@arcadiasystems/morse-sdk 0.1.4 → 0.3.0

package/dist/read/files-events.js

@@ -0,0 +1,194 @@
+/**
+ * Event type constants and pure reconciliation helpers for the file +
+ * allowlist modules. Designed for consumers integrating a Sui indexer of
+ * their choice: fetch events from your indexer, pass them here, get back a
+ * deduplicated `EncryptedFileSummary[]` that reflects the current state.
+ *
+ * The SDK intentionally does NOT ship an event-fetching client. Sui v2 gRPC
+ * has no historical event query method, and the legacy `suix_queryEvents`
+ * JSON-RPC endpoint is on Mysten's deprecation track. Picking an indexer
+ * (Mysten public, self-hosted, third-party) is a consumer concern; the SDK
+ * owns the parsing + reconciliation logic which is the morse-contract-
+ * specific part.
+ *
+ * Pagination, retention, auth, and CORS are entirely the consumer's
+ * responsibility; they live with the indexer client, not here.
+ */
+import { ValidationError } from "../errors.js";
+/**
+ * Build the fully-qualified event type strings for a given file-events
+ * origin package id. The origin id is the package where the event structs
+ * were FIRST defined, which is independent of `config.packageId` (the
+ * current published-at, which moves on every upgrade).
+ *
+ * Pass `config.filesEventOriginPackageId` here. The SDK ships the testnet
+ * default in `morseConfig`; custom deployments supply their own.
+ *
+ * @throws {ValidationError} If `packageId` is missing.
+ */
+export function buildFilesEventTypes(packageId) {
+    if (!packageId) {
+        throw new ValidationError("buildFilesEventTypes: packageId is required (pass config.filesEventOriginPackageId)", "packageId");
+    }
+    return {
+        FileCreated: `${packageId}::file::FileCreated`,
+        FileDeleted: `${packageId}::file::FileDeleted`,
+        FileMetadataUpdated: `${packageId}::file::FileMetadataUpdated`,
+        FileOwnershipTransferred: `${packageId}::file::FileOwnershipTransferred`,
+        AllowlistCreated: `${packageId}::allowlist::AllowlistCreated`,
+        AllowlistDeleted: `${packageId}::allowlist::AllowlistDeleted`,
+        MemberAdded: `${packageId}::allowlist::MemberAdded`,
+        MemberRemoved: `${packageId}::allowlist::MemberRemoved`,
+        CapTransferred: `${packageId}::allowlist::CapTransferred`,
+    };
+}
+/**
+ * Reconcile a stream of Sui events into the current set of files owned by
+ * `address`. Caller is responsible for fetching events (typically via an
+ * indexer); pass all `FileCreated`, `FileOwnershipTransferred`, and
+ * `FileDeleted` events from the event types built via `buildFilesEventTypes`.
+ *
+ * Order-independence: events are sorted internally by `timestampMs` before
+ * reconciliation, so passing them in arbitrary order produces the same
+ * result. Events with `timestampMs === null` are skipped (unconfirmed).
+ *
+ * Best-effort: if `FileOwnershipTransferred` references a `file` whose
+ * `FileCreated` is missing from the input (e.g. retention pruning), the
+ * incoming transfer is dropped silently; there is no way to recover the
+ * metadata without the original event. Increase the indexer's event
+ * window if completeness is critical.
+ */
+export function reconcileFilesOwnedBy(events, address, eventTypes) {
+    const known = new Map();
+    const owners = new Map();
+    const sorted = sortByTimestamp(events);
+    for (const event of sorted) {
+        const ts = parseTimestampMs(event.timestampMs);
+        if (ts === null)
+            continue;
+        if (event.type === eventTypes.FileCreated) {
+            const payload = event.parsedJson;
+            const summary = payloadToSummary(payload, ts);
+            known.set(summary.id, summary);
+            owners.set(summary.id, summary.owner);
+        }
+        else if (event.type === eventTypes.FileOwnershipTransferred) {
+            const payload = event.parsedJson;
+            owners.set(payload.file, payload.new_owner);
+        }
+        else if (event.type === eventTypes.FileDeleted) {
+            const payload = event.parsedJson;
+            known.delete(payload.file);
+            owners.delete(payload.file);
+        }
+    }
+    const out = [];
+    for (const [fileId, summary] of known) {
+        if (owners.get(fileId) === address) {
+            out.push(summary);
+        }
+    }
+    return out.sort((a, b) => b.createdAtMs - a.createdAtMs);
+}
+/**
+ * Reconcile a stream of events into the current set of files where
+ * `address` has decrypt access via allowlist membership. Caller passes
+ * `MemberAdded`, `MemberRemoved`, `AllowlistDeleted`, `FileCreated`, and
+ * `FileDeleted` events.
+ *
+ * Same best-effort guarantees as `reconcileFilesOwnedBy`. Files referencing
+ * an `AllowlistDeleted` allowlist are dropped (the on-chain `seal_approve`
+ * dry-run would fail for them anyway).
+ */
+export function reconcileFilesAccessibleBy(events, address, eventTypes) {
+    const memberAllowlists = new Set();
+    const deletedAllowlists = new Set();
+    const knownFiles = new Map();
+    const sorted = sortByTimestamp(events);
+    for (const event of sorted) {
+        const ts = parseTimestampMs(event.timestampMs);
+        if (ts === null)
+            continue;
+        if (event.type === eventTypes.MemberAdded) {
+            const payload = event.parsedJson;
+            if (payload.member === address) {
+                memberAllowlists.add(payload.allowlist);
+            }
+        }
+        else if (event.type === eventTypes.MemberRemoved) {
+            const payload = event.parsedJson;
+            if (payload.member === address) {
+                memberAllowlists.delete(payload.allowlist);
+            }
+        }
+        else if (event.type === eventTypes.AllowlistDeleted) {
+            const payload = event.parsedJson;
+            deletedAllowlists.add(payload.allowlist);
+            memberAllowlists.delete(payload.allowlist);
+        }
+        else if (event.type === eventTypes.FileCreated) {
+            const payload = event.parsedJson;
+            const summary = payloadToSummary(payload, ts);
+            knownFiles.set(summary.id, summary);
+        }
+        else if (event.type === eventTypes.FileDeleted) {
+            const payload = event.parsedJson;
+            knownFiles.delete(payload.file);
+        }
+    }
+    const out = [];
+    for (const summary of knownFiles.values()) {
+        if (summary.allowlistId === null)
+            continue;
+        const allowlistKey = summary.allowlistId;
+        if (deletedAllowlists.has(allowlistKey))
+            continue;
+        if (!memberAllowlists.has(allowlistKey))
+            continue;
+        out.push(summary);
+    }
+    return out.sort((a, b) => b.createdAtMs - a.createdAtMs);
+}
+// internal
+function sortByTimestamp(events) {
+    return [...events].sort((a, b) => {
+        const ta = parseTimestampMs(a.timestampMs) ?? Number.POSITIVE_INFINITY;
+        const tb = parseTimestampMs(b.timestampMs) ?? Number.POSITIVE_INFINITY;
+        return ta - tb;
+    });
+}
+function parseTimestampMs(value) {
+    if (value === null || value === undefined)
+        return null;
+    const num = typeof value === "string" ? Number(value) : value;
+    return Number.isFinite(num) ? num : null;
+}
+function payloadToSummary(payload, createdAtMs) {
+    return {
+        kind: "summary",
+        id: payload.file,
+        owner: payload.owner,
+        name: payload.name,
+        contentType: payload.content_type,
+        size: typeof payload.size === "string" ? Number(payload.size) : payload.size,
+        encrypted: payload.encrypted,
+        allowlistId: extractAllowlistId(payload.allowlist_id),
+        createdAtMs,
+    };
+}
+/**
+ * `Option<ID>` in Move serializes as either a plain string (the address),
+ * `null`, or `{ vec: [address] | [] }` depending on the indexer's decoder.
+ * Normalize all three to `AllowlistId | null`.
+ */
+function extractAllowlistId(raw) {
+    if (raw === null || raw === undefined)
+        return null;
+    if (typeof raw === "string")
+        return raw;
+    if (Array.isArray(raw.vec) && raw.vec.length > 0 && raw.vec[0]) {
+        return raw.vec[0];
+    }
+    return null;
+}
+//# sourceMappingURL=files-events.js.map

