@dstoken-solana/rwa-rbac 0.1.2 → 0.2.0

package/dist/index.js

@@ -45,15 +45,16 @@ const deriveUserRolePda = (id, assetAccessController, programId = RBAC_PROGRAM)
         Buffer.from("UserRole"),
     ], programId)[0];
 };
+const getEventAuthority = (programId) => web3_js.PublicKey.findProgramAddressSync([Buffer.from("__event_authority")], programId)[0];
 
-var address$2 = "3g6fUgMsJQhjPUYxNjEU5PyzGf8DerbDx8p5Qh4yMnRR";
-var metadata$2 = {
+var address$1 = "3g6fUgMsJQhjPUYxNjEU5PyzGf8DerbDx8p5Qh4yMnRR";
+var metadata$1 = {
 	name: "rwa_rbac",
 	version: "0.1.0",
 	spec: "0.1.0",
 	description: "Created with Anchor"
 };
-var instructions$2 = [
+var instructions$1 = [
 	{
 		name: "add_level_to_identity_account",
 		discriminator: [
@@ -126,6 +127,9 @@ var instructions$2 = [
 			},
 			{
 				name: "asset_mint"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -216,6 +220,12 @@ var instructions$2 = [
 			},
 			{
 				name: "asset_mint"
+			},
+			{
+				name: "event_authority_identity_metadata_registry"
+			},
+			{
+				name: "event_authority_identity_registry"
 			}
 		],
 		args: [
@@ -299,101 +309,6 @@ var instructions$2 = [
 			}
 		]
 	},
-	{
-		name: "add_token_lock",
-		discriminator: [
-			195,
-			26,
-			109,
-			80,
-			46,
-			7,
-			195,
-			55
-		],
-		accounts: [
-			{
-				name: "payer",
-				writable: true,
-				signer: true
-			},
-			{
-				name: "user",
-				signer: true
-			},
-			{
-				name: "controller_authority",
-				writable: true,
-				relations: [
-					"asset_access_controller"
-				]
-			},
-			{
-				name: "asset_access_controller",
-				relations: [
-					"authorized_user_role"
-				]
-			},
-			{
-				name: "authorized_user_role",
-				optional: true
-			},
-			{
-				name: "token_locks_program",
-				address: "9bNt3ZiZpDdHqAt5Q1Wq6twFe5RKmMCwA7MJyK2HgGnU"
-			},
-			{
-				name: "investor_locks",
-				writable: true
-			},
-			{
-				name: "investor"
-			},
-			{
-				name: "wallet_identity_account"
-			},
-			{
-				name: "identity_account"
-			},
-			{
-				name: "asset_mint",
-				writable: true
-			},
-			{
-				name: "unlocked_token_account",
-				writable: true
-			},
-			{
-				name: "locked_token_account",
-				writable: true
-			},
-			{
-				name: "asset_controller"
-			},
-			{
-				name: "identity_registry",
-				writable: true
-			},
-			{
-				name: "asset_controller_program",
-				address: "7tXjmbkZVY3Gmg9kDBebcNXT1yC5pyoxxXVLwdbv9tvP"
-			},
-			{
-				name: "token_program",
-				address: "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb"
-			},
-			{
-				name: "system_program",
-				address: "11111111111111111111111111111111"
-			}
-		],
-		args: [
-			{
-				name: "cpi_data",
-				type: "bytes"
-			}
-		]
-	},
 	{
 		name: "assign_user_role",
 		discriminator: [
@@ -434,6 +349,38 @@ var instructions$2 = [
 			{
 				name: "system_program",
 				address: "11111111111111111111111111111111"
+			},
+			{
+				name: "event_authority",
+				pda: {
+					seeds: [
+						{
+							kind: "const",
+							value: [
+								95,
+								95,
+								101,
+								118,
+								101,
+								110,
+								116,
+								95,
+								97,
+								117,
+								116,
+								104,
+								111,
+								114,
+								105,
+								116,
+								121
+							]
+						}
+					]
+				}
+			},
+			{
+				name: "program"
 			}
 		],
 		args: [
@@ -494,6 +441,9 @@ var instructions$2 = [
 			{
 				name: "system_program",
 				address: "11111111111111111111111111111111"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -562,6 +512,9 @@ var instructions$2 = [
 			{
 				name: "system_program",
 				address: "11111111111111111111111111111111"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -620,6 +573,9 @@ var instructions$2 = [
 			{
 				name: "system_program",
 				address: "11111111111111111111111111111111"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -678,6 +634,9 @@ var instructions$2 = [
 			{
 				name: "system_program",
 				address: "11111111111111111111111111111111"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -756,6 +715,9 @@ var instructions$2 = [
 			},
 			{
 				name: "asset_mint"
+			},
+			{
+				name: "event_authority_identity_registry"
 			}
 		],
 		args: [
@@ -810,6 +772,9 @@ var instructions$2 = [
 			{
 				name: "policy_engine",
 				writable: true
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -864,6 +829,9 @@ var instructions$2 = [
 			{
 				name: "policy_engine",
 				writable: true
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -873,70 +841,6 @@ var instructions$2 = [
 			}
 		]
 	},
-	{
-		name: "close_investor_locks",
-		discriminator: [
-			255,
-			60,
-			220,
-			115,
-			217,
-			104,
-			157,
-			171
-		],
-		accounts: [
-			{
-				name: "payer",
-				writable: true,
-				signer: true
-			},
-			{
-				name: "user",
-				signer: true
-			},
-			{
-				name: "controller_authority",
-				relations: [
-					"asset_access_controller"
-				]
-			},
-			{
-				name: "asset_access_controller",
-				relations: [
-					"authorized_user_role"
-				]
-			},
-			{
-				name: "authorized_user_role",
-				optional: true
-			},
-			{
-				name: "token_locks_program",
-				address: "9bNt3ZiZpDdHqAt5Q1Wq6twFe5RKmMCwA7MJyK2HgGnU"
-			},
-			{
-				name: "investor_locks",
-				writable: true
-			},
-			{
-				name: "investor"
-			},
-			{
-				name: "locked_token_account",
-				writable: true
-			},
-			{
-				name: "token_program"
-			},
-			{
-				name: "system_program",
-				address: "11111111111111111111111111111111"
-			}
-		],
-		args: [
-		]
-	},
 	{
 		name: "close_mint_account",
 		discriminator: [
@@ -1122,6 +1026,9 @@ var instructions$2 = [
 			{
 				name: "system_program",
 				address: "11111111111111111111111111111111"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -1132,16 +1039,16 @@ var instructions$2 = [
 		]
 	},
 	{
-		name: "create_investor_locks",
+		name: "create_user_role",
 		discriminator: [
-			223,
-			81,
-			139,
-			162,
-			204,
-			48,
-			24,
-			213
+			13,
+			20,
+			224,
+			42,
+			3,
+			120,
+			67,
+			23
 		],
 		accounts: [
 			{
@@ -1154,13 +1061,12 @@ var instructions$2 = [
 				signer: true
 			},
 			{
-				name: "controller_authority",
-				relations: [
-					"asset_access_controller"
-				]
+				name: "new_user_role",
+				writable: true
 			},
 			{
 				name: "asset_access_controller",
+				writable: true,
 				relations: [
 					"authorized_user_role"
 				]
@@ -1170,123 +1076,45 @@ var instructions$2 = [
 				optional: true
 			},
 			{
-				name: "token_locks_program",
-				address: "9bNt3ZiZpDdHqAt5Q1Wq6twFe5RKmMCwA7MJyK2HgGnU"
-			},
+				name: "system_program",
+				address: "11111111111111111111111111111111"
+			}
+		],
+		args: [
 			{
-				name: "investor_locks",
-				writable: true
+				name: "name",
+				type: "string"
 			},
 			{
-				name: "investor"
