@arcadiasystems/morse-sdk 0.1.0

package/dist/seal/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/seal/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IAClC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B;;;;;;;;OAQG;IACH,OAAO,CACN,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,OAAO,CACN,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC,CAAC;CACvB"}

package/dist/seal/adapter.js

@@ -0,0 +1,7 @@
+/**
+ * Seal adapter interface: encrypt content under a publisher Seal identity
+ * and decrypt with a consumer-supplied `SessionKey`. Configuration
+ * (key servers, threshold, package id) is bound at construction time.
+ */
+export {};
+//# sourceMappingURL=adapter.js.map

package/dist/seal/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/seal/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/seal/default-adapter.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Default `SealAdapter` wrapping `@mysten/seal`'s `SealClient`. Constructed
+ * once with the morse package id (which Seal embeds into ciphertext
+ * envelopes), the key-server list, and the TSS threshold. Threshold lives on
+ * the config rather than per-call: ciphertexts encoded under one threshold
+ * are not decryptable under another, so per-call thresholds would
+ * silently break recoverability when changed.
+ */
+import { type KeyServerConfig, type SealCompatibleClient, type SessionKey } from "@mysten/seal";
+import type { PackageId } from "../types.js";
+import type { SealAdapter, SealDecryptOptions, SealEncryptOptions, SealEncryptResult } from "./adapter.js";
+/**
+ * Configuration for `DefaultSealAdapter`. `packageId` MUST be the deployment's
+ * `originalPackageId`: Seal binds the package address into ciphertext
+ * envelopes and into key-server proofs, so a post-upgrade `packageId` would
+ * make pre-upgrade ciphertexts undecryptable.
+ */
+export interface SealAdapterConfig {
+    readonly packageId: PackageId;
+    readonly serverConfigs: readonly KeyServerConfig[];
+    readonly threshold: number;
+    readonly verifyKeyServers?: boolean;
+    readonly timeout?: number;
+}
+/** Narrow structural slice of `SealClient` actually used by the adapter. */
+interface SealClientLike {
+    encrypt(args: {
+        threshold: number;
+        packageId: string;
+        id: string;
+        data: Uint8Array;
+        aad?: Uint8Array;
+    }): Promise<{
+        encryptedObject: Uint8Array;
+        key: Uint8Array;
+    }>;
+    decrypt(args: {
+        data: Uint8Array;
+        sessionKey: SessionKey;
+        txBytes: Uint8Array;
+    }): Promise<Uint8Array>;
+}
+interface DefaultSealAdapterOptions {
+    readonly client: SealClientLike;
+    readonly suiClient: SealCompatibleClient;
+    readonly packageId: PackageId;
+    readonly threshold: number;
+}
+/** `SealAdapter` implementation backed by `@mysten/seal`. */
+export declare class DefaultSealAdapter implements SealAdapter {
+    private readonly client;
+    private readonly suiClient;
+    private readonly packageId;
+    private readonly threshold;
+    constructor(options: DefaultSealAdapterOptions);
+    /**
+     * Build an adapter from a morse package config (typically
+     * `morseConfig({ network })`). Defaults `serverConfigs` from
+     * `morseConfig.sealKeyServers` (the canonical testnet allowlist baked
+     * into morse-sdk) when omitted; defaults `threshold` to
+     * `min(2, serverConfigs.length)` when omitted. Picks
+     * `originalPackageId ?? packageId` internally; passing a post-upgrade
+     * `packageId` directly would silently produce ciphertexts that become
+     * undecryptable across upgrades.
+     *
+     * Pass `seal: {}` for the default path; supply `serverConfigs` when you
+     * want a custom set (paid plans, alternate trust assumptions, region
+     * pinning), or `threshold` when you want a non-default TSS shape.
+     *
+     * @throws {ConfigurationError} If neither `seal.serverConfigs` nor
+     *   `morseConfig.sealKeyServers` provide any servers (e.g. mainnet
+     *   pre-freeze).
+     */
+    static fromMorseConfig(morseConfig: {
+        packageId: PackageId;
+        originalPackageId?: PackageId;
+        sealKeyServers?: readonly KeyServerConfig[];
+    }, seal: Partial<Omit<SealAdapterConfig, "packageId">>, suiClient: SealCompatibleClient): DefaultSealAdapter;
+    /**
+     * Build an adapter from a `SealAdapterConfig` and a Sui-compatible client
+     * (a `SuiGrpcClient` satisfies the `SealCompatibleClient` shape). Use
+     * `fromMorseConfig` instead when you have a `morseConfig({network})`.
+     */
+    static fromConfig(config: SealAdapterConfig, suiClient: SealCompatibleClient): DefaultSealAdapter;
+    encrypt(plaintext: Uint8Array, options: SealEncryptOptions): Promise<SealEncryptResult>;
+    decrypt(ciphertext: Uint8Array, options: SealDecryptOptions): Promise<Uint8Array>;
+    private buildSealApproveTxBytes;
+}
+export {};
+//# sourceMappingURL=default-adapter.d.ts.map

