@inco/js 0.2.16 → 0.2.17

package/dist/esm/generated/es/inco/kms/lite/v1/kms_service_pb.d.ts

@@ -0,0 +1,333 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv1";
+import type { TypedCiphertext } from "../../../fhe/v1/types_pb";
+import type { ECIESKeyset, HandleWithProof } from "./types_pb";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file inco/kms/lite/v1/kms_service.proto.
+ */
+export declare const file_inco_kms_lite_v1_kms_service: GenFile;
+/**
+ * KeyRequest is the request type for the KmsService/Keys RPC method.
+ *
+ * @generated from message inco.kms.lite.v1.KeyRequest
+ */
+export type KeyRequest = Message<"inco.kms.lite.v1.KeyRequest"> & {};
+/**
+ * Describes the message inco.kms.lite.v1.KeyRequest.
+ * Use `create(KeyRequestSchema)` to create a new message.
+ */
+export declare const KeyRequestSchema: GenMessage<KeyRequest>;
+/**
+ * KeyResponse is the response type for the KmsService/Keys RPC method.
+ *
+ * @generated from message inco.kms.lite.v1.KeyResponse
+ */
+export type KeyResponse = Message<"inco.kms.lite.v1.KeyResponse"> & {
+    /**
+     * keyset is the keyset for the IncoLite KMS.
+     *
+     * @generated from field: inco.kms.lite.v1.ECIESKeyset keyset = 1;
+     */
+    keyset?: ECIESKeyset;
+    /**
+     * signing_address is the Ethereum EOA signing address of the KMS, encoded
+     * as a 0x-prefixed hex string.
+     * TODO scalar annotation.
+     *
+     * @generated from field: string signing_address = 2;
+     */
+    signingAddress: string;
+};
+/**
+ * Describes the message inco.kms.lite.v1.KeyResponse.
+ * Use `create(KeyResponseSchema)` to create a new message.
+ */
+export declare const KeyResponseSchema: GenMessage<KeyResponse>;
+/**
+ * ReencryptRequest is the request type for the KmsService/Reencrypt RPC method.
+ *
+ * @generated from message inco.kms.lite.v1.ReencryptRequest
+ */
+export type ReencryptRequest = Message<"inco.kms.lite.v1.ReencryptRequest"> & {
+    /**
+     * user_address is the Ethereum address of the user who requested the
+     * reencryption, prefixed with 0x.
+     *
+     * @generated from field: string user_address = 1;
+     */
+    userAddress: string;
+    /**
+     * ephemeral_pub_key is the encoding of the user's public ephemeral
+     * encryption key (secp256k1), generated by the user for this reencryption
+     * request. It is encoded in its 33-byte compressed format.
+     *
+     * @generated from field: bytes ephemeral_pub_key = 2;
+     */
+    ephemeralPubKey: Uint8Array;
+    /**
+     * eip712_signature is an EIP-712 signature of the following EIP-712 typed data by
+     * `user_address` (note that we only give a JSON representation for the sake of
+     * readability, but the actual signed data is defined in the EIP-712 spec):
+     *
+     * ```json
+     * {
+     *   "types": {
+     *     "EIP712Domain": [
+     *       { "name": "name", "type": "string" },
+     *       { "name": "version", "type": "string" },
+     *       { "name": "chainId", "type": "uint256" }
+     *     ],
+     *     "ReencryptionRequest": [
+     *       { "name": "publicKey", "type": "bytes" }
+     *     ]
+     *   },
+     *   "primaryType": "ReencryptionRequest",
+     *   "domain": {
+     *     "name": "IncoReencryption",
+     *     "version": "0.1.0",
+     *     "chainId": "<host_chain_id>",
+     *     "verifyingContract": "<acl_address>",
+     *     "salt": "0x0000000000000000000000000000000000000000000000000000000000000000"
+     *   },
+     *   "message": {
+     *     "publicKey": "<ephemeral_pub_key>"
+     *   }
+     * }
+     * ```
+     *
+     * @generated from field: bytes eip712_signature = 3;
+     */
+    eip712Signature: Uint8Array;
+    /**
+     * handles_with_proofs is the list of handles of the ciphertexts to reencrypt,
+     * along with the ACL proof that the user has access to the ciphertext.
