@inco/js 0.3.1 → 0.3.2-alpha.1

package/dist/types/attestedcompute/attested-compute.d.ts

@@ -1,8 +1,13 @@
 import type { Account, Chain, Transport, WalletClient } from 'viem';
+import { DecryptionAttestation } from '../attesteddecrypt/types.js';
+import { HexString } from '../binary.js';
 import { SupportedChainId } from '../chain.js';
-import { EciesScheme } from '../encryption/encryption.js';
+import { EciesScheme, SupportedFheType } from '../encryption/encryption.js';
 import type { KmsClient } from '../kms/client.js';
-import { AttestedCompute } from './types.js';
+import type { BackoffConfig } from '../retry.js';
+import { AttestedComputeOP } from './types.js';
+export declare const ATTESTED_COMPUTE_DOMAIN_NAME = "IncoAttestedCompute";
+export declare const ATTESTED_COMPUTE_DOMAIN_VERSION = "0.1.0";
 /**
  * Arguments for creating an attested compute.
  */
@@ -21,18 +26,13 @@ export interface IncoLiteAttestedComputeArgs {
  * @throws {AttestedComputeError} If the creation fails
  *
  * @todo Support multiple operations in a single request.
- *
- * @example
- * ```typescript
- * const compute = await incoLiteAttestedCompute({
- *   walletClient,
- *   chainId: sepolia,
- * });
- * const decryptionAttestation = await compute({
- *   lhsHandle: '0x...',
- *   op: AttestedComputeSupportedOps.Eq,
- *   rhsPlaintext: 1337n,
- * });
- * ```
  */
-export declare function incoLiteAttestedCompute({ kmsConnectRpcEndpointOrClient, chainId, walletClient, }: IncoLiteAttestedComputeArgs): AttestedCompute<EciesScheme>;
+export declare function attestedCompute<T extends SupportedFheType>({ lhsHandle, op, rhsPlaintext, backoffConfig, walletClient, kmsConnectRpcEndpointOrClient, chainId, }: {
+    lhsHandle: HexString;
+    op: AttestedComputeOP;
+    rhsPlaintext: bigint | boolean;
+    backoffConfig?: Partial<BackoffConfig> | undefined;
+    walletClient: WalletClient<Transport, Chain, Account>;
+    kmsConnectRpcEndpointOrClient?: string | KmsClient;
+    chainId: SupportedChainId;
+}): Promise<DecryptionAttestation<EciesScheme, T>>;

package/dist/types/attestedcompute/types.d.ts

@@ -25,10 +25,11 @@ export declare class AttestedComputeError extends Error {
     readonly cause?: unknown | undefined;
     constructor(message: string, cause?: unknown | undefined);
 }
-export type AttestedCompute<S extends EncryptionScheme> = <T extends SupportedFheType>(args: {
+export type AttestedCompute<S extends EncryptionScheme> = <T extends SupportedFheType>(args: AttestedComputeFnArgs<S, T>) => Promise<DecryptionAttestation<S, T>>;
+export type AttestedComputeFnArgs<S extends EncryptionScheme, T extends SupportedFheType> = {
     /** The handle to compute on */
     lhsHandle: HexString;
     op: AttestedComputeOP;
     rhsPlaintext: bigint | boolean;
     backoffConfig?: Partial<BackoffConfig>;
-}) => Promise<DecryptionAttestation<S, T>>;
+};

