@inco/js 0.2.16 → 0.2.17

package/dist/cjs/l1/preflight.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cosmJSPreflight = cosmJSPreflight;
+const effect_1 = require("effect");
+const binary_js_1 = require("../binary.js");
+const tx_js_1 = require("../generated/ts/inco/preflight/v1/tx.js");
+const handle_js_1 = require("../handle.js");
+const schema_js_1 = require("../schema.js");
+const client_js_1 = require("./client.js");
+// Do not export this value, only allow parsing of Handle to happen here
+const Handle = binary_js_1.Bytes32.pipe(effect_1.Schema.brand('Handle'));
+// Sends a preflight input to the Cosmos L1 chain using CosmJS.
+async function cosmJSPreflight({ cometRpcEndpoint, grpcEndpoint, wallet, signerAddress, }) {
+    const l1Client = await (0, client_js_1.createL1Client)({ cometRpcEndpoint, wallet, grpcEndpoint });
+    return {
+        async send({ prehandle, ciphertext, context }) {
+            const msg = tx_js_1.MsgRegisterInput.create({
+                prehandle: Buffer.from(prehandle.replace(/^0x/, ''), 'hex'),
+                signer: signerAddress,
+                ciphertext: Buffer.from(ciphertext.value, 'hex'),
+                context: {
+                    ownerAddr: context.userAddress.replace(/^0x/, ''),
+                    contractAddr: context.contractAddress.replace(/^0x/, ''),
+                    // We decided to put the ACL address in the keyset ID field.
+                    keysetId: context.aclAddress.replace(/^0x/, ''),
+                    hostChainId: 'evm/' + context.hostChainId,
+                },
+            });
+            // There are some hidden dependencies needed to make the following line work:
+            //
+            // 1. The signer must have an account on the chain. In Cosmos, this is
+            // usually done by sending some tokens to the account. However, since the
+            // fees are 0, this account doesn't need to have any tokens.
+            // 2. The FheEnv must have been created in the on-chain registry. Only the
+            // council can add new FheEnvs to the registry.
+            const result = await l1Client.sendTx(signerAddress, '/inco.preflight.v1.MsgRegisterInput', msg);
+            const handle = (0, handle_js_1.computeHandle)({ prehandle: (0, binary_js_1.bytesFromHexString)(prehandle), context });
+            return { transactionHash: result.transactionHash, handle: (0, schema_js_1.parse)(Handle, handle) };
+        },
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/{lite → cjs/lite}/attested-decrypt.d.ts

@@ -1,3 +1,3 @@
-import { type IncoLiteAttestedDecryptorArgs, incoLiteAttestedDecryptor } from '../attesteddecrypt/attested-decrypt';
+import { type IncoLiteAttestedDecryptorArgs, incoLiteAttestedDecryptor } from '../attesteddecrypt/attested-decrypt.js';
 export { incoLiteAttestedDecryptor };
 export type { IncoLiteAttestedDecryptorArgs };

package/dist/cjs/lite/attested-decrypt.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.incoLiteAttestedDecryptor = void 0;
+const attested_decrypt_js_1 = require("../attesteddecrypt/attested-decrypt.js");
+Object.defineProperty(exports, "incoLiteAttestedDecryptor", { enumerable: true, get: function () { return attested_decrypt_js_1.incoLiteAttestedDecryptor; } });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXR0ZXN0ZWQtZGVjcnlwdC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9saXRlL2F0dGVzdGVkLWRlY3J5cHQudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsZ0ZBQXVIO0FBRTlHLDBHQUZvQywrQ0FBeUIsT0FFcEMifQ==

package/dist/{lite → cjs/lite}/deployments.d.ts

@@ -1,5 +1,5 @@
-import { Chainish } from '../chain';
-import { lightningDeployments } from '../generated/lightning';
+import { Chainish } from '../chain.js';
+import { lightningDeployments } from '../generated/lightning.js';
 export type Address = `0x${string}`;
 export type IncoLiteDeployment = (typeof lightningDeployments)[number];
 export declare function getActiveLightningDeployment(chain: Chainish): IncoLiteDeployment;