+     *
+     * @generated from field: repeated inco.kms.lite.v1.HandleWithProof handles_with_proofs = 4;
+     */
+    handlesWithProofs: HandleWithProof[];
+};
+/**
+ * Describes the message inco.kms.lite.v1.ReencryptRequest.
+ * Use `create(ReencryptRequestSchema)` to create a new message.
+ */
+export declare const ReencryptRequestSchema: GenMessage<ReencryptRequest>;
+/**
+ * ReencryptResponse is the response type for the KmsService/Reencrypt RPC method.
+ *
+ * @generated from message inco.kms.lite.v1.ReencryptResponse
+ */
+export type ReencryptResponse = Message<"inco.kms.lite.v1.ReencryptResponse"> & {
+    /**
+     * payload is the reencryption response payload.
+     *
+     * @generated from field: inco.kms.lite.v1.ReencryptionResponsePayload payload = 1;
+     */
+    payload?: ReencryptionResponsePayload;
+};
+/**
+ * Describes the message inco.kms.lite.v1.ReencryptResponse.
+ * Use `create(ReencryptResponseSchema)` to create a new message.
+ */
+export declare const ReencryptResponseSchema: GenMessage<ReencryptResponse>;
+/**
+ * ReencryptionResponsePayload is the payload of the ReencryptResponse,
+ * separated out because it is signed by the KMS using its signing key.
+ *
+ * @generated from message inco.kms.lite.v1.ReencryptionResponsePayload
+ */
+export type ReencryptionResponsePayload = Message<"inco.kms.lite.v1.ReencryptionResponsePayload"> & {
+    /**
+     * user_ciphertexts is the list of ciphertexts that were reencrypted to the
+     * user's public key. Each ciphertext at index `i` corresponds to the ciphertext
+     * at index `i` in the `ReencryptRequest`.
+     *
+     * @generated from field: repeated inco.fhe.v1.TypedCiphertext user_ciphertexts = 1;
+     */
+    userCiphertexts: TypedCiphertext[];
+};
+/**
+ * Describes the message inco.kms.lite.v1.ReencryptionResponsePayload.
+ * Use `create(ReencryptionResponsePayloadSchema)` to create a new message.
+ */
+export declare const ReencryptionResponsePayloadSchema: GenMessage<ReencryptionResponsePayload>;
+/**
+ * AttestedDecryptRequest is the request type for the KmsService/AttestedDecrypt RPC method.
+ *
+ * @generated from message inco.kms.lite.v1.AttestedDecryptRequest
+ */
+export type AttestedDecryptRequest = Message<"inco.kms.lite.v1.AttestedDecryptRequest"> & {
+    /**
+     * user_address is the Ethereum address of the user who requested the
+     * decryption, prefixed with 0x.
+     *
+     * @generated from field: string user_address = 1;
+     */
+    userAddress: string;
+    /**
+     * eip712_signature is an EIP-712 signature of the following EIP-712 typed data by
+     * `user_address` (note that we only give a JSON representation for the sake of
+     * readability, but the actual signed data is defined in the EIP-712 spec):
+     *
+     * ```json
+     * {
+     *   "types": {
+     *     "EIP712Domain": [
+     *       { "name": "name", "type": "string" },
+     *       { "name": "version", "type": "string" },
+     *       { "name": "chainId", "type": "uint256" }
+     *     ],
+     *     "AttestedDecryptRequest": [
+     *       { "name": "handles", "type": "bytes32[]" }
+     *     ]
+     *   },
+     *   "primaryType": "AttestedDecryptRequest",
+     *   "domain": {
+     *     "name": "IncoAttestedDecrypt",
+     *     "version": "0.1.0",
+     *     "chainId": "<host_chain_id>",
+     *   },
+     *   "message": {
+     *     "handles": ["<handle1>", "<handle2>", ...]
