@inco/lightning 0.9.0-devnet-test-4 → 0.10.0-devnet-1

package/manifest.yaml

@@ -1,8 +1,147 @@
+incoLightning_devnet_v10_266391127:
+  executor:
+    name: incoLightning_devnet_v10_266391127
+    majorVersion: 10
+    deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    pepper: devnet
+    executorAddress: "0x9C6b74dff47644956e712B301aa3701b3141fF9C"
+    salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc0012dea2b242c4d3b620c657"
+  deployments:
+    - name: incoLightning_10_0_0__266391127
+      chainId: "84532"
+      chainName: Base Sepolia
+      version:
+        major: 10
+        minor: 0
+        patch: 0
+        shortSalt: "266391127"
+      blockNumber: "40291413"
+      deployDate: 2026-04-16T14:51:55.586Z
+      commit: v0.8.0-devnet-32-6-ge1e857cf0-dirty
+      active: true
+      includesPreviewFeatures: false
+incoLightning_devnet_v9_269218568:
+  executor:
+    name: incoLightning_devnet_v9_269218568
+    majorVersion: 9
+    deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    pepper: devnet
+    executorAddress: "0x6c9132D324231D2F68a1491686b0d4c10ee7d257"
+    salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc007202d6e9ea2805def71308"
+  deployments:
+    - name: incoLightning_9_0_0__269218568
+      chainId: "84532"
+      chainName: Base Sepolia
+      version:
+        major: 9
+        minor: 0
+        patch: 0
+        shortSalt: "269218568"
+      blockNumber: "39033718"
+      deployDate: 2026-03-18T12:08:48.915Z
+      commit: v0.8.0-devnet-13-40-gc1ceef103-dirty
+      active: true
+      includesPreviewFeatures: false
+incoLightning_devnet_v8_985328058:
+  executor:
+    name: incoLightning_devnet_v8_985328058
+    majorVersion: 8
+    deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    pepper: devnet
+    executorAddress: "0x43119Ad1F673E998CE4f3BB305bB92Bd5ab97E3B"
+    salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc009045f766b38e5a773da9ba"
+  deployments:
+    - name: incoLightning_8_0_0__985328058
+      chainId: "84532"
+      chainName: Base Sepolia
+      version:
+        major: 8
+        minor: 0
+        patch: 0
+        shortSalt: "985328058"
+      blockNumber: "39028741"
+      deployDate: 2026-03-18T09:22:53.919Z
+      commit: v0.8.0-devnet-13-40-gc1ceef103-dirty
+      active: true
+      includesPreviewFeatures: false
+incoLightning_devnet_v7_24560427:
+  executor:
+    name: incoLightning_devnet_v7_24560427
+    majorVersion: 7
+    deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    pepper: devnet
+    executorAddress: "0xA2275E60cCEd081fFD7373593c44ebc30E6Efe66"
+    salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc0057b7694d1492d2775d132b"
+  deployments:
+    - name: incoLightning_7_0_0__24560427
+      chainId: "84532"
+      chainName: Base Sepolia
+      version:
+        major: 7
+        minor: 0
+        patch: 0
+        shortSalt: "24560427"
+      blockNumber: "38991058"
+      deployDate: 2026-03-17T12:26:47.504Z
+      commit: v0.8.0-devnet-13-38-g52b1dfef3
+      active: true
+      includesPreviewFeatures: false
+incoLightning_devnet_v6_281949651:
+  executor:
+    name: incoLightning_devnet_v6_281949651
+    majorVersion: 6
+    deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    pepper: devnet
+    executorAddress: "0xDF3830489208461f72Df6E45D0e6cbF9DBB74fe1"
+    salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc009531587de02194b1b7a9d3"
+  deployments:
+    - name: incoLightning_6_0_0__281949651
+      chainId: "84532"
+      chainName: Base Sepolia
+      version:
+        major: 6
+        minor: 0
+        patch: 0
+        shortSalt: "281949651"
+      blockNumber: "37516200"
+      deployDate: 2026-02-11T09:04:51.931Z
+      commit: v0.8.0-devnet-9-13-ge2ba2377
+      active: true
+      includesPreviewFeatures: false
+incoLightning_devnet_v5_203964628:
+  executor:
+    name: incoLightning_devnet_v5_203964628
+    majorVersion: 5
+    deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    pepper: devnet
+    executorAddress: "0x8D5D75CC00E2Fc84ec4dE085aE1708223591c6b6"
+    salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc00c573fb2bf617e75b6210d4"
+  deployments:
+    - name: incoLightningPreview_5_0_0__203964628
+      chainId: "84532"
+      chainName: Base Sepolia
+      version:
+        major: 5
+        minor: 0
+        patch: 0
+        shortSalt: "203964628"
+      blockNumber: "37431152"
+      deployDate: 2026-02-09T09:49:55.326Z
+      commit: v0.8.0-devnet-8-8-ge2e37e00
+      active: true
+      includesPreviewFeatures: true
 incoLightning_devnet_v4_409204766:
   executor:
     name: incoLightning_devnet_v4_409204766
     majorVersion: 4
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: devnet
     executorAddress: "0x4046b737B454b0430FBF29cea070e3337AdE95aD"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc003b3f2c4caeb6f787dcce1e"