package/dist/types/attesteddecrypt/attested-decrypt.d.ts

@@ -1,16 +1,20 @@
 import type { Account, Chain, Transport, WalletClient } from 'viem';
+import { HexString } from '../binary.js';
 import { SupportedChainId } from '../chain.js';
-import { EciesScheme } from '../encryption/encryption.js';
+import { EciesScheme, SupportedFheType } from '../encryption/encryption.js';
 import type { KmsClient } from '../kms/client.js';
-import { AttestedDecryptor } from './types.js';
+import type { BackoffConfig } from '../retry.js';
+import { DecryptionAttestation } from './types.js';
+export declare const ATTESTED_DECRYPT_DOMAIN_NAME = "IncoAttestedDecrypt";
+export declare const ATTESTED_DECRYPT_DOMAIN_VERSION = "0.1.0";
 /**
  * Validates a handle format.
  * @param handle - The handle to validate
  * @throws {AttestedDecryptError} If the handle format is invalid
  */
-export declare function validateHandle(handle: string): void;
+export declare function validateHandle(handle: HexString): void;
 /**
- * Arguments for creating an attested decryptor.
+ * Arguments for creating an attested decrypt request.
  */
 export interface IncoLiteAttestedDecryptorArgs {
     /** The wallet used to interact with the blockchain and sign the decrypt request */
@@ -21,20 +25,17 @@ export interface IncoLiteAttestedDecryptorArgs {
     chainId: SupportedChainId;
 }
 /**
- * Creates an attested decryptor that can decrypt handles with an attached attestation from the covalidator.
- * @param args - The arguments for creating the decryptor
- * @returns A function that can decrypt handles using attestation
- * @throws {AttestedDecryptError} If the decryptor creation fails
+ * Decrypt multiple handles in a single attested request.
+ * Returns an array of attestations aligned with the response ordering.
  *
- * @todo Support multiple handles in a single request.
- *
- * @example
- * ```typescript
- * const decryptor = await incoLiteAttestedDecryptor({
- *   walletClient,
- *   chainId: sepolia,
- * });
- * const { plaintext, covalidatorSignature } = await decryptor({ handle: '0x...' });
- * ```
+ * @param args - The arguments for creating the attested decrypt function
+ * @returns A function that can decrypt handles and return an attestation
+ * @throws {AttestedDecryptError} If the creation fails
  */
-export declare function incoLiteAttestedDecryptor({ kmsConnectRpcEndpointOrClient, chainId, walletClient, }: IncoLiteAttestedDecryptorArgs): AttestedDecryptor<EciesScheme>;
+export declare function attestedDecrypt({ handles, backoffConfig, walletClient, chainId, kmsConnectRpcEndpointOrClient, }: {
+    handles: HexString[];
+    backoffConfig?: Partial<BackoffConfig> | undefined;
+    walletClient: WalletClient<Transport, Chain, Account>;
+    chainId: SupportedChainId;
+    kmsConnectRpcEndpointOrClient?: string | KmsClient;
+}): Promise<Array<DecryptionAttestation<EciesScheme, SupportedFheType>>>;

package/dist/types/attesteddecrypt/index.d.ts

@@ -1,2 +1 @@
-export * from './attested-decrypt.js';
 export * from './types.js';

package/dist/types/attesteddecrypt/types.d.ts

@@ -13,8 +13,9 @@ export type DecryptionAttestation<S extends EncryptionScheme, T extends Supporte
     plaintext: PlaintextOf<S, T>;
     covalidatorSignature: Uint8Array;
 };
-export type AttestedDecryptor<S extends EncryptionScheme> = <T extends SupportedFheType>(args: {
+export type AttestedDecryptor<S extends EncryptionScheme> = <T extends SupportedFheType>(args: AttestedDecryptFnArgs<S, T>) => Promise<DecryptionAttestation<S, T>>;
+export type AttestedDecryptFnArgs<S extends EncryptionScheme, T extends SupportedFheType> = {
     /** The handle to decrypt */
     handle: HexString;
     backoffConfig?: Partial<BackoffConfig>;
-}) => Promise<DecryptionAttestation<S, T>>;
+};

package/dist/types/attestedreveal/attested-reveal.d.ts

@@ -0,0 +1,21 @@
+import { DecryptionAttestation } from '../attesteddecrypt/types.js';
+import { HexString } from '../binary.js';
+import { SupportedChainId } from '../chain.js';
+import { EciesScheme, SupportedFheType } from '../encryption/encryption.js';
+import type { KmsClient } from '../kms/client.js';
+import type { BackoffConfig } from '../retry.js';
+/**
+ * Just like attestedDecrypt, attestedReveal multiple revealed handles in a single attested request.
+ * Returns an array of attestations aligned with the response ordering.
+ * Handles must be revealed ahead of time using the .reveal() on-chain call.
+ *
+ * @param args - The arguments for creating the attested reveal function
+ * @returns A function that can reveal handles and return an attestation
+ * @throws {AttestedRevealError} If the creation fails
+ */
+export declare function attestedReveal({ handles, backoffConfig, chainId, kmsConnectRpcEndpointOrClient, }: {
+    handles: HexString[];
+    backoffConfig?: Partial<BackoffConfig> | undefined;
+    chainId: SupportedChainId;
+    kmsConnectRpcEndpointOrClient?: string | KmsClient;
+}): Promise<Array<DecryptionAttestation<EciesScheme, SupportedFheType>>>;

