@inco/js 0.1.30 → 0.1.31-alpha.1

package/dist/l1/preflight.js

@@ -0,0 +1,39 @@
+import { Schema } from 'effect';
+import { Bytes32, bytesFromHexString } from '../binary';
+import { MsgRegisterInput } from '../generated/ts/inco/preflight/v1/tx';
+import { computeHandle } from '../handle';
+import { parse } from '../schema';
+import { createL1Client } from './client';
+// Do not export this value, only allow parsing of Handle to happen here
+const Handle = Bytes32.pipe(Schema.brand('Handle'));
+// Sends a preflight input to the Cosmos L1 chain using CosmJS.
+export async function cosmJSPreflight({ cometRpcEndpoint, grpcEndpoint, wallet, signerAddress, }) {
+    const l1Client = await createL1Client({ cometRpcEndpoint, wallet, grpcEndpoint });
+    return {
+        async send({ prehandle, ciphertext, context }) {
+            const msg = MsgRegisterInput.create({
+                prehandle: Buffer.from(prehandle.replace(/^0x/, ''), 'hex'),
+                signer: signerAddress,
+                ciphertext: Buffer.from(ciphertext.value, 'hex'),
+                context: {
+                    ownerAddr: context.userAddress.replace(/^0x/, ''),
+                    contractAddr: context.contractAddress.replace(/^0x/, ''),
+                    // We decided to put the ACL address in the keyset ID field.
+                    keysetId: context.aclAddress.replace(/^0x/, ''),
+                    hostChainId: 'evm/' + context.hostChainId,
+                },
+            });
+            // There are some hidden dependencies needed to make the following line work:
+            //
+            // 1. The signer must have an account on the chain. In Cosmos, this is
+            // usually done by sending some tokens to the account. However, since the
+            // fees are 0, this account doesn't need to have any tokens.
+            // 2. The FheEnv must have been created in the on-chain registry. Only the
+            // council can add new FheEnvs to the registry.
+            const result = await l1Client.sendTx(signerAddress, '/inco.preflight.v1.MsgRegisterInput', msg);
+            const handle = computeHandle({ prehandle: bytesFromHexString(prehandle), context });
+            return { transactionHash: result.transactionHash, handle: parse(Handle, handle) };
+        },
+    };
+}
+//# sourceMappingURL=preflight.js.map

package/dist/l1/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/l1/preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAExD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,cAAc,EAAqB,MAAM,UAAU,CAAC;AAE7D,wEAAwE;AACxE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAsBpD,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,gBAAgB,EAChB,YAAY,EACZ,MAAM,EACN,aAAa,GAC4B;IACzC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAElF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAoB;YAC7D,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC;gBAClC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC;gBAC3D,MAAM,EAAE,aAAa;gBACrB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;gBAChD,OAAO,EAAE;oBACP,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;oBACjD,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;oBACxD,4DAA4D;oBAC5D,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC/C,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW;iBAC1C;aACF,CAAC,CAAC;YAEH,6EAA6E;YAC7E,EAAE;YACF,sEAAsE;YACtE,yEAAyE;YACzE,4DAA4D;YAC5D,0EAA0E;YAC1E,+CAA+C;YAC/C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,qCAAqC,EAAE,GAAG,CAAC,CAAC;YAEhG,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACpF,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACpF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lite/deployments.js

@@ -0,0 +1,17 @@
+// Avoid inporting any other dependencies in this file to avoid serialisation issues downstream in infracto
+import { getSupportedChain } from '../chain';
+import { lightningDeployments } from '../generated/lightning';
+export function getActiveLightningDeployment(chain) {
+    const supportedChain = getSupportedChain(chain);
+    const deployments = lightningDeployments.filter((d) => d.chainId === supportedChain.id);
+    if (!deployments?.length) {
+        throw new Error(`No deployments found for chain ${chain}`);
+    }
+    return deployments[0];
+}
+export function getLightningDeployments(chainId) {
+    const supportedChain = getSupportedChain(chainId);
+    const deployments = lightningDeployments.filter((d) => d.chainId === supportedChain.id);
+    return deployments ?? [];
+}
+//# sourceMappingURL=deployments.js.map

package/dist/lite/deployments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployments.js","sourceRoot":"","sources":["../../src/lite/deployments.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,OAAO,EAAY,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAO9D,MAAM,UAAU,4BAA4B,CAAC,KAAe;IAC1D,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,cAAc,CAAC,EAAE,CAAC,CAAC;IACxF,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAiB;IACvD,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,cAAc,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,WAAW,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/lite/ecies.js

