@reallyme/codec 0.1.21 → 0.2.0

package/dist/proto/generated/reallyme/codec/v1/codec_pb.d.ts

@@ -5,11 +5,6 @@ import type { Message } from "@bufbuild/protobuf";
  */
 export declare const file_reallyme_codec_v1_codec: GenFile;
 /**
- * CodecError is the public, non-PII error envelope for codec boundary failures.
- * The oneof keeps base encoding, PEM, multiformat, and canonicalization
- * failures distinct while the shared CodecErrorReason enum provides stable
- * cross-language reason codes.
- *
  * @generated from message reallyme.codec.v1.CodecError
  */
 export type CodecError = Message<"reallyme.codec.v1.CodecError"> & {
@@ -46,16 +41,812 @@ export type CodecError = Message<"reallyme.codec.v1.CodecError"> & {
          */
         value: CodecBackendError;
         case: "backend";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecBoundaryError boundary = 6;
+         */
+        value: CodecBoundaryError;
+        case: "boundary";
     } | {
         case: undefined;
         value?: undefined;
     };
+    /**
+     * Error origin is explicit so SDKs never infer caller-versus-provider
+     * attribution from branch-specific numeric reason ranges. Missing, unknown,
+     * or inconsistent origin values must fail closed as provider failures.
+     *
+     * @generated from field: reallyme.codec.v1.CodecErrorOrigin origin = 100;
+     */
+    origin: CodecErrorOrigin;
 };
 /**
  * Describes the message reallyme.codec.v1.CodecError.
  * Use `create(CodecErrorSchema)` to create a new message.
  */
 export declare const CodecErrorSchema: GenMessage<CodecError>;
+/**
+ * @generated from message reallyme.codec.v1.CodecMulticodecPrefixForNameRequest
+ */
+export type CodecMulticodecPrefixForNameRequest = Message<"reallyme.codec.v1.CodecMulticodecPrefixForNameRequest"> & {
+    /**
+     * @generated from field: string name = 1;
+     */
+    name: string;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecMulticodecPrefixForNameRequest.
+ * Use `create(CodecMulticodecPrefixForNameRequestSchema)` to create a new message.
+ */
+export declare const CodecMulticodecPrefixForNameRequestSchema: GenMessage<CodecMulticodecPrefixForNameRequest>;
+/**
+ * @generated from message reallyme.codec.v1.CodecMulticodecLookupPrefixRequest
+ */
+export type CodecMulticodecLookupPrefixRequest = Message<"reallyme.codec.v1.CodecMulticodecLookupPrefixRequest"> & {
+    /**
+     * @generated from field: bytes value = 1;
+     */
+    value: Uint8Array;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecMulticodecLookupPrefixRequest.
+ * Use `create(CodecMulticodecLookupPrefixRequestSchema)` to create a new message.
+ */
+export declare const CodecMulticodecLookupPrefixRequestSchema: GenMessage<CodecMulticodecLookupPrefixRequest>;
+/**
+ * @generated from message reallyme.codec.v1.CodecMulticodecTableRequest
+ */
+export type CodecMulticodecTableRequest = Message<"reallyme.codec.v1.CodecMulticodecTableRequest"> & {};
+/**
+ * Describes the message reallyme.codec.v1.CodecMulticodecTableRequest.
+ * Use `create(CodecMulticodecTableRequestSchema)` to create a new message.
+ */
+export declare const CodecMulticodecTableRequestSchema: GenMessage<CodecMulticodecTableRequest>;
+/**
+ * @generated from message reallyme.codec.v1.CodecMultikeyParseRequest
+ */
+export type CodecMultikeyParseRequest = Message<"reallyme.codec.v1.CodecMultikeyParseRequest"> & {
+    /**
+     * @generated from field: string multikey = 1;
+     */
+    multikey: string;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecMultikeyParseRequest.
+ * Use `create(CodecMultikeyParseRequestSchema)` to create a new message.
+ */
+export declare const CodecMultikeyParseRequestSchema: GenMessage<CodecMultikeyParseRequest>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDagCborVerifyCidRequest
+ */
+export type CodecDagCborVerifyCidRequest = Message<"reallyme.codec.v1.CodecDagCborVerifyCidRequest"> & {
+    /**
+     * @generated from field: string cid = 1;
+     */
+    cid: string;
+    /**
+     * @generated from field: bytes payload = 2;
+     */
+    payload: Uint8Array;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDagCborVerifyCidRequest.
+ * Use `create(CodecDagCborVerifyCidRequestSchema)` to create a new message.
+ */
+export declare const CodecDagCborVerifyCidRequestSchema: GenMessage<CodecDagCborVerifyCidRequest>;
+/**
+ * CodecDagCborEncodeRequest is the typed recursive DAG-CBOR encode contract.
+ * DAG-CBOR map keys are restricted to text keys by
+ * the adapter even though the reusable recursive value schema can represent
+ * the wider deterministic-CBOR key domain.
+ *
+ * @generated from message reallyme.codec.v1.CodecDagCborEncodeRequest
+ */
+export type CodecDagCborEncodeRequest = Message<"reallyme.codec.v1.CodecDagCborEncodeRequest"> & {
+    /**
+     * @generated from field: reallyme.codec.v1.CodecDeterministicCborValue value = 1;
+     */
+    value?: CodecDeterministicCborValue | undefined;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDagCborEncodeRequest.
+ * Use `create(CodecDagCborEncodeRequestSchema)` to create a new message.
+ */
+export declare const CodecDagCborEncodeRequestSchema: GenMessage<CodecDagCborEncodeRequest>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDagCborEncodeResult
+ */
+export type CodecDagCborEncodeResult = Message<"reallyme.codec.v1.CodecDagCborEncodeResult"> & {
+    /**
+     * Encoded DAG-CBOR bytes may contain the complete sensitive document.
+     *
+     * @generated from field: bytes encoded = 1;
+     */
+    encoded: Uint8Array;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDagCborEncodeResult.
+ * Use `create(CodecDagCborEncodeResultSchema)` to create a new message.
+ */
+export declare const CodecDagCborEncodeResultSchema: GenMessage<CodecDagCborEncodeResult>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDagCborDecodeRequest
+ */
+export type CodecDagCborDecodeRequest = Message<"reallyme.codec.v1.CodecDagCborDecodeRequest"> & {
+    /**
+     * Encoded DAG-CBOR bytes may contain the complete sensitive document.
+     *
+     * @generated from field: bytes encoded = 1;
+     */
+    encoded: Uint8Array;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDagCborDecodeRequest.
+ * Use `create(CodecDagCborDecodeRequestSchema)` to create a new message.
+ */
+export declare const CodecDagCborDecodeRequestSchema: GenMessage<CodecDagCborDecodeRequest>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDagCborDecodeResult
+ */
+export type CodecDagCborDecodeResult = Message<"reallyme.codec.v1.CodecDagCborDecodeResult"> & {
+    /**
+     * @generated from field: reallyme.codec.v1.CodecDeterministicCborValue value = 1;
+     */
+    value?: CodecDeterministicCborValue | undefined;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDagCborDecodeResult.
+ * Use `create(CodecDagCborDecodeResultSchema)` to create a new message.
+ */
+export declare const CodecDagCborDecodeResultSchema: GenMessage<CodecDagCborDecodeResult>;
+/**
+ * Zero limits select the documented codec defaults. An empty allowed-label list
+ * selects the default PRIVATE KEY, EC PRIVATE KEY, and PUBLIC KEY set.
+ *
+ * @generated from message reallyme.codec.v1.CodecPemDecodeOptions
+ */
+export type CodecPemDecodeOptions = Message<"reallyme.codec.v1.CodecPemDecodeOptions"> & {
+    /**
+     * @generated from field: repeated reallyme.codec.v1.CodecPemLabel allowed_labels = 1;
+     */
+    allowedLabels: CodecPemLabel[];
+    /**
+     * @generated from field: uint32 max_input_len = 2;
+     */
+    maxInputLen: number;
+    /**
+     * @generated from field: uint32 max_der_len = 3;
+     */
+    maxDerLen: number;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecPemDecodeOptions.
+ * Use `create(CodecPemDecodeOptionsSchema)` to create a new message.
+ */
+export declare const CodecPemDecodeOptionsSchema: GenMessage<CodecPemDecodeOptions>;
+/**
+ * @generated from message reallyme.codec.v1.CodecPemDecodeRequest
+ */
+export type CodecPemDecodeRequest = Message<"reallyme.codec.v1.CodecPemDecodeRequest"> & {
+    /**
+     * PEM may contain private-key material. Bytes avoid long-lived immutable
+     * managed strings and let generated hardening wipe the owned request field.
