@arcadiasystems/morse-sdk 0.3.0 → 0.4.0

package/dist/ops/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ops/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,SAAS,EACT,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,eAAe,EACf,KAAK,mBAAmB,EACxB,eAAe,EACf,KAAK,gBAAgB,EACrB,YAAY,EACZ,KAAK,wBAAwB,EAC7B,oBAAoB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,oBAAoB,GACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,gBAAgB,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,iBAAiB,EACjB,QAAQ,EACR,mBAAmB,EACnB,4BAA4B,EAC5B,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,aAAa,EACb,gBAAgB,EAChB,KAAK,oBAAoB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,KAAK,8BAA8B,EACnC,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,0BAA0B,EAC1B,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,cAAc,EACnB,UAAU,EACV,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC9B,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,kBAAkB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EACN,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,KAAK,gBAAgB,EACrB,KAAK,6BAA6B,EAClC,4BAA4B,EAC5B,yBAAyB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,GACjB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ops/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACN,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,oBAAoB,GACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,gBAAgB,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,iBAAiB,EACjB,QAAQ,EACR,mBAAmB,EACnB,4BAA4B,EAC5B,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,aAAa,EACb,gBAAgB,EAChB,KAAK,oBAAoB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,KAAK,8BAA8B,EACnC,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,0BAA0B,EAC1B,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,iBAAiB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,KAAK,gBAAgB,EACrB,YAAY,EACZ,KAAK,gCAAgC,EACrC,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,4BAA4B,EAC5B,mBAAmB,EACnB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,eAAe,EACf,KAAK,kCAAkC,EACvC,8BAA8B,EAC9B,KAAK,+BAA+B,EACpC,2BAA2B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,KAAK,kCAAkC,EACvC,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,qCAAqC,EACrC,4BAA4B,GAC5B,MAAM,gCAAgC,CAAC"}

package/dist/ops/index.js

@@ -1,12 +1,11 @@
 /**
  * Public barrel for the high-level ops layer.
  */
-export { addMember, createAllowlist, deleteAllowlist, removeMember, transferAllowlistCap, } from "./allowlist.js";
 export { destroyPublisherCap, issuePublisherCap, revokePublisherCap, transferPublisherCap, } from "./cap.js";
 export { createCollection, deleteCollection, } from "./collection.js";
 export { addEncryptedEntry, addEntry, appendDraftRevision, appendEncryptedDraftRevision, deleteEntry, publishDirect, publishFromDraft, } from "./entry.js";
 export { addEncryptedEntryFromBytes, addEntryFromBytes, } from "./entry-from-bytes.js";
-export { createEncryptedFile, createPublicFile, deleteFile, transferFileOwnership, updateFileMetadata, } from "./file.js";
-export { uploadEncryptedFileFromBytes, uploadPublicFileFromBytes, } from "./file-from-bytes.js";
 export { createPublication, deletePublication, transferOwnership, } from "./publication.js";
+export { addRecipient, createEncryptedRecipientFile, createRecipientFile, deleteRecipientFile, removeRecipient, transferRecipientFileOwnership, updateRecipientFileMetadata, } from "./recipient-file.js";
+export { uploadEncryptedRecipientFileFromBytes, uploadRecipientFileFromBytes, } from "./recipient-file-from-bytes.js";
 //# sourceMappingURL=index.js.map

package/dist/ops/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ops/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAGN,SAAS,EAGT,eAAe,EAEf,eAAe,EAEf,YAAY,EAEZ,oBAAoB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGN,mBAAmB,EAGnB,iBAAiB,EAGjB,kBAAkB,EAGlB,oBAAoB,GACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EAGN,gBAAgB,EAGhB,gBAAgB,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAMN,iBAAiB,EACjB,QAAQ,EACR,mBAAmB,EACnB,4BAA4B,EAG5B,WAAW,EAGX,aAAa,EACb,gBAAgB,GAEhB,MAAM,YAAY,CAAC;AACpB,OAAO,EAIN,0BAA0B,EAC1B,iBAAiB,GAGjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAIN,mBAAmB,EACnB,gBAAgB,EAEhB,UAAU,EAGV,qBAAqB,EAErB,kBAAkB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAMN,4BAA4B,EAC5B,yBAAyB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGN,iBAAiB,EAGjB,iBAAiB,EAIjB,iBAAiB,GACjB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ops/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAGN,mBAAmB,EAGnB,iBAAiB,EAGjB,kBAAkB,EAGlB,oBAAoB,GACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EAGN,gBAAgB,EAGhB,gBAAgB,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAMN,iBAAiB,EACjB,QAAQ,EACR,mBAAmB,EACnB,4BAA4B,EAG5B,WAAW,EAGX,aAAa,EACb,gBAAgB,GAEhB,MAAM,YAAY,CAAC;AACpB,OAAO,EAIN,0BAA0B,EAC1B,iBAAiB,GAGjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGN,iBAAiB,EAGjB,iBAAiB,EAIjB,iBAAiB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEN,YAAY,EAIZ,4BAA4B,EAC5B,mBAAmB,EAEnB,mBAAmB,EAGnB,eAAe,EAEf,8BAA8B,EAE9B,2BAA2B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAON,qCAAqC,EACrC,4BAA4B,GAC5B,MAAM,gCAAgC,CAAC"}