@@ -0,0 +1,124 @@
+import { decrypt as eciesDecrypt, encrypt as eciesEncrypt } from 'ecies-geth';
+import { ec } from 'elliptic';
+import { asBytes32, bytes32ToBigint, bytesFromHexString, bytesToHex } from '../binary';
+import { bigintToPlaintext, ciphertextEnvelopes, encryptionSchemes, getEncryptionSchemeName, } from '../encryption/encryption';
+import { computeHandle, computePrehandle } from '../handle';
+import { decodeInput, encodeInput } from './hadu';
+const secp256k1 = new ec('secp256k1');
+// Convert an ec.KeyPair from the 'elliptic' package (assumed to have geen generated
+// with the secp256k1 curve) to our Secp256k1Keypair type.
+export function toSecp256k1Keypair(kp) {
+    return {
+        scheme: encryptionSchemes.ecies,
+        kp,
+        encodePublicKey() {
+            return new Uint8Array(kp.getPublic().encode('array', false));
+        },
+    };
+}
+// Generate a new ephemeral keypair for reencryption.
+export function generateSecp256k1Keypair() {
+    return toSecp256k1Keypair(secp256k1.genKeyPair());
+}
+// EncodePublicKey encodes an ECIES public key it's 33-byte compressed form.
+export function encodeSecp256k1PublicKey(pub) {
+    return new Uint8Array(pub.encodeCompressed('array'));
+}
+// DecodeSecp256k1PublicKey decodes a 33-byte compressed ECIES public key.
+export function decodeSecp256k1PublicKey(pubKeyCompressed) {
+    return secp256k1.keyFromPublic(pubKeyCompressed, 'array').getPublic();
+}
+// DecodeSecp256k1PrivateKey returns a ECIES secp256k1 private key based on the provided byte slice which is
+// interpreted as an unsigned 256-bit big-endian integer in the range [0, N-1],
+// where N is the order of the curve.
+// where N is the order of the curve.
+//
+// WARNING: This means passing a slice with more than 32 bytes is truncated and
+// that truncated value is reduced modulo N.  Further, 0 is not a valid private
+// key.  It is up to the caller to provide a value in the appropriate range of
+// [1, N-1].  Failure to do so will either result in an invalid private key or
+// potentially weak private keys that have bias that could be exploited.
+//
+// This function primarily exists to provide a mechanism for converting
+// serialized private keys that are already known to be good.
+//
+// For more info, refer to the decred/dcrd documentation:
+// ref: https://pkg.go.dev/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.2.0#PrivKeyFromBytes
+//
+// We don't include any curve parameters or ECIES params, as they are assumed to
+// be the ones in ecies.ECIES_AES128_SHA256 from go-ethereum.
+// ref: https://github.com/ethereum/go-ethereum/blob/v1.15.0/crypto/ecies/params.go#L76-L82
+export function decodeSecp256k1PrivateKey(privKey) {
+    return toSecp256k1Keypair(secp256k1.keyFromPrivate(privKey, 'array'));
+}
+// Given a (usually 3rd-party known) public key, called `pubKeyA`, and an ephemeral
+// private key (usually generated locally), called `privKeyB`, encrypt the `msg`
+// using ECIES, with geth's parameters:
+// ref: https://github.com/ethereum/go-ethereum/blob/v1.15.2/crypto/ecies/ecies.go
+export async function encrypt(pubKeyA, plaintext, privKeyB) {
+    const pubKeyABuffer = Buffer.from(pubKeyA.encode('array', false));
+    const privKeyBBuffer = privKeyB.kp.getPrivate().toArrayLike(Buffer, 'be', 32);
+    const ct = await eciesEncrypt(pubKeyABuffer, Buffer.from(plaintext), {
+        ephemPrivateKey: privKeyBBuffer,
+    });
+    return new Uint8Array(ct);
+}
+export function getEciesEncryptor({ pubKeyA, privKeyB }) {
+    const pubKeyABuffer = Buffer.from(pubKeyA.encode('array', false));
+    const privKeyBBuffer = privKeyB.kp.getPrivate().toArrayLike(Buffer, 'be', 32);
+    return async ({ plaintext, context, }) => {
+        if (plaintext.scheme !== encryptionSchemes.ecies) {
+            throw new Error(`Plaintext with scheme ${getEncryptionSchemeName(plaintext.scheme)} cannot be encrypted with ECIES`);
+        }
+        const ptBuf = Buffer.from(encodeInput({ plaintext, context }));
+        const ct = await eciesEncrypt(pubKeyABuffer, ptBuf, {
+            ephemPrivateKey: privKeyBBuffer,
+        });
+        const prehandle = computePrehandle({
+            ciphertext: ct,
+            handleType: plaintext.type,
+            indexHandle: 0,
+            handleVersion: 0,
+        });
+        const handle = computeHandle({
+            prehandle,
+            context: context,
+        });
+        return {
+            prehandle: asBytes32(prehandle),
+            handle: asBytes32(handle),
+            context,
+            ciphertext: {
+                scheme: encryptionSchemes.ecies,
+                type: plaintext.type,
+                value: bytesToHex(ct),
+            },
+        };
+    };
+}
+// Given an ephemeral private key, called `privKeyA`, and a ciphertext `ct`,
+// decrypt the ciphertext using ECIES, with geth's parameters:
+// ref: https://github.com/ethereum/go-ethereum/blob/v1.15.2/crypto/ecies/ecies.go
+export async function decrypt(privKeyA, ciphertext) {
+    const privKeyABuffer = privKeyA.kp.getPrivate().toArrayLike(Buffer, 'be', 32);
+    const pt = await eciesDecrypt(privKeyABuffer, Buffer.from(ciphertext));
+    return new Uint8Array(pt);
+}
+export function getEciesDecryptor({ privKeyA }) {
+    const privKeyABuffer = privKeyA.kp.getPrivate().toArrayLike(Buffer, 'be', 32);
+    return async ({ scheme, type, value, envelope, }) => {
+        if (scheme !== encryptionSchemes.ecies) {
+            throw new Error(`Ciphertext with scheme ${getEncryptionSchemeName(scheme)} cannot be decrypted with ECIES`);
+        }
+        const ptBuf = await eciesDecrypt(privKeyABuffer, bytesFromHexString(value));
+        // If envelope field is omitted then assume HADU, only with an explicit none envelope do we assume a raw byte
+        // encoding as would be performed by the compute server
+        if (envelope === ciphertextEnvelopes.none) {
+            const bigPt = bytes32ToBigint(Buffer.from(ptBuf).toString('hex'));
+            return bigintToPlaintext(scheme, type, bigPt);
+        }
+        const { plaintext } = decodeInput(ptBuf.toString());
+        return plaintext;
+    };
+}
+//# sourceMappingURL=ecies.js.map

