@arcadiasystems/morse-cli 0.6.0 → 0.6.1

package/CHANGELOG.md

@@ -4,6 +4,27 @@ All notable changes to `@arcadiasystems/morse-cli` are documented here. The
 format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.1] - 2026-09-09
+
+Picks up `@arcadiasystems/morse-sdk@0.6.0` and fixes a download regression it exposed. Upgrade if you use mainnet at all.
+
+### Fixed
+
+- **`file download` worked on no mainnet file, public or not.** `buildFileDownloadContext` constructed the Seal adapter eagerly, so once SDK 0.6.0 stopped pinning mainnet key servers, every download failed at context build with a Seal error before the file was even looked up. Downloading a public file never touches Seal, so the adapter is now built on first use and memoized, matching the lazy-signer pattern the same context already used. Regression covered in `test/program.test.ts` against the real context builder.
+- **Encrypted commands now explain themselves on mainnet.** They previously surfaced the SDK's `ConfigurationError`, whose advice ("pass seal.serverConfigs", "start from MAINNET_SEAL_COMMITTEE") names an API the CLI does not expose: there is no flag or env var for key servers, so on mainnet these commands cannot work at all. `entry add-encrypted`, `entry decrypt`, `file upload --encrypt` / `--recipient`, and file decryption now exit 2 with a message that says that and points at testnet or the SDK.
+- **`file upload --public` is not caught by that guard.** It shares the encrypt context but never encrypts, so `EncryptContext.seal` became a lazy factory too. Building the adapter eagerly there would have blocked public mainnet uploads the same way the eager build blocked public downloads. Both the refusal and the exemption are covered in `test/program.test.ts`.
+- **`file download` refused every public file, on every network.** The check asked whether the file had recipients, on the assumption that "a public file has no recipients". The Move contract auto-includes the owner on creation, so `members` is non-empty for every file that exists, public or not: a public file and an encrypted one both report exactly one member. The result was that `file upload --public` produced a file the CLI would not download, telling the user their plaintext was "unusable ciphertext" and pointing at `--raw`, which then wrote the correct bytes anyway.
+
+  Encryption is now determined by the Seal id prefix via the new `getRecipientFileSealPrefix` in SDK 0.7.0, which is the only reliable signal. This bug predates the mainnet work and shipped in 0.6.0 and earlier.
+
+  It escaped the tests because the download fixture defaulted to `members: []`, modelling an object the contract cannot produce. The fixture now carries a realistic owner-member, and a regression test covers a public file that has members.
+- Dependency moves to `@arcadiasystems/morse-sdk@^0.7.0`. The published 0.6.0 declared `^0.5.0`, which resolves to the SDK release whose mainnet Seal default could produce permanently unreadable ciphertext.
+
+### Known gaps
+
+- `file list` still needs `--indexer-url` on every network; public Sui fullnodes have retired the JSON-RPC event query it walks.
+- Encrypted mainnet stays blocked until Seal operator credentials are available and the CLI grows a way to pass them.
+
 ## [0.6.0] - 2026-09-09
 
 Mainnet support, consuming `@arcadiasystems/morse-sdk@0.5.0`. The Move contracts

package/README.md

@@ -6,8 +6,20 @@ content entries from your terminal, signing with a locally encrypted key.
 Content is stored on [Walrus](https://walrus.xyz); private entries are encrypted
 with [Seal](https://github.com/MystenLabs/seal).
 
-> Status: v0.6.0. Mainnet and testnet are both supported; the command surface is
-> stable.
+> Status: v0.6.1. Mainnet and testnet are both supported for public content;
+> the command surface is stable.
+>
+> **Encrypted commands are testnet-only.** `entry add-encrypted`, `entry
+> decrypt`, `file upload --encrypt` (and `--recipient`, which implies it), and
+> decrypting a downloaded file all need Seal key servers. Testnet has an open
+> set; mainnet does not, because every mainnet Seal operator is commercial, and
+> the CLI has no flag or env var for supplying one. These commands exit 2 on
+> mainnet with an explanation.
+>
+> Everything that does not encrypt works on both networks, including
+> `file upload --public`, `file download` of a public file, and the whole
+> publication, collection and entry surface. All of that is verified against
+> live mainnet, including a public upload and download round trip.
 >
 > **The Move contracts are unaudited.** On mainnet, gas and Walrus storage cost
 > real SUI and WAL, there is no faucet, and deletions are irreversible. Nothing
@@ -327,6 +339,9 @@ to fetch the full record per file (one read each) when you need them.
   created but not yet populated through the CLI; `entry add` refuses them.
 - There is no command to query Walrus blob storage expiry; `--epochs` sets the
   lease at upload time, but remaining lease time is not exposed by the SDK.
+- Encrypted commands do not work on mainnet, per the status note above. There
+  is no way to supply Seal key servers to the CLI; if you have credentials from
+  an operator, use the SDK directly for now.
 - `localnet` is accepted as a network but has no canonical deployment, so it
   fails at startup unless you point the SDK at your own package and registry.
 - `file list` walks a JSON-RPC event query that public Sui fullnodes have

