@inco/lightning-js 0.0.0-bootstrap.0

package/dist/cjs/lite/lightning.js

@@ -0,0 +1,696 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Lightning = void 0;
+const viem_1 = require("viem");
+const chains_1 = require("viem/chains");
+const session_key_js_1 = require("../advancedacl/session-key.js");
+const attested_compute_js_1 = require("../attestedcompute/attested-compute.js");
+const attested_decrypt_js_1 = require("../attesteddecrypt/attested-decrypt.js");
+const attested_reveal_js_1 = require("../attestedreveal/attested-reveal.js");
+const binary_js_1 = require("../binary.js");
+const chain_js_1 = require("../chain.js");
+const elist_attested_decrypt_js_1 = require("../elistattesteddecrypt/elist-attested-decrypt.js");
+const encryption_js_1 = require("../encryption/encryption.js");
+const lightning_js_1 = require("../generated/abis/lightning.js");
+const verifier_js_1 = require("../generated/abis/verifier.js");
+const lightning_js_2 = require("../generated/lightning.js");
+const local_node_js_1 = require("../generated/local-node.js");
+const handle_js_1 = require("../handle.js");
+const index_js_1 = require("../index.js");
+const quorumClient_js_1 = require("../kms/quorumClient.js");
+const index_js_2 = require("../local/index.js");
+const schema_js_1 = require("../schema.js");
+const xwing_js_1 = require("./xwing.js");
+const DefaultPepper = 'testnet';
+function isLocalNodeEnvFileSource(value) {
+    return (!!value &&
+        typeof value === 'object' &&
+        'filePath' in value &&
+        typeof value.filePath === 'string');
+}
+/**
+ * Builds a viem Transport from a list of RPC URLs.
+ * - No URLs: uses viem's default public RPC endpoint.
+ * - One URL: uses a single http() transport.
+ * - Multiple URLs: uses viem's fallback() transport (rank: false by default),
+ *   which tries providers in order and falls back to the next on failure.
+ */
+function buildTransport(rpcUrls) {
+    if (!rpcUrls || rpcUrls.length === 0)
+        return (0, viem_1.http)();
+    if (rpcUrls.length === 1)
+        return (0, viem_1.http)(rpcUrls[0]);
+    return (0, viem_1.fallback)(rpcUrls.map((url) => (0, viem_1.http)(url)));
+}
+/**
+ * The Lightning class provides a convenient way to interact with the Inco Lightning contract by binding to a specific
+ * deployment.
+ */
+class Lightning {
+    _deployment;
+    covalidatorUrls;
+    signers;
+    threshold;
+    networkPubkey;
+    publicClient;
+    executorAddress;
+    chainId;
+    kmsQuorumClient;
+    encryptor = null;
+    encryptionScheme = null;
+    constructor(_deployment, covalidatorUrls, signers, threshold, networkPubkey, publicClient) {
+        this._deployment = _deployment;
+        this.covalidatorUrls = covalidatorUrls;
+        this.signers = signers;
+        this.threshold = threshold;
+        this.networkPubkey = networkPubkey;
+        this.publicClient = publicClient;
+        this.executorAddress = (0, binary_js_1.parseAddress)(_deployment.executorAddress);
+        this.chainId = BigInt(_deployment.chainId);
+        this.kmsQuorumClient = quorumClient_js_1.KmsQuorumClient.fromUrls(this.covalidatorUrls, this.signers, this.threshold);
+    }
+    async getEncryptor() {
+        if (!this.encryptor || !this.encryptionScheme) {
+            const pubKeyBytes = (0, viem_1.hexToBytes)((0, schema_js_1.parse)(binary_js_1.HexString, this.networkPubkey));
+            // Detect encryption scheme based on public key length
+            if (pubKeyBytes.length === xwing_js_1.XWING_PUBLIC_KEY_SIZE) {
+                // X-Wing encryption
+                const pubKeyA = await (0, xwing_js_1.decodeXwingPublicKey)(pubKeyBytes);
+                // Safe cast: X-Wing encryptor processes plaintexts with scheme=2,
+                // and we ensure scheme matches when calling encrypt()
+                this.encryptor = (0, xwing_js_1.getXwingEncryptor)({ pubKeyA });
+                this.encryptionScheme = encryption_js_1.encryptionSchemes.xwing;
+            }
+            else {
+                throw new Error(`Invalid network public key length: expected ${xwing_js_1.XWING_PUBLIC_KEY_SIZE} (X-Wing), got ${pubKeyBytes.length}`);
+            }
+        }
+        return { encryptor: this.encryptor, scheme: this.encryptionScheme };
+    }
+    /**
+     * Get the encryption scheme version used by this Lightning instance.
