@dstoken-solana/rwa-rbac 0.0.1-rc1

package/dist/client/IdentityMetadataRegistry.js

@@ -0,0 +1,296 @@
+import { PublicKey, SystemProgram, } from "@solana/web3.js";
+import { deriveControllerAuthorityPda, deriveInvestorPda } from "../pdas";
+import { getIdentityAccountPda, getIdentityRegistryPda, getPolicyEnginePda, getPolicyEngineProgram, getPolicyEnginerEventAuthority, getTrackerAccountPda, getWalletIdentityAccountPda, identityRegistryProgramId, policyEngineProgramId, } from "@dstoken-solana/rwa-token-sdk";
+import { IMR_PROGRAM } from "../constants";
+/**
+ * Role-based access client for accessing Identity Metadata Registry.
+ */
+export class IdentityMetadataRegistry {
+    constructor(rwaClient, rbacProgram, imrProgram) {
+        this.rwaClient = rwaClient;
+        this.rbacProgram = rbacProgram;
+        this.imrProgram = imrProgram;
+    }
+    /**
+     * Asynchronously generates instructions to setup an investor.
+     * @param args - {@link SetupInvestorArgs}
+     * @param authority - RBAC AssetAccessController ControllerAuthority.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to setup an investor.
+     *
+     * It is required for at least a single user to be setup before issuing tokens.
+     */
+    async setupUserIxns(args, assetAccessController, authorizedUserRole) {
+        const returnIxs = [];
+        const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+        const identityRegistry = getIdentityRegistryPda(args.assetMint);
+        const investor = deriveInvestorPda(args.investorId, identityRegistry);
+        const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString() // Investor is owner of IdentityAccount
+        );
+        const assetMintKey = new PublicKey(args.assetMint);
+        const registerIx = await this.imrProgram.methods
+            .registerInvestor(args.investorId, args.collisionHash, args.levels[0], args.expiries[0], args.country, args.proofHashes[0])
+            .accountsStrict({
+            payer: args.payer,
+            authority: controllerAuthority,
+            investor,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry,
+            identityAccount,
+            walletIdentity: getWalletIdentityAccountPda(args.assetMint, investor.toString() // Investor is owner of IdentityAccount
+            ),
+            systemProgram: SystemProgram.programId,
+        })
+            .instruction();
+        returnIxs.push(await this.rbacProgram.methods
+            .registerInvestor(registerIx.data)
+            .accountsStrict({
+            payer: args.payer,
+            user: args.signer,
+            controllerAuthority,
+            assetAccessController,
+            authorizedUserRole: authorizedUserRole || null,
+            identityMetadataRegistryProgram: IMR_PROGRAM,
+            investor,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry,
+            identityAccount,
+            walletIdentity: getWalletIdentityAccountPda(args.assetMint, investor.toString()),
+            systemProgram: SystemProgram.programId,
+        })
+            .instruction());
+        const policyProgram = getPolicyEngineProgram(this.imrProgram.provider);
+        const trackerAccount = PublicKey.findProgramAddressSync([assetMintKey.toBuffer(), identityAccount.toBuffer()], policyProgram.programId)[0];
+        returnIxs.push(await policyProgram.methods
+            .createTrackerAccount()
+            .accountsStrict({
+            payer: args.payer,
+            trackerAccount,
+            systemProgram: SystemProgram.programId,
+            program: policyProgram.programId,
+            assetMint: assetMintKey,
+            eventAuthority: getPolicyEnginerEventAuthority(),
+            identityRegistry,
+            identityAccount,
+        })
+            .instruction());
+        if (args.levels.length > 1) {
+            returnIxs.push(await this.addLevels({
+                payer: args.payer,
+                signer: args.signer,
+                investorId: args.investorId,
+                assetMint: args.assetMint,
+                levels: args.levels.slice(1),
+                expiries: args.expiries.slice(1),
+                proofHashes: args.proofHashes.slice(1),
+                enforceLimits: args.enforceLimits,
+            }, assetAccessController, authorizedUserRole));
+        }
+        return {
+            ixs: returnIxs,
+            signers: [],
+        };
+    }
+    /**
+     * Asynchronously add levels to investor.
+     * @param args - {@link AddLevelsArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to add levels.