+				name: "allowed_admin_ixs",
+				type: "u64"
 			},
 			{
-				name: "identity_account"
-			},
+				name: "allowed_medici_ixs",
+				type: "u64"
+			}
+		]
+	},
+	{
+		name: "delete_user_role",
+		discriminator: [
+			177,
+			139,
+			27,
+			46,
+			113,
+			250,
+			139,
+			225
+		],
+		accounts: [
 			{
-				name: "asset_mint",
+				name: "receiver",
 				writable: true
 			},
 			{
-				name: "locked_token_account",
-				writable: true
-			},
-			{
-				name: "asset_controller"
-			},
-			{
-				name: "asset_controller_program",
-				address: "7tXjmbkZVY3Gmg9kDBebcNXT1yC5pyoxxXVLwdbv9tvP"
-			},
-			{
-				name: "token_program",
-				address: "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb"
-			},
-			{
-				name: "system_program",
-				address: "11111111111111111111111111111111"
-			}
-		],
-		args: [
-		]
-	},
-	{
-		name: "create_user_role",
-		discriminator: [
-			13,
-			20,
-			224,
-			42,
-			3,
-			120,
-			67,
-			23
-		],
-		accounts: [
-			{
-				name: "payer",
-				writable: true,
-				signer: true
-			},
-			{
-				name: "user",
-				signer: true
-			},
-			{
-				name: "new_user_role",
-				writable: true
-			},
-			{
-				name: "asset_access_controller",
-				writable: true,
-				relations: [
-					"authorized_user_role"
-				]
-			},
-			{
-				name: "authorized_user_role",
-				optional: true
-			},
-			{
-				name: "system_program",
-				address: "11111111111111111111111111111111"
-			}
-		],
-		args: [
-			{
-				name: "name",
-				type: "string"
-			},
-			{
-				name: "allowed_admin_ixs",
-				type: "u64"
-			},
-			{
-				name: "allowed_medici_ixs",
-				type: "u64"
-			}
-		]
-	},
-	{
-		name: "delete_user_role",
-		discriminator: [
-			177,
-			139,
-			27,
-			46,
-			113,
-			250,
-			139,
-			225
-		],
-		accounts: [
-			{
-				name: "receiver",
-				writable: true
-			},
-			{
-				name: "user",
-				signer: true
+				name: "user",
+				signer: true
 			},
 			{
 				name: "asset_access_controller",
@@ -1356,6 +1184,9 @@ var instructions$2 = [
 			{
 				name: "system_program",
 				address: "11111111111111111111111111111111"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -1418,6 +1249,9 @@ var instructions$2 = [
 			},
 			{
 				name: "identity_registry"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -1577,6 +1411,9 @@ var instructions$2 = [
 			},
 			{
 				name: "wallet_identity_account"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -1752,6 +1589,12 @@ var instructions$2 = [
 				name: "wallet_identity",
 				writable: true
 			},
+			{
+				name: "event_authority_identity_metadata_registry"
+			},
+			{
+				name: "event_authority_identity_registry"
+			},
 			{
 				name: "system_program",
 				address: "11111111111111111111111111111111"
@@ -1764,6 +1607,73 @@ var instructions$2 = [
 			}
 		]
 	},
+	{
+		name: "remove_identity_account",
+		discriminator: [
+			78,
+			35,
+			174,
+			50,
+			72,
+			181,
+			12,
+			42
+		],
+		accounts: [
+			{
+				name: "payer",
+				writable: true,
+				signer: true
+			},
+			{
+				name: "user",
+				signer: true
+			},
+			{
+				name: "controller_authority",
+				relations: [
+					"asset_access_controller"
+				]
+			},
+			{
+				name: "asset_access_controller",
+				relations: [
+					"authorized_user_role"
+				]
+			},
+			{
+				name: "authorized_user_role",
+				optional: true
+			},
+			{
+				name: "identity_registry_program",
+				address: "GZsnjqT3c5zbHqsctrJ4EG4rbEfo7ZXyyUG7aDJNmxfA"
+			},
+			{
+				name: "identity_registry"
+			},
+			{
+				name: "identity_account",
+				writable: true
+			},
+			{
+				name: "wallet_identity",
+				writable: true
+			},
+			{
+				name: "event_authority"
+			},
+			{
+				name: "identity_owner"
+			}
+		],
+		args: [
+			{
+				name: "cpi_data",
+				type: "bytes"
+			}
+		]
+	},
 	{
 		name: "remove_investor",
 		discriminator: [
@@ -1832,6 +1742,12 @@ var instructions$2 = [
 			{
 				name: "tracker_account",
 				writable: true
+			},
+			{
+				name: "event_authority_identity_metadata_registry"
+			},
+			{
+				name: "event_authority_identity_registry"
 			}
 		],
 		args: [
@@ -1909,6 +1825,9 @@ var instructions$2 = [
 			},
 			{
 				name: "asset_mint"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -1991,6 +1910,9 @@ var instructions$2 = [
 			},
 			{
 				name: "asset_mint"
+			},
+			{
+				name: "event_authority_identity_registry"
 			}
 		],
 		args: [
@@ -2074,92 +1996,6 @@ var instructions$2 = [
 			}
 		]
 	},
-	{
-		name: "remove_token_lock",
-		discriminator: [
-			168,
-			128,
-			173,
-			188,
-			172,
-			228,
-			154,
-			90
-		],
-		accounts: [
-			{
-				name: "user",
-				signer: true
-			},
-			{
-				name: "controller_authority",
-				writable: true,
-				relations: [
-					"asset_access_controller"
-				]
-			},
-			{
-				name: "asset_access_controller",
-				relations: [
-					"authorized_user_role"
-				]
-			},
-			{
-				name: "authorized_user_role",
-				optional: true
-			},
-			{
-				name: "token_locks_program",
-				address: "9bNt3ZiZpDdHqAt5Q1Wq6twFe5RKmMCwA7MJyK2HgGnU"
-			},
-			{
-				name: "investor_locks",
-				writable: true
-			},
-			{
-				name: "investor"
-			},
-			{
-				name: "wallet_identity_account"
-			},
-			{
-				name: "identity_account"
-			},
-			{
-				name: "asset_mint",
-				writable: true
-			},
-			{
-				name: "unlocked_token_account",
-				writable: true
-			},
-			{
-				name: "locked_token_account",
-				writable: true
-			},
-			{
-				name: "asset_controller"
-			},
-			{
-				name: "identity_registry",
-				writable: true
-			},
-			{
-				name: "asset_controller_program",
-				address: "7tXjmbkZVY3Gmg9kDBebcNXT1yC5pyoxxXVLwdbv9tvP"
-			},
-			{
-				name: "token_program",
-				address: "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb"
-			}
-		],
-		args: [
-			{
-				name: "indices",
-				type: "bytes"
-			}
-		]
-	},
 	{
 		name: "remove_user_role",
 		discriminator: [
@@ -2191,6 +2027,38 @@ var instructions$2 = [
 			{
 				name: "authorized_user_role",
 				optional: true
+			},
+			{
+				name: "event_authority",
+				pda: {
+					seeds: [
+						{
+							kind: "const",
+							value: [
+								95,
+								95,
+								101,
+								118,
+								101,
+								110,
+								116,
+								95,
+								97,
+								117,
+								116,
+								104,
+								111,
+								114,
+								105,
+								116,
+								121
+							]
+						}
+					]
+				}
+			},
+			{
+				name: "program"
 			}
 		],
 		args: [
@@ -2282,6 +2150,9 @@ var instructions$2 = [
 			{
 				name: "system_program",
 				address: "11111111111111111111111111111111"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -2346,6 +2217,9 @@ var instructions$2 = [
 			{
 				name: "token_program",
 				address: "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb"
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -2400,6 +2274,9 @@ var instructions$2 = [
