@inco/shield-js 0.0.0-bootstrap.0

package/dist/generated/inco/shield/v2/query_pb.d.ts

@@ -0,0 +1,103 @@
+import type { BinaryReadOptions, FieldList, JsonReadOptions, JsonValue, PartialMessage, PlainMessage } from "@bufbuild/protobuf";
+import { Message, proto3 } from "@bufbuild/protobuf";
+import { Address, AssetId, Bytes32, Handle, Uint256 } from "./types_pb.js";
+/**
+ * GetBalanceRequest is the envelope payload for GetBalance.
+ * Account ownership is proven by eip712_signature.
+ * Response is AEAD-encrypted with response_key.
+ *
+ * @generated from message inco.shield.v2.GetBalanceRequest
+ */
+export declare class GetBalanceRequest extends Message<GetBalanceRequest> {
+    /**
+     * The account to query.
+     *
+     * @generated from field: inco.shield.v2.Address address = 1;
+     */
+    address?: Address;
+    /**
+     * The asset to query.
+     *
+     * @generated from field: inco.shield.v2.AssetId asset_id = 2;
+     */
+    assetId?: AssetId;
+    /**
+     * Optional: query balance at a specific block (0 = latest).
+     *
+     * @generated from field: uint64 at_block = 3;
+     */
+    atBlock: bigint;
+    /**
+     * Symmetric key for AEAD-encrypting the response.
+     *
+     * @generated from field: bytes response_key = 4;
+     */
+    responseKey: Uint8Array<ArrayBuffer>;
+    /**
+     * EIP-712 signature proving ownership of the queried address.
+     *
+     * @generated from field: bytes eip712_signature = 5;
+     */
+    eip712Signature: Uint8Array<ArrayBuffer>;
+    /**
+     * Unix timestamp (seconds) the client signed into the BalanceQuery digest;
+     * the enclave verifies against this exact value.
+     *
+     * @generated from field: uint64 query_timestamp = 6;
+     */
+    queryTimestamp: bigint;
+    constructor(data?: PartialMessage<GetBalanceRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "inco.shield.v2.GetBalanceRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetBalanceRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetBalanceRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetBalanceRequest;
+    static equals(a: GetBalanceRequest | PlainMessage<GetBalanceRequest> | undefined, b: GetBalanceRequest | PlainMessage<GetBalanceRequest> | undefined): boolean;
+}
+/**
+ * GetBalanceResponse returns the account's balance breakdown.
+ * Serialized and AEAD-encrypted into an EncryptedResponse.
+ *
+ * @generated from message inco.shield.v2.GetBalanceResponse
+ */
+export declare class GetBalanceResponse extends Message<GetBalanceResponse> {
+    /**
+     * Balance from settled transfers.
+     *
+     * @generated from field: inco.shield.v2.Uint256 confirmed_balance = 1;
+     */
+    confirmedBalance?: Uint256;
+    /**
+     * Balance from in-flight transfers not yet settled.
+     *
+     * @generated from field: inco.shield.v2.Uint256 pending_balance = 2;
+     */
+    pendingBalance?: Uint256;
+    /**
+     * Total available balance (confirmed + pending).
+     *
+     * @generated from field: inco.shield.v2.Uint256 available_balance = 3;
+     */
+    availableBalance?: Uint256;
+    /**
+     * The handle at which this balance was computed.
+     *
+     * @generated from field: inco.shield.v2.Handle handle = 4;
+     */
+    handle?: Handle;
+    /**
+     * The block hash at which this balance was computed.
+     *
+     * @generated from field: inco.shield.v2.Bytes32 block_hash = 5;
+     */
+    blockHash?: Bytes32;
+    constructor(data?: PartialMessage<GetBalanceResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "inco.shield.v2.GetBalanceResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetBalanceResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetBalanceResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetBalanceResponse;
+    static equals(a: GetBalanceResponse | PlainMessage<GetBalanceResponse> | undefined, b: GetBalanceResponse | PlainMessage<GetBalanceResponse> | undefined): boolean;
+}

package/dist/generated/inco/shield/v2/query_pb.js

@@ -0,0 +1,141 @@
+// @generated by protoc-gen-es v1.10.1 with parameter "target=ts,import_extension=.js"
+// @generated from file inco/shield/v2/query.proto (package inco.shield.v2, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { Message, proto3, protoInt64 } from "@bufbuild/protobuf";
+import { Address, AssetId, Bytes32, Handle, Uint256 } from "./types_pb.js";
+/**
+ * GetBalanceRequest is the envelope payload for GetBalance.
