@calimero-network/mero-js 16.0.0 → 17.0.0

package/dist/index.mjs

@@ -2767,7 +2767,7 @@ async function accountForRoot(rootSecret) {
 }
 
 // src/namespace-op/namespace-op.ts
-var SIGNED_NAMESPACE_OP_SCHEMA_VERSION = 7;
+var SIGNED_NAMESPACE_OP_SCHEMA_VERSION = 8;
 var NAMESPACE_SIGN_DOMAIN = new TextEncoder().encode("calimero.namespace.v1");
 var NAMESPACE_OP_ROOT = 0;
 var ROOT_OP = {
@@ -2802,16 +2802,10 @@ function borshString(value) {
   const bytes = new TextEncoder().encode(value);
   return concat(u32le(bytes.length), bytes);
 }
-function encodeAdmitterHint(hint) {
-  if ("multiaddr" in hint) {
-    return concat(new Uint8Array([0]), borshString(hint.multiaddr));
-  }
-  return concat(new Uint8Array([1]), borshString(hint.url));
-}
 function encodeSignedInvitation(signed) {
   const body = signed.invitation;
   const admitters = body.admitters ?? [];
-  const hints = signed.admitter_hints ?? [];
+  const admitterAddrs = signed.admitter_addrs ?? [];
   return concat(
     // GroupInvitationFromAdmin.
     //
@@ -2826,12 +2820,17 @@ function encodeSignedInvitation(signed) {
     u32le(admitters.length),
     ...admitters.map((a, i) => fromHex(a, `admitters[${i}]`, 32)),
     // ...then the enclosing SignedGroupOpenInvitation, in declaration order.
-    // `inviter_account` sits between the signature and the hints; putting it
+    // `inviter_account` sits between the signature and the addresses; putting it
     // anywhere else still encodes 32 bytes and still verifies as nothing.
     borshString(signed.inviter_signature),
     signed.inviter_account ? concat(new Uint8Array([1]), fromHex(signed.inviter_account, "inviter_account", 32)) : new Uint8Array([0]),
-    u32le(hints.length),
-    ...hints.map(encodeAdmitterHint),
+    // A `Vec<String>`, so each entry is a bare borsh string. This carried an
+    // enum until core dropped the URL variant, and an enum writes a
+    // discriminant byte ahead of each entry — encoding one here now would shift
+    // every following byte and fail as `invalid invitation signature`, pointing
+    // nowhere near this line.
+    u32le(admitterAddrs.length),
+    ...admitterAddrs.map(borshString),
     optionalBytes32(signed.application_id, "application_id"),
     // Borsh order follows core's field order, where this is `bytecode_id`; the
     // JSON key is `app_key`, a rename covering both directions that core pins in
@@ -2872,7 +2871,8 @@ async function signMemberJoinOp(input) {
   const signature = new Uint8Array(
     await crypto.subtle.sign("Ed25519", key, concat(NAMESPACE_SIGN_DOMAIN, signable))
   );
-  return hex(concat(signable, signature));
+  const unendorsed = new Uint8Array([0]);
+  return hex(concat(signable, signature, unendorsed));
 }
 
 // src/capabilities.ts