@inco/shield-js 0.0.0-bootstrap.0

package/dist/shield/envelope.d.ts

@@ -0,0 +1,14 @@
+import { type Hex } from 'viem';
+import { EncryptedEnvelope, type EncryptedResponse } from '../generated/inco/shield/v2/types_pb.js';
+/** HPKE-encrypt a serialized Authenticated* proto into an EncryptedEnvelope. */
+export declare function makeEnvelope(teePublicKey: CryptoKey, inner: {
+    toBinary(): Uint8Array<ArrayBufferLike>;
+}): Promise<EncryptedEnvelope>;
+/** Generate a random 32-byte AEAD response key. */
+export declare function generateResponseKey(): Uint8Array<ArrayBuffer>;
+/** Generate a fresh 32-byte replay-protection salt using the platform CSPRNG. */
+export declare function generateRandomSalt(): Hex;
+/** AEAD-decrypt an EncryptedResponse using the response key, then decode as a typed proto. */
+export declare function decryptResponse<T>(resp: EncryptedResponse, responseKey: Uint8Array, Type: {
+    fromBinary(bytes: Uint8Array): T;
+}): Promise<T>;

package/dist/shield/envelope.js

@@ -0,0 +1,29 @@
+import { toHex } from 'viem';
+import { EncryptedEnvelope, } from '../generated/inco/shield/v2/types_pb.js';
+import { AEAD_KEY_SIZE, openAead, sealEnvelope } from './encryption.js';
+// ---------------------------------------------------------------------------
+// Envelope helpers
+// ---------------------------------------------------------------------------
+/** HPKE-encrypt a serialized Authenticated* proto into an EncryptedEnvelope. */
+export async function makeEnvelope(teePublicKey, inner) {
+    const bytes = inner.toBinary();
+    const sealed = await sealEnvelope(teePublicKey, bytes);
+    return new EncryptedEnvelope({ payload: new Uint8Array(sealed) });
+}
+/** Generate a random 32-byte AEAD response key. */
+export function generateResponseKey() {
+    const key = new Uint8Array(AEAD_KEY_SIZE);
+    crypto.getRandomValues(key);
+    return key;
+}
+/** Generate a fresh 32-byte replay-protection salt using the platform CSPRNG. */
+export function generateRandomSalt() {
+    const bytes = new Uint8Array(32);
+    crypto.getRandomValues(bytes);
+    return toHex(bytes);
+}
+/** AEAD-decrypt an EncryptedResponse using the response key, then decode as a typed proto. */
+export async function decryptResponse(resp, responseKey, Type) {
+    const plaintext = await openAead(responseKey, resp.nonce, resp.ciphertext);
+    return Type.fromBinary(plaintext);
+}

package/dist/shield/index.d.ts

@@ -0,0 +1,13 @@
+export { IntentKind } from '../generated/inco/shield/v2/drafting_pb.js';
+export { computeDomainSeparator, createShieldClient, type ShieldClient, } from './client.js';
+export { bigintToProtoUint256 } from './convert.js';
+export { AEAD_KEY_SIZE, AEAD_NONCE_SIZE, deriveKeyPair, deserializeKeyPair, deserializePublicKey, generateKeyPair, openAead, openEnvelope, type SerializedKeyPair, sealAead, sealEnvelope, serializeKeyPair, serializePublicKey, } from './encryption.js';
+export * from './envelope.js';
+export * from './intent.js';
+export { computePermissionId, type PermissionIdInput, } from './rpc.js';
+export { handlePreimageDigest as computeHandle } from './shield.eip712.gen.js';
+export type { Balance, DepositAttestation, GetBalanceParams, GetPermissionDetailsParams, GetPermissionsByOwnerParams, GetPermissionsBySpenderParams, PermissionDetails, PermissionInfo, PermissionIntent, PermissionStatusType, RequestDepositAttestationParams, Salt, ShieldConfig, ShieldSigner, ShieldSignerInput, } from './types.js';
+export { ShieldError } from './types.js';
+export type { BuildUnsignedUserOpParams, DefiInteractionIntent, DelegatedDefiInteractionIntent, DelegatedTransferIntent, DelegatedWithdrawalIntent, IndividualRevocationIntent, Intent, TransferIntent, UnsignedUserOperation, UserWideRevocationIntent, WithdrawalIntent, } from './userop/types.js';
+export { ENTRYPOINT_VERSION } from './userop/types.js';
+export { assembleUserOp, buildUnsignedUserOp, userOpHash, } from './userop/userOp.js';

package/dist/shield/index.js

@@ -0,0 +1,11 @@
+export { IntentKind } from '../generated/inco/shield/v2/drafting_pb.js';
+export { computeDomainSeparator, createShieldClient, } from './client.js';
+export { bigintToProtoUint256 } from './convert.js';
+export { AEAD_KEY_SIZE, AEAD_NONCE_SIZE, deriveKeyPair, deserializeKeyPair, deserializePublicKey, generateKeyPair, openAead, openEnvelope, sealAead, sealEnvelope, serializeKeyPair, serializePublicKey, } from './encryption.js';
+export * from './envelope.js';
+export * from './intent.js';
+export { computePermissionId, } from './rpc.js';
+export { handlePreimageDigest as computeHandle } from './shield.eip712.gen.js';
+export { ShieldError } from './types.js';
+export { ENTRYPOINT_VERSION } from './userop/types.js';
+export { assembleUserOp, buildUnsignedUserOp, userOpHash, } from './userop/userOp.js';