@interest-protocol/blast-admin-sdk 0.0.0-stage → 0.1.0

package/dist/transactions.js

@@ -0,0 +1,198 @@
+import { normalizeSharedObjectIdentity } from "@interest-protocol/blast-core/sui";
+import { Transaction } from "@mysten/sui/transactions";
+import { normalizeStructTag, normalizeSuiAddress, normalizeSuiObjectId, } from "@mysten/sui/utils";
+export function normalizeAdminDeployment(deployment) {
+    return {
+        packageId: normalizeSuiObjectId(deployment.packageId),
+        acl: normalizeSharedObjectIdentity("admin.acl", deployment.acl),
+    };
+}
+/**
+ * `blast_admin::blast_acl` calls. A role is a Move type its consumer package
+ * declares (for example `<launchpad>::blast_fun_domain::FeeAdmin`); each
+ * product's `roleType` names its own.
+ */
+export class AdminCalls {
+    deployment;
+    constructor(deployment) {
+        this.deployment = normalizeAdminDeployment(deployment);
+    }
+    /** `sign_in<Role>`: this PTB's `AdminWitness<Role>`; the `AdminCap` must hold `role`. */
+    signIn(options) {
+        const role = normalizeStructTag(options.role);
+        return (tx) => tx.moveCall({
+            target: this.#target("sign_in"),
+            typeArguments: [role],
+            arguments: [this.#acl(tx, false), tx.object(options.adminCap)],
+        });
+    }
+    /** `grant_admin`: delivers a new `AdminCap` with no role to `recipient`. */
+    grantAdmin(options) {
+        const recipient = normalizeSuiAddress(options.recipient);
+        return (tx) => {
+            tx.moveCall({
+                target: this.#target("grant_admin"),
+                arguments: [
+                    this.#acl(tx, true),
+                    tx.object(options.superAdminCap),
+                    tx.pure.address(recipient),
+                ],
+            });
+        };
+    }
+    /** `revoke_admin`: retires a live `AdminCap` and every role it holds. */
+    revokeAdmin(options) {
+        const adminCapId = normalizeSuiObjectId(options.adminCapId);
+        return (tx) => {
+            tx.moveCall({
+                target: this.#target("revoke_admin"),
+                arguments: [
+                    this.#acl(tx, true),
+                    tx.object(options.superAdminCap),
+                    tx.pure.id(adminCapId),
+                ],
+            });
+        };
+    }
+    /** `grant_role<Role>` to a live administrator. */
+    grantRole(options) {
+        return this.#roleCall("grant_role", options);
+    }
+    /** `revoke_role<Role>` from a live administrator. */
+    revokeRole(options) {
+        return this.#roleCall("revoke_role", options);
+    }
+    /** `destroy_admin_cap`: deletes the holder's own live or revoked cap. */
+    destroyAdminCap(options) {
+        return (tx) => {
+            tx.moveCall({
+                target: this.#target("destroy_admin_cap"),
+                arguments: [this.#acl(tx, true), tx.object(options.adminCap)],
+            });
+        };
+    }
+    /**
+     * `begin_super_admin_transfer`: nominates `recipient`, who may accept once
+     * the ACL's seven-day delay passes; it replaces a pending nomination.
+     */
+    beginSuperAdminTransfer(options) {
+        const recipient = normalizeSuiAddress(options.recipient);
+        return (tx) => {
+            tx.moveCall({
+                target: this.#target("begin_super_admin_transfer"),
+                arguments: [
+                    this.#acl(tx, true),
+                    tx.object(options.superAdminCap),
+                    tx.pure.address(recipient),
+                    tx.object.clock(),
+                ],
+            });
+        };
