@arcadiasystems/morse-sdk 0.1.4 → 0.2.0

package/dist/ops/allowlist.js

@@ -0,0 +1,122 @@
+/**
+ * High-level allowlist ops: build a PTB, sign and execute via the wallet
+ * adapter, parse the receipt into a typed result.
+ */
+import { Transaction, } from "@mysten/sui/transactions";
+import { toAllowlistCapId, toAllowlistId } from "../codecs.js";
+import { ValidationError } from "../errors.js";
+import { buildAddMember, buildDeleteAllowlist, buildNewAllowlist, buildRemoveMember, buildShareAllowlist, buildTransferAllowlistCap, } from "../ptb/allowlist.js";
+import { findCreatedId } from "./internal.js";
+const MAX_ALLOWLIST_NAME_LENGTH = 256;
+/**
+ * Create an allowlist, share it, and transfer the admin Cap to `adapter.address`
+ * in one atomic PTB. The caller can immediately use the returned `capId`
+ * for member ops.
+ *
+ * @throws {ValidationError} If `name` is empty or exceeds 256 chars.
+ * @throws {ContractAbortError} On Move abort.
+ * @throws {TransportError} On RPC, network, or response-parsing failure.
+ */
+export async function createAllowlist(adapter, config, args) {
+    validateAllowlistName(args.name);
+    const tx = new Transaction();
+    const created = buildNewAllowlist(tx, {
+        packageId: config.packageId,
+        name: args.name,
+    });
+    const allowlistArg = created[0];
+    const capArg = created[1];
+    buildShareAllowlist(tx, {
+        packageId: config.packageId,
+        allowlist: allowlistArg,
+    });
+    buildTransferAllowlistCap(tx, {
+        packageId: config.packageId,
+        cap: capArg,
+        recipient: adapter.address,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    // Sui types are identified by the package id where the type was DEFINED.
+    // allowlist::Allowlist was introduced in the v2 upgrade, so its type
+    // identity is rooted at config.packageId (v2 published-at), not at
+    // originalPackageId (v1 genesis, used by publication / collection / entry).
+    const typePrefix = config.packageId;
+    return {
+        digest: receipt.digest,
+        gasUsedMist: receipt.gasUsedMist,
+        allowlistId: toAllowlistId(findCreatedId(receipt, `${typePrefix}::allowlist::Allowlist`)),
+        capId: toAllowlistCapId(findCreatedId(receipt, `${typePrefix}::allowlist::Cap`)),
+    };
+}
+/**
+ * Add an address to the allowlist. Idempotent: adding an existing member
+ * aborts with `EMemberAlreadyPresent`.
+ *
+ * @throws {ContractAbortError} On Move abort (wrong cap, duplicate member).
+ * @throws {TransportError} On RPC, network, or response-parsing failure.
+ */
+export async function addMember(adapter, config, args) {
+    const tx = new Transaction();
+    buildAddMember(tx, {
+        packageId: config.packageId,
+        allowlistId: args.allowlistId,
+        capId: args.capId,
+        member: args.member,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+/**
+ * Remove an address from the allowlist. Aborts with `EMemberNotPresent` if
+ * the address is not a member.
+ */
+export async function removeMember(adapter, config, args) {
+    const tx = new Transaction();
+    buildRemoveMember(tx, {
+        packageId: config.packageId,
+        allowlistId: args.allowlistId,
+        capId: args.capId,
+        member: args.member,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+/**
+ * Transfer the admin Cap to a new address. The new holder gains full admin
+ * rights; the previous holder loses them.
+ */
+export async function transferAllowlistCap(adapter, config, args) {
+    const tx = new Transaction();
+    buildTransferAllowlistCap(tx, {
+        packageId: config.packageId,
+        cap: args.capId,
+        recipient: args.recipient,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+/**
+ * Delete an allowlist. Any `EncryptedFile` still referencing this allowlist
+ * becomes unusable for decryption (`seal_approve` dry-run will fail with
+ * `ESealInvalidId` because the allowlist object no longer exists). Delete
+ * dependent files first or migrate them before deleting the allowlist.
+ */
+export async function deleteAllowlist(adapter, config, args) {
+    const tx = new Transaction();
+    buildDeleteAllowlist(tx, {
+        packageId: config.packageId,
+        allowlistId: args.allowlistId,
+        capId: args.capId,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+function validateAllowlistName(name) {
+    if (name.length === 0) {
+        throw new ValidationError("Allowlist name cannot be empty", "name");
+    }
+    if (name.length > MAX_ALLOWLIST_NAME_LENGTH) {
+        throw new ValidationError(`Allowlist name exceeds ${MAX_ALLOWLIST_NAME_LENGTH} chars`, "name");
+    }
+}
+//# sourceMappingURL=allowlist.js.map