 			{
 				name: "policy_engine",
 				writable: true
+			},
+			{
+				name: "event_authority"
 			}
 		],
 		args: [
@@ -2676,7 +2553,7 @@ var instructions$2 = [
 		]
 	}
 ];
-var accounts$2 = [
+var accounts$1 = [
 	{
 		name: "AssetAccessController",
 		discriminator: [
@@ -2704,7 +2581,35 @@ var accounts$2 = [
 		]
 	}
 ];
-var errors$2 = [
+var events$1 = [
+	{
+		name: "AssignUserRoleEvent",
+		discriminator: [
+			66,
+			20,
+			203,
+			47,
+			242,
+			72,
+			213,
+			93
+		]
+	},
+	{
+		name: "RemoveUserRoleEvent",
+		discriminator: [
+			213,
+			162,
+			73,
+			7,
+			11,
+			89,
+			226,
+			140
+		]
+	}
+];
+var errors$1 = [
 	{
 		code: 6000,
 		name: "UnknownInstruction",
@@ -2739,9 +2644,14 @@ var errors$2 = [
 		code: 6006,
 		name: "InvalidLevel",
 		msg: "Invalid level"
+	},
+	{
+		code: 6007,
+		name: "IllegalOperation",
+		msg: "Illegal operation"
 	}
 ];
-var types$2 = [
+var types$1 = [
 	{
 		name: "AssetAccessController",
 		type: {
@@ -2785,6 +2695,66 @@ var types$2 = [
 			]
 		}
 	},
+	{
+		name: "AssignUserRoleEvent",
+		type: {
+			kind: "struct",
+			fields: [
+				{
+					name: "addresses",
+					type: {
+						vec: "pubkey"
+					}
+				},
+				{
+					name: "role",
+					type: "string"
+				},
+				{
+					name: "role_id",
+					type: "u64"
+				},
+				{
+					name: "sender",
+					type: "pubkey"
+				},
+				{
+					name: "seed",
+					type: "pubkey"
+				}
+			]
+		}
+	},
+	{
+		name: "RemoveUserRoleEvent",
+		type: {
+			kind: "struct",
+			fields: [
+				{
+					name: "addresses",
+					type: {
+						vec: "pubkey"
+					}
+				},
+				{
+					name: "role",
+					type: "string"
+				},
+				{
+					name: "role_id",
+					type: "u64"
+				},
+				{
+					name: "sender",
+					type: "pubkey"
+				},
+				{
+					name: "seed",
+					type: "pubkey"
+				}
+			]
+		}
+	},
 	{
 		name: "UserRole",
 		type: {
@@ -2839,33 +2809,35 @@ var types$2 = [
 	}
 ];
 var rwa_rbac = {
-	address: address$2,
-	metadata: metadata$2,
-	instructions: instructions$2,
-	accounts: accounts$2,
-	errors: errors$2,
-	types: types$2
+	address: address$1,
+	metadata: metadata$1,
+	instructions: instructions$1,
+	accounts: accounts$1,
+	events: events$1,
+	errors: errors$1,
+	types: types$1
 };
 
 var rbacIDL = /*#__PURE__*/Object.freeze({
   __proto__: null,
-  address: address$2,
-  metadata: metadata$2,
-  instructions: instructions$2,
-  accounts: accounts$2,
-  errors: errors$2,
-  types: types$2,
+  address: address$1,
+  metadata: metadata$1,
+  instructions: instructions$1,
+  accounts: accounts$1,
+  events: events$1,
+  errors: errors$1,
+  types: types$1,
   'default': rwa_rbac
 });
 
-var address$1 = "D2V7wTBbNCKgYwirgRUnSmc2QyKnHSVmRotWJ4rz8Jp9";
-var metadata$1 = {
+var address = "D2V7wTBbNCKgYwirgRUnSmc2QyKnHSVmRotWJ4rz8Jp9";
+var metadata = {
 	name: "rwa_imr",
 	version: "0.1.0",
 	spec: "0.1.0",
 	description: "Created with Anchor"
 };
-var instructions$1 = [
+var instructions = [
 	{
 		name: "add_levels",
 		discriminator: [
@@ -2922,6 +2894,41 @@ var instructions$1 = [
 			},
 			{
 				name: "asset_mint"
+			},
+			{
+				name: "event_authority_identity_registry"
+			},
+			{
+				name: "event_authority",
+				pda: {
+					seeds: [
+						{
+							kind: "const",
+							value: [
+								95,
+								95,
+								101,
+								118,
+								101,
+								110,
+								116,
+								95,
+								97,
+								117,
+								116,
+								104,
+								111,
+								114,
+								105,
+								116,
+								121
+							]
+						}
+					]
+				}
+			},
+			{
+				name: "program"
 			}
 		],
 		args: [
@@ -3002,6 +3009,9 @@ var instructions$1 = [
 			{
 				name: "system_program",
 				address: "11111111111111111111111111111111"
+			},
+			{
+				name: "event_authority_identity_registry"
 			}
 		],
 		args: [
@@ -3063,6 +3073,9 @@ var instructions$1 = [
 			},
 			{
 				name: "asset_mint"
+			},
+			{
+				name: "event_authority_identity_registry"
 			}
 		],
 		args: [
@@ -3148,6 +3161,41 @@ var instructions$1 = [
 			{
 				name: "system_program",
 				address: "11111111111111111111111111111111"
+			},
+			{
+				name: "event_authority_identity_registry"
+			},
+			{
+				name: "event_authority",
+				pda: {
+					seeds: [
+						{
+							kind: "const",
+							value: [
+								95,
+								95,
+								101,
+								118,
+								101,
+								110,
+								116,
+								95,
+								97,
+								117,
+								116,
+								104,
+								111,
+								114,
+								105,
+								116,
+								121
+							]
+						}
+					]
+				}
+			},
+			{
+				name: "program"
 			}
 		],
 		args: [
@@ -3228,6 +3276,41 @@ var instructions$1 = [
 			{
 				name: "tracker_account",
 				writable: true
+			},
+			{
+				name: "event_authority_identity_registry"
+			},
+			{
+				name: "event_authority",
+				pda: {
+					seeds: [
+						{
+							kind: "const",
+							value: [
+								95,
+								95,
+								101,
+								118,
+								101,
+								110,
+								116,
+								95,
+								97,
+								117,
+								116,
+								104,
+								111,
+								114,
+								105,
+								116,
+								121
+							]
+						}
+					]
+				}
+			},
+			{
+				name: "program"
 			}
 		],
 		args: [
@@ -3289,6 +3372,9 @@ var instructions$1 = [
 			},
 			{
 				name: "asset_mint"
+			},
+			{
+				name: "event_authority_identity_registry"
 			}
 		],
 		args: [
@@ -3303,7 +3389,7 @@ var instructions$1 = [
 		]
 	}
 ];
-var accounts$1 = [
+var accounts = [
 	{
 		name: "Investor",
 		discriminator: [
@@ -3318,7 +3404,61 @@ var accounts$1 = [
 		]
 	}
 ];
-var errors$1 = [
+var events = [
+	{
+		name: "AddLevelsEvent",
+		discriminator: [
+			90,
+			156,
+			44,
+			28,
+			242,
+			1,
+			130,
+			61
+		]
+	},
+	{
+		name: "RegisterInvestorEvent",
+		discriminator: [
+			137,
+			181,
+			142,
+			164,
+			140,
+			196,
+			246,
+			182
+		]
+	},
+	{
+		name: "RemoveInvestorEvent",
+		discriminator: [
+			221,
+			84,
+			243,
+			216,
+			215,
+			253,
+			246,
+			253
+		]
+	},
+	{
+		name: "RemoveLevelsEvent",
+		discriminator: [
+			145,
+			158,
+			97,
+			146,
+			126,
+			14,
+			2,
+			225
+		]
+	}
+];
+var errors = [
 	{
 		code: 6000,
 		name: "UnknownInstruction",
@@ -3355,598 +3495,39 @@ var errors$1 = [
 		msg: "Unknown level"
 	}
 ];
-var types$1 = [
+var types = [
 	{
-		name: "Investor",
+		name: "AddLevelsEvent",
 		type: {
 			kind: "struct",
 			fields: [
 				{
-					name: "authority",
-					docs: [
-						"Authority keypair allowed to write this account, will match authority or delegate of IdentityRegistry",
-						"at time of creation of IdentityAccount."
-					],
-					type: "pubkey"
+					name: "investor_id",
+					type: "string"
 				},
 				{
-					name: "identity_account",
-					docs: [
-						"IdentityAccount associated with this investor."