package/dist/read/files-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files-events.js","sourceRoot":"","sources":["../../src/read/files-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAsB/C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAoB;IACxD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CACxB,qFAAqF,EACrF,WAAW,CACX,CAAC;IACH,CAAC;IACD,OAAO;QACN,WAAW,EAAE,GAAG,SAAS,qBAAqB;QAC9C,WAAW,EAAE,GAAG,SAAS,qBAAqB;QAC9C,mBAAmB,EAAE,GAAG,SAAS,6BAA6B;QAC9D,wBAAwB,EAAE,GAAG,SAAS,kCAAkC;QACxE,gBAAgB,EAAE,GAAG,SAAS,+BAA+B;QAC7D,gBAAgB,EAAE,GAAG,SAAS,+BAA+B;QAC7D,WAAW,EAAE,GAAG,SAAS,0BAA0B;QACnD,aAAa,EAAE,GAAG,SAAS,4BAA4B;QACvD,cAAc,EAAE,GAAG,SAAS,6BAA6B;KACzD,CAAC;AACH,CAAC;AAqDD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACpC,MAAkC,EAClC,OAAmB,EACnB,UAA2B;IAE3B,MAAM,KAAK,GAAsC,IAAI,GAAG,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAwB,IAAI,GAAG,EAAE,CAAC;IAE9C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS;QAE1B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,UAAgC,CAAC;YACvD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAuB,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAuB,EAAE,OAAO,CAAC,KAAe,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,wBAAwB,EAAE,CAAC;YAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,UAA6C,CAAC;YACpE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,UAAgC,CAAC;YACvD,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACF,CAAC;IAED,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAM,OAA6B,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACzC,MAAkC,EAClC,OAAmB,EACnB,UAA2B;IAE3B,MAAM,gBAAgB,GAAgB,IAAI,GAAG,EAAE,CAAC;IAChD,MAAM,iBAAiB,GAAgB,IAAI,GAAG,EAAE,CAAC;IACjD,MAAM,UAAU,GAAsC,IAAI,GAAG,EAAE,CAAC;IAEhE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS;QAE1B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,UAAiC,CAAC;YACxD,IAAI,OAAO,CAAC,MAAM,KAAM,OAA6B,EAAE,CAAC;gBACvD,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzC,CAAC;QACF,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,aAAa,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,UAAiC,CAAC;YACxD,IAAI,OAAO,CAAC,MAAM,KAAM,OAA6B,EAAE,CAAC;gBACvD,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC5C,CAAC;QACF,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,gBAAgB,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,KAAK,CAAC,UAAqC,CAAC;YAC5D,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,UAAgC,CAAC;YACvD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9C,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAuB,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,UAAgC,CAAC;YACvD,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACF,CAAC;IAED,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI;YAAE,SAAS;QAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,WAAgC,CAAC;QAC9D,IAAI,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,SAAS;QAClD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,WAAW;AAEX,SAAS,eAAe,CACvB,MAAkC;IAElC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,iBAAiB,CAAC;QACvE,MAAM,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,iBAAiB,CAAC;QACvE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACxB,KAAyC;IAEzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,SAAS,gBAAgB,CACxB,OAA2B,EAC3B,WAAmB;IAEnB,OAAO;QACN,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,OAAO,CAAC,IAAkC;QAC9C,KAAK,EAAE,OAAO,CAAC,KAA8B;QAC7C,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,YAAY;QACjC,IAAI,EACH,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;QACvE,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC;QACrD,WAAW;KACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAC1B,GAA+C;IAE/C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAA6B,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAA2B,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/read/files-reader.d.ts