package/dist/ops/allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../src/ops/allowlist.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACN,WAAW,GAEX,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EACN,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,yBAAyB,GACzB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,yBAAyB,GAAG,GAAG,CAAC;AActC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,OAAsB,EACtB,MAA0B,EAC1B,IAAyB;IAEzB,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEjC,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,EAAE;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;KACf,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAA8B,CAAC;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAA8B,CAAC;IACvD,mBAAmB,CAAC,EAAE,EAAE;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,YAAY;KACvB,CAAC,CAAC;IACH,yBAAyB,CAAC,EAAE,EAAE;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,EAAE,MAAM;QACX,SAAS,EAAE,OAAO,CAAC,OAAO;KAC1B,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,mEAAmE;IACnE,4EAA4E;IAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;IAEpC,OAAO;QACN,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,aAAa,CACzB,aAAa,CAAC,OAAO,EAAE,GAAG,UAAU,wBAAwB,CAAC,CAC7D;QACD,KAAK,EAAE,gBAAgB,CACtB,aAAa,CAAC,OAAO,EAAE,GAAG,UAAU,kBAAkB,CAAC,CACvD;KACD,CAAC;AACH,CAAC;AAcD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC9B,OAAsB,EACtB,MAA0B,EAC1B,IAAmB;IAEnB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,EAAE;QAClB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AASD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,OAAsB,EACtB,MAA0B,EAC1B,IAAsB;IAEtB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,EAAE;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,OAAsB,EACtB,MAA0B,EAC1B,IAA8B;IAE9B,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,yBAAyB,CAAC,EAAE,EAAE;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,EAAE,IAAI,CAAC,KAAK;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;KACzB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAQD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,OAAsB,EACtB,MAA0B,EAC1B,IAAyB;IAEzB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,oBAAoB,CAAC,EAAE,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;KACjB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,eAAe,CAAC,gCAAgC,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QAC7C,MAAM,IAAI,eAAe,CACxB,0BAA0B,yBAAyB,QAAQ,EAC3D,MAAM,CACN,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/ops/file-from-bytes.d.ts

@@ -0,0 +1,84 @@
+/**
+ * High-level "upload + register" flows for the file module. Combines Walrus
+ * upload with on-chain metadata registration in a single PTB so the user
+ * sees one signing popup for the storage step plus one for the on-chain
+ * write (rather than three separate popups).
+ *
+ * Mirrors `entry-from-bytes.ts`'s shape but targets `file::new_encrypted_file`
+ * / `file::new_public_file` instead of `add_entry_to_collection`.
+ */
+import type { MorsePackageConfig } from "../config.js";
+import type { SealAdapter } from "../seal/adapter.js";
+import type { AllowlistId, BlobObjectId, EncryptedFileId, SealId, WalrusBlobId } from "../types.js";
+import type { WalletAdapter } from "../wallets/adapter.js";
+import type { UploadBlobOptions, WalrusFlowCapable, WalrusWriteAdapter } from "../walrus/adapter.js";
+export type FileUploadProgressEvent = {
+    readonly phase: "encrypting";
+} | {
+    readonly phase: "uploading";
+} | {
+    readonly phase: "submitting";
+} | {
+    readonly phase: "complete";
+};
+export type FileUploadProgressCallback = (event: FileUploadProgressEvent) => void;
+export interface UploadFileResult {
+    readonly digest: string;
+    readonly gasUsedMist: bigint;
+    readonly fileId: EncryptedFileId;
+    readonly blobId: WalrusBlobId;
+    readonly blobObjectId: BlobObjectId;
+}
+export interface UploadEncryptedFileFromBytesArgs {
+    readonly walrus: WalrusWriteAdapter & WalrusFlowCapable;
+    readonly seal: SealAdapter;
+    readonly allowlistId: AllowlistId;
+    /** Caller-supplied Seal identity. Must derive from `buildAllowlistSealId(allowlistId, nonce)`. */
+    readonly sealId: SealId;
+    readonly plaintext: Uint8Array;
+    readonly name: string;
+    readonly contentType: string;
+    readonly upload: UploadBlobOptions;
+    readonly signal?: AbortSignal;
+    readonly onProgress?: FileUploadProgressCallback;
+}
+/**
+ * Encrypt `plaintext` via Seal under the allowlist's identity, upload the
+ * ciphertext to Walrus, and register an `EncryptedFile` metadata record in
+ * one combined transaction. Two wallet popups: register_blob, then
+ * certify_blob + new_encrypted_file + share_file.
+ *
+ * The caller supplies `sealId` rather than having the flow construct it,
+ * so the decryption side can use the same identity bytes without an
+ * implicit shared-secret round-trip. Build via:
+ *
+ *   const nonce = crypto.getRandomValues(new Uint8Array(16));
+ *   const sealId = buildAllowlistSealId(allowlistId, nonce);
+ *
+ * Reuse the same nonce-derived sealId when decrypting (consumers can
+ * recover it by reading the encrypted ciphertext header — Seal stores the
+ * identity in the ciphertext envelope).
+ *
+ * @throws {SealError} If encryption fails (no popup yet).
+ * @throws {UncertifiedBlobError} If the combined popup fails after upload
+ *   succeeded. The blob is on Walrus but uncertified; retry the full flow.
+ * @throws {ContractAbortError} On Move abort during simulation.
+ * @throws {TransportError} On RPC, network, or pre-upload failure.
+ */
+export declare function uploadEncryptedFileFromBytes(adapter: WalletAdapter, config: MorsePackageConfig, args: UploadEncryptedFileFromBytesArgs): Promise<UploadFileResult>;
+export interface UploadPublicFileFromBytesArgs {
+    readonly walrus: WalrusWriteAdapter & WalrusFlowCapable;
+    readonly bytes: Uint8Array;
+    readonly name: string;
+    readonly contentType: string;
+    readonly upload: UploadBlobOptions;
+    readonly signal?: AbortSignal;
+    readonly onProgress?: FileUploadProgressCallback;
+}
+/**
+ * Upload `bytes` to Walrus unencrypted and register a public `EncryptedFile`
+ * metadata record (`encrypted: false`, `allowlistId: null`) in one combined
+ * transaction. Two wallet popups; no Seal involvement.
+ */
+export declare function uploadPublicFileFromBytes(adapter: WalletAdapter, config: MorsePackageConfig, args: UploadPublicFileFromBytesArgs): Promise<UploadFileResult>;
+//# sourceMappingURL=file-from-bytes.d.ts.map

