@interest-protocol/blast-admin-sdk 0.1.0 → 0.2.0

package/src/reducer.ts

@@ -1,15 +1,24 @@
-import type { AclEventKind, DecodedAclEvent } from "./events.ts";
+import type { DelayedChange } from "@interest-protocol/blast-core/bcs";
+import { suiEventId } from "@interest-protocol/blast-core/events";
+import type {
+  AclEventKind,
+  DecodedAclDelayedEvent,
+  DecodedAclEvent,
+  DecodedPackageAdministrationEvent,
+  DecodedUpgradeDelayedEvent,
+} from "./events.ts";
 import { aclEventBcs, aclEventId } from "./events.ts";
-import type { PendingSuperAdmin } from "./state.ts";
+import type { PendingSuperAdmin, UpgradeAction } from "./state.ts";
 
 /**
  * The ACL rebuilt from its events. Its `init` emits nothing, so
  * `superAdminCapId` stays null until the first accepted transfer; the publish
- * effects name the first root. `admins` matches `AclState.admins` once every
+ * effects name the first root. `admins` matches `getAcl(...).admins` once every
  * event is applied.
  */
 export type AclProjection = {
   appliedEventIds: Readonly<Record<string, true>>;
+  /** ACL events by kind; super admin transfer lifecycle events are not counted. */
   eventCounts: Readonly<Record<AclEventKind, number>>;
   superAdminCapId: string | null;
   admins: Readonly<Record<string, readonly string[]>>;
@@ -28,13 +37,36 @@ export function createAclProjection(): AclProjection {
   };
 }
 