@@ -0,0 +1,59 @@
+/**
+ * RPC-backed reader for the allowlist + file modules. EncryptedFile objects
+ * are shared (every successful create_*_file flow calls share_file), so
+ * "list files owned by an address" is not exposed at the RPC layer — there
+ * is no on-chain owner field for `listOwnedObjects` to filter on. Listing
+ * accessible files requires event-based indexing; a future indexer-backed
+ * implementation will expose it through this same interface.
+ */
+import type { ObjectReader } from "../clients.js";
+import type { Allowlist, AllowlistCap, AllowlistId, EncryptedFile, EncryptedFileId, PackageId, SuiAddress } from "../types.js";
+/** Result of a single page of `listAllowlistCapsOwnedBy`. */
+export interface AllowlistCapListPage {
+    readonly results: readonly AllowlistCap[];
+    readonly nextCursor: string | null;
+}
+/** Options for paginated list calls in `FilesReader`. */
+export interface FilesListOptions {
+    readonly limit?: number;
+    readonly cursor?: string;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Read-only access to the files domain: Allowlist objects, EncryptedFile
+ * metadata records, and the AllowlistCaps owned by a given address.
+ *
+ * Notably absent: there is no `listEncryptedFilesOwnedBy(address)` because
+ * EncryptedFile is a shared object with no on-chain owner field; `address`
+ * cannot index into anything. List the AllowlistCaps an address holds
+ * (admin access), then fetch each cap's `allowlistId` and inspect the
+ * allowlist's `members` set, or subscribe to the contract's events.
+ */
+export interface FilesReader {
+    getAllowlist(id: AllowlistId, signal?: AbortSignal): Promise<Allowlist>;
+    getEncryptedFile(id: EncryptedFileId, signal?: AbortSignal): Promise<EncryptedFile>;
+    listAllowlistCapsOwnedBy(address: SuiAddress, options?: FilesListOptions): Promise<AllowlistCapListPage>;
+}
+export declare class RpcFilesReader implements FilesReader {
+    private readonly client;
+    private readonly typePackageId;
+    constructor(client: ObjectReader, typePackageId: PackageId);
+    /**
+     * Build a reader from a morse package config. Uses `packageId` (the
+     * current published-at) for type filters because the allowlist + file
+     * modules were introduced in the v2 upgrade — Sui identifies a type by
+     * the package id where it was DEFINED, not by the package's genesis
+     * original-id. This differs from `RpcPublicationReader`, which uses
+     * `originalPackageId` because publication / collection / entry were
+     * defined in v1.
+     */
+    static fromMorseConfig(config: {
+        packageId: PackageId;
+        originalPackageId?: PackageId;
+    }, client: ObjectReader): RpcFilesReader;
+    getAllowlist(id: AllowlistId, signal?: AbortSignal): Promise<Allowlist>;
+    getEncryptedFile(id: EncryptedFileId, signal?: AbortSignal): Promise<EncryptedFile>;
+    listAllowlistCapsOwnedBy(address: SuiAddress, options?: FilesListOptions): Promise<AllowlistCapListPage>;
+    private callClient;
+}
+//# sourceMappingURL=files-reader.d.ts.map