-					],
+					name: "sender",
 					type: "pubkey"
 				},
 				{
-					name: "identity_registry",
-					docs: [
-						"IdentityRegistryAccount associated with this investor."
-					],
-					type: "pubkey"
-				},
-				{
-					name: "bump",
-					docs: [
-						"PDA Seed Bump"
-					],
-					type: "u8"
-				},
-				{
-					name: "investor_id",
-					docs: [
-						"Unique ID for Investor, generated off-chain."
-					],
-					type: "string"
-				},
-				{
-					name: "collision_hash",
-					docs: [
-						"Metadata for investor, generated off-chain."
-					],
-					type: "string"
-				},
-				{
-					name: "last_updated_by",
-					docs: [
-						"User that last modified this investor. Read from payer of instruction."
-					],
-					type: "pubkey"
-				},
-				{
-					name: "levels",
-					docs: [
-						"Levels assigned to investor."
-					],
-					type: {
-						vec: {
-							defined: {
-								name: "LevelData"
-							}
-						}
-					}
-				},
-				{
-					name: "country",
-					type: "u8"
-				}
-			]
-		}
-	},
-	{
-		name: "LevelData",
-		type: {
-			kind: "struct",
-			fields: [
-				{
-					name: "level",
-					docs: [
-						"Maps to IdentityAccount level used in RWA Token."
-					],
-					type: "u8"
-				},
-				{
-					name: "proof_hash",
-					docs: [
-						"Hash generated off-chain."
-					],
-					type: "string"
-				}
-			]
-		}
-	}
-];
-var rwa_imr = {
-	address: address$1,
-	metadata: metadata$1,
-	instructions: instructions$1,
-	accounts: accounts$1,
-	errors: errors$1,
-	types: types$1
-};
-
-var imrIDL = /*#__PURE__*/Object.freeze({
-  __proto__: null,
-  address: address$1,
-  metadata: metadata$1,
-  instructions: instructions$1,
-  accounts: accounts$1,
-  errors: errors$1,
-  types: types$1,
-  'default': rwa_imr
-});
-
-var address = "9bNt3ZiZpDdHqAt5Q1Wq6twFe5RKmMCwA7MJyK2HgGnU";
-var metadata = {
-	name: "token_locks",
-	version: "0.1.0",
-	spec: "0.1.0",
-	description: "Created with Anchor"
-};
-var instructions = [
-	{
-		name: "add_token_lock",
-		discriminator: [
-			195,
-			26,
-			109,
-			80,
-			46,
-			7,
-			195,
-			55
-		],
-		accounts: [
-			{
-				name: "payer",
-				writable: true,
-				signer: true
-			},
-			{
-				name: "authority",
-				docs: [
-					"Authority of AssetController (required to execute seize CPI)."
-				],
-				writable: true,
-				signer: true,
-				relations: [
-					"investor"
-				]
-			},
-			{
-				name: "investor_locks",
-				writable: true
-			},
-			{
-				name: "investor",
-				relations: [
-					"investor_locks"
-				]
-			},
-			{
-				name: "wallet_identity_account"
-			},
-			{
-				name: "identity_account",
-				relations: [
-					"investor"
-				]
-			},
-			{
-				name: "asset_mint",
-				writable: true
-			},
-			{
-				name: "unlocked_token_account",
-				writable: true
-			},
-			{
-				name: "locked_token_account",
-				writable: true,
-				relations: [
-					"investor_locks"
-				]
-			},
-			{
-				name: "asset_controller"
-			},
-			{
-				name: "identity_registry",
-				writable: true,
-				relations: [
-					"investor"
-				]
-			},
-			{
-				name: "asset_controller_program",
-				address: "7tXjmbkZVY3Gmg9kDBebcNXT1yC5pyoxxXVLwdbv9tvP"
-			},
-			{
-				name: "token_program",
-				address: "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb"
-			},
-			{
-				name: "system_program",
-				address: "11111111111111111111111111111111"
-			}
-		],
-		args: [
-			{
-				name: "value",
-				type: "u64"
-			},
-			{
-				name: "release_time",
-				type: "i64"
-			},
-			{
-				name: "reason_code",
-				type: "u64"
-			},
-			{
-				name: "reason_string",
-				type: "string"
-			}
-		]
-	},
-	{
-		name: "close_investor_locks",
-		discriminator: [
-			255,
-			60,
-			220,
-			115,
-			217,
-			104,
-			157,
-			171
-		],
-		accounts: [
-			{
-				name: "payer",
-				writable: true,
-				signer: true
-			},
-			{
-				name: "authority",
-				signer: true,
-				relations: [
-					"investor"
-				]
-			},
-			{
-				name: "investor_locks",
-				writable: true
-			},
-			{
-				name: "investor",
-				relations: [
-					"investor_locks"
-				]
-			},
-			{
-				name: "locked_token_account",
-				writable: true,
-				relations: [
-					"investor_locks"
-				]
-			},
-			{
-				name: "token_program",
-				address: "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb"
-			},
-			{
-				name: "system_program",
-				address: "11111111111111111111111111111111"
-			}
-		],
-		args: [
-		]
-	},
-	{
-		name: "create_investor_locks",
-		discriminator: [
-			223,
-			81,
-			139,
-			162,
-			204,
-			48,
-			24,
-			213
-		],
-		accounts: [
-			{
-				name: "payer",
-				writable: true,
-				signer: true
-			},
-			{
-				name: "authority",
-				signer: true,
-				relations: [
-					"investor"
-				]
-			},
-			{
-				name: "investor_locks",
-				writable: true,
-				pda: {
-					seeds: [
-						{
-							kind: "account",
-							path: "investor.investor_id",
-							account: "Investor"
-						},
-						{
-							kind: "account",
-							path: "investor.identity_registry",
-							account: "Investor"
-						},
-						{
-							kind: "const",
-							value: [
-								73,
-								110,
-								118,
-								101,
-								115,
-								116,
-								111,
-								114,
-								76,
-								111,
-								99,
-								107,
-								115
-							]
-						}
-					]
-				}
-			},
-			{
-				name: "investor"
-			},
-			{
-				name: "identity_account",
-				docs: [
-					"CHECKED: Matches known address."
-				],
-				relations: [
-					"investor"
-				]
-			},
-			{
-				name: "asset_mint",
-				writable: true
-			},
-			{
-				name: "locked_token_account",
-				writable: true,
-				pda: {
-					seeds: [
-						{
-							kind: "account",
-							path: "investor.investor_id",
-							account: "Investor"
-						},
-						{
-							kind: "account",
-							path: "investor.identity_registry",
-							account: "Investor"
-						},
-						{
-							kind: "const",
-							value: [
-								76,
-								111,
-								99,
-								107,
-								101,
-								100,
-								84,
-								111,
-								107,
-								101,
-								110,
-								65,
-								99,
-								99,
-								111,
-								117,
-								110,
-								116
-							]
-						}
-					]
+					name: "levels",
+					type: "bytes"
+				},
+				{
+					name: "expiries",
+					type: {
+						vec: "i64"
+					}
+				},
+				{
+					name: "proof_hashes",
+					type: {
+						vec: "string"
+					}
 				}
-			},
-			{
-				name: "asset_controller"
-			},
-			{
-				name: "asset_controller_program",
-				address: "7tXjmbkZVY3Gmg9kDBebcNXT1yC5pyoxxXVLwdbv9tvP"
-			},
-			{
-				name: "token_program",
-				address: "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb"
-			},
-			{
-				name: "system_program",
-				address: "11111111111111111111111111111111"
-			}
-		],
-		args: [
-		]
-	},
-	{
-		name: "remove_token_lock",
-		discriminator: [
-			168,
-			128,
-			173,
-			188,
-			172,
-			228,
-			154,
-			90
-		],
-		accounts: [
-			{
-				name: "user",
-				signer: true
-			},
-			{
-				name: "authority",
-				docs: [
-					"Authority of AssetController (required to execute seize CPI)."