+     * */
+    async addLevels(args, assetAccessController, authorizedUserRole) {
+        const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+        const identityRegistry = getIdentityRegistryPda(args.assetMint);
+        const investor = deriveInvestorPda(args.investorId, identityRegistry);
+        const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString());
+        const trackerAccount = getTrackerAccountPda(args.assetMint, investor.toString());
+        const ix = await this.imrProgram.methods
+            .addLevels(Buffer.from(args.levels), args.expiries, args.proofHashes, args.enforceLimits ?? false)
+            .accountsStrict({
+            payer: args.payer,
+            authority: controllerAuthority,
+            investor,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry,
+            identityAccount,
+            systemProgram: SystemProgram.programId,
+            policyEngineProgram: policyEngineProgramId,
+            policyEngine: getPolicyEnginePda(args.assetMint),
+            trackerAccount,
+            assetMint: args.assetMint,
+        })
+            .instruction();
+        return this.rbacProgram.methods
+            .addLevels(ix.data)
+            .accountsStrict({
+            payer: args.payer,
+            user: args.signer,
+            controllerAuthority,
+            assetAccessController,
+            authorizedUserRole: authorizedUserRole || null,
+            identityMetadataRegistryProgram: IMR_PROGRAM,
+            investor,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry,
+            identityAccount,
+            systemProgram: SystemProgram.programId,
+            policyEngineProgram: policyEngineProgramId,
+            policyEngine: getPolicyEnginePda(args.assetMint),
+            trackerAccount,
+            assetMint: args.assetMint,
+        })
+            .instruction();
+    }
+    /**
+     * Asynchronously change country for the Investor.
+     * @param args - {@link ChangeCountryArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to change the country.
+     * */
+    async changeCountry(args, assetAccessController, authorizedUserRole) {
+        const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+        const identityRegistry = getIdentityRegistryPda(args.assetMint);
+        const investor = deriveInvestorPda(args.investorId, identityRegistry);
+        const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString());
+        const trackerAccount = getTrackerAccountPda(args.assetMint, investor.toString());
+        const ix = await this.imrProgram.methods
+            .changeCountry(args.country, args.enforceLimits ?? false)
+            .accountsStrict({
+            payer: args.payer,
+            authority: controllerAuthority,
+            investor,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry,
+            identityAccount,
+            policyEngineProgram: policyEngineProgramId,
+            policyEngine: getPolicyEnginePda(args.assetMint),
+            trackerAccount,
+            assetMint: args.assetMint,
+        })
+            .instruction();
+        return this.rbacProgram.methods
+            .changeCountry(ix.data)
+            .accountsStrict({
+            payer: args.payer,
+            user: args.signer,
+            controllerAuthority,
+            assetAccessController,
+            authorizedUserRole: authorizedUserRole || null,
+            identityMetadataRegistryProgram: IMR_PROGRAM,
+            investor,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry,
+            identityAccount,
+            policyEngineProgram: policyEngineProgramId,
+            policyEngine: getPolicyEnginePda(args.assetMint),
+            trackerAccount,
+            assetMint: args.assetMint,
+        })
+            .instruction();
+    }
+    /**
+     * Asynchronously remove levels from an investor.
+     * @param args - {@link RemoveLevelsArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to remove levels.
+     * */
+    async removeLevels(args, assetAccessController, authorizedUserRole) {
+        const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+        const identityRegistry = getIdentityRegistryPda(args.assetMint);
+        const investor = deriveInvestorPda(args.investorId, identityRegistry);
+        const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString());
+        const trackerAccount = getTrackerAccountPda(args.assetMint, investor.toString());
+        const ix = await this.imrProgram.methods
+            .removeLevels(Buffer.from(args.levels), args.enforceLimits ?? false)
+            .accountsStrict({
+            payer: args.payer,
+            authority: controllerAuthority,
+            investor,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry,
+            identityAccount,
+            systemProgram: SystemProgram.programId,
+            policyEngineProgram: policyEngineProgramId,
+            policyEngine: getPolicyEnginePda(args.assetMint),
+            trackerAccount,
+            assetMint: args.assetMint,
+        })
+            .instruction();
+        return this.rbacProgram.methods
+            .removeLevels(ix.data)
+            .accountsStrict({
+            payer: args.payer,
+            user: args.signer,
+            controllerAuthority,
+            assetAccessController,
+            authorizedUserRole: authorizedUserRole || null,
+            identityMetadataRegistryProgram: IMR_PROGRAM,
+            investor,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry,
+            identityAccount,
+            systemProgram: SystemProgram.programId,
+            policyEngineProgram: policyEngineProgramId,
+            policyEngine: getPolicyEnginePda(args.assetMint),
+            trackerAccount,
+            assetMint: args.assetMint,
+        })
+            .instruction();
+    }
+    /**
+     * Asynchronously remove an investor.