+     *   }
+     * }
+     * ```
+     *
+     * @generated from field: bytes eip712_signature = 2;
+     */
+    eip712Signature: Uint8Array;
+    /**
+     * handles is the list of handles of the ciphertexts to decrypt.
+     * The user_address must have ACL access to the handles for the attested
+     * decryption to succeed.
+     *
+     * @generated from field: repeated string handles = 3;
+     */
+    handles: string[];
+};
+/**
+ * Describes the message inco.kms.lite.v1.AttestedDecryptRequest.
+ * Use `create(AttestedDecryptRequestSchema)` to create a new message.
+ */
+export declare const AttestedDecryptRequestSchema: GenMessage<AttestedDecryptRequest>;
+/**
+ * AttestedDecryptResponse is the response type for the KmsService/AttestedDecrypt RPC method.
+ *
+ * @generated from message inco.kms.lite.v1.AttestedDecryptResponse
+ */
+export type AttestedDecryptResponse = Message<"inco.kms.lite.v1.AttestedDecryptResponse"> & {
+    /**
+     * decryption_attestations is the list of decryption attestations. The item at index `i`
+     * corresponds to the handle at index `i` in the `AttestedDecryptRequest`.
+     *
+     * @generated from field: repeated inco.kms.lite.v1.DecryptionAttestation decryption_attestations = 1;
+     */
+    decryptionAttestations: DecryptionAttestation[];
+};
+/**
+ * Describes the message inco.kms.lite.v1.AttestedDecryptResponse.
+ * Use `create(AttestedDecryptResponseSchema)` to create a new message.
+ */
+export declare const AttestedDecryptResponseSchema: GenMessage<AttestedDecryptResponse>;
+/**
+ * DecryptionAttestation contains the attestation for the decryption of a single handle.
+ *
+ * @generated from message inco.kms.lite.v1.DecryptionAttestation
+ */
+export type DecryptionAttestation = Message<"inco.kms.lite.v1.DecryptionAttestation"> & {
+    /**
+     * handle is the handle that was decrypted, encoded as a 0x-prefixed hex string.
+     *
+     * @generated from field: string handle = 1;
+     */
+    handle: string;
+    /**
+     * plaintext is the decrypted plaintext value as a 32-byte word.
+     *
+     * @generated from field: bytes plaintext = 2;
+     */
+    plaintext: Uint8Array;
+    /**
+     * signature is the attestation from the covalidator for the (handle,plaintext) pair.
+     * This signature will be verified on the host chain.
+     *
+     * It is an EIP-712 signature of the following EIP-712 typed data by
+     * `user_address` (note that we only give a JSON representation for the sake of
+     * readability, but the actual signed data is defined in the EIP-712 spec):
+     *
+     * ```json
+     * {
+     *   "types": {
+     *     "EIP712Domain": [
+     *       { "name": "name", "type": "string" },
+     *       { "name": "version", "type": "string" },
+     *       { "name": "chainId", "type": "uint256" },
+     *       { "name": "verifyingContract", "type": "address" }
+     *     ],
+     *     "DecryptionRequest": [
+     *       { "name": "handle", "type": "bytes32" },
+     *       { "name": "value", "type": "bytes32" }
+     *     ]
+     *   },
+     *   "primaryType": "DecryptionRequest",
+     *   "domain": {
+     *     "name": "<Inco contract name, e.g. IncoLite>",
+     *     "version": "<Inco contract version>",
+     *     "chainId": "<host_chain_id>",
+     *     "verifyingContract": "<Inco contract address>",
+     *   },
+     *   "message": {
+     *     "handle": "<handle>",
+     *     "value": "<value>"
+     *   }
+     * }
+     * ```
+     *
+     * @generated from field: bytes signature = 3;
+     */
+    signature: Uint8Array;
+};
+/**
+ * Describes the message inco.kms.lite.v1.DecryptionAttestation.