package/dist/seal/default-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-adapter.d.ts","sourceRoot":"","sources":["../../src/seal/default-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAIN,KAAK,eAAe,EAGpB,KAAK,oBAAoB,EACzB,KAAK,UAAU,EAEf,MAAM,cAAc,CAAC;AAUtB,OAAO,KAAK,EACX,SAAS,EAIT,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACX,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,MAAM,cAAc,CAAC;AAGtB;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,SAAS,eAAe,EAAE,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,4EAA4E;AAC5E,UAAU,cAAc;IACvB,OAAO,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,UAAU,CAAC;QACjB,GAAG,CAAC,EAAE,UAAU,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,eAAe,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,EAAE;QACb,IAAI,EAAE,UAAU,CAAC;QACjB,UAAU,EAAE,UAAU,CAAC;QACvB,OAAO,EAAE,UAAU,CAAC;KACpB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACxB;AAED,UAAU,yBAAyB;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,6DAA6D;AAC7D,qBAAa,kBAAmB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,EAAE,yBAAyB;IAO9C;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,eAAe,CACrB,WAAW,EAAE;QACZ,SAAS,EAAE,SAAS,CAAC;QACrB,iBAAiB,CAAC,EAAE,SAAS,CAAC;QAC9B,cAAc,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;KAC5C,EACD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,EACnD,SAAS,EAAE,oBAAoB,GAC7B,kBAAkB;IAuBrB;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAChB,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,oBAAoB,GAC7B,kBAAkB;IAiCf,OAAO,CACZ,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC;IAcvB,OAAO,CACZ,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC;YAgCR,uBAAuB;CAyBrC"}

