@dstoken-solana/rwa-rbac 0.3.0 → 0.4.1

package/dist/client/IdentityMetadataRegistry.js

@@ -0,0 +1,354 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { utils } from "@coral-xyz/anchor";
+import { PublicKey, SystemProgram, } from "@solana/web3.js";
+import { deriveControllerAuthorityPda, deriveInvestorPda, getEventAuthority, } from "../pdas";
+import { getIdentityAccountPda, getIdentityRegistryPda, getPolicyEnginePda, getTrackerAccountPda, getWalletIdentityAccountPda, identityRegistryProgramId, policyEngineProgramId, getIdentityRegistryEventAuthority, } from "@dstoken-solana/rwa-token-sdk";
+import { IMR_PROGRAM } from "../constants";
+/**
+ * Role-based access client for accessing Identity Metadata Registry.
+ */
+export class IdentityMetadataRegistry {
+    constructor(rwaClient, rbacProgram, imrProgram) {
+        this.rwaClient = rwaClient;
+        this.rbacProgram = rbacProgram;
+        this.imrProgram = imrProgram;
+    }
+    /**
+     * Parses inner instructions data field for array of events emitted by program using CPI Events.
+     * @param ixs - Array of CompiledInstruction from a transaction inner instructions.
+     * @returns Array of Events
+     * */
+    parseEvents(ixs) {
+        const eventCoder = this.imrProgram.coder.events;
+        const events = ixs
+            .map(({ data }) => {
+            try {
+                const buffer = Buffer.from(utils.bytes.bs58.decode(data));
+                const event = eventCoder.decode(utils.bytes.base64.encode(buffer.slice(8)));
+                return event;
+            }
+            catch (err) {
+                console.error("Error decoding events", err);
+            }
+        })
+            .filter((v) => v != null);
+        return events;
+    }
+    /**
+     * Asynchronously generates instructions to setup an investor.
+     * @param args - {@link SetupInvestorArgs}
+     * @param authority - RBAC AssetAccessController ControllerAuthority.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
+     * @returns A Promise that resolves to the instructions to setup an investor.
+     *
+     * It is required for at least a single user to be setup before issuing tokens.
+     */
+    setupUserIxns(args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const returnIxs = [];
+            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+            const identityRegistry = getIdentityRegistryPda(args.assetMint);
+            const investor = deriveInvestorPda(args.investorId, identityRegistry);
+            const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString() // Investor is owner of IdentityAccount
+            );
+            const assetMintKey = new PublicKey(args.assetMint);
+            const registerIx = yield this.imrProgram.methods
+                .registerInvestor(args.investorId, args.collisionHash, args.levels[0], args.expiries[0], args.country, args.proofHashes[0])
+                .accountsStrict({
+                payer: args.payer,
+                authority: controllerAuthority,
+                investor,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityRegistry,
+                identityAccount,
+                walletIdentity: getWalletIdentityAccountPda(args.assetMint, investor.toString() // Investor is owner of IdentityAccount
+                ),
+                systemProgram: SystemProgram.programId,
+                eventAuthority: getEventAuthority(IMR_PROGRAM),
+                eventAuthorityIdentityRegistry: getIdentityRegistryEventAuthority(),
+                program: identityRegistryProgramId,
+                policyEngineProgram: policyEngineProgramId,
+                trackerAccount: getTrackerAccountPda(args.assetMint, investor.toString()),
+                assetMint: assetMintKey,
+            })
+                .instruction();
+            returnIxs.push(yield this.rbacProgram.methods
+                .registerInvestor(registerIx.data)
+                .accountsStrict({
+                payer: args.payer,
+                user: args.signer,
+                controllerAuthority,
+                assetAccessController,
+                authorizedUserRole: authorizedUserRole || null,
+                identityMetadataRegistryProgram: IMR_PROGRAM,
+                investor,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityRegistry,
+                identityAccount,
+                walletIdentity: getWalletIdentityAccountPda(args.assetMint, investor.toString()),
+                systemProgram: SystemProgram.programId,
+                eventAuthorityIdentityMetadataRegistry: getEventAuthority(IMR_PROGRAM),
+                eventAuthorityIdentityRegistry: getIdentityRegistryEventAuthority(),
+                policyEngineProgram: policyEngineProgramId,
+                trackerAccount: getTrackerAccountPda(args.assetMint, investor.toString()),
+                assetMint: assetMintKey,
+            })
+                .instruction());
+            if (args.levels.length > 1) {
+                returnIxs.push(yield this.addLevels({
+                    payer: args.payer,
+                    signer: args.signer,
+                    investorId: args.investorId,
+                    assetMint: args.assetMint,
+                    levels: args.levels.slice(1),
+                    expiries: args.expiries.slice(1),
+                    proofHashes: args.proofHashes.slice(1),
+                    enforceLimits: args.enforceLimits,
+                }, assetAccessController, authorizedUserRole));
+            }
+            return {
+                ixs: returnIxs,
+                signers: [],
+            };
+        });
+    }
+    /**
+     * Asynchronously add levels to investor.
+     * @param args - {@link AddLevelsArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
+     * @returns A Promise that resolves to the instructions to add levels.