+ * Use `create(DecryptionAttestationSchema)` to create a new message.
+ */
+export declare const DecryptionAttestationSchema: GenMessage<DecryptionAttestation>;
+/**
+ * KmsService is the service for the IncoLite KMS, which will run
+ * inside the TEE.
+ *
+ * @generated from service inco.kms.lite.v1.KmsService
+ */
+export declare const KmsService: GenService<{
+    /**
+     * Key returns the public keys exposed by the KMS.
+     *
+     * @generated from rpc inco.kms.lite.v1.KmsService.Key
+     */
+    key: {
+        methodKind: "unary";
+        input: typeof KeyRequestSchema;
+        output: typeof KeyResponseSchema;
+    };
+    /**
+     * Reencrypt reencrypts a ciphertext using the ephemeral public key of the
+     * user.
+     *
+     * @generated from rpc inco.kms.lite.v1.KmsService.Reencrypt
+     */
+    reencrypt: {
+        methodKind: "unary";
+        input: typeof ReencryptRequestSchema;
+        output: typeof ReencryptResponseSchema;
+    };
+    /**
+     * AttestedDecrypt decrypts multiple ciphertexts and provides an attestation
+     * that the decryption was performed correctly.
+     *
+     * @generated from rpc inco.kms.lite.v1.KmsService.AttestedDecrypt
+     */
+    attestedDecrypt: {
+        methodKind: "unary";
+        input: typeof AttestedDecryptRequestSchema;
+        output: typeof AttestedDecryptResponseSchema;
+    };
+}>;

package/dist/esm/generated/es/inco/kms/lite/v1/kms_service_pb.js

@@ -0,0 +1,58 @@
+// @generated by protoc-gen-es v2.2.5 with parameter "target=ts"
+// @generated from file inco/kms/lite/v1/kms_service.proto (package inco.kms.lite.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import { file_inco_fhe_v1_types } from "../../../fhe/v1/types_pb";
+import { file_inco_kms_lite_v1_types } from "./types_pb";
+/**
+ * Describes the file inco/kms/lite/v1/kms_service.proto.
+ */
+export const file_inco_kms_lite_v1_kms_service = /*@__PURE__*/ fileDesc("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", [file_inco_fhe_v1_types, file_inco_kms_lite_v1_types]);
+/**
+ * Describes the message inco.kms.lite.v1.KeyRequest.
+ * Use `create(KeyRequestSchema)` to create a new message.
+ */
+export const KeyRequestSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_kms_service, 0);
+/**
+ * Describes the message inco.kms.lite.v1.KeyResponse.
+ * Use `create(KeyResponseSchema)` to create a new message.
+ */
+export const KeyResponseSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_kms_service, 1);
+/**
+ * Describes the message inco.kms.lite.v1.ReencryptRequest.
+ * Use `create(ReencryptRequestSchema)` to create a new message.
+ */
+export const ReencryptRequestSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_kms_service, 2);
+/**
+ * Describes the message inco.kms.lite.v1.ReencryptResponse.
+ * Use `create(ReencryptResponseSchema)` to create a new message.
+ */
+export const ReencryptResponseSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_kms_service, 3);
+/**
+ * Describes the message inco.kms.lite.v1.ReencryptionResponsePayload.
+ * Use `create(ReencryptionResponsePayloadSchema)` to create a new message.
+ */
+export const ReencryptionResponsePayloadSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_kms_service, 4);
+/**
+ * Describes the message inco.kms.lite.v1.AttestedDecryptRequest.
+ * Use `create(AttestedDecryptRequestSchema)` to create a new message.
+ */
+export const AttestedDecryptRequestSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_kms_service, 5);
+/**
+ * Describes the message inco.kms.lite.v1.AttestedDecryptResponse.
+ * Use `create(AttestedDecryptResponseSchema)` to create a new message.