package/dist/types/attestedreveal/index.d.ts

@@ -0,0 +1 @@
+export * from './types.js';

package/dist/types/attestedreveal/types.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Custom error class for attested reveal operations.
+ */
+export declare class AttestedRevealError extends Error {
+    readonly cause?: unknown | undefined;
+    constructor(message: string, cause?: unknown | undefined);
+}

package/dist/types/generated/abis/addTwo.d.ts

@@ -20,6 +20,20 @@ export declare const addTwoAbi: readonly [{
         readonly type: "bytes32";
     }];
     readonly stateMutability: "nonpayable";
+}, {
+    readonly type: "function";
+    readonly inputs: readonly [{
+        readonly name: "a";
+        readonly internalType: "euint256";
+        readonly type: "bytes32";
+    }];
+    readonly name: "addTwoAlt";
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly internalType: "euint256";
+        readonly type: "bytes32";
+    }];
+    readonly stateMutability: "nonpayable";
 }, {
     readonly type: "function";
     readonly inputs: readonly [{
@@ -36,6 +50,10 @@ export declare const addTwoAbi: readonly [{
         readonly name: "";
         readonly internalType: "euint256";
         readonly type: "bytes32";
+    }, {
+        readonly name: "";
+        readonly internalType: "euint256";
+        readonly type: "bytes32";
     }];
     readonly stateMutability: "nonpayable";
 }, {

package/dist/types/generated/abis/lightning-preview.d.ts

@@ -271,6 +271,20 @@ export declare const advancedAccessControlAbi: readonly [{
         readonly type: "bool";
     }];
     readonly stateMutability: "nonpayable";
+}, {
+    readonly type: "function";
+    readonly inputs: readonly [{
+        readonly name: "handle";
+        readonly internalType: "bytes32";
+        readonly type: "bytes32";
+    }];
+    readonly name: "isRevealed";
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly internalType: "bool";
+        readonly type: "bool";
+    }];
+    readonly stateMutability: "view";
 }, {
     readonly type: "function";
     readonly inputs: readonly [{
@@ -289,6 +303,16 @@ export declare const advancedAccessControlAbi: readonly [{
         readonly type: "bool";
     }];
     readonly stateMutability: "view";
+}, {
+    readonly type: "function";
+    readonly inputs: readonly [{
+        readonly name: "handle";
+        readonly internalType: "bytes32";
+        readonly type: "bytes32";
+    }];
+    readonly name: "reveal";
+    readonly outputs: readonly [];
+    readonly stateMutability: "nonpayable";
 }, {
     readonly type: "function";
     readonly inputs: readonly [];
@@ -1478,6 +1502,20 @@ export declare const iIncoLightningPreviewAbi: readonly [{
         readonly type: "bool";
     }];
     readonly stateMutability: "nonpayable";
+}, {
+    readonly type: "function";
+    readonly inputs: readonly [{
+        readonly name: "handle";
+        readonly internalType: "bytes32";
+        readonly type: "bytes32";
+    }];
+    readonly name: "isRevealed";
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly internalType: "bool";
+        readonly type: "bool";
+    }];
+    readonly stateMutability: "view";
 }, {
     readonly type: "function";
     readonly inputs: readonly [{
@@ -1849,6 +1887,16 @@ export declare const iIncoLightningPreviewAbi: readonly [{
         readonly type: "uint256";
     }];
     readonly stateMutability: "nonpayable";
+}, {
+    readonly type: "function";
+    readonly inputs: readonly [{
+        readonly name: "handle";
+        readonly internalType: "bytes32";
+        readonly type: "bytes32";
+    }];
+    readonly name: "reveal";
+    readonly outputs: readonly [];
+    readonly stateMutability: "nonpayable";
 }, {
     readonly type: "function";
     readonly inputs: readonly [];