+     *
+     * @generated from field: bytes pem = 1;
+     */
+    pem: Uint8Array;
+    /**
+     * @generated from field: reallyme.codec.v1.CodecPemDecodeOptions options = 2;
+     */
+    options?: CodecPemDecodeOptions | undefined;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecPemDecodeRequest.
+ * Use `create(CodecPemDecodeRequestSchema)` to create a new message.
+ */
+export declare const CodecPemDecodeRequestSchema: GenMessage<CodecPemDecodeRequest>;
+/**
+ * Zero values select the documented codec defaults.
+ *
+ * @generated from message reallyme.codec.v1.CodecPemEncodeOptions
+ */
+export type CodecPemEncodeOptions = Message<"reallyme.codec.v1.CodecPemEncodeOptions"> & {
+    /**
+     * @generated from field: uint32 max_der_len = 1;
+     */
+    maxDerLen: number;
+    /**
+     * @generated from field: uint32 line_width = 2;
+     */
+    lineWidth: number;
+    /**
+     * @generated from field: reallyme.codec.v1.CodecPemLineEnding line_ending = 3;
+     */
+    lineEnding: CodecPemLineEnding;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecPemEncodeOptions.
+ * Use `create(CodecPemEncodeOptionsSchema)` to create a new message.
+ */
+export declare const CodecPemEncodeOptionsSchema: GenMessage<CodecPemEncodeOptions>;
+/**
+ * @generated from message reallyme.codec.v1.CodecPemEncodeRequest
+ */
+export type CodecPemEncodeRequest = Message<"reallyme.codec.v1.CodecPemEncodeRequest"> & {
+    /**
+     * @generated from field: reallyme.codec.v1.CodecPemLabel label = 1;
+     */
+    label: CodecPemLabel;
+    /**
+     * DER may contain private-key material. Generated owners are hardened to
+     * wipe this field on every success and failure path.
+     *
+     * @generated from field: bytes der = 2;
+     */
+    der: Uint8Array;
+    /**
+     * @generated from field: reallyme.codec.v1.CodecPemEncodeOptions options = 3;
+     */
+    options?: CodecPemEncodeOptions | undefined;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecPemEncodeRequest.
+ * Use `create(CodecPemEncodeRequestSchema)` to create a new message.
+ */
+export declare const CodecPemEncodeRequestSchema: GenMessage<CodecPemEncodeRequest>;
+/**
+ * @generated from message reallyme.codec.v1.CodecPemEncodeResult
+ */
+export type CodecPemEncodeResult = Message<"reallyme.codec.v1.CodecPemEncodeResult"> & {
+    /**
+     * PEM armor may contain private-key material and remains byte-oriented so
+     * SDK callers can promptly wipe the returned owner.
+     *
+     * @generated from field: bytes pem = 1;
+     */
+    pem: Uint8Array;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecPemEncodeResult.
+ * Use `create(CodecPemEncodeResultSchema)` to create a new message.
+ */
+export declare const CodecPemEncodeResultSchema: GenMessage<CodecPemEncodeResult>;
+/**
+ * CodecDeterministicCborNull is the explicit null branch for the deterministic
+ * generic-CBOR value union.
+ *
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborNull
+ */
+export type CodecDeterministicCborNull = Message<"reallyme.codec.v1.CodecDeterministicCborNull"> & {};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborNull.
+ * Use `create(CodecDeterministicCborNullSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborNullSchema: GenMessage<CodecDeterministicCborNull>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborBool
+ */
+export type CodecDeterministicCborBool = Message<"reallyme.codec.v1.CodecDeterministicCborBool"> & {
+    /**
+     * @generated from field: bool value = 1;
+     */
+    value: boolean;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborBool.
+ * Use `create(CodecDeterministicCborBoolSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborBoolSchema: GenMessage<CodecDeterministicCborBool>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborUnsignedInteger
+ */
+export type CodecDeterministicCborUnsignedInteger = Message<"reallyme.codec.v1.CodecDeterministicCborUnsignedInteger"> & {
+    /**
+     * @generated from field: uint64 value = 1;
+     */
+    value: bigint;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborUnsignedInteger.