package/dist/seal/default-adapter.js

@@ -0,0 +1,187 @@
+/**
+ * Default `SealAdapter` wrapping `@mysten/seal`'s `SealClient`. Constructed
+ * once with the morse package id (which Seal embeds into ciphertext
+ * envelopes), the key-server list, and the TSS threshold. Threshold lives on
+ * the config rather than per-call: ciphertexts encoded under one threshold
+ * are not decryptable under another, so per-call thresholds would
+ * silently break recoverability when changed.
+ */
+import { DecryptionError, ExpiredSessionKeyError, InvalidCiphertextError, NoAccessError, SealClient, TooManyFailedFetchKeyRequestsError, } from "@mysten/seal";
+import { Transaction } from "@mysten/sui/transactions";
+import { ConfigurationError, SealError, TransportError, ValidationError, } from "../errors.js";
+import { decodePublisherSealId } from "./identity.js";
+/** `SealAdapter` implementation backed by `@mysten/seal`. */
+export class DefaultSealAdapter {
+    client;
+    suiClient;
+    packageId;
+    threshold;
+    constructor(options) {
+        this.client = options.client;
+        this.suiClient = options.suiClient;
+        this.packageId = options.packageId;
+        this.threshold = options.threshold;
+    }
+    /**
+     * Build an adapter from a morse package config (typically
+     * `morseConfig({ network })`). Defaults `serverConfigs` from
+     * `morseConfig.sealKeyServers` (the canonical testnet allowlist baked
+     * into morse-sdk) when omitted; defaults `threshold` to
+     * `min(2, serverConfigs.length)` when omitted. Picks
+     * `originalPackageId ?? packageId` internally; passing a post-upgrade
+     * `packageId` directly would silently produce ciphertexts that become
+     * undecryptable across upgrades.
+     *
+     * Pass `seal: {}` for the default path; supply `serverConfigs` when you
+     * want a custom set (paid plans, alternate trust assumptions, region
+     * pinning), or `threshold` when you want a non-default TSS shape.
+     *
+     * @throws {ConfigurationError} If neither `seal.serverConfigs` nor
+     *   `morseConfig.sealKeyServers` provide any servers (e.g. mainnet
+     *   pre-freeze).
+     */
+    static fromMorseConfig(morseConfig, seal, suiClient) {
+        const serverConfigs = seal.serverConfigs ?? morseConfig.sealKeyServers ?? [];
+        if (serverConfigs.length === 0) {
+            throw new ConfigurationError("morseConfig has no canonical Seal key servers for this network and no override was supplied. Pass seal.serverConfigs explicitly, or use a network where the allowlist is pinned.");
+        }
+        const threshold = seal.threshold ?? Math.min(2, serverConfigs.length);
+        return DefaultSealAdapter.fromConfig({
+            packageId: morseConfig.originalPackageId ?? morseConfig.packageId,
+            serverConfigs,
+            threshold,
+            ...(seal.verifyKeyServers === undefined
+                ? {}
+                : { verifyKeyServers: seal.verifyKeyServers }),
+            ...(seal.timeout === undefined ? {} : { timeout: seal.timeout }),
+        }, suiClient);
+    }
+    /**
+     * Build an adapter from a `SealAdapterConfig` and a Sui-compatible client
+     * (a `SuiGrpcClient` satisfies the `SealCompatibleClient` shape). Use
+     * `fromMorseConfig` instead when you have a `morseConfig({network})`.
+     */
+    static fromConfig(config, suiClient) {
+        if (config.serverConfigs.length === 0) {
+            throw new ValidationError("SealAdapterConfig.serverConfigs must contain at least one entry", "serverConfigs");
+        }
+        if (!Number.isInteger(config.threshold) ||
+            config.threshold < 1 ||
+            config.threshold > config.serverConfigs.length) {
+            throw new ValidationError(`SealAdapterConfig.threshold must be an integer in [1, ${config.serverConfigs.length}]; got ${config.threshold}`, "threshold");
+        }
+        const client = new SealClient({
+            suiClient,
+            serverConfigs: [...config.serverConfigs],
+            ...(config.verifyKeyServers === undefined
+                ? {}
+                : { verifyKeyServers: config.verifyKeyServers }),
+            ...(config.timeout === undefined ? {} : { timeout: config.timeout }),
+        });
+        return new DefaultSealAdapter({
+            client,
+            suiClient,
+            packageId: config.packageId,
+            threshold: config.threshold,
+        });
+    }
+    async encrypt(plaintext, options) {
+        const id = bytesToHex(options.sealId);
+        const result = await runSealCall(() => this.client.encrypt({
+            threshold: this.threshold,
+            packageId: this.packageId,
+            id,
+            data: plaintext,
+            ...(options.aad === undefined ? {} : { aad: options.aad }),
+        }));
+        return { ciphertext: result.encryptedObject };
+    }
+    async decrypt(ciphertext, options) {
+        // `decodePublisherSealId` throws `ValidationError` on a malformed or
+        // tampered `SealId` (unknown policy tag). On-chain bytes are
+        // contract-enforced, but `Revision.sealId` from a reader brands the
+        // payload without re-validating client-side, and a hostile indexer
+        // could surface arbitrary bytes. Rewrap as `SealError("decrypt-failed")`
+        // so the throw matches `SealAdapter.decrypt`'s documented error contract.
+        let publicationId;
+        try {
+            ({ publicationId } = decodePublisherSealId(options.sealId));
+        }
+        catch (cause) {
+            throw new SealError("decrypt-failed", `Seal identity is malformed or uses an unsupported policy tag: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+        }
+        const txBytes = await this.buildSealApproveTxBytes(publicationId, options.publisherCapId, options.sealId, options.sessionKey);
+        return runSealCall(() => this.client.decrypt({
+            data: ciphertext,
+            sessionKey: options.sessionKey,
+            txBytes,
+        }));
+    }
+    async buildSealApproveTxBytes(publicationId, publisherCapId, sealId, sessionKey) {
+        const tx = new Transaction();
+        tx.moveCall({
+            target: `${this.packageId}::publication::seal_approve_publisher`,
+            arguments: [
+                tx.pure.vector("u8", Array.from(sealId)),
+                tx.object(publicationId),
+                tx.object(publisherCapId),
+            ],
+        });
+        tx.setSender(sessionKey.getAddress());
+        try {
+            return await tx.build({
+                client: this.suiClient,
+                onlyTransactionKind: true,
+            });
+        }
+        catch (cause) {
+            throw new TransportError("Failed to build seal_approve PTB", { cause });
+        }
+    }
+}
+async function runSealCall(call) {
+    try {
+        return await call();
+    }
+    catch (cause) {
+        const mapped = mapSealError(cause);
+        if (mapped) {
+            throw mapped;
+        }
+        throw new TransportError(sealErrorMessage(cause), { cause });
+    }
+}
+function mapSealError(cause) {
+    if (cause instanceof NoAccessError) {
+        return new SealError("no-access", `Seal denied access: ${cause.message}`, {
+            cause,
+        });
+    }
+    if (cause instanceof ExpiredSessionKeyError) {
+        return new SealError("session-expired", "Seal session key expired", {
+            cause,
+        });
+    }
+    if (cause instanceof TooManyFailedFetchKeyRequestsError) {
+        return new SealError("rate-limited", "Seal key servers rejected too many requests", { cause });
+    }
+    if (cause instanceof DecryptionError ||
+        cause instanceof InvalidCiphertextError) {
+        return new SealError("decrypt-failed", `Seal decryption failed: ${cause.message}`, { cause });
+    }
+    return null;
+}
+function sealErrorMessage(cause) {
+    if (cause instanceof Error) {
+        return `Seal call failed: ${cause.message}`;
+    }
+    return "Seal call failed";
+}
+function bytesToHex(bytes) {
+    let hex = "0x";
+    for (const byte of bytes) {
+        hex += byte.toString(16).padStart(2, "0");
+    }
+    return hex;
+}
+//# sourceMappingURL=default-adapter.js.map