+     * @param args - {@link RemoveLevelsArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to remove an investor.
+     * */
+    async removeInvestor(args, assetAccessController, authorizedUserRole) {
+        const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+        const identityRegistry = getIdentityRegistryPda(args.assetMint);
+        const investor = deriveInvestorPda(args.investorId, identityRegistry);
+        const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString());
+        return this.rbacProgram.methods
+            .removeInvestor()
+            .accountsStrict({
+            payer: args.payer,
+            user: args.signer,
+            controllerAuthority,
+            assetAccessController,
+            authorizedUserRole: authorizedUserRole || null,
+            identityMetadataRegistryProgram: IMR_PROGRAM,
+            investor,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry,
+            identityAccount,
+        })
+            .instruction();
+    }
+    /**
+     * Asynchronously attach a wallet to IdentityAccouont for the Investor.
+     * @param args - {@link AttachWalletByInvestorArgs}
+     * */
+    async attachWalletByInvestor(args) {
+        const identityRegistry = getIdentityRegistryPda(args.assetMint);
+        const investor = deriveInvestorPda(args.investorId, identityRegistry);
+        const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString());
+        return this.imrProgram.methods
+            .attachWalletByInvestor(args.newWallet)
+            .accountsStrict({
+            payer: args.payer,
+            wallet: args.signer,
+            investor,
+            walletIdentity: getWalletIdentityAccountPda(args.assetMint, args.signer),
+            identityRegistryProgram: identityRegistryProgramId,
+            newWalletIdentity: getWalletIdentityAccountPda(args.assetMint, args.newWallet.toString()),
+            identityAccount,
+            identityRegistry,
+            assetMint: args.assetMint,
+            systemProgram: SystemProgram.programId,
+        })
+            .instruction();
+    }
+}
+//# sourceMappingURL=IdentityMetadataRegistry.js.map

package/dist/client/IdentityMetadataRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityMetadataRegistry.js","sourceRoot":"","sources":["../../src/client/IdentityMetadataRegistry.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,aAAa,GAEd,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,8BAA8B,EAC9B,oBAAoB,EACpB,2BAA2B,EAC3B,yBAAyB,EAEzB,qBAAqB,GAEtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAU3C;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAKnC,YACE,SAAoB,EACpB,WAA6B,EAC7B,UAA2B;QAE3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,aAAa,CACjB,IAAuB,EACvB,qBAAgC,EAChC,kBAA8B;QAE9B,MAAM,SAAS,GAAG,EAAE,CAAC;QAErB,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CAAC,uCAAuC;SAC5D,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO;aAC7C,gBAAgB,CACf,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EACd,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAChB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CACpB;aACA,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,mBAAmB;YAC9B,QAAQ;YACR,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB;YAChB,eAAe;YACf,cAAc,EAAE,2BAA2B,CACzC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CAAC,uCAAuC;aAC5D;YACD,aAAa,EAAE,aAAa,CAAC,SAAS;SACvC,CAAC;aACD,WAAW,EAAE,CAAC;QAEjB,SAAS,CAAC,IAAI,CACZ,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO;aAC3B,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC;aACjC,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,mBAAmB;YACnB,qBAAqB;YACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;YAC9C,+BAA+B,EAAE,WAAW;YAC5C,QAAQ;YACR,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB;YAChB,eAAe;YACf,cAAc,EAAE,2BAA2B,CACzC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB;YACD,aAAa,EAAE,aAAa,CAAC,SAAS;SACvC,CAAC;aACD,WAAW,EAAE,CACjB,CAAC;QAEF,MAAM,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvE,MAAM,cAAc,GAAG,SAAS,CAAC,sBAAsB,CACrD,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,EACrD,aAAa,CAAC,SAAS,CACxB,CAAC,CAAC,CAAC,CAAC;QACL,SAAS,CAAC,IAAI,CACZ,MAAM,aAAa,CAAC,OAAO;aACxB,oBAAoB,EAAE;aACtB,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc;YACd,aAAa,EAAE,aAAa,CAAC,SAAS;YACtC,OAAO,EAAE,aAAa,CAAC,SAAS;YAChC,SAAS,EAAE,YAAY;YACvB,cAAc,EAAE,8BAA8B,EAAE;YAChD,gBAAgB;YAChB,eAAe;SAChB,CAAC;aACD,WAAW,EAAE,CACjB,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,SAAS,CAAC,IAAI,CACZ,MAAM,IAAI,CAAC,SAAS,CAClB;gBACE,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtC,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,EACD,qBAAqB,EACrB,kBAAkB,CACnB,CACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,GAAG,EAAE,SAAS;YACd,OAAO,EAAE,EAAE;SACZ,CAAC;IACJ,CAAC;IAED;;;;;;SAMK;IACL,KAAK,CAAC,SAAS,CACb,IAAmB,EACnB,qBAAgC,EAChC,kBAA8B;QAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;QACF,MAAM,cAAc,GAAG,oBAAoB,CACzC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;QAEF