+ * Account ownership is proven by eip712_signature.
+ * Response is AEAD-encrypted with response_key.
+ *
+ * @generated from message inco.shield.v2.GetBalanceRequest
+ */
+export class GetBalanceRequest extends Message {
+    /**
+     * The account to query.
+     *
+     * @generated from field: inco.shield.v2.Address address = 1;
+     */
+    address;
+    /**
+     * The asset to query.
+     *
+     * @generated from field: inco.shield.v2.AssetId asset_id = 2;
+     */
+    assetId;
+    /**
+     * Optional: query balance at a specific block (0 = latest).
+     *
+     * @generated from field: uint64 at_block = 3;
+     */
+    atBlock = protoInt64.zero;
+    /**
+     * Symmetric key for AEAD-encrypting the response.
+     *
+     * @generated from field: bytes response_key = 4;
+     */
+    responseKey = new Uint8Array(0);
+    /**
+     * EIP-712 signature proving ownership of the queried address.
+     *
+     * @generated from field: bytes eip712_signature = 5;
+     */
+    eip712Signature = new Uint8Array(0);
+    /**
+     * Unix timestamp (seconds) the client signed into the BalanceQuery digest;
+     * the enclave verifies against this exact value.
+     *
+     * @generated from field: uint64 query_timestamp = 6;
+     */
+    queryTimestamp = protoInt64.zero;
+    constructor(data) {
+        super();
+        proto3.util.initPartial(data, this);
+    }
+    static runtime = proto3;
+    static typeName = "inco.shield.v2.GetBalanceRequest";
+    static fields = proto3.util.newFieldList(() => [
+        { no: 1, name: "address", kind: "message", T: Address },
+        { no: 2, name: "asset_id", kind: "message", T: AssetId },
+        { no: 3, name: "at_block", kind: "scalar", T: 4 /* ScalarType.UINT64 */ },
+        { no: 4, name: "response_key", kind: "scalar", T: 12 /* ScalarType.BYTES */ },
+        { no: 5, name: "eip712_signature", kind: "scalar", T: 12 /* ScalarType.BYTES */ },
+        { no: 6, name: "query_timestamp", kind: "scalar", T: 4 /* ScalarType.UINT64 */ },
+    ]);
+    static fromBinary(bytes, options) {
+        return new GetBalanceRequest().fromBinary(bytes, options);
+    }
+    static fromJson(jsonValue, options) {
+        return new GetBalanceRequest().fromJson(jsonValue, options);
+    }
+    static fromJsonString(jsonString, options) {
+        return new GetBalanceRequest().fromJsonString(jsonString, options);
+    }
+    static equals(a, b) {
+        return proto3.util.equals(GetBalanceRequest, a, b);
+    }
+}
+/**
+ * GetBalanceResponse returns the account's balance breakdown.
+ * Serialized and AEAD-encrypted into an EncryptedResponse.
+ *
+ * @generated from message inco.shield.v2.GetBalanceResponse
+ */
+export class GetBalanceResponse extends Message {
+    /**
+     * Balance from settled transfers.
+     *
+     * @generated from field: inco.shield.v2.Uint256 confirmed_balance = 1;
+     */
+    confirmedBalance;
+    /**
+     * Balance from in-flight transfers not yet settled.
+     *
+     * @generated from field: inco.shield.v2.Uint256 pending_balance = 2;
+     */
+    pendingBalance;
+    /**
+     * Total available balance (confirmed + pending).
+     *
+     * @generated from field: inco.shield.v2.Uint256 available_balance = 3;
+     */
+    availableBalance;
+    /**
+     * The handle at which this balance was computed.
+     *
+     * @generated from field: inco.shield.v2.Handle handle = 4;
+     */
+    handle;
+    /**
+     * The block hash at which this balance was computed.