package/dist/lite/ecies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecies.js","sourceRoot":"","sources":["../../src/lite/ecies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAS,EAAE,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvF,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EAInB,iBAAiB,EAGjB,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAElD,MAAM,SAAS,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC;AAUtC,oFAAoF;AACpF,0DAA0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,EAAc;IAC/C,OAAO;QACL,MAAM,EAAE,iBAAiB,CAAC,KAAK;QAC/B,EAAE;QACF,eAAe;YACb,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,wBAAwB;IACtC,OAAO,kBAAkB,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB,CAAC,GAAoB;IAC3D,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,wBAAwB,CAAC,gBAA4B;IACnE,OAAO,SAAS,CAAC,aAAa,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC;AACxE,CAAC;AAED,4GAA4G;AAC5G,+EAA+E;AAC/E,qCAAqC;AACrC,qCAAqC;AACrC,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,wEAAwE;AACxE,EAAE;AACF,uEAAuE;AACvE,6DAA6D;AAC7D,EAAE;AACF,yDAAyD;AACzD,4FAA4F;AAC5F,EAAE;AACF,gFAAgF;AAChF,6DAA6D;AAC7D,2FAA2F;AAC3F,MAAM,UAAU,yBAAyB,CAAC,OAAmB;IAC3D,OAAO,kBAAkB,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,mFAAmF;AACnF,gFAAgF;AAChF,uCAAuC;AACvC,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,OAAwB,EACxB,SAAqB,EACrB,QAA0B;IAE1B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAE9E,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;QACnE,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC;IAEH,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC;AAQD,MAAM,UAAU,iBAAiB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAsB;IACzE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,KAAK,EAA8B,EACxC,SAAS,EACT,OAAO,GACgC,EAA4C,EAAE;QACrF,IAAI,SAAS,CAAC,MAAM,KAAK,iBAAiB,CAAC,KAAK,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,yBAAyB,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,iCAAiC,CACpG,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,aAAa,EAAE,KAAK,EAAE;YAClD,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,gBAAgB,CAAC;YACjC,UAAU,EAAE,EAAE;YACd,UAAU,EAAE,SAAS,CAAC,IAAI;YAC1B,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,SAAS;YACT,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC;YAC/B,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC;YACzB,OAAO;YACP,UAAU,EAAE;gBACV,MAAM,EAAE,iBAAiB,CAAC,KAAK;gBAC/B,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;aACtB;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,8DAA8D;AAC9D,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,QAA0B,EAAE,UAAsB;IAC9E,MAAM,cAAc,GAAG,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAEvE,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC;AAOD,MAAM,UAAU,iBAAiB,CAAC,EAAE,QAAQ,EAAsB;IAChE,MAAM,cAAc,GAAG,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,KAAK,EAA8B,EACxC,MAAM,EACN,IAAI,EACJ,KAAK,EACL,QAAQ,GACqB,EAAwC,EAAE;QACvE,IAAI,MAAM,KAAK,iBAAiB,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,0BAA0B,uBAAuB,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,cAAc,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,6GAA6G;QAC7G,uDAAuD;QACvD,IAAI,QAAQ,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAClE,OAAO,iBAAiB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpD,OAAO,SAAwC,CAAC;IAClD,CAAC,CAAC;AACJ,CAAC"}

package/dist/lite/hadu.js

@@ -0,0 +1,36 @@
+import { Schema } from 'effect';
+import { parseJson } from 'effect/Schema';
+import { Bytes32 } from '../binary';
+import { bytes32ToPlaintext, EncryptionScheme, plaintextToBytes32, SupportedFheType, } from '../encryption';
+import { InputContext } from '../handle';
+// HADU stands for "Host Chain, ACL, DApp, and User" it maps to the InputContext type where the aclAddress
+// may actually be the singular IncoLite contract which embeds its own ACL
+export const encryptionEnvelopes = {
+    none: 0,
+    hadu: 1,
+};
+export const EncryptionEnvelope = Schema.Literal(...Object.values(encryptionEnvelopes));
+export const HaduInput = parseJson(Schema.Struct({
+    envelope: Schema.Literal(encryptionEnvelopes.hadu),
+    scheme: EncryptionScheme,
+    context: InputContext,
+    plaintext: Bytes32,
+    type: SupportedFheType,
+}));
+export function encodeInput({ plaintext, context }) {
+    return Schema.encodeSync(HaduInput)({
+        envelope: encryptionEnvelopes.hadu,
+        scheme: plaintext.scheme,
+        type: plaintext.type,
+        plaintext: plaintextToBytes32(plaintext),
+        context,
+    });
+}
+export function decodeInput(json) {
+    const { scheme, context, plaintext, type } = Schema.decodeSync(HaduInput)(json);
+    return {
+        plaintext: bytes32ToPlaintext(plaintext, scheme, type),
+        context,
+    };
+}
+//# sourceMappingURL=hadu.js.map