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO;aACrC,SAAS,CACR,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EACxB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,aAAa,IAAI,KAAK,CAC5B;aACA,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,mBAAmB;YAC9B,QAAQ;YACR,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB;YAChB,eAAe;YACf,aAAa,EAAE,aAAa,CAAC,SAAS;YACtC,mBAAmB,EAAE,qBAAqB;YAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,cAAc;YACd,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;aACD,WAAW,EAAE,CAAC;QAEjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;aAC5B,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC;aAClB,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,mBAAmB;YACnB,qBAAqB;YACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;YAC9C,+BAA+B,EAAE,WAAW;YAC5C,QAAQ;YACR,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB;YAChB,eAAe;YACf,aAAa,EAAE,aAAa,CAAC,SAAS;YACtC,mBAAmB,EAAE,qBAAqB;YAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,cAAc;YACd,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;SAMK;IACL,KAAK,CAAC,aAAa,CACjB,IAAuB,EACvB,qBAAgC,EAChC,kBAA8B;QAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;QACF,MAAM,cAAc,GAAG,oBAAoB,CACzC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;QAEF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO;aACrC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;aACxD,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,mBAAmB;YAC9B,QAAQ;YACR,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB;YAChB,eAAe;YACf,mBAAmB,EAAE,qBAAqB;YAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,cAAc;YACd,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;aACD,WAAW,EAAE,CAAC;QAEjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;aAC5B,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC;aACtB,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,mBAAmB;YACnB,qBAAqB;YACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;YAC9C,+BAA+B,EAAE,WAAW;YAC5C,QAAQ;YACR,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB;YAChB,eAAe;YACf,mBAAmB,EAAE,qBAAqB;YAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,cAAc;YACd,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;SAMK;IACL,KAAK,CAAC,YAAY,CAChB,IAAsB,EACtB,qBAAgC,EAChC,kBAA8B;QAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;QACF,MAAM,cAAc,GAAG,oBAAoB,CACzC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;QAEF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO;aACrC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;aACnE,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,mBAAmB;YAC9B,QAAQ;YACR,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB;YAChB,eAAe;YACf,aAAa,EAAE,aAAa,CAAC,SAAS;YACtC,mBAAmB,EAAE,qBAAqB;YAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,cAAc;YACd,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;aACD,WAAW,EAAE,CAAC;QAEjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;aAC5B,YAAY,CAAC,EAAE,CAAC,IAAI,CAAC;aACrB,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,mBAAmB;YACnB,qBAAqB;YACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;YAC9C,+BAA+B,EAAE,WAAW;YAC5C,QAAQ;YACR,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB;YAChB,eAAe;YACf,aAAa,EAAE,aAAa,CAAC,SAAS;YACtC,mBAAmB,EAAE,qBAAqB;YAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,cAAc;YACd,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;SAMK;IACL,KAAK,CAAC,cAAc,CAClB,IAAwB,EACxB,qBAAgC,EAChC,kBAA8B;QAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;QAEF,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;aAC5B,cAAc,EAAE;aAChB,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,mBAAmB;YACnB,qBAAqB;YACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;YAC9C,+BAA+B,EAAE,WAAW;YAC5C,QAAQ;YACR,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB;YAChB,eAAe;SAChB,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;IAED;;;SAGK;IACL,KAAK,CAAC,sBAAsB,CAC1B,IAAgC;QAEhC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;QACF,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO;aAC3B,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;aACtC,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ;YACR,cAAc,EAAE,2BAA2B,CACzC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CACZ;YACD,uBAAuB,EAAE,yBAAyB;YAClD,iBAAiB,EAAE,2BAA2B,CAC5C,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAC1B;YACD,eAAe;YACf,gBAAgB;YAChB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,aAAa,CAAC,SAAS;SACvC,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;CACF"}

package/dist/client/IdentityRegistry.d.ts

@@ -0,0 +1,65 @@
+import { Program } from "@coral-xyz/anchor";
+import { PublicKey, TransactionInstruction } from "@solana/web3.js";
+import { RwaRbac } from "../types/generated/rwa_rbac";
+import { AttachDetachWalletArgs, RefreshLevelArgs } from "../types/instructions";
+import { AddLevelToIdentityAccountArgs, IxReturn, RemoveLevelFromIdentityAccountArgs, RwaClient, SetupUserArgs } from "@dstoken-solana/rwa-token-sdk";
+/**
+ * Represents the role-based access client for Identity Registry for an RWA.
