@inco/lightning-js 0.0.0-bootstrap.0

package/dist/types/generated/es/inco/kms/lite/v1/types_pb.d.ts

@@ -0,0 +1,289 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file inco/kms/lite/v1/types.proto.
+ */
+export declare const file_inco_kms_lite_v1_types: GenFile;
+/**
+ * ACLProof is the proof a given user (outside of the scope of this proto
+ * message) has ACL permission on a given handle (also outside of the scope of
+ * this proto message).
+ *
+ * @generated from message inco.kms.lite.v1.ACLProof
+ */
+export type ACLProof = Message<"inco.kms.lite.v1.ACLProof"> & {
+    /**
+     * @generated from oneof inco.kms.lite.v1.ACLProof.proof
+     */
+    proof: {
+        /**
+         * inco_lite_basic_acl_proof is used when the ACL proof is performed by
+         * the light client inside the TEE calling the `isAllowed` function on
+         * the BaseAccessControlList.sol contract.
+         *
+         * @generated from field: inco.kms.lite.v1.IncoLiteBasicACLProof inco_lite_basic_acl_proof = 10;
+         */
+        value: IncoLiteBasicACLProof;
+        case: "incoLiteBasicAclProof";
+    } | {
+        /**
+         * inco_lite_advanced_acl_proof is used when the ACL proof is performed
+         * by the light client inside the TEE calling the `isAllowed` function
+         * on the AdvancedAccessControl.sol contract.
+         *
+         * @generated from field: inco.kms.lite.v1.IncoLiteAdvancedACLProof inco_lite_advanced_acl_proof = 11;
+         */
+        value: IncoLiteAdvancedACLProof;
+        case: "incoLiteAdvancedAclProof";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message inco.kms.lite.v1.ACLProof.
+ * Use `create(ACLProofSchema)` to create a new message.
+ */
+export declare const ACLProofSchema: GenMessage<ACLProof>;
+/**
+ * HandleWithProof contains a handle and the ACL proof that the user has access
+ * to the handle.
+ *
+ * @generated from message inco.kms.lite.v1.HandleWithProof
+ */
+export type HandleWithProof = Message<"inco.kms.lite.v1.HandleWithProof"> & {
+    /**
+     * handle is the handle of the ciphertext to get, encoded as a non-prefixed
+     * hex string.
+     *
+     * @generated from field: string handle = 1;
+     */
+    handle: string;
+    /**
+     * acl_proof is the proof that the user has access to the handle.
+     *
+     * @generated from field: inco.kms.lite.v1.ACLProof acl_proof = 2;
+     */
+    aclProof?: ACLProof | undefined;
+};
+/**
+ * Describes the message inco.kms.lite.v1.HandleWithProof.
+ * Use `create(HandleWithProofSchema)` to create a new message.
+ */
+export declare const HandleWithProofSchema: GenMessage<HandleWithProof>;
+/**
+ * IncoLiteBasicACLProof is the proof of the ACL for the compute ciphertext
+ * when the ACL proof is performed by the light client inside the TEE calling
+ * the `isAllowed` function on the BaseAccessControlList.sol contract.
+ *
+ * @generated from message inco.kms.lite.v1.IncoLiteBasicACLProof
+ */
+export type IncoLiteBasicACLProof = Message<"inco.kms.lite.v1.IncoLiteBasicACLProof"> & {};
+/**
+ * Describes the message inco.kms.lite.v1.IncoLiteBasicACLProof.
+ * Use `create(IncoLiteBasicACLProofSchema)` to create a new message.
+ */
+export declare const IncoLiteBasicACLProofSchema: GenMessage<IncoLiteBasicACLProof>;
+/**
+ * AllowanceVoucher can be for arbitrary handles to arbitrary accounts
+ * signed by the account sharing its read access. See AdvancedAccessControl.sol
+ * for more details.
+ *
+ * @generated from message inco.kms.lite.v1.AllowanceVoucher
+ */
+export type AllowanceVoucher = Message<"inco.kms.lite.v1.AllowanceVoucher"> & {
+    /**
+     * verifying_contract is the contract address to call to verify the allowance.