@@ -25,6 +164,7 @@ incoLightning_devnet_v3_976859633:
     name: incoLightning_devnet_v3_976859633
     majorVersion: 3
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: devnet
     executorAddress: "0x4732520194584a04Cac0224e067658619F4086bD"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc00ef1fab551c72a93b0637f1"
@@ -47,6 +187,7 @@ incoLightning_testnet_v2_889158349:
     name: incoLightning_testnet_v2_889158349
     majorVersion: 2
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: testnet
     executorAddress: "0x168FDc3Ae19A5d5b03614578C58974FF30FCBe92"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc005e0f44aac1a914b715cecd"
@@ -69,6 +210,7 @@ incoLightning_demonet_v2_467437523:
     name: incoLightning_demonet_v2_467437523
     majorVersion: 2
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: demonet
     executorAddress: "0xA95EAbCE575f5f1e52605358Ee893F6536166378"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc0071f74686446f14c7b469d3"
@@ -91,6 +233,7 @@ incoLightning_alphanet_v2_976644394:
     name: incoLightning_alphanet_v2_976644394
     majorVersion: 2
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: alphanet
     executorAddress: "0xc0d693DeEF0A91CE39208676b6da09B822abd199"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc000822f11f6e30f933e76d2a"
@@ -113,6 +256,7 @@ incoLightning_devnet_v2_295237520:
     name: incoLightning_devnet_v2_295237520
     majorVersion: 2
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: devnet
     executorAddress: "0xC64BB070D6F5aa796e79fA19c1008647ffF736ED"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc008d5a963bd519d8493f5190"
@@ -148,6 +292,7 @@ incoLightning_alphanet_v1_725458969:
     name: incoLightning_alphanet_v1_725458969
     majorVersion: 1
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: alphanet
     executorAddress: "0x28676Cd3b10b03b2FDF105Ba280425b45a674F2A"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc004dfbe338c6966a22bcca19"
@@ -182,6 +327,7 @@ incoLightning_devnet_v1_904635675:
     name: incoLightning_devnet_v1_904635675
     majorVersion: 1
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: devnet
     executorAddress: "0x3473820DcAa71Af8157b93C7f2bf1c676A2A39A6"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc007d63c0fdca6698ac7cc51b"
@@ -215,6 +361,7 @@ incoLightning_testnet_v0_183408998:
     name: incoLightning_testnet_v0_183408998
     majorVersion: 0
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: testnet
     executorAddress: "0x63D8135aF4D393B1dB43B649010c8D3EE19FC9fd"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc00d75ffa0caf0797c3f12d66"
@@ -260,6 +407,7 @@ incoLightning_demonet_v0_863421733:
     name: incoLightning_demonet_v0_863421733
     majorVersion: 0
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: demonet
     executorAddress: "0xeBAFF6D578733E4603b99CBdbb221482F29a78E1"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc00834654f6d289ccc7e5ab25"
@@ -293,6 +441,7 @@ incoLightning_alphanet_v0_297966649:
     name: incoLightning_alphanet_v0_297966649
     majorVersion: 0
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: alphanet
     executorAddress: "0x4651DfD7729aE5568092E7351fAaD872266d4CBd"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc0023f7798f470fdf5e9da639"
@@ -326,6 +475,7 @@ incoLightning_devnet_v0_340846814:
     name: incoLightning_devnet_v0_340846814
     majorVersion: 0
     deployer: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
+    owner: "0x8202D2D747784Cb7D48868E44C42C4bf162a70BC"
     pepper: devnet
     executorAddress: "0x3B22be60Ae699933959CA3cE147C96caa88Ccd3D"
     salt: "0x8202d2d747784cb7d48868e44c42c4bf162a70bc00b001d6742fded0dd599ede"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inco/lightning",
-  "version": "0.9.0-devnet-test-4",
+  "version": "0.10.0-devnet-1",
   "repository": "https://github.com/Inco-fhevm/inco-monorepo",
   "files": [
     "src/",
@@ -17,13 +17,13 @@
     "publish:npm": "npm publish --tag ${NPM_DIST_TAG:-alpha} --access public"
   },
   "dependencies": {
-    "@inco/shared": "^0.1.0",
-    "@openzeppelin/contracts": "^5.2.0",
-    "@openzeppelin/contracts-upgradeable": "^5.2.0",
-    "@safe-global/safe-smart-account": "https://github.com/safe-global/safe-smart-account.git#v1.5.0",
-    "ds-test": "https://github.com/dapphub/ds-test",
-    "forge-std": "https://github.com/foundry-rs/forge-std",
-    "tsx": "^4.19.3"
+    "@inco/shared": "0.1.0",
+    "@openzeppelin/contracts": "5.4.0",
+    "@openzeppelin/contracts-upgradeable": "5.4.0",
+    "@safe-global/safe-smart-account": "https://github.com/safe-global/safe-smart-account.git#dc437e8",
+    "ds-test": "https://github.com/dapphub/ds-test#e282159",
+    "forge-std": "https://github.com/foundry-rs/forge-std#2f05b30",
+    "tsx": "4.20.6"
   },
   "devDependencies": {
     "@types/bun": "latest",

