the on-chain transfer reverts. {@link TransactionRevertedError}\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferAndCall(\n   *   \"0xRecipient\",\n   *   1000n,\n   *   \"0xabcd\", // caller-encoded payload forwarded to the receiver hook\n   * );\n   * ```\n   */\n  async confidentialTransferAndCall(\n    to: Address,\n    amount: bigint,\n    data: Hex,\n    options?: TransferOptions,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferAndCall\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferAndCall\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const { skipBalanceCheck = false, onEncryptComplete, onTransferSubmitted } = options ?? {};\n\n    const normalizedTo = getAddress(to);\n\n    if (!skipBalanceCheck) {\n      await this.assertConfidentialBalance(amount, \"confidential-transfer-and-call\");\n    }\n\n    const { encryptedValues, inputProof } = await this.sdk.encrypt(\n      {\n        values: [{ value: amount, type: \"euint64\" }],\n        contractAddress: this.address,\n        userAddress: getAddress(account.address),\n      },\n      { operation: \"confidential-transfer-and-call\" },\n    );\n    void swallow(\n      \"transferAndCall: onEncryptComplete\",\n      () => onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferAndCall\",\n      config: confidentialTransferAndCallContract(\n        this.address,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n        data,\n      ),\n      onSubmitted: onTransferSubmitted,\n    });\n  }\n\n  /**\n   * ERC-7984 `confidentialTransferFromAndCall`: operator-initiated encrypted\n   * transfer that also invokes the recipient's receiver hook in a single\n   * transaction. The caller must be an approved operator for `from` and crafts\n   * the opaque `data` payload — the SDK does not encode or interpret it.\n   *\n   * @param from - The address to transfer from (caller must be an approved operator).\n   * @param to - Recipient address. Must implement the ERC-7984 receiver hook.\n   * @param amount - Plaintext amount to transfer (encrypted automatically via FHE).\n   * @param data - Opaque bytes forwarded to the recipient's receiver hook.\n   * @param callbacks - Optional progress callbacks.\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.confidentialTransferFromAndCall(\n   *   \"0xFrom\",\n   *   \"0xRecipient\",\n   *   500n,\n   *   \"0xabcd\",\n   * );\n   * ```\n   */\n  async confidentialTransferFromAndCall(\n    from: Address,\n    to: Address,\n    amount: bigint,\n    data: Hex,\n    callbacks?: TransferCallbacks,\n  ): Promise<TransactionResult> {\n    this.