tkms 0.12.4 → 0.12.7

package/kms_lib.d.ts

@@ -1,49 +1,5 @@
 /* tslint:disable */
 /* eslint-disable */
-export function ml_kem_pke_pk_len(): number;
-export function ml_kem_pke_sk_len(): number;
-export function public_sig_key_to_u8vec(pk: PublicSigKey): Uint8Array;
-export function u8vec_to_public_sig_key(v: Uint8Array): PublicSigKey;
-export function private_sig_key_to_u8vec(sk: PrivateSigKey): Uint8Array;
-export function u8vec_to_private_sig_key(v: Uint8Array): PrivateSigKey;
-/**
- * Create a new [ServerIdAddr] structure that holds an ID and an address
- * which must be a valid EIP-55 address, notably prefixed with "0x".
- */
-export function new_server_id_addr(id: number, addr: string): ServerIdAddr;
-/**
- * Instantiate a new client.
- *
- * * `server_addrs` - a list of KMS server ID with EIP-55 addresses,
- * the elements in the list can be created using [new_server_id_addr].
- *
- * * `client_address_hex` - the client (wallet) address in hex,
- * must be prefixed with "0x".
- *
- * * `fhe_parameter` - the parameter choice, which can be either `"test"` or `"default"`.
- * The "default" parameter choice is selected if no matching string is found.
- */
-export function new_client(server_addrs: ServerIdAddr[], client_address_hex: string, fhe_parameter: string): Client;
-export function get_server_addrs(client: Client): ServerIdAddr[];
-export function get_client_secret_key(client: Client): PrivateSigKey | undefined;
-export function get_client_address(client: Client): string;
-export function ml_kem_pke_keygen(): PrivateEncKeyMlKem512;
-export function ml_kem_pke_get_pk(sk: PrivateEncKeyMlKem512): PublicEncKeyMlKem512;
-export function ml_kem_pke_pk_to_u8vec(pk: PublicEncKeyMlKem512): Uint8Array;
-export function ml_kem_pke_sk_to_u8vec(sk: PrivateEncKeyMlKem512): Uint8Array;
-export function u8vec_to_ml_kem_pke_pk(v: Uint8Array): PublicEncKeyMlKem512;
-export function u8vec_to_ml_kem_pke_sk(v: Uint8Array): PrivateEncKeyMlKem512;
-/**
- * This function is *not* used by relayer-sdk because the encryption
- * happens on the KMS side. It's just here for completeness and tests.
- */
-export function ml_kem_pke_encrypt(msg: Uint8Array, their_pk: PublicEncKeyMlKem512): Uint8Array;
-/**
- * This function is *not* used by relayer-sdk because the decryption
- * is handled by [process_user_decryption_resp].
- * It's just here for completeness and tests.
- */
-export function ml_kem_pke_decrypt(ct: Uint8Array, my_sk: PrivateEncKeyMlKem512): Uint8Array;
 /**
  * Process the user_decryption response from JavaScript objects.
  * The returned result is a byte array representing a plaintext of any length,
@@ -106,6 +62,32 @@ export function ml_kem_pke_decrypt(ct: Uint8Array, my_sk: PrivateEncKeyMlKem512)
  * It is insecure if `verify = false`!
  */
 export function process_user_decryption_resp_from_js(client: Client, request: any, eip712_domain: any, agg_resp: any, enc_pk: PublicEncKeyMlKem512, enc_sk: PrivateEncKeyMlKem512, verify: boolean): TypedPlaintext[];
+export function ml_kem_pke_keygen(): PrivateEncKeyMlKem512;
+/**
+ * Create a new [ServerIdAddr] structure that holds an ID and an address
+ * which must be a valid EIP-55 address, notably prefixed with "0x".
+ */
+export function new_server_id_addr(id: number, addr: string): ServerIdAddr;
+export function private_sig_key_to_u8vec(sk: PrivateSigKey): Uint8Array;
+export function ml_kem_pke_get_pk(sk: PrivateEncKeyMlKem512): PublicEncKeyMlKem512;
+export function u8vec_to_ml_kem_pke_pk(v: Uint8Array): PublicEncKeyMlKem512;
+export function ml_kem_pke_sk_len(): number;
+/**
+ * This function is *not* used by relayer-sdk because the decryption
+ * is handled by [process_user_decryption_resp].
+ * It's just here for completeness and tests.
+ */
+export function ml_kem_pke_decrypt(ct: Uint8Array, my_sk: PrivateEncKeyMlKem512): Uint8Array;
+export function u8vec_to_public_sig_key(v: Uint8Array): PublicSigKey;
+export function ml_kem_pke_sk_to_u8vec(sk: PrivateEncKeyMlKem512): Uint8Array;
+export function ml_kem_pke_pk_to_u8vec(pk: PublicEncKeyMlKem512): Uint8Array;
+export function u8vec_to_ml_kem_pke_sk(v: Uint8Array): PrivateEncKeyMlKem512;
+export function ml_kem_pke_pk_len(): number;
+/**
+ * This function is *not* used by relayer-sdk because the encryption
+ * happens on the KMS side. It's just here for completeness and tests.
+ */
+export function ml_kem_pke_encrypt(msg: Uint8Array, their_pk: PublicEncKeyMlKem512): Uint8Array;
 /**
  * Process the user_decryption response from Rust objects.
  * Consider using [process_user_decryption_resp_from_js]
@@ -130,6 +112,24 @@ export function process_user_decryption_resp_from_js(client: Client, request: an
  * It is insecure if `verify = false`!
  */
 export function process_user_decryption_resp(client: Client, request: ParsedUserDecryptionRequest | null | undefined, eip712_domain: Eip712DomainMsg | null | undefined, agg_resp: UserDecryptionResponse[], enc_pk: PublicEncKeyMlKem512, enc_sk: PrivateEncKeyMlKem512, verify: boolean): TypedPlaintext[];
+export function public_sig_key_to_u8vec(pk: PublicSigKey): Uint8Array;
+export function get_server_addrs(client: Client): ServerIdAddr[];
+export function u8vec_to_private_sig_key(v: Uint8Array): PrivateSigKey;