package/src/CreateXHelper.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.10;
+pragma solidity ^0.8;
 
 import {CreateX} from "./pasted-dependencies/CreateX.sol";
 

package/src/DeployUtils.sol

@@ -90,29 +90,32 @@ contract DeployUtils is Script {
     /// @notice Full deployment of IncoLightning and IncoVerifier using configuration
     /// @dev Computes salts from deployer and pepper, then deploys both contracts.
     ///      Should be wrapped in prank (testing) or broadcast (production).
-    /// @param deployer The address that will own both deployed proxies (MUST be tx signer)
+    /// @param deployer The deployer address used in salt for CreateX permissioned deploy protection
+    /// @param owner The address that will own both deployed proxies (can be a multisig)
     /// @param pepper Entropy string to avoid address collision with previous deployments
     /// @param quoteVerifier The Automata quote verifier for TEE attestation validation
     /// @return lightningProxy The deployed IncoLightning proxy
     /// @return verifierProxy The deployed IncoVerifier proxy
-    function deployIncoLightningUsingConfig(address deployer, string memory pepper, IQuoteVerifier quoteVerifier)
-        internal
-        returns (IIncoLightning lightningProxy, IIncoVerifier verifierProxy)
-    {
+    function deployIncoLightningUsingConfig(
+        address deployer,
+        address owner,
+        string memory pepper,
+        IQuoteVerifier quoteVerifier
+    ) internal returns (IIncoLightning lightningProxy, IIncoVerifier verifierProxy) {
         (bytes32 lightningSalt, bytes32 verifierSalt) = getIncoSalts(deployer, pepper);
-        lightningProxy = deployLightning(lightningSalt, verifierSalt, deployer);
-        verifierProxy = deployVerifier(verifierSalt, lightningProxy, deployer, quoteVerifier);
+        lightningProxy = deployLightning(lightningSalt, verifierSalt, owner);
+        verifierProxy = deployVerifier(verifierSalt, lightningProxy, owner, quoteVerifier);
         console.log(
-            "Deploying Inco with executor: %s, deployerAddress: %s, lightning salt: %s",
+            "Deploying Inco with executor: %s, owner: %s, lightning salt: %s",
             vm.toString(address(lightningProxy)),
-            vm.toString(deployer),
+            vm.toString(owner),
             vm.toString(lightningSalt)
         );
     }
 
