@arcadiasystems/morse-sdk 0.1.3 → 0.2.0

package/dist/read/files-reader.js

@@ -0,0 +1,247 @@
+/**
+ * RPC-backed reader for the allowlist + file modules. EncryptedFile objects
+ * are shared (every successful create_*_file flow calls share_file), so
+ * "list files owned by an address" is not exposed at the RPC layer — there
+ * is no on-chain owner field for `listOwnedObjects` to filter on. Listing
+ * accessible files requires event-based indexing; a future indexer-backed
+ * implementation will expose it through this same interface.
+ */
+import { toAllowlistCapId, toAllowlistId, toBlobObjectId, toEncryptedFileId, toSuiAddress, toWalrusBlobId, } from "../codecs.js";
+import { NotFoundError, TransportError, ValidationError } from "../errors.js";
+const DEFAULT_PAGE_LIMIT = 50;
+export class RpcFilesReader {
+    client;
+    typePackageId;
+    constructor(client, typePackageId) {
+        this.client = client;
+        this.typePackageId = typePackageId;
+    }
+    /**
+     * Build a reader from a morse package config. Uses `packageId` (the
+     * current published-at) for type filters because the allowlist + file
+     * modules were introduced in the v2 upgrade — Sui identifies a type by
+     * the package id where it was DEFINED, not by the package's genesis
+     * original-id. This differs from `RpcPublicationReader`, which uses
+     * `originalPackageId` because publication / collection / entry were
+     * defined in v1.
+     */
+    static fromMorseConfig(config, client) {
+        return new RpcFilesReader(client, config.packageId);
+    }
+    async getAllowlist(id, signal) {
+        const validated = toAllowlistId(id);
+        let response;
+        try {
+            response = await this.callClient("getObject", () => this.client.getObject({
+                objectId: validated,
+                include: { json: true },
+                ...(signal === undefined ? {} : { signal }),
+            }));
+        }
+        catch (error) {
+            if (error instanceof TransportError &&
+                isObjectNotFoundError(error.cause, validated)) {
+                throw new NotFoundError("allowlist", validated, {
+                    cause: error.cause,
+                });
+            }
+            throw error;
+        }
+        const object = response.object;
+        if (!object) {
+            throw new NotFoundError("allowlist", validated);
+        }
+        return parseAllowlist(object);
+    }
+    async getEncryptedFile(id, signal) {
+        const validated = toEncryptedFileId(id);
+        let response;
+        try {
+            response = await this.callClient("getObject", () => this.client.getObject({
+                objectId: validated,
+                include: { json: true },
+                ...(signal === undefined ? {} : { signal }),
+            }));
+        }
+        catch (error) {
+            if (error instanceof TransportError &&
+                isObjectNotFoundError(error.cause, validated)) {
+                throw new NotFoundError("encrypted-file", validated, {
+                    cause: error.cause,
+                });
+            }
+            throw error;
+        }
+        const object = response.object;
+        if (!object) {
+            throw new NotFoundError("encrypted-file", validated);
+        }
+        return parseEncryptedFile(object);
+    }
+    async listAllowlistCapsOwnedBy(address, options = {}) {
+        const validated = toSuiAddress(address);
+        const { limit = DEFAULT_PAGE_LIMIT, cursor, signal } = options;
+        const capType = `${this.typePackageId}::allowlist::Cap`;
+        const response = await this.callClient("listOwnedObjects", () => this.client.listOwnedObjects({
+            owner: validated,
+            type: capType,
+            limit,
+            cursor: cursor ?? null,
+            include: { json: true },
+            ...(signal === undefined ? {} : { signal }),
+        }));
+        const results = response.objects.map((object) => parseAllowlistCap(object));
+        return { results, nextCursor: response.cursor };
+    }
+    async callClient(operation, call) {
+        try {
+            return await call();
+        }
+        catch (cause) {
+            throw new TransportError(`${operation} failed`, {
+                cause,
+                operation: `sui.${operation}`,
+            });
+        }
+    }
+}
+function parseAllowlist(object) {
+    const json = object.json;
+    if (!json || typeof json !== "object") {
+        throw new NotFoundError("allowlist", object.objectId);
+    }
+    const record = json;
+    const name = readString(record, "name", "allowlist.name");
+    const members = readMembers(record);
+    return {
+        id: toAllowlistId(object.objectId),
+        name,
