…p ui-types

Migrate Stellar adapter from generic indexerUri to the feature-specific
accessControlIndexerUrl field on BaseNetworkConfig. Update builder app
config export to prefer accessControlIndexerUrl with indexerUri fallback.
Bump @openzeppelin/ui-types to ^1.7.0 across adapter-stellar,
adapter-evm-core, adapter-evm, and builder. Add EVM-only
HistoryChangeType mappings to Stellar indexer client (mapped to UNKNOWN).
Remove temporary type augmentation files.

Update spec, quickstart, data model, and tasks to reflect
accessControlIndexerUrl migration from EvmNetworkConfig to
BaseNetworkConfig, Stellar adapter migration, and phase 0 completion.

Create shared infrastructure for the EVM access control module:
- Directory structure mirroring Stellar adapter layout
- Constants (DEFAULT_ADMIN_ROLE, ZERO_ADDRESS)
- Types (EvmAccessControlContext, EvmTransactionExecutor)
- ABI fragments for all OZ access control functions (22 ABIs)
- Feature detection signature constants for capability analysis
- T004 skipped: accessControlIndexerUrl already in ui-types@1.7.0

Add input validation for the access control module:
- validateAddress: reuses existing isValidEvmAddress, throws
  ConfigurationInvalid with contextual paramName
- validateRoleId: bytes32 hex format validation
- validateRoleIds: array validation with deduplication
- 41 tests covering addresses, role IDs, and error messages
- Update tsconfig to include test/ for IDE resolution

…on (phase 3)

Implement feature detection via ABI analysis (checking function names
AND parameter types) and the EvmAccessControlService class with
registerContract, addKnownRoleIds, getCapabilities, and dispose.
Includes 68 tests (37 feature-detection + 31 service).

…phase 4)

Implement on-chain reader (readOwnership, getAdmin via viem),
EvmIndexerClient (GraphQL queries for pending transfers), and
service methods (getOwnership, getAdminInfo) with indexer
enrichment and graceful degradation. State mapping: owned,
pending, renounced — never expired for EVM (FR-023).

…e 5)

Implement role reading and enrichment for AccessControl contracts:
- onchain-reader: hasRole, enumerateRoleMembers, readCurrentRoles,
  getRoleAdmin, getCurrentBlock
- indexer-client: queryLatestGrants for grant metadata enrichment
- service: getCurrentRoles (enumeration/knownRoleIds/hasRole fallback),
  getCurrentRolesEnriched with graceful degradation (FR-017)
- Tests for all three modules covering enumeration, known role IDs,
  DEFAULT_ADMIN_ROLE labeling, and partial enrichment failures

…phase 7)

Implement admin transfer, accept, cancel, delay change, and delay
rollback for AccessControlDefaultAdminRules contracts.

Actions module (actions.ts):
- assembleBeginAdminTransferAction
- assembleAcceptAdminTransferAction
- assembleCancelAdminTransferAction
- assembleChangeAdminDelayAction (uint48 parameter)
- assembleRollbackAdminDelayAction

Service methods (service.ts):
- transferAdminRole, acceptAdminTransfer, cancelAdminTransfer,
  changeAdminDelay, rollbackAdminDelay
- ensureHasTwoStepAdmin capability guard (FR-024)

Tests: 46 new tests (15 action + 31 service) — 386 total passing.

…hase 8)

Implement role management write operations for EVM AccessControl contracts:

- assembleGrantRoleAction, assembleRevokeRoleAction, assembleRenounceRoleAction
  in actions.ts with single-function ABI fragments
- grantRole(), revokeRole(), renounceRole() in service.ts with full input
  validation (address + bytes32 role ID) and executeTransaction delegation
- renounceRole is EVM-specific (Stellar uses revokeRole for self-revocation)
- 48 new tests covering action assembly and service method behavior

All 428 tests pass. US4+US5+US6 complete — all P2 write operations functional.

Implement historical event queries with filtering and pagination via
the indexer. Maps all 13 EVM event types to HistoryChangeType (R6).
Graceful degradation returns empty result when indexer is unavailable.

…se 10)

Implement exportSnapshot() combining getCurrentRoles() + getOwnership()
with graceful degradation for non-Ownable contracts. Validates snapshot
structure via validateSnapshot(). Adds 15 TDD tests covering all US8
acceptance scenarios, parity checks, and edge cases.