#requireSigner(\"confidentialTransferFromAndCall\");\n    const account = await requireAlignedWalletAccount(\n      \"confidentialTransferFromAndCall\",\n      this.sdk.signer,\n      this.sdk.provider,\n    );\n    const normalizedFrom = getAddress(from);\n    const normalizedTo = getAddress(to);\n\n    // The input proof is verified against msg.sender, so it binds to the caller, not `from`.\n    const { encryptedValues, inputProof } = await this.sdk.encrypt(\n      {\n        values: [{ value: amount, type: \"euint64\" }],\n        contractAddress: this.address,\n        userAddress: getAddress(account.address),\n      },\n      { operation: \"confidential-transfer-from-and-call\" },\n    );\n    void swallow(\n      \"transferFromAndCall: onEncryptComplete\",\n      () => callbacks?.onEncryptComplete?.(),\n      this.sdk.logger,\n    );\n\n    if (encryptedValues.length === 0) {\n      throw new EncryptionFailedError(\"Encryption returned no encrypted values\");\n    }\n\n    return this.submitTransaction({\n      operation: \"transferFromAndCall\",\n      config: confidentialTransferFromAndCallContract(\n        this.address,\n        normalizedFrom,\n        normalizedTo,\n        encryptedValues[0]!,\n        inputProof,\n        data,\n      ),\n      onSubmitted: callbacks?.onTransferSubmitted,\n    });\n  }\n\n  // OPERATOR APPROVAL\n\n  /**\n   * Set operator approval for the confidential token.\n   * Defaults to 1 hour from now if `until` is not specified.\n   *\n   * @param operator - The address to set as an operator.\n   * @param until - Optional Unix timestamp for approval expiry. Defaults to now + 1 hour.\n   * @returns The transaction hash and mined receipt.\n   *\n   * @example\n   * ```ts\n   * const txHash = await token.setOperator(\"0xOperator\");\n   * ```\n   */\n  async setOperator(operator: Address, until?: number): Promise<TransactionResult> {\n    this.#requireSigner(\"setOperator\");\n    await requireChainAlignment(\"setOperator\", this.sdk.signer, this.sdk.provider);\n    const normalizedOperator = getAddress(operator);\n    return this.submitTransaction({\n      operation: \"setOperator\",\n      config: setOperatorContract(this.address, normalizedOperator, until),\n    });\n  }\n\n  /**\n   * Check if a spender is an approved operator for a given holder.\n   *\n   * @param holder - The token holder address.\n   * @param spender - The address to check operator approval for.\n   * @returns `true` if the spender is an approved operator for the holder.