@inco/js 0.8.0-devnet-9 → 0.8.0-devnet-10

package/dist/types/generated/abis/test-elist.d.ts

@@ -2,7 +2,7 @@ export declare const elistTesterAbi: readonly [{
     readonly type: "constructor";
     readonly inputs: readonly [{
         readonly name: "_inco";
-        readonly internalType: "contract IIncoLightningPreview";
+        readonly internalType: "contract IIncoLightning";
         readonly type: "address";
     }];
     readonly stateMutability: "nonpayable";

package/dist/types/generated/abis/verifier.d.ts

@@ -429,6 +429,45 @@ export declare const incoVerifierAbi: readonly [{
         readonly type: "bool";
     }];
     readonly stateMutability: "view";
+}, {
+    readonly type: "function";
+    readonly inputs: readonly [{
+        readonly name: "elistHandle";
+        readonly internalType: "bytes32";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "proofElements";
+        readonly internalType: "struct ElementDecryptionProof[]";
+        readonly type: "tuple[]";
+        readonly components: readonly [{
+            readonly name: "pairHash";
+            readonly internalType: "bytes32";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "commitment";
+            readonly internalType: "bytes32";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "value";
+            readonly internalType: "uint256";
+            readonly type: "uint256";
+        }];
+    }, {
+        readonly name: "proof";
+        readonly internalType: "bytes32";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "signatures";
+        readonly internalType: "bytes[]";
+        readonly type: "bytes[]";
+    }];
+    readonly name: "isValidEListDecryptionAttestation";
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly internalType: "bool";
+        readonly type: "bool";
+    }];
+    readonly stateMutability: "view";
 }, {
     readonly type: "function";
     readonly inputs: readonly [{

package/dist/types/generated/lightning.d.ts

@@ -1,4 +1,24 @@
 export declare const lightningDeployments: readonly [{
+    readonly name: "incoLightning_6_0_0__281949651";
+    readonly majorVersion: 6;
+    readonly deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC";
+    readonly pepper: "devnet";
+    readonly executorAddress: "0xDF3830489208461f72Df6E45D0e6cbF9DBB74fe1";
+    readonly salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc009531587de02194b1b7a9d3";
+    readonly chainId: 84532;
+    readonly chainName: "Base Sepolia";
+    readonly version: {
+        readonly major: 6;
+        readonly minor: 0;
+        readonly patch: 0;
+        readonly shortSalt: "281949651";
+    };
+    readonly blockNumber: 37516200;
+    readonly deployDate: "2026-02-11T09:04:51.931Z";
+    readonly commit: "v0.8.0-devnet-9-13-ge2ba2377";
+    readonly active: true;
+    readonly includesPreviewFeatures: false;
+}, {
     readonly name: "incoLightningPreview_5_0_0__203964628";
     readonly majorVersion: 5;
     readonly deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC";

package/dist/types/generated/local-node.d.ts

@@ -16,12 +16,12 @@ export declare const localNodeLightningConfig: {
         readonly senderPrivateKey: "0x3ff395b755c4dc09837d0672dd421915e9b9835a4733edf63d8fd12b3fe4475c";
     };
     readonly devnet: {
-        readonly executorAddress: "0x8D5D75CC00E2Fc84ec4dE085aE1708223591c6b6";
+        readonly executorAddress: "0xDF3830489208461f72Df6E45D0e6cbF9DBB74fe1";
         readonly chainId: 31337;
         readonly covalidatorUrls: readonly ["http://localhost:50055"];
-        readonly signers: readonly ["0x355DD2C81EeE317eFA7e6BCdc4A1Efaa44eb1065"];
+        readonly signers: readonly ["0x686190B567C1EF3adD333B73ad9B4B092D8723c1"];
         readonly hostChainRpcUrl: "http://localhost:8545";
-        readonly senderPrivateKey: "0xdc2eda1a235a84ae342ce8662ab3940c27c5e6758915f15a752c13a8d027b3a2";
+        readonly senderPrivateKey: "0xcffaf5c90b8131b526b028c6c328b3e9f5079932e29a2ec3a1b7f29b383fd0e6";
     };
     readonly alphanet: {
         readonly executorAddress: "0xc0d693DeEF0A91CE39208676b6da09B822abd199";
@@ -32,7 +32,7 @@ export declare const localNodeLightningConfig: {
         readonly senderPrivateKey: "0x279c172cf3638a79642daa5f7666c600befde318550d7579cf96280920e318b6";
     };
     readonly scratch: {
-        readonly executorAddress: "0x3938983bFC7F222136D8B180eec11D14DcCdD274";
+        readonly executorAddress: "0xF253724506f9aF666C301c0aD94f92f92Ff390E4";
         readonly chainId: 31337;
         readonly covalidatorUrls: readonly ["http://localhost:50055"];
         readonly signers: readonly ["0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266"];