package/dist/index.js

@@ -148,7 +148,7 @@ import { Command } from "commander";
 // package.json
 var package_default = {
   name: "@arcadiasystems/morse-cli",
-  version: "0.6.0",
+  version: "0.6.1",
   description: "Command-line interface for the Morse decentralized CMS on Sui.",
   license: "MIT",
   type: "module",
@@ -203,7 +203,7 @@ var package_default = {
     prepublishOnly: "bun run check && bun run build"
   },
   dependencies: {
-    "@arcadiasystems/morse-sdk": "^0.5.0",
+    "@arcadiasystems/morse-sdk": "^0.7.0",
     "@mysten/seal": "1.1.3",
     "@mysten/sui": "2.16.2",
     "@mysten/walrus": "1.1.6",
@@ -1000,10 +1000,15 @@ async function buildContentContext(command) {
     walrus
   };
 }
+function assertSealAvailable(config) {
+  if (config.sealKeyServers.length > 0) {
+    return;
+  }
+  throw new CliError(`Encrypted commands are not available on ${config.network}. Seal key servers there are operated commercially and the CLI cannot yet be pointed at one. Use --network testnet, or drive @arcadiasystems/morse-sdk directly with your own seal.serverConfigs.`, ExitCode.Usage);
+}
 async function buildEncryptContext(command) {
   const ctx = await buildContentContext(command);
-  const seal = DefaultSealAdapter.fromMorseConfig(ctx.config, {}, ctx.client);
-  return { ...ctx, seal };
+  return { ...ctx, seal: lazySeal(ctx) };
 }
 function walrusReadAdapter(base, network, viaAggregator) {
   if (viaAggregator) {
@@ -1031,6 +1036,7 @@ async function buildDecryptContext(command, opts = {}) {
   if (network === "localnet") {
     throw new CliError("Seal decryption is not available on localnet. Use testnet or mainnet.", ExitCode.Usage);
   }
+  assertSealAvailable(base.config);
   const seal = DefaultSealAdapter.fromMorseConfig(base.config, {}, base.client);
   return {
     ...base,
@@ -1052,10 +1058,18 @@ async function buildFileDownloadContext(command, opts = {}) {
       packageId: base.config.packageId
     }),
     walrusRead: walrusReadAdapter(base, network, Boolean(opts.viaAggregator)),
-    seal: DefaultSealAdapter.fromMorseConfig(base.config, {}, base.client),
+    seal: lazySeal(base),
     unlockSigner: () => resolveSigner(base.settings.account, process.env, base.signal)
   };
 }
+function lazySeal(base) {
+  let adapter;
+  return () => {
+    assertSealAvailable(base.config);
+    adapter ??= DefaultSealAdapter.fromMorseConfig(base.config, {}, base.client);
+    return adapter;
+  };
+}
 async function buildFileListContext(command, opts = {}) {
   const base = await buildReadContext(command);
   const originPackageId = base.config.recipientFileEventOriginPackageId;
@@ -1681,7 +1695,7 @@ async function runEntryAddEncrypted(ctx, name, options) {
   ctx.output.info(`Encrypting and uploading ${plaintext.length} bytes...`);
   const result = await addEncryptedEntryFromBytes(ctx.adapter, ctx.config, {
     walrus: ctx.walrus,
-    seal: ctx.seal,
+    seal: ctx.seal(),
     publicationId: id,
     publisherCapId,
     collectionName: collection,
@@ -2168,7 +2182,7 @@ async function runFileUpload(ctx, path, options) {
   }
   const result = await uploadEncryptedRecipientFileFromBytes(ctx.adapter, ctx.config, {
     walrus: ctx.walrus,
-    seal: ctx.seal,
+    seal: ctx.seal(),
     plaintext: bytes,
     recipients,
     name: options.name,
@@ -2238,7 +2252,7 @@ async function decryptRecipientFile(ctx, fileId, ciphertext, prefix, nonce) {
     signer: keypair,
     suiClient: ctx.client
   });
-  return ctx.seal.decryptUnderRecipientFile(ciphertext, {
+  return ctx.seal().decryptUnderRecipientFile(ciphertext, {
     sessionKey,
     sealId,
     fileId
@@ -2254,9 +2268,10 @@ async function runFileDownload(ctx, positional, options) {
   }
   const fileId = toRecipientFileId(target.fileId);
   const file = await ctx.filesReader.getRecipientFile(fileId, ctx.signal);
-  if (target.decrypt === undefined && file.members.length > 0) {
+  const encrypted = target.decrypt !== undefined || await ctx.filesReader.getRecipientFileSealPrefix(fileId, ctx.signal) !== null;
+  if (target.decrypt === undefined && encrypted) {
     if (!options.raw) {
-      throw new UsageError("This file has a recipient list, so its bytes are encrypted. Pass --share (or --prefix and --nonce) to decrypt, or --raw to write the raw ciphertext anyway.");
+      throw new UsageError("This file is encrypted. Pass --share (or --prefix and --nonce) to decrypt, or --raw to write the raw ciphertext anyway.");
     }
     ctx.output.warn("Writing raw ciphertext (--raw); the output is unusable without decryption.");
   }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@arcadiasystems/morse-cli",
-	"version": "0.6.0",
+	"version": "0.6.1",
 	"description": "Command-line interface for the Morse decentralized CMS on Sui.",
 	"license": "MIT",
 	"type": "module",
@@ -55,7 +55,7 @@
 		"prepublishOnly": "bun run check && bun run build"
 	},
 	"dependencies": {
-		"@arcadiasystems/morse-sdk": "^0.5.0",
+		"@arcadiasystems/morse-sdk": "^0.7.0",
 		"@mysten/seal": "1.1.3",
 		"@mysten/sui": "2.16.2",
 		"@mysten/walrus": "1.1.6",