+        members,
+    };
+}
+function parseAllowlistCap(object) {
+    const json = object.json;
+    if (!json || typeof json !== "object") {
+        throw new NotFoundError("allowlist", object.objectId);
+    }
+    const record = json;
+    const allowlistIdField = record.allowlist_id;
+    if (typeof allowlistIdField !== "string") {
+        throw new ValidationError("allowlist::Cap.allowlist_id missing or not a string", "cap.allowlist_id");
+    }
+    return {
+        id: toAllowlistCapId(object.objectId),
+        allowlistId: toAllowlistId(allowlistIdField),
+    };
+}
+function parseEncryptedFile(object) {
+    const json = object.json;
+    if (!json || typeof json !== "object") {
+        throw new NotFoundError("encrypted-file", object.objectId);
+    }
+    const record = json;
+    const owner = toSuiAddress(readString(record, "owner", "file.owner"));
+    // Sui gRPC serializes vector<u8> either as a base64 string (standard JSON
+    // representation) or as a number array (older RPC variants). Accept both.
+    const blobId = toWalrusBlobId(parseBlobIdField(record.blob_id));
+    const blobObjectId = readOptionalString(record, "blob_object_id");
+    const name = readString(record, "name", "file.name");
+    const contentType = readString(record, "content_type", "file.content_type");
+    const size = readSafeIntFromBig(record, "size", "file.size");
+    const encrypted = record.encrypted === true;
+    const allowlistIdRaw = readOptionalString(record, "allowlist_id");
+    const createdAtMs = readSafeIntFromBig(record, "created_at_ms", "file.created_at_ms");
+    return {
+        id: toEncryptedFileId(object.objectId),
+        owner,
+        blobId,
+        blobObjectId: blobObjectId === null ? null : toBlobObjectId(blobObjectId),
+        name,
+        contentType,
+        size,
+        encrypted,
+        allowlistId: allowlistIdRaw === null ? null : toAllowlistId(allowlistIdRaw),
+        createdAtMs,
+    };
+}
+function readMembers(record) {
+    const raw = record.members;
+    if (!raw || typeof raw !== "object") {
+        return [];
+    }
+    const contents = raw.contents;
+    if (!Array.isArray(contents)) {
+        return [];
+    }
+    const out = [];
+    for (const entry of contents) {
+        if (typeof entry === "string") {
+            out.push(toSuiAddress(entry));
+        }
+    }
+    return out;
+}
+function readString(record, field, errorField) {
+    const value = record[field];
+    if (typeof value !== "string") {
+        throw new ValidationError(`${errorField} missing or not a string`, errorField);
+    }
+    return value;
+}
+function readOptionalString(record, field) {
+    const value = record[field];
+    if (value === null || value === undefined) {
+        return null;
+    }
+    return typeof value === "string" ? value : null;
+}
+function readSafeIntFromBig(record, field, errorField) {
+    const value = record[field];
+    if (typeof value !== "string" && typeof value !== "number") {
+        throw new ValidationError(`${errorField} missing or not a number`, errorField);
+    }
+    const big = BigInt(value);
+    if (big > BigInt(Number.MAX_SAFE_INTEGER)) {
+        throw new ValidationError(`${errorField} exceeds Number.MAX_SAFE_INTEGER`, errorField);
+    }
+    return Number(big);
+}
+function bytesArrayToBase64Url(bytes) {
+    let binary = "";
+    for (const byte of bytes) {
+        binary += String.fromCharCode(byte);
+    }
+    const b64 = btoa(binary);
+    return b64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+}
+/**
+ * Sui gRPC may serialize `vector<u8>` as:
+ *   - a base64 string (standard JSON encoding)
+ *   - a base64URL string (some RPC variants)
+ *   - an array of numbers (older variants, or when the field is small)
+ * Return the URL-safe-base64 form Walrus uses for blob ids regardless of input shape.
+ */
+function parseBlobIdField(raw) {
+    if (Array.isArray(raw)) {
+        return bytesArrayToBase64Url(raw);
+    }
+    if (typeof raw !== "string") {
+        throw new ValidationError("file.blob_id must be a byte array or base64 string", "file.blob_id");
+    }
+    // Already URL-safe? Strip padding and return.
+    if (/^[A-Za-z0-9_-]+={0,2}$/.test(raw)) {
+        return raw.replace(/=+$/g, "");
+    }
+    // Standard base64 with + and / — convert to URL-safe.
+    if (/^[A-Za-z0-9+/]+={0,2}$/.test(raw)) {
+        return raw.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+    }
+    throw new ValidationError("file.blob_id is not a recognized base64 string", "file.blob_id");
+}
+function isObjectNotFoundError(cause, _objectId) {
+    if (!(cause instanceof Error)) {
+        return false;
+    }
+    return /not found|NotFound|object.*not.*exist/i.test(cause.message);
+}
+//# sourceMappingURL=files-reader.js.map