+     *
+     * @generated from field: inco.shield.v2.Bytes32 block_hash = 5;
+     */
+    blockHash;
+    constructor(data) {
+        super();
+        proto3.util.initPartial(data, this);
+    }
+    static runtime = proto3;
+    static typeName = "inco.shield.v2.GetBalanceResponse";
+    static fields = proto3.util.newFieldList(() => [
+        { no: 1, name: "confirmed_balance", kind: "message", T: Uint256 },
+        { no: 2, name: "pending_balance", kind: "message", T: Uint256 },
+        { no: 3, name: "available_balance", kind: "message", T: Uint256 },
+        { no: 4, name: "handle", kind: "message", T: Handle },
+        { no: 5, name: "block_hash", kind: "message", T: Bytes32 },
+    ]);
+    static fromBinary(bytes, options) {
+        return new GetBalanceResponse().fromBinary(bytes, options);
+    }
+    static fromJson(jsonValue, options) {
+        return new GetBalanceResponse().fromJson(jsonValue, options);
+    }
+    static fromJsonString(jsonString, options) {
+        return new GetBalanceResponse().fromJsonString(jsonString, options);
+    }
+    static equals(a, b) {
+        return proto3.util.equals(GetBalanceResponse, a, b);
+    }
+}

package/dist/generated/inco/shield/v2/types_pb.d.ts

@@ -0,0 +1,166 @@
+import type { BinaryReadOptions, FieldList, JsonReadOptions, JsonValue, PartialMessage, PlainMessage } from "@bufbuild/protobuf";
+import { Message, proto3 } from "@bufbuild/protobuf";
+/**
+ * Address represents a 20-byte Ethereum address.
+ * Stored as raw bytes to avoid encoding ambiguity (0x prefix, capitalization).
+ *
+ * @generated from message inco.shield.v2.Address
+ */
+export declare class Address extends Message<Address> {
+    /**
+     * The raw 20-byte address value.
+     *
+     * @generated from field: bytes value = 1;
+     */
+    value: Uint8Array<ArrayBuffer>;
+    constructor(data?: PartialMessage<Address>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "inco.shield.v2.Address";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): Address;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): Address;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): Address;
+    static equals(a: Address | PlainMessage<Address> | undefined, b: Address | PlainMessage<Address> | undefined): boolean;
+}
+/**
+ * Bytes32 represents a 32-byte value, used for hashes and other fixed-size data.
+ *
+ * @generated from message inco.shield.v2.Bytes32
+ */
+export declare class Bytes32 extends Message<Bytes32> {
+    /**
+     * The raw 32-byte value.
+     *
+     * @generated from field: bytes value = 1;
+     */
+    value: Uint8Array<ArrayBuffer>;
+    constructor(data?: PartialMessage<Bytes32>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "inco.shield.v2.Bytes32";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): Bytes32;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): Bytes32;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): Bytes32;
+    static equals(a: Bytes32 | PlainMessage<Bytes32> | undefined, b: Bytes32 | PlainMessage<Bytes32> | undefined): boolean;
+}
+/**
+ * Handle is a unique identifier for a position in the shield state.
+ * Used to track the covalidator's view of the on-chain state.
+ *
+ * @generated from message inco.shield.v2.Handle
+ */
+export declare class Handle extends Message<Handle> {
+    /**
+     * The 32-byte handle value.
+     *
+     * @generated from field: bytes value = 1;
+     */
+    value: Uint8Array<ArrayBuffer>;
+    constructor(data?: PartialMessage<Handle>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "inco.shield.v2.Handle";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): Handle;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): Handle;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): Handle;
+    static equals(a: Handle | PlainMessage<Handle> | undefined, b: Handle | PlainMessage<Handle> | undefined): boolean;
+}
+/**
+ * AssetId identifies a specific asset type within the shield system.
+ * Typically derived from the token contract address.
+ *
+ * @generated from message inco.shield.v2.AssetId
+ */
+export declare class AssetId extends Message<AssetId> {
+    /**
+     * The 32-byte asset identifier.
+     *
+     * @generated from field: bytes value = 1;
+     */
+    value: Uint8Array<ArrayBuffer>;
+    constructor(data?: PartialMessage<AssetId>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "inco.shield.v2.AssetId";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): AssetId;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): AssetId;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): AssetId;
+    static equals(a: AssetId | PlainMessage<AssetId> | undefined, b: AssetId | PlainMessage<AssetId> | undefined): boolean;
+}
+/**
+ * Uint256 is an unsigned 256-bit integer.
+ *
+ * Wire encoding: `value` is exactly 32 bytes, big-endian, unsigned. Same
+ * byte layout as Solidity's `uint256` ABI encoding. Producers write the
+ * integer to a 32-byte buffer big-endian (left-zero-padded); consumers
+ * read the 32 bytes as a big-endian unsigned integer. The zero value is
+ * 32 zero bytes (not an empty `value`). Length other than 32 is invalid.