package/dist/cjs/lite/deployments.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getActiveLightningDeployment = getActiveLightningDeployment;
+exports.getLightningDeployments = getLightningDeployments;
+// Avoid inporting any other dependencies in this file to avoid serialisation issues downstream in infracto
+const chain_js_1 = require("../chain.js");
+const lightning_js_1 = require("../generated/lightning.js");
+function getActiveLightningDeployment(chain) {
+    const supportedChain = (0, chain_js_1.getSupportedChain)(chain);
+    const deployments = lightning_js_1.lightningDeployments.filter((d) => d.chainId === supportedChain.id);
+    if (!deployments?.length) {
+        throw new Error(`No deployments found for chain ${chain}`);
+    }
+    return deployments[0];
+}
+function getLightningDeployments(chainId) {
+    const supportedChain = (0, chain_js_1.getSupportedChain)(chainId);
+    const deployments = lightning_js_1.lightningDeployments.filter((d) => d.chainId === supportedChain.id);
+    return deployments ?? [];
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/{lite → cjs/lite}/ecies.d.ts

@@ -1,12 +1,12 @@
-import { curve, ec } from 'elliptic';
-import { Decryptor, EciesScheme, Encryptor } from '../encryption/encryption';
-import { PubKeyEncodable } from '../reencryption';
+import * as ellipticPkg from 'elliptic';
+import { Decryptor, EciesScheme, Encryptor } from '../encryption/encryption.js';
+import { PubKeyEncodable } from '../reencryption/index.js';
 export interface Secp256k1Keypair extends PubKeyEncodable {
     scheme: EciesScheme;
-    kp: ec.KeyPair;
+    kp: ellipticPkg.ec.KeyPair;
 }
-export type Secp256k1PubKey = curve.base.BasePoint;
-export declare function toSecp256k1Keypair(kp: ec.KeyPair): Secp256k1Keypair;
+export type Secp256k1PubKey = ellipticPkg.curve.base.BasePoint;
+export declare function toSecp256k1Keypair(kp: ellipticPkg.ec.KeyPair): Secp256k1Keypair;
 export declare function generateSecp256k1Keypair(): Secp256k1Keypair;
 export declare function encodeSecp256k1PublicKey(pub: Secp256k1PubKey): Uint8Array;
 export declare function decodeSecp256k1PublicKey(pubKeyCompressed: Uint8Array): Secp256k1PubKey;