\n   *\n   * @example\n   * ```ts\n   * if (await token.isOperator(\"0xHolder\", \"0xSpender\")) {\n   *   // spender can call transferFrom on behalf of holder\n   * }\n   * ```\n   */\n  async isOperator(holder: Address, spender: Address): Promise<boolean> {\n    return this.sdk.provider.readContract(\n      isOperatorContract(this.address, getAddress(holder), getAddress(spender)),\n    );\n  }\n\n  // PROTECTED HELPERS\n\n  /**\n   * Read the on-chain encrypted balance for a given owner.\n   *\n   * @internal\n   */\n  protected async readConfidentialBalanceOf(owner: Address): Promise<EncryptedValue> {\n    return await this.sdk.provider.readContract(confidentialBalanceOfContract(this.address, owner));\n  }\n\n  /**\n   * Pre-flight the connected account's balance on this token before a write\n   * that would otherwise move zero on a short balance.\n   *\n   * @internal\n   */\n  protected async assertConfidentialBalance(\n    amount: bigint,\n    telemetryOperation: TelemetryOperation,\n  ): Promise<void> {\n    return assertConfidentialBalance({\n      operation: \"assertConfidentialBalance\",\n      tokenAddress: this.address,\n      amount,\n      signer: this.sdk.signer,\n      provider: this.sdk.provider,\n      readBalance: (owner) => this.decryptBalance(owner, telemetryOperation),\n    });\n  }\n\n  /**\n   * Emit a token-scoped event through the owning {@link ZamaSDK} so that\n   * subscribers see a unified stream.\n   *\n   * @internal\n   */\n  protected emit(input: ZamaSDKEventInput): void {\n    this.sdk.emitEvent(input, this.address);\n  }\n\n  /**\n   * Submit a token-scoped write transaction through the shared SDK transaction\n   * pipeline. Callers keep pre-flight and operation-specific work local.\n   *\n   * @internal\n   */\n  protected async submitTransaction(params: {\n    operation: TransactionOperation;\n    config: WriteContractConfig;\n    onSubmitted?: (txHash: Hex) => void;\n  }): Promise<TransactionResult> {\n    const { operation, config, onSubmitted } = params;\n    return submitSdkTransaction({\n      operation,\n      signer: this.#requireSigner(operation),\n      provider: this.sdk.provider,\n      config,\n      emit: (input) => this.emit(input),\n      onSubmitted,\n      logger: this.sdk.logger,\n    });\n  }\n\n  /** Verify all tokens share the same SDK instance and return it. */\n  private static assertSameSdk(tokens: Token[]): ZamaSDK {\n    const sdk = tokens[0]!.sdk;\n    for (let i = 1; i < tokens.length; i++) {\n      if (tokens[i]!.sdk !