package/dist/lite/hadu.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hadu.js","sourceRoot":"","sources":["../../src/lite/hadu.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAElB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,0GAA0G;AAC1G,0EAA0E;AAE1E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACC,CAAC;AAKX,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAExF,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAChC,MAAM,CAAC,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC;IAClD,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,gBAAgB;CACvB,CAAC,CACH,CAAC;AAIF,MAAM,UAAU,WAAW,CAAC,EAAE,SAAS,EAAE,OAAO,EAAwB;IACtE,OAAO,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAClC,QAAQ,EAAE,mBAAmB,CAAC,IAAI;QAClC,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC;QACxC,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC;IAChF,OAAO;QACL,SAAS,EAAE,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC;QACtD,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/lite/index.js

@@ -0,0 +1,7 @@
+export * from '../generated/abis/lightning';
+export * from './deployments';
+export * from './ecies';
+export * from './hadu';
+export * from './lightning';
+export * from './reencrypt';
+//# sourceMappingURL=index.js.map

package/dist/lite/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lite/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAC;AAE5C,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC"}

package/dist/lite/lightning.d.ts

@@ -2,6 +2,7 @@ import { Account, Chain, Transport, WalletClient } from 'viem';
 import { Address, HexString } from '../binary';
 import { EciesScheme } from '../encryption';
 import { lightningDeployments } from '../generated/lightning';
+import { localNodeLightningConfig } from '../generated/local-node';
 import type { Reencryptor } from '../reencryption';
 type TupleToUnion<T> = T extends readonly unknown[] ? T[number] : never;
 type Deployment = TupleToUnion<typeof lightningDeployments>;
@@ -56,7 +57,7 @@ export declare class Lightning<T extends DeploymentSlice = DeploymentSlice> {
      * See the sample docker-compose file here: https://github.com/Inco-fhevm/lightning-rod/blob/main/docker-compose.yaml
      *
      */
-    static localNode(): Lightning;
+    static localNode(): Lightning<DeploymentSlice & typeof localNodeLightningConfig>;
     /**
      * Get a Lightning deployment by name or executor address on a particular chain.
      *