+ */
+export declare class IdentityRegistry {
+    rwaClient: RwaClient;
+    rbacProgram: Program<RwaRbac>;
+    constructor(rwaClient: RwaClient, rbacProgram: Program<RwaRbac>);
+    /**
+     * Asynchronously generates instructions to setup a non-investor user with an identity account.
+     * @param args - {@link SetupUserArgs}
+     * @param authority - RBAC AssetAccessController ControllerAuthority.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to setup a user.
+     *
+     * It is required for at least a single user to be setup before issuing tokens.
+     */
+    setupUserIxns(args: SetupUserArgs, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<IxReturn>;
+    /**
+     * Asynchronously update a non-investor user identity account level.
+     * @param args - {@link AddLevelToIdentityAccountArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to update user account identity.
+     * */
+    addIdentityLevelToUserAccount(args: AddLevelToIdentityAccountArgs, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+    /**
+     * Asynchronously reduces a non-Investor user identity account level.
+     * @param args - {@link RemoveLevelFromIdentityAccount}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to reduce the level of a user identity account.
+     */
+    removeIdentityLevelFromUserAccount(args: RemoveLevelFromIdentityAccountArgs, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+    /**
+     * Asynchronously generates instruction to refresh expiry on an Identity Account level.
+     * @param args - {@link RefreshLevelArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to refresh expiry on an Identity Account level.
+     * */
+    refreshLevelToIdentityAccountIxn(args: RefreshLevelArgs, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+    /**
+     * Asynchronously generates instruction to attach wallet to identity.
+     * @param args - {@link AttachDetachWalletArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to attach wallet.
+     * */
+    attachWalletToIdentityIxn(args: AttachDetachWalletArgs, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+    /**
+     * Asynchronously generates instruction to detach wallet from identity.
+     * @param args - {@link AttachDetachWalletArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to detach wallet.
+     * */
+    detachWalletFromIdentityIxn(args: AttachDetachWalletArgs, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
+}
+//# sourceMappingURL=IdentityRegistry.d.ts.map

package/dist/client/IdentityRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityRegistry.d.ts","sourceRoot":"","sources":["../../src/client/IdentityRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,6BAA6B,EAS7B,QAAQ,EAER,kCAAkC,EAClC,SAAS,EACT,aAAa,EACd,MAAM,+BAA+B,CAAC;AAIvC;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAElB,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC;IAK/D;;;;;;;;;OASG;IACG,aAAa,CACjB,IAAI,EAAE,aAAa,EACnB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,QAAQ,CAAC;IAuCpB;;;;;;SAMK;IACC,6BAA6B,CACjC,IAAI,EAAE,6BAA6B,EACnC,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IA6BlC;;;;;;OAMG;IACG,kCAAkC,CACtC,IAAI,EAAE,kCAAkC,EACxC,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IA+BlC;;;;;;SAMK;IACC,gCAAgC,CACpC,IAAI,EAAE,gBAAgB,EACtB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IA+BlC;;;;;;SAMK;IACC,yBAAyB,CAC7B,IAAI,EAAE,sBAAsB,EAC5B,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IA8ClC;;;;;;SAMK;IACC,2BAA2B,CAC/B,IAAI,EAAE,sBAAsB,EAC5B,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;CAqCnC"}

package/dist/client/IdentityRegistry.js

@@ -0,0 +1,230 @@
+import { PublicKey } from "@solana/web3.js";
+import { getIdentityAccountPda, getIdentityRegistryPda, getIdentityRegistryProgram, getPolicyEnginePda, getRemoveLevelFromIdentityAccount, getTrackerAccountPda, getWalletIdentityAccountPda, identityRegistryProgramId, policyEngineProgramId, } from "@dstoken-solana/rwa-token-sdk";
+import { deriveControllerAuthorityPda } from "../pdas";
+import { SystemProgram } from "@solana/web3.js";
+/**
+ * Represents the role-based access client for Identity Registry for an RWA.
+ */
+export class IdentityRegistry {
+    constructor(rwaClient, rbacProgram) {
+        this.rwaClient = rwaClient;
+        this.rbacProgram = rbacProgram;
+    }
+    /**
+     * Asynchronously generates instructions to setup a non-investor user with an identity account.