package/dist/read/files-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files-reader.d.ts","sourceRoot":"","sources":["../../src/read/files-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAUlD,OAAO,KAAK,EACX,SAAS,EACT,YAAY,EACZ,WAAW,EACX,aAAa,EACb,eAAe,EACf,SAAS,EACT,UAAU,EACV,MAAM,aAAa,CAAC;AAIrB,6DAA6D;AAC7D,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,yDAAyD;AACzD,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC3B,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACxE,gBAAgB,CACf,EAAE,EAAE,eAAe,EACnB,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1B,wBAAwB,CACvB,OAAO,EAAE,UAAU,EACnB,OAAO,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACjC;AAED,qBAAa,cAAe,YAAW,WAAW;IAEhD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;gBADb,MAAM,EAAE,YAAY,EACpB,aAAa,EAAE,SAAS;IAG1C;;;;;;;;OAQG;IACH,MAAM,CAAC,eAAe,CACrB,MAAM,EAAE;QAAE,SAAS,EAAE,SAAS,CAAC;QAAC,iBAAiB,CAAC,EAAE,SAAS,CAAA;KAAE,EAC/D,MAAM,EAAE,YAAY,GAClB,cAAc;IAIX,YAAY,CACjB,EAAE,EAAE,WAAW,EACf,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,SAAS,CAAC;IA6Bf,gBAAgB,CACrB,EAAE,EAAE,eAAe,EACnB,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,aAAa,CAAC;IA6BnB,wBAAwB,CAC7B,OAAO,EAAE,UAAU,EACnB,OAAO,GAAE,gBAAqB,GAC5B,OAAO,CAAC,oBAAoB,CAAC;YAkBlB,UAAU;CAaxB"}