+     * Returns the X-Wing encryption scheme identifier.
+     * This is a convenience method to get the encryption scheme used by this Lightning instance.
+     */
+    async getEncryptionScheme() {
+        const { scheme } = await this.getEncryptor();
+        return scheme;
+    }
+    /**
+     * Get a Lightning instance bound to the latest Lightning deployment for Base mainnet.
+     *
+     * @param options.hostChainRpcUrls optional list of RPC URLs for the host chain. When multiple URLs are
+     *   provided, viem's fallback transport is used and providers are tried in order on failure.
+     */
+    static async baseMainnet(options) {
+        return Lightning.latest('mainnet', chains_1.base.id, options);
+    }
+    /**
+     * Get a Lightning instance bound to the latest Lightning deployment for the Base Sepolia testnet.
+     *
+     * @param options.hostChainRpcUrls optional list of RPC URLs for the host chain. When multiple URLs are
+     *   provided, viem's fallback transport is used and providers are tried in order on failure.
+     */
+    static async baseSepoliaTestnet(options) {
+        return Lightning.latest('mainnet', chains_1.baseSepolia.id, options);
+    }
+    /**
+     * Get a Lightning instance bound to our canonical Anvil-based test node and test Covalidator node
+     *
+     * These can be run in docker-compose using images pushed to dockerhub as:
+     *   - inconetwork/local-node-anvil
+     *   - inconetwork/local-node-covalidator
+     *
+     * See the sample docker-compose file here: https://github.com/Inco-fhevm/lightning-rod/blob/main/docker-compose.yaml
+     *
+     * @param env either a Pepper such as 'testnet', 'devnet', 'alphanet' or a LocalNodeEnv object containing the
+     * executorAddress, networkPubkey, chainId, covalidatorUrl and senderPrivateKey. If none is provided, it defaults to
+     * the 'testnet' Pepper. This produces allows connection to a local node running against a state dump of the
+     * corresponding Pepper.
+     *
+     */
+    static async localNode(env) {
+        if (!env) {
+            const config = local_node_js_1.localNodeLightningConfig[DefaultPepper];
+            return Lightning.custom({
+                ...config,
+                covalidatorUrls: [...config.covalidatorUrls],
+                signers: config.signers.map((s) => (0, binary_js_1.parseAddress)(s)),
+                hostChainRpcUrls: config.hostChainRpcUrls ?? ['http://localhost:8545'],
+            });
+        }
+        if (typeof env === 'string') {
+            const config = local_node_js_1.localNodeLightningConfig[env];
+            return Lightning.custom({
+                ...config,
+                covalidatorUrls: [...config.covalidatorUrls],
+                signers: config.signers.map((s) => (0, binary_js_1.parseAddress)(s)),
+                hostChainRpcUrls: config.hostChainRpcUrls ?? ['http://localhost:8545'],
+            });
+        }
+        const conf = local_node_js_1.localNodeLightningConfig[DefaultPepper];
+        return Lightning.custom({
+            // We assume that we always run a local node as the default anvil node
+            chainId: env.COVALIDATOR_HOST_CHAIN_ID
+                ? Number(env.COVALIDATOR_HOST_CHAIN_ID)
+                : conf.chainId,
+            covalidatorUrls: env.COVALIDATOR_URL
+                ? env.COVALIDATOR_URL.split(',')
+                : [...conf.covalidatorUrls],
+            signers: env.EIP712_SIGNER_ADDRESS
+                ? env.EIP712_SIGNER_ADDRESS.split(',').map((address) => (0, binary_js_1.parseAddress)(address))
+                : conf.signers.map((s) => (0, binary_js_1.parseAddress)(s)),
+            hostChainRpcUrls: env.COVALIDATOR_HOST_CHAIN_RPC_URL
+                ? env.COVALIDATOR_HOST_CHAIN_RPC_URL.split(',')
+                : (conf.hostChainRpcUrls ?? ['http://localhost:8545']),
+            // These variables vary per environment
+            executorAddress: env.EXECUTOR_ADDRESS,
+            senderPrivateKey: env.SENDER_PRIVATE_KEY,
+        });
+    }
+    /**
+     * Get a Lightning instance bound to a local node from a file containing a LocalNodeEnv environment .