+     * @param args - {@link SetupUserArgs}
+     * @param authority - RBAC AssetAccessController ControllerAuthority.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to setup a user.
+     *
+     * It is required for at least a single user to be setup before issuing tokens.
+     */
+    async setupUserIxns(args, assetAccessController, authorizedUserRole) {
+        const { ixs } = await this.rwaClient.identityRegistry.setupUserIxns(args);
+        const returnIxs = [];
+        const identityAccountIx = ixs[0];
+        const trackerAccountIx = ixs[1];
+        const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+        const identityAccount = getIdentityAccountPda(args.assetMint, args.owner);
+        returnIxs.push(await this.rbacProgram.methods
+            .createIdentityAccount(identityAccountIx.data)
+            .accountsStrict({
+            payer: args.payer,
+            user: args.signer,
+            controllerAuthority,
+            assetAccessController,
+            authorizedUserRole: authorizedUserRole || null,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry: getIdentityRegistryPda(args.assetMint),
+            identityAccount,
+            walletIdentity: getWalletIdentityAccountPda(args.assetMint, args.owner),
+            systemProgram: SystemProgram.programId,
+        })
+            .instruction());
+        returnIxs.push(trackerAccountIx);
+        return {
+            ixs: returnIxs,
+            signers: [],
+        };
+    }
+    /**
+     * Asynchronously update a non-investor user identity account level.
+     * @param args - {@link AddLevelToIdentityAccountArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to update user account identity.
+     * */
+    async addIdentityLevelToUserAccount(args, assetAccessController, authorizedUserRole) {
+        const identityAccount = getIdentityAccountPda(args.assetMint, args.owner);
+        const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+        return this.rbacProgram.methods
+            .addLevelToIdentityAccount(args.levels[0], args.expiries[0], args.ignorePolicy ?? false)
+            .accountsStrict({
+            payer: args.payer,
+            user: args.signer,
+            controllerAuthority,
+            assetAccessController,
+            authorizedUserRole: authorizedUserRole || null,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry: getIdentityRegistryPda(args.assetMint),
+            identityAccount,
+            identityAccountOwner: args.owner,
+            systemProgram: SystemProgram.programId,
+            policyEngineProgram: policyEngineProgramId,
+            policyEngine: getPolicyEnginePda(args.assetMint),
+            trackerAccount: getTrackerAccountPda(args.assetMint, args.owner),
+            assetMint: args.assetMint,
+        })
+            .instruction();
+    }
+    /**
+     * Asynchronously reduces a non-Investor user identity account level.
+     * @param args - {@link RemoveLevelFromIdentityAccount}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to reduce the level of a user identity account.
+     */
+    async removeIdentityLevelFromUserAccount(args, assetAccessController, authorizedUserRole) {
+        const removeLevelIx = await getRemoveLevelFromIdentityAccount(args, this.rwaClient.provider);
+        const ixData = removeLevelIx.data;
+        const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+        const identityAccount = getIdentityAccountPda(args.assetMint, args.owner);
+        return this.rbacProgram.methods
+            .removeLevelFromIdentityAccount(ixData)
+            .accountsStrict({
+            payer: args.payer,
+            user: args.signer,
+            controllerAuthority,
+            assetAccessController,
+            authorizedUserRole: authorizedUserRole || null,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry: getIdentityRegistryPda(args.assetMint),
+            identityAccount,
+            identityAccountOwner: args.owner,
+            systemProgram: SystemProgram.programId,
+            policyEngineProgram: policyEngineProgramId,
+            policyEngine: getPolicyEnginePda(args.assetMint),
+            trackerAccount: getTrackerAccountPda(args.assetMint, args.owner),
+            assetMint: args.assetMint,
+        })
+            .instruction();
+    }
+    /**
+     * Asynchronously generates instruction to refresh expiry on an Identity Account level.
+     * @param args - {@link RefreshLevelArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to refresh expiry on an Identity Account level.
+     * */
+    async refreshLevelToIdentityAccountIxn(args, assetAccessController, authorizedUserRole) {
+        const identityProgram = getIdentityRegistryProgram(this.rwaClient.provider);
+        const identityRegistry = getIdentityRegistryPda(args.assetMint);
+        const identityAccount = getIdentityAccountPda(args.assetMint, args.owner);
+        const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+        const refreshIx = await identityProgram.methods
+            .refreshLevelToIdentityAccount(args.level, args.expiry)
+            .accountsStrict({
+            payer: args.payer,
+            signer: controllerAuthority,
+            identityRegistry,
+            identityAccount,
+        })
+            .instruction();
+        return this.rbacProgram.methods
+            .refreshLevelToIdentityAccount(refreshIx.data)
+            .accountsStrict({
+            payer: args.payer,
+            user: args.signer,
+            controllerAuthority,
+            assetAccessController,
+            authorizedUserRole: authorizedUserRole || null,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityRegistry,
+            identityAccount,
+        })
+            .instruction();
+    }
+    /**
+     * Asynchronously generates instruction to attach wallet to identity.