+export function get_client_address(client: Client): string;
+/**
+ * Instantiate a new client.
+ *
+ * * `server_addrs` - a list of KMS server ID with EIP-55 addresses,
+ * the elements in the list can be created using [new_server_id_addr].
+ *
+ * * `client_address_hex` - the client (wallet) address in hex,
+ * must be prefixed with "0x".
+ *
+ * * `fhe_parameter` - the parameter choice, which can be either `"test"` or `"default"`.
+ * The "default" parameter choice is selected if no matching string is found.
+ */
+export function new_client(server_addrs: ServerIdAddr[], client_address_hex: string, fhe_parameter: string): Client;
+export function get_client_secret_key(client: Client): PrivateSigKey | undefined;
 export class CiphertextHandle {
   private constructor();
   free(): void;
@@ -391,108 +391,108 @@ export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembl
 export interface InitOutput {
   readonly memory: WebAssembly.Memory;
   readonly __wbg_client_free: (a: number, b: number) => void;
-  readonly __wbg_ciphertexthandle_free: (a: number, b: number) => void;
-  readonly __wbg_parseduserdecryptionrequest_free: (a: number, b: number) => void;
-  readonly __wbg_publicsigkey_free: (a: number, b: number) => void;
-  readonly __wbg_privatesigkey_free: (a: number, b: number) => void;
   readonly __wbg_privateenckeymlkem512_free: (a: number, b: number) => void;
   readonly __wbg_publicenckeymlkem512_free: (a: number, b: number) => void;
-  readonly ml_kem_pke_pk_len: () => number;
-  readonly ml_kem_pke_sk_len: () => number;
-  readonly public_sig_key_to_u8vec: (a: number) => [number, number];
-  readonly u8vec_to_public_sig_key: (a: number, b: number) => [number, number, number];
-  readonly private_sig_key_to_u8vec: (a: number) => [number, number, number, number];
-  readonly u8vec_to_private_sig_key: (a: number, b: number) => [number, number, number];
   readonly __wbg_serveridaddr_free: (a: number, b: number) => void;
-  readonly new_server_id_addr: (a: number, b: number, c: number) => [number, number, number];
-  readonly new_client: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
-  readonly get_server_addrs: (a: number) => [number, number];
-  readonly get_client_secret_key: (a: number) => number;
   readonly get_client_address: (a: number) => [number, number];
-  readonly ml_kem_pke_keygen: () => number;
+  readonly get_client_secret_key: (a: number) => number;
+  readonly get_server_addrs: (a: number) => [number, number];
+  readonly ml_kem_pke_decrypt: (a: number, b: number, c: number) => [number, number];
+  readonly ml_kem_pke_encrypt: (a: number, b: number, c: number) => [number, number];
   readonly ml_kem_pke_get_pk: (a: number) => number;
+  readonly ml_kem_pke_keygen: () => number;
+  readonly ml_kem_pke_pk_len: () => number;
   readonly ml_kem_pke_pk_to_u8vec: (a: number) => [number, number, number, number];
+  readonly ml_kem_pke_sk_len: () => number;
   readonly ml_kem_pke_sk_to_u8vec: (a: number) => [number, number, number, number];
+  readonly new_client: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+  readonly new_server_id_addr: (a: number, b: number, c: number) => [number, number, number];
+  readonly private_sig_key_to_u8vec: (a: number) => [number, number, number, number];
+  readonly process_user_decryption_resp: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
+  readonly process_user_decryption_resp_from_js: (a: number, b: any, c: any, d: any, e: number, f: number, g: number) => [number, number, number, number];
+  readonly public_sig_key_to_u8vec: (a: number) => [number, number];
   readonly u8vec_to_ml_kem_pke_pk: (a: number, b: number) => [number, number, number];
   readonly u8vec_to_ml_kem_pke_sk: (a: number, b: number) => [number, number, number];
-  readonly ml_kem_pke_encrypt: (a: number, b: number, c: number) => [number, number];
-  readonly ml_kem_pke_decrypt: (a: number, b: number, c: number) => [number, number];
-  readonly process_user_decryption_resp_from_js: (a: number, b: any, c: any, d: any, e: number, f: number, g: number) => [number, number, number, number];
-  readonly process_user_decryption_resp: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
-  readonly __wbg_requestid_free: (a: number, b: number) => void;
-  readonly __wbg_get_requestid_request_id: (a: number) => [number, number];
-  readonly __wbg_typedciphertext_free: (a: number, b: number) => void;
-  readonly __wbg_get_typedciphertext_ciphertext: (a: number) => [number, number];
-  readonly __wbg_get_typedciphertext_fhe_type: (a: number) => number;
-  readonly __wbg_set_typedciphertext_fhe_type: (a: number, b: number) => void;
-  readonly __wbg_get_typedciphertext_external_handle: (a: number) => [number, number];
-  readonly __wbg_get_typedciphertext_ciphertext_format: (a: number) => number;
-  readonly __wbg_set_typedciphertext_ciphertext_format: (a: number, b: number) => void;
+  readonly u8vec_to_private_sig_key: (a: number, b: number) => [number, number, number];
+  readonly u8vec_to_public_sig_key: (a: number, b: number) => [number, number, number];
+  readonly __wbg_ciphertexthandle_free: (a: number, b: number) => void;
+  readonly __wbg_parseduserdecryptionrequest_free: (a: number, b: number) => void;