+ *
+ * @generated from message inco.shield.v2.Uint256
+ */
+export declare class Uint256 extends Message<Uint256> {
+    /**
+     * @generated from field: bytes value = 1;
+     */
+    value: Uint8Array<ArrayBuffer>;
+    constructor(data?: PartialMessage<Uint256>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "inco.shield.v2.Uint256";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): Uint256;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): Uint256;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): Uint256;
+    static equals(a: Uint256 | PlainMessage<Uint256> | undefined, b: Uint256 | PlainMessage<Uint256> | undefined): boolean;
+}
+/**
+ * EncryptedEnvelope wraps an authenticated payload for the covalidator.
+ * The covalidator determines the inner plaintext type from the RPC method being called.
+ * The payload is serialized into a protobuf message and encrypted using the TEE's public key.
+ *
+ * @generated from message inco.shield.v2.EncryptedEnvelope
+ */
+export declare class EncryptedEnvelope extends Message<EncryptedEnvelope> {
+    /**
+     * The payload bytes, encrypted using the TEE's public key.
+     *
+     * @generated from field: bytes payload = 1;
+     */
+    payload: Uint8Array<ArrayBuffer>;
+    constructor(data?: PartialMessage<EncryptedEnvelope>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "inco.shield.v2.EncryptedEnvelope";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): EncryptedEnvelope;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): EncryptedEnvelope;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): EncryptedEnvelope;
+    static equals(a: EncryptedEnvelope | PlainMessage<EncryptedEnvelope> | undefined, b: EncryptedEnvelope | PlainMessage<EncryptedEnvelope> | undefined): boolean;
+}
+/**
+ * EncryptedResponse wraps a response payload from the covalidator.
+ * The response is serialized into a protobuf message and AEAD-encrypted using the caller's response_key.
+ * The nonce and ciphertext are always populated.
+ *
+ * @generated from message inco.shield.v2.EncryptedResponse
+ */
+export declare class EncryptedResponse extends Message<EncryptedResponse> {
+    /**
+     * The AEAD nonce used to encrypt the response payload.
+     *
+     * @generated from field: bytes nonce = 1;
+     */
+    nonce: Uint8Array<ArrayBuffer>;
+    /**
+     * The AEAD-encrypted serialized response payload.
+     *
+     * @generated from field: bytes ciphertext = 2;
+     */
+    ciphertext: Uint8Array<ArrayBuffer>;
+    constructor(data?: PartialMessage<EncryptedResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "inco.shield.v2.EncryptedResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): EncryptedResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): EncryptedResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): EncryptedResponse;
+    static equals(a: EncryptedResponse | PlainMessage<EncryptedResponse> | undefined, b: EncryptedResponse | PlainMessage<EncryptedResponse> | undefined): boolean;
+}

package/dist/generated/inco/shield/v2/types_pb.js

@@ -0,0 +1,261 @@
+// @generated by protoc-gen-es v1.10.1 with parameter "target=ts,import_extension=.js"
+// @generated from file inco/shield/v2/types.proto (package inco.shield.v2, syntax proto3)
+/* eslint-disable */
+// @ts-nocheck
+import { Message, proto3 } from "@bufbuild/protobuf";
+/**
+ * Address represents a 20-byte Ethereum address.
+ * Stored as raw bytes to avoid encoding ambiguity (0x prefix, capitalization).
+ *
+ * @generated from message inco.shield.v2.Address
+ */
+export class Address extends Message {
+    /**
+     * The raw 20-byte address value.
+     *
+     * @generated from field: bytes value = 1;
+     */
+    value = new Uint8Array(0);
+    constructor(data) {
+        super();
+        proto3.util.initPartial(data, this);
+    }
+    static runtime = proto3;
+    static typeName = "inco.shield.v2.Address";
+    static fields = proto3.util.newFieldList(() => [
+        { no: 1, name: "value", kind: "scalar", T: 12 /* ScalarType.BYTES */ },
+    ]);
+    static fromBinary(bytes, options) {
+        return new Address().fromBinary(bytes, options);
+    }
+    static fromJson(jsonValue, options) {
+        return new Address().fromJson(jsonValue, options);
+    }
+    static fromJsonString(jsonString, options) {
+        return new Address().fromJsonString(jsonString, options);
+    }
+    static equals(a, b) {
+        return proto3.util.equals(Address, a, b);
+    }
+}
+/**
+ * Bytes32 represents a 32-byte value, used for hashes and other fixed-size data.