package/dist/lite/lightning.js

@@ -0,0 +1,179 @@
+import { hexToBytes } from 'viem';
+import { baseSepolia } from 'viem/chains';
+import { HexString, parseAddress } from '../binary';
+import { encryptionSchemes } from '../encryption';
+import { lightningDeployments } from '../generated/lightning';
+import { localNodeLightningConfig } from '../generated/local-node';
+import { handleTypes } from '../handle';
+import { parse } from '../schema';
+import { decodeSecp256k1PublicKey, generateSecp256k1Keypair, getEciesEncryptor } from './ecies';
+import { getKmsClient, incoLiteReencryptor } from './reencrypt';
+/**
+ * The Lightning class provides a convenient way to interact with the Inco Lightning contract by binding to a specific
+ * deployment.
+ */
+export class Lightning {
+    _deployment;
+    covalidatorUrl;
+    executorAddress;
+    eciesPublicKey;
+    chainId;
+    encryptor;
+    ephemeralKeypair;
+    kmsClient;
+    constructor(_deployment, covalidatorUrl) {
+        this._deployment = _deployment;
+        this.covalidatorUrl = covalidatorUrl;
+        this.executorAddress = parseAddress(_deployment.executorAddress);
+        this.eciesPublicKey = parse(HexString, _deployment.eciesPublicKey);
+        this.chainId = BigInt(_deployment.chainId);
+        this.ephemeralKeypair = generateSecp256k1Keypair();
+        this.kmsClient = getKmsClient(covalidatorUrl);
+        this.encryptor = getEciesEncryptor({
+            scheme: encryptionSchemes.ecies,
+            pubKeyA: decodeSecp256k1PublicKey(hexToBytes(parse(HexString, _deployment.eciesPublicKey))),
+            privKeyB: this.ephemeralKeypair,
+        });
+    }
+    /**
+     * Get a Lightning instance bound to the latest Lightning deployment for the Base Sepolia testnet.
+     */
+    static baseSepoliaTestnet() {
+        return Lightning.latest('testnet', baseSepolia.id);
+    }
+    /**
+     * Get a Lightning instance bound to our canonical Anvil-based test node and test Covalidator node
+     *
+     * These can be run in docker-compose using images pushed to dockerhub as:
+     *   - inconetwork/local-node-anvil
+     *   - inconetwork/local-node-covalidator
+     *
+     * See the sample docker-compose file here: https://github.com/Inco-fhevm/lightning-rod/blob/main/docker-compose.yaml
+     *
+     */
+    static localNode() {
+        return Lightning.custom(localNodeLightningConfig);
+    }
+    /**
+     * Get a Lightning deployment by name or executor address on a particular chain.
+     *
+     * @param id this is an object containing either the pair of name and chainId or the executorAddress and chainId
+     */
+    static at(id) {
+        const deployment = this.isIdByName(id)
+            ? lightningDeployments.find((d) => d.name === id.name && d.chainId === id.chainId)
+            : lightningDeployments.find((d) => d.executorAddress === id.executorAddress && d.chainId === id.chainId);
+        if (!deployment) {
+            throw new Error(`No deployment found for ${JSON.stringify(id)}`);
+        }
+        return new Lightning(deployment, Lightning.getCovalidatorUrl(deployment));
+    }
+    /**
+     * Get a Lightning deployment for a local or custom node
+     *
+     * @param config this is an object containing the executorAddress, eciesPublicKey, chainId and covalidatorUrl.
+     *    additional fields past will be made available as part of the `deployment` property.
+     */
+    static custom(config) {
+        return new Lightning(config, config.covalidatorUrl);
+    }
+    /**
+     * Get the latest deployment for a given pepper, which usually denotes a family of deployments distinct from their
+     * version such as 'devnet', 'testnet', 'mainnet', etc.
+     *
+     * @param pepper the pepper to use to filter the deployments
+     * @param chainId the chainId to use to filter the deployments
+     */
+    static latestDeployment(pepper, chainId) {
+        // Deployments are sorted so we are guaranteed to get the latest first
+        const latestByPepper = lightningDeployments.find((d) => d.pepper === pepper && d.chainId === chainId);
+        if (!latestByPepper) {
+            // This should not actually happen provided this file compiles since we are extracting the available peppers
+            // from the const itself
+            throw new Error(`No deployment found for pepper ${pepper}`);
+        }
+        return latestByPepper;
+    }
+    /**
+     * Get the latest Lightning deployment for a given pepper amd chainId unconditionally.
+     * Note that if you upgrade the library the latest deployment may change and contracts deployed to a previous version
+     * will not be compatible with the new version.
+     *
+     * @param pepper the pepper to use to filter the deployments
+     * @param chainId the chainId to use to filter the deployments
+     */
+    static latest(pepper, chainId) {
+        return Lightning.at(Lightning.latestDeployment(pepper, chainId));
+    }
+    /*
+     * Get the latest deployment for a given pepper, which usually denotes a family of deployments distinct from their
+     * version such as 'devnet', 'testnet', 'mainnet', etc.
+     */
+    get deployment() {
+        return { ...this._deployment };
+    }
+    /**
+     * Encrypt a value using the public ECIES key of the Lightning deployment.
+     *
+     * @param value a boolean or numeric value to encrypt
+     * @param accountAddress the address of the account interacting with the dapp contract, normally an Externally Owned Account (EOA)
+     * @param dappAddress the address of the dapp contract that interacts with the Inco Lightning contract or library
+     */
+    async encrypt(value, { accountAddress, dappAddress }) {
+        const { ciphertext } = await this.encryptor({
+            plaintext: Lightning.plaintextFromValue(value),
+            context: {
+                hostChainId: this.chainId,
+                aclAddress: this.executorAddress,
+                userAddress: parseAddress(accountAddress),
+                contractAddress: parseAddress(dappAddress),
+            },
+        });
+        return ciphertext.value;
+    }
+    /**
+     * Obtain a reencryptor for a particular Externally Owned Account (EOA) to request decrypted values.
+     * The account associated with the walletClient must have permissions to decrypt the handle or ciphertext passed
+     * to the reencryptor function.
+     *
+     * @param walletClient the wallet client to use for signing the reencrypt request.
+     */
+    getReencryptor(walletClient) {
+        return incoLiteReencryptor({
+            walletClient,
+            kmsConnectRpcEndpointOrClient: this.kmsClient,
+            chainId: this.chainId,
+            ephemeralKeypair: this.ephemeralKeypair,
+        });
+    }
+    /**
+     * Get the GRPC endpoint for the covalidator that services this deployment.
+     */
+    static getCovalidatorUrl(deployment) {
+        const { executorAddress, chainId, pepper } = deployment;
+        return `https://${executorAddress.toLowerCase()}.${chainId}.${pepper}.inco.org`;
+    }
+    static isIdByName(id) {
+        return id.name !== undefined;
+    }
+    static plaintextFromValue(value) {
+        if (typeof value === 'boolean') {
+            return {
+                scheme: encryptionSchemes.ecies,
+                type: handleTypes.ebool,
+                value: value,
+            };
+        }
+        else if (typeof value === 'bigint' || typeof value === 'number') {
+            return {
+                scheme: encryptionSchemes.ecies,
+                type: handleTypes.euint256,
+                value: BigInt(value),
+            };
+        }
+        else {
+            throw new Error(`Unsupported type ${typeof value}`);
+        }
+    }
+}
+//# sourceMappingURL=lightning.js.map