-/** Applies one event once; replaying an applied event returns `state` unchanged. */
+/**
+ * Applies one event once; replaying an applied event returns `state` unchanged.
+ * The transfer's `delayed` events come from `decodeAclDelayedEvent`.
+ */
 export function reduceAclEvent(
   state: AclProjection,
-  event: DecodedAclEvent,
+  event: DecodedAclEvent | DecodedAclDelayedEvent,
 ): AclProjection {
   const eventId = aclEventId(event);
   if (state.appliedEventIds[eventId]) return state;
+  if (event.source === "delayed") {
+    const applied = {
+      ...state,
+      appliedEventIds: { ...state.appliedEventIds, [eventId]: true as const },
+    };
+    if (
+      event.kind === "ActionScheduled" &&
+      event.payload.change.kind === "Action"
+    )
+      return {
+        ...applied,
+        pendingSuperAdmin: {
+          recipient: event.payload.change.action,
+          readyAtMs: event.payload.ready_at_ms,
+        },
+      };
+    if (event.kind === "ActionCancelled" || event.kind === "ActionApplied")
+      return { ...applied, pendingSuperAdmin: null };
+    return applied;
+  }
   const next: AclProjection = {
     ...state,
     appliedEventIds: { ...state.appliedEventIds, [eventId]: true },
@@ -63,16 +95,6 @@ export function reduceAclEvent(
         roles.filter((held) => held !== role),
       );
     }
-    case "SuperAdminTransferStarted":
-      return {
-        ...next,
-        pendingSuperAdmin: {
-          recipient: event.payload.recipient,
-          executeAfterMs: event.payload.execute_after_ms,
-        },
-      };
-    case "SuperAdminTransferCancelled":
-      return { ...next, pendingSuperAdmin: null };
     case "SuperAdminTransferred":
       return {
         ...next,
@@ -95,3 +117,123 @@ function withRoles(
     admins: roles === null ? admins : { ...admins, [adminCapId]: roles },
   };
 }
+
+/** One package's administration, rebuilt from its `blast_admin` events. */
+export type PackageAdministration = {
+  packageVersionId: string | null;
+  packageAdminId: string | null;
+  /** The package witness, defining-ID form, pinned at publication. */
+  packageWitness: string | null;
+  version: bigint | null;
+  validPauseBits: number | null;
+  paused: number | null;
+  upgradeCapId: string | null;
+  upgradeCapVersion: bigint | null;
+  policy: number | null;
+  /** True once `make_immutable` destroyed the UpgradeCap. */
+  immutable: boolean;
+  /** The applied delay of upgrade actions; null before `ActionCreated`. */
+  upgradeDelayMs: bigint | null;
+  /** The scheduled upgrade action or delay change, if any. */
+  pendingUpgrade: {
+    change: DelayedChange<UpgradeAction>;
+    delayMs: bigint;
+    readyAtMs: bigint;
+  } | null;
+};
+
+/** Every package's administration by OTW type, from version, pause, upgrade and upgrade-slot events. */
+export type PackageAdministrationProjection = {
+  appliedEventIds: Readonly<Record<string, true>>;
+  packages: Readonly<Record<string, PackageAdministration>>;
+};
+
+export function createPackageAdministrationProjection(): PackageAdministrationProjection {
+  return { appliedEventIds: {}, packages: {} };
+}
+
+const EMPTY_ADMINISTRATION: PackageAdministration = {
+  packageVersionId: null,
+  packageAdminId: null,
+  packageWitness: null,
+  version: null,
+  validPauseBits: null,
+  paused: null,
+  upgradeCapId: null,
+  upgradeCapVersion: null,
+  policy: null,
+  immutable: false,
+  upgradeDelayMs: null,
+  pendingUpgrade: null,
+};
+
+/** Applies one event once; replaying an applied event returns `state` unchanged. */
+export function reducePackageAdministrationEvent(
+  state: PackageAdministrationProjection,
+  event: DecodedPackageAdministrationEvent | DecodedUpgradeDelayedEvent,
+): PackageAdministrationProjection {
+  const eventId = suiEventId(event.position);
+  if (state.appliedEventIds[eventId]) return state;
+  const current = state.packages[event.otw] ?? EMPTY_ADMINISTRATION;
+  return {
+    appliedEventIds: { ...state.appliedEventIds, [eventId]: true },
+    packages: {
+      ...state.packages,
+      [event.otw]: { ...current, ...administrationChange(event) },
+    },
+  };
+}
+
+function administrationChange(
+  event: DecodedPackageAdministrationEvent | DecodedUpgradeDelayedEvent,
+): Partial<PackageAdministration> {
+  if (event.source === "delayed") {
+    switch (event.kind) {
+      case "ActionCreated":
+        return { upgradeDelayMs: event.payload.delay_ms };
+      case "ActionScheduled":
+        return {
+          pendingUpgrade: {
+            change: event.payload.change,
+            delayMs: event.payload.delay_ms,
+            readyAtMs: event.payload.ready_at_ms,
+          },
+        };
+      case "ActionCancelled":
+        return { pendingUpgrade: null };
+      case "ActionApplied":
+        return { pendingUpgrade: null, upgradeDelayMs: event.payload.delay_ms };
+      case "ActionDestroyed":
+        return {};
+    }
+  }
+  switch (event.kind) {
+    case "PackageVersionCreated":
+      return {
+        packageVersionId: event.payload.package_version_id,
+        packageAdminId: event.payload.package_admin_id,
+        packageWitness: event.payload.package_witness,
+        version: event.payload.version,
+        validPauseBits: event.payload.valid_pause_bits,
+        paused: event.payload.paused,
+      };
+    case "PackageAdminCreated":
+      return {
+        packageAdminId: event.payload.package_admin_id,
+        upgradeCapId: event.payload.upgrade_cap_id,
+        upgradeCapVersion: event.payload.upgrade_cap_version,
+        policy: event.payload.policy,
+      };
+    case "VersionAdvanced":
+      return { version: event.payload.new_version };
+    case "Paused":
+    case "Unpaused":
+      return { paused: event.payload.paused };
+    case "UpgradeAuthorized":
+      return {};
+    case "UpgradeCommitted":
+      return { upgradeCapVersion: event.payload.new_upgrade_cap_version };
+    case "UpgradeCapDestroyed":
+      return { immutable: true, upgradeCapId: null };
+  }
+}