…e 11)

Implement role discovery from indexer historical events (US9):
- Add discoverRoleIds() to EvmIndexerClient with DiscoverRoles
  GraphQL query extracting unique role IDs from events
- Replace discoverKnownRoleIds() stub with full implementation:
  caching, knownRoleIds precedence, single-attempt flag
- Update attemptRoleDiscovery() to delegate to indexer discovery
- Add 21 tests covering discovery, caching, graceful degradation

Wire the EVM access control module into adapter packages:
- Create barrel exports in adapter-evm-core/src/access-control/index.ts
- Re-export access control module from adapter-evm-core/src/index.ts
- Add accessControlIndexerUrl to all mainnet and testnet network configs
- Implement lazy getAccessControlService() in EvmAdapter with
  executeTransaction callback wrapping signAndBroadcast
- Add integration test covering lazy init, service interface,
  full register-capabilities-ownership flow, and callback wiring

Add minor changesets for adapter-evm-core (access control module) and
adapter-evm (getAccessControlService + indexer URLs). Mark Phase 13
tasks complete: test suite validation, quickstart verification, TODO
review, and API parity check.

Add env-var-gated integration tests for the EVM indexer client
against real SubQuery indexers on Sepolia. Tests cover connectivity,
history queries with filtering/pagination, role discovery, latest
grants, pending transfers, data integrity, and contract-specific
verification for AccessControlMock, OwnableMock, Ownable2StepMock,
and CombinedMock contracts. All tests skip gracefully when
INDEXER_URL is not set.

validateRoleId trimmed whitespace internally but returned void,
causing callers (grantRole, revokeRole, renounceRole) to pass
untrimmed role IDs to transaction assembly. Now returns the
trimmed string, consistent with validateRoleIds.

queryLatestGrants keyed the grant map by account address only,
causing cross-role metadata contamination when an account holds
multiple roles. Switch to a composite role:account key via the
new grantMapKey() helper and update getCurrentRolesEnriched to
use the same composite lookup.

… control

- Well-known role dictionary and resolveRoleLabel(); ABI-based role discovery
- addKnownRoleIds() accepts { id, label } pairs; roleLabelMap in context
- Thread roleLabelMap through readCurrentRoles(), queryHistory(), resolveRoleFromEvent()
- Add constants, role-discovery, and service tests for label resolution

… frontmatter

…scovery

- Guard ensureAbiRoleLabels with has() check so addKnownRoleIds labels win
- Batch role discovery RPC calls with Promise.allSettled for lower latency
- Simplify hash normalization in discoverRoleLabelsFromAbi
- Add test: external label survives conflicting ABI discovery result

Consolidate three independent createPublicClient call sites into a
single createEvmPublicClient utility in utils/public-client.ts.

Access control service was using networkConfig.rpcUrl directly,
bypassing the RPC resolution priority (user config > app override >
default). All 4 on-chain read call sites now use resolveRpcUrl().

…sitive dedup

validateRoleId() now lowercases hex after validation, ensuring Set-based
deduplication and Map lookups are case-insensitive. validateRoleIds()
reuses validated output instead of raw trim for consistency.

…ites

Add 20 new tests for human-readable role label resolution:
- onchain-reader: roleLabelMap resolution, well-known fallback, precedence
- indexer-client: label propagation through queryHistory events
- role-discovery: on-chain constant calls, graceful failure, normalization
- service: label threading through getCurrentRoles, getHistory, exportSnapshot
- indexer-integration: real indexer label resolution with well-known and
  custom labels, ownership sentinel handling, role discovery labeling

Fix two pre-existing integration test assumptions:
- Use changeType sentinel check instead of label presence for role filtering
- Use composite role:account keys for grantMap lookups

…le contracts

For contracts without AccessControlEnumerable, on-chain reads cannot
enumerate who holds each role. Both getCurrentRoles() and
getCurrentRolesEnriched() now query the indexer's roleMemberships
to populate member arrays when on-chain enumeration is unavailable.

…tests

Cover getCurrentRoles and getCurrentRolesEnriched behavior for
non-enumerable contracts that rely on indexer-based member discovery:
- populate members from indexer grants for non-enumerable contracts
- leave members empty when indexer is unavailable
- leave members empty when indexer query fails
- skip indexer for enumerable contracts with existing members
- enriched variant with grant metadata from indexer
- enriched fallback when indexer unavailable or query fails

…ice methods

Validate hasOwnable before getOwnership() and hasTwoStepAdmin before
getAdminInfo() to prevent confusing on-chain reverts when called on
contracts missing the required interfaces.

…ce methods

Validate hasOwnable before getOwnership() and hasTwoStepAdmin before
getAdminInfo()/getAdminAccount() to prevent confusing on-chain errors
when called on contracts missing the required interfaces. Checks are
soft — skipped when the contract is not registered to preserve backward
compatibility.