package/dist/ops/file-from-bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-from-bytes.d.ts","sourceRoot":"","sources":["../../src/ops/file-from-bytes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAOvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EACX,WAAW,EACX,YAAY,EACZ,eAAe,EACf,MAAM,EACN,YAAY,EACZ,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EACX,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,MAAM,sBAAsB,CAAC;AAI9B,MAAM,MAAM,uBAAuB,GAChC;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC;AAElC,MAAM,MAAM,0BAA0B,GAAG,CACxC,KAAK,EAAE,uBAAuB,KAC1B,IAAI,CAAC;AAEV,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACpC;AAID,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,iBAAiB,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,kGAAkG;IAClG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC;CACjD;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,4BAA4B,CACjD,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,gCAAgC,GACpC,OAAO,CAAC,gBAAgB,CAAC,CAiD3B;AAID,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,iBAAiB,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC;CACjD;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,6BAA6B,GACjC,OAAO,CAAC,gBAAgB,CAAC,CA2C3B"}

package/dist/ops/file-from-bytes.js

@@ -0,0 +1,133 @@
+/**
+ * High-level "upload + register" flows for the file module. Combines Walrus
+ * upload with on-chain metadata registration in a single PTB so the user
+ * sees one signing popup for the storage step plus one for the on-chain
+ * write (rather than three separate popups).
+ *
+ * Mirrors `entry-from-bytes.ts`'s shape but targets `file::new_encrypted_file`
+ * / `file::new_public_file` instead of `add_entry_to_collection`.
+ */
+import { toEncryptedFileId } from "../codecs.js";
+import { TransportError, UncertifiedBlobError } from "../errors.js";
+import { buildNewEncryptedFile, buildNewPublicFile, buildShareFile, } from "../ptb/file.js";
+import { isWalrusFlowCapable } from "../walrus/adapter.js";
+import { findCreatedId } from "./internal.js";
+/**
+ * Encrypt `plaintext` via Seal under the allowlist's identity, upload the
+ * ciphertext to Walrus, and register an `EncryptedFile` metadata record in
+ * one combined transaction. Two wallet popups: register_blob, then
+ * certify_blob + new_encrypted_file + share_file.
+ *
+ * The caller supplies `sealId` rather than having the flow construct it,
+ * so the decryption side can use the same identity bytes without an
+ * implicit shared-secret round-trip. Build via:
+ *
+ *   const nonce = crypto.getRandomValues(new Uint8Array(16));
+ *   const sealId = buildAllowlistSealId(allowlistId, nonce);
+ *
+ * Reuse the same nonce-derived sealId when decrypting (consumers can
+ * recover it by reading the encrypted ciphertext header — Seal stores the
+ * identity in the ciphertext envelope).
+ *
+ * @throws {SealError} If encryption fails (no popup yet).
+ * @throws {UncertifiedBlobError} If the combined popup fails after upload
+ *   succeeded. The blob is on Walrus but uncertified; retry the full flow.
+ * @throws {ContractAbortError} On Move abort during simulation.
+ * @throws {TransportError} On RPC, network, or pre-upload failure.
+ */
+export async function uploadEncryptedFileFromBytes(adapter, config, args) {
+    assertFlowCapable(args.walrus);
+    args.onProgress?.({ phase: "encrypting" });
+    const { ciphertext } = await args.seal.encrypt(args.plaintext, {
+        sealId: args.sealId,
+    });
+    args.onProgress?.({ phase: "uploading" });
+    const upload = await args.walrus.startBlobUpload(ciphertext, args.upload);
+    try {
+        const tx = upload.certifyTransaction;