+ */
+export const AttestedDecryptResponseSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_kms_service, 6);
+/**
+ * Describes the message inco.kms.lite.v1.DecryptionAttestation.
+ * Use `create(DecryptionAttestationSchema)` to create a new message.
+ */
+export const DecryptionAttestationSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_kms_service, 7);
+/**
+ * KmsService is the service for the IncoLite KMS, which will run
+ * inside the TEE.
+ *
+ * @generated from service inco.kms.lite.v1.KmsService
+ */
+export const KmsService = /*@__PURE__*/ serviceDesc(file_inco_kms_lite_v1_kms_service, 0);
+//# sourceMappingURL=data:application/json;base64,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

package/dist/esm/generated/es/inco/kms/lite/v1/types_pb.d.ts

@@ -0,0 +1,212 @@
+import type { GenFile, GenMessage } from "@bufbuild/protobuf/codegenv1";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file inco/kms/lite/v1/types.proto.
+ */
+export declare const file_inco_kms_lite_v1_types: GenFile;
+/**
+ * ECIESKeyset contains the network secp256k1 public key. This key is used to
+ * negotiate a shared secret with the client's secp256k1 private key using the
+ * ECDH key exchange protocol. The shared secret is then used to derive a shared
+ * symmetric key, which is used to encrypt and decrypt the data.
+ *
+ * @generated from message inco.kms.lite.v1.ECIESKeyset
+ */
+export type ECIESKeyset = Message<"inco.kms.lite.v1.ECIESKeyset"> & {
+    /**
+     * pk is the network public key of the KMS, used for ECIES encryption. This
+     * key is a secp256k1 public key. However, it is the same across all TEEs,
+     * and is different from each TEE's EVM signing key (also a secp256k1 key).
+     *
+     * @generated from field: bytes pk = 1;
+     */
+    pk: Uint8Array;
+};
+/**
+ * Describes the message inco.kms.lite.v1.ECIESKeyset.
+ * Use `create(ECIESKeysetSchema)` to create a new message.
+ */
+export declare const ECIESKeysetSchema: GenMessage<ECIESKeyset>;
+/**
+ * ACLProof is the proof a given user (outside of the scope of this proto
+ * message) has ACL permission on a given handle (also outside of the scope of
+ * this proto message).
+ *
+ * @generated from message inco.kms.lite.v1.ACLProof
+ */
+export type ACLProof = Message<"inco.kms.lite.v1.ACLProof"> & {
+    /**
+     * @generated from oneof inco.kms.lite.v1.ACLProof.proof
+     */
+    proof: {
+        /**
+         * inco_lite_basic_acl_proof is used when the ACL proof is performed by
+         * the light client inside the TEE calling the `isAllowed` function on
+         * the BaseAccessControlList.sol contract.
+         *
+         * @generated from field: inco.kms.lite.v1.IncoLiteBasicACLProof inco_lite_basic_acl_proof = 10;
+         */
+        value: IncoLiteBasicACLProof;
+        case: "incoLiteBasicAclProof";
+    } | {
+        /**
+         * inco_lite_advanced_acl_proof is used when the ACL proof is performed
+         * by the light client inside the TEE calling the `isAllowed` function
+         * on the AdvancedAccessControl.sol contract.
+         *
+         * @generated from field: inco.kms.lite.v1.IncoLiteAdvancedACLProof inco_lite_advanced_acl_proof = 11;
+         */
+        value: IncoLiteAdvancedACLProof;
+        case: "incoLiteAdvancedAclProof";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message inco.kms.lite.v1.ACLProof.
+ * Use `create(ACLProofSchema)` to create a new message.
+ */
+export declare const ACLProofSchema: GenMessage<ACLProof>;
+/**
+ * HandleWithProof contains a handle and the ACL proof that the user has access
+ * to the handle.