package/dist/lite/lightning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lightning.js","sourceRoot":"","sources":["../../src/lite/lightning.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,UAAU,EAA2B,MAAM,MAAM,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAW,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAe,iBAAiB,EAA0B,MAAM,eAAe,CAAC;AAEvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAClH,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAwChE;;;GAGG;AACH,MAAM,OAAO,SAAS;IAUD;IACD;IAVF,eAAe,CAAU;IACzB,cAAc,CAAY;IAC1B,OAAO,CAAS;IAEf,SAAS,CAAyB;IAClC,gBAAgB,CAAmB;IACnC,SAAS,CAA4B;IAEtD,YACmB,WAAc,EACf,cAAsB;QADrB,gBAAW,GAAX,WAAW,CAAG;QACf,mBAAc,GAAd,cAAc,CAAQ;QAEtC,IAAI,CAAC,eAAe,GAAG,YAAY,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QACjE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAE3C,IAAI,CAAC,gBAAgB,GAAG,wBAAwB,EAAE,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC;YACjC,MAAM,EAAE,iBAAiB,CAAC,KAAK;YAC/B,OAAO,EAAE,wBAAwB,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC;YAC3F,QAAQ,EAAE,IAAI,CAAC,gBAAgB;SAChC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,kBAAkB;QACvB,OAAO,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,SAAS;QACd,OAAO,SAAS,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,EAAgB;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,OAAO,CAAC;YAClF,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,EAAE,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC;QAC3G,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAM,CAAyB,MAAS;QAC7C,OAAO,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,gBAAgB,CAAmB,MAAS,EAAE,OAAgB;QACnE,sEAAsE;QACtE,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACtG,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,4GAA4G;YAC5G,wBAAwB;YACxB,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,MAAM,CAAmB,MAAS,EAAE,OAAgB;QACzD,OAAO,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAED;;;OAGG;IACH,IAAI,UAAU;QACZ,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CACX,KAAQ,EACR,EAAE,cAAc,EAAE,WAAW,EAAqB;QAElD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;YAC1C,SAAS,EAAE,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC;YAC9C,OAAO,EAAE;gBACP,WAAW,EAAE,IAAI,CAAC,OAAO;gBACzB,UAAU,EAAE,IAAI,CAAC,eAAe;gBAChC,WAAW,EAAE,YAAY,CAAC,cAAc,CAAC;gBACzC,eAAe,EAAE,YAAY,CAAC,WAAW,CAAC;aAC3C;SACF,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CAAC,YAAqD;QAClE,OAAO,mBAAmB,CAAC;YACzB,YAAY;YACZ,6BAA6B,EAAE,IAAI,CAAC,SAAS;YAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,iBAAiB,CAAC,UAAgD;QAC9E,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;QACxD,OAAO,WAAW,eAAe,CAAC,WAAW,EAAE,IAAI,OAAO,IAAI,MAAM,WAAW,CAAC;IAClF,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,EAAgB;QACxC,OAAQ,EAAuB,CAAC,IAAI,KAAK,SAAS,CAAC;IACrD,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAC/B,KAAQ;QAER,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO;gBACL,MAAM,EAAE,iBAAiB,CAAC,KAAK;gBAC/B,IAAI,EAAE,WAAW,CAAC,KAAK;gBACvB,KAAK,EAAE,KAAK;aACsC,CAAC;QACvD,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAClE,OAAO;gBACL,MAAM,EAAE,iBAAiB,CAAC,KAAK;gBAC/B,IAAI,EAAE,WAAW,CAAC,QAAQ;gBAC1B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aAC8B,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;CACF"}