package/dist/cjs/lite/ecies.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toSecp256k1Keypair = toSecp256k1Keypair;
+exports.generateSecp256k1Keypair = generateSecp256k1Keypair;
+exports.encodeSecp256k1PublicKey = encodeSecp256k1PublicKey;
+exports.decodeSecp256k1PublicKey = decodeSecp256k1PublicKey;
+exports.decodeSecp256k1PrivateKey = decodeSecp256k1PrivateKey;
+exports.encrypt = encrypt;
+exports.getEciesEncryptor = getEciesEncryptor;
+exports.decrypt = decrypt;
+exports.getEciesDecryptor = getEciesDecryptor;
+const ecies_geth_1 = require("ecies-geth");
+const ellipticPkg = require("elliptic");
+const binary_js_1 = require("../binary.js");
+const encryption_js_1 = require("../encryption/encryption.js");
+const handle_js_1 = require("../handle.js");
+const hadu_js_1 = require("./hadu.js");
+const secp256k1 = new ellipticPkg.ec('secp256k1');
+// Convert an ec.KeyPair from the 'elliptic' package (assumed to have geen generated
+// with the secp256k1 curve) to our Secp256k1Keypair type.
+function toSecp256k1Keypair(kp) {
+    return {
+        scheme: encryption_js_1.encryptionSchemes.ecies,
+        kp,
+        encodePublicKey() {
+            return new Uint8Array(kp.getPublic().encode('array', false));
+        },
+    };
+}
+// Generate a new ephemeral keypair for reencryption.
+function generateSecp256k1Keypair() {
+    return toSecp256k1Keypair(secp256k1.genKeyPair());
+}
+// EncodePublicKey encodes an ECIES public key it's 33-byte compressed form.
+function encodeSecp256k1PublicKey(pub) {
+    return new Uint8Array(pub.encodeCompressed('array'));
+}
+// DecodeSecp256k1PublicKey decodes a 33-byte compressed ECIES public key.
+function decodeSecp256k1PublicKey(pubKeyCompressed) {
+    return secp256k1.keyFromPublic(pubKeyCompressed, 'array').getPublic();
+}
+// DecodeSecp256k1PrivateKey returns a ECIES secp256k1 private key based on the provided byte slice which is
+// interpreted as an unsigned 256-bit big-endian integer in the range [0, N-1],
+// where N is the order of the curve.
+// where N is the order of the curve.
+//
+// WARNING: This means passing a slice with more than 32 bytes is truncated and
+// that truncated value is reduced modulo N.  Further, 0 is not a valid private
+// key.  It is up to the caller to provide a value in the appropriate range of
+// [1, N-1].  Failure to do so will either result in an invalid private key or
+// potentially weak private keys that have bias that could be exploited.
+//
+// This function primarily exists to provide a mechanism for converting
+// serialized private keys that are already known to be good.
+//
+// For more info, refer to the decred/dcrd documentation:
+// ref: https://pkg.go.dev/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.2.0#PrivKeyFromBytes
+//
+// We don't include any curve parameters or ECIES params, as they are assumed to
+// be the ones in ecies.ECIES_AES128_SHA256 from go-ethereum.
+// ref: https://github.com/ethereum/go-ethereum/blob/v1.15.0/crypto/ecies/params.go#L76-L82
+function decodeSecp256k1PrivateKey(privKey) {
+    return toSecp256k1Keypair(secp256k1.keyFromPrivate(privKey, 'array'));
+}
+// Given a (usually 3rd-party known) public key, called `pubKeyA`, and an ephemeral
+// private key (usually generated locally), called `privKeyB`, encrypt the `msg`
+// using ECIES, with geth's parameters:
+// ref: https://github.com/ethereum/go-ethereum/blob/v1.15.2/crypto/ecies/ecies.go
+async function encrypt(pubKeyA, plaintext, privKeyB) {
+    const pubKeyABuffer = Buffer.from(pubKeyA.encode('array', false));
+    const privKeyBBuffer = privKeyB.kp.getPrivate().toArrayLike(Buffer, 'be', 32);
+    const ct = await (0, ecies_geth_1.encrypt)(pubKeyABuffer, Buffer.from(plaintext), {
+        ephemPrivateKey: privKeyBBuffer,
+    });
+    return new Uint8Array(ct);
+}
+function getEciesEncryptor({ pubKeyA, privKeyB }) {
+    const pubKeyABuffer = Buffer.from(pubKeyA.encode('array', false));
+    const privKeyBBuffer = privKeyB.kp.getPrivate().toArrayLike(Buffer, 'be', 32);
+    return async ({ plaintext, context, }) => {
+        if (plaintext.scheme !== encryption_js_1.encryptionSchemes.ecies) {
+            throw new Error(`Plaintext with scheme ${(0, encryption_js_1.getEncryptionSchemeName)(plaintext.scheme)} cannot be encrypted with ECIES`);
+        }
+        const ptBuf = Buffer.from((0, hadu_js_1.encodeInput)({ plaintext, context }));
+        const ct = await (0, ecies_geth_1.encrypt)(pubKeyABuffer, ptBuf, {
+            ephemPrivateKey: privKeyBBuffer,
+        });
+        const prehandle = (0, handle_js_1.computePrehandle)({
+            ciphertext: ct,
+            handleType: plaintext.type,
+            indexHandle: 0,
+            handleVersion: 0,
+        });
+        const handle = (0, handle_js_1.computeHandle)({
+            prehandle,
+            context: context,
+        });
+        return {
+            prehandle: (0, binary_js_1.asBytes32)(prehandle),
+            handle: (0, binary_js_1.asBytes32)(handle),
+            context,
+            ciphertext: {
+                scheme: encryption_js_1.encryptionSchemes.ecies,
+                type: plaintext.type,
+                value: (0, binary_js_1.bytesToHex)(ct),
+            },
+        };
+    };
+}
+// Given an ephemeral private key, called `privKeyA`, and a ciphertext `ct`,
+// decrypt the ciphertext using ECIES, with geth's parameters:
+// ref: https://github.com/ethereum/go-ethereum/blob/v1.15.2/crypto/ecies/ecies.go
+async function decrypt(privKeyA, ciphertext) {
+    const privKeyABuffer = privKeyA.kp.getPrivate().toArrayLike(Buffer, 'be', 32);
+    const pt = await (0, ecies_geth_1.decrypt)(privKeyABuffer, Buffer.from(ciphertext));
+    return new Uint8Array(pt);
+}
+function getEciesDecryptor({ privKeyA }) {
+    const privKeyABuffer = privKeyA.kp.getPrivate().toArrayLike(Buffer, 'be', 32);
+    return async ({ scheme, type, value, envelope, }) => {
+        if (scheme !== encryption_js_1.encryptionSchemes.ecies) {
+            throw new Error(`Ciphertext with scheme ${(0, encryption_js_1.getEncryptionSchemeName)(scheme)} cannot be decrypted with ECIES`);
+        }
+        const ptBuf = await (0, ecies_geth_1.decrypt)(privKeyABuffer, (0, binary_js_1.bytesFromHexString)(value));
+        // If envelope field is omitted then assume HADU, only with an explicit none envelope do we assume a raw byte
+        // encoding as would be performed by the compute server
+        if (envelope === encryption_js_1.ciphertextEnvelopes.none) {
+            const bigPt = (0, binary_js_1.bytes32ToBigint)(Buffer.from(ptBuf).toString('hex'));
+            return (0, encryption_js_1.bigintToPlaintext)(scheme, type, bigPt);
+        }
+        const { plaintext } = (0, hadu_js_1.decodeInput)(ptBuf.toString());
+        return plaintext;
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/{lite → cjs/lite}/hadu.d.ts