+  readonly __wbg_privatesigkey_free: (a: number, b: number) => void;
+  readonly __wbg_publicsigkey_free: (a: number, b: number) => void;
   readonly __wbg_eip712domainmsg_free: (a: number, b: number) => void;
-  readonly __wbg_get_eip712domainmsg_name: (a: number) => [number, number];
-  readonly __wbg_set_eip712domainmsg_name: (a: number, b: number, c: number) => void;
-  readonly __wbg_get_eip712domainmsg_version: (a: number) => [number, number];
-  readonly __wbg_set_eip712domainmsg_version: (a: number, b: number, c: number) => void;
   readonly __wbg_get_eip712domainmsg_chain_id: (a: number) => [number, number];
-  readonly __wbg_set_eip712domainmsg_chain_id: (a: number, b: number, c: number) => void;
-  readonly __wbg_get_eip712domainmsg_verifying_contract: (a: number) => [number, number];
-  readonly __wbg_set_eip712domainmsg_verifying_contract: (a: number, b: number, c: number) => void;
+  readonly __wbg_get_eip712domainmsg_name: (a: number) => [number, number];
   readonly __wbg_get_eip712domainmsg_salt: (a: number) => [number, number];
-  readonly __wbg_set_eip712domainmsg_salt: (a: number, b: number, c: number) => void;
-  readonly __wbg_userdecryptionrequest_free: (a: number, b: number) => void;
-  readonly __wbg_get_userdecryptionrequest_request_id: (a: number) => number;
-  readonly __wbg_set_userdecryptionrequest_request_id: (a: number, b: number) => void;
-  readonly __wbg_get_userdecryptionrequest_typed_ciphertexts: (a: number) => [number, number];
-  readonly __wbg_set_userdecryptionrequest_typed_ciphertexts: (a: number, b: number, c: number) => void;
-  readonly __wbg_get_userdecryptionrequest_key_id: (a: number) => number;
-  readonly __wbg_set_userdecryptionrequest_key_id: (a: number, b: number) => void;
+  readonly __wbg_get_eip712domainmsg_verifying_contract: (a: number) => [number, number];
+  readonly __wbg_get_eip712domainmsg_version: (a: number) => [number, number];
+  readonly __wbg_get_requestid_request_id: (a: number) => [number, number];
+  readonly __wbg_get_typedciphertext_ciphertext: (a: number) => [number, number];
+  readonly __wbg_get_typedciphertext_ciphertext_format: (a: number) => number;
+  readonly __wbg_get_typedciphertext_external_handle: (a: number) => [number, number];
+  readonly __wbg_get_typedciphertext_fhe_type: (a: number) => number;
+  readonly __wbg_get_typedplaintext_fhe_type: (a: number) => number;
   readonly __wbg_get_userdecryptionrequest_client_address: (a: number) => [number, number];
+  readonly __wbg_get_userdecryptionrequest_context_id: (a: number) => number;
   readonly __wbg_get_userdecryptionrequest_domain: (a: number) => number;
-  readonly __wbg_set_userdecryptionrequest_domain: (a: number, b: number) => void;
+  readonly __wbg_get_userdecryptionrequest_epoch_id: (a: number) => number;
   readonly __wbg_get_userdecryptionrequest_extra_data: (a: number) => [number, number];
-  readonly __wbg_get_userdecryptionrequest_context_id: (a: number) => number;
+  readonly __wbg_get_userdecryptionrequest_key_id: (a: number) => number;
+  readonly __wbg_get_userdecryptionrequest_request_id: (a: number) => number;
+  readonly __wbg_get_userdecryptionrequest_typed_ciphertexts: (a: number) => [number, number];
+  readonly __wbg_get_userdecryptionresponse_payload: (a: number) => number;
+  readonly __wbg_get_userdecryptionresponsepayload_degree: (a: number) => number;
+  readonly __wbg_get_userdecryptionresponsepayload_party_id: (a: number) => number;
+  readonly __wbg_get_userdecryptionresponsepayload_signcrypted_ciphertexts: (a: number) => [number, number];
+  readonly __wbg_requestid_free: (a: number, b: number) => void;
+  readonly __wbg_set_eip712domainmsg_chain_id: (a: number, b: number, c: number) => void;
+  readonly __wbg_set_eip712domainmsg_name: (a: number, b: number, c: number) => void;
+  readonly __wbg_set_eip712domainmsg_salt: (a: number, b: number, c: number) => void;
+  readonly __wbg_set_eip712domainmsg_verifying_contract: (a: number, b: number, c: number) => void;
+  readonly __wbg_set_eip712domainmsg_version: (a: number, b: number, c: number) => void;
+  readonly __wbg_set_typedciphertext_ciphertext_format: (a: number, b: number) => void;
+  readonly __wbg_set_typedciphertext_fhe_type: (a: number, b: number) => void;
+  readonly __wbg_set_typedplaintext_fhe_type: (a: number, b: number) => void;
   readonly __wbg_set_userdecryptionrequest_context_id: (a: number, b: number) => void;
-  readonly __wbg_get_userdecryptionrequest_epoch_id: (a: number) => number;
+  readonly __wbg_set_userdecryptionrequest_domain: (a: number, b: number) => void;
   readonly __wbg_set_userdecryptionrequest_epoch_id: (a: number, b: number) => void;
-  readonly __wbg_userdecryptionresponse_free: (a: number, b: number) => void;
-  readonly __wbg_get_userdecryptionresponse_payload: (a: number) => number;
+  readonly __wbg_set_userdecryptionrequest_key_id: (a: number, b: number) => void;
+  readonly __wbg_set_userdecryptionrequest_request_id: (a: number, b: number) => void;
+  readonly __wbg_set_userdecryptionrequest_typed_ciphertexts: (a: number, b: number, c: number) => void;
   readonly __wbg_set_userdecryptionresponse_payload: (a: number, b: number) => void;