package/dist/lite/reencrypt.js

@@ -0,0 +1,129 @@
+import { createClient } from '@connectrpc/connect';
+import { createConnectTransport } from '@connectrpc/connect-web';
+import { bytesToHex, hexToBytes } from 'viem';
+import { bytesToBigInt } from '../binary';
+import { getSupportedChain } from '../chain';
+import { bigintToPlaintext, encryptionSchemes } from '../encryption/encryption';
+import { KmsService } from '../generated/es/inco/kms/lite/v1/kms_service_pb';
+import { getHandleType } from '../handle';
+import { createEIP712Payload } from '../reencryption/eip712';
+import { decrypt, generateSecp256k1Keypair } from './ecies';
+// The domain constants used for basic reencrypts.
+// Note: for advanced ACL, since the signature is checked on-chain, the domain
+// and version must match the ones used in the contract. For basic ones, we use
+// a domain different than the one used on-chain
+const BASIC_REENCRYPT_DOMAIN = {
+    name: 'IncoReencryption',
+    version: '0.1.0',
+};
+// Create an EIP712 payload for the Inco Lite basic reencrypt.
+export function reencryptEIP712(chainId, ephemeralPubKey) {
+    return createEIP712Payload({
+        chainId,
+        primaryType: 'ReencryptionRequest',
+        primaryTypeFields: [{ name: 'publicKey', type: 'bytes' }],
+        message: {
+            publicKey: bytesToHex(ephemeralPubKey),
+        },
+        domainName: BASIC_REENCRYPT_DOMAIN.name,
+        domainVersion: BASIC_REENCRYPT_DOMAIN.version,
+    });
+}
+// Returns the Inco Lite Reencryptor, which can reencrypt a handle using the
+// Basic ACL.
+export async function incoLiteReencryptor({ kmsConnectRpcEndpointOrClient, chainId, walletClient, ephemeralKeypair, }) {
+    const kmsClient = getKmsClient(kmsConnectRpcEndpointOrClient || defaultCovalidatorGrpc(getSupportedChain(chainId)));
+    if (!ephemeralKeypair) {
+        ephemeralKeypair = await generateSecp256k1Keypair();
+    }
+    // Sign the EIP712 attesting that the user has access to the private key
+    // corresponding to the ephemeral public key.
+    const eip712Payload = reencryptEIP712(chainId, ephemeralKeypair.encodePublicKey());
+    // Using browser extensions, this step will prompt the user to sign the
+    // payload.
+    const eip712Signature = await walletClient.signTypedData(eip712Payload);
+    return async function reencrypt({ handle }) {
+        const ephemeralPubKey = ephemeralKeypair.encodePublicKey();
+        const reencryptRequest = {
+            $typeName: 'inco.kms.lite.v1.ReencryptRequest',
+            userAddress: walletClient.account.address,
+            ephemeralPubKey,
+            eip712Signature: hexToBytes(eip712Signature),
+            handlesWithProofs: [
+                {
+                    $typeName: 'inco.kms.lite.v1.HandleWithProof',
+                    handle,
+                    aclProof: {
+                        $typeName: 'inco.kms.lite.v1.ACLProof',
+                        // See advancedacl/session-key.ts for an example of using
+                        // Advanced ACL.
+                        proof: {
+                            case: 'incoLiteBasicAclProof',
+                            value: {
+                                $typeName: 'inco.kms.lite.v1.IncoLiteBasicACLProof',
+                            },
+                        },
+                    },
+                },
+            ],
+        };
+        try {
+            const response = await kmsClient.reencrypt(reencryptRequest);
+            return decryptGrpcResponse(response, ephemeralKeypair, handle);
+        }
+        catch (error) {
+            console.log(error);
+            throw error;
+        }
+    };
+}
+// Helper function to get a KMS client from a string or a Client instance.
+export function getKmsClient(kmsConnectRpcEndpointOrClient) {
+    if (typeof kmsConnectRpcEndpointOrClient === 'string') {
+        const transport = createConnectTransport({
+            baseUrl: kmsConnectRpcEndpointOrClient,
+        });
+        return createClient(KmsService, transport);
+    }
+    return kmsConnectRpcEndpointOrClient;
+}
+// Decrypt using ECIES the ciphertext in the response.
+// Even though the proto specifies a list of ciphertexts, our JS SDK
+// currently only supports a single ciphertext.
+export async function decryptGrpcResponse(response, ephemeralKeypair, handle) {
+    const reencryptedCt = response.payload?.userCiphertexts[0];
+    if (!reencryptedCt) {
+        throw new Error('No reencrypted ciphertext in the response');
+    }
+    const plaintextBytes = await decrypt(ephemeralKeypair, reencryptedCt.ciphertext);
+    const plaintext = bytesToBigInt(plaintextBytes);
+    return bigintToPlaintext(encryptionSchemes.ecies, getHandleType(handle), plaintext);
+}
+// Helper function to return the default gRPC endpoint for the covalidator.
+// Currently, this returns the covalidator for the Inco Lightning public testnet.
+export function defaultCovalidatorGrpc(chain) {
+    return lightningTestnetCovalidatorGrpc(chain);
+}
+// Helper function to get the gRPC endpoint for the Denver covalidator on the
+// AWS (Pulumi) setup. This function is a convenience, and might disappear in
+// the future, if the denver testnet is no longer supported.
+export function pulumiCovalidatorGrpc(chain) {
+    return `https://grpc.${chain.name.toLowerCase()}.covalidator.denver.inco.org`;
+}
+// Helper function to get the devnet gRPC endpoint for the Inco Lightning covalidator.
+export function lightningDevnetCovalidatorGrpc(chain) {
+    return getCovalidatorGrpcHelper(chain, 'devnet', 'lightning');
+}
+// Helper function to get the testnet gRPC endpoint for the Inco Lightning covalidator.
+export function lightningTestnetCovalidatorGrpc(chain) {
+    return getCovalidatorGrpcHelper(chain, 'testnet', 'lightning');
+}
+// Convert camelCase to dash-case.
+function camelToDashCase(str) {
+    return str.replace(/([a-z])([A-Z])/g, '$1-$2').toLowerCase();
+}
+// Small helper, as our GCP covalidator URLs are in a specific format.
+function getCovalidatorGrpcHelper(chain, network, cluster) {
+    return `https://grpc.${camelToDashCase(chain.name)}.${cluster}.${network}.inco.org`;
+}
+//# sourceMappingURL=reencrypt.js.map