+        const created = buildNewEncryptedFile(tx, {
+            packageId: config.packageId,
+            blobId: upload.blobId,
+            blobObjectId: upload.blobObjectId,
+            name: args.name,
+            contentType: args.contentType,
+            size: BigInt(args.plaintext.length),
+            allowlistId: args.allowlistId,
+        });
+        buildShareFile(tx, {
+            packageId: config.packageId,
+            file: created,
+        });
+        args.onProgress?.({ phase: "submitting" });
+        const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+        // See ops/allowlist.ts: file::EncryptedFile was introduced in v2.
+        const typePrefix = config.packageId;
+        const fileId = toEncryptedFileId(findCreatedId(receipt, `${typePrefix}::file::EncryptedFile`));
+        args.onProgress?.({ phase: "complete" });
+        return {
+            digest: receipt.digest,
+            gasUsedMist: receipt.gasUsedMist,
+            fileId,
+            blobId: upload.blobId,
+            blobObjectId: upload.blobObjectId,
+        };
+    }
+    catch (cause) {
+        if (cause instanceof UncertifiedBlobError)
+            throw cause;
+        throw new UncertifiedBlobError(upload.blobObjectId, upload.blobId, {
+            cause,
+        });
+    }
+}
+/**
+ * Upload `bytes` to Walrus unencrypted and register a public `EncryptedFile`
+ * metadata record (`encrypted: false`, `allowlistId: null`) in one combined
+ * transaction. Two wallet popups; no Seal involvement.
+ */
+export async function uploadPublicFileFromBytes(adapter, config, args) {
+    assertFlowCapable(args.walrus);
+    args.onProgress?.({ phase: "uploading" });
+    const upload = await args.walrus.startBlobUpload(args.bytes, args.upload);
+    try {
+        const tx = upload.certifyTransaction;
+        const created = buildNewPublicFile(tx, {
+            packageId: config.packageId,
+            blobId: upload.blobId,
+            blobObjectId: upload.blobObjectId,
+            name: args.name,
+            contentType: args.contentType,
+            size: BigInt(args.bytes.length),
+        });
+        buildShareFile(tx, {
+            packageId: config.packageId,
+            file: created,
+        });
+        args.onProgress?.({ phase: "submitting" });
+        const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+        // See ops/allowlist.ts: file::EncryptedFile was introduced in v2.
+        const typePrefix = config.packageId;
+        const fileId = toEncryptedFileId(findCreatedId(receipt, `${typePrefix}::file::EncryptedFile`));
+        args.onProgress?.({ phase: "complete" });
+        return {
+            digest: receipt.digest,
+            gasUsedMist: receipt.gasUsedMist,
+            fileId,
+            blobId: upload.blobId,
+            blobObjectId: upload.blobObjectId,
+        };
+    }
+    catch (cause) {
+        if (cause instanceof UncertifiedBlobError)
+            throw cause;
+        throw new UncertifiedBlobError(upload.blobObjectId, upload.blobId, {
+            cause,
+        });
+    }
+}
+function assertFlowCapable(walrus) {
+    if (!isWalrusFlowCapable(walrus)) {
+        throw new TransportError("uploadEncryptedFileFromBytes / uploadPublicFileFromBytes require a WalrusWriteAdapter that implements WalrusFlowCapable (i.e. exposes startBlobUpload). The default DefaultWalrusWriteAdapter does. Custom adapters that do not implement the capability should compose walrus.uploadBlob + create_*_file (3 popups) instead.", { operation: "sdk.uploadFileFromBytes" });
+    }
+}
+//# sourceMappingURL=file-from-bytes.js.map