package/dist/read/files-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files-reader.js","sourceRoot":"","sources":["../../src/read/files-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EACN,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAW9E,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAqC9B,MAAM,OAAO,cAAc;IAER;IACA;IAFlB,YACkB,MAAoB,EACpB,aAAwB;QADxB,WAAM,GAAN,MAAM,CAAc;QACpB,kBAAa,GAAb,aAAa,CAAW;IACvC,CAAC;IAEJ;;;;;;;;OAQG;IACH,MAAM,CAAC,eAAe,CACrB,MAA+D,EAC/D,MAAoB;QAEpB,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,YAAY,CACjB,EAAe,EACf,MAAoB;QAEpB,MAAM,SAAS,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,QAAwD,CAAC;QAC7D,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,CAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBACrB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC3C,CAAC,CACF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IACC,KAAK,YAAY,cAAc;gBAC/B,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,EAC5C,CAAC;gBACF,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE;oBAC/C,KAAK,EAAE,KAAK,CAAC,KAAK;iBAClB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,EAAmB,EACnB,MAAoB;QAEpB,MAAM,SAAS,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,QAAwD,CAAC;QAC7D,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,CAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBACrB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC3C,CAAC,CACF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IACC,KAAK,YAAY,cAAc;gBAC/B,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,EAC5C,CAAC;gBACF,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,SAAS,EAAE;oBACpD,KAAK,EAAE,KAAK,CAAC,KAAK;iBAClB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC7B,OAAmB,EACnB,UAA4B,EAAE;QAE9B,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,EAAE,KAAK,GAAG,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC/D,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,aAAa,kBAAkB,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAC/D,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC5B,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,OAAO;YACb,KAAK;YACL,MAAM,EAAE,MAAM,IAAI,IAAI;YACtB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC3C,CAAC,CACF,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,UAAU,CACvB,SAAiB,EACjB,IAAsB;QAEtB,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CAAC,GAAG,SAAS,SAAS,EAAE;gBAC/C,KAAK;gBACL,SAAS,EAAE,OAAO,SAAS,EAAE;aAC7B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;CACD;AAED,SAAS,cAAc,CACtB,MAA6C;IAE7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO;QACN,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClC,IAAI;QACJ,OAAO;KACP,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACzB,MAA6C;IAE7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC;IAC7C,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,eAAe,CACxB,qDAAqD,EACrD,kBAAkB,CAClB,CAAC;IACH,CAAC;IACD,OAAO;QACN,EAAE,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrC,WAAW,EAAE,aAAa,CAAC,gBAAgB,CAAC;KAC5C,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAC1B,MAA6C;IAE7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACtE,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,cAAc,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC;IAC5C,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,kBAAkB,CACrC,MAAM,EACN,eAAe,EACf,oBAAoB,CACpB,CAAC;IACF,OAAO;QACN,EAAE,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,KAAK;QACL,MAAM;QACN,YAAY,EAAE,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC;QACzE,IAAI;QACJ,WAAW;QACX,IAAI;QACJ,SAAS;QACT,WAAW,EAAE,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC;QAC3E,WAAW;KACX,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAA+B;IACnD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,QAAQ,GAAI,GAA8B,CAAC,QAAQ,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,UAAU,CAClB,MAA+B,EAC/B,KAAa,EACb,UAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CACxB,GAAG,UAAU,0BAA0B,EACvC,UAAU,CACV,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAC1B,MAA+B,EAC/B,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,kBAAkB,CAC1B,MAA+B,EAC/B,KAAa,EACb,UAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,eAAe,CACxB,GAAG,UAAU,0BAA0B,EACvC,UAAU,CACV,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAwB,CAAC,CAAC;IAC7C,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,eAAe,CACxB,GAAG,UAAU,kCAAkC,EAC/C,UAAU,CACV,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAe;IAC7C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,GAAY;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,qBAAqB,CAAC,GAAe,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,eAAe,CACxB,oDAAoD,EACpD,cAAc,CACd,CAAC;IACH,CAAC;IACD,8CAA8C;IAC9C,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,sDAAsD;IACtD,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,eAAe,CACxB,gDAAgD,EAChD,cAAc,CACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,SAAiB;IAC/D,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACrE,CAAC"}

package/dist/read/index.d.ts

@@ -1,5 +1,6 @@
 /**
  * Public barrel for the read layer.
  */
+export { type AllowlistCapListPage, type FilesListOptions, type FilesReader, RpcFilesReader, } from "./files-reader.js";
 export { type EntryListPage, type ListEntriesOptions, type ListPublicationsOptions, type ListPublisherCapsOptions, type OwnedPublication, type PublicationListPage, type PublicationReader, type PublisherCapListPage, RpcPublicationReader, type ScanEntriesOptions, } from "./reader.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/read/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/read/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,KAAK,kBAAkB,GACvB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/read/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,cAAc,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,KAAK,kBAAkB,GACvB,MAAM,aAAa,CAAC"}