@@ -1,5 +1,5 @@
 import { Schema } from 'effect';
-import { PlaintextWithContext } from '../encryption';
+import { PlaintextWithContext } from '../encryption/index.js';
 export declare const encryptionEnvelopes: {
     readonly none: 0;
     readonly hadu: 1;

package/dist/cjs/lite/hadu.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HaduInput = exports.EncryptionEnvelope = exports.encryptionEnvelopes = void 0;
+exports.encodeInput = encodeInput;
+exports.decodeInput = decodeInput;
+const effect_1 = require("effect");
+const Schema_1 = require("effect/Schema");
+const binary_js_1 = require("../binary.js");
+const index_js_1 = require("../encryption/index.js");
+const handle_js_1 = require("../handle.js");
+// HADU stands for "Host Chain, ACL, DApp, and User" it maps to the InputContext type where the aclAddress
+// may actually be the singular IncoLite contract which embeds its own ACL
+exports.encryptionEnvelopes = {
+    none: 0,
+    hadu: 1,
+};
+exports.EncryptionEnvelope = effect_1.Schema.Literal(...Object.values(exports.encryptionEnvelopes));
+exports.HaduInput = (0, Schema_1.parseJson)(effect_1.Schema.Struct({
+    envelope: effect_1.Schema.Literal(exports.encryptionEnvelopes.hadu),
+    scheme: index_js_1.EncryptionScheme,
+    context: handle_js_1.InputContext,
+    plaintext: binary_js_1.Bytes32,
+    type: index_js_1.SupportedFheType,
+}));
+function encodeInput({ plaintext, context }) {
+    return effect_1.Schema.encodeSync(exports.HaduInput)({
+        envelope: exports.encryptionEnvelopes.hadu,
+        scheme: plaintext.scheme,
+        type: plaintext.type,
+        plaintext: (0, index_js_1.plaintextToBytes32)(plaintext),
+        context,
+    });
+}
+function decodeInput(json) {
+    const { scheme, context, plaintext, type } = effect_1.Schema.decodeSync(exports.HaduInput)(json);
+    return {
+        plaintext: (0, index_js_1.bytes32ToPlaintext)(plaintext, scheme, type),
+        context,
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/lite/index.d.ts

@@ -0,0 +1,7 @@
+export * from '../generated/abis/lightning.js';
+export type { KmsService, ReencryptRequest } from '../generated/es/inco/kms/lite/v1/kms_service_pb.js';
+export * from './deployments.js';
+export * from './ecies.js';
+export * from './hadu.js';
+export * from './lightning.js';
+export * from './reencrypt.js';

package/dist/cjs/lite/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("../generated/abis/lightning.js"), exports);
+__exportStar(require("./deployments.js"), exports);
+__exportStar(require("./ecies.js"), exports);
+__exportStar(require("./hadu.js"), exports);
+__exportStar(require("./lightning.js"), exports);
+__exportStar(require("./reencrypt.js"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvbGl0ZS9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7O0FBQUEsaUVBQStDO0FBRS9DLG1EQUFpQztBQUNqQyw2Q0FBMkI7QUFDM0IsNENBQTBCO0FBQzFCLGlEQUErQjtBQUMvQixpREFBK0IifQ==