+    }
+    cancelSuperAdminTransfer(options) {
+        return (tx) => {
+            tx.moveCall({
+                target: this.#target("cancel_super_admin_transfer"),
+                arguments: [this.#acl(tx, true), tx.object(options.superAdminCap)],
+            });
+        };
+    }
+    /** `accept_super_admin_transfer`: the sender must be the ready nominee. */
+    acceptSuperAdminTransfer() {
+        return (tx) => {
+            tx.moveCall({
+                target: this.#target("accept_super_admin_transfer"),
+                arguments: [this.#acl(tx, true), tx.object.clock()],
+            });
+        };
+    }
+    /** `destroy_retired_super_admin_cap`: deletes a root an accepted transfer replaced. */
+    destroyRetiredSuperAdminCap(options) {
+        return (tx) => {
+            tx.moveCall({
+                target: this.#target("destroy_retired_super_admin_cap"),
+                arguments: [this.#acl(tx, false), tx.object(options.superAdminCap)],
+            });
+        };
+    }
+    #roleCall(functionName, options) {
+        const role = normalizeStructTag(options.role);
+        const adminCapId = normalizeSuiObjectId(options.adminCapId);
+        return (tx) => {
+            tx.moveCall({
+                target: this.#target(functionName),
+                typeArguments: [role],
+                arguments: [
+                    this.#acl(tx, true),
+                    tx.object(options.superAdminCap),
+                    tx.pure.id(adminCapId),
+                ],
+            });
+        };
+    }
+    #target(functionName) {
+        return `${this.deployment.packageId}::blast_acl::${functionName}`;
+    }
+    #acl(tx, mutable) {
+        return tx.sharedObjectRef({ ...this.deployment.acl, mutable });
+    }
+}
+/** One-call PTBs for the ACL's root and administrators. */
+export class AdminTransactions {
+    call;
+    constructor(deployment) {
+        this.call = new AdminCalls(deployment);
+    }
+    grantAdmin(options) {
+        return single(this.call.grantAdmin({
+            superAdminCap: options.superAdminCapId,
+            recipient: options.recipient,
+        }));
+    }
+    revokeAdmin(options) {
+        return single(this.call.revokeAdmin({
+            superAdminCap: options.superAdminCapId,
+            adminCapId: options.adminCapId,
+        }));
+    }
+    grantRole(options) {
+        return single(this.call.grantRole({
+            ...options,
+            superAdminCap: options.superAdminCapId,
+        }));
+    }
+    revokeRole(options) {
+        return single(this.call.revokeRole({
+            ...options,
+            superAdminCap: options.superAdminCapId,
+        }));
+    }
+    destroyAdminCap(options) {
+        return single(this.call.destroyAdminCap({ adminCap: options.adminCapId }));
+    }
+    beginSuperAdminTransfer(options) {
+        return single(this.call.beginSuperAdminTransfer({
+            superAdminCap: options.superAdminCapId,
+            recipient: options.recipient,
+        }));
+    }
+    cancelSuperAdminTransfer(options) {
+        return single(this.call.cancelSuperAdminTransfer({
+            superAdminCap: options.superAdminCapId,
+        }));
+    }
+    acceptSuperAdminTransfer() {
+        return single(this.call.acceptSuperAdminTransfer());
+    }
+    destroyRetiredSuperAdminCap(options) {
+        return single(this.call.destroyRetiredSuperAdminCap({
+            superAdminCap: options.superAdminCapId,
+        }));
+    }
+}
+function single(call) {
+    const tx = new Transaction();
+    tx.add(call);
+    return tx;
+}
+//# sourceMappingURL=transactions.js.map