+     *
+     * @param filePath the path to the file containing the environment variables in dotenv format
+     */
+    static async localNodeFromEnv(source) {
+        let envContent;
+        if (isLocalNodeEnvFileSource(source)) {
+            if (typeof process === 'undefined' || !process.versions?.node) {
+                throw new Error('Lightning.localNodeFromEnv with a file path is only available in Node environments.');
+            }
+            const { readFile } = await Promise.resolve().then(() => require('fs/promises'));
+            envContent = await readFile(source.filePath);
+        }
+        else {
+            envContent = source;
+        }
+        const env = (0, index_js_2.parseLocalEnv)(envContent);
+        return await Lightning.localNode(env);
+    }
+    /**
+     * Get a Lightning deployment by name or executor address on a particular chain.
+     *
+     * @param id this is an object containing either the pair of name and chainId or the executorAddress and chainId
+     * @param options.hostChainRpcUrls optional list of RPC URLs for the host chain. When multiple URLs are
+     *   provided, viem's fallback transport is used and providers are tried in order on failure.
+     */
+    static async at(id, options) {
+        const deployment = this.isIdByName(id)
+            ? lightning_js_2.lightningDeployments.find((d) => d.name === id.name && d.chainId === id.chainId)
+            : lightning_js_2.lightningDeployments.find((d) => d.executorAddress === id.executorAddress &&
+                d.chainId === id.chainId);
+        if (!deployment) {
+            throw new Error(`No deployment found for ${JSON.stringify(id)}`);
+        }
+        const chain = (0, index_js_1.getViemChain)({ id: deployment.chainId });
+        const client = (0, viem_1.createPublicClient)({
+            chain,
+            transport: buildTransport(options?.hostChainRpcUrls),
+        });
+        const { threshold, signers, networkPubkey } = await Lightning.getChainConfig(deployment, client);
+        return new Lightning(deployment, Lightning.getCovalidatorUrls(deployment, signers), signers, threshold, networkPubkey, client);
+    }
+    /**
+     * Get a Lightning deployment for a local or custom node
+     *
+     * @param config this is an object containing the executorAddress, networkPubkey, chainId and covalidatorUrl.
+     *    additional fields past will be made available as part of the `deployment` property.
+     */
+    static async custom(config) {
+        const chain = (0, index_js_1.getViemChain)({ id: config.chainId });
+        const client = (0, viem_1.createPublicClient)({
+            chain,
+            transport: buildTransport(config.hostChainRpcUrls),
+        });
+        const { threshold, signers, networkPubkey } = await Lightning.getVerifierContractDetails(config.executorAddress, client);
+        return new Lightning(config, config.covalidatorUrls, signers, threshold, networkPubkey, client);
+    }
+    /**
+     * Get the latest deployment for a given pepper, which usually denotes a family of deployments distinct from their
+     * version such as 'devnet', 'testnet', 'mainnet', etc.