package/dist/{lite → cjs/lite}/lightning.d.ts

@@ -1,9 +1,10 @@
 import { Account, Chain, Transport, WalletClient } from 'viem';
-import { Address, HexString } from '../binary';
-import { EciesScheme } from '../encryption';
-import { lightningDeployments } from '../generated/lightning';
-import { LocalNodeEnv } from '../local';
-import type { Reencryptor } from '../reencryption';
+import { Address, HexString } from '../binary.js';
+import { EciesScheme } from '../encryption/index.js';
+import { lightningDeployments } from '../generated/lightning.js';
+import { localNodeLightningConfig } from '../generated/local-node.js';
+import { LocalNodeEnv } from '../local/index.js';
+import type { Reencryptor } from '../reencryption/index.js';
 type TupleToUnion<T> = T extends readonly unknown[] ? T[number] : never;
 type Deployment = TupleToUnion<typeof lightningDeployments>;
 type DistributedPick<T, K> = T extends any ? Pick<T, Extract<keyof T, K>> : never;
@@ -11,6 +12,7 @@ export type DeploymentByName = DistributedPick<Deployment, 'name' | 'chainId'>;
 export type DeploymentByExecutor = DistributedPick<Deployment, 'executorAddress' | 'chainId'>;
 export type DeploymentId = DeploymentByName | DeploymentByExecutor;
 export type Pepper = Deployment['pepper'];
+export type LocalNodePepper = Pepper & keyof typeof localNodeLightningConfig;
 export type ChainId = Deployment['chainId'];
 export type SupportedNativeType = boolean | bigint | number;
 export type EncryptionContext = {
@@ -56,12 +58,13 @@ export declare class Lightning<T extends DeploymentSlice = DeploymentSlice> {
      *
      * See the sample docker-compose file here: https://github.com/Inco-fhevm/lightning-rod/blob/main/docker-compose.yaml
      *
-     * @param env this is an optional object containing the environment variables to use for the local node. If none is
-     * provided, the default testnet local node configuration will be used. The LocalNodeEnv is part of the state dump
-     * and one is provided for each network.
+     * @param env either a Pepper such as 'testnet', 'devnet', 'alphanet' or a LocalNodeEnv object containing the
+     * executorAddress, eciesPublicKey, chainId, covalidatorUrl and senderPrivateKey. If none is provided, it defaults to
+     * the 'testnet' Pepper. This produces allows connection to a local node running against a state dump of the
+     * corresponding Pepper.
      *
      */
-    static localNode(env?: LocalNodeEnv): Lightning<DeploymentSlice & CustomConfig>;
+    static localNode(env?: LocalNodeEnv | LocalNodePepper): Lightning<DeploymentSlice & CustomConfig>;
     /**
      * Get a Lightning deployment by name or executor address on a particular chain.
      *