package/dist/ops/recipient-file-from-bytes.d.ts

@@ -0,0 +1,123 @@
+/**
+ * One-shot upload helpers that combine Walrus blob upload with
+ * RecipientFile creation in 2 wallet popups.
+ *
+ * Background: a naive flow has three popups (Walrus `register_blob`, Walrus
+ * `certify_blob`, then `new_recipient_file_with_seal_prefix`). The second
+ * and third are both on-chain Sui transactions and can be packed into one
+ * PTB. The first cannot be merged because the off-chain byte upload to
+ * storage nodes happens between register and certify.
+ *
+ * The encrypted variant exploits the v4 contract's caller-supplied seal
+ * prefix: the client picks a random prefix, encrypts under it before
+ * uploading, and binds the same prefix on chain via
+ * `new_recipient_file_with_seal_prefix`. This breaks the file-id chicken-
+ * and-egg the v3 contract had (file id was unknown at encrypt time).
+ */
+import type { MorsePackageConfig } from "../config.js";
+import type { SealAdapter } from "../seal/adapter.js";
+import type { BlobObjectId, RecipientFileId, SuiAddress, WalrusBlobId } from "../types.js";
+import type { WalletAdapter } from "../wallets/adapter.js";
+import { type UploadBlobOptions, type WalrusFlowCapable, type WalrusWriteAdapter } from "../walrus/adapter.js";
+/**
+ * Coarse-grained progress phases.
+ *
+ * - `encrypting`: emitted once at the start of
+ *   `uploadEncryptedRecipientFileFromBytes` before the Seal call. Not
+ *   emitted for the public variant.
+ * - `uploading`: emitted before `register_blob` (popup 1) and again before
+ *   the off-chain upload to storage nodes; UI can keep one spinner across
+ *   both.
+ * - `submitting`: emitted before the combined `certify_blob +
+ *   new_recipient_file{_with_seal_prefix} + share` PTB (popup 2).
+ * - `complete`: emitted after the file has been created on chain.
+ */
+export type FileUploadProgressEvent = {
+    readonly phase: "encrypting";
+} | {
+    readonly phase: "uploading";
+} | {
+    readonly phase: "submitting";
+} | {
+    readonly phase: "complete";
+};
+export type FileUploadProgressCallback = (event: FileUploadProgressEvent) => void;
+/** Result of `uploadRecipientFileFromBytes` / `uploadEncryptedRecipientFileFromBytes`. */
+export interface UploadRecipientFileResult {
+    readonly digest: string;
+    readonly gasUsedMist: bigint;
+    readonly fileId: RecipientFileId;
+    readonly blobId: WalrusBlobId;
+    readonly blobObjectId: BlobObjectId;
+}
+/** Args for `uploadRecipientFileFromBytes`. */
+export interface UploadRecipientFileArgs {
+    readonly walrus: WalrusWriteAdapter & WalrusFlowCapable;
+    readonly bytes: Uint8Array;
+    readonly recipients: readonly SuiAddress[];
+    readonly name: string;
+    readonly contentType: string;
+    readonly upload: UploadBlobOptions;
+    readonly signal?: AbortSignal;
+    readonly onProgress?: FileUploadProgressCallback;
+}
+/**
+ * Upload `bytes` to Walrus and create a public (unencrypted) `RecipientFile`
+ * in 2 wallet popups: `register_blob`, then a combined `certify_blob +
+ * new_recipient_file + share` PTB.
+ *
+ * @throws {UncertifiedBlobError} If popup 2 fails after upload succeeded.
+ *   The blob is uploaded but uncertified and storage is held until expiry.
+ * @throws {ContractAbortError} On Move abort during simulation.
+ * @throws {TransportError} On RPC, network, or upload-step failure.
+ */
+export declare function uploadRecipientFileFromBytes(adapter: WalletAdapter, config: MorsePackageConfig, args: UploadRecipientFileArgs): Promise<UploadRecipientFileResult>;
+/** Args for `uploadEncryptedRecipientFileFromBytes`. */
+export interface UploadEncryptedRecipientFileArgs {
+    readonly walrus: WalrusWriteAdapter & WalrusFlowCapable;
+    readonly seal: SealAdapter;
+    readonly plaintext: Uint8Array;
+    readonly recipients: readonly SuiAddress[];
+    readonly name: string;
+    readonly contentType: string;
+    readonly upload: UploadBlobOptions;
+    readonly signal?: AbortSignal;
+    readonly onProgress?: FileUploadProgressCallback;
+    /**
+     * Optional caller-supplied seal prefix. Defaults to 32 random bytes from
+     * Web Crypto. Override for deterministic tests or when the prefix is
+     * derived from external state. Must be at least 1 byte.
+     */
+    readonly sealIdPrefix?: Uint8Array;
+    /**
+     * Optional caller-supplied seal nonce. Defaults to 16 random bytes from
+     * Web Crypto. Override for deterministic tests; must be at least 1 byte.
+     */
+    readonly sealNonce?: Uint8Array;
+}
+/** Result of `uploadEncryptedRecipientFileFromBytes`. */
+export interface UploadEncryptedRecipientFileResult extends UploadRecipientFileResult {
+    /** The seal prefix bound to the on-chain file. Recipients need this to decrypt. */
+    readonly sealIdPrefix: Uint8Array;
+    /** The nonce used for this encryption. Surface to indexers/UI as needed. */
+    readonly sealNonce: Uint8Array;
+}
+/**
+ * Encrypt `plaintext` under Seal with a caller-supplied prefix, upload the
+ * ciphertext to Walrus, and create an encrypted `RecipientFile` carrying
+ * the prefix on chain. 2 wallet popups: `register_blob`, then a combined
+ * `certify_blob + new_recipient_file_with_seal_prefix + share` PTB.
+ *
+ * After this returns, recipients can decrypt by reading the file, fetching
+ * the blob via Walrus, and calling
+ * `sealAdapter.decryptUnderRecipientFile(ciphertext, { fileId, sealId, sessionKey })`
+ * where `sealId = sealIdPrefix || tag(=3) || sealNonce` (rebuild via
+ * `buildRecipientFileSealId(sealIdPrefix, sealNonce)`).
+ *
+ * @throws {SealError} If encryption fails (no popup yet).
+ * @throws {UncertifiedBlobError} If popup 2 fails after upload succeeded.
+ * @throws {ContractAbortError} On Move abort during simulation.
+ * @throws {TransportError} On RPC, network, or upload-step failure.
+ */
+export declare function uploadEncryptedRecipientFileFromBytes(adapter: WalletAdapter, config: MorsePackageConfig, args: UploadEncryptedRecipientFileArgs): Promise<UploadEncryptedRecipientFileResult>;
+//# sourceMappingURL=recipient-file-from-bytes.d.ts.map

