@arcadiasystems/morse-cli 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -4,6 +4,35 @@ All notable changes to `@arcadiasystems/morse-cli` are documented here. The
 format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.0] - 2026-06-04
+
+Event-based file listing, wrapping the SDK 0.3.0 reconcile helpers. Purely
+additive; all existing commands are unchanged.
+
+### Added
+
+- `morse file list`: list files owned by an address (default: the active
+  account), or, with `--accessible`, files decryptable via allowlist membership.
+  `--address <addr>` queries another address, `--hydrate` fetches the full record
+  per file (adds `blobId`; one read each), `--limit <n>` caps results, `--json`
+  emits the summary array.
+- Event fetching via `cli/events.ts`: a paginator over `suix_queryEvents` feeding
+  the SDK's pure `reconcileFilesOwnedBy` / `reconcileFilesAccessibleBy` helpers.
+  `--indexer-url <url>` overrides the event source (any endpoint that speaks
+  `suix_queryEvents`).
+
+### Changed
+
+- Depends on `@arcadiasystems/morse-sdk` `^0.3.0`.
+
+### Notes
+
+- Listing reads `suix_queryEvents`, a deprecated Sui JSON-RPC endpoint Mysten is
+  sunsetting; on the public RPC it may degrade over time. Use `--indexer-url` to
+  point at your own indexer. Results are best-effort and eventually consistent.
+- Summaries omit `blobId`/`blobObjectId` (not in the `FileCreated` event); use
+  `--hydrate` to fetch them.
+
 ## [0.2.0] - 2026-06-04
 
 Wraps the allowlist + encrypted-file surface from `@arcadiasystems/morse-sdk`

package/README.md

@@ -6,7 +6,7 @@ content entries from your terminal, signing with a locally encrypted key.
 Content is stored on [Walrus](https://walrus.xyz); private entries are encrypted
 with [Seal](https://github.com/MystenLabs/seal).
 
-> Status: v0.2.0, targeting Sui testnet. The command surface is stable; mainnet
+> Status: v0.3.0, targeting Sui testnet. The command surface is stable; mainnet
 > support lands when the contracts are frozen.
 
 ## Requirements
@@ -250,6 +250,7 @@ auto-resolved from the active account when `--cap` is omitted.
 | `file upload <path> --name <n> [-a <id>] [--public] [--content-type <m>] [--epochs <n>]` | Upload to Walrus and register; `-a` encrypts, `--public` is world-readable. |
 | `file register --blob-id <id> --name <n> --content-type <m> --size <bytes> [-a <id>] [--public] [--blob-object-id <id>]` | Register metadata for a blob already on Walrus. |
 | `file download <file> [--out <path>] [--seal-id <hex>] [--via-aggregator]` | Download content; decrypts in place when encrypted. |
+| `file list [--address <addr>] [--accessible] [--hydrate] [--limit <n>] [--indexer-url <url>]` | List files owned by (or, with `--accessible`, decryptable by) an address. |
 | `file get <file>` | Fetch a file's on-chain metadata. |
 | `file update <file> --name <n> --content-type <m>` | Update name and MIME (owner only). |
 | `file transfer-ownership <file> <newOwner> [-y]` | Transfer the metadata right (not decrypt access). |
@@ -257,9 +258,18 @@ auto-resolved from the active account when `--cap` is omitted.
 
 Encrypting a file (`file upload -a <allowlist>`) prints a **seal id**. It is not
 recoverable from the ciphertext, so save it: `file download` needs it (via
-`--seal-id`) plus allowlist membership to decrypt. Listing "files I can decrypt
-as a member" is not supported on-chain (encrypted files are shared objects with
-no owner index); track file ids yourself or index the contract events.
+`--seal-id`) plus allowlist membership to decrypt.
+
+`file list` reconstructs the file set from contract events. Encrypted files are
+shared objects with no on-chain owner index, so listing is event-derived, not a
+direct query. By default the command reads events via `suix_queryEvents` on the
+configured Sui RPC. That endpoint is **deprecated** (Mysten is sunsetting it), so
+listing may degrade or stop working on the public RPC over time; point
+`--indexer-url <url>` at any source that speaks `suix_queryEvents` (a self-hosted
+indexer, a third-party endpoint) to stay in control. Results are best-effort and
+eventually consistent (subject to indexer lag and retention). `EncryptedFileSummary`
+rows omit `blobId`/`blobObjectId`; add `--hydrate` to fetch the full record per
+file (one read each) when you need them.
 