+ *
+ * @generated from message inco.kms.lite.v1.HandleWithProof
+ */
+export type HandleWithProof = Message<"inco.kms.lite.v1.HandleWithProof"> & {
+    /**
+     * handle is the handle of the ciphertext to get, encoded as a non-prefixed
+     * hex string.
+     *
+     * @generated from field: string handle = 1;
+     */
+    handle: string;
+    /**
+     * acl_proof is the proof that the user has access to the handle.
+     *
+     * @generated from field: inco.kms.lite.v1.ACLProof acl_proof = 2;
+     */
+    aclProof?: ACLProof;
+};
+/**
+ * Describes the message inco.kms.lite.v1.HandleWithProof.
+ * Use `create(HandleWithProofSchema)` to create a new message.
+ */
+export declare const HandleWithProofSchema: GenMessage<HandleWithProof>;
+/**
+ * IncoLiteBasicACLProof is the proof of the ACL for the compute ciphertext
+ * when the ACL proof is performed by the light client inside the TEE calling
+ * the `isAllowed` function on the BaseAccessControlList.sol contract.
+ *
+ * @generated from message inco.kms.lite.v1.IncoLiteBasicACLProof
+ */
+export type IncoLiteBasicACLProof = Message<"inco.kms.lite.v1.IncoLiteBasicACLProof"> & {};
+/**
+ * Describes the message inco.kms.lite.v1.IncoLiteBasicACLProof.
+ * Use `create(IncoLiteBasicACLProofSchema)` to create a new message.
+ */
+export declare const IncoLiteBasicACLProofSchema: GenMessage<IncoLiteBasicACLProof>;
+/**
+ * AllowanceVoucher can be for arbitrary handles to arbitrary accounts
+ * signed by the account sharing its read access. See AdvancedAccessControl.sol
+ * for more details.
+ *
+ * @generated from message inco.kms.lite.v1.AllowanceVoucher
+ */
+export type AllowanceVoucher = Message<"inco.kms.lite.v1.AllowanceVoucher"> & {
+    /**
+     * verifying_contract is the contract address to call to verify the allowance.
+     *
+     * @generated from field: string verifying_contract = 1;
+     */
+    verifyingContract: string;
+    /**
+     * call_function is the function selector on the verifying contract to call
+     * to verify the allowance.
+     *
+     * @generated from field: bytes call_function = 2;
+     */
+    callFunction: Uint8Array;
+    /**
+     * sharer_arg_data is the ABI-encoded data to pass to the function above as the
+     * sharer argument.
+     *
+     * @generated from field: bytes sharer_arg_data = 3;
+     */
+    sharerArgData: Uint8Array;
+    /**
+     * session_nonce is the session nonce of the allowance voucher. It is encoded
+     * as a 32-byte array on the Solidity side.
+     *
+     * @generated from field: bytes session_nonce = 4;
+     */
+    sessionNonce: Uint8Array;
+};
+/**
+ * Describes the message inco.kms.lite.v1.AllowanceVoucher.
+ * Use `create(AllowanceVoucherSchema)` to create a new message.
+ */
+export declare const AllowanceVoucherSchema: GenMessage<AllowanceVoucher>;
+/**
+ * AllowanceProof is the proof of the allowance voucher. See AdvancedAccessControl.sol
+ * for more details.
+ *
+ * @generated from message inco.kms.lite.v1.AllowanceProof
+ */
+export type AllowanceProof = Message<"inco.kms.lite.v1.AllowanceProof"> & {
+    /**
+     * sharer is the address of the account that is sharing its read access.
+     * This account must have persisted permission on the handle.
+     * TODO scalar type.
+     *
+     * @generated from field: string sharer = 1;
+     */
+    sharer: string;
+    /**
+     * voucher is the voucher of the allowance.
+     *
+     * @generated from field: inco.kms.lite.v1.AllowanceVoucher voucher = 2;
+     */
+    voucher?: AllowanceVoucher;
+    /**
+     * voucher_signature is the signature of the voucher by the sharer of the
+     * allowance voucher digest. See AdvancedAccessControl.sol#allowanceVoucherDigest
+     * for how the digest is computed.