package/dist/ops/recipient-file-from-bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-file-from-bytes.d.ts","sourceRoot":"","sources":["../../src/ops/recipient-file-from-bytes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAOvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAMtD,OAAO,KAAK,EACX,YAAY,EACZ,eAAe,EACf,UAAU,EACV,YAAY,EACZ,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAEN,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,MAAM,sBAAsB,CAAC;AAG9B;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,uBAAuB,GAChC;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC;AAElC,MAAM,MAAM,0BAA0B,GAAG,CACxC,KAAK,EAAE,uBAAuB,KAC1B,IAAI,CAAC;AAEV,0FAA0F;AAC1F,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACpC;AAED,+CAA+C;AAC/C,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,iBAAiB,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,SAAS,UAAU,EAAE,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC;CACjD;AAED;;;;;;;;;GASG;AACH,wBAAsB,4BAA4B,CACjD,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,uBAAuB,GAC3B,OAAO,CAAC,yBAAyB,CAAC,CAiCpC;AAED,wDAAwD;AACxD,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,iBAAiB,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,UAAU,EAAE,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACjD;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;CAChC;AAED,yDAAyD;AACzD,MAAM,WAAW,kCAChB,SAAQ,yBAAyB;IACjC,mFAAmF;IACnF,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,qCAAqC,CAC1D,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,gCAAgC,GACpC,OAAO,CAAC,kCAAkC,CAAC,CA2C7C"}