+ * Use `create(CodecDeterministicCborUnsignedIntegerSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborUnsignedIntegerSchema: GenMessage<CodecDeterministicCborUnsignedInteger>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborNegativeInteger
+ */
+export type CodecDeterministicCborNegativeInteger = Message<"reallyme.codec.v1.CodecDeterministicCborNegativeInteger"> & {
+    /**
+     * @generated from field: sint64 value = 1;
+     */
+    value: bigint;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborNegativeInteger.
+ * Use `create(CodecDeterministicCborNegativeIntegerSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborNegativeIntegerSchema: GenMessage<CodecDeterministicCborNegativeInteger>;
+/**
+ * CodecDeterministicCborInteger is the exact integer representation supported
+ * by deterministic generic CBOR. Negative values are restricted to
+ * i64::MIN..=-1; zero and positive values must use unsigned_value.
+ *
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborInteger
+ */
+export type CodecDeterministicCborInteger = Message<"reallyme.codec.v1.CodecDeterministicCborInteger"> & {
+    /**
+     * @generated from oneof reallyme.codec.v1.CodecDeterministicCborInteger.value
+     */
+    value: {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborUnsignedInteger unsigned_value = 1;
+         */
+        value: CodecDeterministicCborUnsignedInteger;
+        case: "unsignedValue";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborNegativeInteger negative_value = 2;
+         */
+        value: CodecDeterministicCborNegativeInteger;
+        case: "negativeValue";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborInteger.
+ * Use `create(CodecDeterministicCborIntegerSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborIntegerSchema: GenMessage<CodecDeterministicCborInteger>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborText
+ */
+export type CodecDeterministicCborText = Message<"reallyme.codec.v1.CodecDeterministicCborText"> & {
+    /**
+     * @generated from field: string value = 1;
+     */
+    value: string;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborText.
+ * Use `create(CodecDeterministicCborTextSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborTextSchema: GenMessage<CodecDeterministicCborText>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborBytes
+ */
+export type CodecDeterministicCborBytes = Message<"reallyme.codec.v1.CodecDeterministicCborBytes"> & {
+    /**
+     * @generated from field: bytes value = 1;
+     */
+    value: Uint8Array;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborBytes.
+ * Use `create(CodecDeterministicCborBytesSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborBytesSchema: GenMessage<CodecDeterministicCborBytes>;
+/**
+ * CodecDeterministicCborMapKey is the closed map-key domain for deterministic
+ * generic CBOR. Protobuf map<> is intentionally not used because it cannot
+ * preserve mixed key types or duplicate entries for semantic rejection.
+ *
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborMapKey
+ */
+export type CodecDeterministicCborMapKey = Message<"reallyme.codec.v1.CodecDeterministicCborMapKey"> & {
+    /**
+     * @generated from oneof reallyme.codec.v1.CodecDeterministicCborMapKey.key
+     */
+    key: {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborInteger integer_key = 1;
+         */
+        value: CodecDeterministicCborInteger;
+        case: "integerKey";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborText text_key = 2;
+         */
+        value: CodecDeterministicCborText;
+        case: "textKey";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborMapKey.
+ * Use `create(CodecDeterministicCborMapKeySchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborMapKeySchema: GenMessage<CodecDeterministicCborMapKey>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborMapEntry
+ */
+export type CodecDeterministicCborMapEntry = Message<"reallyme.codec.v1.CodecDeterministicCborMapEntry"> & {
+    /**
+     * @generated from field: reallyme.codec.v1.CodecDeterministicCborMapKey key = 1;
+     */
+    key?: CodecDeterministicCborMapKey | undefined;
+    /**
+     * @generated from field: reallyme.codec.v1.CodecDeterministicCborValue value = 2;
+     */
+    value?: CodecDeterministicCborValue | undefined;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborMapEntry.
+ * Use `create(CodecDeterministicCborMapEntrySchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborMapEntrySchema: GenMessage<CodecDeterministicCborMapEntry>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborArray
+ */
+export type CodecDeterministicCborArray = Message<"reallyme.codec.v1.CodecDeterministicCborArray"> & {
+    /**
+     * @generated from field: repeated reallyme.codec.v1.CodecDeterministicCborValue values = 1;
+     */
+    values: CodecDeterministicCborValue[];
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborArray.
+ * Use `create(CodecDeterministicCborArraySchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborArraySchema: GenMessage<CodecDeterministicCborArray>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborMap
+ */
+export type CodecDeterministicCborMap = Message<"reallyme.codec.v1.CodecDeterministicCborMap"> & {
+    /**
+     * @generated from field: repeated reallyme.codec.v1.CodecDeterministicCborMapEntry entries = 1;
+     */
+    entries: CodecDeterministicCborMapEntry[];
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborMap.
+ * Use `create(CodecDeterministicCborMapSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborMapSchema: GenMessage<CodecDeterministicCborMap>;
+/**
+ * CodecDeterministicCborValue is the generated transport form of the
+ * deterministic generic-CBOR semantic tree. Text, bytes, and keys are treated
+ * as sensitive by generated hardening because this is a generic codec surface.
+ *
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborValue
+ */
+export type CodecDeterministicCborValue = Message<"reallyme.codec.v1.CodecDeterministicCborValue"> & {
+    /**
+     * @generated from oneof reallyme.codec.v1.CodecDeterministicCborValue.value
+     */
+    value: {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborNull null_value = 1;
+         */
+        value: CodecDeterministicCborNull;
+        case: "nullValue";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborBool bool_value = 2;
+         */
+        value: CodecDeterministicCborBool;
+        case: "boolValue";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborInteger integer_value = 3;
+         */
+        value: CodecDeterministicCborInteger;
+        case: "integerValue";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborText text_value = 4;
+         */
+        value: CodecDeterministicCborText;
+        case: "textValue";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborBytes bytes_value = 5;
+         */
+        value: CodecDeterministicCborBytes;
+        case: "bytesValue";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborArray array_value = 6;
+         */
+        value: CodecDeterministicCborArray;
+        case: "arrayValue";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborMap map_value = 7;
+         */
+        value: CodecDeterministicCborMap;
+        case: "mapValue";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborValue.
+ * Use `create(CodecDeterministicCborValueSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborValueSchema: GenMessage<CodecDeterministicCborValue>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborEncodeRequest
+ */
+export type CodecDeterministicCborEncodeRequest = Message<"reallyme.codec.v1.CodecDeterministicCborEncodeRequest"> & {
+    /**
+     * @generated from field: reallyme.codec.v1.CodecDeterministicCborValue value = 1;
+     */
+    value?: CodecDeterministicCborValue | undefined;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborEncodeRequest.
+ * Use `create(CodecDeterministicCborEncodeRequestSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborEncodeRequestSchema: GenMessage<CodecDeterministicCborEncodeRequest>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborEncodeResult
+ */
+export type CodecDeterministicCborEncodeResult = Message<"reallyme.codec.v1.CodecDeterministicCborEncodeResult"> & {
+    /**
+     * Encoded CBOR bytes may contain the complete sensitive document.
+     *
+     * @generated from field: bytes encoded = 1;
+     */
+    encoded: Uint8Array;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborEncodeResult.
+ * Use `create(CodecDeterministicCborEncodeResultSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborEncodeResultSchema: GenMessage<CodecDeterministicCborEncodeResult>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborDecodeRequest
+ */
+export type CodecDeterministicCborDecodeRequest = Message<"reallyme.codec.v1.CodecDeterministicCborDecodeRequest"> & {
+    /**
+     * Encoded CBOR bytes may contain the complete sensitive document.
+     *
+     * @generated from field: bytes encoded = 1;
+     */
+    encoded: Uint8Array;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborDecodeRequest.
+ * Use `create(CodecDeterministicCborDecodeRequestSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborDecodeRequestSchema: GenMessage<CodecDeterministicCborDecodeRequest>;
+/**
+ * @generated from message reallyme.codec.v1.CodecDeterministicCborDecodeResult
+ */
+export type CodecDeterministicCborDecodeResult = Message<"reallyme.codec.v1.CodecDeterministicCborDecodeResult"> & {
+    /**
+     * @generated from field: reallyme.codec.v1.CodecDeterministicCborValue value = 1;
+     */
+    value?: CodecDeterministicCborValue | undefined;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecDeterministicCborDecodeResult.
+ * Use `create(CodecDeterministicCborDecodeResultSchema)` to create a new message.
+ */
+export declare const CodecDeterministicCborDecodeResultSchema: GenMessage<CodecDeterministicCborDecodeResult>;
+/**
+ * CodecOperationResult is the fully discriminated generated result contract for
+ * structured operations.
