@calimero-network/mero-js 18.1.0 → 18.2.0

package/dist/admin-api/admin-client.d.ts

@@ -1,5 +1,5 @@
 import { HttpClient } from '../http-client/index.js';
-import type { HealthStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextRequest, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, InviteSpecializedNodeRequest, InviteSpecializedNodeResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceRequest, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NamespaceIdentity, NodeIdentity, AccountPairInitRequest, AccountPairInitResponseData, AccountPairCompleteRequest, AccountPairCompleteResponseData, RelinkDeviceRequest, RelinkDeviceResponseData, AccountDeviceEntry, AccountApplicationEntry, RevokeAccountDeviceRequest, RevokeAccountDeviceResponseData, GroupInfoResponseData, DeleteGroupRequest, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupRequest, SyncGroupResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, CascadeStatusEntry, RetryGroupUpgradeRequest, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, DetachContextFromGroupRequest, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, TeeVerifyQuoteRequest, TeeVerifyQuoteResponseData, PerformIntentRequest, PerformIntentResponseData, AdmitJoinRequest, AdmitJoinResponseData } from './admin-types.js';
+import type { HealthStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, InviteSpecializedNodeRequest, InviteSpecializedNodeResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NamespaceIdentity, NodeIdentity, AccountPairInitRequest, AccountPairInitResponseData, AccountPairCompleteRequest, AccountPairCompleteResponseData, RelinkDeviceRequest, RelinkDeviceResponseData, AccountDeviceEntry, AccountApplicationEntry, RevokeAccountDeviceRequest, RevokeAccountDeviceResponseData, GroupInfoResponseData, CreateGroupRequest, CreateGroupResponseData, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetMemberAutoFollowRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, CascadeStatusEntry, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, IssueOwnershipProofRequest, IssueNamespaceOwnershipProofRequest, IssueOwnershipProofResponseData, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, TeeVerifyQuoteRequest, TeeVerifyQuoteResponseData, PerformIntentRequest, PerformIntentResponseData, AdmitJoinRequest, AdmitJoinResponseData } from './admin-types.js';
 /**
  * Compare two version strings by SemVer 2.0 precedence, ascending: negative if
  * `a < b`, positive if `a > b`, `0` if equal. Build metadata (`+...`) is stripped
@@ -52,7 +52,7 @@ export declare class AdminApiClient {
     listPackageVersions(packageName: string): Promise<ListVersionsResponseData>;
     getLatestPackageVersion(packageName: string): Promise<GetLatestVersionResponseData>;
     createContext(request: CreateContextRequest): Promise<CreateContextResponseData>;
-    deleteContext(contextId: string, request?: DeleteContextRequest): Promise<DeleteContextResponseData>;
+    deleteContext(contextId: string): Promise<DeleteContextResponseData>;
     getContexts(): Promise<GetContextsResponseData>;
     getContext(contextId: string): Promise<Context>;
     getContextsForApplication(applicationId: string): Promise<GetContextsResponseData>;
@@ -155,7 +155,7 @@ export declare class AdminApiClient {
     performIntent(contextId: string, request: PerformIntentRequest): Promise<PerformIntentResponseData>;
     listNamespacesForApplication(applicationId: string): Promise<ListNamespacesResponseData>;
     createNamespace(request: CreateNamespaceRequest): Promise<CreateNamespaceResponseData>;
-    deleteNamespace(namespaceId: string, request?: DeleteNamespaceRequest): Promise<DeleteNamespaceResponseData>;
+    deleteNamespace(namespaceId: string): Promise<DeleteNamespaceResponseData>;
     createNamespaceInvitation(namespaceId: string, request?: CreateNamespaceInvitationRequest): Promise<CreateNamespaceInvitationResponseData | CreateRecursiveInvitationResponseData>;
     /**
      * Present a join this caller signed to a node the inviter named as an
@@ -274,7 +274,7 @@ export declare class AdminApiClient {
     getDefaultCapabilities(groupId: string): Promise<number>;
     /** Thin wrapper over {@link getGroupInfo}: returns the group's `subgroupVisibility`. */