+     *
+     * @generated from field: string verifying_contract = 1;
+     */
+    verifyingContract: string;
+    /**
+     * call_function is the function selector on the verifying contract to call
+     * to verify the allowance.
+     *
+     * @generated from field: bytes call_function = 2;
+     */
+    callFunction: Uint8Array;
+    /**
+     * sharer_arg_data is the ABI-encoded data to pass to the function above as the
+     * sharer argument.
+     *
+     * @generated from field: bytes sharer_arg_data = 3;
+     */
+    sharerArgData: Uint8Array;
+    /**
+     * session_nonce is the session nonce of the allowance voucher. It is encoded
+     * as a 32-byte array on the Solidity side.
+     *
+     * @generated from field: bytes session_nonce = 4;
+     */
+    sessionNonce: Uint8Array;
+    /**
+     * warning is the human-readable warning message displayed to users at signing
+     * time, included in the EIP-712 struct so wallets render it prominently.
+     *
+     * @generated from field: string warning = 5;
+     */
+    warning: string;
+};
+/**
+ * Describes the message inco.kms.lite.v1.AllowanceVoucher.
+ * Use `create(AllowanceVoucherSchema)` to create a new message.
+ */
+export declare const AllowanceVoucherSchema: GenMessage<AllowanceVoucher>;
+/**
+ * AllowanceProof is the proof of the allowance voucher. See AdvancedAccessControl.sol
+ * for more details.
+ *
+ * @generated from message inco.kms.lite.v1.AllowanceProof
+ */
+export type AllowanceProof = Message<"inco.kms.lite.v1.AllowanceProof"> & {
+    /**
+     * sharer is the address of the account that is sharing its read access.
+     * This account must have persisted permission on the handle.
+     * TODO scalar type.
+     *
+     * @generated from field: string sharer = 1;
+     */
+    sharer: string;
+    /**
+     * voucher is the voucher of the allowance.
+     *
+     * @generated from field: inco.kms.lite.v1.AllowanceVoucher voucher = 2;
+     */
+    voucher?: AllowanceVoucher | undefined;
+    /**
+     * voucher_signature is the signature of the voucher by the sharer of the
+     * allowance voucher digest. See AdvancedAccessControl.sol#allowanceVoucherDigest
+     * for how the digest is computed.
+     *
+     * @generated from field: bytes voucher_signature = 3;
+     */
+    voucherSignature: Uint8Array;
+    /**
+     * requester_arg_data is the ABI-encoded data to pass to the function above as the
+     * requester argument.
+     *
+     * @generated from field: bytes requester_arg_data = 4;
+     */
+    requesterArgData: Uint8Array;
+};
+/**
+ * Describes the message inco.kms.lite.v1.AllowanceProof.
+ * Use `create(AllowanceProofSchema)` to create a new message.
+ */
+export declare const AllowanceProofSchema: GenMessage<AllowanceProof>;
+/**
+ * IncoLiteAdvancedACLProof is the proof of the ACL for the compute ciphertext
+ * when the ACL proof is performed by the light client inside the TEE calling
+ * the `isAllowed` function on the AdvancedAccessControl.sol contract.
+ *
+ * @generated from message inco.kms.lite.v1.IncoLiteAdvancedACLProof
+ */
+export type IncoLiteAdvancedACLProof = Message<"inco.kms.lite.v1.IncoLiteAdvancedACLProof"> & {
+    /**
+     * allowance_proof is the proof of the allowance voucher.
+     *
+     * @generated from field: inco.kms.lite.v1.AllowanceProof allowance_proof = 1;
+     */
+    allowanceProof?: AllowanceProof | undefined;
+};
+/**
+ * Describes the message inco.kms.lite.v1.IncoLiteAdvancedACLProof.
+ * Use `create(IncoLiteAdvancedACLProofSchema)` to create a new message.