package/dist/seal/default-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-adapter.js","sourceRoot":"","sources":["../../src/seal/default-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACN,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EAEtB,aAAa,EACb,UAAU,EAGV,kCAAkC,GAClC,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,OAAO,EACN,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,eAAe,GACf,MAAM,cAAc,CAAC;AAatB,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAuCtD,6DAA6D;AAC7D,MAAM,OAAO,kBAAkB;IACb,MAAM,CAAiB;IACvB,SAAS,CAAuB;IAChC,SAAS,CAAY;IACrB,SAAS,CAAS;IAEnC,YAAY,OAAkC;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,eAAe,CACrB,WAIC,EACD,IAAmD,EACnD,SAA+B;QAE/B,MAAM,aAAa,GAClB,IAAI,CAAC,aAAa,IAAI,WAAW,CAAC,cAAc,IAAI,EAAE,CAAC;QACxD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,kBAAkB,CAC3B,kLAAkL,CAClL,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,kBAAkB,CAAC,UAAU,CACnC;YACC,SAAS,EAAE,WAAW,CAAC,iBAAiB,IAAI,WAAW,CAAC,SAAS;YACjE,aAAa;YACb,SAAS;YACT,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;SAChE,EACD,SAAS,CACT,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAChB,MAAyB,EACzB,SAA+B;QAE/B,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,eAAe,CACxB,iEAAiE,EACjE,eAAe,CACf,CAAC;QACH,CAAC;QACD,IACC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;YACnC,MAAM,CAAC,SAAS,GAAG,CAAC;YACpB,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,EAC7C,CAAC;YACF,MAAM,IAAI,eAAe,CACxB,yDAAyD,MAAM,CAAC,aAAa,CAAC,MAAM,UAAU,MAAM,CAAC,SAAS,EAAE,EAChH,WAAW,CACX,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;YAC7B,SAAS;YACT,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;YACxC,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,OAAO,IAAI,kBAAkB,CAAC;YAC7B,MAAM;YACN,SAAS;YACT,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC3B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,SAAqB,EACrB,OAA2B;QAE3B,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CACrC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,EAAE;YACF,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SAC1D,CAAC,CACF,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,UAAsB,EACtB,OAA2B;QAE3B,qEAAqE;QACrE,6DAA6D;QAC7D,oEAAoE;QACpE,mEAAmE;QACnE,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,aAA4B,CAAC;QACjC,IAAI,CAAC;YACJ,CAAC,EAAE,aAAa,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAClB,gBAAgB,EAChB,iEAAiE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACzH,EAAE,KAAK,EAAE,CACT,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CACjD,aAAa,EACb,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,UAAU,CAClB,CAAC;QACF,OAAO,WAAW,CAAC,GAAG,EAAE,CACvB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO;SACP,CAAC,CACF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACpC,aAA4B,EAC5B,cAA8B,EAC9B,MAAc,EACd,UAAsB;QAEtB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;QAC7B,EAAE,CAAC,QAAQ,CAAC;YACX,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,uCAAuC;YAChE,SAAS,EAAE;gBACV,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;gBACxB,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC;aACzB;SACD,CAAC,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,SAAyC;gBACtD,mBAAmB,EAAE,IAAI;aACzB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;CACD;AAED,KAAK,UAAU,WAAW,CAAI,IAAsB;IACnD,IAAI,CAAC;QACJ,OAAO,MAAM,IAAI,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,CAAC;QACd,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACpC,OAAO,IAAI,SAAS,CAAC,WAAW,EAAE,uBAAuB,KAAK,CAAC,OAAO,EAAE,EAAE;YACzE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;QAC7C,OAAO,IAAI,SAAS,CAAC,iBAAiB,EAAE,0BAA0B,EAAE;YACnE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,YAAY,kCAAkC,EAAE,CAAC;QACzD,OAAO,IAAI,SAAS,CACnB,cAAc,EACd,6CAA6C,EAC7C,EAAE,KAAK,EAAE,CACT,CAAC;IACH,CAAC;IACD,IACC,KAAK,YAAY,eAAe;QAChC,KAAK,YAAY,sBAAsB,EACtC,CAAC;QACF,OAAO,IAAI,SAAS,CACnB,gBAAgB,EAChB,2BAA2B,KAAK,CAAC,OAAO,EAAE,EAC1C,EAAE,KAAK,EAAE,CACT,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACvC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO,qBAAqB,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACpC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/seal/identity.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Seal identity (`SealId`) construction and inspection. The Move layer
+ * enforces the byte format on every encrypted revision and on the
+ * `seal_approve_publisher` entry, so both encode and decode here must match
+ * the contract byte-for-byte.
+ *
+ * Layout: `publication_id(32) || policy_tag(u8=1) || nonce(>=1)`. Total
+ * length > 33 bytes (`ESealInvalidId` otherwise).
+ */
+import { type PublicationId, type SealId, SealPolicyTag } from "../types.js";
+/** Structured view of a publisher Seal identity. */
+export interface SealIdParts {
+    readonly publicationId: PublicationId;
+    readonly policyTag: SealPolicyTag;
+    readonly nonce: Uint8Array;
+}
+/**
+ * Build a publisher-policy Seal identity for a publication. The nonce must
+ * be at least 1 byte (the Move contract's `id.length() > 33` invariant);
+ * nonces of 16 random bytes are typical.
+ *
+ * @throws {ValidationError} If `publicationId` is not a 0x-prefixed 64-char
+ *   hex string, or `nonce` is shorter than 1 byte.
+ */
+export declare function buildPublisherSealId(publicationId: PublicationId, nonce: Uint8Array): SealId;
+/**
+ * Decode the structural fields of a Seal identity. The brand guarantees the
+ * byte layout, so this never throws on a properly-built identity.
+ */
+export declare function decodePublisherSealId(id: SealId): SealIdParts;
+//# sourceMappingURL=identity.d.ts.map