package/dist/transactions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactions.js","sourceRoot":"","sources":["../src/transactions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAKlF,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,UAAU,wBAAwB,CACtC,UAA2B;IAE3B,OAAO;QACL,SAAS,EAAE,oBAAoB,CAAC,UAAU,CAAC,SAAS,CAAC;QACrD,GAAG,EAAE,6BAA6B,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,UAAU;IACZ,UAAU,CAAkB;IAErC,YAAY,UAA2B;QACrC,IAAI,CAAC,UAAU,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC;IAED,yFAAyF;IACzF,MAAM,CAAC,OAA2D;QAChE,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,EAAe,EAA6B,EAAE,CACpD,EAAE,CAAC,QAAQ,CAAC;YACV,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC/B,aAAa,EAAE,CAAC,IAAI,CAAC;YACrB,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SAC/D,CAAC,CAAC;IACP,CAAC;IAED,4EAA4E;IAC5E,UAAU,CAAC,OAGV;QACC,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACzD,OAAO,CAAC,EAAe,EAAQ,EAAE;YAC/B,EAAE,CAAC,QAAQ,CAAC;gBACV,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;gBACnC,SAAS,EAAE;oBACT,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;oBACnB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;oBAChC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;iBAC3B;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,WAAW,CAAC,OAGX;QACC,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5D,OAAO,CAAC,EAAe,EAAQ,EAAE;YAC/B,EAAE,CAAC,QAAQ,CAAC;gBACV,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;gBACpC,SAAS,EAAE;oBACT,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;oBACnB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;oBAChC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC;iBACvB;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,SAAS,CAAC,OAIT;QACC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,qDAAqD;IACrD,UAAU,CAAC,OAIV;QACC,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,yEAAyE;IACzE,eAAe,CAAC,OAA6C;QAC3D,OAAO,CAAC,EAAe,EAAQ,EAAE;YAC/B,EAAE,CAAC,QAAQ,CAAC;gBACV,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;gBACzC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,uBAAuB,CAAC,OAGvB;QACC,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACzD,OAAO,CAAC,EAAe,EAAQ,EAAE;YAC/B,EAAE,CAAC,QAAQ,CAAC;gBACV,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC;gBAClD,SAAS,EAAE;oBACT,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;oBACnB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;oBAChC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;oBAC1B,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;iBAClB;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,wBAAwB,CAAC,OAAkD;QACzE,OAAO,CAAC,EAAe,EAAQ,EAAE;YAC/B,EAAE,CAAC,QAAQ,CAAC;gBACV,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC;gBACnD,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;aACnE,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,wBAAwB;QACtB,OAAO,CAAC,EAAe,EAAQ,EAAE;YAC/B,EAAE,CAAC,QAAQ,CAAC;gBACV,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC;gBACnD,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;aACpD,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,uFAAuF;IACvF,2BAA2B,CAAC,OAE3B;QACC,OAAO,CAAC,EAAe,EAAQ,EAAE;YAC/B,EAAE,CAAC,QAAQ,CAAC;gBACV,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,iCAAiC,CAAC;gBACvD,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;aACpE,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,SAAS,CACP,YAA0C,EAC1C,OAIC;QAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5D,OAAO,CAAC,EAAe,EAAQ,EAAE;YAC/B,EAAE,CAAC,QAAQ,CAAC;gBACV,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;gBAClC,aAAa,EAAE,CAAC,IAAI,CAAC;gBACrB,SAAS,EAAE;oBACT,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;oBACnB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;oBAChC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC;iBACvB;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,YAAoB;QAC1B,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,gBAAgB,YAAY,EAAE,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,EAAe,EAAE,OAAgB;QACpC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;CACF;AAED,2DAA2D;AAC3D,MAAM,OAAO,iBAAiB;IACnB,IAAI,CAAa;IAE1B,YAAY,UAA2B;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAED,UAAU,CAAC,OAAuD;QAChE,OAAO,MAAM,CACX,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;YACnB,aAAa,EAAE,OAAO,CAAC,eAAe;YACtC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CACH,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,OAAwD;QAClE,OAAO,MAAM,CACX,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;YACpB,aAAa,EAAE,OAAO,CAAC,eAAe;YACtC,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CACH,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,OAIT;QACC,OAAO,MAAM,CACX,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAClB,GAAG,OAAO;YACV,aAAa,EAAE,OAAO,CAAC,eAAe;SACvC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,OAIV;QACC,OAAO,MAAM,CACX,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;YACnB,GAAG,OAAO;YACV,aAAa,EAAE,OAAO,CAAC,eAAe;SACvC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,OAA+B;QAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,uBAAuB,CAAC,OAGvB;QACC,OAAO,MAAM,CACX,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC;YAChC,aAAa,EAAE,OAAO,CAAC,eAAe;YACtC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CACH,CAAC;IACJ,CAAC;IAED,wBAAwB,CAAC,OAAoC;QAC3D,OAAO,MAAM,CACX,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC;YACjC,aAAa,EAAE,OAAO,CAAC,eAAe;SACvC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,wBAAwB;QACtB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,2BAA2B,CAAC,OAAoC;QAC9D,OAAO,MAAM,CACX,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC;YACpC,aAAa,EAAE,OAAO,CAAC,eAAe;SACvC,CAAC,CACH,CAAC;IACJ,CAAC;CACF;AAED,SAAS,MAAM,CAAC,IAA+B;IAC7C,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/package.json