+ */
+export declare const IncoLiteAdvancedACLProofSchema: GenMessage<IncoLiteAdvancedACLProof>;
+/**
+ * SupportedScalarBinaryOp enumerates the binary operations supported in attested compute.
+ * It's distinct from inco.covalidator.compute.v1.TeeOperation since only a subset of
+ * operations are supported.
+ *
+ * @generated from enum inco.kms.lite.v1.SupportedScalarBinaryOp
+ */
+export declare enum SupportedScalarBinaryOp {
+    /**
+     * @generated from enum value: TEE_ADD = 0;
+     */
+    TEE_ADD = 0,
+    /**
+     * @generated from enum value: TEE_SUB = 1;
+     */
+    TEE_SUB = 1,
+    /**
+     * @generated from enum value: TEE_MUL = 2;
+     */
+    TEE_MUL = 2,
+    /**
+     * @generated from enum value: TEE_DIV = 3;
+     */
+    TEE_DIV = 3,
+    /**
+     * @generated from enum value: TEE_REM = 4;
+     */
+    TEE_REM = 4,
+    /**
+     * @generated from enum value: TEE_BIT_AND = 5;
+     */
+    TEE_BIT_AND = 5,
+    /**
+     * @generated from enum value: TEE_BIT_OR = 6;
+     */
+    TEE_BIT_OR = 6,
+    /**
+     * @generated from enum value: TEE_BIT_XOR = 7;
+     */
+    TEE_BIT_XOR = 7,
+    /**
+     * @generated from enum value: TEE_SHL = 8;
+     */
+    TEE_SHL = 8,
+    /**
+     * @generated from enum value: TEE_SHR = 9;
+     */
+    TEE_SHR = 9,
+    /**
+     * @generated from enum value: TEE_ROTL = 10;
+     */
+    TEE_ROTL = 10,
+    /**
+     * @generated from enum value: TEE_ROTR = 11;
+     */
+    TEE_ROTR = 11,
+    /**
+     * @generated from enum value: TEE_EQ = 12;
+     */
+    TEE_EQ = 12,
+    /**
+     * @generated from enum value: TEE_NE = 13;
+     */
+    TEE_NE = 13,
+    /**
+     * @generated from enum value: TEE_GE = 14;
+     */
+    TEE_GE = 14,
+    /**
+     * @generated from enum value: TEE_GT = 15;
+     */
+    TEE_GT = 15,
+    /**
+     * @generated from enum value: TEE_LE = 16;
+     */
+    TEE_LE = 16,
+    /**
+     * @generated from enum value: TEE_LT = 17;
+     */
+    TEE_LT = 17,
+    /**
+     * @generated from enum value: TEE_MIN = 18;
+     */
+    TEE_MIN = 18,
+    /**
+     * @generated from enum value: TEE_MAX = 19;
+     */
+    TEE_MAX = 19
+}
+/**
+ * Describes the enum inco.kms.lite.v1.SupportedScalarBinaryOp.
+ */
+export declare const SupportedScalarBinaryOpSchema: GenEnum<SupportedScalarBinaryOp>;

package/dist/types/generated/es/inco/sealingfetcher/v1/sealingfetcher_pb.d.ts

@@ -0,0 +1,371 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file inco/sealingfetcher/v1/sealingfetcher.proto.
+ */
+export declare const file_inco_sealingfetcher_v1_sealingfetcher: GenFile;
+/**
+ * StartBackupRequest is the request type of StartBackup rpc.
+ * This request backs up all TEE keys (EOA, Network, and Storage keys).
+ *
+ * @generated from message inco.sealingfetcher.v1.StartBackupRequest
+ */
+export type StartBackupRequest = Message<"inco.sealingfetcher.v1.StartBackupRequest"> & {
+    /**
+     * The Sealing Provider to backup the TEE keys to.
+     *
+     * @generated from field: inco.sealingfetcher.v1.RATlsServer sealing_provider = 1;
+     */
+    sealingProvider?: RATlsServer | undefined;
+    /**
+     * The TEE keys to backup. All three keys (EOA, Network, and Storage) should be provided.