+ *
+ * @generated from message inco.shield.v2.Bytes32
+ */
+export class Bytes32 extends Message {
+    /**
+     * The raw 32-byte value.
+     *
+     * @generated from field: bytes value = 1;
+     */
+    value = new Uint8Array(0);
+    constructor(data) {
+        super();
+        proto3.util.initPartial(data, this);
+    }
+    static runtime = proto3;
+    static typeName = "inco.shield.v2.Bytes32";
+    static fields = proto3.util.newFieldList(() => [
+        { no: 1, name: "value", kind: "scalar", T: 12 /* ScalarType.BYTES */ },
+    ]);
+    static fromBinary(bytes, options) {
+        return new Bytes32().fromBinary(bytes, options);
+    }
+    static fromJson(jsonValue, options) {
+        return new Bytes32().fromJson(jsonValue, options);
+    }
+    static fromJsonString(jsonString, options) {
+        return new Bytes32().fromJsonString(jsonString, options);
+    }
+    static equals(a, b) {
+        return proto3.util.equals(Bytes32, a, b);
+    }
+}
+/**
+ * Handle is a unique identifier for a position in the shield state.
+ * Used to track the covalidator's view of the on-chain state.
+ *
+ * @generated from message inco.shield.v2.Handle
+ */
+export class Handle extends Message {
+    /**
+     * The 32-byte handle value.
+     *
+     * @generated from field: bytes value = 1;
+     */
+    value = new Uint8Array(0);
+    constructor(data) {
+        super();
+        proto3.util.initPartial(data, this);
+    }
+    static runtime = proto3;
+    static typeName = "inco.shield.v2.Handle";
+    static fields = proto3.util.newFieldList(() => [
+        { no: 1, name: "value", kind: "scalar", T: 12 /* ScalarType.BYTES */ },
+    ]);
+    static fromBinary(bytes, options) {
+        return new Handle().fromBinary(bytes, options);
+    }
+    static fromJson(jsonValue, options) {
+        return new Handle().fromJson(jsonValue, options);
+    }
+    static fromJsonString(jsonString, options) {
+        return new Handle().fromJsonString(jsonString, options);
+    }
+    static equals(a, b) {
+        return proto3.util.equals(Handle, a, b);
+    }
+}
+/**
+ * AssetId identifies a specific asset type within the shield system.
+ * Typically derived from the token contract address.
+ *
+ * @generated from message inco.shield.v2.AssetId
+ */
+export class AssetId extends Message {
+    /**
+     * The 32-byte asset identifier.
+     *
+     * @generated from field: bytes value = 1;
+     */
+    value = new Uint8Array(0);
+    constructor(data) {
+        super();
+        proto3.util.initPartial(data, this);
+    }
+    static runtime = proto3;
+    static typeName = "inco.shield.v2.AssetId";
+    static fields = proto3.util.newFieldList(() => [
+        { no: 1, name: "value", kind: "scalar", T: 12 /* ScalarType.BYTES */ },
+    ]);
+    static fromBinary(bytes, options) {
+        return new AssetId().fromBinary(bytes, options);
+    }
+    static fromJson(jsonValue, options) {
+        return new AssetId().fromJson(jsonValue, options);
+    }
+    static fromJsonString(jsonString, options) {
+        return new AssetId().fromJsonString(jsonString, options);
+    }
+    static equals(a, b) {
+        return proto3.util.equals(AssetId, a, b);
+    }
+}
+/**
+ * Uint256 is an unsigned 256-bit integer.
+ *
+ * Wire encoding: `value` is exactly 32 bytes, big-endian, unsigned. Same
+ * byte layout as Solidity's `uint256` ABI encoding. Producers write the
+ * integer to a 32-byte buffer big-endian (left-zero-padded); consumers
+ * read the 32 bytes as a big-endian unsigned integer. The zero value is
+ * 32 zero bytes (not an empty `value`). Length other than 32 is invalid.