package/dist/ops/file-from-bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-from-bytes.js","sourceRoot":"","sources":["../../src/ops/file-from-bytes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EACN,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,GACd,MAAM,gBAAgB,CAAC;AAexB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAoC9C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,OAAsB,EACtB,MAA0B,EAC1B,IAAsC;IAEtC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/B,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;QAC9D,MAAM,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAE1E,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACrC,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,EAAE;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAC;QACH,cAAc,CAAC,EAAE,EAAE;YAClB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,IAAI,EAAE,OAA+C;SACrD,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzE,kEAAkE;QAClE,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;QACpC,MAAM,MAAM,GAAG,iBAAiB,CAC/B,aAAa,CAAC,OAAO,EAAE,GAAG,UAAU,uBAAuB,CAAC,CAC5D,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACzC,OAAO;YACN,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,YAAY;SACjC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,KAAK,CAAC;QACvD,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE;YAClE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAcD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAsB,EACtB,MAA0B,EAC1B,IAAmC;IAEnC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/B,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAE1E,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACrC,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,EAAE;YACtC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;SAC/B,CAAC,CAAC;QACH,cAAc,CAAC,EAAE,EAAE;YAClB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,IAAI,EAAE,OAA+C;SACrD,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzE,kEAAkE;QAClE,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;QACpC,MAAM,MAAM,GAAG,iBAAiB,CAC/B,aAAa,CAAC,OAAO,EAAE,GAAG,UAAU,uBAAuB,CAAC,CAC5D,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACzC,OAAO;YACN,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,YAAY;SACjC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,KAAK,CAAC;QACvD,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE;YAClE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CACzB,MAA0B;IAE1B,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CACvB,+TAA+T,EAC/T,EAAE,SAAS,EAAE,yBAAyB,EAAE,CACxC,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/ops/file.d.ts

@@ -0,0 +1,88 @@
+/**
+ * High-level file ops: build a PTB, sign and execute via the wallet adapter,
+ * parse the receipt into a typed result.
+ *
+ * Encrypted-file creation here registers the metadata record assuming the
+ * encrypted bytes are already on Walrus. The all-in-one upload+register
+ * flow is `uploadEncryptedFileFromBytes` in `file-from-bytes.ts`.
+ */
+import type { MorsePackageConfig } from "../config.js";
+import type { AllowlistId, BlobObjectId, EncryptedFileId, SuiAddress, WalrusBlobId } from "../types.js";
+import type { WalletAdapter } from "../wallets/adapter.js";
+export interface CreateEncryptedFileArgs {
+    readonly allowlistId: AllowlistId;
+    readonly blobId: WalrusBlobId;
+    readonly blobObjectId?: BlobObjectId;
+    readonly name: string;
+    readonly contentType: string;
+    readonly size: bigint;
+    readonly signal?: AbortSignal;
+}
+export interface CreateFileResult {
+    readonly digest: string;
+    readonly gasUsedMist: bigint;
+    readonly fileId: EncryptedFileId;
+}
+/**
+ * Register on-chain metadata for an encrypted file already uploaded to Walrus.
+ * The bytes at `blobId` MUST be Seal-encrypted under an identity built from
+ * `allowlistId` (see `buildAllowlistSealId`); otherwise consumers will fail
+ * to decrypt. The SDK does not verify this binding.
+ *
+ * @throws {ValidationError} If `name` or `contentType` is empty or exceeds length limits.
+ * @throws {ContractAbortError} On Move abort (e.g. empty blob_id).
+ * @throws {TransportError} On RPC, network, or response-parsing failure.
+ */
+export declare function createEncryptedFile(adapter: WalletAdapter, config: MorsePackageConfig, args: CreateEncryptedFileArgs): Promise<CreateFileResult>;
+export interface CreatePublicFileArgs {
+    readonly blobId: WalrusBlobId;
+    readonly blobObjectId?: BlobObjectId;
+    readonly name: string;
+    readonly contentType: string;
+    readonly size: bigint;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Register on-chain metadata for an unencrypted file. The bytes at `blobId`
+ * are publicly readable via the Walrus aggregator.
+ */
+export declare function createPublicFile(adapter: WalletAdapter, config: MorsePackageConfig, args: CreatePublicFileArgs): Promise<CreateFileResult>;
+export interface UpdateFileMetadataArgs {
+    readonly fileId: EncryptedFileId;
+    readonly name: string;
+    readonly contentType: string;
+    readonly signal?: AbortSignal;
+}
+export interface FileOpResult {
+    readonly digest: string;
+    readonly gasUsedMist: bigint;
+}
+/**
+ * Update the file's `name` and `content_type`. Other fields are immutable
+ * post-creation; create a new file record to swap the blob or change the
+ * allowlist. Owner only (sender must equal `file.owner` on-chain).
+ */
+export declare function updateFileMetadata(adapter: WalletAdapter, config: MorsePackageConfig, args: UpdateFileMetadataArgs): Promise<FileOpResult>;
+export interface TransferFileOwnershipArgs {
+    readonly fileId: EncryptedFileId;
+    readonly newOwner: SuiAddress;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Transfer the metadata-mutation right to a new address. Decryption access
+ * is governed separately by the file's allowlist; the new owner must be
+ * added to that allowlist (and the previous owner removed, if desired) by
+ * the Cap holder. The two operations can be composed in one PTB by the
+ * caller if both rights need to move together.
+ */
+export declare function transferFileOwnership(adapter: WalletAdapter, config: MorsePackageConfig, args: TransferFileOwnershipArgs): Promise<FileOpResult>;
+export interface DeleteFileArgs {
+    readonly fileId: EncryptedFileId;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Delete the on-chain metadata record. Does NOT delete the Walrus blob;
+ * that follows the Walrus lease lifecycle independently.
+ */
+export declare function deleteFile(adapter: WalletAdapter, config: MorsePackageConfig, args: DeleteFileArgs): Promise<FileOpResult>;
+//# sourceMappingURL=file.d.ts.map