+     *
+     * @param pepper the pepper to use to filter the deployments
+     * @param chainId the chainId to use to filter the deployments
+     */
+    static latestDeployment(pepper, chainId) {
+        // Deployments are sorted so we are guaranteed to get the latest first
+        const latestByPepper = lightning_js_2.lightningDeployments.find((d) => d.pepper === pepper && d.chainId === chainId);
+        if (!latestByPepper) {
+            // This should not actually happen provided this file compiles since we are extracting the available peppers
+            // from the const itself
+            throw new Error(`No deployment found for pepper ${pepper}`);
+        }
+        return latestByPepper;
+    }
+    /**
+     * Get the latest Lightning deployment for a given pepper amd chainId unconditionally.
+     * Note that if you upgrade the library the latest deployment may change and contracts deployed to a previous version
+     * will not be compatible with the new version.
+     *
+     * @param pepper the pepper to use to filter the deployments
+     * @param chainId the chainId to use to filter the deployments
+     * @param options.hostChainRpcUrls optional list of RPC URLs for the host chain. When multiple URLs are
+     *   provided, viem's fallback transport is used and providers are tried in order on failure.
+     */
+    static async latest(pepper, chainId, options) {
+        return Lightning.at(Lightning.latestDeployment(pepper, chainId), options);
+    }
+    /** Returns a shallow copy of the deployment configuration this Lightning instance is bound to. */
+    get deployment() {
+        return { ...this._deployment };
+    }
+    /**
+     * Encrypt a value using the network's public key (X-Wing).
+     * The encryption scheme is automatically detected based on the public key length.
+     *
+     * @param value a boolean or numeric value to encrypt
+     * @param accountAddress the address of the account interacting with the dapp contract, normally an Externally Owned Account (EOA)
+     * @param dappAddress the address of the dapp contract that interacts with the Inco Lightning contract or library
+     * @param handleType (optional) the handle type to be used for encrypting the value - this is required in case of non-default handle types
+     *                    default handle types:
+     *                      - boolean -> handleTypes.ebool
+     *                      - number | bigint -> handleTypes.euint256
+     * @returns a promise that resolves to the encrypted value as a HexString
+     */
+    async encrypt(value, { accountAddress, dappAddress, handleType }) {
+        const { encryptor, scheme } = await this.getEncryptor();
+        const plaintext = Lightning.plaintextFromValue(value, handleType, scheme);
+        const { ciphertext } = await encryptor({
+            plaintext,
+            context: {
+                hostChainId: this.chainId,
+                aclAddress: this.executorAddress,
+                userAddress: (0, binary_js_1.parseAddress)(accountAddress),
+                contractAddress: (0, binary_js_1.parseAddress)(dappAddress),
+                version: scheme,
+                inputType: plaintext.type,
+            },
+        });
+        return ciphertext.value;
+    }
+    /**
+     * Grants a session key allowance voucher for secure reencryption operations.
+     *
+     * This method creates a signed allowance voucher that authorizes a specific requester address
+     * to perform reencryption operations using session keys. The voucher includes an expiration time
+     * and can optionally specify a custom session verifier contract address.
+     *
+     * @param walletClient - The wallet client used for signing the allowance voucher
+     * @param granteeAddress - The address of the entity requesting the session key allowance
+     * @param expiresAt - The timestamp when the allowance voucher expires (as a bigint)
+     * @param sessionVerifierAddress - Optional custom session verifier contract address. If not provided, uses the executor address
+     * @returns A promise that resolves to an AllowanceVoucherWithSig containing the signed allowance voucher
+     *
+     * @example
+     * ```typescript
+     * const voucher = await lightning.grantSessionKeyAllowanceVoucher(
+     *   walletClient,
+     *   "0x1234...",
+     *   BigInt(Date.now() + 3600000), // 1 hour from now
+     *   "0x5678..." // optional custom verifier
+     * );
+     * ```
+     */
+    grantSessionKeyAllowanceVoucher(walletClient, granteeAddress, expiresAt, sessionVerifierAddress) {
+        return (0, session_key_js_1.grantSessionKey)({
+            chainId: this.chainId,
+            incoLiteAddress: this.executorAddress,
+            sessionVerifierContractAddress: (0, binary_js_1.parseAddress)(sessionVerifierAddress),
+            granteeAddress: (0, binary_js_1.parseAddress)(granteeAddress),
+            sharerWalletClient: walletClient,
+            expiresAt,
+        });
+    }
+    /**
+     * Grants a session key allowance voucher using a custom session verifier contract.
