@dstoken-solana/rwa-rbac 0.0.1-rc0

package/dist/client/IdentityRegistry.js

@@ -0,0 +1,328 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityRegistry = void 0;
+var web3_js_1 = require("@solana/web3.js");
+var rwa_token_sdk_1 = require("@dstoken-solana/rwa-token-sdk");
+var pdas_1 = require("../pdas");
+var web3_js_2 = require("@solana/web3.js");
+/**
+ * Represents the role-based access client for Identity Registry for an RWA.
+ */
+var IdentityRegistry = /** @class */ (function () {
+    function IdentityRegistry(rwaClient, rbacProgram) {
+        this.rwaClient = rwaClient;
+        this.rbacProgram = rbacProgram;
+    }
+    /**
+     * Asynchronously generates instructions to setup a non-investor user with an identity account.
+     * @param args - {@link SetupUserArgs}
+     * @param authority - RBAC AssetAccessController ControllerAuthority.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to setup a user.
+     *
+     * It is required for at least a single user to be setup before issuing tokens.
+     */
+    IdentityRegistry.prototype.setupUserIxns = function (args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function () {
+            var ixs, returnIxs, identityAccountIx, trackerAccountIx, controllerAuthority, identityAccount, _a, _b;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
+                    case 0: return [4 /*yield*/, this.rwaClient.identityRegistry.setupUserIxns(args)];
+                    case 1:
+                        ixs = (_c.sent()).ixs;
+                        returnIxs = [];
+                        identityAccountIx = ixs[0];
+                        trackerAccountIx = ixs[1];
+                        controllerAuthority = (0, pdas_1.deriveControllerAuthorityPda)(assetAccessController);
+                        identityAccount = (0, rwa_token_sdk_1.getIdentityAccountPda)(args.assetMint, args.owner);
+                        _b = (_a = returnIxs).push;
+                        return [4 /*yield*/, this.rbacProgram.methods
+                                .createIdentityAccount(identityAccountIx.data)
+                                .accountsStrict({
+                                payer: args.payer,
+                                user: args.signer,
+                                controllerAuthority: controllerAuthority,
+                                assetAccessController: assetAccessController,
+                                authorizedUserRole: authorizedUserRole || null,
+                                identityRegistryProgram: rwa_token_sdk_1.identityRegistryProgramId,
+                                identityRegistry: (0, rwa_token_sdk_1.getIdentityRegistryPda)(args.assetMint),
+                                identityAccount: identityAccount,
+                                walletIdentity: (0, rwa_token_sdk_1.getWalletIdentityAccountPda)(args.assetMint, args.owner),
+                                systemProgram: web3_js_2.SystemProgram.programId,
+                            })
+                                .instruction()];
+                    case 2:
+                        _b.apply(_a, [_c.sent()]);
+                        returnIxs.push(trackerAccountIx);
+                        return [2 /*return*/, {
+                                ixs: returnIxs,
+                                signers: [],
+                            }];
+                }
+            });
+        });
+    };
+    /**
+     * Asynchronously update a non-investor user identity account level.
+     * @param args - {@link AddLevelToIdentityAccountArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to update user account identity.
+     * */
+    IdentityRegistry.prototype.addIdentityLevelToUserAccount = function (args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function () {
+            var identityAccount, controllerAuthority;
+            var _a;
+            return __generator(this, function (_b) {
+                identityAccount = (0, rwa_token_sdk_1.getIdentityAccountPda)(args.assetMint, args.owner);
+                controllerAuthority = (0, pdas_1.deriveControllerAuthorityPda)(assetAccessController);
+                return [2 /*return*/, this.rbacProgram.methods
+                        .addLevelToIdentityAccount(args.levels[0], args.expiries[0], (_a = args.ignorePolicy) !== null && _a !== void 0 ? _a : false)
+                        .accountsStrict({
+                        payer: args.payer,
+                        user: args.signer,
+                        controllerAuthority: controllerAuthority,
+                        assetAccessController: assetAccessController,
+                        authorizedUserRole: authorizedUserRole || null,
+                        identityRegistryProgram: rwa_token_sdk_1.identityRegistryProgramId,
+                        identityRegistry: (0, rwa_token_sdk_1.getIdentityRegistryPda)(args.assetMint),
+                        identityAccount: identityAccount,
+                        identityAccountOwner: args.owner,
+                        systemProgram: web3_js_2.SystemProgram.programId,
+                        policyEngineProgram: rwa_token_sdk_1.policyEngineProgramId,
+                        policyEngine: (0, rwa_token_sdk_1.getPolicyEnginePda)(args.assetMint),
+                        trackerAccount: (0, rwa_token_sdk_1.getTrackerAccountPda)(args.assetMint, args.owner),
+                        assetMint: args.assetMint,
+                    })
+                        .instruction()];
+            });
+        });
+    };
+    /**
+     * Asynchronously reduces a non-Investor user identity account level.