package/dist/seal/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/seal/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAO7E,oDAAoD;AACpD,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CACnC,aAAa,EAAE,aAAa,EAC5B,KAAK,EAAE,UAAU,GACf,MAAM,CAaR;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,CAS7D"}

package/dist/seal/identity.js

@@ -0,0 +1,79 @@
+/**
+ * Seal identity (`SealId`) construction and inspection. The Move layer
+ * enforces the byte format on every encrypted revision and on the
+ * `seal_approve_publisher` entry, so both encode and decode here must match
+ * the contract byte-for-byte.
+ *
+ * Layout: `publication_id(32) || policy_tag(u8=1) || nonce(>=1)`. Total
+ * length > 33 bytes (`ESealInvalidId` otherwise).
+ */
+import { ValidationError } from "../errors.js";
+import { SealPolicyTag } from "../types.js";
+const PUBLICATION_ID_BYTES = 32;
+const POLICY_TAG_OFFSET = PUBLICATION_ID_BYTES;
+const NONCE_OFFSET = POLICY_TAG_OFFSET + 1;
+const MIN_NONCE_BYTES = 1;
+/**
+ * Build a publisher-policy Seal identity for a publication. The nonce must
+ * be at least 1 byte (the Move contract's `id.length() > 33` invariant);
+ * nonces of 16 random bytes are typical.
+ *
+ * @throws {ValidationError} If `publicationId` is not a 0x-prefixed 64-char
+ *   hex string, or `nonce` is shorter than 1 byte.
+ */
+export function buildPublisherSealId(publicationId, nonce) {
+    if (nonce.length < MIN_NONCE_BYTES) {
+        throw new ValidationError(`Seal nonce must be at least ${MIN_NONCE_BYTES} byte(s), got ${nonce.length}`, "nonce");
+    }
+    const prefix = publicationIdToBytes(publicationId);
+    const out = new Uint8Array(PUBLICATION_ID_BYTES + 1 + nonce.length);
+    out.set(prefix, 0);
+    out[POLICY_TAG_OFFSET] = SealPolicyTag.Publisher;
+    out.set(nonce, NONCE_OFFSET);
+    return out;
+}
+/**
+ * Decode the structural fields of a Seal identity. The brand guarantees the
+ * byte layout, so this never throws on a properly-built identity.
+ */
+export function decodePublisherSealId(id) {
+    const prefix = id.subarray(0, PUBLICATION_ID_BYTES);
+    const policyTagByte = id[POLICY_TAG_OFFSET] ?? 0;
+    const nonce = id.slice(NONCE_OFFSET);
+    return {
+        publicationId: bytesToPublicationId(prefix),
+        policyTag: policyTagToEnum(policyTagByte),
+        nonce,
+    };
+}
+function policyTagToEnum(byte) {
+    if (byte === SealPolicyTag.Publisher) {
+        return SealPolicyTag.Publisher;
+    }
+    throw new ValidationError(`Unknown Seal policy tag: ${byte} (only ${SealPolicyTag.Publisher} = Publisher is defined)`, "policyTag");
+}
+function publicationIdToBytes(value) {
+    const stripped = value.startsWith("0x")
+        ? value.slice(2)
+        : value;
+    if (stripped.length > PUBLICATION_ID_BYTES * 2) {
+        throw new ValidationError(`PublicationId exceeds ${PUBLICATION_ID_BYTES} bytes`, "publicationId");
+    }
+    const padded = stripped.padStart(PUBLICATION_ID_BYTES * 2, "0");
+    if (!/^[0-9a-f]+$/i.test(padded)) {
+        throw new ValidationError(`PublicationId is not valid hex: ${value}`, "publicationId");
+    }
+    const out = new Uint8Array(PUBLICATION_ID_BYTES);
+    for (let i = 0; i < PUBLICATION_ID_BYTES; i += 1) {
+        out[i] = Number.parseInt(padded.slice(i * 2, i * 2 + 2), 16);
+    }
+    return out;
+}
+function bytesToPublicationId(bytes) {
+    let hex = "";
+    for (const byte of bytes) {
+        hex += byte.toString(16).padStart(2, "0");
+    }
+    return `0x${hex}`;
+}
+//# sourceMappingURL=identity.js.map