+     *
+     * This method creates a signed allowance voucher that authorizes reencryption operations
+     * using a custom session verifier. Unlike `grantSessionKeyAllowanceVoucher`, this method
+     * allows specifying custom `sharerArgData` for use with custom verifier contracts that
+     * require additional authorization parameters.
+     *
+     * @param walletClient - The wallet client used for signing the allowance voucher
+     * @param sessionVerifierAddress - The address of the custom session verifier contract
+     * @param sharerArgData - Custom encoded arguments for the session verifier's `canUseSession` function
+     * @returns A promise that resolves to an AllowanceVoucherWithSig containing the signed allowance voucher
+     *
+     * @example
+     * ```typescript
+     * const sharerArgData = encodeAbiParameters(
+     *   [{ type: 'address' }, { type: 'uint256' }],
+     *   [granteeAddress, expiresAt]
+     * );
+     * const voucher = await lightning.grantCustomSessionKeyAllowanceVoucher(
+     *   walletClient,
+     *   "0x5678...", // custom verifier address
+     *   sharerArgData
+     * );
+     * ```
+     */
+    grantCustomSessionKeyAllowanceVoucher(walletClient, sessionVerifierAddress, sharerArgData) {
+        return (0, session_key_js_1.grantSessionKeyCustomVerifier)({
+            chainId: this.chainId,
+            incoLiteAddress: this.executorAddress,
+            sessionVerifierContractAddress: (0, binary_js_1.parseAddress)(sessionVerifierAddress),
+            sharerWalletClient: walletClient,
+            sharerArgData: sharerArgData,
+        });
+    }
+    /**
+     * Updates the active session nonce for the given wallet client.
+     *
+     * This method updates the active session nonce for the given wallet client.
+     * It nullifies all the previous shared addresses accessing the voucher.
+     *
+     * @param walletClient - The wallet client used for updating the session nonce
+     * @returns The transaction hash of the updateActiveVouchersSessionNonce transaction
+     */
+    updateActiveVouchersSessionNonce(walletClient) {
+        return (0, session_key_js_1.updateActiveVouchersSessionNonce)(this.executorAddress, walletClient);
+    }
+    async attestedDecrypt(walletClient, handles, opts) {
+        const { reencryptPubKey: inputPubKey, reencryptKeypair: inputKeypair, backoffConfig, } = opts ?? {};
+        const common = {
+            handles,
+            backoffConfig,
+            chainId: Number(this.chainId),
+            walletClient,
+            kmsQuorumClient: this.kmsQuorumClient,
+            executorAddress: this.executorAddress,
+        };
+        if (inputPubKey) {
+            if (inputKeypair) {
+                return (0, attested_decrypt_js_1.attestedDecrypt)({
+                    ...common,
+                    reencryptPubKey: inputPubKey,
+                    reencryptKeypair: inputKeypair,
+                });
+            }
+            return (0, attested_decrypt_js_1.attestedDecrypt)({
+                ...common,
+                reencryptPubKey: inputPubKey,
+            });
+        }
+        const keypair = await (0, xwing_js_1.generateXwingKeypair)();
+        const pubKey = keypair.encodePublicKey();
+        return (0, attested_decrypt_js_1.attestedDecrypt)({
+            ...common,
+            reencryptPubKey: pubKey,
+            reencryptKeypair: keypair,
+        });
+    }
+    async attestedDecryptWithVoucher(ephemeralAccount, allowanceVoucherWithSig, handles, opts) {
+        const { reencryptPubKey: inputPubKey, reencryptKeypair: inputKeypair, requesterArgData, backoffConfig, } = opts ?? {};
+        const common = {
+            backoffConfig,
+            chainId: Number(this.chainId),
+            kmsQuorumClient: this.kmsQuorumClient,
+            ephemeralAccount,
+            allowanceVoucherWithSig,
+            handles,