package/dist/read/files-reader.js

@@ -0,0 +1,247 @@
+/**
+ * RPC-backed reader for the allowlist + file modules. EncryptedFile objects
+ * are shared (every successful create_*_file flow calls share_file), so
+ * "list files owned by an address" is not exposed at the RPC layer — there
+ * is no on-chain owner field for `listOwnedObjects` to filter on. Listing
+ * accessible files requires event-based indexing; a future indexer-backed
+ * implementation will expose it through this same interface.
+ */
+import { toAllowlistCapId, toAllowlistId, toBlobObjectId, toEncryptedFileId, toSuiAddress, toWalrusBlobId, } from "../codecs.js";
+import { NotFoundError, TransportError, ValidationError } from "../errors.js";
+const DEFAULT_PAGE_LIMIT = 50;
+export class RpcFilesReader {
+    client;
+    typePackageId;
+    constructor(client, typePackageId) {
+        this.client = client;
+        this.typePackageId = typePackageId;
+    }
+    /**
+     * Build a reader from a morse package config. Uses `packageId` (the
+     * current published-at) for type filters because the allowlist + file
+     * modules were introduced in the v2 upgrade — Sui identifies a type by
+     * the package id where it was DEFINED, not by the package's genesis
+     * original-id. This differs from `RpcPublicationReader`, which uses
+     * `originalPackageId` because publication / collection / entry were
+     * defined in v1.
+     */
+    static fromMorseConfig(config, client) {
+        return new RpcFilesReader(client, config.packageId);
+    }
+    async getAllowlist(id, signal) {
+        const validated = toAllowlistId(id);
+        let response;
+        try {
+            response = await this.callClient("getObject", () => this.client.getObject({
+                objectId: validated,
+                include: { json: true },
+                ...(signal === undefined ? {} : { signal }),
+            }));
+        }
+        catch (error) {
+            if (error instanceof TransportError &&
+                isObjectNotFoundError(error.cause, validated)) {
+                throw new NotFoundError("allowlist", validated, {
+                    cause: error.cause,
+                });
+            }
+            throw error;
+        }
+        const object = response.object;
+        if (!object) {
+            throw new NotFoundError("allowlist", validated);
+        }
+        return parseAllowlist(object);
+    }
+    async getEncryptedFile(id, signal) {
+        const validated = toEncryptedFileId(id);
+        let response;
+        try {
+            response = await this.callClient("getObject", () => this.client.getObject({
+                objectId: validated,
+                include: { json: true },
+                ...(signal === undefined ? {} : { signal }),
+            }));
+        }
+        catch (error) {
+            if (error instanceof TransportError &&
+                isObjectNotFoundError(error.cause, validated)) {
+                throw new NotFoundError("encrypted-file", validated, {
+                    cause: error.cause,
+                });
+            }
+            throw error;
+        }
+        const object = response.object;
+        if (!object) {
+            throw new NotFoundError("encrypted-file", validated);
+        }
+        return parseEncryptedFile(object);
+    }
+    async listAllowlistCapsOwnedBy(address, options = {}) {
+        const validated = toSuiAddress(address);
+        const { limit = DEFAULT_PAGE_LIMIT, cursor, signal } = options;
+        const capType = `${this.typePackageId}::allowlist::Cap`;
+        const response = await this.callClient("listOwnedObjects", () => this.client.listOwnedObjects({
+            owner: validated,
+            type: capType,
+            limit,
+            cursor: cursor ?? null,
+            include: { json: true },
+            ...(signal === undefined ? {} : { signal }),
+        }));
+        const results = response.objects.map((object) => parseAllowlistCap(object));
+        return { results, nextCursor: response.cursor };
+    }
+    async callClient(operation, call) {
+        try {
+            return await call();
+        }
+        catch (cause) {
+            throw new TransportError(`${operation} failed`, {
+                cause,
+                operation: `sui.${operation}`,
+            });
+        }
+    }
+}
+function parseAllowlist(object) {
+    const json = object.json;
+    if (!json || typeof json !== "object") {
+        throw new NotFoundError("allowlist", object.objectId);
+    }
+    const record = json;
+    const name = readString(record, "name", "allowlist.name");
+    const members = readMembers(record);
+    return {
+        id: toAllowlistId(object.objectId),
+        name,
+        members,
+    };
+}
+function parseAllowlistCap(object) {
+    const json = object.json;
+    if (!json || typeof json !== "object") {
+        throw new NotFoundError("allowlist", object.objectId);
+    }
+    const record = json;
+    const allowlistIdField = record.allowlist_id;
+    if (typeof allowlistIdField !== "string") {
+        throw new ValidationError("allowlist::Cap.allowlist_id missing or not a string", "cap.allowlist_id");
+    }
+    return {
+        id: toAllowlistCapId(object.objectId),
+        allowlistId: toAllowlistId(allowlistIdField),
+    };
+}
+function parseEncryptedFile(object) {
+    const json = object.json;
+    if (!json || typeof json !== "object") {
+        throw new NotFoundError("encrypted-file", object.objectId);
+    }
+    const record = json;
+    const owner = toSuiAddress(readString(record, "owner", "file.owner"));
+    // Sui gRPC serializes vector<u8> either as a base64 string (standard JSON
+    // representation) or as a number array (older RPC variants). Accept both.
+    const blobId = toWalrusBlobId(parseBlobIdField(record.blob_id));
+    const blobObjectId = readOptionalString(record, "blob_object_id");
+    const name = readString(record, "name", "file.name");
+    const contentType = readString(record, "content_type", "file.content_type");
+    const size = readSafeIntFromBig(record, "size", "file.size");
+    const encrypted = record.encrypted === true;
+    const allowlistIdRaw = readOptionalString(record, "allowlist_id");
+    const createdAtMs = readSafeIntFromBig(record, "created_at_ms", "file.created_at_ms");
+    return {
+        id: toEncryptedFileId(object.objectId),
+        owner,
+        blobId,
+        blobObjectId: blobObjectId === null ? null : toBlobObjectId(blobObjectId),
+        name,
+        contentType,
+        size,
+        encrypted,
+        allowlistId: allowlistIdRaw === null ? null : toAllowlistId(allowlistIdRaw),
+        createdAtMs,
+    };
+}
+function readMembers(record) {
+    const raw = record.members;
+    if (!raw || typeof raw !== "object") {
+        return [];
+    }
+    const contents = raw.contents;
+    if (!Array.isArray(contents)) {
+        return [];
+    }
+    const out = [];
+    for (const entry of contents) {
+        if (typeof entry === "string") {
+            out.push(toSuiAddress(entry));
+        }
+    }
+    return out;
+}
+function readString(record, field, errorField) {
+    const value = record[field];
+    if (typeof value !== "string") {
+        throw new ValidationError(`${errorField} missing or not a string`, errorField);
+    }
+    return value;
+}
+function readOptionalString(record, field) {
+    const value = record[field];
+    if (value === null || value === undefined) {
+        return null;
+    }
+    return typeof value === "string" ? value : null;
+}
+function readSafeIntFromBig(record, field, errorField) {
+    const value = record[field];
+    if (typeof value !== "string" && typeof value !== "number") {
+        throw new ValidationError(`${errorField} missing or not a number`, errorField);
+    }
+    const big = BigInt(value);
+    if (big > BigInt(Number.MAX_SAFE_INTEGER)) {
+        throw new ValidationError(`${errorField} exceeds Number.MAX_SAFE_INTEGER`, errorField);
+    }
+    return Number(big);
+}
+function bytesArrayToBase64Url(bytes) {
+    let binary = "";
+    for (const byte of bytes) {
+        binary += String.fromCharCode(byte);
+    }
+    const b64 = btoa(binary);
+    return b64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+}
+/**
+ * Sui gRPC may serialize `vector<u8>` as:
+ *   - a base64 string (standard JSON encoding)
+ *   - a base64URL string (some RPC variants)
+ *   - an array of numbers (older variants, or when the field is small)
+ * Return the URL-safe-base64 form Walrus uses for blob ids regardless of input shape.
+ */
+function parseBlobIdField(raw) {
+    if (Array.isArray(raw)) {
+        return bytesArrayToBase64Url(raw);
+    }
+    if (typeof raw !== "string") {
+        throw new ValidationError("file.blob_id must be a byte array or base64 string", "file.blob_id");
+    }
+    // Already URL-safe? Strip padding and return.
+    if (/^[A-Za-z0-9_-]+={0,2}$/.test(raw)) {
+        return raw.replace(/=+$/g, "");
+    }
+    // Standard base64 with + and / — convert to URL-safe.
+    if (/^[A-Za-z0-9+/]+={0,2}$/.test(raw)) {
+        return raw.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+    }
+    throw new ValidationError("file.blob_id is not a recognized base64 string", "file.blob_id");
+}
+function isObjectNotFoundError(cause, _objectId) {
+    if (!(cause instanceof Error)) {
+        return false;
+    }
+    return /not found|NotFound|object.*not.*exist/i.test(cause.message);
+}
+//# sourceMappingURL=files-reader.js.map