package/dist/types/generated/abis/lightning.d.ts

@@ -755,6 +755,16 @@ export declare const incoLightningAbi: readonly [{
         readonly type: "string";
     }];
     readonly stateMutability: "view";
+}, {
+    readonly type: "function";
+    readonly inputs: readonly [];
+    readonly name: "getNextEventId";
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly internalType: "uint256";
+        readonly type: "uint256";
+    }];
+    readonly stateMutability: "view";
 }, {
     readonly type: "function";
     readonly inputs: readonly [];
@@ -1045,6 +1055,20 @@ export declare const incoLightningAbi: readonly [{
         readonly type: "bool";
     }];
     readonly stateMutability: "view";
+}, {
+    readonly type: "function";
+    readonly inputs: readonly [{
+        readonly name: "handle";
+        readonly internalType: "bytes32";
+        readonly type: "bytes32";
+    }];
+    readonly name: "isRevealed";
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly internalType: "bool";
+        readonly type: "bool";
+    }];
+    readonly stateMutability: "view";
 }, {
     readonly type: "function";
     readonly inputs: readonly [{
@@ -1241,6 +1265,16 @@ export declare const incoLightningAbi: readonly [{
         readonly type: "uint256";
     }];
     readonly stateMutability: "nonpayable";
+}, {
+    readonly type: "function";
+    readonly inputs: readonly [{
+        readonly name: "handle";
+        readonly internalType: "bytes32";
+        readonly type: "bytes32";
+    }];
+    readonly name: "reveal";
+    readonly outputs: readonly [];
+    readonly stateMutability: "nonpayable";
 }, {
     readonly type: "function";
     readonly inputs: readonly [];