-  readonly __wbg_userdecryptionresponsepayload_free: (a: number, b: number) => void;
-  readonly __wbg_get_userdecryptionresponsepayload_signcrypted_ciphertexts: (a: number) => [number, number];
-  readonly __wbg_set_userdecryptionresponsepayload_signcrypted_ciphertexts: (a: number, b: number, c: number) => void;
-  readonly __wbg_get_userdecryptionresponsepayload_party_id: (a: number) => number;
-  readonly __wbg_set_userdecryptionresponsepayload_party_id: (a: number, b: number) => void;
-  readonly __wbg_get_userdecryptionresponsepayload_degree: (a: number) => number;
   readonly __wbg_set_userdecryptionresponsepayload_degree: (a: number, b: number) => void;
+  readonly __wbg_set_userdecryptionresponsepayload_party_id: (a: number, b: number) => void;
+  readonly __wbg_set_userdecryptionresponsepayload_signcrypted_ciphertexts: (a: number, b: number, c: number) => void;
+  readonly __wbg_typedciphertext_free: (a: number, b: number) => void;
   readonly __wbg_typedplaintext_free: (a: number, b: number) => void;
-  readonly __wbg_get_typedplaintext_fhe_type: (a: number) => number;
-  readonly __wbg_set_typedplaintext_fhe_type: (a: number, b: number) => void;
   readonly __wbg_typedsigncryptedciphertext_free: (a: number, b: number) => void;
+  readonly __wbg_userdecryptionrequest_free: (a: number, b: number) => void;
+  readonly __wbg_userdecryptionresponse_free: (a: number, b: number) => void;
+  readonly __wbg_userdecryptionresponsepayload_free: (a: number, b: number) => void;
   readonly __wbg_set_typedsigncryptedciphertext_fhe_type: (a: number, b: number) => void;
   readonly __wbg_set_typedsigncryptedciphertext_packing_factor: (a: number, b: number) => void;
-  readonly __wbg_set_typedciphertext_ciphertext: (a: number, b: number, c: number) => void;
   readonly __wbg_set_requestid_request_id: (a: number, b: number, c: number) => void;
+  readonly __wbg_set_typedciphertext_ciphertext: (a: number, b: number, c: number) => void;
   readonly __wbg_set_typedciphertext_external_handle: (a: number, b: number, c: number) => void;
+  readonly __wbg_set_typedplaintext_bytes: (a: number, b: number, c: number) => void;
+  readonly __wbg_set_typedsigncryptedciphertext_external_handle: (a: number, b: number, c: number) => void;
+  readonly __wbg_set_typedsigncryptedciphertext_signcrypted_ciphertext: (a: number, b: number, c: number) => void;
   readonly __wbg_set_userdecryptionrequest_client_address: (a: number, b: number, c: number) => void;
   readonly __wbg_set_userdecryptionrequest_enc_key: (a: number, b: number, c: number) => void;
   readonly __wbg_set_userdecryptionrequest_extra_data: (a: number, b: number, c: number) => void;
-  readonly __wbg_set_userdecryptionresponse_signature: (a: number, b: number, c: number) => void;
   readonly __wbg_set_userdecryptionresponse_external_signature: (a: number, b: number, c: number) => void;
   readonly __wbg_set_userdecryptionresponse_extra_data: (a: number, b: number, c: number) => void;
-  readonly __wbg_set_userdecryptionresponsepayload_verification_key: (a: number, b: number, c: number) => void;
+  readonly __wbg_set_userdecryptionresponse_signature: (a: number, b: number, c: number) => void;
   readonly __wbg_set_userdecryptionresponsepayload_digest: (a: number, b: number, c: number) => void;
-  readonly __wbg_set_typedplaintext_bytes: (a: number, b: number, c: number) => void;
-  readonly __wbg_set_typedsigncryptedciphertext_signcrypted_ciphertext: (a: number, b: number, c: number) => void;
-  readonly __wbg_set_typedsigncryptedciphertext_external_handle: (a: number, b: number, c: number) => void;
+  readonly __wbg_set_userdecryptionresponsepayload_verification_key: (a: number, b: number, c: number) => void;
+  readonly __wbg_get_typedplaintext_bytes: (a: number) => [number, number];
+  readonly __wbg_get_typedsigncryptedciphertext_external_handle: (a: number) => [number, number];
+  readonly __wbg_get_typedsigncryptedciphertext_signcrypted_ciphertext: (a: number) => [number, number];
   readonly __wbg_get_userdecryptionrequest_enc_key: (a: number) => [number, number];
-  readonly __wbg_get_userdecryptionresponse_signature: (a: number) => [number, number];
   readonly __wbg_get_userdecryptionresponse_external_signature: (a: number) => [number, number];
   readonly __wbg_get_userdecryptionresponse_extra_data: (a: number) => [number, number];
-  readonly __wbg_get_userdecryptionresponsepayload_verification_key: (a: number) => [number, number];
+  readonly __wbg_get_userdecryptionresponse_signature: (a: number) => [number, number];
   readonly __wbg_get_userdecryptionresponsepayload_digest: (a: number) => [number, number];
-  readonly __wbg_get_typedplaintext_bytes: (a: number) => [number, number];
-  readonly __wbg_get_typedsigncryptedciphertext_signcrypted_ciphertext: (a: number) => [number, number];
-  readonly __wbg_get_typedsigncryptedciphertext_external_handle: (a: number) => [number, number];
+  readonly __wbg_get_userdecryptionresponsepayload_verification_key: (a: number) => [number, number];
   readonly __wbg_get_typedsigncryptedciphertext_fhe_type: (a: number) => number;
   readonly __wbg_get_typedsigncryptedciphertext_packing_factor: (a: number) => number;
   readonly __wbindgen_malloc: (a: number, b: number) => number;