package/dist/seal/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/seal/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAmC,aAAa,EAAE,MAAM,aAAa,CAAC;AAE7E,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAC/C,MAAM,YAAY,GAAG,iBAAiB,GAAG,CAAC,CAAC;AAC3C,MAAM,eAAe,GAAG,CAAC,CAAC;AAS1B;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CACnC,aAA4B,EAC5B,KAAiB;IAEjB,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CACxB,+BAA+B,eAAe,iBAAiB,KAAK,CAAC,MAAM,EAAE,EAC7E,OAAO,CACP,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,oBAAoB,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACpE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnB,GAAG,CAAC,iBAAiB,CAAC,GAAG,aAAa,CAAC,SAAS,CAAC;IACjD,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC7B,OAAO,GAAa,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC/C,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACrC,OAAO;QACN,aAAa,EAAE,oBAAoB,CAAC,MAAM,CAAC;QAC3C,SAAS,EAAE,eAAe,CAAC,aAAa,CAAC;QACzC,KAAK;KACL,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACpC,IAAI,IAAI,KAAK,aAAa,CAAC,SAAS,EAAE,CAAC;QACtC,OAAO,aAAa,CAAC,SAAS,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,eAAe,CACxB,4BAA4B,IAAI,UAAU,aAAa,CAAC,SAAS,0BAA0B,EAC3F,WAAW,CACX,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAoB;IACjD,MAAM,QAAQ,GAAI,KAAgB,CAAC,UAAU,CAAC,IAAI,CAAC;QAClD,CAAC,CAAE,KAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAE,KAAgB,CAAC;IACrB,IAAI,QAAQ,CAAC,MAAM,GAAG,oBAAoB,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CACxB,yBAAyB,oBAAoB,QAAQ,EACrD,eAAe,CACf,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,eAAe,CACxB,mCAAmC,KAAK,EAAE,EAC1C,eAAe,CACf,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,oBAAoB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAiB;IAC9C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,GAAG,EAAmB,CAAC;AACpC,CAAC"}

package/dist/seal/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Seal subpackage barrel: identity construction, the adapter interface, and
+ * the default adapter wrapping `@mysten/seal`.
+ */
+export type { SealAdapter, SealDecryptOptions, SealEncryptOptions, SealEncryptResult, } from "./adapter.js";
+export { DefaultSealAdapter, type SealAdapterConfig, } from "./default-adapter.js";
+export { buildPublisherSealId, decodePublisherSealId, type SealIdParts, } from "./identity.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/seal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/seal/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EACX,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,kBAAkB,EAClB,KAAK,iBAAiB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,WAAW,GAChB,MAAM,eAAe,CAAC"}