package/dist/types/generated/es/inco/kms/lite/v1/kms_service_pb.d.ts

@@ -1,6 +1,6 @@
 import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
 import type { TypedCiphertext } from "../../../fhe/v1/types_pb";
-import type { ECIESKeyset, HandleWithProof } from "./types_pb";
+import type { ACLProof, ECIESKeyset, HandleWithProof } from "./types_pb";
 import type { Message } from "@bufbuild/protobuf";
 /**
  * Describes the file inco/kms/lite/v1/kms_service.proto.
@@ -196,19 +196,38 @@ export type AttestedDecryptRequest = Message<"inco.kms.lite.v1.AttestedDecryptRe
      */
     eip712Signature: Uint8Array;
     /**
-     * handles is the list of handles of the ciphertexts to decrypt.
-     * The user_address must have ACL access to the handles for the attested
+     * handles_with_proofs is the list of handles of the ciphertexts with proofs to decrypt.
+     * Either the user_address or sharer must have ACL access to the handles for the attested
      * decryption to succeed.
      *
-     * @generated from field: repeated string handles = 3;
+     * @generated from field: repeated inco.kms.lite.v1.HandleWithProof handles_with_proofs = 3;
      */
-    handles: string[];
+    handlesWithProofs: HandleWithProof[];
 };
 /**
  * Describes the message inco.kms.lite.v1.AttestedDecryptRequest.
  * Use `create(AttestedDecryptRequestSchema)` to create a new message.
  */
 export declare const AttestedDecryptRequestSchema: GenMessage<AttestedDecryptRequest>;
+/**
+ * AttestedRevealRequest is the request type for the KmsService/AttestedReveal RPC method.
+ *
+ * @generated from message inco.kms.lite.v1.AttestedRevealRequest
+ */
+export type AttestedRevealRequest = Message<"inco.kms.lite.v1.AttestedRevealRequest"> & {
+    /**
+     * handles is the list of handles of the ciphertexts to decrypt.
+     * The handle must have been revealed beforehand with the on-chain .reveal() call.
+     *
+     * @generated from field: repeated string handles = 3;
+     */
+    handles: string[];
+};
+/**
+ * Describes the message inco.kms.lite.v1.AttestedRevealRequest.
+ * Use `create(AttestedRevealRequestSchema)` to create a new message.
+ */
+export declare const AttestedRevealRequestSchema: GenMessage<AttestedRevealRequest>;
 /**
  * AttestedComputeRequest is the request type for the KmsService/AttestedDecrypt RPC method.
  *
@@ -278,6 +297,14 @@ export type AttestedComputeRequest = Message<"inco.kms.lite.v1.AttestedComputeRe
      * @generated from field: string rhs_plaintext = 5;
      */
     rhsPlaintext: string;
+    /**
+     * acl_proof is the proof that the user has access to compute on the lhs_handle.
+     * Either the user_address or sharer must have ACL access to the handles for the attested
+     * compute to succeed.
+     *
+     * @generated from field: inco.kms.lite.v1.ACLProof acl_proof = 6;
+     */
+    aclProof?: ACLProof;
 };
 /**
  * Describes the message inco.kms.lite.v1.AttestedComputeRequest.
@@ -303,6 +330,25 @@ export type AttestedDecryptResponse = Message<"inco.kms.lite.v1.AttestedDecryptR
  * Use `create(AttestedDecryptResponseSchema)` to create a new message.
  */
 export declare const AttestedDecryptResponseSchema: GenMessage<AttestedDecryptResponse>;
+/**
+ * AttestedRevealResponse is the response type for the KmsService/AttestedReveal RPC method.
+ *
+ * @generated from message inco.kms.lite.v1.AttestedRevealResponse
+ */
+export type AttestedRevealResponse = Message<"inco.kms.lite.v1.AttestedRevealResponse"> & {
+    /**
+     * decryption_attestations is the list of decryption attestations. The item at index `i`
+     * corresponds to the handle at index `i` in the `AttestedRevealRequest`.
+     *
+     * @generated from field: repeated inco.kms.lite.v1.DecryptionAttestation decryption_attestations = 1;
+     */
+    decryptionAttestations: DecryptionAttestation[];
+};
+/**
+ * Describes the message inco.kms.lite.v1.AttestedRevealResponse.
+ * Use `create(AttestedRevealResponseSchema)` to create a new message.
+ */
+export declare const AttestedRevealResponseSchema: GenMessage<AttestedRevealResponse>;
 /**
  * AttestedComputeResponse is the response type for the KmsService/AttestedCompute RPC method.
  *
@@ -523,4 +569,16 @@ export declare const KmsService: GenService<{
         input: typeof AttestedComputeRequestSchema;
         output: typeof AttestedComputeResponseSchema;
     };
+    /**
+     * AttestedReveal decrypts multiple ciphertexts and provides an attestation
+     * that the decryption was performed correctly.
+     * Doesn't require authentication if the handle is publicly revealed with the on-chain .reveal() call beforehand.
+     *
+     * @generated from rpc inco.kms.lite.v1.KmsService.AttestedReveal
+     */
+    attestedReveal: {
+        methodKind: "unary";
+        input: typeof AttestedRevealRequestSchema;
+        output: typeof AttestedRevealResponseSchema;
+    };
 }>;