+     * */
+    addLevels(args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+            const identityRegistry = getIdentityRegistryPda(args.assetMint);
+            const investor = deriveInvestorPda(args.investorId, identityRegistry);
+            const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString());
+            const trackerAccount = getTrackerAccountPda(args.assetMint, investor.toString());
+            const ix = yield this.imrProgram.methods
+                .addLevels(Buffer.from(args.levels), args.expiries, args.proofHashes, (_a = args.enforceLimits) !== null && _a !== void 0 ? _a : false)
+                .accountsStrict({
+                payer: args.payer,
+                authority: controllerAuthority,
+                investor,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityRegistry,
+                identityAccount,
+                systemProgram: SystemProgram.programId,
+                policyEngineProgram: policyEngineProgramId,
+                policyEngine: getPolicyEnginePda(args.assetMint),
+                trackerAccount,
+                assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: getIdentityRegistryEventAuthority(),
+                eventAuthority: getEventAuthority(IMR_PROGRAM),
+                program: IMR_PROGRAM,
+            })
+                .instruction();
+            return this.rbacProgram.methods
+                .addLevels(ix.data)
+                .accountsStrict({
+                payer: args.payer,
+                user: args.signer,
+                controllerAuthority,
+                assetAccessController,
+                authorizedUserRole: authorizedUserRole || null,
+                identityMetadataRegistryProgram: IMR_PROGRAM,
+                investor,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityRegistry,
+                identityAccount,
+                systemProgram: SystemProgram.programId,
+                policyEngineProgram: policyEngineProgramId,
+                policyEngine: getPolicyEnginePda(args.assetMint),
+                trackerAccount,
+                assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: getIdentityRegistryEventAuthority(),
+                eventAuthorityIdentityMetadataRegistry: getEventAuthority(IMR_PROGRAM),
+            })
+                .instruction();
+        });
+    }
+    /**
+     * Asynchronously change country for the Investor.
+     * @param args - {@link ChangeCountryArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
+     * @returns A Promise that resolves to the instructions to change the country.
+     * */
+    changeCountry(args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+            const identityRegistry = getIdentityRegistryPda(args.assetMint);
+            const investor = deriveInvestorPda(args.investorId, identityRegistry);
+            const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString());
+            const trackerAccount = getTrackerAccountPda(args.assetMint, investor.toString());
+            const ix = yield this.imrProgram.methods
+                .changeCountry(args.country, (_a = args.enforceLimits) !== null && _a !== void 0 ? _a : false)
+                .accountsStrict({
+                payer: args.payer,
+                authority: controllerAuthority,
+                investor,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityRegistry,
+                identityAccount,
+                policyEngineProgram: policyEngineProgramId,
+                policyEngine: getPolicyEnginePda(args.assetMint),
+                trackerAccount,
+                assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: getIdentityRegistryEventAuthority(),
+            })
+                .instruction();
+            return this.rbacProgram.methods
+                .changeCountry(ix.data)
+                .accountsStrict({
+                payer: args.payer,
+                user: args.signer,
+                controllerAuthority,
+                assetAccessController,
+                authorizedUserRole: authorizedUserRole || null,
+                identityMetadataRegistryProgram: IMR_PROGRAM,
+                investor,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityRegistry,
+                identityAccount,
+                policyEngineProgram: policyEngineProgramId,
+                policyEngine: getPolicyEnginePda(args.assetMint),
+                trackerAccount,
+                assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: getIdentityRegistryEventAuthority(),
+            })
+                .instruction();
+        });
+    }
+    /**
+     * Asynchronously remove levels from an investor.
+     * @param args - {@link RemoveLevelsArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
+     * @returns A Promise that resolves to the instructions to remove levels.
+     * */
+    removeLevels(args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+            const identityRegistry = getIdentityRegistryPda(args.assetMint);
+            const investor = deriveInvestorPda(args.investorId, identityRegistry);
+            const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString());
+            const trackerAccount = getTrackerAccountPda(args.assetMint, investor.toString());
+            const ix = yield this.imrProgram.methods
+                .removeLevels(Buffer.from(args.levels), (_a = args.enforceLimits) !== null && _a !== void 0 ? _a : false)
+                .accountsStrict({
+                payer: args.payer,
+                authority: controllerAuthority,
+                investor,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityRegistry,
+                identityAccount,
+                systemProgram: SystemProgram.programId,
+                policyEngineProgram: policyEngineProgramId,
+                policyEngine: getPolicyEnginePda(args.assetMint),
+                trackerAccount,
+                assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: getIdentityRegistryEventAuthority(),
+            })
+                .instruction();
+            return this.rbacProgram.methods
+                .removeLevels(ix.data)
+                .accountsStrict({
+                payer: args.payer,
+                user: args.signer,
+                controllerAuthority,
+                assetAccessController,
+                authorizedUserRole: authorizedUserRole || null,
+                identityMetadataRegistryProgram: IMR_PROGRAM,
+                investor,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityRegistry,
+                identityAccount,
+                systemProgram: SystemProgram.programId,
+                policyEngineProgram: policyEngineProgramId,
+                policyEngine: getPolicyEnginePda(args.assetMint),
+                trackerAccount,
+                assetMint: args.assetMint,
+                eventAuthorityIdentityRegistry: getIdentityRegistryEventAuthority(),
+            })
+                .instruction();
+        });
+    }
+    /**
+     * Asynchronously remove an investor.