package/dist/ops/file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../src/ops/file.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAUvD,OAAO,KAAK,EACX,WAAW,EACX,YAAY,EACZ,eAAe,EACf,UAAU,EACV,YAAY,EACZ,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAM3D,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CACjC;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,uBAAuB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CA8B3B;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACrC,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,oBAAoB,GACxB,OAAO,CAAC,gBAAgB,CAAC,CA6B3B;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACvC,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,sBAAsB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAYvB;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,yBAAyB,GAC7B,OAAO,CAAC,YAAY,CAAC,CASvB;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC/B,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,cAAc,GAClB,OAAO,CAAC,YAAY,CAAC,CAQvB"}

package/dist/ops/file.js

@@ -0,0 +1,142 @@
+/**
+ * High-level file ops: build a PTB, sign and execute via the wallet adapter,
+ * parse the receipt into a typed result.
+ *
+ * Encrypted-file creation here registers the metadata record assuming the
+ * encrypted bytes are already on Walrus. The all-in-one upload+register
+ * flow is `uploadEncryptedFileFromBytes` in `file-from-bytes.ts`.
+ */
+import { Transaction, } from "@mysten/sui/transactions";
+import { toEncryptedFileId } from "../codecs.js";
+import { ValidationError } from "../errors.js";
+import { buildDeleteFile, buildNewEncryptedFile, buildNewPublicFile, buildShareFile, buildTransferFileOwnership, buildUpdateFileMetadata, } from "../ptb/file.js";
+import { findCreatedId } from "./internal.js";
+const MAX_FILE_NAME_LENGTH = 256;
+const MAX_CONTENT_TYPE_LENGTH = 255;
+/**
+ * Register on-chain metadata for an encrypted file already uploaded to Walrus.
+ * The bytes at `blobId` MUST be Seal-encrypted under an identity built from
+ * `allowlistId` (see `buildAllowlistSealId`); otherwise consumers will fail
+ * to decrypt. The SDK does not verify this binding.
+ *
+ * @throws {ValidationError} If `name` or `contentType` is empty or exceeds length limits.
+ * @throws {ContractAbortError} On Move abort (e.g. empty blob_id).
+ * @throws {TransportError} On RPC, network, or response-parsing failure.
+ */
+export async function createEncryptedFile(adapter, config, args) {
+    validateFileFields(args.name, args.contentType);
+    const tx = new Transaction();
+    const created = buildNewEncryptedFile(tx, {
+        packageId: config.packageId,
+        blobId: args.blobId,
+        ...(args.blobObjectId === undefined
+            ? {}
+            : { blobObjectId: args.blobObjectId }),
+        name: args.name,
+        contentType: args.contentType,
+        size: args.size,
+        allowlistId: args.allowlistId,
+    });
+    const fileArg = created;
+    buildShareFile(tx, { packageId: config.packageId, file: fileArg });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    // See ops/allowlist.ts: file::EncryptedFile was introduced in v2; type
+    // identity is rooted at config.packageId, not originalPackageId.
+    const typePrefix = config.packageId;
+    return {
+        digest: receipt.digest,
+        gasUsedMist: receipt.gasUsedMist,
+        fileId: toEncryptedFileId(findCreatedId(receipt, `${typePrefix}::file::EncryptedFile`)),
+    };
+}
+/**
+ * Register on-chain metadata for an unencrypted file. The bytes at `blobId`
+ * are publicly readable via the Walrus aggregator.
+ */
+export async function createPublicFile(adapter, config, args) {
+    validateFileFields(args.name, args.contentType);
+    const tx = new Transaction();
+    const created = buildNewPublicFile(tx, {
+        packageId: config.packageId,
+        blobId: args.blobId,
+        ...(args.blobObjectId === undefined
+            ? {}
+            : { blobObjectId: args.blobObjectId }),
+        name: args.name,
+        contentType: args.contentType,
+        size: args.size,
+    });
+    const fileArg = created;
+    buildShareFile(tx, { packageId: config.packageId, file: fileArg });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    // See ops/allowlist.ts: file::EncryptedFile was introduced in v2; type
+    // identity is rooted at config.packageId, not originalPackageId.
+    const typePrefix = config.packageId;
+    return {
+        digest: receipt.digest,
+        gasUsedMist: receipt.gasUsedMist,
+        fileId: toEncryptedFileId(findCreatedId(receipt, `${typePrefix}::file::EncryptedFile`)),
+    };
+}
+/**
+ * Update the file's `name` and `content_type`. Other fields are immutable
+ * post-creation; create a new file record to swap the blob or change the
+ * allowlist. Owner only (sender must equal `file.owner` on-chain).
+ */
+export async function updateFileMetadata(adapter, config, args) {
+    validateFileFields(args.name, args.contentType);
+    const tx = new Transaction();
+    buildUpdateFileMetadata(tx, {
+        packageId: config.packageId,
+        fileId: args.fileId,
+        name: args.name,
+        contentType: args.contentType,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+/**
+ * Transfer the metadata-mutation right to a new address. Decryption access
+ * is governed separately by the file's allowlist; the new owner must be
+ * added to that allowlist (and the previous owner removed, if desired) by
+ * the Cap holder. The two operations can be composed in one PTB by the
+ * caller if both rights need to move together.
+ */
+export async function transferFileOwnership(adapter, config, args) {
+    const tx = new Transaction();
+    buildTransferFileOwnership(tx, {
+        packageId: config.packageId,
+        fileId: args.fileId,
+        newOwner: args.newOwner,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+/**
+ * Delete the on-chain metadata record. Does NOT delete the Walrus blob;
+ * that follows the Walrus lease lifecycle independently.
+ */
+export async function deleteFile(adapter, config, args) {
+    const tx = new Transaction();
+    buildDeleteFile(tx, {
+        packageId: config.packageId,
+        fileId: args.fileId,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+function validateFileFields(name, contentType) {
+    if (name.length === 0) {
+        throw new ValidationError("File name cannot be empty", "name");
+    }
+    if (name.length > MAX_FILE_NAME_LENGTH) {
+        throw new ValidationError(`File name exceeds ${MAX_FILE_NAME_LENGTH} chars`, "name");
+    }
+    if (contentType.length === 0) {
+        throw new ValidationError("Content type cannot be empty", "contentType");
+    }
+    if (contentType.length > MAX_CONTENT_TYPE_LENGTH) {
+        throw new ValidationError(`Content type exceeds ${MAX_CONTENT_TYPE_LENGTH} chars`, "contentType");
+    }
+}
+//# sourceMappingURL=file.js.map