== sdk) {\n        throw new ConfigurationError(\n          \"All tokens in a batch operation must share the same ZamaSDK instance\",\n        );\n      }\n    }\n    return sdk;\n  }\n}\n"],"mappings":"8IAuBA,IAAa,EAAb,cAAwCA,EAAAA,CAAU,CAEhD,UAEA,cAEA,gBAEA,YACE,CACE,YACA,gBACA,mBAEF,EACA,CACA,MACEC,EAAAA,EAAc,cACd,cAAc,EAAU,iFACI,EAAc,4BAA4B,EAAgB,GACtF,CACF,EACA,KAAK,KAAO,qBACZ,KAAK,UAAY,EACjB,KAAK,cAAgB,EACrB,KAAK,gBAAkB,CACzB,CACF,ECpCa,EAAb,cAA0DC,EAAAA,CAAU,CAElE,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAMC,EAAAA,EAAc,gCAAiC,EAAS,CAAO,EACrE,KAAK,KAAO,uCACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAmDD,EAAAA,CAAU,CAE3D,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAMC,EAAAA,EAAc,yBAA0B,EAAS,CAAO,EAC9D,KAAK,KAAO,gCACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAgDD,EAAAA,CAAU,CAExD,UAEA,UAEA,MAEA,YAAY,EAAiB,EAA8B,EAAwB,CACjF,MAAMC,EAAAA,EAAc,sBAAuB,EAAS,CAAO,EAC3D,KAAK,KAAO,6BACZ,KAAK,UAAY,EAAQ,UACzB,KAAK,UAAY,EAAQ,UACzB,KAAK,MAAQ,EAAQ,KACvB,CACF,EAGa,EAAb,cAAkDD,EAAAA,CAAU,CAC1D,YAAY,EAAiB,EAAwB,CACnD,MAAMC,EAAAA,EAAc,wBAAyB,EAAS,CAAO,EAC7D,KAAK,KAAO,8BACd,CACF,EAGa,EAAb,cAA0CD,EAAAA,CAAU,CAClD,YAAY,EAAiB,EAAwB,CACnD,MAAMC,EAAAA,EAAc,gBAAiB,EAAS,CAAO,EACrD,KAAK,KAAO,sBACd,CACF,ECxBA,MAEM,EAAsC,CAC1C,MAAO,EAEP,OAAQ,EACR,QAAS,EACT,QAAS,EACT,QAAS,EACT,SAAU,EACV,SAAU,EACV,SAAU,CACZ,EAEM,EAAsC,CAC1C,EAAG,QAEH,EAAG,SACH,EAAG,UACH,EAAG,UACH,EAAG,UACH,EAAG,WACH,EAAG,WACH,EAAG,UACL,EAEM,EAAkE,CACtE,EAAG,EAEH,EAAG,EACH,EAAG,GACH,EAAG,GACH,EAAG,GACH,EAAG,IACH,EAAG,IACH,EAAG,GACL,EAaA,OAAO,OAAO,CAAe,EAC7B,OAAO,OAAO,CAAe,EAC7B,OAAO,OAAO,CAA6B,EAC3C,OAAO,OAAO,CAbZ,EAAG,EACH,EAAG,EACH,GAAI,EACJ,GAAI,EACJ,GAAI,EACJ,IAAK,EACL,IAAK,EACL,IAAK,CAMO,CAA6B,EAM3C,SAAgB,EAAY,EAAoC,CAC9D,OAAQ,EAAR,CACE,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACL,IAAK,GACH,MAAO,GACT,QACE,MAAO,EACX,CACF,CAyCA,SAAgB,EAA4B,EAAgC,CAC1E,GAAI,CAAC,EAAY,CAAM,EACrB,MAAU,MAAM,uBAAuB,EAAO,EAAE,EAElD,IAAM,EAAK,EAA8B,GACzC,GAAI,EAAK,EACP,MAAU,MACR,yCAAyC,EAAG,qBAC9C,EAEF,OAAO,CACT,CC3KA,SAAgB,EAAqB,EAAiC,CACpE,OAAO,IAAA,sEAA2C,IAAmB,IACvE,CA0BA,SAAgB,EAAwB,EAAwC,CAC9E,IAAI,EACJ,GAAI,CACF,EAAc,OAAO,CAAc,CACrC,MAAQ,CACN,MAAO,IACT,CACA,IAAM,EAAW,OAAQ,GAAe,GAAM,IAAK,EACnD,OAAO,EAAY,CAAQ,EAAI,EAA4B,CAAQ,EAAI,GACzE,CASA,SAAgB,EACd,EACA,EAAkB,KACE,CACpB,IAAM,EAA6B,CAAC,EAChC,EAA4B,CAAC,EAC7B,EAAc,EAElB,IAAK,IAAM,KAAU,EAAS,CAC5B,IAAM,EAAO,EAAwB,CAAM,EACvC,EAAQ,OAAS,GAAK,EAAc,EAAO,IAC7C,EAAO,KAAK,CAAO,EACnB,EAAU,CAAC,EACX,EAAc,GAEhB,EAAQ,KAAK,CAAM,EACnB,GAAe,CACjB,CAIA,OAHI,EAAQ,OAAS,GACnB,EAAO,KAAK,CAAO,EAEd,CACT,CChEA,eAAsB,EACpB,EACA,EACA,EACwB,CACxB,GAAI,CAAC,EACH,MAAM,IAAIC,EAAAA,EAAyB,CAAS,EAE9C,IAAI,EACJ,GAAI,CACF,EAAU,EAAO,qBAAqB,CAAS,CACjD,OAAS,EAAO,CACd,GAAI,EAAE,aAAiBC,EAAAA,IAA+B,CAAC,EAAO,qBAC5D,MAAM,EAER,MAAM,EAAO,qBAAqB,EAClC,EAAU,EAAO,qBAAqB,CAAS,CACjD,CACA,IAAM,EAAkB,MAAM,EAAS,WAAW,EAClD,GAAI,EAAQ,UAAY,EACtB,MAAM,IAAI,EAAmB,CAAE,YAAW,cAAe,EAAQ,QAAS,iBAAgB,CAAC,EAE7F,OAAO,CACT,CASA,eAAsB,EACpB,EACA,EACA,EACiB,CACjB,OAAQ,MAAM,EAA4B,EAAW,EAAQ,CAAQ,EAAA,CAAG,OAC1E,CCjCA,eAAsB,EAA0B,EAO9B,CAChB,GAAM,CAAE,YAAW,eAAc,SAAQ,SAAQ,WAAU,eAAgB,EAC3E,GAAI,IAAW,GACb,OAGF,IAAI,EACJ,GAAI,CAEF,EAAU,MAAM,GAAA,EAAA,EAAA,WAAA,EAAuB,MADjB,EAA4B,EAAW,EAAQ,CAAQ,EAAA,CAC9B,OAAO,CAAC,CACzD,OAAS,EAAO,CAId,MAHI,aAAiBC,EAAAA,EACb,EAEF,IAAI,EAA6B,qCAAqC,EAAa,GAAI,CAC3F,MAAO,CACT,CAAC,CACH,CAEA,GAAI,EAAU,EACZ,MAAM,IAAI,EACR,gDAAgD,EAAO,cAAc,EAAQ,WAAW,EAAa,GACrG,CAAE,UAAW,EAAQ,UAAW,EAAS,MAAO,CAAa,CAC/D,CAEJ,CC/CA,eAAsB,EACpB,EACA,EAAiB,IACH,CACd,GAAI,OAAO,SAAS,CAAc,GAAK,GAAkB,EACvD,MAAU,MAAM,0CAA0C,EAE5D,GAAI,CAAC,OAAO,SAAS,CAAc,GAAK,GAAkB,EAAI,OAC5D,OAAO,QAAQ,IAAI,EAAI,IAAK,GAAM,EAAE,CAAC,CAAC,EAGxC,IAAM,EAAe,MAAM,KAAK,CAAE,OAAQ,EAAI,MAAO,CAAC,EAClD,EAAQ,EAEZ,eAAe,GAAS,CACtB,KAAO,EAAQ,EAAI,QAAQ,CACzB,IAAM,EAAI,IACN,EAAI,KACN,EAAQ,GAAK,MAAM,EAAI,EAAE,CAAC,EAE9B,CACF,CAGA,OADA,MAAM,QAAQ,IAAI,MAAM,KAAK,CAAE,OAAQ,CAAe,EAAG,CAAM,CAAC,EACzD,CACT,CCJA,eAAsB,EAAkB,EAQT,CAC7B,GAAM,CAAE,YAAW,SAAQ,WAAU,SAAQ,OAAM,cAAa,UAAW,EACrE,EAAWC,EAAAA,EAA6B,GAE9C,GAAI,CACF,IAAM,EAAS,MAAM,EAAO,cAAc,CAAM,EAIhD,OAHA,EAAK,EAAS,eAAe,CAAM,CAAC,EACpC,EAAKC,EAAQ,GAAG,EAAU,mBAAsB,IAAc,CAAM,EAAG,CAAM,EAEtE,CAAE,SAAQ,QAAA,MADK,EAAS,0BAA0B,CAAM,CACtC,CAC3B,OAAS,EAAO,CACd,IAAM,EACJ,aAAiBC,EAAAA,EACb,EACA,IAAIC,EAAAA,EAAyB,6BAA6B,IAAa,CAAE,MAAO,CAAM,CAAC,EAG7F,MADA,EAAK,CAAE,KAAMC,EAAAA,EAAc,iBAAkB,YAAW,MAAO,CAAQ,CAAC,EAClE,CACR,CACF,CCiCA,IAAa,EAAb,MAAa,CAAM,CAEjB,IAEA,QAEA,YAAY,EAAc,EAAkB,CAC1C,KAAK,IAAM,EACX,KAAK,SAAA,EAAA,EAAA,WAAA,CAAqB,CAAO,CACnC,CAGA,GAAe,EAAkC,CAC/C,OAAOC,EAAAA,EAAkB,KAAK,IAAI,OAAQ,CAAS,CACrD,CAKA,MAAM,MAAwB,CAC5B,OAAO,KAAK,IAAI,SAAS,aAAaC,EAAAA,EAAa,KAAK,OAAO,CAAC,CAClE,CAGA,MAAM,QAA0B,CAC9B,OAAO,KAAK,IAAI,SAAS,aAAaC,EAAAA,EAAe,KAAK,OAAO,CAAC,CACpE,CAGA,MAAM,UAA4B,CAChC,OAAO,KAAK,IAAI,SAAS,aAAaC,EAAAA,EAAiB,KAAK,OAAO,CAAC,CACtE,CASA,MAAM,gBAAmC,CACvC,OAAO,KAAK,IAAI,SAAS,aACvBC,EAAAA,EAA0B,KAAK,QAASC,EAAAA,CAAoB,CAC9D,CACF,CAQA,MAAM,WAA8B,CAClC,OAAO,KAAK,IAAI,SAAS,aACvBD,EAAAA,EAA0B,KAAK,QAASE,EAAAA,CAA4B,CACtE,CACF,CAiBA,MAAM,UAAU,EAAiC,CAC/C,OAAO,KAAK,eAAe,EAAO,YAAY,CAChD,CAOA,MAAM,eAAe,EAAgB,EAAyD,CAC5F,IAAM,GAAA,EAAA,EAAA,WAAA,CAA0B,CAAK,EAC/B,EAAiB,MAAM,KAAK,0BAA0B,CAAY,EAKlE,GAAQ,MAJO,KAAK,IAAI,WAAW,cACvC,CAAC,CAAE,iBAAgB,gBAAiB,KAAK,OAAQ,CAAC,EAClD,CAAE,UAAW,CAAmB,CAClC,EAAA,CACqB,GACrB,GAAI,IAAU,IAAA,GACZ,MAAM,IAAIC,EAAAA,EAAsB,oCAAoC,GAAgB,EAGtF,OADA,EAAA,EAAa,EAAO,mCAAmC,EAChD,CACT,CAaA,MAAM,sBAAsB,EAAyC,CACnE,OAAO,KAAK,2BAAA,EAAA,EAAA,WAAA,CAAqC,CAAK,CAAC,CACzD,CA2BA,MAAM,iBAAiB,CACrB,mBACA,kBAIkB,CAClB,MAAM,EAAsB,mBAAoB,KAAK,IAAI,OAAQ,KAAK,IAAI,QAAQ,EAClF,IAAM,GAAA,EAAA,EAAA,WAAA,CAAiC,CAAgB,EACjD,EAAoB,GAAA,EAAA,EAAA,WAAA,CAA4B,CAAc,EAAI,EAElE,EAAiB,MAAM,KAAK,0BAA0B,CAAiB,EAC7E,GAAI,EAAqB,CAAc,EACrC,OAAO,GAUT,IAAM,GAAQ,MAPO,KAAK,IAAI,WAAW,uBACvC,CAAC,CAAE,iBAAgB,gBAAiB,KAAK,OAAQ,CAAC,EAClD,EACA,EACA,CAAE,UAAW,oBAAqB,CACpC,EAAA,CAEqB,GACrB,GAAI,IAAU,IAAA,GACZ,MAAM,IAAIA,EAAAA,EACR,8CAA8C,GAChD,EAGF,OADA,EAAA,EAAa,EAAO,0CAA0C,EACvD,CACT,CAwBA,aAAa,gBAAgB,EAAiB,EAA8C,CAC1F,IAAM,EAAU,IAAI,IACd,EAAS,IAAI,IACnB,GAAI,EAAO,SAAW,EACpB,MAAO,CAAE,UAAS,QAAO,EAG3B,IAAM,EAAM,EAAM,cAAc,CAAM,EAEtC,MAAM,EAAsB,kBAAmB,EAAI,OAAQ,EAAI,QAAQ,EAGvE,MAAM,EAAI,QAAQ,YAAY,EAAO,IAAK,GAAM,EAAE,OAAO,CAAC,EAK1D,IAAI,EAAU,GACV,EAEE,EAAW,MAAM,EACrB,EAAO,IAAK,GAAM,SAAY,CAC5B,GAAI,EACF,MAAO,CAAE,OAAQ,SAAmB,EAEtC,GAAI,CACF,MAAO,CACL,OAAQ,YACR,MAAO,MAAM,EAAE,eAAe,EAAO,mBAAmB,CAC1D,CACF,OAAS,EAAQ,CAQf,OALIC,EAAAA,EAAkB,CAAM,GAC1B,EAAU,GACV,IAAU,EACH,CAAE,OAAQ,SAAmB,GAE/B,CAAE,OAAQ,WAAqB,QAAO,CAC/C,CACF,CAAC,EACD,CACF,EAIA,GAAI,IAAU,IAAA,GACZ,MAAM,EAGR,IAAK,IAAI,EAAI,EAAG,EAAI,EAAO,OAAQ,IAAK,CACtC,IAAM,EAAe,EAAO,EAAE,CAAE,QAC1B,EAAU,EAAS,GACrB,KAAQ,SAAW,UAGvB,GAAI,EAAQ,SAAW,YACrB,EAAQ,IAAI,EAAc,EAAQ,KAAK,MAClC,CACL,IAAM,EAAS,EAAQ,OACjB,EACJ,aAAkBC,EAAAA,EACd,EACA,IAAIF,EAAAA,EAAsBG,EAAAA,EAAQ,CAAM,CAAC,CAAC,QAAS,CAAE,MAAO,CAAO,CAAC,EAC1E,EAAO,IAAI,EAAc,CAAK,CAChC,CACF,CAGA,GAAI,EAAO,OAAS,EAAO,OAEzB,MADmB,EAAO,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,OACtB,IAAIH,EAAAA,EAAsB,sCAAsC,EAGtF,MAAO,CAAE,UAAS,QAAO,CAC3B,CA8BA,aAAa,uBACX,EACA,EAC+B,CAC/B,GAAI,EAAO,SAAW,EACpB,OAAO,IAAI,IAGb,IAAM,EAAM,EAAM,cAAc,CAAM,EAChC,EAAU,IAAI,IACd,EAAS,IAAI,IACb,EAAoB,EAAQ,gBAAA,EAAA,EAAA,WAAA,CACnB,EAAQ,cAAc,GAAA,EAAA,EAAA,WAAA,CACtB,EAAQ,gBAAgB,EACjC,EAAiB,EAAQ,gBAAkB,GACjD,GAAI,EAAQ,iBAAmB,EAAO,SAAW,EAAQ,gBAAgB,OACvE,MAAM,IAAIA,EAAAA,EACR,kBAAkB,EAAO,OAAO,uCAAuC,EAAQ,gBAAgB,OAAO,EACxG,EAEF,IAAM,EACJ,EAAQ,iBACP,MAAM,EAAM,wBAAwB,EAAQ,EAAmB,EAAQ,CAAc,EAElF,EAA2E,CAAC,EAClF,IAAK,GAAM,CAAC,EAAO,KAAU,EAAO,QAAQ,EAAG,CAC7C,IAAM,EAAiB,EAAwB,GAC3C,CAAC,GAAkB,EAAO,IAAI,EAAM,OAAO,IAG3C,EAAqB,CAAc,EAErC,EAAQ,IAAI,EAAM,QAAS,EAAE,EAE7B,EAAgB,KAAK,CAAE,QAAO,gBAAe,CAAC,EAElD,CAEA,GAAI,EAAgB,OAAS,EAAG,CAC9B,IAAM,EAAY,MAAM,EAAI,WAAW,4BAA4B,CACjE,gBAAiB,EAAgB,KAAK,CAAE,QAAO,qBAAsB,CACnE,iBACA,gBAAiB,EAAM,OACzB,EAAE,EACF,iBAAkB,EAAQ,iBAC1B,eAAgB,EAAQ,eACxB,iBACA,UAAW,2BACb,CAAC,EAED,IAAK,GAAM,CAAC,EAAO,KAAS,EAAU,MAAM,QAAQ,EAAG,CACrD,IAAM,EAAU,EAAgB,GAChC,GAAI,CAAC,EACH,SAEF,GAAI,EAAK,MAAO,CACd,EAAO,IAAI,EAAQ,MAAM,QAAS,EAAK,KAAK,EAC5C,QACF,CACA,IAAM,EAAQ,EAAK,MACnB,GAAI,IAAU,IAAA,GAAW,CACvB,EAAO,IACL,EAAQ,MAAM,QACd,IAAIA,EAAAA,EACF,oDAAoD,EAAK,eAAe,YAAY,EAAQ,MAAM,SACpG,CACF,EACA,QACF,CACA,EAAA