+ *
+ * @generated from message inco.shield.v2.Uint256
+ */
+export class Uint256 extends Message {
+    /**
+     * @generated from field: bytes value = 1;
+     */
+    value = new Uint8Array(0);
+    constructor(data) {
+        super();
+        proto3.util.initPartial(data, this);
+    }
+    static runtime = proto3;
+    static typeName = "inco.shield.v2.Uint256";
+    static fields = proto3.util.newFieldList(() => [
+        { no: 1, name: "value", kind: "scalar", T: 12 /* ScalarType.BYTES */ },
+    ]);
+    static fromBinary(bytes, options) {
+        return new Uint256().fromBinary(bytes, options);
+    }
+    static fromJson(jsonValue, options) {
+        return new Uint256().fromJson(jsonValue, options);
+    }
+    static fromJsonString(jsonString, options) {
+        return new Uint256().fromJsonString(jsonString, options);
+    }
+    static equals(a, b) {
+        return proto3.util.equals(Uint256, a, b);
+    }
+}
+/**
+ * EncryptedEnvelope wraps an authenticated payload for the covalidator.
+ * The covalidator determines the inner plaintext type from the RPC method being called.
+ * The payload is serialized into a protobuf message and encrypted using the TEE's public key.
+ *
+ * @generated from message inco.shield.v2.EncryptedEnvelope
+ */
+export class EncryptedEnvelope extends Message {
+    /**
+     * The payload bytes, encrypted using the TEE's public key.
+     *
+     * @generated from field: bytes payload = 1;
+     */
+    payload = new Uint8Array(0);
+    constructor(data) {
+        super();
+        proto3.util.initPartial(data, this);
+    }
+    static runtime = proto3;
+    static typeName = "inco.shield.v2.EncryptedEnvelope";
+    static fields = proto3.util.newFieldList(() => [
+        { no: 1, name: "payload", kind: "scalar", T: 12 /* ScalarType.BYTES */ },
+    ]);
+    static fromBinary(bytes, options) {
+        return new EncryptedEnvelope().fromBinary(bytes, options);
+    }
+    static fromJson(jsonValue, options) {
+        return new EncryptedEnvelope().fromJson(jsonValue, options);
+    }
+    static fromJsonString(jsonString, options) {
+        return new EncryptedEnvelope().fromJsonString(jsonString, options);
+    }
+    static equals(a, b) {
+        return proto3.util.equals(EncryptedEnvelope, a, b);
+    }
+}
+/**
+ * EncryptedResponse wraps a response payload from the covalidator.
+ * The response is serialized into a protobuf message and AEAD-encrypted using the caller's response_key.
+ * The nonce and ciphertext are always populated.
+ *
+ * @generated from message inco.shield.v2.EncryptedResponse
+ */
+export class EncryptedResponse extends Message {
+    /**
+     * The AEAD nonce used to encrypt the response payload.
+     *
+     * @generated from field: bytes nonce = 1;
+     */
+    nonce = new Uint8Array(0);
+    /**
+     * The AEAD-encrypted serialized response payload.
+     *
+     * @generated from field: bytes ciphertext = 2;
+     */
+    ciphertext = new Uint8Array(0);
+    constructor(data) {
+        super();
+        proto3.util.initPartial(data, this);
+    }
+    static runtime = proto3;
+    static typeName = "inco.shield.v2.EncryptedResponse";
+    static fields = proto3.util.newFieldList(() => [
+        { no: 1, name: "nonce", kind: "scalar", T: 12 /* ScalarType.BYTES */ },
+        { no: 2, name: "ciphertext", kind: "scalar", T: 12 /* ScalarType.BYTES */ },
+    ]);
+    static fromBinary(bytes, options) {
+        return new EncryptedResponse().fromBinary(bytes, options);
+    }
+    static fromJson(jsonValue, options) {
+        return new EncryptedResponse().fromJson(jsonValue, options);
+    }
+    static fromJsonString(jsonString, options) {
+        return new EncryptedResponse().fromJsonString(jsonString, options);
+    }
+    static equals(a, b) {
+        return proto3.util.equals(EncryptedResponse, a, b);
+    }
+}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * IncoShield SDK
+ *
+ * TypeScript SDK for interacting with IncoShield contracts.
+ * Works in both browser and Node.js environments.
+ */
+export { bytesToHex, hexToBytes } from './binary.js';
+export * as contracts from './contracts/index.js';
+export { computeErc20AssetId } from './contracts/utils.js';
+export * from './errors.js';
+export * from './shield/index.js';
+export * as abi from './shield/shield.eip712.gen.js';