package/kms_lib.js

@@ -166,21 +166,6 @@ function debugString(val) {
     // TODO we could test for more things here, like `Set`s and `Map`s.
     return className;
 }
-/**
- * @returns {number}
- */
-export function ml_kem_pke_pk_len() {
-    const ret = wasm.ml_kem_pke_pk_len();
-    return ret >>> 0;
-}
-
-/**
- * @returns {number}
- */
-export function ml_kem_pke_sk_len() {
-    const ret = wasm.ml_kem_pke_sk_len();
-    return ret >>> 0;
-}
 
 function _assertClass(instance, klass) {
     if (!(instance instanceof klass)) {
@@ -188,75 +173,110 @@ function _assertClass(instance, klass) {
     }
 }
 
-function getArrayU8FromWasm0(ptr, len) {
-    ptr = ptr >>> 0;
-    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
-}
-/**
- * @param {PublicSigKey} pk
- * @returns {Uint8Array}
- */
-export function public_sig_key_to_u8vec(pk) {
-    _assertClass(pk, PublicSigKey);
-    const ret = wasm.public_sig_key_to_u8vec(pk.__wbg_ptr);
-    var v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
-    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
-    return v1;
-}
-
-function passArray8ToWasm0(arg, malloc) {
-    const ptr = malloc(arg.length * 1, 1) >>> 0;
-    getUint8ArrayMemory0().set(arg, ptr / 1);
-    WASM_VECTOR_LEN = arg.length;
-    return ptr;
-}
-
 function takeFromExternrefTable0(idx) {
     const value = wasm.__wbindgen_export_4.get(idx);
     wasm.__externref_table_dealloc(idx);
     return value;
 }
-/**
- * @param {Uint8Array} v
- * @returns {PublicSigKey}
- */
-export function u8vec_to_public_sig_key(v) {
-    const ptr0 = passArray8ToWasm0(v, wasm.__wbindgen_malloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ret = wasm.u8vec_to_public_sig_key(ptr0, len0);
-    if (ret[2]) {
-        throw takeFromExternrefTable0(ret[1]);
+
+function getArrayJsValueFromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    const mem = getDataViewMemory0();
+    const result = [];
+    for (let i = ptr; i < ptr + 4 * len; i += 4) {
+        result.push(wasm.__wbindgen_export_4.get(mem.getUint32(i, true)));
     }
-    return PublicSigKey.__wrap(ret[0]);
+    wasm.__externref_drop_slice(ptr, len);
+    return result;
 }
-
 /**
- * @param {PrivateSigKey} sk
- * @returns {Uint8Array}
+ * Process the user_decryption response from JavaScript objects.
+ * The returned result is a byte array representing a plaintext of any length,
+ * postprocessing is returned to turn it into an integer.
+ *
+ * * `client` - client that wants to perform user_decryption.
+ *
+ * * `request` - the initial user_decryption request JS object.
+ * It can be set to null if `verify` is false.
+ * Otherwise the caller needs to give the following JS object.
+ * Note that `client_address` and `eip712_verifying_contract` follow EIP-55.
+ * The signature field is not needed.
+ * ```
+ * {
+ *   signature: undefined,
+ *   client_address: '0x17853A630aAe15AED549B2B874de08B73C0F59c5',
+ *   enc_key: '2000000000000000df2fcacb774f03187f3802a27259f45c06d33cefa68d9c53426b15ad531aa822',
+ *   ciphertext_handles: [ '0748b542afe2353c86cb707e3d21044b0be1fd18efc7cbaa6a415af055bfb358' ]
+ *   eip712_verifying_contract: '0x66f9664f97F2b50F62D13eA064982f936dE76657'
+ * }
+ * ```
+ *
+ * * `eip712_domain` - the EIP-712 domain JS object.
+ * It can be set to null if `verify` is false.
+ * Otherwise the caller needs to give the following JS object.
+ * Note that `salt` is optional and `verifying_contract` follows EIP-55,
+ * additionally, `chain_id` is an array of u8.
+ * ```
+ * {
+ *   name: 'Authorization token',
+ *   version: '1',
+ *   chain_id: [
+ *     70, 31, 0, 0, 0, 0, 0, 0, 0,
+ *      0,  0, 0, 0, 0, 0, 0, 0, 0,
+ *      0,  0, 0, 0, 0, 0, 0, 0, 0,
+ *      0,  0, 0, 0, 0
+ *   ],
+ *   verifying_contract: '0x66f9664f97F2b50F62D13eA064982f936dE76657',
+ *   salt: []
+ * }
+ * ```
+ *
+ * * `agg_resp` - the response JS object from the gateway.
+ * It has two fields like so, both are hex encoded byte arrays.
+ * ```
+ * [
+ *   {
+ *     signature: '69e7e040cab157aa819015b321c012dccb1545ffefd325b359b492653f0347517e28e66c572cdc299e259024329859ff9fcb0096e1ce072af0b6e1ca1fe25ec6',
+ *     payload: '0100000029...',
+ *     extra_data: '01234...',
+ *   }
+ * ]
+ * ```
+ *
+ * * `enc_pk` - The ephemeral public key.
+ *
+ * * `enc_sk` - The ephemeral secret key.
+ *
+ * * `verify` - Whether to perform signature verification for the response.
+ * It is insecure if `verify = false`!
+ * @param {Client} client
+ * @param {any} request
+ * @param {any} eip712_domain
+ * @param {any} agg_resp
+ * @param {PublicEncKeyMlKem512} enc_pk
+ * @param {PrivateEncKeyMlKem512} enc_sk
+ * @param {boolean} verify
+ * @returns {TypedPlaintext[]}
  */
-export function private_sig_key_to_u8vec(sk) {
-    _assertClass(sk, PrivateSigKey);
-    const ret = wasm.private_sig_key_to_u8vec(sk.__wbg_ptr);
+export function process_user_decryption_resp_from_js(client, request, eip712_domain, agg_resp, enc_pk, enc_sk, verify) {
+    _assertClass(client, Client);
+    _assertClass(enc_pk, PublicEncKeyMlKem512);
+    _assertClass(enc_sk, PrivateEncKeyMlKem512);
+    const ret = wasm.process_user_decryption_resp_from_js(client.__wbg_ptr, request, eip712_domain, agg_resp, enc_pk.__wbg_ptr, enc_sk.__wbg_ptr, verify);
     if (ret[3]) {
         throw takeFromExternrefTable0(ret[2]);
     }
-    var v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
-    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
     return v1;
 }
 
 /**
- * @param {Uint8Array} v
- * @returns {PrivateSigKey}
+ * @returns {PrivateEncKeyMlKem512}
  */
-export function u8vec_to_private_sig_key(v) {
-    const ptr0 = passArray8ToWasm0(v, wasm.__wbindgen_malloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ret = wasm.u8vec_to_private_sig_key(ptr0, len0);
-    if (ret[2]) {
-        throw takeFromExternrefTable0(ret[1]);
-    }
-    return PrivateSigKey.__wrap(ret[0]);
+export function ml_kem_pke_keygen() {
+    const ret = wasm.ml_kem_pke_keygen();
+    return PrivateEncKeyMlKem512.__wrap(ret);
 }
 