,EAAa,EAAO,gDAAgD,EACpE,EAAQ,IAAI,EAAQ,MAAM,QAAS,CAAK,CAC1C,CACF,CAEA,GAAI,EAAO,OAAS,EAClB,OAAO,EAGT,GAAI,EAAQ,QAAS,CACnB,IAAM,EAA4D,CAAC,EACnE,IAAK,GAAM,CAAC,EAAS,KAAU,EAC7B,GAAI,CACF,EAAQ,IAAI,EAAS,EAAQ,QAAQ,EAAO,CAAO,CAAC,CACtD,OAAS,EAAe,CACtB,EAAe,KAAK,CAAE,UAAS,MAAOG,EAAAA,EAAQ,CAAa,CAAE,CAAC,CAChE,CAEF,GAAI,EAAe,OAAS,EAAG,CAC7B,IAAM,EAAU,EACb,KAAK,CAAE,UAAS,WAAY,GAAG,EAAQ,IAAI,EAAM,SAAS,CAAC,CAC3D,KAAK,IAAI,EACZ,MAAM,IAAIH,EAAAA,EACR,0DAA0D,EAAe,OAAO,aAAa,IAC7F,CAAE,MAAO,EAAe,EAAE,EAAE,KAAM,CACpC,CACF,CACA,OAAO,CACT,CAEA,IAAM,EAAe,MAAM,KAAK,EAAO,QAAQ,CAAC,EAC1C,EAAU,EAAa,KAAK,CAAC,EAAM,KAAO,GAAG,EAAK,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI,EAClF,MAAM,IAAIA,EAAAA,EACR,yCAAyC,EAAO,KAAK,aAAa,IAClE,CAAE,MAAO,EAAa,EAAE,GAAG,EAAG,CAChC,CACF,CAEA,aAAqB,wBACnB,EACA,EACA,EACA,EAC4C,CAI5C,IAAI,EAAU,GACV,EAEE,EAAW,MAAM,EACrB,EAAO,IAAK,GAAU,SAAY,CAChC,GAAI,EACF,MAAO,CAAE,OAAQ,SAAmB,EAEtC,GAAI,CACF,MAAO,CACL,OAAQ,YACR,MAAO,MAAM,EAAM,0BAA0B,CAAc,CAC7D,CACF,OAAS,EAAQ,CAMf,OALIC,EAAAA,EAAkB,CAAM,GAC1B,EAAU,GACV,IAAU,EACH,CAAE,OAAQ,SAAmB,GAE/B,CAAE,OAAQ,WAAqB,QAAO,CAC/C,CACF,CAAC,EACD,CACF,EAEA,GAAI,IAAU,IAAA,GACZ,MAAM,EAGR,IAAM,EAAqD,CAAC,EAC5D,IAAK,GAAM,CAAC,EAAO,KAAU,EAAO,QAAQ,EAAG,CAC7C,IAAM,EAAU,EAAS,GACrB,MAAC,GAAW,EAAQ,SAAW,WAGnC,IAAI,EAAQ,SAAW,YAAa,CAClC,EAAgB,GAAS,EAAQ,MACjC,QACF,CACA,EAAO,IACL,EAAM,QACN,EAAQ,kBAAkBC,EAAAA,EACtB,EAAQ,OACR,IAAIF,EAAAA,EAAsBG,EAAAA,EAAQ,EAAQ,MAAM,CAAC,CAAC,QAAS,CAAE,MAAO,EAAQ,MAAO,CAAC,CAC1F,CANA,CAOF,CACA,OAAO,CACT,CA2BA,MAAM,qBACJ,EACA,EACA,EAC4B,CAC5B,KAAKC,GAAe,sBAAsB,EAC1C,IAAM,EAAU,MAAM,EACpB,uBACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,CAAE,mBAAmB,GAAO,oBAAmB,uBAAwB,GAAW,CAAC,EAEnF,GAAA,EAAA,EAAA,WAAA,CAA0B,CAAE,EAE7B,GACH,MAAM,KAAK,0BAA0B,EAAQ,uBAAuB,EAGtE,GAAM,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QACrD,CACE,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,aAAA,EAAA,EAAA,WAAA,CAAwB,EAAQ,OAAO,CACzC,EACA,CAAE,UAAW,uBAAwB,CACvC,EAGA,GAFA,EAAKC,EAAQ,kCAAqC,IAAoB,EAAG,KAAK,IAAI,MAAM,EAEpF,EAAgB,SAAW,EAC7B,MAAM,IAAIC,EAAAA,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,WACX,OAAQC,EAAAA,EACN,KAAK,QACL,EACA,EAAgB,GAChB,CACF,EACA,YAAa,CACf,CAAC,CACH,CAgBA,MAAM,yBACJ,EACA,EACA,EACA,EAC4B,CAC5B,KAAKH,GAAe,0BAA0B,EAC9C,IAAM,EAAU,MAAM,EACpB,2BACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,GAAA,EAAA,EAAA,WAAA,CAA4B,CAAI,EAChC,GAAA,EAAA,EAAA,WAAA,CAA0B,CAAE,EAG5B,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QACrD,CACE,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,aAAA,EAAA,EAAA,WAAA,CAAwB,EAAQ,OAAO,CACzC,EACA,CAAE,UAAW,4BAA6B,CAC5C,EAOA,GANA,EAAKC,EACH,sCACM,GAAW,oBAAoB,EACrC,