 ## Output and scripting
 

package/dist/index.js

@@ -148,7 +148,7 @@ import { Command } from "commander";
 // package.json
 var package_default = {
   name: "@arcadiasystems/morse-cli",
-  version: "0.2.0",
+  version: "0.3.0",
   description: "Command-line interface for the Morse decentralized CMS on Sui.",
   license: "MIT",
   type: "module",
@@ -203,7 +203,7 @@ var package_default = {
     prepublishOnly: "bun run check && bun run build"
   },
   dependencies: {
-    "@arcadiasystems/morse-sdk": "^0.2.0",
+    "@arcadiasystems/morse-sdk": "^0.3.0",
     "@mysten/seal": "1.1.3",
     "@mysten/sui": "2.16.2",
     "@mysten/walrus": "1.1.6",
@@ -902,6 +902,7 @@ import {
 
 // src/cli/context.ts
 import {
+  buildFilesEventTypes,
   DefaultSealAdapter,
   DefaultWalrusReadAdapter,
   DefaultWalrusWriteAdapter,
@@ -912,6 +913,7 @@ import {
   RpcPublicationReader
 } from "@arcadiasystems/morse-sdk";
 import { SuiGrpcClient } from "@mysten/sui/grpc";
+import { SuiJsonRpcClient } from "@mysten/sui/jsonRpc";
 async function buildReadContext(command) {
   const opts = globalOptions(command);
   const output = outputFor(command);
@@ -1026,6 +1028,23 @@ async function buildFileDownloadContext(command, opts = {}) {
     unlockSigner: () => resolveSigner(base.settings.account, process.env, base.signal)
   };
 }
+async function buildFileListContext(command, opts = {}) {
+  const base = await buildReadContext(command);
+  const originPackageId = base.config.filesEventOriginPackageId;
+  if (originPackageId === undefined) {
+    throw new CliError("File listing is unavailable on this network: no filesEventOriginPackageId in the config. Use testnet, or supply a config that sets it.", ExitCode.Usage);
+  }
+  const events = new SuiJsonRpcClient({
+    network: base.settings.network,
+    url: opts.indexerUrl ?? base.config.rpcUrl
+  });
+  return {
+    ...base,
+    filesReader: RpcFilesReader.fromMorseConfig(base.config, base.client),
+    events,
+    eventTypes: buildFilesEventTypes(originPackageId)
+  };
+}
 
 // src/format/ids.ts
 var HEAD = 6;
@@ -1111,6 +1130,20 @@ function renderAllowlistCapList(caps) {
   return caps.map((cap) => `${cap.id}  allowlist ${cap.allowlistId}`).join(`
 `);
 }
+function renderFileList(items) {
+  if (items.length === 0) {
+    return "No files.";
+  }
+  const header = "id  name  size  encrypted  allowlist  created";
+  const rows = items.map((file) => {
+    const allowlist = file.allowlistId === null ? "public" : shortId(file.allowlistId);
+    const created = new Date(file.createdAtMs).toISOString().slice(0, 10);
+    const encrypted = file.encrypted ? "yes" : "no";
+    return `${shortId(file.id)}  ${file.name}  ${file.size}  ${encrypted}  ${allowlist}  ${created}`;
+  });
+  return [header, ...rows].join(`
+`);
+}
 function renderEncryptedFile(file) {
   const lines = [
     `${file.name} (${shortId(file.id)})`,
@@ -1997,6 +2030,8 @@ import {
   createEncryptedFile,
   createPublicFile,
   deleteFile,
+  reconcileFilesAccessibleBy,
+  reconcileFilesOwnedBy,
   toAllowlistId as toAllowlistId2,
   toBlobObjectId,
   toEncryptedFileId,
@@ -2009,6 +2044,38 @@ import {
 } from "@arcadiasystems/morse-sdk";
 import { SessionKey as SessionKey2 } from "@mysten/seal";
 