package/dist/types/generated/lightning.d.ts

@@ -152,8 +152,8 @@ export declare const lightningDeployments: readonly [{
     readonly pepper: "devnet";
     readonly executorAddress: "0x3B22be60Ae699933959CA3cE147C96caa88Ccd3D";
     readonly salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc00b001d6742fded0dd599ede";
-    readonly chainId: 4801;
-    readonly chainName: "World Chain Sepolia";
+    readonly chainId: 9746;
+    readonly chainName: "Plasma Testnet";
     readonly version: {
         readonly major: 0;
         readonly minor: 2;
@@ -162,12 +162,12 @@ export declare const lightningDeployments: readonly [{
     };
     readonly decryptSigner: "0x138AcbDC1FA02b955949d8Da09E546Ea7748710f";
     readonly eciesPublicKey: "0x038a582d29083c2f3fefe024bf4dd9ab913ab8973716977da5f01106e0b84095b1";
-    readonly blockNumber: 17365942;
-    readonly deployDate: "2025-08-15T17:35:15.208Z";
-    readonly commit: "v0.2.17-35-g8cca6b4e-dirty";
+    readonly blockNumber: 1718868;
+    readonly deployDate: "2025-09-10T15:20:25.654Z";
+    readonly commit: "v6-7-gf96f358e-dirty";
     readonly active: true;
 }, {
-    readonly name: "incoLightningPreview_0_2_1__340846814";
+    readonly name: "incoLightning_0_2_1__340846814";
     readonly majorVersion: 0;
     readonly deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC";
     readonly pepper: "devnet";
@@ -182,10 +182,31 @@ export declare const lightningDeployments: readonly [{
         readonly shortSalt: "340846814";
     };
     readonly decryptSigner: "0x138AcbDC1FA02b955949d8Da09E546Ea7748710f";
-    readonly eciesPublicKey: "0x048a582d29083c2f3fefe024bf4dd9ab913ab8973716977da5f01106e0b84095b1e647a9e377175fcb66bda05087c93b05e1fd53a704d0914bb23a0b2a69e9f235";
-    readonly blockNumber: 3339121;
-    readonly deployDate: "2025-08-07T12:14:56.788Z";
-    readonly commit: "v0.2.17-28-gfd11c1aa-dirty";
+    readonly eciesPublicKey: "0x038a582d29083c2f3fefe024bf4dd9ab913ab8973716977da5f01106e0b84095b1";
+    readonly blockNumber: 1717229;
+    readonly deployDate: "2025-09-10T14:53:07.218Z";
+    readonly commit: "v6-7-gf96f358e-dirty";
+    readonly active: true;
+}, {
+    readonly name: "incoLightningPreview_0_2_1__340846814";
+    readonly majorVersion: 0;
+    readonly deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC";
+    readonly pepper: "devnet";
+    readonly executorAddress: "0x3B22be60Ae699933959CA3cE147C96caa88Ccd3D";
+    readonly salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc00b001d6742fded0dd599ede";
+    readonly chainId: 4801;
+    readonly chainName: "World Chain Sepolia";
+    readonly version: {
+        readonly major: 0;
+        readonly minor: 2;
+        readonly patch: 1;
+        readonly shortSalt: "340846814";
+    };
+    readonly decryptSigner: "0x138AcbDC1FA02b955949d8Da09E546Ea7748710f";
+    readonly eciesPublicKey: "0x038a582d29083c2f3fefe024bf4dd9ab913ab8973716977da5f01106e0b84095b1";
+    readonly blockNumber: 17365942;
+    readonly deployDate: "2025-08-15T17:35:15.208Z";
+    readonly commit: "v0.2.17-35-g8cca6b4e-dirty";
     readonly active: true;
 }, {
     readonly name: "incoLightning_0_2_0__340846814";

package/dist/types/lite/attested-compute.d.ts

@@ -1,4 +1,5 @@
-import { type IncoLiteAttestedComputeArgs, incoLiteAttestedCompute } from '../attestedcompute/attested-compute.js';
-import { type AttestedComputeSupportedOps } from '../attestedcompute/types.js';
-export { incoLiteAttestedCompute };
-export type { AttestedComputeSupportedOps, IncoLiteAttestedComputeArgs };
+import { ATTESTED_COMPUTE_DOMAIN_NAME, ATTESTED_COMPUTE_DOMAIN_VERSION, type IncoLiteAttestedComputeArgs } from '../attestedcompute/attested-compute.js';
+import type { AttestedCompute, AttestedComputeFnArgs, AttestedComputeSupportedOps } from '../attestedcompute/types.js';
+import type { AttestedDecryptFnArgs } from '../attesteddecrypt/types.js';
+export { ATTESTED_COMPUTE_DOMAIN_NAME, ATTESTED_COMPUTE_DOMAIN_VERSION };
+export type { AttestedCompute, AttestedComputeFnArgs, AttestedComputeSupportedOps, AttestedDecryptFnArgs, IncoLiteAttestedComputeArgs, };

package/dist/types/lite/attested-decrypt.d.ts

@@ -1,3 +1,4 @@
-import { type IncoLiteAttestedDecryptorArgs, incoLiteAttestedDecryptor } from '../attesteddecrypt/attested-decrypt.js';
-export { incoLiteAttestedDecryptor };
+import { type IncoLiteAttestedDecryptorArgs } from '../attesteddecrypt/attested-decrypt.js';
 export type { IncoLiteAttestedDecryptorArgs };
+import { ATTESTED_DECRYPT_DOMAIN_NAME, ATTESTED_DECRYPT_DOMAIN_VERSION } from '../attesteddecrypt/attested-decrypt.js';
+export { ATTESTED_DECRYPT_DOMAIN_NAME, ATTESTED_DECRYPT_DOMAIN_VERSION };