+     *
+     * @generated from field: inco.sealingfetcher.v1.TeeKeys tee_keys = 2;
+     */
+    teeKeys?: TeeKeys | undefined;
+};
+/**
+ * Describes the message inco.sealingfetcher.v1.StartBackupRequest.
+ * Use `create(StartBackupRequestSchema)` to create a new message.
+ */
+export declare const StartBackupRequestSchema: GenMessage<StartBackupRequest>;
+/**
+ * RATlsServer is the information on how to connect to the RA-TLS secured server.
+ *
+ * @generated from message inco.sealingfetcher.v1.RATlsServer
+ */
+export type RATlsServer = Message<"inco.sealingfetcher.v1.RATlsServer"> & {
+    /**
+     * tls_service_url is the URL of the TLS server that is a secured using RA-TLS.
+     *
+     * @generated from field: string tls_service_url = 1;
+     */
+    tlsServiceUrl: string;
+    /**
+     * cert_service_url is the URL of the certificate service to get the certificate for the RA-TLS gRPC server.
+     * It is not necessarily a secure channel.
+     *
+     * @generated from field: string cert_service_url = 2;
+     */
+    certServiceUrl: string;
+};
+/**
+ * Describes the message inco.sealingfetcher.v1.RATlsServer.
+ * Use `create(RATlsServerSchema)` to create a new message.
+ */
+export declare const RATlsServerSchema: GenMessage<RATlsServer>;
+/**
+ * StartBackupEOARequest is the request type of StartBackupEOA rpc.
+ * This request backs up only the EOA private key.
+ *
+ * @generated from message inco.sealingfetcher.v1.StartBackupEOARequest
+ */
+export type StartBackupEOARequest = Message<"inco.sealingfetcher.v1.StartBackupEOARequest"> & {
+    /**
+     * The Sealing Provider to backup the EOA key to.
+     *
+     * @generated from field: inco.sealingfetcher.v1.RATlsServer sealing_provider = 1;
+     */
+    sealingProvider?: RATlsServer | undefined;
+    /**
+     * The EOA private key to backup.
+     * The private key is encoded as an unsigned 256-bit big-endian integer in
+     * the range [0, N-1], where N is the order of the curve.
+     *
+     * @generated from field: bytes eoa_privkey = 2;
+     */
+    eoaPrivkey: Uint8Array;
+};
+/**
+ * Describes the message inco.sealingfetcher.v1.StartBackupEOARequest.
+ * Use `create(StartBackupEOARequestSchema)` to create a new message.
+ */
+export declare const StartBackupEOARequestSchema: GenMessage<StartBackupEOARequest>;
+/**
+ * StartBackupEOAResponse is the response type of StartBackupEOA rpc.
+ *
+ * @generated from message inco.sealingfetcher.v1.StartBackupEOAResponse
+ */
+export type StartBackupEOAResponse = Message<"inco.sealingfetcher.v1.StartBackupEOAResponse"> & {};
+/**
+ * Describes the message inco.sealingfetcher.v1.StartBackupEOAResponse.
+ * Use `create(StartBackupEOAResponseSchema)` to create a new message.
+ */
+export declare const StartBackupEOAResponseSchema: GenMessage<StartBackupEOAResponse>;
+/**
+ * TeeKeys is a struct containing all the TEE keys, unsealed.
+ *
+ * @generated from message inco.sealingfetcher.v1.TeeKeys
+ */
+export type TeeKeys = Message<"inco.sealingfetcher.v1.TeeKeys"> & {
+    /**
+     * The EOA private key belonging to that TEE
+     * The private key is encoded as an unsigned 256-bit big-endian integer in
+     * the range [0, N-1], where N is the order of the curve.
+     *
+     * @generated from field: bytes eoa_privkey = 1;
+     */
+    eoaPrivkey: Uint8Array;
+    /**
+     * The Network private key (X-Wing) that the TEE generated during the bootstrap process.
+     * This is a 32-byte seed used to derive the X-Wing keypair for input encryption.