package/dist/read/files-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files-reader.js","sourceRoot":"","sources":["../../src/read/files-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EACN,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAW9E,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAqC9B,MAAM,OAAO,cAAc;IAER;IACA;IAFlB,YACkB,MAAoB,EACpB,aAAwB;QADxB,WAAM,GAAN,MAAM,CAAc;QACpB,kBAAa,GAAb,aAAa,CAAW;IACvC,CAAC;IAEJ;;;;;;;;OAQG;IACH,MAAM,CAAC,eAAe,CACrB,MAA+D,EAC/D,MAAoB;QAEpB,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,YAAY,CACjB,EAAe,EACf,MAAoB;QAEpB,MAAM,SAAS,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,QAAwD,CAAC;QAC7D,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,CAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBACrB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC3C,CAAC,CACF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IACC,KAAK,YAAY,cAAc;gBAC/B,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,EAC5C,CAAC;gBACF,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE;oBAC/C,KAAK,EAAE,KAAK,CAAC,KAAK;iBAClB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,EAAmB,EACnB,MAAoB;QAEpB,MAAM,SAAS,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,QAAwD,CAAC;QAC7D,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,CAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBACrB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC3C,CAAC,CACF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IACC,KAAK,YAAY,cAAc;gBAC/B,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,EAC5C,CAAC;gBACF,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,SAAS,EAAE;oBACpD,KAAK,EAAE,KAAK,CAAC,KAAK;iBAClB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC7B,OAAmB,EACnB,UAA4B,EAAE;QAE9B,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,EAAE,KAAK,GAAG,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC/D,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,aAAa,kBAAkB,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAC/D,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC5B,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,OAAO;YACb,KAAK;YACL,MAAM,EAAE,MAAM,IAAI,IAAI;YACtB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC3C,CAAC,CACF,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,UAAU,CACvB,SAAiB,EACjB,IAAsB;QAEtB,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CAAC,GAAG,SAAS,SAAS,EAAE;gBAC/C,KAAK;gBACL,SAAS,EAAE,OAAO,SAAS,EAAE;aAC7B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;CACD;AAED,SAAS,cAAc,CACtB,MAA6C;IAE7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO;QACN,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClC,IAAI;QACJ,OAAO;KACP,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACzB,MAA6C;IAE7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC;IAC7C,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,eAAe,CACxB,qDAAqD,EACrD,kBAAkB,CAClB,CAAC;IACH,CAAC;IACD,OAAO;QACN,EAAE,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrC,WAAW,EAAE,aAAa,CAAC,gBAAgB,CAAC;KAC5C,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAC1B,MAA6C;IAE7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACtE,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,cAAc,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC;IAC5C,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,kBAAkB,CACrC,MAAM,EACN,eAAe,EACf,oBAAoB,CACpB,CAAC;IACF,OAAO;QACN,EAAE,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,KAAK;QACL,MAAM;QACN,YAAY,EAAE,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC;QACzE,IAAI;QACJ,WAAW;QACX,IAAI;QACJ,SAAS;QACT,WAAW,EAAE,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC;QAC3E,WAAW;KACX,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAA+B;IACnD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,QAAQ,GAAI,GAA8B,CAAC,QAAQ,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,UAAU,CAClB,MAA+B,EAC/B,KAAa,EACb,UAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CACxB,GAAG,UAAU,0BAA0B,EACvC,UAAU,CACV,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAC1B,MAA+B,EAC/B,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,kBAAkB,CAC1B,MAA+B,EAC/B,KAAa,EACb,UAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,eAAe,CACxB,GAAG,UAAU,0BAA0B,EACvC,UAAU,CACV,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAwB,CAAC,CAAC;IAC7C,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,eAAe,CACxB,GAAG,UAAU,kCAAkC,EAC/C,UAAU,CACV,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAe;IAC7C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,GAAY;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,qBAAqB,CAAC,GAAe,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,eAAe,CACxB,oDAAoD,EACpD,cAAc,CACd,CAAC;IACH,CAAC;IACD,8CAA8C;IAC9C,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,sDAAsD;IACtD,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,eAAe,CACxB,gDAAgD,EAChD,cAAc,CACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,SAAiB;IAC/D,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACrE,CAAC"}