+            requesterArgData,
+            ethClient: this.publicClient,
+            executorAddress: this.executorAddress,
+        };
+        if (inputPubKey) {
+            if (inputKeypair) {
+                return (0, session_key_js_1.sessionKeyAttestedDecrypt)({
+                    ...common,
+                    reencryptPubKey: inputPubKey,
+                    reencryptKeypair: inputKeypair,
+                });
+            }
+            return (0, session_key_js_1.sessionKeyAttestedDecrypt)({
+                ...common,
+                reencryptPubKey: inputPubKey,
+            });
+        }
+        const keypair = await (0, xwing_js_1.generateXwingKeypair)();
+        const pubKey = keypair.encodePublicKey();
+        return (0, session_key_js_1.sessionKeyAttestedDecrypt)({
+            ...common,
+            reencryptPubKey: pubKey,
+            reencryptKeypair: keypair,
+        });
+    }
+    async eListAttestedDecrypt(walletClient, handle, opts) {
+        const { reencryptPubKey: inputPubKey, reencryptKeypair: inputKeypair, backoffConfig, } = opts ?? {};
+        const common = {
+            handle,
+            backoffConfig,
+            chainId: Number(this.chainId),
+            walletClient,
+            kmsQuorumClient: this.kmsQuorumClient,
+            executorAddress: this.executorAddress,
+        };
+        if (inputPubKey) {
+            if (inputKeypair) {
+                return (0, elist_attested_decrypt_js_1.eListAttestedDecrypt)({
+                    ...common,
+                    reencryptPubKey: inputPubKey,
+                    reencryptKeypair: inputKeypair,
+                });
+            }
+            return (0, elist_attested_decrypt_js_1.eListAttestedDecrypt)({
+                ...common,
+                reencryptPubKey: inputPubKey,
+            });
+        }
+        const keypair = await (0, xwing_js_1.generateXwingKeypair)();
+        const pubKey = keypair.encodePublicKey();
+        return (0, elist_attested_decrypt_js_1.eListAttestedDecrypt)({
+            ...common,
+            reencryptPubKey: pubKey,
+            reencryptKeypair: keypair,
+        });
+    }
+    /**
+     * Reveal a single elist handle without wallet authentication.
+     * Returns plaintext values along with an attestation of the checksum.
+     *
+     * @param handle - The elist handle to reveal
+     * @param opts - Optional backoff configuration
+     * @returns The elist decryption attestation with plaintext values
+     */
+    eListAttestedReveal(handle, opts) {
+        const { backoffConfig } = opts ?? {};
+        return (0, elist_attested_decrypt_js_1.eListAttestedReveal)({
+            handle,
+            backoffConfig,
+            kmsQuorumClient: this.kmsQuorumClient,
+            executorAddress: this.executorAddress,
+            publicClient: this.publicClient,
+        });
+    }
+    async attestedCompute(walletClient, lhsHandle, op, rhsPlaintext, opts) {
+        const { reencryptPubKey: inputPubKey, reencryptKeypair: inputKeypair, backoffConfig, } = opts ?? {};
+        const common = {
+            executorAddress: this.executorAddress,
+            walletClient,
+            kmsQuorumClient: this.kmsQuorumClient,
+            chainId: Number(this.chainId),
+            lhsHandle,
+            op,
+            rhsPlaintext,
+            backoffConfig,
+        };
+        if (inputPubKey) {
+            if (inputKeypair) {
+                return (0, attested_compute_js_1.attestedCompute)({
+                    ...common,
+                    reencryptPubKey: inputPubKey,
+                    reencryptKeypair: inputKeypair,
+                });
+            }
+            return (0, attested_compute_js_1.attestedCompute)({
+                ...common,
+                reencryptPubKey: inputPubKey,
+            });
+        }
+        const keypair = await (0, xwing_js_1.generateXwingKeypair)();