package/dist/read/index.js

@@ -1,5 +1,6 @@
 /**
  * Public barrel for the read layer.
  */
+export { RpcFilesReader, } from "./files-reader.js";
 export { RpcPublicationReader, } from "./reader.js";
 //# sourceMappingURL=index.js.map

package/dist/read/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/read/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EASN,oBAAoB,GAEpB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/read/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAIN,cAAc,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EASN,oBAAoB,GAEpB,MAAM,aAAa,CAAC"}

package/dist/seal/adapter.d.ts

@@ -4,7 +4,7 @@
  * (key servers, threshold, package id) is bound at construction time.
  */
 import type { SessionKey } from "@mysten/seal";
-import type { PublisherCapId, SealId } from "../types.js";
+import type { AllowlistId, PublisherCapId, SealId } from "../types.js";
 export interface SealEncryptOptions {
     readonly sealId: SealId;
     /** Optional additional authenticated data bound into the ciphertext. */
@@ -22,6 +22,12 @@ export interface SealDecryptOptions {
     readonly sealId: SealId;
     readonly publisherCapId: PublisherCapId;
 }
+/** Options for decrypting content gated by the allowlist policy. */
+export interface SealDecryptUnderAllowlistOptions {
+    readonly sessionKey: SessionKey;
+    readonly sealId: SealId;
+    readonly allowlistId: AllowlistId;
+}
 /**
  * Combined Seal adapter. Implementations bundle a `SealClient`, the morse
  * package id (Seal binds it into ciphertext envelopes), and a TSS threshold.
@@ -52,5 +58,20 @@ export interface SealAdapter {
      * @throws {TransportError} On network or PTB build failure.
      */
     decrypt(ciphertext: Uint8Array, options: SealDecryptOptions): Promise<Uint8Array>;
+    /**
+     * Decrypt content gated by the allowlist policy. The Seal key servers
+     * verify that `sessionKey.getAddress()` is a current member of `allowlistId`
+     * by dry-running `allowlist::seal_approve(sealId, allowlist)`; non-members
+     * surface as `SealError("no-access")`.
+     *
+     * Distinct from `decrypt`, which targets the publisher policy. Both can
+     * coexist on the same adapter instance since policy targeting is decided
+     * by the seal_approve PTB the adapter constructs internally.
+     *
+     * @throws {SealError} On Seal authorization failure (`no-access`),
+     *   decryption failure (`decrypt-failed`), session-key expiry, or rate limiting.
+     * @throws {TransportError} On network or PTB build failure.
+     */
+    decryptUnderAllowlist(ciphertext: Uint8Array, options: SealDecryptUnderAllowlistOptions): Promise<Uint8Array>;
 }
 //# sourceMappingURL=adapter.d.ts.map

package/dist/seal/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/seal/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IAClC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B;;;;;;;;OAQG;IACH,OAAO,CACN,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,OAAO,CACN,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC,CAAC;CACvB"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/seal/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IAClC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACxC;AAED,oEAAoE;AACpE,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B;;;;;;;;OAQG;IACH,OAAO,CACN,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,OAAO,CACN,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB;;;;;;;;;;;;;OAaG;IACH,qBAAqB,CACpB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,gCAAgC,GACvC,OAAO,CAAC,UAAU,CAAC,CAAC;CACvB"}

package/dist/seal/allowlist-identity.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Seal identity (`SealId`) construction and inspection for the allowlist policy.
+ * The Move layer (`allowlist::seal_approve`) enforces the byte format, so both
+ * encode and decode here must match the contract byte-for-byte.
+ *
+ * Layout: `allowlist_id(32) || policy_tag(u8=2) || nonce(>=1)`. Total length
+ * must be > 33 bytes (`allowlist::ESealInvalidId` otherwise).
+ *
+ * Distinct from the publisher policy (`publisher-identity.ts`) by policy tag
+ * (allowlist=2, publisher=1) so both can coexist in the same package without
+ * identity collisions.
+ */
+import { type AllowlistId, type SealId, SealPolicyTag } from "../types.js";
+/** Structured view of an allowlist Seal identity. */
+export interface AllowlistSealIdParts {
+    readonly allowlistId: AllowlistId;
+    readonly policyTag: SealPolicyTag;
+    readonly nonce: Uint8Array;
+}
+/**
+ * Build an allowlist-policy Seal identity. The nonce must be at least 1 byte
+ * (the Move contract's `id.length() > 33` invariant); nonces of 16 random
+ * bytes are typical.
+ *
+ * @throws {ValidationError} If `allowlistId` is not a 0x-prefixed 64-char
+ *   hex string, or `nonce` is shorter than 1 byte.
+ */
+export declare function buildAllowlistSealId(allowlistId: AllowlistId, nonce: Uint8Array): SealId;
+/**
+ * Decode the structural fields of an allowlist Seal identity. The brand
+ * guarantees the byte layout, so this never throws on a properly-built
+ * identity. Throws `ValidationError` if the bytes carry a different policy
+ * tag (e.g. publisher) — use `decodePublisherSealId` for those.
+ */
+export declare function decodeAllowlistSealId(id: SealId): AllowlistSealIdParts;
+//# sourceMappingURL=allowlist-identity.d.ts.map