package/dist/read/index.d.ts

@@ -1,5 +1,7 @@
 /**
  * Public barrel for the read layer.
  */
+export { buildFilesEventTypes, type FilesEventInput, type FilesEventTypes, reconcileFilesAccessibleBy, reconcileFilesOwnedBy, } from "./files-events.js";
+export { type AllowlistCapListPage, type FilesListOptions, type FilesReader, RpcFilesReader, } from "./files-reader.js";
 export { type EntryListPage, type ListEntriesOptions, type ListPublicationsOptions, type ListPublisherCapsOptions, type OwnedPublication, type PublicationListPage, type PublicationReader, type PublisherCapListPage, RpcPublicationReader, type ScanEntriesOptions, } from "./reader.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/read/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/read/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,KAAK,kBAAkB,GACvB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/read/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACN,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,0BAA0B,EAC1B,qBAAqB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,cAAc,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,KAAK,kBAAkB,GACvB,MAAM,aAAa,CAAC"}

package/dist/read/index.js

@@ -1,5 +1,7 @@
 /**
  * Public barrel for the read layer.
  */
+export { buildFilesEventTypes, reconcileFilesAccessibleBy, reconcileFilesOwnedBy, } from "./files-events.js";
+export { RpcFilesReader, } from "./files-reader.js";
 export { RpcPublicationReader, } from "./reader.js";
 //# sourceMappingURL=index.js.map

package/dist/read/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/read/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EASN,oBAAoB,GAEpB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/read/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACN,oBAAoB,EAGpB,0BAA0B,EAC1B,qBAAqB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAIN,cAAc,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EASN,oBAAoB,GAEpB,MAAM,aAAa,CAAC"}