-				],
-				writable: true,
-				signer: true,
-				relations: [
-					"investor"
-				]
-			},
-			{
-				name: "investor_locks",
-				writable: true
-			},
-			{
-				name: "investor",
-				relations: [
-					"investor_locks"
-				]
-			},
-			{
-				name: "wallet_identity_account"
-			},
-			{
-				name: "identity_account",
-				relations: [
-					"investor"
-				]
-			},
-			{
-				name: "asset_mint",
-				writable: true
-			},
-			{
-				name: "unlocked_token_account",
-				writable: true
-			},
-			{
-				name: "locked_token_account",
-				writable: true,
-				relations: [
-					"investor_locks"
-				]
-			},
-			{
-				name: "asset_controller"
-			},
-			{
-				name: "identity_registry",
-				writable: true,
-				relations: [
-					"investor"
-				]
-			},
-			{
-				name: "asset_controller_program",
-				address: "7tXjmbkZVY3Gmg9kDBebcNXT1yC5pyoxxXVLwdbv9tvP"
-			},
-			{
-				name: "token_program",
-				address: "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb"
-			}
-		],
-		args: [
-			{
-				name: "is_user_authorized",
-				type: "bool"
-			},
-			{
-				name: "indices",
-				type: "bytes"
-			}
-		]
-	}
-];
-var accounts = [
-	{
-		name: "Investor",
-		discriminator: [
-			174,
-			129,
-			17,
-			83,
-			36,
-			116,
-			26,
-			196
-		]
-	},
-	{
-		name: "InvestorLocks",
-		discriminator: [
-			199,
-			60,
-			219,
-			46,
-			221,
-			205,
-			1,
-			7
-		]
-	}
-];
-var errors = [
-	{
-		code: 6000,
-		name: "UnknownInstruction",
-		msg: "Unknown program instruction from CPI data"
-	},
-	{
-		code: 6001,
-		name: "UnknownAccount",
-		msg: "Unknown account discriminator"
-	},
-	{
-		code: 6002,
-		name: "FailedDeserialization",
-		msg: "Invalid account on deserialization"
-	},
-	{
-		code: 6003,
-		name: "InvalidReleaseTime",
-		msg: "Invalid release time"
-	},
-	{
-		code: 6004,
-		name: "InvalidReasonString",
-		msg: "Invalid reason string"
-	},
-	{
-		code: 6005,
-		name: "InvalidLockValue",
-		msg: "Invalid lock value"
-	},
-	{
-		code: 6006,
-		name: "UnauthorizedUser",
-		msg: "User initiating instruction is not authorized by RBAC"
-	},
-	{
-		code: 6007,
-		name: "InvalidTokenAccountState",
-		msg: "Invalid token account state"
+			]
+		}
 	},
-	{
-		code: 6008,
-		name: "LockNotFound",
-		msg: "Lock not found"
-	}
-];
-var types = [
 	{
 		name: "Investor",
 		type: {
@@ -4023,117 +3604,116 @@ var types = [
 		}
 	},
 	{
-		name: "InvestorLocks",
+		name: "LevelData",
 		type: {
 			kind: "struct",
 			fields: [
 				{
-					name: "investor",
+					name: "level",
 					docs: [
-						"Address of Investor account."
+						"Maps to IdentityAccount level used in RWA Token."
 					],
-					type: "pubkey"
+					type: "u8"
 				},
 				{
-					name: "locked_token_account",
+					name: "proof_hash",
 					docs: [
-						"Account storing locked tokens for wallet. Will be frozen upon initialization of",
-						"InvestorLocks."
+						"Hash generated off-chain."
 					],
-					type: "pubkey"
-				},
-				{
-					name: "locks",
-					type: {
-						vec: {
-							defined: {
-								name: "Lock"
-							}
-						}
-					}
+					type: "string"
 				}
 			]
 		}
 	},
 	{
-		name: "LevelData",
+		name: "RegisterInvestorEvent",
 		type: {
 			kind: "struct",
 			fields: [
+				{
+					name: "investor_id",
+					type: "string"
+				},
 				{
 					name: "level",
-					docs: [
-						"Maps to IdentityAccount level used in RWA Token."
-					],
 					type: "u8"
 				},
 				{
-					name: "proof_hash",
-					docs: [
-						"Hash generated off-chain."
-					],
+					name: "expiry",
+					type: "i64"
+				},
+				{
+					name: "collision_hash",
+					type: "string"
+				},
+				{
+					name: "sender",
+					type: "pubkey"
+				},
+				{
+					name: "country",
+					type: "u8"
+				}
+			]
+		}
+	},
+	{
+		name: "RemoveInvestorEvent",
+		type: {
+			kind: "struct",
+			fields: [
+				{
+					name: "investor_id",
 					type: "string"
+				},
+				{
+					name: "sender",
+					type: "pubkey"
 				}
 			]
 		}
 	},
 	{
-		name: "Lock",
+		name: "RemoveLevelsEvent",
 		type: {
 			kind: "struct",
 			fields: [
 				{
-					name: "value",
-					docs: [
-						"Amount of tokens to lock."
-					],
-					type: "u64"
-				},
-				{
-					name: "release_time",
-					docs: [
-						"Timestamp from which the lock will be inactive. If value is 0, the lock",
-						"will remain active until removed."
-					],
-					type: "i64"
+					name: "investor_id",
+					type: "string"
 				},
 				{
-					name: "reason_code",
-					docs: [
-						"Reason code for locking."
-					],
-					type: "u64"
+					name: "sender",
+					type: "pubkey"
 				},
 				{
-					name: "reason_string",
-					docs: [
-						"Detailed reason for the lock. Since string has no length limit, we calculate",
-						"total space needed dynamically at time of resizing."