 /**
@@ -276,120 +296,102 @@ export function new_server_id_addr(id, addr) {
     return ServerIdAddr.__wrap(ret[0]);
 }
 
-function passArrayJsValueToWasm0(array, malloc) {
-    const ptr = malloc(array.length * 4, 4) >>> 0;
-    for (let i = 0; i < array.length; i++) {
-        const add = addToExternrefTable0(array[i]);
-        getDataViewMemory0().setUint32(ptr + 4 * i, add, true);
-    }
-    WASM_VECTOR_LEN = array.length;
-    return ptr;
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
 }
 /**
- * Instantiate a new client.
- *
- * * `server_addrs` - a list of KMS server ID with EIP-55 addresses,
- * the elements in the list can be created using [new_server_id_addr].
- *
- * * `client_address_hex` - the client (wallet) address in hex,
- * must be prefixed with "0x".
- *
- * * `fhe_parameter` - the parameter choice, which can be either `"test"` or `"default"`.
- * The "default" parameter choice is selected if no matching string is found.
- * @param {ServerIdAddr[]} server_addrs
- * @param {string} client_address_hex
- * @param {string} fhe_parameter
- * @returns {Client}
+ * @param {PrivateSigKey} sk
+ * @returns {Uint8Array}
  */
-export function new_client(server_addrs, client_address_hex, fhe_parameter) {
-    const ptr0 = passArrayJsValueToWasm0(server_addrs, wasm.__wbindgen_malloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ptr1 = passStringToWasm0(client_address_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-    const len1 = WASM_VECTOR_LEN;
-    const ptr2 = passStringToWasm0(fhe_parameter, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-    const len2 = WASM_VECTOR_LEN;
-    const ret = wasm.new_client(ptr0, len0, ptr1, len1, ptr2, len2);
-    if (ret[2]) {
-        throw takeFromExternrefTable0(ret[1]);
+export function private_sig_key_to_u8vec(sk) {
+    _assertClass(sk, PrivateSigKey);
+    const ret = wasm.private_sig_key_to_u8vec(sk.__wbg_ptr);
+    if (ret[3]) {
+        throw takeFromExternrefTable0(ret[2]);
     }
-    return Client.__wrap(ret[0]);
+    var v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v1;
 }
 
-function getArrayJsValueFromWasm0(ptr, len) {
-    ptr = ptr >>> 0;
-    const mem = getDataViewMemory0();
-    const result = [];
-    for (let i = ptr; i < ptr + 4 * len; i += 4) {
-        result.push(wasm.__wbindgen_export_4.get(mem.getUint32(i, true)));
-    }
-    wasm.__externref_drop_slice(ptr, len);
-    return result;
-}
 /**
- * @param {Client} client
- * @returns {ServerIdAddr[]}
+ * @param {PrivateEncKeyMlKem512} sk
+ * @returns {PublicEncKeyMlKem512}
  */
-export function get_server_addrs(client) {
-    _assertClass(client, Client);
-    const ret = wasm.get_server_addrs(client.__wbg_ptr);
-    var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]).slice();
-    wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
-    return v1;
+export function ml_kem_pke_get_pk(sk) {
+    _assertClass(sk, PrivateEncKeyMlKem512);
+    const ret = wasm.ml_kem_pke_get_pk(sk.__wbg_ptr);
+    return PublicEncKeyMlKem512.__wrap(ret);
 }
 
+function passArray8ToWasm0(arg, malloc) {
+    const ptr = malloc(arg.length * 1, 1) >>> 0;
+    getUint8ArrayMemory0().set(arg, ptr / 1);
+    WASM_VECTOR_LEN = arg.length;
+    return ptr;
+}
 /**
- * @param {Client} client
- * @returns {PrivateSigKey | undefined}
+ * @param {Uint8Array} v
+ * @returns {PublicEncKeyMlKem512}
  */
-export function get_client_secret_key(client) {
-    _assertClass(client, Client);
-    const ret = wasm.get_client_secret_key(client.__wbg_ptr);
-    return ret === 0 ? undefined : PrivateSigKey.__wrap(ret);
+export function u8vec_to_ml_kem_pke_pk(v) {
+    const ptr0 = passArray8ToWasm0(v, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.u8vec_to_ml_kem_pke_pk(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return PublicEncKeyMlKem512.__wrap(ret[0]);
 }
 
 /**
- * @param {Client} client
- * @returns {string}
+ * @returns {number}
  */
-export function get_client_address(client) {
-    let deferred1_0;
-    let deferred1_1;
-    try {
-        _assertClass(client, Client);
-        const ret = wasm.get_client_address(client.__wbg_ptr);
-        deferred1_0 = ret[0];
-        deferred1_1 = ret[1];
-        return getStringFromWasm0(ret[0], ret[1]);
-    } finally {
-        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
-    }
+export function ml_kem_pke_sk_len() {
+    const ret = wasm.ml_kem_pke_sk_len();
+    return ret >>> 0;
 }
 
 /**
- * @returns {PrivateEncKeyMlKem512}
+ * This function is *not* used by relayer-sdk because the decryption
+ * is handled by [process_user_decryption_resp].
+ * It's just here for completeness and tests.
+ * @param {Uint8Array} ct
+ * @param {PrivateEncKeyMlKem512} my_sk
+ * @returns {Uint8Array}
  */
-export function ml_kem_pke_keygen() {
-    const ret = wasm.ml_kem_pke_keygen();
-    return PrivateEncKeyMlKem512.__wrap(ret);
+export function ml_kem_pke_decrypt(ct, my_sk) {
+    const ptr0 = passArray8ToWasm0(ct, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    _assertClass(my_sk, PrivateEncKeyMlKem512);
+    const ret = wasm.ml_kem_pke_decrypt(ptr0, len0, my_sk.__wbg_ptr);
+    var v2 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v2;
 }
 