package/dist/lite/reencrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reencrypt.js","sourceRoot":"","sources":["../../src/lite/reencrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAW,UAAU,EAAc,UAAU,EAA2B,MAAM,MAAM,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAkB,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAe,iBAAiB,EAAoB,MAAM,0BAA0B,CAAC;AAC/G,OAAO,EAAE,UAAU,EAAuC,MAAM,iDAAiD,CAAC;AAClH,OAAO,EAAE,aAAa,EAAU,MAAM,WAAW,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAoB,MAAM,SAAS,CAAC;AAiB9E,kDAAkD;AAClD,8EAA8E;AAC9E,+EAA+E;AAC/E,gDAAgD;AAChD,MAAM,sBAAsB,GAAG;IAC7B,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,OAAO;CACjB,CAAC;AAEF,8DAA8D;AAC9D,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,eAA2B;IAC1E,OAAO,mBAAmB,CAAC;QACzB,OAAO;QACP,WAAW,EAAE,qBAAqB;QAClC,iBAAiB,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACzD,OAAO,EAAE;YACP,SAAS,EAAE,UAAU,CAAC,eAAe,CAAC;SACvC;QACD,UAAU,EAAE,sBAAsB,CAAC,IAAI;QACvC,aAAa,EAAE,sBAAsB,CAAC,OAAO;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,aAAa;AACb,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,6BAA6B,EAC7B,OAAO,EACP,YAAY,EACZ,gBAAgB,GACQ;IACxB,MAAM,SAAS,GAAG,YAAY,CAAC,6BAA6B,IAAI,sBAAsB,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACpH,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,gBAAgB,GAAG,MAAM,wBAAwB,EAAE,CAAC;IACtD,CAAC;IAED,wEAAwE;IACxE,6CAA6C;IAC7C,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,EAAE,gBAAgB,CAAC,eAAe,EAAE,CAAC,CAAC;IAEnF,uEAAuE;IACvE,WAAW;IACX,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IAExE,OAAO,KAAK,UAAU,SAAS,CAA6B,EAAE,MAAM,EAAmC;QACrG,MAAM,eAAe,GAAG,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAC3D,MAAM,gBAAgB,GAAqB;YACzC,SAAS,EAAE,mCAAmC;YAC9C,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO;YACzC,eAAe;YACf,eAAe,EAAE,UAAU,CAAC,eAAe,CAAC;YAC5C,iBAAiB,EAAE;gBACjB;oBACE,SAAS,EAAE,kCAAkC;oBAC7C,MAAM;oBACN,QAAQ,EAAE;wBACR,SAAS,EAAE,2BAA2B;wBACtC,yDAAyD;wBACzD,gBAAgB;wBAChB,KAAK,EAAE;4BACL,IAAI,EAAE,uBAAuB;4BAC7B,KAAK,EAAE;gCACL,SAAS,EAAE,wCAAwC;6BACpD;yBACF;qBACF;iBACF;aACF;SACF,CAAC;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAE7D,OAAO,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAC1B,6BAAiE;IAEjE,IAAI,OAAO,6BAA6B,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,sBAAsB,CAAC;YACvC,OAAO,EAAE,6BAA6B;SACvC,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,6BAA6B,CAAC;AACvC,CAAC;AAED,sDAAsD;AACtD,oEAAoE;AACpE,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAA2B,EAC3B,gBAAkC,EAClC,MAAc;IAEd,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;IAEhD,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAM,EAAE,SAAS,CAAC,CAAC;AAC3F,CAAC;AAED,2EAA2E;AAC3E,iFAAiF;AACjF,MAAM,UAAU,sBAAsB,CAAC,KAAqB;IAC1D,OAAO,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,4DAA4D;AAC5D,MAAM,UAAU,qBAAqB,CAAC,KAAqB;IACzD,OAAO,gBAAgB,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,8BAA8B,CAAC;AAChF,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,8BAA8B,CAAC,KAAqB;IAClE,OAAO,wBAAwB,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,+BAA+B,CAAC,KAAqB;IACnE,OAAO,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACjE,CAAC;AAED,kCAAkC;AAClC,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/D,CAAC;AAED,sEAAsE;AACtE,SAAS,wBAAwB,CAAC,KAAqB,EAAE,OAA6B,EAAE,OAAoB;IAC1G,OAAO,gBAAgB,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,OAAO,WAAW,CAAC;AACtF,CAAC"}

package/dist/local/index.js

@@ -0,0 +1,2 @@
+export * from './local-node';
+//# sourceMappingURL=index.js.map

package/dist/local/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/local/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC"}

package/dist/local/local-node.js

@@ -0,0 +1,24 @@
+import { Address, HexString } from '@inco/pega/lib/hex';
+import * as dotenv from 'dotenv';
+import { Schema } from 'effect';
+export const LocalNodeEnv = Schema.Struct({
+    DEPLOYER_ADDRESS: Address,
+    STATE_DUMP: Schema.String,
+    ADD_TWO_ADDRESS: Address,
+    EXECUTOR_ADDRESS: Address,
+    ECIES_PUBLIC_KEY: HexString,
+    CALLBACK_ADDRESS: HexString,
+    SENDER_ADDRESS: Address,
+    SENDER_PRIVATE_KEY: HexString,
+    PEPPER: Schema.String,
+    COVALIDATOR_ECIES_PRIVATE_KEY: HexString,
+    COVALIDATOR_CALLBACK_PRIVATE_KEY: HexString,
+    COVALIDATOR_ACL_ADDR: Address,
+    COVALIDATOR_INCO_EXECUTOR_ADDR: Address,
+    COVALIDATOR_DECRYPTION_HANDLER_ADDR: Address,
+});
+export function parseLocalEnv(envFileContents) {
+    const envObj = dotenv.parse(envFileContents);
+    return Schema.decodeUnknownSync(LocalNodeEnv)(envObj);
+}
+//# sourceMappingURL=local-node.js.map

package/dist/local/local-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-node.js","sourceRoot":"","sources":["../../src/local/local-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,gBAAgB,EAAE,OAAO;IACzB,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,eAAe,EAAE,OAAO;IACxB,gBAAgB,EAAE,OAAO;IACzB,gBAAgB,EAAE,SAAS;IAC3B,gBAAgB,EAAE,SAAS;IAC3B,cAAc,EAAE,OAAO;IACvB,kBAAkB,EAAE,SAAS;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,6BAA6B,EAAE,SAAS;IACxC,gCAAgC,EAAE,SAAS;IAC3C,oBAAoB,EAAE,OAAO;IAC7B,8BAA8B,EAAE,OAAO;IACvC,mCAAmC,EAAE,OAAO;CAC7C,CAAC,CAAC;AAIH,MAAM,UAAU,aAAa,CAAC,eAAgC;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC"}