+        const pubKey = keypair.encodePublicKey();
+        return (0, attested_compute_js_1.attestedCompute)({
+            ...common,
+            reencryptPubKey: pubKey,
+            reencryptKeypair: keypair,
+        });
+    }
+    async attestedComputeWithVoucher(ephemeralAccount, allowanceVoucherWithSig, lhsHandle, op, rhsPlaintext, opts) {
+        const { reencryptPubKey: inputPubKey, reencryptKeypair: inputKeypair, requesterArgData, backoffConfig, } = opts ?? {};
+        const common = {
+            chainId: Number(this.chainId),
+            kmsQuorumClient: this.kmsQuorumClient,
+            ephemeralAccount,
+            allowanceVoucherWithSig,
+            lhsHandle,
+            op,
+            rhsPlaintext,
+            requesterArgData,
+            ethClient: this.publicClient,
+            executorAddress: this.executorAddress,
+            backoffConfig,
+        };
+        if (inputPubKey) {
+            if (inputKeypair) {
+                return (0, session_key_js_1.sessionKeyAttestedCompute)({
+                    ...common,
+                    reencryptPubKey: inputPubKey,
+                    reencryptKeypair: inputKeypair,
+                });
+            }
+            return (0, session_key_js_1.sessionKeyAttestedCompute)({
+                ...common,
+                reencryptPubKey: inputPubKey,
+            });
+        }
+        const keypair = await (0, xwing_js_1.generateXwingKeypair)();
+        const pubKey = keypair.encodePublicKey();
+        return (0, session_key_js_1.sessionKeyAttestedCompute)({
+            ...common,
+            reencryptPubKey: pubKey,
+            reencryptKeypair: keypair,
+        });
+    }
+    /**
+     * Get an decryption of publicly revealed handles.
+     *
+     * @param handles - The handles to decrypt
+     * @param backoffConfig - The backoff configuration for the attested decrypt request
+     * @returns The decryption attestations
+     *
+     * @example
+     * ```typescript
+     * const response = await lightning.attestedReveal([handle1, handle2]);
+     * const { plaintext, covalidatorSignature } = response[0];
+     * ```
+     */
+    attestedReveal(handles, opts) {
+        const { backoffConfig } = opts ?? {};
+        return (0, attested_reveal_js_1.attestedReveal)({
+            executorAddress: this.executorAddress,
+            handles,
+            backoffConfig,
+            kmsQuorumClient: this.kmsQuorumClient,
+            publicClient: this.publicClient,
+        });
+    }
+    /**
+     * Get the GRPC endpoint for the covalidator that services this deployment.
+     */
+    static getCovalidatorUrls(deployment, signers) {
+        const { chainId, pepper, majorVersion } = deployment;
+        const chainShortName = chain_js_1.chainShortNames[chainId];
+        if (!chainShortName) {
+            throw new Error(`Unsupported chainId ${chainId} for covalidator URL generation`);
+        }
+        return signers.map((signer) => {
+            return `https://${signer.toLowerCase()}.${majorVersion}.covalidator.${chainShortName}.${pepper}.inco.org`;
+        });
+    }
+    static isIdByName(id) {
+        return id.name !== undefined;
+    }
+    static plaintextFromValue(value, type, scheme) {
+        if (typeof value === 'boolean') {
+            return {
+                scheme,
+                type: handle_js_1.handleTypes.ebool,
+                value: value,
+            };
+        }
+        else if (typeof value === 'bigint' || typeof value === 'number') {
+            return {
+                scheme,
+                type: type ?? handle_js_1.handleTypes.euint256,
+                value: BigInt(value),
+            };
+        }
+        else {
+            throw new Error(`Unsupported type ${typeof value}`);
+        }
+    }
+    /**
+     * Reads the network public key from the on-chain Inco Verifier contract.