     getSubgroupVisibility(groupId: string): Promise<string>;
-    deleteGroup(groupId: string, request?: DeleteGroupRequest): Promise<DeleteGroupResponseData>;
+    deleteGroup(groupId: string): Promise<DeleteGroupResponseData>;
     listGroupMembers(groupId: string): Promise<ListGroupMembersResponseData>;
     listGroupContexts(groupId: string): Promise<ListGroupContextsResponseData>;
     addGroupMembers(groupId: string, request: AddGroupMembersRequest): Promise<void>;
@@ -312,7 +312,7 @@ export declare class AdminApiClient {
     getMemberMetadata(groupId: string, identity: string): Promise<MetadataRecord | null>;
     setContextMetadata(groupId: string, contextId: string, request: SetContextMetadataRequest): Promise<void>;
     getContextMetadata(groupId: string, contextId: string): Promise<MetadataRecord | null>;
-    syncGroup(groupId: string, request?: SyncGroupRequest): Promise<SyncGroupResponseData>;
+    syncGroup(groupId: string): Promise<SyncGroupResponseData>;
     upgradeGroup(groupId: string, request: UpgradeGroupRequest): Promise<UpgradeGroupResponseData>;
     getGroupUpgradeStatus(groupId: string): Promise<GroupUpgradeStatusResponseData>;
     /**
@@ -323,11 +323,11 @@ export declare class AdminApiClient {
     getMigrationStatus(namespaceId: string): Promise<MigrationStatus>;
     /** Per-group cascade-migration snapshots for a namespace. */
     getCascadeStatus(namespaceId: string): Promise<CascadeStatusEntry[]>;
-    retryGroupUpgrade(groupId: string, request?: RetryGroupUpgradeRequest): Promise<RetryGroupUpgradeResponseData>;
+    retryGroupUpgrade(groupId: string): Promise<RetryGroupUpgradeResponseData>;
     /** Move `childGroupId` under `request.newParentId`. */
     reparentGroup(childGroupId: string, request: ReparentGroupRequest): Promise<ReparentGroupResponseData>;
     listSubgroups(groupId: string): Promise<SubgroupEntry[]>;
-    detachContextFromGroup(groupId: string, contextId: string, request?: DetachContextFromGroupRequest): Promise<void>;
+    detachContextFromGroup(groupId: string, contextId: string): Promise<void>;
     createGroupInvitation(groupId: string, request?: CreateGroupInvitationRequest): Promise<CreateGroupInvitationResponseData | CreateRecursiveGroupInvitationResponseData>;
     joinGroup(request: JoinGroupRequest): Promise<JoinGroupResponseData>;
     joinSubgroupInheritance(groupId: string): Promise<JoinSubgroupInheritanceResponseData>;
@@ -344,19 +344,17 @@ export declare class AdminApiClient {
     /** Node TLS certificate, PEM text (GET /admin-api/certificate). */
     getCertificate(): Promise<string>;
     /** Create a standalone group (POST /admin-api/groups). */
-    createGroup(request: Record<string, unknown>): Promise<{
-        groupId: string;
-    }>;
+    createGroup(request: CreateGroupRequest): Promise<CreateGroupResponseData>;
     /** Leave a group (POST /admin-api/groups/:group_id/leave). */
-    leaveGroup(groupId: string, request?: Record<string, unknown>): Promise<void>;
+    leaveGroup(groupId: string): Promise<void>;
     /** Leave a context (POST /admin-api/contexts/:context_id/leave). */
-    leaveContext(contextId: string, request?: Record<string, unknown>): Promise<void>;
+    leaveContext(contextId: string): Promise<void>;
     /** Leave a namespace (POST /admin-api/namespaces/:namespace_id/leave). */
-    leaveNamespace(namespaceId: string, request?: Record<string, unknown>): Promise<void>;
+    leaveNamespace(namespaceId: string): Promise<void>;
     /** Issue a group ownership proof (POST /admin-api/groups/:group_id/issue-ownership-proof). */
-    issueOwnershipProof(groupId: string, request?: Record<string, unknown>): Promise<unknown>;
+    issueOwnershipProof(groupId: string, request: IssueOwnershipProofRequest): Promise<IssueOwnershipProofResponseData>;
     /** Issue a namespace ownership proof (POST /admin-api/groups/:group_id/issue-namespace-ownership-proof). */
-    issueNamespaceOwnershipProof(groupId: string, request?: Record<string, unknown>): Promise<unknown>;
+    issueNamespaceOwnershipProof(groupId: string, request: IssueNamespaceOwnershipProofRequest): Promise<IssueOwnershipProofResponseData>;
     /**
      * Set a member's auto-follow flag (PUT
      * /admin-api/groups/:group_id/members/:identity/auto-follow).