+     * X-Wing is a post-quantum hybrid KEM combining ML-KEM-768 and X25519.
+     *
+     * @generated from field: bytes network_privkey = 2;
+     */
+    networkPrivkey: Uint8Array;
+    /**
+     * The storage private key belonging to that TEE
+     * This is simply a 32-byte array, that can be used as-is as a 256-bit
+     * ChaCha20-Poly1305 secret key.
+     *
+     * @generated from field: bytes storage_privkey = 3;
+     */
+    storagePrivkey: Uint8Array;
+    /**
+     * The 32-byte seed used for Lightning's RNG. Generated at bootstrap and
+     * distinct from the network private key.
+     *
+     * @generated from field: bytes rand_seed = 4;
+     */
+    randSeed: Uint8Array;
+};
+/**
+ * Describes the message inco.sealingfetcher.v1.TeeKeys.
+ * Use `create(TeeKeysSchema)` to create a new message.
+ */
+export declare const TeeKeysSchema: GenMessage<TeeKeys>;
+/**
+ * StartBackupResponse is the response type of StartBackup rpc.
+ *
+ * @generated from message inco.sealingfetcher.v1.StartBackupResponse
+ */
+export type StartBackupResponse = Message<"inco.sealingfetcher.v1.StartBackupResponse"> & {};
+/**
+ * Describes the message inco.sealingfetcher.v1.StartBackupResponse.
+ * Use `create(StartBackupResponseSchema)` to create a new message.
+ */
+export declare const StartBackupResponseSchema: GenMessage<StartBackupResponse>;
+/**
+ * HasTEEKeysRequest is the request type of HasTEEKeys rpc.
+ *
+ * @generated from message inco.sealingfetcher.v1.HasTEEKeysRequest
+ */
+export type HasTEEKeysRequest = Message<"inco.sealingfetcher.v1.HasTEEKeysRequest"> & {};
+/**
+ * Describes the message inco.sealingfetcher.v1.HasTEEKeysRequest.
+ * Use `create(HasTEEKeysRequestSchema)` to create a new message.
+ */
+export declare const HasTEEKeysRequestSchema: GenMessage<HasTEEKeysRequest>;
+/**
+ * HasTEEKeysResponse is the response type of HasTEEKeys rpc.
+ *
+ * @generated from message inco.sealingfetcher.v1.HasTEEKeysResponse
+ */
+export type HasTEEKeysResponse = Message<"inco.sealingfetcher.v1.HasTEEKeysResponse"> & {
+    /**
+     * True if the TEE keys are present in the sealing fetcher's memory.
+     *
+     * @generated from field: bool has_tee_keys = 1;
+     */
+    hasTeeKeys: boolean;
+};
+/**
+ * Describes the message inco.sealingfetcher.v1.HasTEEKeysResponse.
+ * Use `create(HasTEEKeysResponseSchema)` to create a new message.
+ */
+export declare const HasTEEKeysResponseSchema: GenMessage<HasTEEKeysResponse>;
+/**
+ * GetTEEKeysRequest is the request type of GetTEEKeys rpc.
+ *
+ * @generated from message inco.sealingfetcher.v1.GetTEEKeysRequest
+ */
+export type GetTEEKeysRequest = Message<"inco.sealingfetcher.v1.GetTEEKeysRequest"> & {};
+/**
+ * Describes the message inco.sealingfetcher.v1.GetTEEKeysRequest.
+ * Use `create(GetTEEKeysRequestSchema)` to create a new message.
+ */
+export declare const GetTEEKeysRequestSchema: GenMessage<GetTEEKeysRequest>;
+/**
+ * GetTEEKeysResponse is the response type of GetTEEKeys rpc.
+ *
+ * @generated from message inco.sealingfetcher.v1.GetTEEKeysResponse
+ */
+export type GetTEEKeysResponse = Message<"inco.sealingfetcher.v1.GetTEEKeysResponse"> & {
+    /**
+     * The TEE keys.