+     * @param args - {@link RemoveLevelsArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
+     * @returns A Promise that resolves to the instructions to remove an investor.
+     * */
+    removeInvestor(args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+            const identityRegistry = getIdentityRegistryPda(args.assetMint);
+            const investor = deriveInvestorPda(args.investorId, identityRegistry);
+            const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString());
+            return this.rbacProgram.methods
+                .removeInvestor()
+                .accountsStrict({
+                payer: args.payer,
+                user: args.signer,
+                controllerAuthority,
+                assetAccessController,
+                authorizedUserRole: authorizedUserRole || null,
+                identityMetadataRegistryProgram: IMR_PROGRAM,
+                investor,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityRegistry,
+                identityAccount,
+                walletIdentity: getWalletIdentityAccountPda(args.assetMint, investor.toString()),
+                policyEngineProgram: policyEngineProgramId,
+                trackerAccount: getTrackerAccountPda(args.assetMint, investor.toString()),
+                eventAuthorityIdentityMetadataRegistry: getEventAuthority(IMR_PROGRAM),
+                eventAuthorityIdentityRegistry: getIdentityRegistryEventAuthority(),
+                assetMint: args.assetMint,
+            })
+                .instruction();
+        });
+    }
+    /**
+     * Asynchronously attach a wallet to IdentityAccouont for the Investor.
+     * @param args - {@link AttachWalletByInvestorArgs}
+     * */
+    attachWalletByInvestor(args) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const identityRegistry = getIdentityRegistryPda(args.assetMint);
+            const investor = deriveInvestorPda(args.investorId, identityRegistry);
+            const identityAccount = getIdentityAccountPda(args.assetMint, investor.toString());
+            return this.imrProgram.methods
+                .attachWalletByInvestor(args.newWallet)
+                .accountsStrict({
+                payer: args.payer,
+                wallet: args.signer,
+                investor,
+                walletIdentity: getWalletIdentityAccountPda(args.assetMint, args.signer),
+                identityRegistryProgram: identityRegistryProgramId,
+                newWalletIdentity: getWalletIdentityAccountPda(args.assetMint, args.newWallet.toString()),
+                identityAccount,
+                identityRegistry,
+                assetMint: args.assetMint,
+                systemProgram: SystemProgram.programId,
+                eventAuthorityIdentityRegistry: getIdentityRegistryEventAuthority(),
+            })
+                .instruction();
+        });
+    }
+}
+//# sourceMappingURL=IdentityMetadataRegistry.js.map

package/dist/client/IdentityMetadataRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityMetadataRegistry.js","sourceRoot":"","sources":["../../src/client/IdentityMetadataRegistry.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAW,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAEL,SAAS,EACT,aAAa,GAEd,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAGlB,oBAAoB,EACpB,2BAA2B,EAC3B,yBAAyB,EAEzB,qBAAqB,EAErB,iCAAiC,GAClC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAU3C;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAKnC,YACE,SAAoB,EACpB,WAA6B,EAC7B,UAA2B;QAE3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;SAIK;IACL,WAAW,CAAC,GAA0B;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;QAChD,MAAM,MAAM,GAAG,GAAG;aACf,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;YAChB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAC7B,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAC3C,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;OASG;IACG,aAAa,CACjB,IAAuB,EACvB,qBAAgC,EAChC,kBAA8B;;YAE9B,MAAM,SAAS,GAAG,EAAE,CAAC;YAErB,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;YACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CAAC,uCAAuC;aAC5D,CAAC;YACF,MAAM,YAAY,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAEnD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO;iBAC7C,gBAAgB,CACf,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EACd,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAChB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CACpB;iBACA,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,mBAAmB;gBAC9B,QAAQ;gBACR,uBAAuB,EAAE,yBAAyB;gBAClD,gBAAgB;gBAChB,eAAe;gBACf,cAAc,EAAE,2BAA2B,CACzC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