+     *
+     * @generated from field: bytes voucher_signature = 3;
+     */
+    voucherSignature: Uint8Array;
+    /**
+     * requester_arg_data is the ABI-encoded data to pass to the function above as the
+     * requester argument.
+     *
+     * @generated from field: bytes requester_arg_data = 4;
+     */
+    requesterArgData: Uint8Array;
+};
+/**
+ * Describes the message inco.kms.lite.v1.AllowanceProof.
+ * Use `create(AllowanceProofSchema)` to create a new message.
+ */
+export declare const AllowanceProofSchema: GenMessage<AllowanceProof>;
+/**
+ * IncoLiteAdvancedACLProof is the proof of the ACL for the compute ciphertext
+ * when the ACL proof is performed by the light client inside the TEE calling
+ * the `isAllowed` function on the AdvancedAccessControl.sol contract.
+ *
+ * @generated from message inco.kms.lite.v1.IncoLiteAdvancedACLProof
+ */
+export type IncoLiteAdvancedACLProof = Message<"inco.kms.lite.v1.IncoLiteAdvancedACLProof"> & {
+    /**
+     * allowance_proof is the proof of the allowance voucher.
+     *
+     * @generated from field: inco.kms.lite.v1.AllowanceProof allowance_proof = 1;
+     */
+    allowanceProof?: AllowanceProof;
+};
+/**
+ * Describes the message inco.kms.lite.v1.IncoLiteAdvancedACLProof.
+ * Use `create(IncoLiteAdvancedACLProofSchema)` to create a new message.
+ */
+export declare const IncoLiteAdvancedACLProofSchema: GenMessage<IncoLiteAdvancedACLProof>;

package/dist/esm/generated/es/inco/kms/lite/v1/types_pb.js

@@ -0,0 +1,44 @@
+// @generated by protoc-gen-es v2.2.5 with parameter "target=ts"
+// @generated from file inco/kms/lite/v1/types.proto (package inco.kms.lite.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv1";
+/**
+ * Describes the file inco/kms/lite/v1/types.proto.
+ */
+export const file_inco_kms_lite_v1_types = /*@__PURE__*/ fileDesc("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");
+/**
+ * Describes the message inco.kms.lite.v1.ECIESKeyset.
+ * Use `create(ECIESKeysetSchema)` to create a new message.
+ */
+export const ECIESKeysetSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_types, 0);
+/**
+ * Describes the message inco.kms.lite.v1.ACLProof.
+ * Use `create(ACLProofSchema)` to create a new message.
+ */
+export const ACLProofSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_types, 1);
+/**
+ * Describes the message inco.kms.lite.v1.HandleWithProof.
+ * Use `create(HandleWithProofSchema)` to create a new message.
+ */
+export const HandleWithProofSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_types, 2);
+/**
+ * Describes the message inco.kms.lite.v1.IncoLiteBasicACLProof.
+ * Use `create(IncoLiteBasicACLProofSchema)` to create a new message.
+ */
+export const IncoLiteBasicACLProofSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_types, 3);
+/**
+ * Describes the message inco.kms.lite.v1.AllowanceVoucher.
+ * Use `create(AllowanceVoucherSchema)` to create a new message.
+ */
+export const AllowanceVoucherSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_types, 4);
+/**
+ * Describes the message inco.kms.lite.v1.AllowanceProof.
+ * Use `create(AllowanceProofSchema)` to create a new message.
+ */
+export const AllowanceProofSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_types, 5);
+/**
+ * Describes the message inco.kms.lite.v1.IncoLiteAdvancedACLProof.
+ * Use `create(IncoLiteAdvancedACLProofSchema)` to create a new message.
+ */
+export const IncoLiteAdvancedACLProofSchema = /*@__PURE__*/ messageDesc(file_inco_kms_lite_v1_types, 6);
+//# sourceMappingURL=data:application/json;base64,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