 /**
- * @param {PrivateEncKeyMlKem512} sk
- * @returns {PublicEncKeyMlKem512}
+ * @param {Uint8Array} v
+ * @returns {PublicSigKey}
  */
-export function ml_kem_pke_get_pk(sk) {
-    _assertClass(sk, PrivateEncKeyMlKem512);
-    const ret = wasm.ml_kem_pke_get_pk(sk.__wbg_ptr);
-    return PublicEncKeyMlKem512.__wrap(ret);
+export function u8vec_to_public_sig_key(v) {
+    const ptr0 = passArray8ToWasm0(v, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.u8vec_to_public_sig_key(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return PublicSigKey.__wrap(ret[0]);
 }
 
 /**
- * @param {PublicEncKeyMlKem512} pk
+ * @param {PrivateEncKeyMlKem512} sk
  * @returns {Uint8Array}
  */
-export function ml_kem_pke_pk_to_u8vec(pk) {
-    _assertClass(pk, PublicEncKeyMlKem512);
-    const ret = wasm.ml_kem_pke_pk_to_u8vec(pk.__wbg_ptr);
+export function ml_kem_pke_sk_to_u8vec(sk) {
+    _assertClass(sk, PrivateEncKeyMlKem512);
+    const ret = wasm.ml_kem_pke_sk_to_u8vec(sk.__wbg_ptr);
     if (ret[3]) {
         throw takeFromExternrefTable0(ret[2]);
     }
@@ -399,12 +401,12 @@ export function ml_kem_pke_pk_to_u8vec(pk) {
 }
 
 /**
- * @param {PrivateEncKeyMlKem512} sk
+ * @param {PublicEncKeyMlKem512} pk
  * @returns {Uint8Array}
  */
-export function ml_kem_pke_sk_to_u8vec(sk) {
-    _assertClass(sk, PrivateEncKeyMlKem512);
-    const ret = wasm.ml_kem_pke_sk_to_u8vec(sk.__wbg_ptr);
+export function ml_kem_pke_pk_to_u8vec(pk) {
+    _assertClass(pk, PublicEncKeyMlKem512);
+    const ret = wasm.ml_kem_pke_pk_to_u8vec(pk.__wbg_ptr);
     if (ret[3]) {
         throw takeFromExternrefTable0(ret[2]);
     }
@@ -413,20 +415,6 @@ export function ml_kem_pke_sk_to_u8vec(sk) {
     return v1;
 }
 
-/**
- * @param {Uint8Array} v
- * @returns {PublicEncKeyMlKem512}
- */
-export function u8vec_to_ml_kem_pke_pk(v) {
-    const ptr0 = passArray8ToWasm0(v, wasm.__wbindgen_malloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ret = wasm.u8vec_to_ml_kem_pke_pk(ptr0, len0);
-    if (ret[2]) {
-        throw takeFromExternrefTable0(ret[1]);
-    }
-    return PublicEncKeyMlKem512.__wrap(ret[0]);
-}
-
 /**
  * @param {Uint8Array} v
  * @returns {PrivateEncKeyMlKem512}
@@ -441,6 +429,14 @@ export function u8vec_to_ml_kem_pke_sk(v) {
     return PrivateEncKeyMlKem512.__wrap(ret[0]);
 }
 
+/**
+ * @returns {number}
+ */
+export function ml_kem_pke_pk_len() {
+    const ret = wasm.ml_kem_pke_pk_len();
+    return ret >>> 0;
+}
+
 /**
  * This function is *not* used by relayer-sdk because the encryption
  * happens on the KMS side. It's just here for completeness and tests.
@@ -458,106 +454,15 @@ export function ml_kem_pke_encrypt(msg, their_pk) {
     return v2;
 }
 
