@0xobelisk/sui-cli 1.2.0-pre.120 → 1.2.0-pre.121

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@0xobelisk/sui-cli",
-  "version": "1.2.0-pre.120",
+  "version": "1.2.0-pre.121",
   "description": "Tookit for interacting with move eps framework",
   "keywords": [
     "sui",
@@ -47,8 +47,8 @@
     "yargs": "^17.7.1",
     "zod": "^3.22.3",
     "zod-validation-error": "^1.3.0",
-    "@0xobelisk/sui-client": "1.2.0-pre.120",
-    "@0xobelisk/sui-common": "1.2.0-pre.120"
+    "@0xobelisk/sui-client": "1.2.0-pre.121",
+    "@0xobelisk/sui-common": "1.2.0-pre.121"
   },
   "devDependencies": {
     "@types/cli-progress": "^3.11.5",

package/src/commands/convertJson.ts

@@ -15,7 +15,8 @@ const RUNTIME_FIELDS = [
   'dubhe_object_id',
   'original_dubhe_package_id',
   'dapp_key',
-  'start_checkpoint'
+  'start_checkpoint',
+  'package_ids'
 ];
 
 export function mergeConfigJsonRuntimeFields(

package/src/utils/publishHandler.ts

@@ -521,6 +521,10 @@ async function publishContract(
     // Insert package id to dubhe config
     let config = JSON.parse(fs.readFileSync(`${process.cwd()}/dubhe.config.json`, 'utf-8'));
     config.original_package_id = packageId;
+    // Initialize the trusted package address list. The indexer uses this list to verify
+    // event.type_.address so that forged events from other contracts are rejected even
+    // when they embed the same dapp_key string.
+    config.package_ids = [packageId];
     config.dubhe_object_id = frameworkDappHubId;
     // When deploying the dubhe framework itself, the "original dubhe package ID" is
     // the package we just published. For user packages, look up the well-known

package/src/utils/upgradeHandler.ts

@@ -22,7 +22,8 @@ import {
   readPublishedToml,
   updateEphemeralPubFile,
   getEphemeralPubFilePath,
-  updateMoveTomlAddress
+  updateMoveTomlAddress,
+  appendPackageIdToConfig
 } from './utils';
 import * as fs from 'fs';
 import * as path from 'path';
@@ -302,6 +303,14 @@ export async function upgradeHandler(
       dappStorageId || undefined
     );
 
+    // Append the new package ID to dubhe.config.json so the indexer can verify
+    // event.type_.address against all known package versions on next startup.
+    const configJsonPath = `${process.cwd()}/dubhe.config.json`;
+    appendPackageIdToConfig(configJsonPath, newPackageId);
+    if (fs.existsSync(configJsonPath)) {
+      console.log(chalk.green(`✅ Appended ${newPackageId} to dubhe.config.json package_ids`));
+    }
+
     // Only run the migration transaction if there are pending schema changes or a
     // forced version bump was requested via --bump-version.
     // A pure "bug-fix" upgrade with no new fields and no --bump-version flag does

package/src/utils/utils.ts

@@ -1234,3 +1234,19 @@ export function confirm(question: string): Promise<boolean> {
     });
   });
 }
+
+/**
+ * Append a new package ID to the `package_ids` array in dubhe.config.json.
+ * Idempotent — does nothing if the ID is already present or the file does not exist.
+ * Called by upgradeHandler after a successful on-chain upgrade so the indexer
+ * can verify event.type_.address against all known package versions on next startup.
+ */
+export function appendPackageIdToConfig(configJsonPath: string, newPackageId: string): void {
+  if (!fs.existsSync(configJsonPath)) return;
+  const configJson = JSON.parse(fs.readFileSync(configJsonPath, 'utf-8'));
+  const existingIds: string[] = Array.isArray(configJson.package_ids) ? configJson.package_ids : [];
+  if (!existingIds.includes(newPackageId)) {
+    configJson.package_ids = [...existingIds, newPackageId];
+    fs.writeFileSync(configJsonPath, JSON.stringify(configJson, null, 2));
+  }
+}