+ *
+ * @generated from message reallyme.codec.v1.CodecOperationResult
+ */
+export type CodecOperationResult = Message<"reallyme.codec.v1.CodecOperationResult"> & {
+    /**
+     * @generated from oneof reallyme.codec.v1.CodecOperationResult.result
+     */
+    result: {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecMulticodecSpec multicodec_prefix_for_name = 1000;
+         */
+        value: CodecMulticodecSpec;
+        case: "multicodecPrefixForName";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecMulticodecLookupResult multicodec_lookup_prefix = 1001;
+         */
+        value: CodecMulticodecLookupResult;
+        case: "multicodecLookupPrefix";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecMulticodecTableResult multicodec_table = 1002;
+         */
+        value: CodecMulticodecTableResult;
+        case: "multicodecTable";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecMultikeyParseResult multikey_parse = 2000;
+         */
+        value: CodecMultikeyParseResult;
+        case: "multikeyParse";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDagCborVerifyCidResult dag_cbor_verify_cid = 3000;
+         */
+        value: CodecDagCborVerifyCidResult;
+        case: "dagCborVerifyCid";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDagCborEncodeResult dag_cbor_encode = 3001;
+         */
+        value: CodecDagCborEncodeResult;
+        case: "dagCborEncode";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDagCborDecodeResult dag_cbor_decode = 3002;
+         */
+        value: CodecDagCborDecodeResult;
+        case: "dagCborDecode";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecPemDecodeResult pem_decode = 4000;
+         */
+        value: CodecPemDecodeResult;
+        case: "pemDecode";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecPemEncodeResult pem_encode = 4001;
+         */
+        value: CodecPemEncodeResult;
+        case: "pemEncode";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborEncodeResult deterministic_cbor_encode = 5000;
+         */
+        value: CodecDeterministicCborEncodeResult;
+        case: "deterministicCborEncode";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborDecodeResult deterministic_cbor_decode = 5001;
+         */
+        value: CodecDeterministicCborDecodeResult;
+        case: "deterministicCborDecode";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecOperationResult.
+ * Use `create(CodecOperationResultSchema)` to create a new message.
+ */
+export declare const CodecOperationResultSchema: GenMessage<CodecOperationResult>;
+/**
+ * CodecOperationResponse removes invalid status/payload combinations for new
+ * structured callers by making success and failure explicit generated variants.
+ *
+ * @generated from message reallyme.codec.v1.CodecOperationResponse
+ */
+export type CodecOperationResponse = Message<"reallyme.codec.v1.CodecOperationResponse"> & {
+    /**
+     * @generated from oneof reallyme.codec.v1.CodecOperationResponse.outcome
+     */
+    outcome: {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecOperationResult result = 1;
+         */
+        value: CodecOperationResult;
+        case: "result";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecError error = 2;
+         */
+        value: CodecError;
+        case: "error";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecOperationResponse.
+ * Use `create(CodecOperationResponseSchema)` to create a new message.
+ */
+export declare const CodecOperationResponseSchema: GenMessage<CodecOperationResponse>;
+/**
+ * CodecOperationRequest is the single executable protobuf request. Native SDK
+ * callers continue to use typed methods; binary protobuf and generated
+ * ProtoJSON adapters select exactly one operation through this oneof. Sparse
+ * field bands keep related codec families together without creating a second
+ * out-of-band operation namespace.
+ *
+ * @generated from message reallyme.codec.v1.CodecOperationRequest
+ */
+export type CodecOperationRequest = Message<"reallyme.codec.v1.CodecOperationRequest"> & {
+    /**
+     * @generated from oneof reallyme.codec.v1.CodecOperationRequest.operation
+     */
+    operation: {
+        /**
+         * 1000-1999: multicodec table and prefix lookups. The upstream registry
+         * is intentionally broad, so keep ample room for validation and lookup
+         * operations without mixing them with adjacent codec families.
+         *
+         * @generated from field: reallyme.codec.v1.CodecMulticodecPrefixForNameRequest multicodec_prefix_for_name = 1000;
+         */
+        value: CodecMulticodecPrefixForNameRequest;
+        case: "multicodecPrefixForName";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecMulticodecLookupPrefixRequest multicodec_lookup_prefix = 1001;
+         */
+        value: CodecMulticodecLookupPrefixRequest;
+        case: "multicodecLookupPrefix";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecMulticodecTableRequest multicodec_table = 1002;
+         */
+        value: CodecMulticodecTableRequest;
+        case: "multicodecTable";
+    } | {
+        /**
+         * 2000-2999: multikey parsing and validation.