package/dist/seal/allowlist-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist-identity.d.ts","sourceRoot":"","sources":["../../src/seal/allowlist-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAO3E,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CACnC,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,UAAU,GACf,MAAM,CAaR;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,oBAAoB,CAetE"}

package/dist/seal/allowlist-identity.js

@@ -0,0 +1,81 @@
+/**
+ * Seal identity (`SealId`) construction and inspection for the allowlist policy.
+ * The Move layer (`allowlist::seal_approve`) enforces the byte format, so both
+ * encode and decode here must match the contract byte-for-byte.
+ *
+ * Layout: `allowlist_id(32) || policy_tag(u8=2) || nonce(>=1)`. Total length
+ * must be > 33 bytes (`allowlist::ESealInvalidId` otherwise).
+ *
+ * Distinct from the publisher policy (`publisher-identity.ts`) by policy tag
+ * (allowlist=2, publisher=1) so both can coexist in the same package without
+ * identity collisions.
+ */
+import { ValidationError } from "../errors.js";
+import { SealPolicyTag } from "../types.js";
+const ALLOWLIST_ID_BYTES = 32;
+const POLICY_TAG_OFFSET = ALLOWLIST_ID_BYTES;
+const NONCE_OFFSET = POLICY_TAG_OFFSET + 1;
+const MIN_NONCE_BYTES = 1;
+/**
+ * Build an allowlist-policy Seal identity. The nonce must be at least 1 byte
+ * (the Move contract's `id.length() > 33` invariant); nonces of 16 random
+ * bytes are typical.
+ *
+ * @throws {ValidationError} If `allowlistId` is not a 0x-prefixed 64-char
+ *   hex string, or `nonce` is shorter than 1 byte.
+ */
+export function buildAllowlistSealId(allowlistId, nonce) {
+    if (nonce.length < MIN_NONCE_BYTES) {
+        throw new ValidationError(`Seal nonce must be at least ${MIN_NONCE_BYTES} byte(s), got ${nonce.length}`, "nonce");
+    }
+    const prefix = allowlistIdToBytes(allowlistId);
+    const out = new Uint8Array(ALLOWLIST_ID_BYTES + 1 + nonce.length);
+    out.set(prefix, 0);
+    out[POLICY_TAG_OFFSET] = SealPolicyTag.Allowlist;
+    out.set(nonce, NONCE_OFFSET);
+    return out;
+}
+/**
+ * Decode the structural fields of an allowlist Seal identity. The brand
+ * guarantees the byte layout, so this never throws on a properly-built
+ * identity. Throws `ValidationError` if the bytes carry a different policy
+ * tag (e.g. publisher) — use `decodePublisherSealId` for those.
+ */
+export function decodeAllowlistSealId(id) {
+    const prefix = id.subarray(0, ALLOWLIST_ID_BYTES);
+    const policyTagByte = id[POLICY_TAG_OFFSET] ?? 0;
+    if (policyTagByte !== SealPolicyTag.Allowlist) {
+        throw new ValidationError(`Seal identity has policy tag ${policyTagByte}, expected ${SealPolicyTag.Allowlist} (Allowlist). Use decodePublisherSealId for publisher-policy identities.`, "policyTag");
+    }
+    const nonce = id.slice(NONCE_OFFSET);
+    return {
+        allowlistId: bytesToAllowlistId(prefix),
+        policyTag: SealPolicyTag.Allowlist,
+        nonce,
+    };
+}
+function allowlistIdToBytes(value) {
+    const stripped = value.startsWith("0x")
+        ? value.slice(2)
+        : value;
+    if (stripped.length > ALLOWLIST_ID_BYTES * 2) {
+        throw new ValidationError(`AllowlistId exceeds ${ALLOWLIST_ID_BYTES} bytes`, "allowlistId");
+    }
+    const padded = stripped.padStart(ALLOWLIST_ID_BYTES * 2, "0");
+    if (!/^[0-9a-f]+$/i.test(padded)) {
+        throw new ValidationError(`AllowlistId is not valid hex: ${value}`, "allowlistId");
+    }
+    const out = new Uint8Array(ALLOWLIST_ID_BYTES);
+    for (let i = 0; i < ALLOWLIST_ID_BYTES; i += 1) {
+        out[i] = Number.parseInt(padded.slice(i * 2, i * 2 + 2), 16);
+    }
+    return out;
+}
+function bytesToAllowlistId(bytes) {
+    let hex = "";
+    for (const byte of bytes) {
+        hex += byte.toString(16).padStart(2, "0");
+    }
+    return `0x${hex}`;
+}
+//# sourceMappingURL=allowlist-identity.js.map