+     *
+     * Falls back to the legacy `eciesPubkey()` getter for older contract versions.
+     *
+     * @param client - A viem public client connected to the host chain.
+     * @param executorAddress - The address of the Inco Lightning executor contract.
+     * @returns The network public key as a hex string.
+     */
+    static async getNetworkPubkey(client, executorAddress) {
+        const incoVerifier = await Lightning.getIncoVerifierContract(client, executorAddress);
+        // TODO: Switch to use a version check instead of a try/catch
+        // See https://github.com/Inco-fhevm/inco-monorepo/blob/e17d940a6720d94c53e6b0bf12704b6097116821/js/src/lite/lightning.ts#L1164
+        // for now it's done.
+        try {
+            return await incoVerifier.read.networkPubkey();
+        }
+        catch (error) {
+            throw new Error('Network public key not found most probably you are using an old deployment or a wrong pepper', { cause: error });
+        }
+    }
+    /**
+     * Resolves the Inco Verifier contract instance associated with a Lightning executor.
+     *
+     * Reads the `incoVerifier` address from the executor contract and returns a typed contract handle.
+     *
+     * @param client - A viem public client connected to the host chain.
+     * @param executorAddress - The address of the Inco Lightning executor contract.
+     * @returns A viem contract instance bound to the Inco Verifier ABI.
+     */
+    static async getIncoVerifierContract(client, executorAddress) {
+        const incoLightningContract = (0, viem_1.getContract)({
+            abi: lightning_js_1.incoLightningAbi,
+            address: executorAddress,
+            client,
+        });
+        const incoVerifierAddress = await incoLightningContract.read.incoVerifier();
+        const incoVerifier = (0, viem_1.getContract)({
+            abi: verifier_js_1.incoVerifierAbi,
+            address: incoVerifierAddress,
+            client,
+        });
+        return incoVerifier;
+    }
+    /**
+     * Retrieves the verifier contract details including threshold, signers, and XWING public key from the Inco Verifier contract.
+     *
+     * @param executorAddress The address of the Inco Lightning executor contract.
+     * @param client The public client to interact with the blockchain.
+     * @returns An object containing the threshold, signers, and XWING public key.
+     */
+    static async getVerifierContractDetails(executorAddress, client) {
+        const incoVerifier = await Lightning.getIncoVerifierContract(client, executorAddress);
+        const threshold = await incoVerifier.read.getThreshold();
+        const networkPubkey = await Lightning.getNetworkPubkey(client, executorAddress);
+        const signersCount = await incoVerifier.read.getSignersCount();
+        const signersPromises = [];
+        for (let i = BigInt(0); i < signersCount; i++) {
+            signersPromises.push(incoVerifier.read.getSignerAtIndex([i]));
+        }
+        const signers = await Promise.all(signersPromises);
+        return {
+            threshold: Number(threshold),
+            signers: signers.map(binary_js_1.parseAddress),
+            networkPubkey,
+        };
+    }
+    static async getChainConfig(deployment, client) {
+        if (this.supportsThresholdRetrieval(deployment)) {
+            return await this.getVerifierContractDetails(deployment.executorAddress, client);
+        }
+        throw new Error('Threshold retrieval not supported for this deployment');
+    }
+    // Check if the deployment supports threshold retrieval based on its version
+    static supportsThresholdRetrieval(deployment) {
+        // Assumes that the threshold retrieval is supported if the smart contract / deployment version is greater than or equal to 1.1.0
+        if (!deployment.version)
+            throw new Error('Deployment version is undefined');
+        const { major, minor } = deployment.version;
+        return major > 1 || (major === 1 && minor >= 1);
+    }
+}
+exports.Lightning = Lightning;
+//# sourceMappingURL=data:application/json;base64,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