@@ -365,7 +363,7 @@ export declare class AdminApiClient {
      * {@link listGroupMembers} — not the signing key that added them. Both are
      * 64 hex, so nothing but the source tells them apart.
      */
-    setMemberAutoFollow(groupId: string, identity: string, request: Record<string, unknown>): Promise<void>;
+    setMemberAutoFollow(groupId: string, identity: string, request: SetMemberAutoFollowRequest): Promise<void>;
     /** Abort a namespace migration (POST /admin-api/groups/:namespace_id/migration/abort). */
-    abortMigration(namespaceId: string, request?: Record<string, unknown>): Promise<unknown>;
+    abortMigration(namespaceId: string): Promise<unknown>;
 }

package/dist/admin-api/admin-client.js

@@ -184,14 +184,7 @@ export class AdminApiClient {
         const body = { ...request, initializationParams: request.initializationParams ?? [] };
         return unwrap(await this.httpClient.post('/admin-api/contexts', body));
     }
-    async deleteContext(contextId, request) {
-        if (request) {
-            return unwrap(await this.httpClient.request(`/admin-api/contexts/${contextId}`, {
-                method: 'DELETE',
-                body: JSON.stringify(request),
-                headers: { 'Content-Type': 'application/json' },
-            }));
-        }
+    async deleteContext(contextId) {
         return unwrap(await this.httpClient.delete(`/admin-api/contexts/${contextId}`));
     }
     async getContexts() {
@@ -417,30 +410,14 @@ export class AdminApiClient {
         return unwrap(await this.httpClient.get(`/admin-api/namespaces/for-application/${applicationId}`));
     }
     async createNamespace(request) {
-        // `upgradePolicy` is sent even though the request type no longer carries it.
-        //
-        // The concept was deleted server-side (calimero-network/core#3393), but only
-        // on master: every RELEASED node still declares the field required and
-        // rejects a body without it — `missing field 'upgradePolicy'`. A node that
-        // has dropped it ignores the extra key, so sending it is the one shape that
-        // works against both, and this SDK does not get to choose which node a
-        // caller points it at.
-        //
-        // `LazyOnAccess` because it was the default and is the only behaviour that
-        // survives the removal, so an old node given it does what a new one does.
-        //
-        // Remove once no supported release predates that change.
-        return unwrap(await this.httpClient.post('/admin-api/namespaces', {
-            upgradePolicy: 'LazyOnAccess',
-            ...request,
-        }));
+        return unwrap(await this.httpClient.post('/admin-api/namespaces', request));
     }
-    async deleteNamespace(namespaceId, request) {
-        // Core requires `Content-Type: application/json` on this DELETE even when the
-        // body is empty, so always send the header and a (possibly empty) JSON body.
+    async deleteNamespace(namespaceId) {
+        // Core requires `Content-Type: application/json` on this DELETE even though
+        // the body is always empty, so send the header and an empty JSON object.
         return unwrap(await this.httpClient.request(`/admin-api/namespaces/${namespaceId}`, {
             method: 'DELETE',
-            body: JSON.stringify(request ?? {}),
+            body: '{}',
             headers: { 'Content-Type': 'application/json' },
         }));
     }
@@ -604,12 +581,12 @@ export class AdminApiClient {
     async getSubgroupVisibility(groupId) {
         return (await this.getGroupInfo(groupId)).subgroupVisibility;
     }
-    async deleteGroup(groupId, request) {
-        // Core requires `Content-Type: application/json` on this DELETE even with an
-        // empty body, so always send the header and a (possibly empty) JSON body.