+     * @param args - {@link RemoveLevelFromIdentityAccount}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to reduce the level of a user identity account.
+     */
+    IdentityRegistry.prototype.removeIdentityLevelFromUserAccount = function (args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function () {
+            var removeLevelIx, ixData, controllerAuthority, identityAccount;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, (0, rwa_token_sdk_1.getRemoveLevelFromIdentityAccount)(args, this.rwaClient.provider)];
+                    case 1:
+                        removeLevelIx = _a.sent();
+                        ixData = removeLevelIx.data;
+                        controllerAuthority = (0, pdas_1.deriveControllerAuthorityPda)(assetAccessController);
+                        identityAccount = (0, rwa_token_sdk_1.getIdentityAccountPda)(args.assetMint, args.owner);
+                        return [2 /*return*/, this.rbacProgram.methods
+                                .removeLevelFromIdentityAccount(ixData)
+                                .accountsStrict({
+                                payer: args.payer,
+                                user: args.signer,
+                                controllerAuthority: controllerAuthority,
+                                assetAccessController: assetAccessController,
+                                authorizedUserRole: authorizedUserRole || null,
+                                identityRegistryProgram: rwa_token_sdk_1.identityRegistryProgramId,
+                                identityRegistry: (0, rwa_token_sdk_1.getIdentityRegistryPda)(args.assetMint),
+                                identityAccount: identityAccount,
+                                identityAccountOwner: args.owner,
+                                systemProgram: web3_js_2.SystemProgram.programId,
+                                policyEngineProgram: rwa_token_sdk_1.policyEngineProgramId,
+                                policyEngine: (0, rwa_token_sdk_1.getPolicyEnginePda)(args.assetMint),
+                                trackerAccount: (0, rwa_token_sdk_1.getTrackerAccountPda)(args.assetMint, args.owner),
+                                assetMint: args.assetMint,
+                            })
+                                .instruction()];
+                }
+            });
+        });
+    };
+    /**
+     * Asynchronously generates instruction to refresh expiry on an Identity Account level.
+     * @param args - {@link RefreshLevelArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to refresh expiry on an Identity Account level.
+     * */
+    IdentityRegistry.prototype.refreshLevelToIdentityAccountIxn = function (args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function () {
+            var identityProgram, identityRegistry, identityAccount, controllerAuthority, refreshIx;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        identityProgram = (0, rwa_token_sdk_1.getIdentityRegistryProgram)(this.rwaClient.provider);
+                        identityRegistry = (0, rwa_token_sdk_1.getIdentityRegistryPda)(args.assetMint);
+                        identityAccount = (0, rwa_token_sdk_1.getIdentityAccountPda)(args.assetMint, args.owner);
+                        controllerAuthority = (0, pdas_1.deriveControllerAuthorityPda)(assetAccessController);
+                        return [4 /*yield*/, identityProgram.methods
+                                .refreshLevelToIdentityAccount(args.level, args.expiry)
+                                .accountsStrict({
+                                payer: args.payer,
+                                signer: controllerAuthority,
+                                identityRegistry: identityRegistry,
+                                identityAccount: identityAccount,
+                            })
+                                .instruction()];
+                    case 1:
+                        refreshIx = _a.sent();
+                        return [2 /*return*/, this.rbacProgram.methods
+                                .refreshLevelToIdentityAccount(refreshIx.data)
+                                .accountsStrict({
+                                payer: args.payer,
+                                user: args.signer,
+                                controllerAuthority: controllerAuthority,
+                                assetAccessController: assetAccessController,
+                                authorizedUserRole: authorizedUserRole || null,
+                                identityRegistryProgram: rwa_token_sdk_1.identityRegistryProgramId,
+                                identityRegistry: identityRegistry,
+                                identityAccount: identityAccount,
+                            })
+                                .instruction()];
+                }
+            });
+        });
+    };
+    /**
+     * Asynchronously generates instruction to attach wallet to identity.