package/dist/ops/file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.js","sourceRoot":"","sources":["../../src/ops/file.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACN,WAAW,GAEX,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EACN,eAAe,EACf,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,0BAA0B,EAC1B,uBAAuB,GACvB,MAAM,gBAAgB,CAAC;AASxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAkBpC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,OAAsB,EACtB,MAA0B,EAC1B,IAA6B;IAE7B,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAEhD,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,EAAE;QACzC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;KAC7B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAA+C,CAAC;IAChE,cAAc,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAEnE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;IAEpC,OAAO;QACN,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,iBAAiB,CACxB,aAAa,CAAC,OAAO,EAAE,GAAG,UAAU,uBAAuB,CAAC,CAC5D;KACD,CAAC;AACH,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,OAAsB,EACtB,MAA0B,EAC1B,IAA0B;IAE1B,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAEhD,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,EAAE;QACtC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;KACf,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAA+C,CAAC;IAChE,cAAc,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAEnE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;IAEpC,OAAO;QACN,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,iBAAiB,CACxB,aAAa,CAAC,OAAO,EAAE,GAAG,UAAU,uBAAuB,CAAC,CAC5D;KACD,CAAC;AACH,CAAC;AAcD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,OAAsB,EACtB,MAA0B,EAC1B,IAA4B;IAE5B,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAEhD,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,uBAAuB,CAAC,EAAE,EAAE;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;KAC7B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,OAAsB,EACtB,MAA0B,EAC1B,IAA+B;IAE/B,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,0BAA0B,CAAC,EAAE,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,OAAsB,EACtB,MAA0B,EAC1B,IAAoB;IAEpB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,EAAE;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,WAAmB;IAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACxC,MAAM,IAAI,eAAe,CACxB,qBAAqB,oBAAoB,QAAQ,EACjD,MAAM,CACN,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,8BAA8B,EAAE,aAAa,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CACxB,wBAAwB,uBAAuB,QAAQ,EACvD,aAAa,CACb,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/ops/index.d.ts