-					],
-					type: "string"
+					name: "levels",
+					type: "bytes"
 				}
 			]
 		}
 	}
 ];
-var token_locks = {
+var rwa_imr = {
 	address: address,
 	metadata: metadata,
 	instructions: instructions,
 	accounts: accounts,
+	events: events,
 	errors: errors,
 	types: types
 };
 
-var tokenLocksIdl = /*#__PURE__*/Object.freeze({
+var imrIDL = /*#__PURE__*/Object.freeze({
   __proto__: null,
   address: address,
   metadata: metadata,
   instructions: instructions,
   accounts: accounts,
+  events: events,
   errors: errors,
   types: types,
-  'default': token_locks
+  'default': rwa_imr
 });
 
 exports.AdminFlags = void 0;
@@ -4178,7 +3758,8 @@ exports.MediciFlags = void 0;
     MediciFlags[MediciFlags["CHANGE_COUNTRY"] = 134217728] = "CHANGE_COUNTRY";
     MediciFlags[MediciFlags["CHANGE_MAPPING"] = 268435456] = "CHANGE_MAPPING";
     MediciFlags[MediciFlags["CHANGE_ISSUANCE_POLICIES"] = 536870912] = "CHANGE_ISSUANCE_POLICIES";
-    MediciFlags[MediciFlags["ALL"] = 1073741823] = "ALL";
+    MediciFlags[MediciFlags["REMOVE_IDENTITY_ACCOUNT"] = 1073741824] = "REMOVE_IDENTITY_ACCOUNT";
+    MediciFlags[MediciFlags["ALL"] = 2147483647] = "ALL";
 })(exports.MediciFlags || (exports.MediciFlags = {}));
 
 /******************************************************************************
@@ -4304,6 +3885,7 @@ class AssetController {
                 associatedTokenProgram: splToken.ASSOCIATED_TOKEN_PROGRAM_ID,
                 systemProgram: web3_js.SystemProgram.programId,
                 walletIdentityAccount: rwaTokenSdk.getWalletIdentityAccountPda(args.assetMint, args.wallet),
+                eventAuthority: rwaTokenSdk.getAssetControllerEventAuthority(),
             })
                 .instruction();
         });
@@ -4427,6 +4009,7 @@ class AssetController {
                 tokenProgram: splToken.TOKEN_2022_PROGRAM_ID,
                 associatedTokenProgram: splToken.ASSOCIATED_TOKEN_PROGRAM_ID,
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthority: rwaTokenSdk.getAssetControllerEventAuthority(),
             })
                 .instruction();
         });
@@ -4510,6 +4093,7 @@ class AssetController {
                 sourceTokenAccount: splToken.getAssociatedTokenAddressSync(new web3_js.PublicKey(args.assetMint), new web3_js.PublicKey(args.from), false, splToken.TOKEN_2022_PROGRAM_ID),
                 destinationTokenAccount: splToken.getAssociatedTokenAddressSync(new web3_js.PublicKey(args.assetMint), new web3_js.PublicKey(args.to), true, splToken.TOKEN_2022_PROGRAM_ID),
                 tokenProgram: splToken.TOKEN_2022_PROGRAM_ID,
+                eventAuthority: rwaTokenSdk.getAssetControllerEventAuthority(),
             })
                 .remainingAccounts([
                 {
@@ -4604,6 +4188,7 @@ class PolicyEngine {
                 policyEngineProgram: rwaTokenSdk.policyEngineProgramId,
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthority: rwaTokenSdk.getPolicyEngineEventAuthority(),
             })
                 .instruction();
         });
@@ -4631,6 +4216,7 @@ class PolicyEngine {
                 policyEngineProgram: rwaTokenSdk.policyEngineProgramId,
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthority: rwaTokenSdk.getPolicyEngineEventAuthority(),
             })
                 .instruction();
         });
@@ -4658,6 +4244,7 @@ class PolicyEngine {
                 policyEngineProgram: rwaTokenSdk.policyEngineProgramId,
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthority: rwaTokenSdk.getPolicyEngineEventAuthority(),
             })
                 .instruction();
         });
@@ -4684,6 +4271,7 @@ class PolicyEngine {
                 authorizedUserRole: authorizedUserRole || null,
                 policyEngineProgram: rwaTokenSdk.policyEngineProgramId,
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
+                eventAuthority: rwaTokenSdk.getPolicyEngineEventAuthority(),
             })
                 .instruction();
         });
@@ -4711,6 +4299,7 @@ class PolicyEngine {
                 policyEngineProgram: rwaTokenSdk.policyEngineProgramId,
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthority: rwaTokenSdk.getPolicyEngineEventAuthority(),
             })
                 .instruction();
         });
@@ -4736,6 +4325,7 @@ class PolicyEngine {
                 authorizedUserRole: authorizedUserRole || null,
                 policyEngineProgram: rwaTokenSdk.policyEngineProgramId,
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
+                eventAuthority: rwaTokenSdk.getPolicyEngineEventAuthority(),
             })
                 .instruction();
         });
@@ -4761,6 +4351,7 @@ class PolicyEngine {
                 authorizedUserRole: authorizedUserRole || null,
                 policyEngineProgram: rwaTokenSdk.policyEngineProgramId,
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
+                eventAuthority: rwaTokenSdk.getPolicyEngineEventAuthority(),
             })
                 .instruction();
         });
@@ -4854,6 +4445,7 @@ class IdentityRegistry {
                 identityAccount,
                 walletIdentity: rwaTokenSdk.getWalletIdentityAccountPda(args.assetMint, args.owner),
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthority: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction());
             returnIxs.push(trackerAccountIx);
@@ -4863,6 +4455,41 @@ class IdentityRegistry {
             };
         });
     }
+    /**
+     * Asynchronously generates instructions to remove a non-investor user with an identity account.
+     * @param args - {@link SetupUserArgs}
+     * @param authority - RBAC AssetAccessController ControllerAuthority.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @returns A Promise that resolves to the instructions to setup a user.
+     *
+     * It is required for at least a single user to be setup before issuing tokens.
+     */
+    removeUserIxn(args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const ix = yield this.rwaClient.identityRegistry.revokeIdentityAccount(args);
+            const identityAccountAddress = rwaTokenSdk.getIdentityAccountPda(args.assetMint, args.owner);
+            const identityAccount = yield rwaTokenSdk.getIdentityAccount(identityAccountAddress, this.rwaClient.provider);
+            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+            const returnIx = yield this.rbacProgram.methods
+                .removeIdentityAccount(ix.data)
+                .accountsStrict({
+                payer: args.payer,
+                user: args.signer,
+                controllerAuthority,
+                assetAccessController,
+                authorizedUserRole: authorizedUserRole || null,
+                identityRegistryProgram: rwaTokenSdk.identityRegistryProgramId,
+                identityRegistry: rwaTokenSdk.getIdentityRegistryPda(args.assetMint),
+                identityAccount: identityAccountAddress,
+                walletIdentity: rwaTokenSdk.getWalletIdentityAccountPda(args.assetMint, args.owner),
+                eventAuthority: rwaTokenSdk.getIdentityRegistryEventAuthority(),
+                identityOwner: identityAccount.owner,
+            })
+                .instruction();
+            return returnIx;
+        });
+    }
     /**
      * Asynchronously update a non-investor user identity account level.
      * @param args - {@link AddLevelToIdentityAccountArgs}
@@ -4892,6 +4519,7 @@ class IdentityRegistry {
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 trackerAccount: rwaTokenSdk.getTrackerAccountPda(args.assetMint, args.owner),
                 assetMint: args.assetMint,
+                eventAuthority: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction();
         });
@@ -4926,6 +4554,7 @@ class IdentityRegistry {
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 trackerAccount: rwaTokenSdk.getTrackerAccountPda(args.assetMint, args.owner),
                 assetMint: args.assetMint,
+                eventAuthority: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction();
         });
@@ -4992,6 +4621,8 @@ class IdentityRegistry {
                 assetMint: args.assetMint,
                 walletIdentity,
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthority: rwaTokenSdk.getIdentityRegistryEventAuthority(),
+                program: rwaTokenSdk.identityRegistryProgramId,
             })
                 .instruction();
             return this.rbacProgram.methods
@@ -5008,6 +4639,7 @@ class IdentityRegistry {
                 assetMint: args.assetMint,
                 walletIdentity,
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthority: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction();
         });
@@ -5034,6 +4666,8 @@ class IdentityRegistry {
                 walletIdentity,
                 identityAccount,
                 identityRegistry,
+                eventAuthority: rwaTokenSdk.getIdentityRegistryEventAuthority(),
+                program: rwaTokenSdk.identityRegistryProgramId,
             })
                 .instruction();
             return this.rbacProgram.methods
@@ -5048,6 +4682,7 @@ class IdentityRegistry {
                 walletIdentity,
                 identityAccount,
                 identityRegistry,
+                eventAuthority: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction();
         });
@@ -5063,6 +4698,27 @@ class IdentityMetadataRegistry {
         this.rbacProgram = rbacProgram;
         this.imrProgram = imrProgram;
     }
+    /**
+     * Parses inner instructions data field for array of events emitted by program using CPI Events.
+     * @param ixs - Array of CompiledInstruction from a transaction inner instructions.
+     * @returns Array of Events
+     * */
+    parseEvents(ixs) {
+        const eventCoder = this.imrProgram.coder.events;
+        const events = ixs
+            .map(({ data }) => {
+            try {
+                const buffer = Buffer.from(anchor.utils.bytes.bs58.decode(data));
+                const event = eventCoder.decode(anchor.utils.bytes.base64.encode(buffer.slice(8)));
+                return event;
+            }
+            catch (err) {
+                console.error("Error decoding events", err);
+            }
+        })
+            .filter((v) => v != null);
+        return events;
+    }
     /**
      * Asynchronously generates instructions to setup an investor.