package/dist/types/lite/index.d.ts

@@ -1,5 +1,8 @@
 export * from '../generated/abis/lightning.js';
-export type { KmsService, ReencryptRequest } from '../generated/es/inco/kms/lite/v1/kms_service_pb.js';
+export type { AttestedComputeRequest, AttestedDecryptRequest, KmsService, ReencryptRequest, } from '../generated/es/inco/kms/lite/v1/kms_service_pb.js';
+export type { HandleWithProof } from '../generated/es/inco/kms/lite/v1/types_pb.js';
+export * from './attested-compute.js';
+export * from './attested-decrypt.js';
 export * from './deployments.js';
 export * from './ecies.js';
 export * from './hadu.js';

package/dist/types/lite/lightning.d.ts

@@ -1,11 +1,14 @@
 import { Account, Chain, Transport, WalletClient } from 'viem';
 import { AllowanceVoucherWithSig } from '../advancedacl/types.js';
+import { AttestedComputeOP } from '../attestedcompute/types.js';
+import { DecryptionAttestation } from '../attesteddecrypt/index.js';
 import { Address, HexString } from '../binary.js';
-import { EciesScheme, PlaintextOf } from '../encryption/index.js';
+import { EciesScheme, PlaintextOf, SupportedFheType } from '../encryption/index.js';
 import { lightningDeployments } from '../generated/lightning.js';
 import { localNodeLightningConfig } from '../generated/local-node.js';
 import { LocalNodeEnv } from '../local/index.js';
 import type { Reencryptor } from '../reencryption/index.js';
+import { BackoffConfig } from '../retry.js';
 import { Secp256k1Keypair } from './ecies.js';
 type TupleToUnion<T> = T extends readonly unknown[] ? T[number] : never;
 type Deployment = TupleToUnion<typeof lightningDeployments>;
@@ -163,7 +166,7 @@ export declare class Lightning<T extends DeploymentSlice = DeploymentSlice> {
      * const decryptedValue = await reencryptor({handle: resultHandle});
      * ```
      */
-    getSessionKeyRencryptor(allowanceVoucherWithSig: AllowanceVoucherWithSig, ephemeralKeypair: Secp256k1Keypair): Promise<(<T_1 extends import("../encryption/encryption.js").SupportedFheType>({ handle }: import("../reencryption/types.js").ReencryptFnArgs<EciesScheme, T_1>) => Promise<PlaintextOf<1, 0 | 5 | 7 | 8>>)>;
+    getSessionKeyRencryptor(allowanceVoucherWithSig: AllowanceVoucherWithSig, ephemeralKeypair: Secp256k1Keypair): Promise<(<T_1 extends SupportedFheType>({ handle }: import("../reencryption/types.js").ReencryptFnArgs<EciesScheme, T_1>) => Promise<PlaintextOf<1, 0 | 5 | 7 | 8>>)>;
     /**
      * Updates the active session nonce for the given wallet client.
      *
@@ -174,6 +177,74 @@ export declare class Lightning<T extends DeploymentSlice = DeploymentSlice> {
      * @returns The transaction hash of the updateActiveVouchersSessionNonce transaction
      */
     updateActiveVouchersSessionNonce(walletClient: WalletClient<Transport, Chain, Account>): Promise<HexString>;
+    /**
+     * Get an attested decryptor for the given wallet client.
+     *
+     * @param walletClient - The wallet client used for signing the attested decrypt request
+     * @param handles - The handles to decrypt
+     * @param backoffConfig - The backoff configuration for the attested decrypt request
+     * @returns The decryption attestations
+     *
+     * @example
+     * ```typescript
+     * const response = await lightning.attestedDecrypt(walletClient, [handle1, handle2]);
+     * const { plaintext, covalidatorSignature } = response[0];
+     * ```
+     */
+    attestedDecrypt(walletClient: WalletClient<Transport, Chain, Account>, handles: HexString[], backoffConfig?: Partial<BackoffConfig>): Promise<Array<DecryptionAttestation<EciesScheme, SupportedFheType>>>;
+    /**
+     * @notice Attested decryption using a session key.
+     * @dev This method is used when you want to perform attested decryption
+     *      via an ephemeral session key and an allowance voucher. The session
+     *      key setup is typically faster and more flexible than using a wallet.
+     *