+     * @param args - {@link AttachDetachWalletArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to attach wallet.
+     * */
+    IdentityRegistry.prototype.attachWalletToIdentityIxn = function (args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function () {
+            var controllerAuthority, identityProgram, identityRegistry, identityAccount, newWalletIdentityAccount, walletIdentity, ix;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        controllerAuthority = (0, pdas_1.deriveControllerAuthorityPda)(assetAccessController);
+                        identityProgram = (0, rwa_token_sdk_1.getIdentityRegistryProgram)(this.rwaClient.provider);
+                        identityRegistry = (0, rwa_token_sdk_1.getIdentityRegistryPda)(args.assetMint);
+                        identityAccount = (0, rwa_token_sdk_1.getIdentityAccountPda)(args.assetMint, args.owner);
+                        newWalletIdentityAccount = (0, rwa_token_sdk_1.getIdentityAccountPda)(args.assetMint, args.wallet);
+                        walletIdentity = (0, rwa_token_sdk_1.getWalletIdentityAccountPda)(args.assetMint, args.wallet.toString());
+                        return [4 /*yield*/, identityProgram.methods
+                                .attachWalletToIdentity(new web3_js_1.PublicKey(args.wallet))
+                                .accountsStrict({
+                                payer: args.payer,
+                                authority: controllerAuthority,
+                                identityAccount: identityAccount,
+                                identityRegistry: identityRegistry,
+                                assetMint: args.assetMint,
+                                walletIdentity: walletIdentity,
+                                systemProgram: web3_js_2.SystemProgram.programId,
+                            })
+                                .instruction()];
+                    case 1:
+                        ix = _a.sent();
+                        return [2 /*return*/, this.rbacProgram.methods
+                                .attachWalletToIdentity(ix.data)
+                                .accountsStrict({
+                                payer: args.payer,
+                                user: args.signer,
+                                controllerAuthority: controllerAuthority,
+                                assetAccessController: assetAccessController,
+                                authorizedUserRole: authorizedUserRole || null,
+                                identityRegistryProgram: rwa_token_sdk_1.identityRegistryProgramId,
+                                identityAccount: identityAccount,
+                                identityRegistry: identityRegistry,
+                                assetMint: args.assetMint,
+                                walletIdentity: walletIdentity,
+                                systemProgram: web3_js_2.SystemProgram.programId,
+                            })
+                                .instruction()];
+                }
+            });
+        });
+    };
+    /**
+     * Asynchronously generates instruction to detach wallet from identity.
+     * @param args - {@link AttachDetachWalletArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to detach wallet.
+     * */
+    IdentityRegistry.prototype.detachWalletFromIdentityIxn = function (args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function () {