      * @param args - {@link SetupInvestorArgs}
@@ -5094,6 +4750,9 @@ class IdentityMetadataRegistry {
                 walletIdentity: rwaTokenSdk.getWalletIdentityAccountPda(args.assetMint, investor.toString() // Investor is owner of IdentityAccount
                 ),
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthority: getEventAuthority(IMR_PROGRAM),
+                eventAuthorityIdentityRegistry: rwaTokenSdk.getIdentityRegistryEventAuthority(),
+                program: rwaTokenSdk.identityRegistryProgramId,
             })
                 .instruction();
             returnIxs.push(yield this.rbacProgram.methods
@@ -5111,6 +4770,8 @@ class IdentityMetadataRegistry {
                 identityAccount,
                 walletIdentity: rwaTokenSdk.getWalletIdentityAccountPda(args.assetMint, investor.toString()),
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthorityIdentityMetadataRegistry: getEventAuthority(IMR_PROGRAM),
+                eventAuthorityIdentityRegistry: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction());
             const policyProgram = rwaTokenSdk.getPolicyEngineProgram(this.imrProgram.provider);
@@ -5175,6 +4836,9 @@ class IdentityMetadataRegistry {
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 trackerAccount,
                 assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: rwaTokenSdk.getIdentityRegistryEventAuthority(),
+                eventAuthority: getEventAuthority(IMR_PROGRAM),
+                program: IMR_PROGRAM,
             })
                 .instruction();
             return this.rbacProgram.methods
@@ -5195,6 +4859,8 @@ class IdentityMetadataRegistry {
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 trackerAccount,
                 assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: rwaTokenSdk.getIdentityRegistryEventAuthority(),
+                eventAuthorityIdentityMetadataRegistry: getEventAuthority(IMR_PROGRAM),
             })
                 .instruction();
         });
@@ -5227,6 +4893,7 @@ class IdentityMetadataRegistry {
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 trackerAccount,
                 assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction();
             return this.rbacProgram.methods
@@ -5246,6 +4913,7 @@ class IdentityMetadataRegistry {
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 trackerAccount,
                 assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction();
         });
@@ -5279,6 +4947,7 @@ class IdentityMetadataRegistry {
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 trackerAccount,
                 assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction();
             return this.rbacProgram.methods
@@ -5299,6 +4968,7 @@ class IdentityMetadataRegistry {
                 policyEngine: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
                 trackerAccount,
                 assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction();
         });
@@ -5332,6 +5002,8 @@ class IdentityMetadataRegistry {
                 walletIdentity: rwaTokenSdk.getWalletIdentityAccountPda(args.assetMint, investor.toString()),
                 policyEngineProgram: rwaTokenSdk.policyEngineProgramId,
                 trackerAccount: rwaTokenSdk.getTrackerAccountPda(args.assetMint, investor.toString()),
+                eventAuthorityIdentityMetadataRegistry: getEventAuthority(IMR_PROGRAM),
+                eventAuthorityIdentityRegistry: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction();
         });
@@ -5358,266 +5030,13 @@ class IdentityMetadataRegistry {
                 identityRegistry,
                 assetMint: args.assetMint,
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthorityIdentityRegistry: rwaTokenSdk.getIdentityRegistryEventAuthority(),
             })
                 .instruction();
         });
     }
 }
 
-/**
- * Role-based access client for accessing Token Locks
- */
-class TokenLocks {
-    constructor(rwaClient, rbacProgram, tokenLocksProgram) {
-        this.rwaClient = rwaClient;
-        this.rbacProgram = rbacProgram;
-        this.tokenLocksProgram = tokenLocksProgram;
-    }
-    /**
-     * Asynchronously create InvestorLocks account for a wallet.
-     * @param args - {@link CreateOrCloseInvestorLocksArgs}
-     * @param assetAccessController - RBAC AssetAccessController account.
-     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
-     * @returns A Promise that resolves to a transaction instruction.
-     * */
-    createInvestorLocks(args, assetAccessController, authorizedUserRole) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const identityRegistry = rwaTokenSdk.getIdentityRegistryPda(args.assetMint);
-            const investor = deriveInvestorPda(args.investorId, identityRegistry);
-            return this.rbacProgram.methods
-                .createInvestorLocks()
-                .accountsStrict({
-                payer: args.payer,
-                user: args.signer,
-                controllerAuthority: deriveControllerAuthorityPda(assetAccessController),
-                assetAccessController,
-                authorizedUserRole: authorizedUserRole || null,
-                tokenLocksProgram: TL_PROGRAM,
-                investorLocks: deriveInvestorLocks(args.investorId, identityRegistry),
-                investor,
-                identityAccount: rwaTokenSdk.getIdentityAccountPda(args.assetMint, investor.toString()),
-                assetMint: args.assetMint,
-                lockedTokenAccount: deriveLockedTokenAccount(args.investorId, identityRegistry),
-                assetController: rwaTokenSdk.getAssetControllerPda(args.assetMint),
-                assetControllerProgram: rwaTokenSdk.assetControllerProgramId,
-                tokenProgram: splToken.TOKEN_2022_PROGRAM_ID,
-                systemProgram: web3_js.SystemProgram.programId,
-            })
-                .instruction();
-        });
-    }
-    /**
-     * Asynchronously close InvestorLocks account for a wallet.
-     * @param args - {@link CreateOrCloseInvestorLocksArgs}
-     * @param assetAccessController - RBAC AssetAccessController account.
-     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
-     * @returns A Promise that resolves to a transaction instruction.
-     * */
-    closeInvestorLocks(args, assetAccessController, authorizedUserRole) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
-            const identityRegistry = rwaTokenSdk.getIdentityRegistryPda(args.assetMint);
-            return this.rbacProgram.methods
-                .closeInvestorLocks()
-                .accountsStrict({
-                payer: args.payer,
-                user: args.signer,
-                controllerAuthority,
-                assetAccessController,
-                authorizedUserRole: authorizedUserRole || null,
-                tokenLocksProgram: TL_PROGRAM,
-                investorLocks: deriveInvestorLocks(args.investorId, identityRegistry),
-                investor: deriveInvestorPda(args.investorId, identityRegistry),
-                systemProgram: web3_js.SystemProgram.programId,
-                tokenProgram: splToken.TOKEN_2022_PROGRAM_ID,
-                lockedTokenAccount: deriveLockedTokenAccount(args.investorId, identityRegistry),
-            })
-                .instruction();
-        });
-    }
-    /**
-     * Asynchronously add a lock to InvestorLocks.
-     * @param args - {@link AddTokenLockArgs}
-     * @param assetAccessController - RBAC AssetAccessController account.
-     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
-     * @returns A Promise that resolves to a transaction instruction.
-     * */
-    addTokenLock(args, assetAccessController, authorizedUserRole) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const assetController = rwaTokenSdk.getAssetControllerPda(args.assetMint);
-            const identityRegistry = rwaTokenSdk.getIdentityRegistryPda(args.assetMint);
-            const investorLocks = deriveInvestorLocks(args.investorId, identityRegistry);
-            const investor = deriveInvestorPda(args.investorId, identityRegistry);
-            const unlockedTokenAccount = splToken.getAssociatedTokenAddressSync(new web3_js.PublicKey(args.assetMint), args.wallet, false, splToken.TOKEN_2022_PROGRAM_ID);
-            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
-            const ix = yield this.tokenLocksProgram.methods
-                .addTokenLock(args.value, args.releaseTime, args.reasonCode, args.reasonString)
-                .accountsStrict({
-                payer: args.payer,
-                authority: controllerAuthority,
-                investorLocks,
-                investor,
-                assetMint: args.assetMint,
-                identityAccount: rwaTokenSdk.getIdentityAccountPda(args.assetMint, investor.toString()),
-                unlockedTokenAccount,
-                lockedTokenAccount: deriveLockedTokenAccount(args.investorId, identityRegistry),
-                assetController,
-                assetControllerProgram: rwaTokenSdk.assetControllerProgramId,
-                tokenProgram: splToken.TOKEN_2022_PROGRAM_ID,
-                identityRegistry: rwaTokenSdk.getIdentityRegistryPda(args.assetMint),
-                systemProgram: web3_js.SystemProgram.programId,
-                walletIdentityAccount: rwaTokenSdk.getWalletIdentityAccountPda(args.assetMint, args.wallet.toString()),
-            })
-                .instruction();
-            return this.rbacProgram.methods
-                .addTokenLock(ix.data)
-                .accountsStrict({
-                payer: args.payer,
-                user: args.signer,
-                controllerAuthority,
-                assetAccessController,
-                authorizedUserRole: authorizedUserRole || null,
-                tokenLocksProgram: TL_PROGRAM,
-                investorLocks,
-                investor,
-                assetMint: args.assetMint,
-                unlockedTokenAccount,
-                lockedTokenAccount: deriveLockedTokenAccount(args.investorId, identityRegistry),
-                assetController,
-                identityRegistry: rwaTokenSdk.getIdentityRegistryPda(args.assetMint),
-                assetControllerProgram: rwaTokenSdk.assetControllerProgramId,
-                tokenProgram: splToken.TOKEN_2022_PROGRAM_ID,
-                systemProgram: web3_js.SystemProgram.programId,
-                identityAccount: rwaTokenSdk.getIdentityAccountPda(args.assetMint, investor.toString()),
-                walletIdentityAccount: rwaTokenSdk.getWalletIdentityAccountPda(args.assetMint, args.wallet.toString()),
-            })
-                .remainingAccounts([
-                {
-                    pubkey: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
-                    isWritable: true,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.identityRegistryProgramId,
-                    isWritable: false,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.policyEngineProgramId,
-                    isWritable: false,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.getIdentityRegistryPda(args.assetMint),
-                    isWritable: false,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.getTrackerAccountPda(args.assetMint, investor.toString()),
-                    isWritable: true,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.getExtraMetasListPda(args.assetMint),
-                    isWritable: false,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.getWalletIdentityAccountPda(args.assetMint, investor.toString()),
-                    isWritable: false,
-                    isSigner: false,
-                },
-            ])
-                .instruction();
-        });
-    }
-    /**
-     * Asynchronously remove a lock from InvestorLocks using RBAC authority.