     /// @notice Computes the standard salts for IncoLightning and IncoVerifier
     /// @dev Uses the contract names and major version from IncoLightningConfig
-    /// @param deployer The deployer address
+    /// @param deployer The deployer address mixed into the salt for CreateX permissioned deploy protection
     /// @param pepper The pepper string for salt generation
     /// @return lightningSalt Salt for IncoLightning deployment
     /// @return verifierSalt Salt for IncoVerifier deployment
@@ -130,9 +133,9 @@ contract DeployUtils is Script {
     ///      computed from salt since it may not be deployed yet.
     /// @param lightningSalt The salt for CreateX deployment
     /// @param verifierSalt The salt used to compute the verifier address
-    /// @param deployer The address that will own the proxy
+    /// @param owner The address that will own the proxy
     /// @return lightningProxy The deployed proxy cast to IIncoLightning
-    function deployLightning(bytes32 lightningSalt, bytes32 verifierSalt, address deployer)
+    function deployLightning(bytes32 lightningSalt, bytes32 verifierSalt, address owner)
         internal
         returns (IIncoLightning lightningProxy)
     {
@@ -142,10 +145,7 @@ contract DeployUtils is Script {
             deployProxy({
                 salt: lightningSalt,
                 implem: address(lightningImplem),
-                initCall: abi.encodeWithSelector(
-                    IIncoLightning.initialize.selector,
-                    deployer // owner
-                )
+                initCall: abi.encodeWithSelector(IIncoLightning.initialize.selector, owner)
             })
         );
     }
@@ -155,26 +155,20 @@ contract DeployUtils is Script {
     ///      so it can be referenced in the verifier.
     /// @param verifierSalt The salt for CreateX deployment
     /// @param lightning The previously deployed IncoLightning proxy
-    /// @param deployer The address that will own the proxy
+    /// @param owner The address that will own the proxy
     /// @param quoteVerifier The Automata quote verifier for TEE attestation
     /// @return verifierProxy The deployed proxy cast to IIncoVerifier
-    function deployVerifier(
-        bytes32 verifierSalt,
-        IIncoLightning lightning,
-        address deployer,
-        IQuoteVerifier quoteVerifier
-    ) internal returns (IIncoVerifier verifierProxy) {
+    function deployVerifier(bytes32 verifierSalt, IIncoLightning lightning, address owner, IQuoteVerifier quoteVerifier)
+        internal
+        returns (IIncoVerifier verifierProxy)
+    {
         IncoVerifier verifierImplem = new IncoVerifier(address(lightning));
         verifierProxy = IIncoVerifier(
             deployProxy({
                 salt: verifierSalt,
                 implem: address(verifierImplem),
                 initCall: abi.encodeWithSelector(
-                    IIncoVerifier.initialize.selector,
-                    deployer, // owner
-                    VERIFIER_NAME,
-                    lightning.getMajorVersion(),
-                    quoteVerifier
+                    IIncoVerifier.initialize.selector, owner, VERIFIER_NAME, lightning.getMajorVersion(), quoteVerifier
                 )
             })
         );

package/src/IncoLightning.sol

@@ -1,11 +1,10 @@
 // SPDX-License-Identifier: No License
-pragma solidity ^0.8;
+pragma solidity ^0.8.29;
 
