Encrypt Sui data client-side with Move-defined onchain access policies.
npx skills add https://github.com/widnyana/eyay-toolkits --skill sui-seal-widnyana
Please help me install this Agent Skill. Skill: sui-seal Source: https://github.com/widnyana/eyay-toolkits/tree/main/plugins/sui-dev-tools/skills/sui-seal Command: npx skills add https://github.com/widnyana/eyay-toolkits --skill sui-seal-widnyana
This Skill helps you securely integrate Mysten Labs Seal on Sui so that user data can be encrypted client-side while decryption is automatically gated by Move-defined onchain access policies.
seal_approve*): Defines permissioned decryption flows that must abort on denied access and remain side-effect free for dry-run evaluation.@mysten/seal SDK to encrypt data (typically on Walrus) and to decrypt via key servers after policy checks.fetchKeys): Supports batch decryption to avoid repeated key-server calls when decrypting many blobs.Ask the AI to generate a minimal Move seal_approve* policy module plus the TypeScript code that encrypts data for a chosen identity and decrypts it for an authorized user using a single batched PTB flow.
High-intent search queries and answers about installing and using this skill.
To encrypt user data client-side with onchain-gated decryption, use the Sui Seal framework to encrypt data via the TypeScript SDK and define `seal_approve*` Move policy functions that authorize decryption based on onchain access rules.
Sui Seal envelope encryption wraps a small Seal-encrypted Data Encryption Key around large AES-encrypted payloads. You need it for Walrus blobs to enable key-server rotation without re-encrypting bulk data.
Implement `seal_approve*` Move policy modules as deterministic, side-effect-free entry functions taking an `id: vector<u8>` argument, ensuring they abort on denied access to pass dry-run evaluation constraints.
Fetch decryption keys for multiple encrypted identities in a single batch by using the `@mysten/seal` SDK's `fetchKeys` function within a batched PTB flow, avoiding repeated key-server calls.
Sui Seal dry-run evaluation fails when onchain access policy checks occur if your `seal_approve*` Move entry functions contain side effects, lack determinism, or fail to abort on denied access.
Yes, you can use the `@mysten/seal` TypeScript SDK with a Sui `SessionKey` to manage session-based decryption, enabling secure key server interactions after verifying Move-defined onchain access policies.
widnyanaRoute Sui development tasks to Move, TypeScript SDK, frontend, Seal, and Walrus sub-skills.
LimaTechnologiesGuide developers in implementing Playwright-based end-to-end tests with Page Object Model.
joelhooksEncrypts agent records with AES-GCM and wraps DEKs using X25519 public keys via Web Crypto.
dfinityImplement vetKeys encryption and key derivation for Internet Computer canisters.