-     * @param args - {@link RemoveTokenLockArgs}
-     * @param assetAccessController - RBAC AssetAccessController account.
-     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
-     * @returns A Promise that resolves to a transaction instruction.
-     * */
-    removeTokenLock(args, assetAccessController, authorizedUserRole) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const assetController = rwaTokenSdk.getAssetControllerPda(args.assetMint);
-            const identityRegistry = rwaTokenSdk.getIdentityRegistryPda(args.assetMint);
-            const investorLocks = deriveInvestorLocks(args.investorId, identityRegistry);
-            const investor = deriveInvestorPda(args.investorId, identityRegistry);
-            const unlockedTokenAccount = splToken.getAssociatedTokenAddressSync(new web3_js.PublicKey(args.assetMint), args.wallet, false, splToken.TOKEN_2022_PROGRAM_ID);
-            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
-            return this.rbacProgram.methods
-                .removeTokenLock(Buffer.from(args.indices))
-                .accountsStrict({
-                user: args.signer,
-                controllerAuthority,
-                assetAccessController,
-                authorizedUserRole: authorizedUserRole || null,
-                tokenLocksProgram: TL_PROGRAM,
-                investorLocks,
-                investor,
-                identityAccount: rwaTokenSdk.getIdentityAccountPda(args.assetMint, investor.toString()),
-                walletIdentityAccount: rwaTokenSdk.getWalletIdentityAccountPda(args.assetMint, args.wallet.toString()),
-                assetMint: args.assetMint,
-                unlockedTokenAccount,
-                lockedTokenAccount: deriveLockedTokenAccount(args.investorId, identityRegistry),
-                assetController,
-                identityRegistry: rwaTokenSdk.getIdentityRegistryPda(args.assetMint),
-                assetControllerProgram: rwaTokenSdk.assetControllerProgramId,
-                tokenProgram: splToken.TOKEN_2022_PROGRAM_ID,
-            })
-                .remainingAccounts([
-                {
-                    pubkey: rwaTokenSdk.getPolicyEnginePda(args.assetMint),
-                    isWritable: true,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.identityRegistryProgramId,
-                    isWritable: false,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.policyEngineProgramId,
-                    isWritable: false,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.getIdentityRegistryPda(args.assetMint),
-                    isWritable: false,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.getTrackerAccountPda(args.assetMint, investor.toString()),
-                    isWritable: true,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.getExtraMetasListPda(args.assetMint),
-                    isWritable: false,
-                    isSigner: false,
-                },
-                {
-                    pubkey: rwaTokenSdk.getWalletIdentityAccountPda(args.assetMint, investor.toString()),
-                    isWritable: false,
-                    isSigner: false,
-                },
-            ])
-                .instruction();
-        });
-    }
-    /**
-     * Asynchronously fetches a token account.
-     * @param account - Account to load.
-     * @returns A Promise that resolves to a token account.
-     * */
-    fetchTokenAccount(account_1) {
-        return __awaiter(this, arguments, void 0, function* (account, commitment = "processed") {
-            return splToken.getAccount(this.rwaClient.provider.connection, account, commitment, splToken.TOKEN_2022_PROGRAM_ID);
-        });
-    }
-}
-
 class RwaRbacClient {
     constructor(config, provider) {
         this.rwaClient = new rwaTokenSdk.RwaClient(config, provider);
@@ -5627,7 +5046,27 @@ class RwaRbacClient {
         this.policyEngine = new PolicyEngine(this.rwaClient, this.rbacProgram);
         this.identityRegistry = new IdentityRegistry(this.rwaClient, this.rbacProgram);
         this.identityMetadataRegistry = new IdentityMetadataRegistry(this.rwaClient, this.rbacProgram, new anchor.Program(imrIDL, this.provider));
-        this.tokenLocks = new TokenLocks(this.rwaClient, this.rbacProgram, new anchor.Program(tokenLocksIdl, this.provider));
+    }
+    /**
+     * Parses inner instructions data field for array of events emitted by program using CPI Events.
+     * @param ixs - Array of CompiledInstruction from a transaction inner instructions.
+     * @returns Array of Events
+     * */
+    parseEvents(ixs) {
+        const eventCoder = this.rbacProgram.coder.events;
+        const events = ixs
+            .map(({ data }) => {
+            try {
+                const buffer = Buffer.from(anchor.utils.bytes.bs58.decode(data));
+                const event = eventCoder.decode(anchor.utils.bytes.base64.encode(buffer.slice(8)));
+                return event;
+            }
+            catch (err) {
+                console.error("Error decoding events", err);
+            }
+        })
+            .filter((v) => v != null);
+        return events;
     }
     /**
      * Asynchronously generates instruction to create AssetAccessController for an organization.
@@ -5738,6 +5177,8 @@ class RwaRbacClient {
                 authorizedUserRole: args.authorizedUserRole || null,
                 assetAccessController: args.assetAccessController,
                 systemProgram: web3_js.SystemProgram.programId,
+                eventAuthority: getEventAuthority(RBAC_PROGRAM),
+                program: RBAC_PROGRAM,
             })
                 .instruction();
         });
@@ -5756,6 +5197,8 @@ class RwaRbacClient {
                 userRole: args.userRole,
                 authorizedUserRole: args.authorizedUserRole || null,
                 assetAccessController: args.assetAccessController,
+                eventAuthority: getEventAuthority(RBAC_PROGRAM),
+                program: RBAC_PROGRAM,
             })
                 .instruction();
         });
@@ -5799,8 +5242,6 @@ exports.RwaImrIdl = rwa_imr;
 exports.RwaRbacClient = RwaRbacClient;
 exports.RwaRbacIdl = rwa_rbac;
 exports.TL_PROGRAM = TL_PROGRAM;
-exports.TokenLocks = TokenLocks;
-exports.TokenLocksIdl = token_locks;
 exports.computeFlags = computeFlags;
 exports.deriveAssetAccessControllerPda = deriveAssetAccessControllerPda;
 exports.deriveControllerAuthorityPda = deriveControllerAuthorityPda;
@@ -5808,3 +5249,4 @@ exports.deriveInvestorLocks = deriveInvestorLocks;
 exports.deriveInvestorPda = deriveInvestorPda;
 exports.deriveLockedTokenAccount = deriveLockedTokenAccount;
 exports.deriveUserRolePda = deriveUserRolePda;
+exports.getEventAuthority = getEventAuthority;