+         *
+         * @generated from field: reallyme.codec.v1.CodecMultikeyParseRequest multikey_parse = 2000;
+         */
+        value: CodecMultikeyParseRequest;
+        case: "multikeyParse";
+    } | {
+        /**
+         * 3000-3999: DAG-CBOR and content-addressed canonicalization helpers.
+         *
+         * @generated from field: reallyme.codec.v1.CodecDagCborVerifyCidRequest dag_cbor_verify_cid = 3000;
+         */
+        value: CodecDagCborVerifyCidRequest;
+        case: "dagCborVerifyCid";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDagCborEncodeRequest dag_cbor_encode = 3001;
+         */
+        value: CodecDagCborEncodeRequest;
+        case: "dagCborEncode";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDagCborDecodeRequest dag_cbor_decode = 3002;
+         */
+        value: CodecDagCborDecodeRequest;
+        case: "dagCborDecode";
+    } | {
+        /**
+         * 4000-4999: PEM armor and DER envelope helpers.
+         *
+         * @generated from field: reallyme.codec.v1.CodecPemDecodeRequest pem_decode = 4000;
+         */
+        value: CodecPemDecodeRequest;
+        case: "pemDecode";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecPemEncodeRequest pem_encode = 4001;
+         */
+        value: CodecPemEncodeRequest;
+        case: "pemEncode";
+    } | {
+        /**
+         * 5000-5999: deterministic generic-CBOR encode/decode.
+         *
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborEncodeRequest deterministic_cbor_encode = 5000;
+         */
+        value: CodecDeterministicCborEncodeRequest;
+        case: "deterministicCborEncode";
+    } | {
+        /**
+         * @generated from field: reallyme.codec.v1.CodecDeterministicCborDecodeRequest deterministic_cbor_decode = 5001;
+         */
+        value: CodecDeterministicCborDecodeRequest;
+        case: "deterministicCborDecode";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecOperationRequest.
+ * Use `create(CodecOperationRequestSchema)` to create a new message.
+ */
+export declare const CodecOperationRequestSchema: GenMessage<CodecOperationRequest>;
 /**
  * CodecMulticodecSpec is the protobuf form of a multicodec table entry.
  *
@@ -325,6 +1116,101 @@ export type CodecBackendError = Message<"reallyme.codec.v1.CodecBackendError"> &
  * Use `create(CodecBackendErrorSchema)` to create a new message.
  */
 export declare const CodecBackendErrorSchema: GenMessage<CodecBackendError>;
+/**
+ * CodecBoundaryError describes malformed, oversized, or incomplete caller
+ * requests. These failures are not backend failures and never contain parser
+ * or runtime exception text.
+ *
+ * @generated from message reallyme.codec.v1.CodecBoundaryError
+ */
+export type CodecBoundaryError = Message<"reallyme.codec.v1.CodecBoundaryError"> & {
+    /**
+     * Reason must be one of the CODEC_ERROR_REASON_BOUNDARY_* values.
+     *
+     * @generated from field: reallyme.codec.v1.CodecErrorReason reason = 1;
+     */
+    reason: CodecErrorReason;
+};
+/**
+ * Describes the message reallyme.codec.v1.CodecBoundaryError.
+ * Use `create(CodecBoundaryErrorSchema)` to create a new message.
+ */
+export declare const CodecBoundaryErrorSchema: GenMessage<CodecBoundaryError>;
+/**
+ * CodecError is the public, non-PII error envelope for codec boundary failures.
+ * The oneof keeps base encoding, PEM, multiformat, and canonicalization
+ * failures distinct while the shared CodecErrorReason enum provides stable
+ * cross-language reason codes.
+ *
+ * @generated from enum reallyme.codec.v1.CodecErrorOrigin
+ */
+export declare enum CodecErrorOrigin {
+    /**
+     * @generated from enum value: CODEC_ERROR_ORIGIN_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: CODEC_ERROR_ORIGIN_CALLER = 1;
+     */
+    CALLER = 1,
+    /**
+     * @generated from enum value: CODEC_ERROR_ORIGIN_PROVIDER = 2;
+     */
+    PROVIDER = 2
+}
+/**
+ * Describes the enum reallyme.codec.v1.CodecErrorOrigin.