package/src/state.ts

@@ -1,37 +1,41 @@
+import type { DelayedAction } from "@interest-protocol/blast-core/bcs";
 import {
   addressBcs,
+  delayedActionBcs,
   moveTypeNameBcs,
   suiObjectIdBcs,
   suiUidBcs,
+  u64Bcs,
+  unitKeyBcs,
 } from "@interest-protocol/blast-core/bcs";
 import { normalizePositiveU64 } from "@interest-protocol/blast-core/integers";
 import type { SharedObjectIdentity } from "@interest-protocol/blast-core/sui";
-import { timelockedBcs } from "@interest-protocol/blast-core/timelock";
 import { bcs } from "@mysten/sui/bcs";
 import type { ClientWithCoreApi } from "@mysten/sui/client";
-import { normalizeSuiObjectId, parseStructTag } from "@mysten/sui/utils";
+import { ObjectError } from "@mysten/sui/client";
+import {
+  normalizeStructTag,
+  normalizeSuiObjectId,
+  parseStructTag,
+} from "@mysten/sui/utils";
+import type { AdminDeployment } from "./transactions.ts";
 
 /** BCS layout of `blast_admin::blast_acl::ACL`. */
 export const aclBcs = bcs.struct("ACL", {
   id: suiUidBcs,
   super_admin_cap_id: suiObjectIdBcs,
-  admins: bcs.vector(
-    bcs.struct("Entry", {
-      key: suiObjectIdBcs,
-      value: bcs.vector(moveTypeNameBcs),
-    }),
-  ),
-  pending_super_admin: timelockedBcs(bcs.option(addressBcs)),
+  admins: bcs.struct("Table", { id: suiUidBcs, size: u64Bcs }),
+  super_admin_transfer: delayedActionBcs(unitKeyBcs, addressBcs),
 });
 
-/** A nominated super admin, who may accept from `executeAfterMs`. */
-export type PendingSuperAdmin = { recipient: string; executeAfterMs: bigint };
+/** A nominated super admin, who may accept from `readyAtMs`. */
+export type PendingSuperAdmin = { recipient: string; readyAtMs: bigint };
 
 export type AclState = SharedObjectIdentity & {
   /** The one live `SuperAdminCap`. */
   superAdminCapId: string;
-  /** Every live `AdminCap` and the role types it holds. */
-  admins: Readonly<Record<string, readonly string[]>>;
+  adminsTableId: string;
+  adminCount: bigint;
   pendingSuperAdmin: PendingSuperAdmin | null;
 };
 
@@ -48,16 +52,20 @@ export function decodeAclObject(
   if (
     tag.address !== normalizeSuiObjectId(adminPackageId) ||
     tag.module !== "blast_acl" ||
-    tag.name !== "ACL"
+    tag.name !== "ACL" ||
+    tag.typeParams.length !== 0
   ) {
     throw new TypeError(`object ${object.objectId} is not the Blast ACL`);
   }
   const parsed = aclBcs.parse(object.content);
   const objectId = normalizeSuiObjectId(object.objectId);
-  if (normalizeSuiObjectId(parsed.id.id.bytes) !== objectId) {
+  if (
+    normalizeSuiObjectId(parsed.id.id.bytes) !== objectId ||
+    parsed.super_admin_transfer.parent !== objectId
+  ) {
     throw new TypeError(`ACL ${object.objectId} has a mismatched UID`);
   }
-  const nominee = parsed.pending_super_admin.after;
+  const proposal = parsed.super_admin_transfer.pending;
   return {
     objectId,
     initialSharedVersion: normalizePositiveU64(
@@ -65,16 +73,12 @@ export function decodeAclObject(
       object.initialSharedVersion,
     ),
     superAdminCapId: parsed.super_admin_cap_id,
-    admins: Object.fromEntries(
-      parsed.admins.map(({ key, value }) => [key, value]),
-    ),
+    adminsTableId: normalizeSuiObjectId(parsed.admins.id.id.bytes),
+    adminCount: parsed.admins.size,
     pendingSuperAdmin:
-      nominee == null
-        ? null
-        : {
-            recipient: nominee,
-            executeAfterMs: parsed.pending_super_admin.atMs,
-          },
+      proposal?.value.kind === "Action"
+        ? { recipient: proposal.value.action, readyAtMs: proposal.ready_at_ms }
+        : null,
   };
 }
 