package/dist/cjs/lite/lightning.js

@@ -0,0 +1,204 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Lightning = void 0;
+const viem_1 = require("viem");
+const chains_1 = require("viem/chains");
+const binary_js_1 = require("../binary.js");
+const index_js_1 = require("../encryption/index.js");
+const lightning_js_1 = require("../generated/lightning.js");
+const local_node_js_1 = require("../generated/local-node.js");
+const handle_js_1 = require("../handle.js");
+const schema_js_1 = require("../schema.js");
+const ecies_js_1 = require("./ecies.js");
+const reencrypt_js_1 = require("./reencrypt.js");
+const DefaultPepper = 'testnet';
+/**
+ * The Lightning class provides a convenient way to interact with the Inco Lightning contract by binding to a specific
+ * deployment.
+ */
+class Lightning {
+    _deployment;
+    covalidatorUrl;
+    executorAddress;
+    eciesPublicKey;
+    chainId;
+    encryptor;
+    ephemeralKeypair;
+    kmsClient;
+    constructor(_deployment, covalidatorUrl) {
+        this._deployment = _deployment;
+        this.covalidatorUrl = covalidatorUrl;
+        this.executorAddress = (0, binary_js_1.parseAddress)(_deployment.executorAddress);
+        this.eciesPublicKey = (0, schema_js_1.parse)(binary_js_1.HexString, _deployment.eciesPublicKey);
+        this.chainId = BigInt(_deployment.chainId);
+        this.ephemeralKeypair = (0, ecies_js_1.generateSecp256k1Keypair)();
+        this.kmsClient = (0, reencrypt_js_1.getKmsClient)(covalidatorUrl);
+        this.encryptor = (0, ecies_js_1.getEciesEncryptor)({
+            scheme: index_js_1.encryptionSchemes.ecies,
+            pubKeyA: (0, ecies_js_1.decodeSecp256k1PublicKey)((0, viem_1.hexToBytes)((0, schema_js_1.parse)(binary_js_1.HexString, _deployment.eciesPublicKey))),
+            privKeyB: this.ephemeralKeypair,
+        });
+    }
+    /**
+     * Get a Lightning instance bound to the latest Lightning deployment for the Base Sepolia testnet.
+     */
+    static baseSepoliaTestnet() {
+        return Lightning.latest('testnet', chains_1.baseSepolia.id);
+    }
+    /**
+     * Get a Lightning instance bound to our canonical Anvil-based test node and test Covalidator node
+     *
+     * These can be run in docker-compose using images pushed to dockerhub as:
+     *   - inconetwork/local-node-anvil
+     *   - inconetwork/local-node-covalidator
+     *
+     * See the sample docker-compose file here: https://github.com/Inco-fhevm/lightning-rod/blob/main/docker-compose.yaml
+     *
+     * @param env either a Pepper such as 'testnet', 'devnet', 'alphanet' or a LocalNodeEnv object containing the
+     * executorAddress, eciesPublicKey, chainId, covalidatorUrl and senderPrivateKey. If none is provided, it defaults to
+     * the 'testnet' Pepper. This produces allows connection to a local node running against a state dump of the
+     * corresponding Pepper.
+     *
+     */
+    static localNode(env) {
+        if (!env) {
+            return Lightning.custom(local_node_js_1.localNodeLightningConfig[DefaultPepper]);
+        }
+        if (typeof env === 'string') {
+            return Lightning.custom(local_node_js_1.localNodeLightningConfig[env]);
+        }
+        const conf = local_node_js_1.localNodeLightningConfig[DefaultPepper];
+        return Lightning.custom({
+            // We assume that we always run a local node as the default anvil node
+            chainId: conf.chainId,
+            covalidatorUrl: conf.covalidatorUrl,
+            // These variables vary per environment
+            executorAddress: env.EXECUTOR_ADDRESS,
+            eciesPublicKey: env.ECIES_PUBLIC_KEY,
+            senderPrivateKey: env.SENDER_PRIVATE_KEY,
+        });
+    }
+    /**
+     * Get a Lightning deployment by name or executor address on a particular chain.
+     *
+     * @param id this is an object containing either the pair of name and chainId or the executorAddress and chainId
+     */
+    static at(id) {
+        const deployment = this.isIdByName(id)
+            ? lightning_js_1.lightningDeployments.find((d) => d.name === id.name && d.chainId === id.chainId)
+            : lightning_js_1.lightningDeployments.find((d) => d.executorAddress === id.executorAddress && d.chainId === id.chainId);
+        if (!deployment) {
+            throw new Error(`No deployment found for ${JSON.stringify(id)}`);
+        }
+        return new Lightning(deployment, Lightning.getCovalidatorUrl(deployment));
+    }
+    /**
+     * Get a Lightning deployment for a local or custom node
+     *
+     * @param config this is an object containing the executorAddress, eciesPublicKey, chainId and covalidatorUrl.
+     *    additional fields past will be made available as part of the `deployment` property.
+     */
+    static custom(config) {
+        return new Lightning(config, config.covalidatorUrl);
+    }
+    /**
+     * Get the latest deployment for a given pepper, which usually denotes a family of deployments distinct from their
+     * version such as 'devnet', 'testnet', 'mainnet', etc.
+     *
+     * @param pepper the pepper to use to filter the deployments
+     * @param chainId the chainId to use to filter the deployments
+     */
+    static latestDeployment(pepper, chainId) {
+        // Deployments are sorted so we are guaranteed to get the latest first
+        const latestByPepper = lightning_js_1.lightningDeployments.find((d) => d.pepper === pepper && d.chainId === chainId);
+        if (!latestByPepper) {
+            // This should not actually happen provided this file compiles since we are extracting the available peppers
+            // from the const itself
+            throw new Error(`No deployment found for pepper ${pepper}`);
+        }
+        return latestByPepper;
+    }
+    /**
+     * Get the latest Lightning deployment for a given pepper amd chainId unconditionally.
+     * Note that if you upgrade the library the latest deployment may change and contracts deployed to a previous version
+     * will not be compatible with the new version.
+     *
+     * @param pepper the pepper to use to filter the deployments
+     * @param chainId the chainId to use to filter the deployments
+     */
+    static latest(pepper, chainId) {
+        return Lightning.at(Lightning.latestDeployment(pepper, chainId));
+    }
+    /*
+     * Get the latest deployment for a given pepper, which usually denotes a family of deployments distinct from their
+     * version such as 'devnet', 'testnet', 'mainnet', etc.
+     */
+    get deployment() {
+        return { ...this._deployment };
+    }
+    /**
+     * Encrypt a value using the public ECIES key of the Lightning deployment.
+     *
+     * @param value a boolean or numeric value to encrypt
+     * @param accountAddress the address of the account interacting with the dapp contract, normally an Externally Owned Account (EOA)
+     * @param dappAddress the address of the dapp contract that interacts with the Inco Lightning contract or library
+     */
+    async encrypt(value, { accountAddress, dappAddress }) {
+        const { ciphertext } = await this.encryptor({
+            plaintext: Lightning.plaintextFromValue(value),
+            context: {
+                hostChainId: this.chainId,
+                aclAddress: this.executorAddress,
+                userAddress: (0, binary_js_1.parseAddress)(accountAddress),
+                contractAddress: (0, binary_js_1.parseAddress)(dappAddress),
+            },
+        });
+        return ciphertext.value;
+    }
+    /**
+     * Obtain a reencryptor for a particular Externally Owned Account (EOA) to request decrypted values.
+     * The account associated with the walletClient must have permissions to decrypt the handle or ciphertext passed
+     * to the reencryptor function.
+     *
+     * @param walletClient the wallet client to use for signing the reencrypt request.
+     */
+    getReencryptor(walletClient) {
+        return (0, reencrypt_js_1.incoLiteReencryptor)({
+            walletClient,
+            kmsConnectRpcEndpointOrClient: this.kmsClient,
+            chainId: this.chainId,
+            ephemeralKeypair: this.ephemeralKeypair,
+        });
+    }
+    /**
+     * Get the GRPC endpoint for the covalidator that services this deployment.
+     */
+    static getCovalidatorUrl(deployment) {
+        const { executorAddress, chainId, pepper } = deployment;
+        return `https://${executorAddress.toLowerCase()}.${chainId}.${pepper}.inco.org`;
+    }
+    static isIdByName(id) {
+        return id.name !== undefined;
+    }
+    static plaintextFromValue(value) {
+        if (typeof value === 'boolean') {
+            return {
+                scheme: index_js_1.encryptionSchemes.ecies,
+                type: handle_js_1.handleTypes.ebool,
+                value: value,
+            };
+        }
+        else if (typeof value === 'bigint' || typeof value === 'number') {
+            return {
+                scheme: index_js_1.encryptionSchemes.ecies,
+                type: handle_js_1.handleTypes.euint256,
+                value: BigInt(value),
+            };
+        }
+        else {
+            throw new Error(`Unsupported type ${typeof value}`);
+        }
+    }
+}
+exports.Lightning = Lightning;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/{lite → cjs/lite}/reencrypt.d.ts