+            var controllerAuthority, identityProgram, identityRegistry, identityAccount, walletIdentity, ix;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        controllerAuthority = (0, pdas_1.deriveControllerAuthorityPda)(assetAccessController);
+                        identityProgram = (0, rwa_token_sdk_1.getIdentityRegistryProgram)(this.rwaClient.provider);
+                        identityRegistry = (0, rwa_token_sdk_1.getIdentityRegistryPda)(args.assetMint);
+                        identityAccount = (0, rwa_token_sdk_1.getIdentityAccountPda)(args.assetMint, args.owner);
+                        walletIdentity = (0, rwa_token_sdk_1.getWalletIdentityAccountPda)(args.assetMint, args.wallet.toString());
+                        return [4 /*yield*/, identityProgram.methods
+                                .detachWalletFromIdentity()
+                                .accountsStrict({
+                                payer: args.payer,
+                                authority: controllerAuthority,
+                                walletIdentity: walletIdentity,
+                                identityAccount: identityAccount,
+                                identityRegistry: identityRegistry,
+                            })
+                                .instruction()];
+                    case 1:
+                        ix = _a.sent();
+                        return [2 /*return*/, this.rbacProgram.methods
+                                .detachWalletFromIdentity(ix.data)
+                                .accountsStrict({
+                                payer: args.payer,
+                                user: args.signer,
+                                controllerAuthority: controllerAuthority,
+                                assetAccessController: assetAccessController,
+                                authorizedUserRole: authorizedUserRole || null,
+                                identityRegistryProgram: rwa_token_sdk_1.identityRegistryProgramId,
+                                walletIdentity: walletIdentity,
+                                identityAccount: identityAccount,
+                                identityRegistry: identityRegistry,
+                            })
+                                .instruction()];
+                }
+            });
+        });
+    };
+    return IdentityRegistry;
+}());
+exports.IdentityRegistry = IdentityRegistry;
+//# sourceMappingURL=IdentityRegistry.js.map

package/dist/client/IdentityRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityRegistry.js","sourceRoot":"","sources":["../../src/client/IdentityRegistry.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,2CAAoE;AAOpE,+DAeuC;AACvC,gCAAuD;AACvD,2CAAgD;AAEhD;;GAEG;AACH;IAIE,0BAAY,SAAoB,EAAE,WAA6B;QAC7D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;;;;;;;;OASG;IACG,wCAAa,GAAnB,UACE,IAAmB,EACnB,qBAAgC,EAChC,kBAA8B;;;;;4BAEd,qBAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,EAAA;;wBAAjE,GAAG,GAAK,CAAA,SAAyD,CAAA,IAA9D;wBACL,SAAS,GAAG,EAAE,CAAC;wBAEf,iBAAiB,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;wBAC3B,gBAAgB,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;wBAC1B,mBAAmB,GAAG,IAAA,mCAA4B,EACtD,qBAAqB,CACtB,CAAC;wBACI,eAAe,GAAG,IAAA,qCAAqB,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;wBAC1E,KAAA,CAAA,KAAA,SAAS,CAAA,CAAC,IAAI,CAAA;wBACZ,qBAAM,IAAI,CAAC,WAAW,CAAC,OAAO;iCAC3B,qBAAqB