package/dist/types/handle.d.ts

@@ -29,6 +29,18 @@ export declare const InputContext: Schema.Struct<{
 }>;
 export type InputContext = typeof InputContext.Type;
 export type Handle = HexString;
+/**
+ * Expected length of a handle in bytes.
+ * Handle format: 29 bytes hash + 1 byte index + 1 byte type + 1 byte version = 32 bytes
+ */
+export declare const HANDLE_LENGTH_BYTES = 32;
+/**
+ * Validates handle integrity by checking format, length, and version.
+ * Matches the validation in Go's HandleFromBytes (pkg/fhe/handle.go).
+ * @param handle - The handle to validate
+ * @throws Error if handle is malformed (wrong format, length, or unsupported version)
+ */
+export declare function validateHandle(handle: HexString): void;
 export declare function getHandleType(handle: HexString): FheType;
 /**
  *  Computes the prehandle hash for an input based on the ciphertext

package/dist/types/kms/client.d.ts

@@ -2,7 +2,7 @@ import { type Client } from '@connectrpc/connect';
 import type { Address } from 'viem';
 import type { SupportedChain } from '../chain.js';
 import { KmsService } from '../generated/es/inco/kms/lite/v1/kms_service_pb.js';
-export declare const DEFAULT_COVALIDATOR_SIGNER: Address;
+export declare const TEST_DEFAULT_COVALIDATOR_SIGNER: Address;
 export type KmsClient = Client<typeof KmsService> & {
     signerAddress: Address;
 };

package/dist/types/kms/quorumClient.d.ts

@@ -52,6 +52,7 @@ export declare class KmsQuorumClient {
     private verifyComputeResponseConsistency;
     /**
      * Verifies that two plaintext byte arrays are identical.
+     * Uses constant-time comparison to prevent timing side-channel attacks.
      */
     private verifyPlaintextBytesConsistency;
     private verifyPlaintextConsistency;

package/dist/types/lite/index.d.ts

@@ -6,4 +6,4 @@ export * from './attested-decrypt.js';
 export * from './deployments.js';
 export * from './hadu.js';
 export * from './lightning.js';
-export { TEST_NETWORK_SEED_KEY, TEST_NETWORK_XWING_PUBKEY, XWING_PUBLIC_KEY_SIZE, decodeXwingPrivateKey, decodeXwingPublicKey, decrypt, deriveXwingKeypairFromSeed, encodeXwingPublicKey, encrypt, generateXwingKeypair, getXwingDecryptor, getXwingEncryptor, type XwingDecryptorArgs, type XwingEncryptorArgs, type XwingKeypair, } from './xwing.js';
+export { TEST_NETWORK_SEED_KEY, XWING_PUBLIC_KEY_SIZE, decodeXwingPrivateKey, decodeXwingPublicKey, decrypt, deriveXwingKeypairFromSeed, encodeXwingPublicKey, encrypt, generateXwingKeypair, getXwingDecryptor, getXwingEncryptor, type XwingDecryptorArgs, type XwingEncryptorArgs, type XwingKeypair, } from './xwing.js';

package/dist/types/lite/lightning.d.ts

@@ -387,11 +387,11 @@ export declare class Lightning<T extends DeploymentSlice = DeploymentSlice> {
     static getNetworkPubkey(client: PublicClient, executorAddress: Address): Promise<HexString>;
     static getIncoVerifierContract(client: PublicClient, executorAddress: Address): Promise<GetContractReturnType<typeof incoVerifierAbi, PublicClient, Address>>;
     /**
-     * Retrieves the verifier contract details including threshold, signers, and ECIES public key from the Inco Verifier contract.
+     * Retrieves the verifier contract details including threshold, signers, and XWING public key from the Inco Verifier contract.
      *
      * @param executorAddress The address of the Inco Lightning executor contract.
      * @param client The public client to interact with the blockchain.
-     * @returns An object containing the threshold, signers, and ECIES public key.
+     * @returns An object containing the threshold, signers, and XWING public key.
      */
     private static getVerifierContractDetails;
     private static getChainConfig;

package/dist/types/retry.d.ts

@@ -7,6 +7,20 @@ export type BackoffConfig = {
     backoffFactor: number;
     errHandler?: (error: Error, attempt: number) => 'stop' | 'continue';
 };
+/**
+ * Checks if an error is safe to retry.
+ * Only transient errors matching the allowlist should return true.
+ * All other errors fail fast to avoid masking security-critical failures.
+ *
+ * @param error - The error to check
+ * @returns true if the error is transient and safe to retry, false otherwise
+ */
+export declare function isRetryableError(error: Error): boolean;
+/**
+ * Default error handler that only retries known transient errors.
+ * Security-critical errors will fail fast.
+ */
+export declare function defaultRetryErrorHandler(error: Error): 'stop' | 'continue';
 /**
  * Helper function to implement exponential backoff retry logic.
  * @param fn - The function to retry

package/dist/types/test/mocks.d.ts

@@ -5,6 +5,7 @@ import { KmsQuorumClient } from '../kms/quorumClient.js';
 interface MinimalKmsClient {
     attestedCompute: ReturnType<typeof vi.fn>;
     attestedDecrypt: ReturnType<typeof vi.fn>;
+    attestedReveal: ReturnType<typeof vi.fn>;
     key: ReturnType<typeof vi.fn>;
     reencrypt: ReturnType<typeof vi.fn>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inco/js",
-  "version": "0.8.0-devnet-9",
+  "version": "0.8.0-devnet-10",
   "repository": "https://github.com/Inco-fhevm/inco-monorepo",
   "license": "Apache-2.0",
   "sideEffects": false,