package/dist/seal/allowlist-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist-identity.js","sourceRoot":"","sources":["../../src/seal/allowlist-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAiC,aAAa,EAAE,MAAM,aAAa,CAAC;AAE3E,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAC7C,MAAM,YAAY,GAAG,iBAAiB,GAAG,CAAC,CAAC;AAC3C,MAAM,eAAe,GAAG,CAAC,CAAC;AAS1B;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CACnC,WAAwB,EACxB,KAAiB;IAEjB,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CACxB,+BAA+B,eAAe,iBAAiB,KAAK,CAAC,MAAM,EAAE,EAC7E,OAAO,CACP,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,kBAAkB,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAClE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnB,GAAG,CAAC,iBAAiB,CAAC,GAAG,aAAa,CAAC,SAAS,CAAC;IACjD,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC7B,OAAO,GAAa,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC/C,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,aAAa,KAAK,aAAa,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,eAAe,CACxB,gCAAgC,aAAa,cAAc,aAAa,CAAC,SAAS,0EAA0E,EAC5J,WAAW,CACX,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACrC,OAAO;QACN,WAAW,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACvC,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,KAAK;KACL,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAkB;IAC7C,MAAM,QAAQ,GAAI,KAAgB,CAAC,UAAU,CAAC,IAAI,CAAC;QAClD,CAAC,CAAE,KAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAE,KAAgB,CAAC;IACrB,IAAI,QAAQ,CAAC,MAAM,GAAG,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,eAAe,CACxB,uBAAuB,kBAAkB,QAAQ,EACjD,aAAa,CACb,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,eAAe,CACxB,iCAAiC,KAAK,EAAE,EACxC,aAAa,CACb,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAiB;IAC5C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,GAAG,EAAiB,CAAC;AAClC,CAAC"}

package/dist/seal/default-adapter.d.ts

@@ -8,7 +8,7 @@
  */
 import { type KeyServerConfig, type SealCompatibleClient, type SessionKey } from "@mysten/seal";
 import type { PackageId } from "../types.js";
-import type { SealAdapter, SealDecryptOptions, SealEncryptOptions, SealEncryptResult } from "./adapter.js";
+import type { SealAdapter, SealDecryptOptions, SealDecryptUnderAllowlistOptions, SealEncryptOptions, SealEncryptResult } from "./adapter.js";
 /**
  * Configuration for `DefaultSealAdapter`. `packageId` MUST be the deployment's
  * `originalPackageId`: Seal binds the package address into ciphertext
@@ -17,6 +17,17 @@ import type { SealAdapter, SealDecryptOptions, SealEncryptOptions, SealEncryptRe
  */
 export interface SealAdapterConfig {
     readonly packageId: PackageId;
+    /**
+     * Package id used as the target of `seal_approve*` PTBs. Defaults to
+     * `packageId` when omitted. Must be set explicitly when the seal_approve
+     * function lives in a module added in a package upgrade (e.g.
+     * `allowlist::seal_approve` was introduced in v2 and only exists at the
+     * v2 published-at address; calling it at the original-id fails because
+     * that address only has v1 bytecode). For backwards compat with the
+     * publisher policy (introduced in v1, present at all upgrade addresses),
+     * omit this field.
+     */
+    readonly targetPackageId?: PackageId;
     readonly serverConfigs: readonly KeyServerConfig[];
     readonly threshold: number;
     readonly verifyKeyServers?: boolean;
@@ -44,6 +55,7 @@ interface DefaultSealAdapterOptions {
     readonly client: SealClientLike;
     readonly suiClient: SealCompatibleClient;
     readonly packageId: PackageId;
+    readonly targetPackageId: PackageId;
     readonly threshold: number;
 }
 /** `SealAdapter` implementation backed by `@mysten/seal`. */
@@ -51,6 +63,7 @@ export declare class DefaultSealAdapter implements SealAdapter {
     private readonly client;
     private readonly suiClient;
     private readonly packageId;
+    private readonly targetPackageId;
     private readonly threshold;
     constructor(options: DefaultSealAdapterOptions);
     /**
@@ -84,7 +97,9 @@ export declare class DefaultSealAdapter implements SealAdapter {
     static fromConfig(config: SealAdapterConfig, suiClient: SealCompatibleClient): DefaultSealAdapter;
     encrypt(plaintext: Uint8Array, options: SealEncryptOptions): Promise<SealEncryptResult>;
     decrypt(ciphertext: Uint8Array, options: SealDecryptOptions): Promise<Uint8Array>;
+    decryptUnderAllowlist(ciphertext: Uint8Array, options: SealDecryptUnderAllowlistOptions): Promise<Uint8Array>;
     private buildSealApproveTxBytes;
+    private buildAllowlistApproveTxBytes;
 }
 export {};
 //# sourceMappingURL=default-adapter.d.ts.map