CAAC,uCAAuC;iBAC5D;gBACD,aAAa,EAAE,aAAa,CAAC,SAAS;gBACtC,cAAc,EAAE,iBAAiB,CAAC,WAAW,CAAC;gBAC9C,8BAA8B,EAAE,iCAAiC,EAAE;gBACnE,OAAO,EAAE,yBAAyB;gBAClC,mBAAmB,EAAE,qBAAqB;gBAC1C,cAAc,EAAE,oBAAoB,CAClC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB;gBACD,SAAS,EAAE,YAAY;aACxB,CAAC;iBACD,WAAW,EAAE,CAAC;YAEjB,SAAS,CAAC,IAAI,CACZ,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO;iBAC3B,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC;iBACjC,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,mBAAmB;gBACnB,qBAAqB;gBACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gBAC9C,+BAA+B,EAAE,WAAW;gBAC5C,QAAQ;gBACR,uBAAuB,EAAE,yBAAyB;gBAClD,gBAAgB;gBAChB,eAAe;gBACf,cAAc,EAAE,2BAA2B,CACzC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB;gBACD,aAAa,EAAE,aAAa,CAAC,SAAS;gBACtC,sCAAsC,EACpC,iBAAiB,CAAC,WAAW,CAAC;gBAChC,8BAA8B,EAAE,iCAAiC,EAAE;gBACnE,mBAAmB,EAAE,qBAAqB;gBAC1C,cAAc,EAAE,oBAAoB,CAClC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB;gBACD,SAAS,EAAE,YAAY;aACxB,CAAC;iBACD,WAAW,EAAE,CACjB,CAAC;YAEF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,SAAS,CAAC,IAAI,CACZ,MAAM,IAAI,CAAC,SAAS,CAClB;oBACE,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;oBAChC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;oBACtC,aAAa,EAAE,IAAI,CAAC,aAAa;iBAClC,EACD,qBAAqB,EACrB,kBAAkB,CACnB,CACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,GAAG,EAAE,SAAS;gBACd,OAAO,EAAE,EAAE;aACZ,CAAC;QACJ,CAAC;KAAA;IAED;;;;;;SAMK;IACC,SAAS,CACb,IAAmB,EACnB,qBAAgC,EAChC,kBAA8B;;;YAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;YACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;YACF,MAAM,cAAc,GAAG,oBAAoB,CACzC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;YAEF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO;iBACrC,SAAS,CACR,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EACxB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,WAAW,EAChB,MAAA,IAAI,CAAC,aAAa,mCAAI,KAAK,CAC5B;iBACA,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,mBAAmB;gBAC9B,QAAQ;gBACR,uBAAuB,EAAE,yBAAyB;gBAClD,gBAAgB;gBAChB,eAAe;gBACf,aAAa,EAAE,aAAa,CAAC,SAAS;gBACtC,mBAAmB,EAAE,qBAAqB;gBAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;gBAChD,cAAc;gBACd,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,8BAA8B,EAAE,iCAAiC,EAAE;gBACnE,cAAc,EAAE,iBAAiB,CAAC,WAAW,CAAC;gBAC9C,OAAO,EAAE,WAAW;aACrB,CAAC;iBACD,WAAW,EAAE,CAAC;YAEjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;iBAC5B,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC;iBAClB,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,mBAAmB;gBACnB,qBAAqB;gBACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gBAC9C,+BAA+B,EAAE,WAAW;gBAC5C,QAAQ;gBACR,uBAAuB,EAAE,yBAAyB;gBAClD,gBAAgB;gBAChB,eAAe;gBACf,aAAa,EAAE,aAAa,CAAC,SAAS;gBACtC,mBAAmB,EAAE,qBAAqB;gBAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;gBAChD,cAAc;gBACd,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,8BAA8B,EAAE,iCAAiC,EAAE;gBACnE,sCAAsC,EAAE,iBAAiB,CAAC,WAAW,CAAC;aACvE,CAAC;iBACD,WAAW,EAAE,CAAC;QACnB,CAAC;KAAA;IAED;;;;;;SAMK;IACC,aAAa,CACjB,IAAuB,EACvB,qBAAgC,EAChC,kBAA8B;;;YAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;YACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;YACF,MAAM,cAAc,GAAG,oBAAoB,CACzC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;YAEF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO;iBACrC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,MAAA,IAAI,CAAC,aAAa,mCAAI,KAAK,CAAC;iBACxD,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,mBAAmB;gBAC9B,QAAQ;gBACR,uBAAuB,EAAE,yBAAyB;gBAClD,gBAAgB;gBAChB,eAAe;gBACf,mBAAmB,EAAE,qBAAqB;gBAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;gBAChD,cAAc;gBACd,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,8BAA8B,EAAE,iCAAiC,EAAE;aACpE,CAAC;iBACD,WAAW,EAAE,CAAC;YAEjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;iBAC5B,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC;iBACtB,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,mBAAmB;gBACnB,qBAAqB;gBACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gBAC9C,+BAA+B,EAAE,WAAW;gBAC5C,QAAQ;gBACR,uBAAuB,EAAE,yBAAyB;gBAClD,gBAAgB;gBAChB,eAAe;gBACf,mBAAmB,EAAE,qBAAqB;gBAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;gBAChD,cAAc;gBACd,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,8BAA8B,EAAE,iCAAiC,EAAE;aACpE,CAAC;iBACD,WAAW,EAAE,CAAC;QACnB,CAAC;KAAA;IAED;;;;;;SAMK;IACC,YAAY,CAChB,IAAsB,EACtB,qBAAgC,EAChC,kBAA8B;;;YAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;YACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;YACF,MAAM,cAAc,GAAG,oBAAoB,CACzC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;YAEF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO;iBACrC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAA,IAAI,CAAC,aAAa,mCAAI,KAAK,CAAC;iBACnE,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,mBAAmB;gBAC9B,QAAQ;gBACR,uBAAuB,EAAE,yBAAyB;gBAClD,gBAAgB;gBAChB,eAAe;gBACf,aAAa,EAAE,aAAa,CAAC,SAAS;gBACtC,mBAAmB,EAAE,qBAAqB;gBAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;gBAChD,cAAc;gBACd,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,8BAA8B,EAAE,iCAAiC,EAAE;aACpE,CAAC;iBACD,WAAW,EAAE,CAAC;YAEjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;iBAC5B,YAAY,CAAC,EAAE,CAAC,IAAI,CAAC;iBACrB,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,mBAAmB;gBACnB,qBAAqB;gBACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gBAC9C,+BAA+B,EAAE,WAAW;gBAC5C,QAAQ;gBACR,uBAAuB,EAAE,yBAAyB;gBAClD,gBAAgB;gBAChB,eAAe;gBACf,aAAa,EAAE,aAAa,CAAC,SAAS;gBACtC,mBAAmB,EAAE,qBAAqB;gBAC1C,YAAY,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;gBAChD,cAAc;gBACd,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,8BAA8B,EAAE,iCAAiC,EAAE;aACpE,CAAC;iBACD,WAAW,EAAE,CAAC;QACnB,CAAC;KAAA;IAED;;;;;;SAMK;IACC,cAAc,CAClB,IAAwB,EACxB,qBAAgC,EAChC,kBAA8B;;YAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;YACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;YAEF,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;iBAC5B,cAAc,EAAE;iBAChB,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,mBAAmB;gBACnB,qBAAqB;gBACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gBAC9C,+BAA+B,EAAE,WAAW;gBAC5C,QAAQ;gBACR,uBAAuB,EAAE,yBAAyB;gBAClD,gBAAgB;gBAChB,eAAe;gBACf,cAAc,EAAE,2BAA2B,CACzC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB;gBACD,mBAAmB,EAAE,qBAAqB;gBAC1C,cAAc,EAAE,oBAAoB,CAClC,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB;gBACD,sCAAsC,EAAE,iBAAiB,CAAC,WAAW,CAAC;gBACtE,8BAA8B,EAAE,iCAAiC,EAAE;gBACnE,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;iBACD,WAAW,EAAE,CAAC;QACnB,CAAC;KAAA;IAED;;;SAGK;IACC,sBAAsB,CAC1B,IAAgC;;YAEhC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACtE,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,SAAS,EACd,QAAQ,CAAC,QAAQ,EAAE,CACpB,CAAC;YACF,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO;iBAC3B,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;iBACtC,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ;gBACR,cAAc,EAAE,2BAA2B,CACzC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CACZ;gBACD,uBAAuB,EAAE,yBAAyB;gBAClD,iBAAiB,EAAE,2BAA2B,CAC5C,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAC1B;gBACD,eAAe;gBACf,gBAAgB;gBAChB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,aAAa,CAAC,SAAS;gBACtC,8BAA8B,EAAE,iCAAiC,EAAE;aACpE,CAAC;iBACD,WAAW,EAAE,CAAC;QACnB,CAAC;KAAA;CACF"}

package/dist/client/IdentityRegistry.d.ts

@@ -15,7 +15,7 @@ export declare class IdentityRegistry {
      * @param args - {@link SetupUserArgs}
      * @param authority - RBAC AssetAccessController ControllerAuthority.
      * @param assetAccessController - RBAC AssetAccessController account.
-     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
      * @returns A Promise that resolves to the instructions to setup a user.
      *
      * It is required for at least a single user to be setup before issuing tokens.
@@ -26,7 +26,7 @@ export declare class IdentityRegistry {
      * @param args - {@link SetupUserArgs}
      * @param authority - RBAC AssetAccessController ControllerAuthority.
      * @param assetAccessController - RBAC AssetAccessController account.
-     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
      * @returns A Promise that resolves to the instructions to setup a user.
      *
      * It is required for at least a single user to be setup before issuing tokens.
@@ -36,7 +36,7 @@ export declare class IdentityRegistry {
      * Asynchronously generates instruction to attach wallet to identity.
      * @param args - {@link AttachDetachWalletArgs}
      * @param assetAccessController - RBAC AssetAccessController account.
-     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
      * @returns A Promise that resolves to attach wallet.
      * */
     attachWalletToIdentityIxn(args: AttachDetachWalletArgs, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;
@@ -44,7 +44,7 @@ export declare class IdentityRegistry {
      * Asynchronously generates instruction to detach wallet from identity.
      * @param args - {@link AttachDetachWalletArgs}
      * @param assetAccessController - RBAC AssetAccessController account.
-     * @param authorizedUserRole - Optional UserRole account. Required if user is not an admin.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
      * @returns A Promise that resolves to detach wallet.