+     * @param ephemeralKeypair The ephemeral Secp256k1 keypair used for secure communication.
+     * @param allowanceVoucherWithSig The signed allowance voucher, obtained from
+     *        `grantSessionKeyAllowanceVoucher`, proving the session key's decryption rights.
+     * @param handles The encrypted handles to be decrypted.
+     * @param backoffConfig Optional configuration for retry and backoff strategy.
+     *
+     * @returns A promise that resolves to an array of decryption attestations.
+     */
+    attestedDecrypt(ephemeralKeypair: Secp256k1Keypair, allowanceVoucherWithSig: AllowanceVoucherWithSig, handles: HexString[], backoffConfig?: Partial<BackoffConfig>): Promise<Array<DecryptionAttestation<EciesScheme, SupportedFheType>>>;
+    /**
+     * Get an attested compute for the given wallet client.
+     *
+     * @param walletClient - The wallet client used for signing the attested compute request
+     * @param lhsHandle - The handle to compute
+     * @param op - The operation to perform
+     * @param rhsPlaintext - The plaintext to compute with
+     * @param backoffConfig - The backoff configuration for the attested compute request
+     * @returns The decryption attestation
+     *
+     * @example
+     * ```typescript
+     * import { AttestedComputeSupportedOps } from '../lite/attested-compute.js';
+     * const lhsHandle = '0x...';
+     * const rhsPlaintext = 1337n;
+     * const op = AttestedComputeSupportedOps.Eq;
+     * const response = await lightning.attestedCompute(walletClient, lhsHandle, op, rhsPlaintext);
+     * const { plaintext, covalidatorSignature, handle } = response;
+     * ```
+     */
+    attestedCompute(walletClient: WalletClient<Transport, Chain, Account>, lhsHandle: HexString, op: AttestedComputeOP, rhsPlaintext: bigint | boolean, backoffConfig?: Partial<BackoffConfig>): Promise<DecryptionAttestation<EciesScheme, SupportedFheType>>;
+    /**
+     * @notice Attested compute using a session key.
+     * @dev This method is used when you want to perform attested compute
+     *      via an ephemeral session key and an allowance voucher. The session
+     *      key setup is typically faster and more flexible than using a wallet.
+     *
+     * @param ephemeralKeypair The ephemeral Secp256k1 keypair used for secure communication.
+     * @param lhsHandle The handle to compute on
+     * @param op The operation to perform
+     * @param rhsPlaintext The plaintext to compute with
+     * @param allowanceVoucherWithSig The signed allowance voucher, obtained from
+     *        `grantSessionKeyAllowanceVoucher`, proving the session key's compute rights.
+     * @param backoffConfig Optional configuration for retry and backoff strategy.
+     *
+     * @returns A promise that resolves to a compute attestation.
+     */
+    attestedCompute(ephemeralKeypair: Secp256k1Keypair, lhsHandle: HexString, op: AttestedComputeOP, rhsPlaintext: bigint | boolean, allowanceVoucherWithSig: AllowanceVoucherWithSig, backoffConfig?: Partial<BackoffConfig>): Promise<DecryptionAttestation<EciesScheme, SupportedFheType>>;
     /**
      * Get the GRPC endpoint for the covalidator that services this deployment.
      */

package/dist/types/lite/reencrypt.d.ts

@@ -19,6 +19,5 @@ export declare function incoLiteReencryptor({ kmsConnectRpcEndpointOrClient, cha
 export declare function getKmsClient(kmsConnectRpcEndpointOrClient: string | Client<typeof KmsService>): Client<typeof KmsService>;
 export declare function decryptGrpcResponse<T extends SupportedFheType>(response: ReencryptResponse, ephemeralKeypair: Secp256k1Keypair, handle: Handle): Promise<PlaintextOf<1, T>>;
 export declare function defaultCovalidatorGrpc(chain: SupportedChain): string;
-export declare function pulumiCovalidatorGrpc(chain: SupportedChain): string;
 export declare function lightningDevnetCovalidatorGrpc(chain: SupportedChain): string;
 export declare function lightningTestnetCovalidatorGrpc(chain: SupportedChain): string;