+// src/cli/events.ts
+var PAGE_LIMIT2 = 50;
+async function fetchEventStream(client, eventType, signal) {
+  const out = [];
+  let cursor;
+  for (;; ) {
+    const page = await client.queryEvents({
+      query: { MoveEventType: eventType },
+      limit: PAGE_LIMIT2,
+      order: "descending",
+      ...cursor === undefined ? {} : { cursor },
+      ...signal === undefined ? {} : { signal }
+    });
+    for (const event of page.data) {
+      out.push({
+        type: event.type,
+        parsedJson: event.parsedJson,
+        timestampMs: event.timestampMs
+      });
+    }
+    if (!page.hasNextPage || page.nextCursor === null || page.nextCursor === undefined) {
+      break;
+    }
+    cursor = page.nextCursor;
+  }
+  return out;
+}
+async function fetchEventStreams(client, eventTypes, signal) {
+  const streams = await Promise.all(eventTypes.map((type) => fetchEventStream(client, type, signal)));
+  return streams.flat();
+}
+
 // src/format/hex.ts
 var HEX = /^[0-9a-fA-F]+$/;
 function encodeHex(bytes) {
@@ -2216,12 +2283,53 @@ async function runFileDownload(ctx, target, options) {
   }
   process.stdout.write(content);
 }
+async function runFileList(ctx, options) {
+  const limit = options.limit === undefined ? undefined : parseLimit(options.limit);
+  const address = options.address === undefined ? ctx.ownerAddress : toSuiAddress5(options.address);
+  if (address === undefined) {
+    throw new UsageError("No address given and no active account. Pass --address or import an account.");
+  }
+  const types = ctx.eventTypes;
+  let summaries;
+  if (options.accessible) {
+    ctx.output.info("Fetching membership and file events...");
+    const events = await fetchEventStreams(ctx.events, [
+      types.MemberAdded,
+      types.MemberRemoved,
+      types.AllowlistDeleted,
+      types.FileCreated,
+      types.FileDeleted
+    ], ctx.signal);
+    summaries = reconcileFilesAccessibleBy(events, address, types);
+  } else {
+    ctx.output.info("Fetching file events...");
+    const events = await fetchEventStreams(ctx.events, [types.FileCreated, types.FileOwnershipTransferred, types.FileDeleted], ctx.signal);
+    summaries = reconcileFilesOwnedBy(events, address, types);
+  }
+  const limited = limit === undefined ? summaries : summaries.slice(0, limit);
+  let items = limited;
+  if (options.hydrate) {
+    ctx.output.info(`Hydrating ${limited.length} file(s)...`);
+    const full = [];
+    for (const summary of limited) {
+      const record = await ctx.filesReader.getEncryptedFile(summary.id, ctx.signal);
+      full.push({ ...record, kind: "full" });
+    }
+    items = full;
+  }
+  ctx.output.result(renderFileList(items), items);
+}
 function registerFileCommands(program) {
   const file = program.command("file").description("Upload, register, read, and manage files on Walrus");
   const upload = file.command("upload <path>").description("Encrypt (or not), upload to Walrus, and register a file").requiredOption("-n, --name <name>", "File name").option("--public", "Upload a world-readable (unencrypted) file").option("--content-type <mime>", "MIME content type (inferred from the path if omitted)").option("--epochs <n>", "Walrus storage epochs", "3");
   allowlistOption(upload).action(async (path, options, command) => {
     await runFileUpload(await buildEncryptContext(command), path, options);
   });
+  file.command("list").description("List files owned by (or accessible to) an address, via event indexing").option("--address <addr>", "Address to query (default: the active account)").option("--accessible", "List files you can decrypt via allowlist membership, not just owned").option("--hydrate", "Fetch full records (adds blobId; one read per file)").option("--limit <n>", "Cap the number of results").option("--indexer-url <url>", "Event source URL (default: the RPC; uses suix_queryEvents, a deprecated Sui endpoint)").action(async (options, command) => {
+    await runFileList(await buildFileListContext(command, {
+      indexerUrl: options.indexerUrl
+    }), options);
+  });
   const download = file.command("download <file>").description("Download a file's content; decrypts in place when encrypted").option("--out <path>", "Write content to a file instead of stdout").option("--seal-id <hex>", "Seal id from upload (required to decrypt an encrypted file)");
   viaAggregatorOption(download).action(async (target, options, command) => {
     await runFileDownload(await buildFileDownloadContext(command, {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@arcadiasystems/morse-cli",
-	"version": "0.2.0",
+	"version": "0.3.0",
 	"description": "Command-line interface for the Morse decentralized CMS on Sui.",
 	"license": "MIT",
 	"type": "module",
@@ -55,7 +55,7 @@
 		"prepublishOnly": "bun run check && bun run build"
 	},
 	"dependencies": {
-		"@arcadiasystems/morse-sdk": "^0.2.0",
+		"@arcadiasystems/morse-sdk": "^0.3.0",
 		"@mysten/seal": "1.1.3",
 		"@mysten/sui": "2.16.2",
 		"@mysten/walrus": "1.1.6",