+     * @param args - {@link AttachDetachWalletArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to attach wallet.
+     * */
+    async attachWalletToIdentityIxn(args, assetAccessController, authorizedUserRole) {
+        const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+        const identityProgram = getIdentityRegistryProgram(this.rwaClient.provider);
+        const identityRegistry = getIdentityRegistryPda(args.assetMint);
+        const identityAccount = getIdentityAccountPda(args.assetMint, args.owner);
+        const newWalletIdentityAccount = getIdentityAccountPda(args.assetMint, args.wallet);
+        const walletIdentity = getWalletIdentityAccountPda(args.assetMint, args.wallet.toString());
+        const ix = await identityProgram.methods
+            .attachWalletToIdentity(new PublicKey(args.wallet))
+            .accountsStrict({
+            payer: args.payer,
+            authority: controllerAuthority,
+            identityAccount,
+            identityRegistry,
+            assetMint: args.assetMint,
+            walletIdentity,
+            systemProgram: SystemProgram.programId,
+        })
+            .instruction();
+        return this.rbacProgram.methods
+            .attachWalletToIdentity(ix.data)
+            .accountsStrict({
+            payer: args.payer,
+            user: args.signer,
+            controllerAuthority,
+            assetAccessController,
+            authorizedUserRole: authorizedUserRole || null,
+            identityRegistryProgram: identityRegistryProgramId,
+            identityAccount,
+            identityRegistry,
+            assetMint: args.assetMint,
+            walletIdentity,
+            systemProgram: SystemProgram.programId,
+        })
+            .instruction();
+    }
+    /**
+     * Asynchronously generates instruction to detach wallet from identity.
+     * @param args - {@link AttachDetachWalletArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to detach wallet.
+     * */
+    async detachWalletFromIdentityIxn(args, assetAccessController, authorizedUserRole) {
+        const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+        const identityProgram = getIdentityRegistryProgram(this.rwaClient.provider);
+        const identityRegistry = getIdentityRegistryPda(args.assetMint);
+        const identityAccount = getIdentityAccountPda(args.assetMint, args.owner);
+        const walletIdentity = getWalletIdentityAccountPda(args.assetMint, args.wallet.toString());
+        const ix = await identityProgram.methods
+            .detachWalletFromIdentity()
+            .accountsStrict({
+            payer: args.payer,
+            authority: controllerAuthority,
+            walletIdentity,
+            identityAccount,
+            identityRegistry,
+        })
+            .instruction();
+        return this.rbacProgram.methods
+            .detachWalletFromIdentity(ix.data)
+            .accountsStrict({
+            payer: args.payer,
+            user: args.signer,
+            controllerAuthority,
+            assetAccessController,
+            authorizedUserRole: authorizedUserRole || null,
+            identityRegistryProgram: identityRegistryProgramId,
+            walletIdentity,
+            identityAccount,
+            identityRegistry,
+        })
+            .instruction();
+    }
+}
+//# sourceMappingURL=IdentityRegistry.js.map

package/dist/client/IdentityRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityRegistry.js","sourceRoot":"","sources":["../../src/client/IdentityRegistry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAA0B,MAAM,iBAAiB,CAAC;AAOpE,OAAO,EAEL,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,EAClB,iCAAiC,EACjC,oBAAoB,EACpB,2BAA2B,EAC3B,yBAAyB,EAEzB,qBAAqB,GAItB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAI3B,YAAY,SAAoB,EAAE,WAA6B;QAC7D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,aAAa,CACjB,IAAmB,EACnB,qBAAgC,EAChC,kBAA8B;QAE9B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,EAAE,CAAC;QAErB,MAAM,iBAAiB,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,gBAAgB,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;QACF,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,SAAS,CAAC,IAAI,CACZ,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO;aAC3B,qBAAqB,CAAC,iBAAiB,CAAC,IAAI,CAAC;aAC7C,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,mBAAmB;YACnB,qBAAqB;YACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;YAC9C,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB,EAAE,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;YACxD,eAAe;YACf,cAAc,EAAE,2