-/**
- * This function is *not* used by relayer-sdk because the decryption
- * is handled by [process_user_decryption_resp].
- * It's just here for completeness and tests.
- * @param {Uint8Array} ct
- * @param {PrivateEncKeyMlKem512} my_sk
- * @returns {Uint8Array}
- */
-export function ml_kem_pke_decrypt(ct, my_sk) {
-    const ptr0 = passArray8ToWasm0(ct, wasm.__wbindgen_malloc);
-    const len0 = WASM_VECTOR_LEN;
-    _assertClass(my_sk, PrivateEncKeyMlKem512);
-    const ret = wasm.ml_kem_pke_decrypt(ptr0, len0, my_sk.__wbg_ptr);
-    var v2 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
-    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
-    return v2;
-}
-
-/**
- * Process the user_decryption response from JavaScript objects.
- * The returned result is a byte array representing a plaintext of any length,
- * postprocessing is returned to turn it into an integer.
- *
- * * `client` - client that wants to perform user_decryption.
- *
- * * `request` - the initial user_decryption request JS object.
- * It can be set to null if `verify` is false.
- * Otherwise the caller needs to give the following JS object.
- * Note that `client_address` and `eip712_verifying_contract` follow EIP-55.
- * The signature field is not needed.
- * ```
- * {
- *   signature: undefined,
- *   client_address: '0x17853A630aAe15AED549B2B874de08B73C0F59c5',
- *   enc_key: '2000000000000000df2fcacb774f03187f3802a27259f45c06d33cefa68d9c53426b15ad531aa822',
- *   ciphertext_handles: [ '0748b542afe2353c86cb707e3d21044b0be1fd18efc7cbaa6a415af055bfb358' ]
- *   eip712_verifying_contract: '0x66f9664f97F2b50F62D13eA064982f936dE76657'
- * }
- * ```
- *
- * * `eip712_domain` - the EIP-712 domain JS object.
- * It can be set to null if `verify` is false.
- * Otherwise the caller needs to give the following JS object.
- * Note that `salt` is optional and `verifying_contract` follows EIP-55,
- * additionally, `chain_id` is an array of u8.
- * ```
- * {
- *   name: 'Authorization token',
- *   version: '1',
- *   chain_id: [
- *     70, 31, 0, 0, 0, 0, 0, 0, 0,
- *      0,  0, 0, 0, 0, 0, 0, 0, 0,
- *      0,  0, 0, 0, 0, 0, 0, 0, 0,
- *      0,  0, 0, 0, 0
- *   ],
- *   verifying_contract: '0x66f9664f97F2b50F62D13eA064982f936dE76657',
- *   salt: []
- * }
- * ```
- *
- * * `agg_resp` - the response JS object from the gateway.
- * It has two fields like so, both are hex encoded byte arrays.
- * ```
- * [
- *   {
- *     signature: '69e7e040cab157aa819015b321c012dccb1545ffefd325b359b492653f0347517e28e66c572cdc299e259024329859ff9fcb0096e1ce072af0b6e1ca1fe25ec6',
- *     payload: '0100000029...',
- *     extra_data: '01234...',
- *   }
- * ]
- * ```
- *
- * * `enc_pk` - The ephemeral public key.
- *
- * * `enc_sk` - The ephemeral secret key.
- *
- * * `verify` - Whether to perform signature verification for the response.
- * It is insecure if `verify = false`!
- * @param {Client} client
- * @param {any} request
- * @param {any} eip712_domain
- * @param {any} agg_resp
- * @param {PublicEncKeyMlKem512} enc_pk
- * @param {PrivateEncKeyMlKem512} enc_sk
- * @param {boolean} verify
- * @returns {TypedPlaintext[]}
- */
-export function process_user_decryption_resp_from_js(client, request, eip712_domain, agg_resp, enc_pk, enc_sk, verify) {
-    _assertClass(client, Client);
-    _assertClass(enc_pk, PublicEncKeyMlKem512);
-    _assertClass(enc_sk, PrivateEncKeyMlKem512);
-    const ret = wasm.process_user_decryption_resp_from_js(client.__wbg_ptr, request, eip712_domain, agg_resp, enc_pk.__wbg_ptr, enc_sk.__wbg_ptr, verify);
-    if (ret[3]) {
-        throw takeFromExternrefTable0(ret[2]);
+function passArrayJsValueToWasm0(array, malloc) {
+    const ptr = malloc(array.length * 4, 4) >>> 0;
+    for (let i = 0; i < array.length; i++) {
+        const add = addToExternrefTable0(array[i]);
+        getDataViewMemory0().setUint32(ptr + 4 * i, add, true);
     }
-    var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]).slice();
-    wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
-    return v1;
+    WASM_VECTOR_LEN = array.length;
+    return ptr;
 }
-
 /**
  * Process the user_decryption response from Rust objects.
  * Consider using [process_user_decryption_resp_from_js]
@@ -614,6 +519,102 @@ export function process_user_decryption_resp(client, request, eip712_domain, agg
     return v4;
 }
 
+/**
+ * @param {PublicSigKey} pk
+ * @returns {Uint8Array}
+ */
+export function public_sig_key_to_u8vec(pk) {
+    _assertClass(pk, PublicSigKey);
+    const ret = wasm.public_sig_key_to_u8vec(pk.__wbg_ptr);
+    var v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+    return v1;
+}
+
+/**
+ * @param {Client} client
+ * @returns {ServerIdAddr[]}
+ */
+export function get_server_addrs(client) {
+    _assertClass(client, Client);
+    const ret = wasm.get_server_addrs(client.__wbg_ptr);
+    var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]).slice();
+    wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
+    return v1;
+}
+
+/**
+ * @param {Uint8Array} v
+ * @returns {PrivateSigKey}
+ */
+export function u8vec_to_private_sig_key(v) {
+    const ptr0 = passArray8ToWasm0(v, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.u8vec_to_private_sig_key(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return PrivateSigKey.__wrap(ret[0]);
+}
+
+/**
+ * @param {Client} client
+ * @returns {string}
+ */
+export function get_client_address(client) {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        _assertClass(client, Client);
+        const ret = wasm.get_client_address(client.__wbg_ptr);
+        deferred1_0 = ret[0];
+        deferred1_1 = ret[1];
+        return getStringFromWasm0(ret[0], ret[1]);
+    } finally {
+        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+    }
+}
+
+/**
+ * Instantiate a new client.
+ *
+ * * `server_addrs` - a list of KMS server ID with EIP-55 addresses,
+ * the elements in the list can be created using [new_server_id_addr].
+ *
+ * * `client_address_hex` - the client (wallet) address in hex,
+ * must be prefixed with "0x".
+ *
+ * * `fhe_parameter` - the parameter choice, which can be either `"test"` or `"default"`.
+ * The "default" parameter choice is selected if no matching string is found.
+ * @param {ServerIdAddr[]} server_addrs
+ * @param {string} client_address_hex
+ * @param {string} fhe_parameter
+ * @returns {Client}
+ */
+export function new_client(server_addrs, client_address_hex, fhe_parameter) {
+    const ptr0 = passArrayJsValueToWasm0(server_addrs, wasm.__wbindgen_malloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(client_address_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passStringToWasm0(fhe_parameter, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len2 = WASM_VECTOR_LEN;
+    const ret = wasm.new_client(ptr0, len0, ptr1, len1, ptr2, len2);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return Client.__wrap(ret[0]);
+}
+
+/**
+ * @param {Client} client
+ * @returns {PrivateSigKey | undefined}
+ */
+export function get_client_secret_key(client) {
+    _assertClass(client, Client);
+    const ret = wasm.get_client_secret_key(client.__wbg_ptr);
+    return ret === 0 ? undefined : PrivateSigKey.__wrap(ret);
+}
+
 const CiphertextHandleFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_ciphertexthandle_free(ptr >>> 0, 1));

package/package.json

@@ -5,7 +5,7 @@
     "Zama"
   ],
   "description": "Key Management System for the Zama Protocol.",
-  "version": "0.12.4",
+  "version": "0.12.7",
   "license": "BSD-3-Clause-Clear",
   "repository": {
     "type": "git",