,CAAC,iBAAiB,CAAC,IAAI,CAAC;iCAC7C,cAAc,CAAC;gCACd,KAAK,EAAE,IAAI,CAAC,KAAK;gCACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gCACjB,mBAAmB,qBAAA;gCACnB,qBAAqB,uBAAA;gCACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gCAC9C,uBAAuB,EAAE,yCAAyB;gCAClD,gBAAgB,EAAE,IAAA,sCAAsB,EAAC,IAAI,CAAC,SAAS,CAAC;gCACxD,eAAe,iBAAA;gCACf,cAAc,EAAE,IAAA,2CAA2B,EACzC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,KAAK,CACX;gCACD,aAAa,EAAE,uBAAa,CAAC,SAAS;6BACvC,CAAC;iCACD,WAAW,EAAE,EAAA;;wBAlBlB,cACE,SAiBgB,EACjB,CAAC;wBAEF,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;wBAEjC,sBAAO;gCACL,GAAG,EAAE,SAAS;gCACd,OAAO,EAAE,EAAE;6BACZ,EAAC;;;;KACH;IAED;;;;;;SAMK;IACC,wDAA6B,GAAnC,UACE,IAAmC,EACnC,qBAAgC,EAChC,kBAA8B;;;;;gBAExB,eAAe,GAAG,IAAA,qCAAqB,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpE,mBAAmB,GAAG,IAAA,mCAA4B,EACtD,qBAAqB,CACtB,CAAC;gBACF,sBAAO,IAAI,CAAC,WAAW,CAAC,OAAO;yBAC5B,yBAAyB,CACxB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EACd,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAChB,MAAA,IAAI,CAAC,YAAY,mCAAI,KAAK,CAC3B;yBACA,cAAc,CAAC;wBACd,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,IAAI,EAAE,IAAI,CAAC,MAAM;wBACjB,mBAAmB,qBAAA;wBACnB,qBAAqB,uBAAA;wBACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;wBAC9C,uBAAuB,EAAE,yCAAyB;wBAClD,gBAAgB,EAAE,IAAA,sCAAsB,EAAC,IAAI,CAAC,SAAS,CAAC;wBACxD,eAAe,iBAAA;wBACf,oBAAoB,EAAE,IAAI,CAAC,KAAK;wBAChC,aAAa,EAAE,uBAAa,CAAC,SAAS;wBACtC,mBAAmB,EAAE,qCAAqB;wBAC1C,YAAY,EAAE,IAAA,kCAAkB,EAAC,IAAI,CAAC,SAAS,CAAC;wBAChD,cAAc,EAAE,IAAA,oCAAoB,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;wBAChE,SAAS,EAAE,IAAI,CAAC,SAAS;qBAC1B,CAAC;yBACD,WAAW,EAAE,EAAC;;;KAClB;IACD;;;;;;OAMG;IACG,6DAAkC,GAAxC,UACE,IAAwC,EACxC,qBAAgC,EAChC,kBAA8B;;;;;4BAER,qBAAM,IAAA,iDAAiC,EAC3D,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,QAAQ,CACxB,EAAA;;wBAHK,aAAa,GAAG,SAGrB;wBACK,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC;wBAC5B,mBAAmB,GAAG,IAAA,mCAA4B,EACtD,qBAAqB,CACtB,CAAC;wBACI,eAAe,GAAG,IAAA,qCAAqB,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;wBAC1E,sBAAO,IAAI,CAAC,WAAW,CAAC,OAAO;iCAC5B,8BAA8B,CAAC,MAAM,CAAC;iCACtC,cAAc,CAAC;gCACd,KAAK,EAAE,IAAI,CAAC,KAAK;gCACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gCACjB,mBAAmB,qBAAA;gCACnB,qBAAqB,uBAAA;gCACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gCAC9C,uBAAuB,EAAE,yCAAyB;gCAClD,gBAAgB,EAAE,IAAA,sCAAsB,EAAC,IAAI,CAAC,SAAS,CAAC;gCACxD,eAAe,iBAAA;gCACf,oBAAoB,EAAE,IAAI,CAAC,KAAK;gCAChC,aAAa,EAAE,uBAAa,CAAC,SAAS;gCACtC,mBAAmB,EAAE,qCAAqB;gCAC1C,YAAY,EAAE,IAAA,kCAAkB,EAAC,IAAI,CAAC,SAAS,CAAC;gCAChD,cAAc,EAAE,IAAA,oCAAoB,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;gCAChE,SAAS,EAAE,IAAI,CAAC,SAAS;6BAC1B,CAAC;iCACD,WAAW,EAAE,EAAC;;;;KAClB;IAED;;;;;;SAMK;IACC,2DAAgC,GAAtC,UACE,IAAsB,EACtB,qBAAgC,EAChC,kBAA8B;;;;;;wBAExB,eAAe,GAAG,IAAA,0CAA0B,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;wBACtE,gBAAgB,GAAG,IAAA,sCAAsB,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAC1D,eAAe,GAAG,IAAA,qCAAqB,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;wBACpE,mBAAmB,GAAG,IAAA,mCAA4B,EACtD,qBAAqB,CACtB,CAAC;wBACgB,qBAAM,eAAe,CAAC,OAAO;iCAC5C,6BAA6B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;iCACtD,cAAc,CAAC;gCACd,KAAK,EAAE,IAAI,CAAC,KAAK;gCACjB,MAAM,EAAE,mBAAmB;gCAC3B,gBAAgB,kBAAA;gCAChB,eAAe,iBAAA;6BAChB,CAAC;iCACD,WAAW,EAAE,EAAA;;wBARV,SAAS,GAAG,SAQF;wBAChB,sBAAO,IAAI,CAAC,WAAW,CAAC,OAAO;iCAC5B,6BAA6B,