package/dist/ops/recipient-file-from-bytes.js

@@ -0,0 +1,142 @@
+/**
+ * One-shot upload helpers that combine Walrus blob upload with
+ * RecipientFile creation in 2 wallet popups.
+ *
+ * Background: a naive flow has three popups (Walrus `register_blob`, Walrus
+ * `certify_blob`, then `new_recipient_file_with_seal_prefix`). The second
+ * and third are both on-chain Sui transactions and can be packed into one
+ * PTB. The first cannot be merged because the off-chain byte upload to
+ * storage nodes happens between register and certify.
+ *
+ * The encrypted variant exploits the v4 contract's caller-supplied seal
+ * prefix: the client picks a random prefix, encrypts under it before
+ * uploading, and binds the same prefix on chain via
+ * `new_recipient_file_with_seal_prefix`. This breaks the file-id chicken-
+ * and-egg the v3 contract had (file id was unknown at encrypt time).
+ */
+import { toRecipientFileId } from "../codecs.js";
+import { TransportError, UncertifiedBlobError } from "../errors.js";
+import { buildNewRecipientFile, buildNewRecipientFileWithSealPrefix, buildShareRecipientFile, } from "../ptb/recipient-file.js";
+import { buildRecipientFileSealId, randomSealNonce, randomSealPrefix, } from "../seal/recipient-file-identity.js";
+import { isWalrusFlowCapable, } from "../walrus/adapter.js";
+import { findCreatedId } from "./internal.js";
+/**
+ * Upload `bytes` to Walrus and create a public (unencrypted) `RecipientFile`
+ * in 2 wallet popups: `register_blob`, then a combined `certify_blob +
+ * new_recipient_file + share` PTB.
+ *
+ * @throws {UncertifiedBlobError} If popup 2 fails after upload succeeded.
+ *   The blob is uploaded but uncertified and storage is held until expiry.
+ * @throws {ContractAbortError} On Move abort during simulation.
+ * @throws {TransportError} On RPC, network, or upload-step failure.
+ */
+export async function uploadRecipientFileFromBytes(adapter, config, args) {
+    assertFlowCapable(args.walrus);
+    args.onProgress?.({ phase: "uploading" });
+    const upload = await args.walrus.startBlobUpload(args.bytes, args.upload);
+    try {
+        const tx = upload.certifyTransaction;
+        const file = buildNewRecipientFile(tx, {
+            packageId: config.packageId,
+            blobId: upload.blobId,
+            blobObjectId: upload.blobObjectId,
+            name: args.name,
+            contentType: args.contentType,
+            size: args.bytes.length,
+            recipients: args.recipients,
+        });
+        buildShareRecipientFile(tx, { packageId: config.packageId, file });
+        args.onProgress?.({ phase: "submitting" });
+        const result = await submitCombinedTx(adapter, tx, config, {
+            blobObjectId: upload.blobObjectId,
+            blobId: upload.blobId,
+            ...(args.signal === undefined ? {} : { signal: args.signal }),
+        });
+        args.onProgress?.({ phase: "complete" });
+        return result;
+    }
+    catch (cause) {
+        if (cause instanceof UncertifiedBlobError)
+            throw cause;
+        throw new UncertifiedBlobError(upload.blobObjectId, upload.blobId, {
+            cause,
+        });
+    }
+}
+/**
+ * Encrypt `plaintext` under Seal with a caller-supplied prefix, upload the
+ * ciphertext to Walrus, and create an encrypted `RecipientFile` carrying
+ * the prefix on chain. 2 wallet popups: `register_blob`, then a combined
+ * `certify_blob + new_recipient_file_with_seal_prefix + share` PTB.
+ *
+ * After this returns, recipients can decrypt by reading the file, fetching
+ * the blob via Walrus, and calling
+ * `sealAdapter.decryptUnderRecipientFile(ciphertext, { fileId, sealId, sessionKey })`
+ * where `sealId = sealIdPrefix || tag(=3) || sealNonce` (rebuild via
+ * `buildRecipientFileSealId(sealIdPrefix, sealNonce)`).
+ *
+ * @throws {SealError} If encryption fails (no popup yet).
+ * @throws {UncertifiedBlobError} If popup 2 fails after upload succeeded.
+ * @throws {ContractAbortError} On Move abort during simulation.
+ * @throws {TransportError} On RPC, network, or upload-step failure.
+ */
+export async function uploadEncryptedRecipientFileFromBytes(adapter, config, args) {
+    assertFlowCapable(args.walrus);
+    const sealIdPrefix = args.sealIdPrefix ?? randomSealPrefix();
+    const sealNonce = args.sealNonce ?? randomSealNonce();
+    const sealId = buildRecipientFileSealId(sealIdPrefix, sealNonce);
+    args.onProgress?.({ phase: "encrypting" });
+    const { ciphertext } = await args.seal.encrypt(args.plaintext, { sealId });
+    args.onProgress?.({ phase: "uploading" });
+    const upload = await args.walrus.startBlobUpload(ciphertext, args.upload);
+    try {
+        const tx = upload.certifyTransaction;
+        const file = buildNewRecipientFileWithSealPrefix(tx, {
+            packageId: config.packageId,
+            sealIdPrefix,
+            blobId: upload.blobId,
+            blobObjectId: upload.blobObjectId,
+            name: args.name,
+            contentType: args.contentType,
+            // Plaintext byte length, per Move contract semantics. The Walrus
+            // blob stores the larger ciphertext.
+            size: args.plaintext.length,
+            recipients: args.recipients,
+        });
+        buildShareRecipientFile(tx, { packageId: config.packageId, file });
+        args.onProgress?.({ phase: "submitting" });
+        const result = await submitCombinedTx(adapter, tx, config, {
+            blobObjectId: upload.blobObjectId,
+            blobId: upload.blobId,
+            ...(args.signal === undefined ? {} : { signal: args.signal }),
+        });
+        args.onProgress?.({ phase: "complete" });
+        return { ...result, sealIdPrefix, sealNonce };
+    }
+    catch (cause) {
+        if (cause instanceof UncertifiedBlobError)
+            throw cause;
+        throw new UncertifiedBlobError(upload.blobObjectId, upload.blobId, {
+            cause,
+        });
+    }
+}
+function assertFlowCapable(walrus) {
+    if (!isWalrusFlowCapable(walrus)) {
+        throw new TransportError("uploadRecipientFileFromBytes / uploadEncryptedRecipientFileFromBytes require a WalrusWriteAdapter that implements WalrusFlowCapable (i.e. exposes startBlobUpload). DefaultWalrusWriteAdapter does. Custom adapters without the capability should compose walrus.uploadBlob + createRecipientFile (3 popups) instead.", { operation: "sdk.uploadRecipientFileFromBytes" });
+    }
+}
+async function submitCombinedTx(adapter, tx, config, args) {
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    // RecipientFile was added in the v3 upgrade; the type identity uses the
+    // current published-at, not originalPackageId.
+    const fileType = `${config.packageId}::recipient_file::RecipientFile`;
+    return {
+        digest: receipt.digest,
+        gasUsedMist: receipt.gasUsedMist,
+        fileId: toRecipientFileId(findCreatedId(receipt, fileType)),
+        blobObjectId: args.blobObjectId,
+        blobId: args.blobId,
+    };
+}
+//# sourceMappingURL=recipient-file-from-bytes.js.map