BAA2B,CACzC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,KAAK,CACX;YACD,aAAa,EAAE,aAAa,CAAC,SAAS;SACvC,CAAC;aACD,WAAW,EAAE,CACjB,CAAC;QAEF,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEjC,OAAO;YACL,GAAG,EAAE,SAAS;YACd,OAAO,EAAE,EAAE;SACZ,CAAC;IACJ,CAAC;IAED;;;;;;SAMK;IACL,KAAK,CAAC,6BAA6B,CACjC,IAAmC,EACnC,qBAAgC,EAChC,kBAA8B;QAE9B,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;QACF,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;aAC5B,yBAAyB,CACxB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EACd,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAChB,IAAI,CAAC,YAAY,IAAI,KAAK,CAC3B;aACA,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,mBAAmB;YACnB,qBAAqB;YACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;YAC9C,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB,EAAE,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;YACxD,eAAe;YACf,oBAAoB,EAAE,IAAI,CAAC,KAAK;YAChC,aAAa,EAAE,aAAa,CAAC,SAAS;YACtC,mBAAmB,EAAE,qBAAqB;YAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,cAAc,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;YAChE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;IACD;;;;;;OAMG;IACH,KAAK,CAAC,kCAAkC,CACtC,IAAwC,EACxC,qBAAgC,EAChC,kBAA8B;QAE9B,MAAM,aAAa,GAAG,MAAM,iCAAiC,CAC3D,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,QAAQ,CACxB,CAAC;QACF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC;QAClC,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;QACF,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;aAC5B,8BAA8B,CAAC,MAAM,CAAC;aACtC,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,mBAAmB;YACnB,qBAAqB;YACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;YAC9C,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB,EAAE,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;YACxD,eAAe;YACf,oBAAoB,EAAE,IAAI,CAAC,KAAK;YAChC,aAAa,EAAE,aAAa,CAAC,SAAS;YACtC,mBAAmB,EAAE,qBAAqB;YAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,cAAc,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;YAChE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;SAMK;IACL,KAAK,CAAC,gCAAgC,CACpC,IAAsB,EACtB,qBAAgC,EAChC,kBAA8B;QAE9B,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO;aAC5C,6BAA6B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;aACtD,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,mBAAmB;YAC3B,gBAAgB;YAChB,eAAe;SAChB,CAAC;aACD,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;aAC5B,6BAA6B,CAAC,SAAS,CAAC,IAAI,CAAC;aAC7C,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,mBAAmB;YACnB,qBAAqB;YACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;YAC9C,uBAAuB,EAAE,yBAAyB;YAClD,gBAAgB;YAChB,eAAe;SAChB,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;SAMK;IACL,KAAK,CAAC,yBAAyB,CAC7B,IAA4B,EAC5B,qBAAgC,EAChC,kBAA8B;QAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;QACF,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,wBAAwB,GAAG,qBAAqB,CACpD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,MAAM,cAAc,GAAG,2BAA2B,CAChD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CACvB,CAAC;QAEF,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO;aACrC,sBAAsB,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;aAClD,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,mBAAmB;YAC9B,eAAe;YACf,gBAAgB;YAChB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc;YACd,aAAa,EAAE,aAAa,CAAC,SAAS;SACvC,CAAC;aACD,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;aAC5B,sBAAsB,CAAC,EAAE,CAAC,IAAI,CAAC;aAC/B,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,mBAAmB;YACnB,qBAAqB;YACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;YAC9C,uBAAuB,EAAE,yBAAyB;YAClD,eAAe;YACf,gBAAgB;YAChB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc;YACd,aAAa,EAAE,aAAa,CAAC,SAAS;SACvC,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;SAMK;IACL,KAAK,CAAC,2BAA2B,CAC/B,IAA4B,EAC5B,qBAAgC,EAChC,kBAA8B;QAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;QACF,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,cAAc,GAAG,2BAA2B,CAChD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CACvB,CAAC;QAEF,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO;aACrC,wBAAwB,EAAE;aAC1B,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,mBAAmB;YAC9B,cAAc;YACd,eAAe;YACf,gBAAgB;SACjB,CAAC;aACD,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;aAC5B,wBAAwB,CAAC,EAAE,CAAC,IAAI,CAAC;aACjC,cAAc,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,mBAAmB;YACnB,qBAAqB;YACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;YAC9C,uBAAuB,EAAE,yBAAyB;YAClD,cAAc;YACd,eAAe;YACf,gBAAgB;SACjB,CAAC;aACD,WAAW,EAAE,CAAC;IACnB,CAAC;CACF"}