CAAC,SAAS,CAAC,IAAI,CAAC;iCAC7C,cAAc,CAAC;gCACd,KAAK,EAAE,IAAI,CAAC,KAAK;gCACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gCACjB,mBAAmB,qBAAA;gCACnB,qBAAqB,uBAAA;gCACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gCAC9C,uBAAuB,EAAE,yCAAyB;gCAClD,gBAAgB,kBAAA;gCAChB,eAAe,iBAAA;6BAChB,CAAC;iCACD,WAAW,EAAE,EAAC;;;;KAClB;IAED;;;;;;SAMK;IACC,oDAAyB,GAA/B,UACE,IAA4B,EAC5B,qBAAgC,EAChC,kBAA8B;;;;;;wBAExB,mBAAmB,GAAG,IAAA,mCAA4B,EACtD,qBAAqB,CACtB,CAAC;wBACI,eAAe,GAAG,IAAA,0CAA0B,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;wBACtE,gBAAgB,GAAG,IAAA,sCAAsB,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAC1D,eAAe,GAAG,IAAA,qCAAqB,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;wBACpE,wBAAwB,GAAG,IAAA,qCAAqB,EACpD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CACZ,CAAC;wBACI,cAAc,GAAG,IAAA,2CAA2B,EAChD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CACvB,CAAC;wBAES,qBAAM,eAAe,CAAC,OAAO;iCACrC,sBAAsB,CAAC,IAAI,mBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;iCAClD,cAAc,CAAC;gCACd,KAAK,EAAE,IAAI,CAAC,KAAK;gCACjB,SAAS,EAAE,mBAAmB;gCAC9B,eAAe,iBAAA;gCACf,gBAAgB,kBAAA;gCAChB,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,cAAc,gBAAA;gCACd,aAAa,EAAE,uBAAa,CAAC,SAAS;6BACvC,CAAC;iCACD,WAAW,EAAE,EAAA;;wBAXV,EAAE,GAAG,SAWK;wBAChB,sBAAO,IAAI,CAAC,WAAW,CAAC,OAAO;iCAC5B,sBAAsB,CAAC,EAAE,CAAC,IAAI,CAAC;iCAC/B,cAAc,CAAC;gCACd,KAAK,EAAE,IAAI,CAAC,KAAK;gCACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gCACjB,mBAAmB,qBAAA;gCACnB,qBAAqB,uBAAA;gCACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gCAC9C,uBAAuB,EAAE,yCAAyB;gCAClD,eAAe,iBAAA;gCACf,gBAAgB,kBAAA;gCAChB,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,cAAc,gBAAA;gCACd,aAAa,EAAE,uBAAa,CAAC,SAAS;6BACvC,CAAC;iCACD,WAAW,EAAE,EAAC;;;;KAClB;IAED;;;;;;SAMK;IACC,sDAA2B,GAAjC,UACE,IAA4B,EAC5B,qBAAgC,EAChC,kBAA8B;;;;;;wBAExB,mBAAmB,GAAG,IAAA,mCAA4B,EACtD,qBAAqB,CACtB,CAAC;wBACI,eAAe,GAAG,IAAA,0CAA0B,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;wBACtE,gBAAgB,GAAG,IAAA,sCAAsB,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAC1D,eAAe,GAAG,IAAA,qCAAqB,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;wBACpE,cAAc,GAAG,IAAA,2CAA2B,EAChD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CACvB,CAAC;wBAES,qBAAM,eAAe,CAAC,OAAO;iCACrC,wBAAwB,EAAE;iCAC1B,cAAc,CAAC;gCACd,KAAK,EAAE,IAAI,CAAC,KAAK;gCACjB,SAAS,EAAE,mBAAmB;gCAC9B,cAAc,gBAAA;gCACd,eAAe,iBAAA;gCACf,gBAAgB,kBAAA;6BACjB,CAAC;iCACD,WAAW,EAAE,EAAA;;wBATV,EAAE,GAAG,SASK;wBAChB,sBAAO,IAAI,CAAC,WAAW,CAAC,OAAO;iCAC5B,wBAAwB,CAAC,EAAE,CAAC,IAAI,CAAC;iCACjC,cAAc,CAAC;gCACd,KAAK,EAAE,IAAI,CAAC,KAAK;gCACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gCACjB,mBAAmB,qBAAA;gCACnB,qBAAqB,uBAAA;gCACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gCAC9C,uBAAuB,EAAE,yCAAyB;gCAClD,cAAc,gBAAA;gCACd,eAAe,iBAAA;gCACf,gBAAgB,kBAAA;6BACjB,CAAC;iCACD,WAAW,EAAE,EAAC;;;;KAClB;IACH,uBAAC;AAAD,CAAC,AAnSD,IAmSC;AAnSY,4CAAgB"}

package/dist/client/PolicyEngine.d.ts

@@ -0,0 +1,74 @@
+import { Program } from "@coral-xyz/anchor";
+import { PublicKey, TransactionInstruction } from "@solana/web3.js";
+import { RwaRbac } from "../types/generated/rwa_rbac";
+import { AttachPolicyArgs, DetachPolicyArgs, ChangeCountersArgs, ChangeCounterLimitsArgs, RwaClient, ChangeMappingArgs, ChangeIssuancePoliciesArgs, SetCountersArgs } from "@dstoken-solana/rwa-token-sdk";
+/**
+ * Represents the role-based access client for Policy Engine for an RWA.