@@ -82,7 +86,7 @@ export async function getAcl(
   client: ClientWithCoreApi,
   objectId: string,
   adminPackageId: string,
-): Promise<AclState> {
+): Promise<AclState & { admins: Readonly<Record<string, readonly string[]>> }> {
   const { object } = await client.core.getObject({
     objectId,
     include: { content: true },
@@ -90,7 +94,7 @@ export async function getAcl(
   if (object.owner.$kind !== "Shared") {
     throw new TypeError(`ACL ${object.objectId} is not a shared object`);
   }
-  return decodeAclObject(
+  const state = decodeAclObject(
     {
       objectId: object.objectId,
       initialSharedVersion: object.owner.Shared.initialSharedVersion,
@@ -99,4 +103,320 @@ export async function getAcl(
     },
     adminPackageId,
   );
+  const admins: Record<string, readonly string[]> = {};
+  let cursor: string | null = null;
+  const seen = new Set<string>();
+  for (let page = 0; page < 100; page++) {
+    const response = await client.core.listDynamicFields({
+      parentId: state.adminsTableId,
+      cursor,
+      limit: 50,
+    });
+    await appendAclAdmins(
+      client,
+      state.adminsTableId,
+      response.dynamicFields,
+      admins,
+    );
+    if (!response.hasNextPage) {
+      if (BigInt(Object.keys(admins).length) !== state.adminCount)
+        throw new TypeError("ACL changed during enumeration; retry the read");
+      return { ...state, admins };
+    }
+    if (!response.cursor || seen.has(response.cursor))
+      throw new TypeError("ACL pagination did not advance");
+    seen.add(response.cursor);
+    cursor = response.cursor;
+  }
+  throw new RangeError(
+    "ACL enumeration exceeds 100 pages; use getAclAdminRoles for targeted reads",
+  );
+}
+
+async function appendAclAdmins(
+  client: ClientWithCoreApi,
+  adminsTableId: string,
+  fields: readonly { $kind: string; name: { type: string; bcs: Uint8Array } }[],
+  admins: Record<string, readonly string[]>,
+): Promise<void> {
+  for (const field of fields) {
+    if (
+      field.$kind !== "DynamicField" ||
+      normalizeStructTag(field.name.type) !==
+        normalizeStructTag("0x2::object::ID")
+    )
+      throw new TypeError("ACL contains an unexpected dynamic field");
+    const id = suiObjectIdBcs.parse(field.name.bcs);
+    if (id in admins) throw new TypeError("duplicate ACL administrator");
+    const roles = await getAclAdminRoles(client, adminsTableId, id);
+    if (roles === null)
+      throw new TypeError("ACL changed during enumeration; retry the read");
+    admins[id] = roles;
+  }
+}
+
+/** Reads one Table entry. Only an absent field means the cap has no roles. */
+export async function getAclAdminRoles(
+  client: ClientWithCoreApi,
+  adminsTableId: string,
+  adminCapId: string,
+  options: { signal?: AbortSignal } = {},
+): Promise<readonly string[] | null> {
+  try {
+    const { dynamicField } = await client.core.getDynamicField({
+      ...options,
+      parentId: normalizeSuiObjectId(adminsTableId),
+      name: aclAdminFieldName(adminCapId),
+    });
+    return decodeAclAdminRolesField(dynamicField, adminCapId);
+  } catch (error) {
+    if (error instanceof ObjectError && error.reason === "notFound")
+      return null;
+    throw error;
+  }
+}
+
+const asciiBytesBcs = bcs.vector(bcs.u8()).transform({
+  input: (value: string) => Array.from(new TextEncoder().encode(value)),
+  output: (bytes) => new TextDecoder().decode(Uint8Array.from(bytes)),
+});
+
+/** `0x2::package::Publisher`; `package` and `module_name` are ASCII strings. */