package/dist/seal/adapter.d.ts

@@ -4,7 +4,7 @@
  * (key servers, threshold, package id) is bound at construction time.
  */
 import type { SessionKey } from "@mysten/seal";
-import type { PublisherCapId, SealId } from "../types.js";
+import type { AllowlistId, PublisherCapId, SealId } from "../types.js";
 export interface SealEncryptOptions {
     readonly sealId: SealId;
     /** Optional additional authenticated data bound into the ciphertext. */
@@ -22,6 +22,12 @@ export interface SealDecryptOptions {
     readonly sealId: SealId;
     readonly publisherCapId: PublisherCapId;
 }
+/** Options for decrypting content gated by the allowlist policy. */
+export interface SealDecryptUnderAllowlistOptions {
+    readonly sessionKey: SessionKey;
+    readonly sealId: SealId;
+    readonly allowlistId: AllowlistId;
+}
 /**
  * Combined Seal adapter. Implementations bundle a `SealClient`, the morse
  * package id (Seal binds it into ciphertext envelopes), and a TSS threshold.
@@ -52,5 +58,20 @@ export interface SealAdapter {
      * @throws {TransportError} On network or PTB build failure.
      */
     decrypt(ciphertext: Uint8Array, options: SealDecryptOptions): Promise<Uint8Array>;
+    /**
+     * Decrypt content gated by the allowlist policy. The Seal key servers
+     * verify that `sessionKey.getAddress()` is a current member of `allowlistId`
+     * by dry-running `allowlist::seal_approve(sealId, allowlist)`; non-members
+     * surface as `SealError("no-access")`.
+     *
+     * Distinct from `decrypt`, which targets the publisher policy. Both can
+     * coexist on the same adapter instance since policy targeting is decided
+     * by the seal_approve PTB the adapter constructs internally.
+     *
+     * @throws {SealError} On Seal authorization failure (`no-access`),
+     *   decryption failure (`decrypt-failed`), session-key expiry, or rate limiting.
+     * @throws {TransportError} On network or PTB build failure.
+     */
+    decryptUnderAllowlist(ciphertext: Uint8Array, options: SealDecryptUnderAllowlistOptions): Promise<Uint8Array>;
 }
 //# sourceMappingURL=adapter.d.ts.map

package/dist/seal/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/seal/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IAClC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B;;;;;;;;OAQG;IACH,OAAO,CACN,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,OAAO,CACN,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC,CAAC;CACvB"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/seal/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IAClC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACxC;AAED,oEAAoE;AACpE,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC3B;;;;;;;;OAQG;IACH,OAAO,CACN,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,OAAO,CACN,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB;;;;;;;;;;;;;OAaG;IACH,qBAAqB,CACpB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,gCAAgC,GACvC,OAAO,CAAC,UAAU,CAAC,CAAC;CACvB"}

package/dist/seal/allowlist-identity.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Seal identity (`SealId`) construction and inspection for the allowlist policy.
+ * The Move layer (`allowlist::seal_approve`) enforces the byte format, so both
+ * encode and decode here must match the contract byte-for-byte.
+ *
+ * Layout: `allowlist_id(32) || policy_tag(u8=2) || nonce(>=1)`. Total length
+ * must be > 33 bytes (`allowlist::ESealInvalidId` otherwise).
+ *
+ * Distinct from the publisher policy (`publisher-identity.ts`) by policy tag
+ * (allowlist=2, publisher=1) so both can coexist in the same package without
+ * identity collisions.
+ */
+import { type AllowlistId, type SealId, SealPolicyTag } from "../types.js";
+/** Structured view of an allowlist Seal identity. */
+export interface AllowlistSealIdParts {
+    readonly allowlistId: AllowlistId;
+    readonly policyTag: SealPolicyTag;
+    readonly nonce: Uint8Array;
+}
+/**
+ * Build an allowlist-policy Seal identity. The nonce must be at least 1 byte
+ * (the Move contract's `id.length() > 33` invariant); nonces of 16 random
+ * bytes are typical.
+ *
+ * @throws {ValidationError} If `allowlistId` is not a 0x-prefixed 64-char
+ *   hex string, or `nonce` is shorter than 1 byte.
+ */
+export declare function buildAllowlistSealId(allowlistId: AllowlistId, nonce: Uint8Array): SealId;
+/**
+ * Decode the structural fields of an allowlist Seal identity. The brand
+ * guarantees the byte layout, so this never throws on a properly-built
+ * identity. Throws `ValidationError` if the bytes carry a different policy
+ * tag (e.g. publisher) — use `decodePublisherSealId` for those.
+ */
+export declare function decodeAllowlistSealId(id: SealId): AllowlistSealIdParts;
+//# sourceMappingURL=allowlist-identity.d.ts.map

package/dist/seal/allowlist-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist-identity.d.ts","sourceRoot":"","sources":["../../src/seal/allowlist-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAO3E,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CACnC,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,UAAU,GACf,MAAM,CAaR;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,oBAAoB,CAetE"}