package/dist/seal/index.js

@@ -0,0 +1,7 @@
+/**
+ * Seal subpackage barrel: identity construction, the adapter interface, and
+ * the default adapter wrapping `@mysten/seal`.
+ */
+export { DefaultSealAdapter, } from "./default-adapter.js";
+export { buildPublisherSealId, decodePublisherSealId, } from "./identity.js";
+//# sourceMappingURL=index.js.map

package/dist/seal/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/seal/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,EACN,kBAAkB,GAElB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,oBAAoB,EACpB,qBAAqB,GAErB,MAAM,eAAe,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,160 @@
+/**
+ * Public domain types, mirroring `morse-contracts`.
+ *
+ * Mapping conventions: Move `u64` to `number`; Move `Option<T>` to `T | null`;
+ * Move enums to string-discriminated unions; object IDs are branded strings.
+ */
+type Brand<T, Tag extends string> = T & {
+    readonly __brand: Tag;
+};
+/** Sui package ID of a deployed `publication` Move package. */
+export type PackageId = Brand<string, "PackageId">;
+/** Sui object ID of the shared `PublicationRegistry`. */
+export type RegistryId = Brand<string, "RegistryId">;
+/** Sui object ID of a `Publication`. */
+export type PublicationId = Brand<string, "PublicationId">;
+/** Sui object ID of an `OwnerCap`. */
+export type OwnerCapId = Brand<string, "OwnerCapId">;
+/** Sui object ID of a `PublisherCap`. */
+export type PublisherCapId = Brand<string, "PublisherCapId">;
+/** Sui object ID of a Walrus `Blob`. */
+export type BlobObjectId = Brand<string, "BlobObjectId">;
+/**
+ * Walrus content-addressed blob ID. URL-safe base64 of the 32-byte content
+ * digest, 43 chars without padding. Distinct from `BlobObjectId`, which is
+ * the Sui object holding the blob.
+ */
+export type WalrusBlobId = Brand<string, "WalrusBlobId">;
+/**
+ * 37-byte quilt patch ID: `quilt_id(32) || version(1) || start(2) || end(2)`,
+ * u16 indices little-endian (BCS canonical). Branded to prevent accidental
+ * passing of arbitrary byte arrays to APIs that expect a validated patch ID.
+ */
+export type QuiltPatchId = Uint8Array & {
+    readonly __brand: "QuiltPatchId";
+};
+/**
+ * Seal identity bytes. Layout: `publication_id(32) || policy_tag(u8) || nonce(>=1)`.
+ * Total length must be > 33. Branded so callers cannot bypass the identity
+ * builder; construct via `buildPublisherSealId`.
+ */
+export type SealId = Uint8Array & {
+    readonly __brand: "SealId";
+};
+/** Hex-encoded Sui account address. */
+export type SuiAddress = Brand<string, "SuiAddress">;
+/** Generic Sui object ID for objects without a more specific brand. */
+export type SuiObjectId = Brand<string, "SuiObjectId">;
+/**
+ * Collection content layout on Walrus: standalone blobs per entry (`blob`, u8=0)
+ * or patches in a shared quilt (`quilt`, u8=1).
+ */
+export declare const StorageMode: {
+    readonly Blob: "blob";
+    readonly Quilt: "quilt";
+};
+export type StorageMode = (typeof StorageMode)[keyof typeof StorageMode];
+/**
+ * Who may decrypt an entry revision. Move u8: public=0, publisher=1, subscription=2.
+ * `subscription` is reserved; the Move layer does not yet accept it.
+ */
+export declare const AccessPolicy: {
+    readonly Public: "public";
+    readonly Publisher: "publisher";
+    readonly Subscription: "subscription";
+};
+export type AccessPolicy = (typeof AccessPolicy)[keyof typeof AccessPolicy];
+/** Policy tag byte inside a Seal identity, identifying the approval entrypoint. */
+export declare const SealPolicyTag: {
+    readonly Publisher: 1;
+};
+export type SealPolicyTag = (typeof SealPolicyTag)[keyof typeof SealPolicyTag];
+/**
+ * Walrus content reference for a revision. `blob` holds a Sui object ID;
+ * `quilt` holds a 37-byte `QuiltPatchId`.
+ */
+export type BlobRef = {
+    readonly kind: "blob";
+    readonly blobObjectId: BlobObjectId;
+} | {
+    readonly kind: "quilt";
+    readonly patchId: QuiltPatchId;
+};
+/** Byte length of a QuiltPatchId, enforced by the Move layer. */
+export declare const QUILT_PATCH_ID_LENGTH = 37;
+/** One immutable revision of an entry. Mutations are appended, never edited in place. */
+export interface Revision {
+    /** Zero-based index into the entry's revision vector. */
+    readonly id: number;
+    readonly blobRef: BlobRef;
+    /** MIME content type; casing is not enforced on-chain. */
+    readonly contentType: string;
+    readonly encrypted: boolean;
+    readonly accessPolicy: AccessPolicy;