+export const publisherBcs = bcs.struct("Publisher", {
+  id: suiUidBcs,
+  package: asciiBytesBcs,
+  module_name: asciiBytesBcs,
+});
+
+/** `0x2::package::UpgradeCap`. */
+export const upgradeCapBcs = bcs.struct("UpgradeCap", {
+  id: suiUidBcs,
+  package: suiObjectIdBcs,
+  version: u64Bcs,
+  policy: bcs.u8(),
+});
+
+/** `blast_admin::package_admin::UpgradeAction`. */
+export const upgradeActionBcs = bcs.enum("UpgradeAction", {
+  Upgrade: bcs.vector(bcs.u8()),
+  MakeImmutable: null,
+});
+export type UpgradeAction = ReturnType<typeof upgradeActionBcs.parse>;
+
+/**
+ * `blast_admin::package_version::PackageVersion<OTW>`: one package's
+ * version and pause bits. The `OTW` is phantom: only the object type names it.
+ */
+export const packageVersionBcs = bcs.struct("PackageVersion", {
+  id: suiUidBcs,
+  valid_pause_bits: bcs.u8(),
+  paused: bcs.u8(),
+  package_witness: moveTypeNameBcs,
+  version: u64Bcs,
+});
+
+/**
+ * `blast_admin::package_admin::PackageAdmin<OTW>`: the sealed Publisher and
+ * UpgradeCap and the delayed upgrade slot keyed by `UpgradeKey<OTW>`.
+ */
+export const packageAdminBcs = bcs.struct("PackageAdmin", {
+  id: suiUidBcs,
+  publisher: publisherBcs,
+  upgrade_cap: bcs.option(upgradeCapBcs),
+  upgrade: delayedActionBcs(unitKeyBcs, upgradeActionBcs),
+});
+
+/** `blast_admin::package_version::Publication<OTW>`: the deployer's owned proof before `wrap`. */
+export const publicationBcs = bcs.struct("Publication", {
+  id: suiUidBcs,
+  publisher: publisherBcs,
+  valid_pause_bits: bcs.u8(),
+  package_witness: moveTypeNameBcs,
+});
+
+/** The package an administration object belongs to, by its one-time witness type. */
+export type PackageIdentity = {
+  admin: Pick<AdminDeployment, "packageId">;
+  /** The package's OTW type, original package ID form. */
+  otw: string;
+};
+
+export type PackageVersionState = SharedObjectIdentity & {
+  otw: string;
+  validPauseBits: number;
+  paused: number;
+  /** The package witness type, defining-ID form, pinned at publication. */
+  packageWitness: string;
+  version: bigint;
+};
+
+export type PackageAdminState = SharedObjectIdentity & {
+  otw: string;
+  publisherId: string;
+  /** Null once the package is immutable. */
+  upgradeCap: {
+    id: string;
+    package: string;
+    version: bigint;
+    policy: number;
+  } | null;
+  /** The applied delay of upgrade actions and delay changes. */
+  delayMs: bigint;
+  /** The proposed upgrade action or delay change, if any. */
+  pending: DelayedAction<null, UpgradeAction>["pending"];
+};
+
+/** Decodes a `PackageVersion<otw>`; any other package's version is rejected. */
+export function decodePackageVersionObject(
+  object: AclObject,
+  identity: PackageIdentity,
+): PackageVersionState {
+  const otw = assertPackageObjectType(
+    object,
+    identity,
+    "package_version",
+    "PackageVersion",
+  );
+  const parsed = packageVersionBcs.parse(object.content);
+  return {
+    ...adminIdentity(object, parsed.id.id.bytes),
+    otw,
+    validPauseBits: parsed.valid_pause_bits,
+    paused: parsed.paused,
+    packageWitness: parsed.package_witness,
+    version: parsed.version,
+  };
+}
+
+/** Decodes a `PackageAdmin<otw>`; any other package's administration is rejected. */
+export function decodePackageAdminObject(
+  object: AclObject,
+  identity: PackageIdentity,
+): PackageAdminState {
+  const otw = assertPackageObjectType(
+    object,
+    identity,
+    "package_admin",
+    "PackageAdmin",
+  );
+  const parsed = packageAdminBcs.parse(object.content);