+ */
+export declare class PolicyEngine {
+    rwaClient: RwaClient;
+    rbacProgram: Program<RwaRbac>;
+    constructor(rwaClient: RwaClient, rbacProgram: Program<RwaRbac>);
+    /**
+     * Asynchronously attaches a policy to the policy account.
+     * @param args - {@link AttachPolicyArgs}
+     * @param signer - User signer public key.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to attach a policy.
+     * */
+    attachPolicy(args: AttachPolicyArgs, signer: PublicKey, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+    /**
+     * Asynchronously detaches a policy to the policy account.
+     * @param args - {@link DetachPolicyArgs}
+     * @param signer - User signer public key.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to detach a policy.
+     * */
+    detachPolicy(args: DetachPolicyArgs, signer: PublicKey, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+    /**
+     * Asynchronously changes counters on the policy account.
+     * @param args - {@link ChangeCountersArgs}
+     * @param signer - User signer public key.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to change the counters.
+     * */
+    changeCounters(args: ChangeCountersArgs, signer: PublicKey, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+    /**
+     * Asynchronously sets counter values on the policy account.
+     * @param args - {@link SetCountersArgs}
+     * @param signer - User signer public key.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to set the counter values.
+     * */
+    setCounters(args: SetCountersArgs, signer: PublicKey, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+    /**
+     * Asynchronously changes counters limits on the policy account.
+     * @param args - {@link ChangeCounterLimitsArgs}
+     * @param signer - User signer public key.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to change the counters limits.
+     * */
+    changeCounterLimits(args: ChangeCounterLimitsArgs, signer: PublicKey, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+    /**
+     * Asynchronously changes the levels mapping used in Policy Engine.
+     * @param args - {@link ChangeMappingArgs}
+     * @param signer - User signer public key.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * */
+    changeMapping(args: ChangeMappingArgs, signer: PublicKey, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+    /**
+     * Asynchronously changes the issuance policies enforced by Policy Engine.
+     * @param args - {@link ChangeIssuancePoliciesArgs}
+     * @param signer - User signer public key.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * */
+    changeIssuancePolicies(args: ChangeIssuancePoliciesArgs, signer: PublicKey, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+}
+//# sourceMappingURL=PolicyEngine.d.ts.map

package/dist/client/PolicyEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyEngine.d.ts","sourceRoot":"","sources":["../../src/client/PolicyEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,SAAS,EAET,sBAAsB,EACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAGhB,kBAAkB,EAClB,uBAAuB,EACvB,SAAS,EACT,iBAAiB,EACjB,0BAA0B,EAC1B,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC;;GAEG;AACH,qBAAa,YAAY;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAElB,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC;IAK/D;;;;;;;SAOK;IACC,YAAY,CAChB,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,SAAS,EACjB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAkBlC;;;;;;;SAOK;IACC,YAAY,CAChB,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,SAAS,EACjB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAkBlC;;;;;;;SAOK;IACC,cAAc,CAClB,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,SAAS,EACjB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAkBlC;;;;;;;SAOK;IACC,WAAW,CACf,IAAI,EAAE,eAAe,EACrB,MAAM,EAAE,SAAS,EACjB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAiBlC;;;;;;;SAOK;IACC,mBAAmB,CACvB,IAAI,EAAE,uBAAuB,EAC7B,MAAM,EAAE,SAAS,EACjB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAoBlC;;;;;;SAMK;IACC,aAAa,CACjB,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,SAAS,EACjB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAiBlC;;;;;;SAMK;IACC,sBAAsB,CAC1B,IAAI,EAAE,0BAA0B,EAChC,MAAM,EAAE,SAAS,EACjB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;CAkBnC"}