package/dist/seal/default-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-adapter.d.ts","sourceRoot":"","sources":["../../src/seal/default-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAIN,KAAK,eAAe,EAGpB,KAAK,oBAAoB,EACzB,KAAK,UAAU,EAEf,MAAM,cAAc,CAAC;AAUtB,OAAO,KAAK,EACX,SAAS,EAIT,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACX,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,MAAM,cAAc,CAAC;AAGtB;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,SAAS,eAAe,EAAE,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,4EAA4E;AAC5E,UAAU,cAAc;IACvB,OAAO,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,UAAU,CAAC;QACjB,GAAG,CAAC,EAAE,UAAU,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,eAAe,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,EAAE;QACb,IAAI,EAAE,UAAU,CAAC;QACjB,UAAU,EAAE,UAAU,CAAC;QACvB,OAAO,EAAE,UAAU,CAAC;KACpB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACxB;AAED,UAAU,yBAAyB;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,6DAA6D;AAC7D,qBAAa,kBAAmB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,EAAE,yBAAyB;IAO9C;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,eAAe,CACrB,WAAW,EAAE;QACZ,SAAS,EAAE,SAAS,CAAC;QACrB,iBAAiB,CAAC,EAAE,SAAS,CAAC;QAC9B,cAAc,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;KAC5C,EACD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,EACnD,SAAS,EAAE,oBAAoB,GAC7B,kBAAkB;IAuBrB;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAChB,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,oBAAoB,GAC7B,kBAAkB;IAiCf,OAAO,CACZ,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC;IAgBvB,OAAO,CACZ,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC;YAkCR,uBAAuB;CA4BrC"}
+{"version":3,"file":"default-adapter.d.ts","sourceRoot":"","sources":["../../src/seal/default-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAIN,KAAK,eAAe,EAGpB,KAAK,oBAAoB,EACzB,KAAK,UAAU,EAEf,MAAM,cAAc,CAAC;AAUtB,OAAO,KAAK,EAEX,SAAS,EAIT,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACX,WAAW,EACX,kBAAkB,EAClB,gCAAgC,EAChC,kBAAkB,EAClB,iBAAiB,EACjB,MAAM,cAAc,CAAC;AAItB;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B;;;;;;;;;OASG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,SAAS,eAAe,EAAE,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,4EAA4E;AAC5E,UAAU,cAAc;IACvB,OAAO,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,UAAU,CAAC;QACjB,GAAG,CAAC,EAAE,UAAU,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,eAAe,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,EAAE;QACb,IAAI,EAAE,UAAU,CAAC;QACjB,UAAU,EAAE,UAAU,CAAC;QACvB,OAAO,EAAE,UAAU,CAAC;KACpB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACxB;AAED,UAAU,yBAAyB;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,6DAA6D;AAC7D,qBAAa,kBAAmB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAY;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,EAAE,yBAAyB;IAQ9C;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,eAAe,CACrB,WAAW,EAAE;QACZ,SAAS,EAAE,SAAS,CAAC;QACrB,iBAAiB,CAAC,EAAE,SAAS,CAAC;QAC9B,cAAc,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;KAC5C,EACD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,EACnD,SAAS,EAAE,oBAAoB,GAC7B,kBAAkB;IAiCrB;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAChB,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,oBAAoB,GAC7B,kBAAkB;IAkCf,OAAO,CACZ,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC;IAgBvB,OAAO,CACZ,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC;IAkChB,qBAAqB,CAC1B,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,gCAAgC,GACvC,OAAO,CAAC,UAAU,CAAC;YAmCR,uBAAuB;YA6BvB,4BAA4B;CA0B1C"}