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAIC,EAAAA,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,eACX,OAAQE,EAAAA,EACN,KAAK,QACL,EACA,EACA,EAAgB,GAChB,CACF,EACA,YAAa,GAAW,mBAC1B,CAAC,CACH,CA+BA,MAAM,4BACJ,EACA,EACA,EACA,EAC4B,CAC5B,KAAKJ,GAAe,6BAA6B,EACjD,IAAM,EAAU,MAAM,EACpB,8BACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,CAAE,mBAAmB,GAAO,oBAAmB,uBAAwB,GAAW,CAAC,EAEnF,GAAA,EAAA,EAAA,WAAA,CAA0B,CAAE,EAE7B,GACH,MAAM,KAAK,0BAA0B,EAAQ,gCAAgC,EAG/E,GAAM,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QACrD,CACE,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,aAAA,EAAA,EAAA,WAAA,CAAwB,EAAQ,OAAO,CACzC,EACA,CAAE,UAAW,gCAAiC,CAChD,EAOA,GANA,EAAKC,EACH,yCACM,IAAoB,EAC1B,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAIC,EAAAA,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,kBACX,OAAQG,EAAAA,EACN,KAAK,QACL,EACA,EAAgB,GAChB,EACA,CACF,EACA,YAAa,CACf,CAAC,CACH,CAyBA,MAAM,gCACJ,EACA,EACA,EACA,EACA,EAC4B,CAC5B,KAAKL,GAAe,iCAAiC,EACrD,IAAM,EAAU,MAAM,EACpB,kCACA,KAAK,IAAI,OACT,KAAK,IAAI,QACX,EACM,GAAA,EAAA,EAAA,WAAA,CAA4B,CAAI,EAChC,GAAA,EAAA,EAAA,WAAA,CAA0B,CAAE,EAG5B,CAAE,kBAAiB,cAAe,MAAM,KAAK,IAAI,QACrD,CACE,OAAQ,CAAC,CAAE,MAAO,EAAQ,KAAM,SAAU,CAAC,EAC3C,gBAAiB,KAAK,QACtB,aAAA,EAAA,EAAA,WAAA,CAAwB,EAAQ,OAAO,CACzC,EACA,CAAE,UAAW,qCAAsC,CACrD,EAOA,GANA,EAAKC,EACH,6CACM,GAAW,oBAAoB,EACrC,KAAK,IAAI,MACX,EAEI,EAAgB,SAAW,EAC7B,MAAM,IAAIC,EAAAA,EAAsB,yCAAyC,EAG3E,OAAO,KAAK,kBAAkB,CAC5B,UAAW,sBACX,OAAQI,EAAAA,EACN,KAAK,QACL,EACA,EACA,EAAgB,GAChB,EACA,CACF,EACA,YAAa,GAAW,mBAC1B,CAAC,CACH,CAiBA,MAAM,YAAY,EAAmB,EAA4C,CAC/E,KAAKN,GAAe,aAAa,EACjC,MAAM,EAAsB,cAAe,KAAK,IAAI,OAAQ,KAAK,IAAI,QAAQ,EAC7E,IAAM,GAAA,EAAA,EAAA,WAAA,CAAgC,CAAQ,EAC9C,OAAO,KAAK,kBAAkB,CAC5B,UAAW,cACX,OAAQO,EAAAA,EAAoB,KAAK,QAAS,EAAoB,CAAK,CACrE,CAAC,CACH,CAgBA,MAAM,WAAW,EAAiB,EAAoC,CACpE,OAAO,KAAK,IAAI,SAAS,aACvBC,EAAAA,EAAmB,KAAK,SAAA,EAAA,EAAA,WAAA,CAAoB,CAAM,GAAA,EAAA,EAAA,WAAA,CAAc,CAAO,CAAC,CAC1E,CACF,CASA,MAAgB,0BAA0B,EAAyC,CACjF,OAAO,MAAM,KAAK,IAAI,SAAS,aAAaC,EAAAA,EAA8B,KAAK,QAAS,CAAK,CAAC,CAChG,CAQA,MAAgB,0BACd,EACA,EACe,CACf,OAAO,EAA0B,CAC/B,UAAW,4BACX,aAAc,KAAK,QACnB,SACA,OAAQ,KAAK,IAAI,OACjB,SAAU,KAAK,IAAI,SACnB,YAAc,GAAU,KAAK,eAAe,EAAO,CAAkB,CACvE,CAAC,CACH,CAQA,KAAe,EAAgC,CAC7C,KAAK,IAAI,UAAU,EAAO,KAAK,OAAO,CACxC,CAQA,MAAgB,kBAAkB,EAIH,CAC7B,GAAM,CAAE,YAAW,SAAQ,eAAgB,EAC3C,OAAOC,EAAqB,CAC1B,YACA,OAAQ,KAAKV,GAAe,CAAS,EACrC,SAAU,KAAK,IAAI,SACnB,SACA,KAAO,GAAU,KAAK,KAAK,CAAK,EAChC,cACA,OAAQ,KAAK,IAAI,MACnB,CAAC,CACH,CAGA,OAAe,cAAc,EAA0B,CACrD,IAAM,EAAM,EAAO,EAAE,CAAE,IACvB,IAAK,IAAI,EAAI,EAAG,EAAI,EAAO,OAAQ,IACjC,GAAI,EAAO,EAAE,CAAE,MAAQ,EACrB,MAAM,IAAIW,EAAAA,EACR,sEACF,EAGJ,OAAO,CACT,CACF"}