+  if (parsed.upgrade.parent !== normalizeSuiObjectId(parsed.id.id.bytes))
+    throw new TypeError("administration object UID mismatch");
+  const cap = parsed.upgrade_cap;
+  return {
+    ...adminIdentity(object, parsed.id.id.bytes),
+    otw,
+    publisherId: normalizeSuiObjectId(parsed.publisher.id.id.bytes),
+    upgradeCap: cap && {
+      id: normalizeSuiObjectId(cap.id.id.bytes),
+      package: cap.package,
+      version: cap.version,
+      policy: cap.policy,
+    },
+    delayMs: parsed.upgrade.delay_ms,
+    pending: parsed.upgrade.pending,
+  };
+}
+
+function assertPackageObjectType(
+  object: AclObject,
+  identity: PackageIdentity,
+  module: string,
+  name: string,
+): string {
+  const otw = normalizeStructTag(identity.otw);
+  if (
+    normalizeStructTag(object.type) !==
+    normalizeStructTag(
+      `${normalizeSuiObjectId(identity.admin.packageId)}::${module}::${name}<${otw}>`,
+    )
+  )
+    throw new TypeError(`unexpected administration object ${object.objectId}`);
+  return otw;
+}
+
+function adminIdentity(object: AclObject, id: string): SharedObjectIdentity {
+  const objectId = normalizeSuiObjectId(object.objectId);
+  if (normalizeSuiObjectId(id) !== objectId)
+    throw new TypeError("administration object UID mismatch");
+  return {
+    objectId,
+    initialSharedVersion: normalizePositiveU64(
+      "initialSharedVersion",
+      object.initialSharedVersion,
+    ),
+  };
+}
+
+export function aclAdminFieldName(adminCapId: string) {
+  return {
+    type: normalizeStructTag("0x2::object::ID"),
+    bcs: suiObjectIdBcs.serialize(adminCapId).toBytes(),
+  };
+}
+
+/** Decodes the targeted Table read separately from transport/provider accounting. */
+export function decodeAclAdminRolesField(
+  dynamicField: {
+    name: { type: string; bcs: Uint8Array };
+    value: { type: string; bcs: Uint8Array };
+  },
+  adminCapId: string,
+): readonly string[] {
+  if (
+    normalizeStructTag(dynamicField.name.type) !==
+      normalizeStructTag("0x2::object::ID") ||
+    suiObjectIdBcs.parse(dynamicField.name.bcs) !==
+      normalizeSuiObjectId(adminCapId)
+  )
+    throw new TypeError("ACL role field has an unexpected cap ID");
+  if (
+    normalizeStructTag(dynamicField.value.type) !==
+    normalizeStructTag("0x2::vec_set::VecSet<0x1::type_name::TypeName>")
+  ) {
+    throw new TypeError("ACL role field has an unexpected value type");
+  }
+  return bcs.vector(moveTypeNameBcs).parse(dynamicField.value.bcs);
+}
+
+export async function getPackageVersion(
+  client: ClientWithCoreApi,
+  objectId: string,
+  identity: PackageIdentity,
+): Promise<PackageVersionState> {
+  return decodePackageVersionObject(
+    await readAdministrationObject(client, objectId),
+    identity,
+  );
+}
+
+export async function getPackageAdmin(
+  client: ClientWithCoreApi,
+  objectId: string,
+  identity: PackageIdentity,
+): Promise<PackageAdminState> {
+  return decodePackageAdminObject(
+    await readAdministrationObject(client, objectId),
+    identity,
+  );
+}
+
+async function readAdministrationObject(
+  client: ClientWithCoreApi,
+  objectId: string,
+): Promise<AclObject> {
+  const { object } = await client.core.getObject({
+    objectId,
+    include: { content: true },
+  });
+  if (object.owner.$kind !== "Shared")
+    throw new TypeError(
+      `administration object ${object.objectId} is not shared`,
+    );
+  return {
+    objectId: object.objectId,
+    initialSharedVersion: object.owner.Shared.initialSharedVersion,
+    type: object.type,
+    content: object.content,
+  };
 }