package/dist/ops/recipient-file-from-bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-file-from-bytes.js","sourceRoot":"","sources":["../../src/ops/recipient-file-from-bytes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EACN,qBAAqB,EACrB,mCAAmC,EACnC,uBAAuB,GACvB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACN,wBAAwB,EACxB,eAAe,EACf,gBAAgB,GAChB,MAAM,oCAAoC,CAAC;AAQ5C,OAAO,EACN,mBAAmB,GAInB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AA8C9C;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,OAAsB,EACtB,MAA0B,EAC1B,IAA6B;IAE7B,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/B,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAE1E,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACrC,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,EAAE;YACtC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC,CAAC;QACH,uBAAuB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE;YAC1D,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;SAC7D,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,KAAK,CAAC;QACvD,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE;YAClE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAmCD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAC1D,OAAsB,EACtB,MAA0B,EAC1B,IAAsC;IAEtC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,gBAAgB,EAAE,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,EAAE,CAAC;IACtD,MAAM,MAAM,GAAG,wBAAwB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAEjE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAE3E,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAE1E,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACrC,MAAM,IAAI,GAAG,mCAAmC,CAAC,EAAE,EAAE;YACpD,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY;YACZ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iEAAiE;YACjE,qCAAqC;YACrC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC,CAAC;QACH,uBAAuB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE;YAC1D,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;SAC7D,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACzC,OAAO,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,KAAK,CAAC;QACvD,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE;YAClE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CACzB,MAA0B;IAE1B,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CACvB,uTAAuT,EACvT,EAAE,SAAS,EAAE,kCAAkC,EAAE,CACjD,CAAC;IACH,CAAC;AACF,CAAC;AAQD,KAAK,UAAU,gBAAgB,CAC9B,OAAsB,EACtB,EAAe,EACf,MAA0B,EAC1B,IAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,SAAS,iCAAiC,CAAC;IACtE,OAAO;QACN,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,iBAAiB,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC;AACH,CAAC"}