@@ -1,9 +1,12 @@
 /**
  * Public barrel for the high-level ops layer.
  */
+export { type AddMemberArgs, type AllowlistOpResult, addMember, type CreateAllowlistArgs, type CreateAllowlistResult, createAllowlist, type DeleteAllowlistArgs, deleteAllowlist, type RemoveMemberArgs, removeMember, type TransferAllowlistCapArgs, transferAllowlistCap, } from "./allowlist.js";
 export { type DestroyPublisherCapArgs, type DestroyPublisherCapResult, destroyPublisherCap, type IssuePublisherCapArgs, type IssuePublisherCapResult, issuePublisherCap, type RevokePublisherCapArgs, type RevokePublisherCapResult, revokePublisherCap, type TransferPublisherCapArgs, type TransferPublisherCapResult, transferPublisherCap, } from "./cap.js";
 export { type CreateCollectionArgs, type CreateCollectionResult, createCollection, type DeleteCollectionArgs, type DeleteCollectionResult, deleteCollection, } from "./collection.js";
 export { type AddEncryptedEntryArgs, type AddEntryArgs, type AddEntryResult, type AppendDraftRevisionArgs, type AppendEncryptedDraftRevisionArgs, addEncryptedEntry, addEntry, appendDraftRevision, appendEncryptedDraftRevision, type DeleteEntryArgs, type DeleteEntryResult, deleteEntry, type PublishDirectArgs, type PublishFromDraftArgs, publishDirect, publishFromDraft, type RevisionAppendResult, } from "./entry.js";
 export { type AddEncryptedEntryFromBytesArgs, type AddEntryFromBytesArgs, type AddEntryFromBytesResult, addEncryptedEntryFromBytes, addEntryFromBytes, type ProgressCallback, type ProgressEvent, } from "./entry-from-bytes.js";
+export { type CreateEncryptedFileArgs, type CreateFileResult, type CreatePublicFileArgs, createEncryptedFile, createPublicFile, type DeleteFileArgs, deleteFile, type FileOpResult, type TransferFileOwnershipArgs, transferFileOwnership, type UpdateFileMetadataArgs, updateFileMetadata, } from "./file.js";
+export { type FileUploadProgressCallback, type FileUploadProgressEvent, type UploadEncryptedFileFromBytesArgs, type UploadFileResult, type UploadPublicFileFromBytesArgs, uploadEncryptedFileFromBytes, uploadPublicFileFromBytes, } from "./file-from-bytes.js";
 export { type CreatePublicationArgs, type CreatePublicationResult, createPublication, type DeletePublicationArgs, type DeletePublicationResult, deletePublication, type PublicationConfig, type TransferOwnershipArgs, type TransferOwnershipResult, transferOwnership, } from "./publication.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/ops/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ops/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACN,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,oBAAoB,GACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,gBAAgB,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,iBAAiB,EACjB,QAAQ,EACR,mBAAmB,EACnB,4BAA4B,EAC5B,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,aAAa,EACb,gBAAgB,EAChB,KAAK,oBAAoB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,KAAK,8BAA8B,EACnC,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,0BAA0B,EAC1B,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,GACjB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ops/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,SAAS,EACT,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,eAAe,EACf,KAAK,mBAAmB,EACxB,eAAe,EACf,KAAK,gBAAgB,EACrB,YAAY,EACZ,KAAK,wBAAwB,EAC7B,oBAAoB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,oBAAoB,GACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,gBAAgB,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,iBAAiB,EACjB,QAAQ,EACR,mBAAmB,EACnB,4BAA4B,EAC5B,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,aAAa,EACb,gBAAgB,EAChB,KAAK,oBAAoB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,KAAK,8BAA8B,EACnC,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,0BAA0B,EAC1B,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,cAAc,EACnB,UAAU,EACV,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC9B,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,kBAAkB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EACN,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,KAAK,gBAAgB,EACrB,KAAK,6BAA6B,EAClC,4BAA4B,EAC5B,yBAAyB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,GACjB,MAAM,kBAAkB,CAAC"}

package/dist/ops/index.js

@@ -1,9 +1,12 @@
 /**
  * Public barrel for the high-level ops layer.
  */
+export { addMember, createAllowlist, deleteAllowlist, removeMember, transferAllowlistCap, } from "./allowlist.js";
 export { destroyPublisherCap, issuePublisherCap, revokePublisherCap, transferPublisherCap, } from "./cap.js";
 export { createCollection, deleteCollection, } from "./collection.js";
 export { addEncryptedEntry, addEntry, appendDraftRevision, appendEncryptedDraftRevision, deleteEntry, publishDirect, publishFromDraft, } from "./entry.js";
 export { addEncryptedEntryFromBytes, addEntryFromBytes, } from "./entry-from-bytes.js";
+export { createEncryptedFile, createPublicFile, deleteFile, transferFileOwnership, updateFileMetadata, } from "./file.js";
+export { uploadEncryptedFileFromBytes, uploadPublicFileFromBytes, } from "./file-from-bytes.js";
 export { createPublication, deletePublication, transferOwnership, } from "./publication.js";
 //# sourceMappingURL=index.js.map