@@ -1,6 +1,57 @@
 {
   "name": "@interest-protocol/blast-admin-sdk",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Blast admin SDK",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/interest-protocol/blast-v2-sdk.git",
+    "directory": "packages/admin"
+  },
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "src"
+  ],
+  "exports": {
+    "./events": {
+      "types": "./dist/events.d.ts",
+      "default": "./dist/events.js"
+    },
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./reducer": {
+      "types": "./dist/reducer.d.ts",
+      "default": "./dist/reducer.js"
+    },
+    "./state": {
+      "types": "./dist/state.d.ts",
+      "default": "./dist/state.js"
+    },
+    "./transactions": {
+      "types": "./dist/transactions.d.ts",
+      "default": "./dist/transactions.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "node --eval \"fs.rmSync('dist', { recursive: true, force: true })\" && tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "check:package": "publint --strict && attw --pack . --profile esm-only",
+    "prepack": "npm run build"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@interest-protocol/blast-core": "0.1.0"
+  },
+  "peerDependencies": {
+    "@mysten/sui": "^2.26.2"
+  }
+}

package/src/events.ts

@@ -0,0 +1,103 @@
+import {
+  addressBcs,
+  moveTypeNameBcs,
+  suiObjectIdBcs,
+  u64Bcs,
+} from "@interest-protocol/blast-core/bcs";
+import type { SuiEventPosition } from "@interest-protocol/blast-core/events";
+import {
+  normalizeSuiEventPosition,
+  suiEventId,
+} from "@interest-protocol/blast-core/events";
+import { bcs } from "@mysten/sui/bcs";
+import type { SuiClientTypes } from "@mysten/sui/client";
+import { normalizeSuiAddress, parseStructTag } from "@mysten/sui/utils";
+
+const roles = bcs.vector(moveTypeNameBcs);
+const transfer = { recipient: addressBcs, execute_after_ms: u64Bcs };
+
+/**
+ * The `blast_admin::blast_admin_events` the ACL emits, in Move field order.
+ * The generic upgrade-custody and operational-version events belong to
+ * package upgrades, which the SDK leaves to publish tooling.
+ */
+export const aclEventBcs = {
+  AdminGranted: bcs.struct("AdminGranted", {
+    admin_cap_id: suiObjectIdBcs,
+    recipient: addressBcs,
+  }),
+  AdminRevoked: bcs.struct("AdminRevoked", {
+    admin_cap_id: suiObjectIdBcs,
+    roles,
+  }),
+  AdminRoleGranted: bcs.struct("AdminRoleGranted", {
+    admin_cap_id: suiObjectIdBcs,
+    role: moveTypeNameBcs,
+  }),
+  AdminRoleRevoked: bcs.struct("AdminRoleRevoked", {
+    admin_cap_id: suiObjectIdBcs,
+    role: moveTypeNameBcs,
+  }),
+  AdminDestroyed: bcs.struct("AdminDestroyed", {
+    admin_cap_id: suiObjectIdBcs,
+    roles,
+    was_active: bcs.bool(),
+  }),
+  SuperAdminTransferStarted: bcs.struct("SuperAdminTransferStarted", transfer),
+  SuperAdminTransferCancelled: bcs.struct(
+    "SuperAdminTransferCancelled",
+    transfer,
+  ),
+  SuperAdminTransferred: bcs.struct("SuperAdminTransferred", {
+    previous_super_admin_cap_id: suiObjectIdBcs,
+    new_super_admin_cap_id: suiObjectIdBcs,
+    recipient: addressBcs,
+  }),
+  SuperAdminCapDestroyed: bcs.struct("SuperAdminCapDestroyed", {
+    super_admin_cap_id: suiObjectIdBcs,
+  }),
+};
+
+export type AclEventKind = keyof typeof aclEventBcs;
+
+export type AclEventPayloads = {
+  [Kind in AclEventKind]: ReturnType<(typeof aclEventBcs)[Kind]["parse"]>;
+};
+
+export type DecodedAclEvent = {
+  [Kind in AclEventKind]: {
+    source: "admin";
+    kind: Kind;
+    payload: AclEventPayloads[Kind];
+    sender: string;
+    position: SuiEventPosition;
+  };
+}[AclEventKind];
+
+/** Decodes one `<adminPackageId>::blast_admin_events::<Kind>` ACL event. */
+export function decodeAclEvent(
+  event: SuiClientTypes.EventEntry,
+  adminPackageId: string,
+): DecodedAclEvent {
+  const tag = parseStructTag(event.eventType);
+  if (
+    tag.address !== normalizeSuiAddress(adminPackageId) ||
+    tag.module !== "blast_admin_events" ||
+    tag.typeParams.length > 0 ||
+    !Object.hasOwn(aclEventBcs, tag.name)
+  ) {
+    throw new TypeError(`unexpected ACL event type ${event.eventType}`);
+  }
+  const kind = tag.name as AclEventKind;
+  return {
+    source: "admin",
+    kind,
+    payload: aclEventBcs[kind].parse(event.bcs),
+    sender: normalizeSuiAddress(event.sender),
+    position: normalizeSuiEventPosition(event),
+  } as DecodedAclEvent;
+}
+
+export function aclEventId(event: DecodedAclEvent): string {
+  return suiEventId(event.position);
+}