package/dist/ops/recipient-file.d.ts

@@ -0,0 +1,114 @@
+/**
+ * High-level ops for the `recipient_file` module. Single-Move-call wrappers
+ * that build a PTB, sign-and-execute it, and parse the receipt. Composed
+ * upload flows live in `recipient-file-from-bytes.ts`.
+ */
+import type { MorsePackageConfig } from "../config.js";
+import type { BlobObjectId, RecipientFileId, SuiAddress, WalrusBlobId } from "../types.js";
+import type { WalletAdapter } from "../wallets/adapter.js";
+/** Result returned by recipient-file ops that mutate but do not create. */
+export interface RecipientFileOpResult {
+    readonly digest: string;
+    readonly gasUsedMist: bigint;
+}
+/** Result returned by `createRecipientFile` / `createEncryptedRecipientFile`. */
+export interface CreateRecipientFileResult extends RecipientFileOpResult {
+    readonly fileId: RecipientFileId;
+}
+export interface CreateRecipientFileArgs {
+    readonly blobId: WalrusBlobId;
+    readonly blobObjectId?: BlobObjectId;
+    readonly name: string;
+    readonly contentType: string;
+    readonly size: number;
+    readonly recipients: readonly SuiAddress[];
+    readonly signal?: AbortSignal;
+}
+/**
+ * Create a `RecipientFile` referencing an already-uploaded Walrus blob. The
+ * sender is auto-added to the recipient set; duplicates in `recipients` are
+ * silently deduplicated by the Move layer.
+ *
+ * Builds a single PTB that calls `new_recipient_file` and
+ * `share_recipient_file` in sequence so the file is immediately usable.
+ *
+ * For Seal-encrypted uploads where the seal identity must be bound to the
+ * file before signing, use `createEncryptedRecipientFile` (or the one-shot
+ * `uploadEncryptedRecipientFileFromBytes`) instead.
+ *
+ * @throws {ContractAbortError} On Move abort (empty `blobId`, `name`, or
+ *   `contentType`; oversized fields).
+ * @throws {TransportError} On RPC, network, or response-parsing failure.
+ */
+export declare function createRecipientFile(adapter: WalletAdapter, config: MorsePackageConfig, args: CreateRecipientFileArgs): Promise<CreateRecipientFileResult>;
+export interface CreateEncryptedRecipientFileArgs extends CreateRecipientFileArgs {
+    /**
+     * Caller-chosen prefix bytes bound to the file on chain via a dynamic
+     * field. The same prefix must have been used as the leading bytes of the
+     * Seal identity when encrypting the blob this file references; the on-chain
+     * `seal_approve_with_prefix` will validate decryption requests against
+     * exactly these bytes. Use `randomSealPrefix()` for a fresh 32-byte value.
+     */
+    readonly sealIdPrefix: Uint8Array;
+}
+/**
+ * Create a `RecipientFile` with an attached Seal identity prefix. The blob
+ * referenced by `blobId` is assumed to already be encrypted under a Seal
+ * identity of the form `sealIdPrefix || tag(=3) || nonce`. After this PTB
+ * lands, recipients can decrypt via `sealAdapter.decryptUnderRecipientFile`.
+ *
+ * @throws {ContractAbortError} On Move abort (empty `sealIdPrefix` /
+ *   `blobId` / `name` / `contentType`, oversized fields).
+ * @throws {TransportError} On RPC, network, or response-parsing failure.
+ */
+export declare function createEncryptedRecipientFile(adapter: WalletAdapter, config: MorsePackageConfig, args: CreateEncryptedRecipientFileArgs): Promise<CreateRecipientFileResult>;
+export interface AddRecipientArgs {
+    readonly fileId: RecipientFileId;
+    readonly recipient: SuiAddress;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Add an address to a recipient file's member set. Owner only. Aborts at the
+ * Move layer if the address is already a member (`ERecipientAlreadyPresent`).
+ */
+export declare function addRecipient(adapter: WalletAdapter, config: MorsePackageConfig, args: AddRecipientArgs): Promise<RecipientFileOpResult>;
+export interface RemoveRecipientArgs {
+    readonly fileId: RecipientFileId;
+    readonly recipient: SuiAddress;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Remove an address from a recipient file's member set. Owner only. The owner
+ * may remove themselves; doing so revokes decrypt access but does not revoke
+ * mutation rights (those still come from the `owner` field).
+ */
+export declare function removeRecipient(adapter: WalletAdapter, config: MorsePackageConfig, args: RemoveRecipientArgs): Promise<RecipientFileOpResult>;
+export interface TransferRecipientFileOwnershipArgs {
+    readonly fileId: RecipientFileId;
+    readonly newOwner: SuiAddress;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Transfer mutation rights to a new owner. Does NOT touch `members`; for a
+ * full handover (new owner gains decrypt, old owner loses it), compose with
+ * `addRecipient` + `removeRecipient` or call them in a custom PTB.
+ */
+export declare function transferRecipientFileOwnership(adapter: WalletAdapter, config: MorsePackageConfig, args: TransferRecipientFileOwnershipArgs): Promise<RecipientFileOpResult>;
+export interface UpdateRecipientFileMetadataArgs {
+    readonly fileId: RecipientFileId;
+    readonly name: string;
+    readonly contentType: string;
+    readonly signal?: AbortSignal;
+}
+/** Update the `name` and `contentType` of a recipient file. Owner only. */
+export declare function updateRecipientFileMetadata(adapter: WalletAdapter, config: MorsePackageConfig, args: UpdateRecipientFileMetadataArgs): Promise<RecipientFileOpResult>;
+export interface DeleteRecipientFileArgs {
+    readonly fileId: RecipientFileId;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Delete a recipient file metadata record. Owner only. Does NOT delete the
+ * Walrus blob; that follows the Walrus lease lifecycle independently.
+ */
+export declare function deleteRecipientFile(adapter: WalletAdapter, config: MorsePackageConfig, args: DeleteRecipientFileArgs): Promise<RecipientFileOpResult>;
+//# sourceMappingURL=recipient-file.d.ts.map