+    /** Seal identity bound to encrypted revisions; `null` when unencrypted. */
+    readonly sealId: SealId | null;
+    /** Address that submitted the transaction creating this revision. */
+    readonly author: SuiAddress;
+}
+/** One entry within a collection; revisions are append-only with draft and public heads. */
+export interface Entry {
+    /** Monotonic ID assigned on insert; stable across deletions. */
+    readonly id: number;
+    readonly name: string;
+    readonly revisions: readonly Revision[];
+    readonly draftHead: number | null;
+    readonly publicHead: number | null;
+}
+/** One collection within a publication. `storageMode` is immutable after creation. */
+export interface Collection {
+    readonly name: string;
+    readonly storageMode: StorageMode;
+    readonly nextEntryId: number;
+    /** Sui object ID of the dynamic-field table holding entries. */
+    readonly entriesTableId: SuiObjectId;
+}
+/** Top-level container for collections. Slug is unique across active publications. */
+export interface Publication {
+    readonly id: PublicationId;
+    readonly name: string;
+    readonly slug: string;
+    readonly collections: readonly Collection[];
+    /** Sui object ID of the denylist table tracking revoked PublisherCaps. */
+    readonly revokedPublisherCapsTableId: SuiObjectId;
+}
+/** Owner capability; issues and revokes PublisherCaps, deletes the publication. Transferable. */
+export interface OwnerCap {
+    readonly id: OwnerCapId;
+    readonly publicationId: PublicationId;
+}
+/** Write-access capability bound to `holder`; multiple may exist per publication. */
+export interface PublisherCap {
+    readonly id: PublisherCapId;
+    readonly publicationId: PublicationId;
+    readonly holder: SuiAddress;
+}
+/** One object created by a transaction. */
+export interface TxCreatedObject {
+    readonly objectId: SuiObjectId;
+    /**
+     * Move type tag, e.g. `0x35b5..::publication::Publication`. Treat as opaque;
+     * use exact string match against a known type, not substring matching.
+     */
+    readonly objectType: string;
+}
+/** One object deleted by a transaction. */
+export interface TxDeletedObject {
+    readonly objectId: SuiObjectId;
+}
+/**
+ * Result of a signed transaction. `gasUsedMist = computationCost + storageCost - storageRebate`;
+ * negative values are possible when storage is freed.
+ */
+export interface TxReceipt {
+    readonly digest: string;
+    readonly gasUsedMist: bigint;
+    readonly createdObjects: readonly TxCreatedObject[];
+    readonly deletedObjects: readonly TxDeletedObject[];
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,KAAK,KAAK,CAAC,CAAC,EAAE,GAAG,SAAS,MAAM,IAAI,CAAC,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAA;CAAE,CAAC;AAElE,+DAA+D;AAC/D,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAEnD,yDAAyD;AACzD,MAAM,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAErD,wCAAwC;AACxC,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE3D,sCAAsC;AACtC,MAAM,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAErD,yCAAyC;AACzC,MAAM,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAE7D,wCAAwC;AACxC,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC;AAE7E;;;;GAIG;AACH,MAAM,MAAM,MAAM,GAAG,UAAU,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEjE,uCAAuC;AACvC,MAAM,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAErD,uEAAuE;AACvE,MAAM,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAIvD;;;GAGG;AACH,eAAO,MAAM,WAAW;;;CAGd,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAIzE;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAI5E,mFAAmF;AACnF,eAAO,MAAM,aAAa;;CAEhB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAI/E;;;GAGG;AACH,MAAM,MAAM,OAAO,GAChB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC;AAE9D,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAIxC,yFAAyF;AACzF,MAAM,WAAW,QAAQ;IACxB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC5B;AAID,4FAA4F;AAC5F,MAAM,WAAW,KAAK;IACrB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAID,sFAAsF;AACtF,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC;CACrC;AAID,sFAAsF;AACtF,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IAC5C,0EAA0E;IAC1E,QAAQ,CAAC,2BAA2B,EAAE,WAAW,CAAC;CAClD;AAID,iGAAiG;AACjG,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;CACtC;AAED,qFAAqF;AACrF,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC5B;AAID,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,SAAS,eAAe,EAAE,CAAC;IACpD,QAAQ,CAAC,cAAc,EAAE,SAAS,eAAe,EAAE,CAAC;CACpD"}