package/src/index.ts

@@ -0,0 +1,4 @@
+export * from "./events.ts";
+export * from "./reducer.ts";
+export * from "./state.ts";
+export * from "./transactions.ts";

package/src/reducer.ts

@@ -0,0 +1,97 @@
+import type { AclEventKind, DecodedAclEvent } from "./events.ts";
+import { aclEventBcs, aclEventId } from "./events.ts";
+import type { PendingSuperAdmin } from "./state.ts";
+
+/**
+ * The ACL rebuilt from its events. Its `init` emits nothing, so
+ * `superAdminCapId` stays null until the first accepted transfer; the publish
+ * effects name the first root. `admins` matches `AclState.admins` once every
+ * event is applied.
+ */
+export type AclProjection = {
+  appliedEventIds: Readonly<Record<string, true>>;
+  eventCounts: Readonly<Record<AclEventKind, number>>;
+  superAdminCapId: string | null;
+  admins: Readonly<Record<string, readonly string[]>>;
+  pendingSuperAdmin: PendingSuperAdmin | null;
+};
+
+export function createAclProjection(): AclProjection {
+  return {
+    appliedEventIds: {},
+    eventCounts: Object.fromEntries(
+      Object.keys(aclEventBcs).map((kind) => [kind, 0]),
+    ) as Record<AclEventKind, number>,
+    superAdminCapId: null,
+    admins: {},
+    pendingSuperAdmin: null,
+  };
+}
+
+/** Applies one event once; replaying an applied event returns `state` unchanged. */
+export function reduceAclEvent(
+  state: AclProjection,
+  event: DecodedAclEvent,
+): AclProjection {
+  const eventId = aclEventId(event);
+  if (state.appliedEventIds[eventId]) return state;
+  const next: AclProjection = {
+    ...state,
+    appliedEventIds: { ...state.appliedEventIds, [eventId]: true },
+    eventCounts: {
+      ...state.eventCounts,
+      [event.kind]: state.eventCounts[event.kind] + 1,
+    },
+  };
+  switch (event.kind) {
+    case "AdminGranted":
+      return withRoles(next, event.payload.admin_cap_id, []);
+    case "AdminRevoked":
+    case "AdminDestroyed":
+      return withRoles(next, event.payload.admin_cap_id, null);
+    case "AdminRoleGranted": {
+      const { admin_cap_id, role } = event.payload;
+      const roles = next.admins[admin_cap_id] ?? [];
+      return withRoles(next, admin_cap_id, [...roles, role]);
+    }
+    case "AdminRoleRevoked": {
+      const { admin_cap_id, role } = event.payload;
+      const roles = next.admins[admin_cap_id] ?? [];
+      return withRoles(
+        next,
+        admin_cap_id,
+        roles.filter((held) => held !== role),
+      );
+    }
+    case "SuperAdminTransferStarted":
+      return {
+        ...next,
+        pendingSuperAdmin: {
+          recipient: event.payload.recipient,
+          executeAfterMs: event.payload.execute_after_ms,
+        },
+      };
+    case "SuperAdminTransferCancelled":
+      return { ...next, pendingSuperAdmin: null };
+    case "SuperAdminTransferred":
+      return {
+        ...next,
+        superAdminCapId: event.payload.new_super_admin_cap_id,
+        pendingSuperAdmin: null,
+      };
+    case "SuperAdminCapDestroyed":
+      return next;
+  }
+}
+
+function withRoles(
+  state: AclProjection,
+  adminCapId: string,
+  roles: readonly string[] | null,
+): AclProjection {
+  const { [adminCapId]: _, ...admins } = state.admins;
+  return {
+    ...state,
+    admins: roles === null ? admins : { ...admins, [adminCapId]: roles },
+  };
+}