      * */
     detachWalletFromIdentityIxn(args: AttachDetachWalletArgs, assetAccessController: PublicKey, authorizedUserRole?: PublicKey): Promise<TransactionInstruction>;

package/dist/client/IdentityRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IdentityRegistry.d.ts","sourceRoot":"","sources":["../../src/client/IdentityRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EACL,sBAAsB,EAEtB,kBAAkB,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAYL,QAAQ,EAGR,SAAS,EACT,aAAa,EACd,MAAM,+BAA+B,CAAC;AAKvC;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAElB,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC;IAK/D;;;;;;;;;OASG;IACG,aAAa,CACjB,IAAI,EAAE,aAAa,EACnB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,QAAQ,CAAC;IAyCpB;;;;;;;;;OASG;IACG,aAAa,CACjB,IAAI,EAAE,kBAAkB,EACxB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAgClC;;;;;;SAMK;IACC,yBAAyB,CAC7B,IAAI,EAAE,sBAAsB,EAC5B,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAiDlC;;;;;;SAMK;IACC,2BAA2B,CAC/B,IAAI,EAAE,sBAAsB,EAC5B,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;CAmDnC"}
+{"version":3,"file":"IdentityRegistry.d.ts","sourceRoot":"","sources":["../../src/client/IdentityRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EASL,QAAQ,EAER,SAAS,EACT,aAAa,EACd,MAAM,+BAA+B,CAAC;AAQvC;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAElB,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC;IAK/D;;;;;;;;;OASG;IACG,aAAa,CACjB,IAAI,EAAE,aAAa,EACnB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,QAAQ,CAAC;IAwCpB;;;;;;;;;OASG;IACG,aAAa,CACjB,IAAI,EAAE,kBAAkB,EACxB,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IA0ClC;;;;;;SAMK;IACC,yBAAyB,CAC7B,IAAI,EAAE,sBAAsB,EAC5B,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAiDlC;;;;;;SAMK;IACC,2BAA2B,CAC/B,IAAI,EAAE,sBAAsB,EAC5B,qBAAqB,EAAE,SAAS,EAChC,kBAAkB,CAAC,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;CAmDnC"}

package/dist/client/IdentityRegistry.js

@@ -0,0 +1,200 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { PublicKey } from "@solana/web3.js";
+import { getIdentityAccount, getIdentityAccountPda, getIdentityRegistryEventAuthority, getIdentityRegistryPda, getIdentityRegistryProgram, getTrackerAccountPda, getWalletIdentityAccountPda, identityRegistryProgramId, policyEngineProgramId, } from "@dstoken-solana/rwa-token-sdk";
+import { deriveControllerAuthorityPda } from "../pdas";
+import { SystemProgram } from "@solana/web3.js";
+import { getAssociatedTokenAddressSync, TOKEN_2022_PROGRAM_ID, } from "@solana/spl-token";
+/**
+ * Represents the role-based access client for Identity Registry for an RWA.
+ */
+export class IdentityRegistry {
+    constructor(rwaClient, rbacProgram) {
+        this.rwaClient = rwaClient;
+        this.rbacProgram = rbacProgram;
+    }
+    /**
+     * Asynchronously generates instructions to setup a non-investor user with an identity account.
+     * @param args - {@link SetupUserArgs}
+     * @param authority - RBAC AssetAccessController ControllerAuthority.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
+     * @returns A Promise that resolves to the instructions to setup a user.
+     *
+     * It is required for at least a single user to be setup before issuing tokens.
+     */
+    setupUserIxns(args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { ixs } = yield this.rwaClient.identityRegistry.setupUserIxns(args);
+            const returnIxs = [];
+            const identityAccountIx = ixs[0];
+            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+            const identityAccount = getIdentityAccountPda(args.assetMint, args.owner);
+            returnIxs.push(yield this.rbacProgram.methods
+                .createIdentityAccount(identityAccountIx.data)
+                .accountsStrict({
+                payer: args.payer,
+                user: args.signer,
+                controllerAuthority,
+                assetAccessController,
+                authorizedUserRole: authorizedUserRole || null,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityRegistry: getIdentityRegistryPda(args.assetMint),
+                identityAccount,
+                walletIdentity: getWalletIdentityAccountPda(args.assetMint, args.owner),
+                systemProgram: SystemProgram.programId,
+                eventAuthority: getIdentityRegistryEventAuthority(),
+                policyEngineProgram: policyEngineProgramId,
+                trackerAccount: getTrackerAccountPda(args.assetMint, args.owner),
+                assetMint: args.assetMint,
+            })
+                .instruction());
+            return {
+                ixs: returnIxs,
+                signers: [],
+            };
+        });
+    }
+    /**
+     * Asynchronously generates instructions to remove a non-investor user with an identity account.
+     * @param args - {@link SetupUserArgs}
+     * @param authority - RBAC AssetAccessController ControllerAuthority.
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
+     * @returns A Promise that resolves to the instructions to setup a user.
+     *
+     * It is required for at least a single user to be setup before issuing tokens.
+     */
+    removeUserIxn(args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const ix = yield this.rwaClient.identityRegistry.revokeIdentityAccount(args);
+            const identityAccountAddress = getIdentityAccountPda(args.assetMint, args.owner);
+            const identityAccount = yield getIdentityAccount(identityAccountAddress, this.rwaClient.provider);
+            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+            const returnIx = yield this.rbacProgram.methods
+                .removeIdentityAccount(ix.data)
+                .accountsStrict({
+                payer: args.payer,
+                user: args.signer,
+                controllerAuthority,
+                assetAccessController,
+                authorizedUserRole: authorizedUserRole || null,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityRegistry: getIdentityRegistryPda(args.assetMint),
+                identityAccount: identityAccountAddress,
+                walletIdentity: getWalletIdentityAccountPda(args.assetMint, args.owner),
+                eventAuthority: getIdentityRegistryEventAuthority(),
+                identityOwner: identityAccount.owner,
+                policyEngineProgram: policyEngineProgramId,
+                trackerAccount: getTrackerAccountPda(args.assetMint, args.owner),
+                assetMint: args.assetMint,
+            })
+                .instruction();
+            return returnIx;
+        });
+    }
+    /**
+     * Asynchronously generates instruction to attach wallet to identity.