+     *
+     * @generated from field: inco.sealingfetcher.v1.TeeKeys tee_keys = 1;
+     */
+    teeKeys?: TeeKeys | undefined;
+};
+/**
+ * Describes the message inco.sealingfetcher.v1.GetTEEKeysResponse.
+ * Use `create(GetTEEKeysResponseSchema)` to create a new message.
+ */
+export declare const GetTEEKeysResponseSchema: GenMessage<GetTEEKeysResponse>;
+/**
+ * RecoverTEEKeysRequest is the request type of RecoverTEEKeys rpc.
+ *
+ * @generated from message inco.sealingfetcher.v1.RecoverTEEKeysRequest
+ */
+export type RecoverTEEKeysRequest = Message<"inco.sealingfetcher.v1.RecoverTEEKeysRequest"> & {
+    /**
+     * The Sealing Providers to recover the TEE keys from.
+     * The sealing fetcher will try each provider in order until one succeeds.
+     *
+     * @generated from field: repeated inco.sealingfetcher.v1.RATlsServer sealing_providers = 1;
+     */
+    sealingProviders: RATlsServer[];
+};
+/**
+ * Describes the message inco.sealingfetcher.v1.RecoverTEEKeysRequest.
+ * Use `create(RecoverTEEKeysRequestSchema)` to create a new message.
+ */
+export declare const RecoverTEEKeysRequestSchema: GenMessage<RecoverTEEKeysRequest>;
+/**
+ * RecoverTEEKeysResponse is the response type of RecoverTEEKeys rpc.
+ *
+ * @generated from message inco.sealingfetcher.v1.RecoverTEEKeysResponse
+ */
+export type RecoverTEEKeysResponse = Message<"inco.sealingfetcher.v1.RecoverTEEKeysResponse"> & {
+    /**
+     * The TEE keys.
+     *
+     * @generated from field: inco.sealingfetcher.v1.TeeKeys tee_keys = 1;
+     */
+    teeKeys?: TeeKeys | undefined;
+};
+/**
+ * Describes the message inco.sealingfetcher.v1.RecoverTEEKeysResponse.
+ * Use `create(RecoverTEEKeysResponseSchema)` to create a new message.
+ */
+export declare const RecoverTEEKeysResponseSchema: GenMessage<RecoverTEEKeysResponse>;
+/**
+ * RecoverEOAKeyRequest is the request type of RecoverEOAKey rpc.
+ *
+ * @generated from message inco.sealingfetcher.v1.RecoverEOAKeyRequest
+ */
+export type RecoverEOAKeyRequest = Message<"inco.sealingfetcher.v1.RecoverEOAKeyRequest"> & {
+    /**
+     * The Sealing Providers to recover the EOA key from.
+     * The sealing fetcher will try each provider in order until one succeeds.
+     *
+     * @generated from field: repeated inco.sealingfetcher.v1.RATlsServer sealing_providers = 1;
+     */
+    sealingProviders: RATlsServer[];
+    /**
+     * The EOA address (checksummed or lowercase, 0x-prefixed) to construct the filename.
+     * The filename will be addnode_eoa_{eoa_address_lowercase}.json
+     *
+     * @generated from field: string eoa = 2;
+     */
+    eoa: string;
+};
+/**
+ * Describes the message inco.sealingfetcher.v1.RecoverEOAKeyRequest.
+ * Use `create(RecoverEOAKeyRequestSchema)` to create a new message.
+ */
+export declare const RecoverEOAKeyRequestSchema: GenMessage<RecoverEOAKeyRequest>;
+/**
+ * RecoverEOAKeyResponse is the response type of RecoverEOAKey rpc.
+ *
+ * @generated from message inco.sealingfetcher.v1.RecoverEOAKeyResponse
+ */
+export type RecoverEOAKeyResponse = Message<"inco.sealingfetcher.v1.RecoverEOAKeyResponse"> & {
+    /**
+     * The EOA private key.
+     * The private key is encoded as an unsigned 256-bit big-endian integer in
+     * the range [0, N-1], where N is the order of the curve.