package/src/state.ts

@@ -0,0 +1,102 @@
+import {
+  addressBcs,
+  moveTypeNameBcs,
+  suiObjectIdBcs,
+  suiUidBcs,
+} from "@interest-protocol/blast-core/bcs";
+import { normalizePositiveU64 } from "@interest-protocol/blast-core/integers";
+import type { SharedObjectIdentity } from "@interest-protocol/blast-core/sui";
+import { timelockedBcs } from "@interest-protocol/blast-core/timelock";
+import { bcs } from "@mysten/sui/bcs";
+import type { ClientWithCoreApi } from "@mysten/sui/client";
+import { normalizeSuiObjectId, parseStructTag } from "@mysten/sui/utils";
+
+/** BCS layout of `blast_admin::blast_acl::ACL`. */
+export const aclBcs = bcs.struct("ACL", {
+  id: suiUidBcs,
+  super_admin_cap_id: suiObjectIdBcs,
+  admins: bcs.vector(
+    bcs.struct("Entry", {
+      key: suiObjectIdBcs,
+      value: bcs.vector(moveTypeNameBcs),
+    }),
+  ),
+  pending_super_admin: timelockedBcs(bcs.option(addressBcs)),
+});
+
+/** A nominated super admin, who may accept from `executeAfterMs`. */
+export type PendingSuperAdmin = { recipient: string; executeAfterMs: bigint };
+
+export type AclState = SharedObjectIdentity & {
+  /** The one live `SuperAdminCap`. */
+  superAdminCapId: string;
+  /** Every live `AdminCap` and the role types it holds. */
+  admins: Readonly<Record<string, readonly string[]>>;
+  pendingSuperAdmin: PendingSuperAdmin | null;
+};
+
+export type AclObject = SharedObjectIdentity & {
+  type: string;
+  content: Uint8Array;
+};
+
+export function decodeAclObject(
+  object: AclObject,
+  adminPackageId: string,
+): AclState {
+  const tag = parseStructTag(object.type);
+  if (
+    tag.address !== normalizeSuiObjectId(adminPackageId) ||
+    tag.module !== "blast_acl" ||
+    tag.name !== "ACL"
+  ) {
+    throw new TypeError(`object ${object.objectId} is not the Blast ACL`);
+  }
+  const parsed = aclBcs.parse(object.content);
+  const objectId = normalizeSuiObjectId(object.objectId);
+  if (normalizeSuiObjectId(parsed.id.id.bytes) !== objectId) {
+    throw new TypeError(`ACL ${object.objectId} has a mismatched UID`);
+  }
+  const nominee = parsed.pending_super_admin.after;
+  return {
+    objectId,
+    initialSharedVersion: normalizePositiveU64(
+      "initialSharedVersion",
+      object.initialSharedVersion,
+    ),
+    superAdminCapId: parsed.super_admin_cap_id,
+    admins: Object.fromEntries(
+      parsed.admins.map(({ key, value }) => [key, value]),
+    ),
+    pendingSuperAdmin:
+      nominee == null
+        ? null
+        : {
+            recipient: nominee,
+            executeAfterMs: parsed.pending_super_admin.atMs,
+          },
+  };
+}
+
+export async function getAcl(
+  client: ClientWithCoreApi,
+  objectId: string,
+  adminPackageId: string,
+): Promise<AclState> {
+  const { object } = await client.core.getObject({
+    objectId,
+    include: { content: true },
+  });
+  if (object.owner.$kind !== "Shared") {
+    throw new TypeError(`ACL ${object.objectId} is not a shared object`);
+  }
+  return decodeAclObject(
+    {
+      objectId: object.objectId,
+      initialSharedVersion: object.owner.Shared.initialSharedVersion,
+      type: object.type,
+      content: object.content,
+    },
+    adminPackageId,
+  );
+}