+     * @param args - {@link AttachDetachWalletArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
+     * @returns A Promise that resolves to attach wallet.
+     * */
+    attachWalletToIdentityIxn(args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+            const identityProgram = getIdentityRegistryProgram(this.rwaClient.provider);
+            const identityRegistry = getIdentityRegistryPda(args.assetMint);
+            const identityAccount = getIdentityAccountPda(args.assetMint, args.owner);
+            const newWalletIdentityAccount = getIdentityAccountPda(args.assetMint, args.wallet);
+            const walletIdentity = getWalletIdentityAccountPda(args.assetMint, args.wallet.toString());
+            const ix = yield identityProgram.methods
+                .attachWalletToIdentity(new PublicKey(args.wallet))
+                .accountsStrict({
+                payer: args.payer,
+                authority: controllerAuthority,
+                identityAccount,
+                identityRegistry,
+                assetMint: args.assetMint,
+                walletIdentity,
+                systemProgram: SystemProgram.programId,
+                eventAuthority: getIdentityRegistryEventAuthority(),
+                program: identityRegistryProgramId,
+            })
+                .instruction();
+            return this.rbacProgram.methods
+                .attachWalletToIdentity(ix.data)
+                .accountsStrict({
+                payer: args.payer,
+                user: args.signer,
+                controllerAuthority,
+                assetAccessController,
+                authorizedUserRole: authorizedUserRole || null,
+                identityRegistryProgram: identityRegistryProgramId,
+                identityAccount,
+                identityRegistry,
+                assetMint: args.assetMint,
+                walletIdentity,
+                systemProgram: SystemProgram.programId,
+                eventAuthority: getIdentityRegistryEventAuthority(),
+            })
+                .instruction();
+        });
+    }
+    /**
+     * Asynchronously generates instruction to detach wallet from identity.
+     * @param args - {@link AttachDetachWalletArgs}
+     * @param assetAccessController - RBAC AssetAccessController account.
+     * @param authorizedUserRole - UserRole authorized to invoke instruction.
+     * @returns A Promise that resolves to detach wallet.
+     * */
+    detachWalletFromIdentityIxn(args, assetAccessController, authorizedUserRole) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const controllerAuthority = deriveControllerAuthorityPda(assetAccessController);
+            const identityProgram = getIdentityRegistryProgram(this.rwaClient.provider);
+            const identityRegistry = getIdentityRegistryPda(args.assetMint);
+            const identityAccount = getIdentityAccountPda(args.assetMint, args.owner);
+            const walletIdentity = getWalletIdentityAccountPda(args.assetMint, args.wallet.toString());
+            const tokenAccount = getAssociatedTokenAddressSync(new PublicKey(args.assetMint), new PublicKey(args.wallet), false, TOKEN_2022_PROGRAM_ID);
+            const ix = yield identityProgram.methods
+                .detachWalletFromIdentity()
+                .accountsStrict({
+                payer: args.payer,
+                authority: controllerAuthority,
+                walletIdentity,
+                identityAccount,
+                identityRegistry,
+                eventAuthority: getIdentityRegistryEventAuthority(),
+                program: identityRegistryProgramId,
+                tokenAccount: tokenAccount,
+                assetMint: args.assetMint,
+            })
+                .instruction();
+            return this.rbacProgram.methods
+                .detachWalletFromIdentity(ix.data)
+                .accountsStrict({
+                payer: args.payer,
+                user: args.signer,
+                controllerAuthority,
+                assetAccessController,
+                authorizedUserRole: authorizedUserRole || null,
+                identityRegistryProgram: identityRegistryProgramId,
+                walletIdentity,
+                identityAccount,
+                identityRegistry,
+                eventAuthority: getIdentityRegistryEventAuthority(),
+                tokenAccount: tokenAccount,
+                assetMint: args.assetMint,
+            })
+                .instruction();
+        });
+    }
+}
+//# sourceMappingURL=IdentityRegistry.js.map