 import {IIncoLightning} from "./interfaces/IIncoLightning.sol";
 import {CONTRACT_NAME, MAJOR_VERSION, MINOR_VERSION, PATCH_VERSION} from "./version/IncoLightningConfig.sol";
-import {EncryptedInput} from "./lightning-parts/EncryptedInput.sol";
-import {EncryptedOperations} from "./lightning-parts/EncryptedOperations.sol";
 import {TrivialEncryption} from "./lightning-parts/TrivialEncryption.sol";
+import {EList} from "./lightning-parts/EList.sol";
 import {UUPSUpgradeable} from "@openzeppelin/contracts/proxy/utils/UUPSUpgradeable.sol";
 import {OwnableUpgradeable} from "@openzeppelin/contracts-upgradeable/access/OwnableUpgradeable.sol";
 import {Version} from "./version/Version.sol";
@@ -22,23 +21,15 @@ import {VerifierAddressGetter} from "./lightning-parts/primitives/VerifierAddres
 ///
 ///      The contract is deployed as a UUPS upgradeable proxy and uses CreateX for deterministic deployment.
 ///      All encrypted values are represented as bytes32 handles that reference ciphertexts stored off-chain.
-contract IncoLightning is
-    IIncoLightning,
-    EncryptedOperations,
-    TrivialEncryption,
-    UUPSUpgradeable,
-    EncryptedInput,
-    OwnableUpgradeable,
-    Version
-{
+contract IncoLightning is IIncoLightning, TrivialEncryption, EList, UUPSUpgradeable, OwnableUpgradeable, Version {
 
     /// @notice Initializes the IncoLightning contract with deployment configuration
     /// @dev The salt embeds the deployer address, contract name, version, and pepper for deterministic deployment.
     ///      This constructor is called once during proxy implementation deployment.
-    /// @param salt Unique salt used for deterministic deployment via CreateX
+    /// @param _salt Unique salt used for deterministic deployment via CreateX
     /// @param _incoVerifier The verifier contract address for attestation validation
-    constructor(bytes32 salt, IIncoVerifier _incoVerifier)
-        Version(MAJOR_VERSION, MINOR_VERSION, PATCH_VERSION, salt, CONTRACT_NAME)
+    constructor(bytes32 _salt, IIncoVerifier _incoVerifier)
+        Version(MAJOR_VERSION, MINOR_VERSION, PATCH_VERSION, _salt, CONTRACT_NAME)
         VerifierAddressGetter(address(_incoVerifier))
     {}
 
@@ -51,9 +42,10 @@ contract IncoLightning is
     /// @notice Initializes the proxy with an owner address
     /// @dev Must be called immediately after proxy deployment. Can only be called once.
     ///      This sets up the Ownable state for the proxy instance.
-    /// @param owner The address that will own this contract and can authorize upgrades
-    function initialize(address owner) public initializer {
-        __Ownable_init(owner);
+    /// @param _owner The address that will own this contract and can authorize upgrades
+    function initialize(address _owner) public initializer {
+        __Ownable_init(_owner);
+        _setAcceptedVersion(2, true);
     }
 
     /// @notice Withdraws accumulated protocol fees to the owner
@@ -63,8 +55,25 @@ contract IncoLightning is
         _withdrawFeesTo(owner());
     }
 
+    /// @notice Adds a version to the accepted input versions whitelist.
+    /// @param version The version number to accept (must be non-negative).
+    function addAcceptedVersion(uint16 version) external onlyOwner {
+        _setAcceptedVersion(version, true);
+    }
+
+    /// @notice Removes a version from the accepted input versions whitelist.
+    /// @param version The version number to remove.
+    function removeAcceptedVersion(uint16 version) external onlyOwner {
+        _setAcceptedVersion(version, false);
+    }
+
     /// @notice Required for CreateX deterministic deployment
     /// @dev Empty fallback allows the contract to be deployed via CreateX's create2 mechanism
     fallback() external {}
 
+    /// @dev Reject any incoming ETH transfers, as the contract is not designed to handle ETH and does not have a payable fallback.
+    receive() external payable {
+        revert EthInboundTransferUnsupported();
+    }
+
 }

package/src/IncoVerifier.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: No License
-pragma solidity ^0.8;
+pragma solidity ^0.8.29;
 
 import {AdvancedAccessControl} from "./lightning-parts/AccessControl/AdvancedAccessControl.sol";
 import {DecryptionAttester} from "./lightning-parts/DecryptionAttester.sol";