@meddleware/seal-ui 0.0.32 → 0.0.33

package/CHANGELOG.md

@@ -3,6 +3,12 @@
 All notable changes to `@meddleware/seal-ui` are documented here.
 Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versioning follows [Semantic Versioning](https://semver.org/).
 
+## [0.0.33] - 2026-10-09
+
+### Changed
+
+- Manifest check validates the policy type and params against the network's registry (seal-client 0.0.19 `parseSealedManifest(text, registry)`); depends on access-gate-client ^0.0.8, seal-client ^0.0.19, ui ^0.1.31, design-tokens ^0.1.9, eslint-config ^0.0.2
+
 ## [0.0.32] - 2026-10-08
 
 ### Changed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meddleware/seal-ui",
-  "version": "0.0.32",
+  "version": "0.0.33",
   "homepage": "https://docs.meddleware.co.uk/blockchain/sui/sealed-storage/",
   "description": "Standalone Vue 3 SPA for Sealed Storage — client-side Seal encryption + access-gated, decentralised Walrus storage on Sui.",
   "author": "MeddleWare <dev@meddleware.co.uk>",
@@ -44,10 +44,10 @@
     "access": "public"
   },
   "dependencies": {
-    "@meddleware/access-gate-client": "^0.0.6",
-    "@meddleware/design-tokens": "^0.1.8",
-    "@meddleware/seal-client": "^0.0.16",
-    "@meddleware/ui": "^0.1.30",
+    "@meddleware/access-gate-client": "^0.0.8",
+    "@meddleware/design-tokens": "^0.1.9",
+    "@meddleware/seal-client": "^0.0.19",
+    "@meddleware/ui": "^0.1.31",
     "@meddleware/walrus-client": "^0.0.26",
     "@mysten/sui": "^2.33.2",
     "@mysten/wallet-standard": "^0.21.0",
@@ -57,7 +57,7 @@
     "@meddleware/wallet-adapter": ">=0.0.12 <0.2.0"
   },
   "devDependencies": {
-    "@meddleware/eslint-config": "^0.0.1",
+    "@meddleware/eslint-config": "^0.0.2",
     "@meddleware/wallet-adapter": "^0.0.13",
     "@types/node": "~24.12.2",
     "@vitejs/plugin-vue": "^6.0.9",

package/src/components/SealView.vue

@@ -242,7 +242,7 @@ const decValues = ref<Record<string, string | boolean>>({})
 // AND enforce that it targets the network this app is built for — a manifest sealed on another
 // network references a package + committee that don't exist here and can never decrypt. The
 // `decManifestError` is surfaced next to the input so a rejection explains itself.
-const decCheck = computed(() => checkManifestForNetwork(decManifestText.value, network.value))
+const decCheck = computed(() => checkManifestForNetwork(decManifestText.value, network.value, registry.value))
 const decManifest = computed<SealedManifest | null>(() => decCheck.value.manifest)
 const decManifestError = computed<string | null>(() => decCheck.value.error)
 const decProvider = computed(() =>

package/src/manifest-guard.ts

@@ -1,4 +1,4 @@
-import { parseSealedManifest, type SealedManifest } from '@meddleware/seal-client'
+import { parseSealedManifest, type PolicyRegistry, type SealedManifest } from '@meddleware/seal-client'
 
 /**
  * Result of validating a pasted/loaded manifest: either the parsed manifest, or a human-readable
@@ -12,8 +12,10 @@ export type ManifestCheck =
  * Validate a manifest string for use on `network`. Rejects a malformed shape (via the shared
  * `parseSealedManifest` schema guard) and a manifest sealed for a different network — the latter
  * references a policy package + key-server committee that don't exist here and can never decrypt.
+ * With the network's policy `registry`, the policy type must be registered and its params must parse,
+ * so a bad manifest fails here instead of at transaction build time.
  */
-export function checkManifestForNetwork(text: string, network: string): ManifestCheck {
+export function checkManifestForNetwork(text: string, network: string, registry?: PolicyRegistry): ManifestCheck {
   if (!text.trim()) return { manifest: null, error: null }
   try {
     const manifest = parseSealedManifest(text)
@@ -23,7 +25,7 @@ export function checkManifestForNetwork(text: string, network: string): Manifest
         error: `This manifest is for '${manifest.network}', but this app is on '${network}'. It cannot be decrypted here.`,
       }
     }
-    return { manifest, error: null }
+    return { manifest: registry ? parseSealedManifest(manifest, registry) : manifest, error: null }
   } catch (e) {
     return { manifest: null, error: e instanceof Error ? e.message : 'Invalid manifest.' }
   }