+ */
+export declare const CodecErrorOriginSchema: GenEnum<CodecErrorOrigin>;
+/**
+ * CodecPemLabel is the typed protobuf representation of the PEM labels accepted
+ * by the codec parser.
+ *
+ * @generated from enum reallyme.codec.v1.CodecPemLabel
+ */
+export declare enum CodecPemLabel {
+    /**
+     * @generated from enum value: CODEC_PEM_LABEL_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: CODEC_PEM_LABEL_PRIVATE_KEY = 100;
+     */
+    PRIVATE_KEY = 100,
+    /**
+     * @generated from enum value: CODEC_PEM_LABEL_EC_PRIVATE_KEY = 110;
+     */
+    EC_PRIVATE_KEY = 110,
+    /**
+     * @generated from enum value: CODEC_PEM_LABEL_PUBLIC_KEY = 120;
+     */
+    PUBLIC_KEY = 120
+}
+/**
+ * Describes the enum reallyme.codec.v1.CodecPemLabel.
+ */
+export declare const CodecPemLabelSchema: GenEnum<CodecPemLabel>;
+/**
+ * @generated from enum reallyme.codec.v1.CodecPemLineEnding
+ */
+export declare enum CodecPemLineEnding {
+    /**
+     * @generated from enum value: CODEC_PEM_LINE_ENDING_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: CODEC_PEM_LINE_ENDING_LF = 100;
+     */
+    LF = 100,
+    /**
+     * @generated from enum value: CODEC_PEM_LINE_ENDING_CRLF = 110;
+     */
+    CRLF = 110
+}
+/**
+ * Describes the enum reallyme.codec.v1.CodecPemLineEnding.
+ */
+export declare const CodecPemLineEndingSchema: GenEnum<CodecPemLineEnding>;
 /**
  * CodecKeyMaterialKind classifies the material described by a multicodec
  * table entry. The enum is intentionally small and owned by this package so
@@ -402,7 +1288,8 @@ export declare const CodecTagSchema: GenEnum<CodecTag>;
  *   200-299: PEM armor
  *   300-399: multiformats and key envelopes
  *   400-499: CBOR/JCS/JSON canonicalization
- *   500-599: backend wire-boundary failures
+ *   500-599: backend and internal failures
+ *   600-699: caller-controlled protobuf and ProtoJSON boundary failures
  *
  * @generated from enum reallyme.codec.v1.CodecErrorReason
  */
@@ -512,23 +1399,29 @@ export declare enum CodecErrorReason {
      */
     CANONICAL_INTERNAL = 404,
     /**
-     * Backend wire-boundary failures.
+     * Backend failures.
      *
      * @generated from enum value: CODEC_ERROR_REASON_BACKEND_INTERNAL = 500;
      */
     BACKEND_INTERNAL = 500,
     /**
-     * @generated from enum value: CODEC_ERROR_REASON_BACKEND_MALFORMED_PROTOBUF = 501;
+     * Caller-controlled wire-boundary failures.
+     *
+     * @generated from enum value: CODEC_ERROR_REASON_BOUNDARY_MALFORMED_PROTOBUF = 600;
+     */
+    BOUNDARY_MALFORMED_PROTOBUF = 600,
+    /**
+     * @generated from enum value: CODEC_ERROR_REASON_BOUNDARY_MALFORMED_JSON = 601;
      */
-    BACKEND_MALFORMED_PROTOBUF = 501,
+    BOUNDARY_MALFORMED_JSON = 601,
     /**
-     * @generated from enum value: CODEC_ERROR_REASON_BACKEND_MALFORMED_JSON = 502;
+     * @generated from enum value: CODEC_ERROR_REASON_BOUNDARY_RESOURCE_LIMIT_EXCEEDED = 602;
      */
-    BACKEND_MALFORMED_JSON = 502,
+    BOUNDARY_RESOURCE_LIMIT_EXCEEDED = 602,
     /**
-     * @generated from enum value: CODEC_ERROR_REASON_BACKEND_RESOURCE_LIMIT_EXCEEDED = 503;
+     * @generated from enum value: CODEC_ERROR_REASON_BOUNDARY_MISSING_OPERATION = 603;
      */
-    BACKEND_RESOURCE_LIMIT_EXCEEDED = 503
+    BOUNDARY_MISSING_OPERATION = 603
 }
 /**
  * Describes the enum reallyme.codec.v1.CodecErrorReason.