package/dist/ops/recipient-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-file.d.ts","sourceRoot":"","sources":["../../src/ops/recipient-file.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAWvD,OAAO,KAAK,EACX,YAAY,EACZ,eAAe,EACf,UAAU,EACV,YAAY,EACZ,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,2EAA2E;AAC3E,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,iFAAiF;AACjF,MAAM,WAAW,yBAA0B,SAAQ,qBAAqB;IACvE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,UAAU,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,uBAAuB,GAC3B,OAAO,CAAC,yBAAyB,CAAC,CAiBpC;AAED,MAAM,WAAW,gCAChB,SAAQ,uBAAuB;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;CAClC;AAED;;;;;;;;;GASG;AACH,wBAAsB,4BAA4B,CACjD,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,gCAAgC,GACpC,OAAO,CAAC,yBAAyB,CAAC,CAkBpC;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CACjC,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,gBAAgB,GACpB,OAAO,CAAC,qBAAqB,CAAC,CAShC;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACpC,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,mBAAmB,GACvB,OAAO,CAAC,qBAAqB,CAAC,CAShC;AAED,MAAM,WAAW,kCAAkC;IAClD,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CACnD,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,kCAAkC,GACtC,OAAO,CAAC,qBAAqB,CAAC,CAShC;AAED,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED,2EAA2E;AAC3E,wBAAsB,2BAA2B,CAChD,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,+BAA+B,GACnC,OAAO,CAAC,qBAAqB,CAAC,CAUhC;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,uBAAuB,GAC3B,OAAO,CAAC,qBAAqB,CAAC,CAQhC"}

package/dist/ops/recipient-file.js

@@ -0,0 +1,151 @@
+/**
+ * High-level ops for the `recipient_file` module. Single-Move-call wrappers
+ * that build a PTB, sign-and-execute it, and parse the receipt. Composed
+ * upload flows live in `recipient-file-from-bytes.ts`.
+ */
+import { Transaction } from "@mysten/sui/transactions";
+import { toRecipientFileId } from "../codecs.js";
+import { buildAddRecipient, buildDeleteRecipientFile, buildNewRecipientFile, buildNewRecipientFileWithSealPrefix, buildRemoveRecipient, buildShareRecipientFile, buildTransferRecipientFileOwnership, buildUpdateRecipientFileMetadata, } from "../ptb/recipient-file.js";
+import { findCreatedId } from "./internal.js";
+/**
+ * Create a `RecipientFile` referencing an already-uploaded Walrus blob. The
+ * sender is auto-added to the recipient set; duplicates in `recipients` are
+ * silently deduplicated by the Move layer.
+ *
+ * Builds a single PTB that calls `new_recipient_file` and
+ * `share_recipient_file` in sequence so the file is immediately usable.
+ *
+ * For Seal-encrypted uploads where the seal identity must be bound to the
+ * file before signing, use `createEncryptedRecipientFile` (or the one-shot
+ * `uploadEncryptedRecipientFileFromBytes`) instead.
+ *
+ * @throws {ContractAbortError} On Move abort (empty `blobId`, `name`, or
+ *   `contentType`; oversized fields).
+ * @throws {TransportError} On RPC, network, or response-parsing failure.
+ */
+export async function createRecipientFile(adapter, config, args) {
+    const tx = new Transaction();
+    const file = buildNewRecipientFile(tx, {
+        packageId: config.packageId,
+        blobId: args.blobId,
+        ...(args.blobObjectId === undefined
+            ? {}
+            : { blobObjectId: args.blobObjectId }),
+        name: args.name,
+        contentType: args.contentType,
+        size: args.size,
+        recipients: args.recipients,
+    });
+    buildShareRecipientFile(tx, { packageId: config.packageId, file });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return parseCreateReceipt(receipt, config);
+}
+/**
+ * Create a `RecipientFile` with an attached Seal identity prefix. The blob
+ * referenced by `blobId` is assumed to already be encrypted under a Seal
+ * identity of the form `sealIdPrefix || tag(=3) || nonce`. After this PTB
+ * lands, recipients can decrypt via `sealAdapter.decryptUnderRecipientFile`.
+ *
+ * @throws {ContractAbortError} On Move abort (empty `sealIdPrefix` /
+ *   `blobId` / `name` / `contentType`, oversized fields).
+ * @throws {TransportError} On RPC, network, or response-parsing failure.
+ */
+export async function createEncryptedRecipientFile(adapter, config, args) {
+    const tx = new Transaction();
+    const file = buildNewRecipientFileWithSealPrefix(tx, {
+        packageId: config.packageId,
+        sealIdPrefix: args.sealIdPrefix,
+        blobId: args.blobId,
+        ...(args.blobObjectId === undefined
+            ? {}
+            : { blobObjectId: args.blobObjectId }),
+        name: args.name,
+        contentType: args.contentType,
+        size: args.size,
+        recipients: args.recipients,
+    });
+    buildShareRecipientFile(tx, { packageId: config.packageId, file });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return parseCreateReceipt(receipt, config);
+}
+/**
+ * Add an address to a recipient file's member set. Owner only. Aborts at the
+ * Move layer if the address is already a member (`ERecipientAlreadyPresent`).
+ */
+export async function addRecipient(adapter, config, args) {
+    const tx = new Transaction();
+    buildAddRecipient(tx, {
+        packageId: config.packageId,
+        file: args.fileId,
+        recipient: args.recipient,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+/**
+ * Remove an address from a recipient file's member set. Owner only. The owner
+ * may remove themselves; doing so revokes decrypt access but does not revoke
+ * mutation rights (those still come from the `owner` field).
+ */
+export async function removeRecipient(adapter, config, args) {
+    const tx = new Transaction();
+    buildRemoveRecipient(tx, {
+        packageId: config.packageId,
+        file: args.fileId,
+        recipient: args.recipient,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+/**
+ * Transfer mutation rights to a new owner. Does NOT touch `members`; for a
+ * full handover (new owner gains decrypt, old owner loses it), compose with
+ * `addRecipient` + `removeRecipient` or call them in a custom PTB.
+ */
+export async function transferRecipientFileOwnership(adapter, config, args) {
+    const tx = new Transaction();
+    buildTransferRecipientFileOwnership(tx, {
+        packageId: config.packageId,
+        file: args.fileId,
+        newOwner: args.newOwner,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+/** Update the `name` and `contentType` of a recipient file. Owner only. */
+export async function updateRecipientFileMetadata(adapter, config, args) {
+    const tx = new Transaction();
+    buildUpdateRecipientFileMetadata(tx, {
+        packageId: config.packageId,
+        file: args.fileId,
+        name: args.name,
+        contentType: args.contentType,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+/**
+ * Delete a recipient file metadata record. Owner only. Does NOT delete the
+ * Walrus blob; that follows the Walrus lease lifecycle independently.
+ */
+export async function deleteRecipientFile(adapter, config, args) {
+    const tx = new Transaction();
+    buildDeleteRecipientFile(tx, {
+        packageId: config.packageId,
+        file: args.fileId,
+    });
+    const receipt = await adapter.signAndExecuteTransaction(tx, args.signal);
+    return { digest: receipt.digest, gasUsedMist: receipt.gasUsedMist };
+}
+function parseCreateReceipt(receipt, config) {
+    // RecipientFile was first defined in the v3 upgrade and lives at the
+    // current published-at, not at originalPackageId. Type filters against
+    // originalPackageId would miss the created object.
+    const fileType = `${config.packageId}::recipient_file::RecipientFile`;
+    return {
+        digest: receipt.digest,
+        gasUsedMist: receipt.gasUsedMist,
+        fileId: toRecipientFileId(findCreatedId(receipt, fileType)),
+    };
+}
+//# sourceMappingURL=recipient-file.js.map