+     *
+     * @generated from field: bytes eoa_privkey = 1;
+     */
+    eoaPrivkey: Uint8Array;
+};
+/**
+ * Describes the message inco.sealingfetcher.v1.RecoverEOAKeyResponse.
+ * Use `create(RecoverEOAKeyResponseSchema)` to create a new message.
+ */
+export declare const RecoverEOAKeyResponseSchema: GenMessage<RecoverEOAKeyResponse>;
+/**
+ * SealingFetcherService contains all RPC endpoints for the Sealing fetcher.
+ *
+ * @generated from service inco.sealingfetcher.v1.SealingFetcherService
+ */
+export declare const SealingFetcherService: GenService<{
+    /**
+     * StartBackup starts the backup process for the sealing provider.
+     * This RPC backs up all TEE keys (EOA, Network, and Storage keys) to the sealing provider.
+     * It stores the keys in the sealing fetcher's memory and seals all three keys to the sealing provider.
+     * Use this during bootstrap and upgrade flows when all keys are available.
+     *
+     * @generated from rpc inco.sealingfetcher.v1.SealingFetcherService.StartBackup
+     */
+    startBackup: {
+        methodKind: "unary";
+        input: typeof StartBackupRequestSchema;
+        output: typeof StartBackupResponseSchema;
+    };
+    /**
+     * StartBackupEOA starts the backup process for only the EOA key.
+     * This RPC backs up only the EOA private key to the sealing provider, without backing up
+     * the Network or Storage keys. It stores the EOA key in the sealing provider.
+     * Use this during the Add Node flow when only the EOA key has been generated, before
+     * the Network and Storage keys are populated.
+     *
+     * @generated from rpc inco.sealingfetcher.v1.SealingFetcherService.StartBackupEOA
+     */
+    startBackupEOA: {
+        methodKind: "unary";
+        input: typeof StartBackupEOARequestSchema;
+        output: typeof StartBackupEOAResponseSchema;
+    };
+    /**
+     * HasTEEKeys checks if the TEE keys are present in the sealing fetcher's memory.
+     * If not, then RecoverTEEKeys should be called first
+     *
+     * @generated from rpc inco.sealingfetcher.v1.SealingFetcherService.HasTEEKeys
+     */
+    hasTEEKeys: {
+        methodKind: "unary";
+        input: typeof HasTEEKeysRequestSchema;
+        output: typeof HasTEEKeysResponseSchema;
+    };
+    /**
+     * GetTEEKeys returns the set of network key, EOA key and storage key
+     * that the TEE can access.
+     * If the TEE keys are not present in the sealing fetcher's memory, then
+     * this rpc will return an error.
+     *
+     * @generated from rpc inco.sealingfetcher.v1.SealingFetcherService.GetTEEKeys
+     */
+    getTEEKeys: {
+        methodKind: "unary";
+        input: typeof GetTEEKeysRequestSchema;
+        output: typeof GetTEEKeysResponseSchema;
+    };
+    /**
+     * RecoverTEEKeys recovers the TEE keys from the sealed TEE keys, and stores
+     * them in the sealing fetcher's memory.
+     *
+     * @generated from rpc inco.sealingfetcher.v1.SealingFetcherService.RecoverTEEKeys
+     */
+    recoverTEEKeys: {
+        methodKind: "unary";
+        input: typeof RecoverTEEKeysRequestSchema;
+        output: typeof RecoverTEEKeysResponseSchema;
+    };
+    /**
+     * RecoverEOAKey recovers only the EOA private key from the sealing provider.
+     * This is used during the Add Node flow to retrieve the EOA key that was
+     * previously backed up via StartBackupEOA. The EOA key is stored with filename
+     * addnode_eoa_{eoa_address_lowercase}.json in the sealing provider.
+     *
+     * @generated from rpc inco.sealingfetcher.v1.SealingFetcherService.RecoverEOAKey
+     */
+    recoverEOAKey: {
+        methodKind: "unary";
+        input: typeof RecoverEOAKeyRequestSchema;
+        output: typeof RecoverEOAKeyResponseSchema;
+    };
+}>;