@@ -1,11 +1,12 @@
 import { Client } from '@connectrpc/connect';
 import { Account, Chain, Hex, Transport, WalletClient } from 'viem';
-import { SupportedChain } from '../chain';
-import { EciesScheme, PlaintextOf, SupportedFheType } from '../encryption/encryption';
-import { KmsService, ReencryptResponse } from '../generated/es/inco/kms/lite/v1/kms_service_pb';
-import { Handle } from '../handle';
-import type { EIP712, Reencryptor, ReencryptorArgs } from '../reencryption';
-import { Secp256k1Keypair } from './ecies';
+import { SupportedChain } from '../chain.js';
+import { EciesScheme, PlaintextOf, SupportedFheType } from '../encryption/encryption.js';
+import { KmsService, ReencryptResponse } from '../generated/es/inco/kms/lite/v1/kms_service_pb.js';
+import { Handle } from '../handle.js';
+import type { EIP712 } from '../reencryption/eip712.js';
+import type { Reencryptor, ReencryptorArgs } from '../reencryption/types.js';
+import { Secp256k1Keypair } from './ecies.js';
 export interface IncoLiteReencryptorArgs extends ReencryptorArgs {
     walletClient: WalletClient<Transport, Chain, Account>;
     kmsConnectRpcEndpointOrClient?: string | Client<typeof KmsService>;