package/dist/ops/recipient-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-file.js","sourceRoot":"","sources":["../../src/ops/recipient-file.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EACN,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,EACrB,mCAAmC,EACnC,oBAAoB,EACpB,uBAAuB,EACvB,mCAAmC,EACnC,gCAAgC,GAChC,MAAM,0BAA0B,CAAC;AAQlC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAuB9C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,OAAsB,EACtB,MAA0B,EAC1B,IAA6B;IAE7B,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,EAAE;QACtC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;KAC3B,CAAC,CAAC;IACH,uBAAuB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAcD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,OAAsB,EACtB,MAA0B,EAC1B,IAAsC;IAEtC,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,mCAAmC,CAAC,EAAE,EAAE;QACpD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;KAC3B,CAAC,CAAC;IACH,uBAAuB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,OAAsB,EACtB,MAA0B,EAC1B,IAAsB;IAEtB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,EAAE;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,IAAI,CAAC,MAAM;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;KACzB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,OAAsB,EACtB,MAA0B,EAC1B,IAAyB;IAEzB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,oBAAoB,CAAC,EAAE,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,IAAI,CAAC,MAAM;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;KACzB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,OAAsB,EACtB,MAA0B,EAC1B,IAAwC;IAExC,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,mCAAmC,CAAC,EAAE,EAAE;QACvC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,IAAI,CAAC,MAAM;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AASD,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,OAAsB,EACtB,MAA0B,EAC1B,IAAqC;IAErC,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,gCAAgC,CAAC,EAAE,EAAE;QACpC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,IAAI,CAAC,MAAM;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;KAC7B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,OAAsB,EACtB,MAA0B,EAC1B,IAA6B;IAE7B,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,wBAAwB,CAAC,EAAE,EAAE;QAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,IAAI,CAAC,MAAM;KACjB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,kBAAkB,CAC1B,OAAwE,EACxE,MAA0B;IAE1B,qEAAqE;IACrE,uEAAuE;IACvE,mDAAmD;IACnD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,SAAS,iCAAiC,CAAC;IACtE,OAAO;QACN,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,iBAAiB,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;KAC3D,CAAC;AACH,CAAC"}