package/dist/client/IdentityRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityRegistry.js","sourceRoot":"","sources":["../../src/client/IdentityRegistry.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,SAAS,EAA0B,MAAM,iBAAiB,CAAC;AAOpE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,iCAAiC,EACjC,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,EACpB,2BAA2B,EAC3B,yBAAyB,EAEzB,qBAAqB,GAGtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAE3B;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAI3B,YAAY,SAAoB,EAAE,WAA6B;QAC7D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;;;;;;;;OASG;IACG,aAAa,CACjB,IAAmB,EACnB,qBAAgC,EAChC,kBAA8B;;YAE9B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,SAAS,GAAG,EAAE,CAAC;YAErB,MAAM,iBAAiB,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;YACF,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1E,SAAS,CAAC,IAAI,CACZ,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO;iBAC3B,qBAAqB,CAAC,iBAAiB,CAAC,IAAI,CAAC;iBAC7C,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,mBAAmB;gBACnB,qBAAqB;gBACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gBAC9C,uBAAuB,EAAE,yBAAyB;gBAClD,gBAAgB,EAAE,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;gBACxD,eAAe;gBACf,cAAc,EAAE,2BAA2B,CACzC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,KAAK,CACX;gBACD,aAAa,EAAE,aAAa,CAAC,SAAS;gBACtC,cAAc,EAAE,iCAAiC,EAAE;gBACnD,mBAAmB,EAAE,qBAAqB;gBAC1C,cAAc,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;gBAChE,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;iBACD,WAAW,EAAE,CACjB,CAAC;YAEF,OAAO;gBACL,GAAG,EAAE,SAAS;gBACd,OAAO,EAAE,EAAE;aACZ,CAAC;QACJ,CAAC;KAAA;IAED;;;;;;;;;OASG;IACG,aAAa,CACjB,IAAwB,EACxB,qBAAgC,EAChC,kBAA8B;;YAE9B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,qBAAqB,CACpE,IAAI,CACL,CAAC;YACF,MAAM,sBAAsB,GAAG,qBAAqB,CAClD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,KAAK,CACX,CAAC;YACF,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAC9C,sBAAsB,EACtB,IAAI,CAAC,SAAS,CAAC,QAAQ,CACxB,CAAC;YAEF,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO;iBAC1C,qBAAqB,CAAC,EAAE,CAAC,IAAI,CAAC;iBAC9B,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,mBAAmB;gBACnB,qBAAqB;gBACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gBAC9C,uBAAuB,EAAE,yBAAyB;gBAClD,gBAAgB,EAAE,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;gBACxD,eAAe,EAAE,sBAAsB;gBACvC,cAAc,EAAE,2BAA2B,CACzC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,KAAK,CACX;gBACD,cAAc,EAAE,iCAAiC,EAAE;gBACnD,aAAa,EAAE,eAAe,CAAC,KAAK;gBACpC,mBAAmB,EAAE,qBAAqB;gBAC1C,cAAc,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;gBAChE,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;iBACD,WAAW,EAAE,CAAC;YAEnB,OAAO,QAAQ,CAAC;QAClB,CAAC;KAAA;IAED;;;;;;SAMK;IACC,yBAAyB,CAC7B,IAA4B,EAC5B,qBAAgC,EAChC,kBAA8B;;YAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;YACF,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC5E,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,wBAAwB,GAAG,qBAAqB,CACpD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CACZ,CAAC;YACF,MAAM,cAAc,GAAG,2BAA2B,CAChD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CACvB,CAAC;YAEF,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO;iBACrC,sBAAsB,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;iBAClD,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,mBAAmB;gBAC9B,eAAe;gBACf,gBAAgB;gBAChB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,cAAc;gBACd,aAAa,EAAE,aAAa,CAAC,SAAS;gBACtC,cAAc,EAAE,iCAAiC,EAAE;gBACnD,OAAO,EAAE,yBAAyB;aACnC,CAAC;iBACD,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;iBAC5B,sBAAsB,CAAC,EAAE,CAAC,IAAI,CAAC;iBAC/B,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,mBAAmB;gBACnB,qBAAqB;gBACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gBAC9C,uBAAuB,EAAE,yBAAyB;gBAClD,eAAe;gBACf,gBAAgB;gBAChB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,cAAc;gBACd,aAAa,EAAE,aAAa,CAAC,SAAS;gBACtC,cAAc,EAAE,iCAAiC,EAAE;aACpD,CAAC;iBACD,WAAW,EAAE,CAAC;QACnB,CAAC;KAAA;IAED;;;;;;SAMK;IACC,2BAA2B,CAC/B,IAA4B,EAC5B,qBAAgC,EAChC,kBAA8B;;YAE9B,MAAM,mBAAmB,GAAG,4BAA4B,CACtD,qBAAqB,CACtB,CAAC;YACF,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC5E,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,cAAc,GAAG,2BAA2B,CAChD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CACvB,CAAC;YAEF,MAAM,YAAY,GAAG,6BAA6B,CAChD,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAC7B,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAC1B,KAAK,EACL,qBAAqB,CACtB,CAAC;YAEF,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO;iBACrC,wBAAwB,EAAE;iBAC1B,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,mBAAmB;gBAC9B,cAAc;gBACd,eAAe;gBACf,gBAAgB;gBAChB,cAAc,EAAE,iCAAiC,EAAE;gBACnD,OAAO,EAAE,yBAAyB;gBAClC,YAAY,EAAE,YAAY;gBAC1B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;iBACD,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO;iBAC5B,wBAAwB,CAAC,EAAE,CAAC,IAAI,CAAC;iBACjC,cAAc,CAAC;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,mBAAmB;gBACnB,qBAAqB;gBACrB,kBAAkB,EAAE,kBAAkB,IAAI,IAAI;gBAC9C,uBAAuB,EAAE,yBAAyB;gBAClD,cAAc;gBACd,eAAe;gBACf,gBAAgB;gBAChB,cAAc,EAAE,iCAAiC,EAAE;gBACnD,YAAY,EAAE,YAAY;gBAC1B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;iBACD,WAAW,EAAE,CAAC;QACnB,CAAC;KAAA;CACF"}