package/dist/seal/default-adapter.js

@@ -9,17 +9,20 @@
 import { DecryptionError, ExpiredSessionKeyError, InvalidCiphertextError, NoAccessError, SealClient, TooManyFailedFetchKeyRequestsError, } from "@mysten/seal";
 import { Transaction } from "@mysten/sui/transactions";
 import { ConfigurationError, SealError, TransportError, ValidationError, } from "../errors.js";
+import { decodeAllowlistSealId } from "./allowlist-identity.js";
 import { decodePublisherSealId } from "./identity.js";
 /** `SealAdapter` implementation backed by `@mysten/seal`. */
 export class DefaultSealAdapter {
     client;
     suiClient;
     packageId;
+    targetPackageId;
     threshold;
     constructor(options) {
         this.client = options.client;
         this.suiClient = options.suiClient;
         this.packageId = options.packageId;
+        this.targetPackageId = options.targetPackageId;
         this.threshold = options.threshold;
     }
     /**
@@ -47,7 +50,17 @@ export class DefaultSealAdapter {
         }
         const threshold = seal.threshold ?? Math.min(2, serverConfigs.length);
         return DefaultSealAdapter.fromConfig({
+            // Identity binding uses the original-id for crypto stability across
+            // upgrades. Ciphertexts encrypted under v1's package id remain
+            // decryptable after v2 / v3 upgrades.
             packageId: morseConfig.originalPackageId ?? morseConfig.packageId,
+            // PTB targets use the current published-at because seal_approve
+            // functions in modules added by upgrades (e.g. allowlist) only
+            // exist at the current address. The publisher-policy
+            // seal_approve_publisher (defined in v1) is reachable at either
+            // the original-id or the current id; using the current id is
+            // safe for both cases.
+            targetPackageId: morseConfig.packageId,
             serverConfigs,
             threshold,
             ...(seal.verifyKeyServers === undefined
@@ -82,6 +95,7 @@ export class DefaultSealAdapter {
             client,
             suiClient,
             packageId: config.packageId,
+            targetPackageId: config.targetPackageId ?? config.packageId,
             threshold: config.threshold,
         });
     }
@@ -117,10 +131,28 @@ export class DefaultSealAdapter {
             txBytes,
         }), "seal.decrypt");
     }
+    async decryptUnderAllowlist(ciphertext, options) {
+        let allowlistIdFromSealId;
+        try {
+            ({ allowlistId: allowlistIdFromSealId } = decodeAllowlistSealId(options.sealId));
+        }
+        catch (cause) {
+            throw new SealError("decrypt-failed", `Seal identity is malformed or uses an unsupported policy tag for the allowlist policy: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+        }
+        if (allowlistIdFromSealId !== options.allowlistId) {
+            throw new SealError("decrypt-failed", `sealId's embedded allowlistId (${allowlistIdFromSealId}) does not match the supplied allowlistId (${options.allowlistId})`);
+        }
+        const txBytes = await this.buildAllowlistApproveTxBytes(options.allowlistId, options.sealId, options.sessionKey);
+        return runSealCall(() => this.client.decrypt({
+            data: ciphertext,
+            sessionKey: options.sessionKey,
+            txBytes,
+        }), "seal.decryptUnderAllowlist");
+    }
     async buildSealApproveTxBytes(publicationId, publisherCapId, sealId, sessionKey) {
         const tx = new Transaction();
         tx.moveCall({
-            target: `${this.packageId}::publication::seal_approve_publisher`,
+            target: `${this.targetPackageId}::publication::seal_approve_publisher`,
             arguments: [
                 tx.pure.vector("u8", Array.from(sealId)),
                 tx.object(publicationId),
@@ -141,6 +173,29 @@ export class DefaultSealAdapter {
             });
         }
     }
+    async buildAllowlistApproveTxBytes(allowlistId, sealId, sessionKey) {
+        const tx = new Transaction();
+        tx.moveCall({
+            target: `${this.targetPackageId}::allowlist::seal_approve`,
+            arguments: [
+                tx.pure.vector("u8", Array.from(sealId)),
+                tx.object(allowlistId),
+            ],
+        });
+        tx.setSender(sessionKey.getAddress());
+        try {
+            return await tx.build({
+                client: this.suiClient,
+                onlyTransactionKind: true,
+            });
+        }
+        catch (cause) {
+            throw new TransportError("Failed to build allowlist seal_approve PTB", {
+                cause,
+                operation: "seal.buildAllowlistApproveTx",
+            });
+        }
+    }
 }
 async function runSealCall(call, operation = "seal.call") {
     try {