+    async deleteGroup(groupId) {
+        // Core requires `Content-Type: application/json` on this DELETE even though
+        // the body is always empty, so send the header and an empty JSON object.
         return unwrap(await this.httpClient.request(`/admin-api/groups/${groupId}`, {
             method: 'DELETE',
-            body: JSON.stringify(request ?? {}),
+            body: '{}',
             headers: { 'Content-Type': 'application/json' },
         }));
     }
@@ -710,8 +687,8 @@ export class AdminApiClient {
         const response = await this.httpClient.get(`/admin-api/groups/${groupId}/contexts/${contextId}/metadata`);
         return response?.data ?? null;
     }
-    async syncGroup(groupId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/groups/${groupId}/sync`, request ?? {}));
+    async syncGroup(groupId) {
+        return unwrap(await this.httpClient.post(`/admin-api/groups/${groupId}/sync`, {}));
     }
     async upgradeGroup(groupId, request) {
         return unwrap(await this.httpClient.post(`/admin-api/groups/${groupId}/upgrade`, request));
@@ -733,8 +710,8 @@ export class AdminApiClient {
         const id = encodeURIComponent(namespaceId);
         return unwrap(await this.httpClient.get(`/admin-api/groups/${id}/cascade-status`));
     }
-    async retryGroupUpgrade(groupId, request) {
-        return unwrap(await this.httpClient.post(`/admin-api/groups/${groupId}/upgrade/retry`, request ?? {}));
+    async retryGroupUpgrade(groupId) {
+        return unwrap(await this.httpClient.post(`/admin-api/groups/${groupId}/upgrade/retry`, {}));
     }
     /** Move `childGroupId` under `request.newParentId`. */
     async reparentGroup(childGroupId, request) {
@@ -746,8 +723,8 @@ export class AdminApiClient {
         const response = await this.httpClient.get(`/admin-api/groups/${groupId}/subgroups`);
         return response.subgroups ?? response.data ?? [];
     }
-    async detachContextFromGroup(groupId, contextId, request) {
-        await this.httpClient.post(`/admin-api/groups/${groupId}/contexts/${contextId}/remove`, request ?? {});
+    async detachContextFromGroup(groupId, contextId) {
+        await this.httpClient.post(`/admin-api/groups/${groupId}/contexts/${contextId}/remove`, {});
     }
     // ---- Group Invitation & Join ----
     async createGroupInvitation(groupId, request) {
@@ -788,34 +765,27 @@ export class AdminApiClient {
     // ---- Group / context / namespace membership ----
     /** Create a standalone group (POST /admin-api/groups). */
     async createGroup(request) {
-        // `upgradePolicy` for the same reason as `createNamespace` above — these are
-        // the only two requests a released node still requires it on, and it ignores
-        // the extra key once the concept is gone. Spread after the caller's request
-        // so an explicit value wins.
-        return unwrap(await this.httpClient.post('/admin-api/groups', {
-            upgradePolicy: 'LazyOnAccess',
-            ...request,
-        }));
+        return unwrap(await this.httpClient.post('/admin-api/groups', request));
     }
     /** Leave a group (POST /admin-api/groups/:group_id/leave). */
-    async leaveGroup(groupId, request) {
-        await this.httpClient.post(`/admin-api/groups/${groupId}/leave`, request ?? {});
+    async leaveGroup(groupId) {
+        await this.httpClient.post(`/admin-api/groups/${groupId}/leave`, {});
     }
     /** Leave a context (POST /admin-api/contexts/:context_id/leave). */
-    async leaveContext(contextId, request) {
-        await this.httpClient.post(`/admin-api/contexts/${contextId}/leave`, request ?? {});
+    async leaveContext(contextId) {
+        await this.httpClient.post(`/admin-api/contexts/${contextId}/leave`, {});
     }
     /** Leave a namespace (POST /admin-api/namespaces/:namespace_id/leave). */
-    async leaveNamespace(namespaceId, request) {
-        await this.httpClient.post(`/admin-api/namespaces/${namespaceId}/leave`, request ?? {});
+    async leaveNamespace(namespaceId) {
+        await this.httpClient.post(`/admin-api/namespaces/${namespaceId}/leave`, {});
     }
     /** Issue a group ownership proof (POST /admin-api/groups/:group_id/issue-ownership-proof). */
     async issueOwnershipProof(groupId, request) {
-        return this.httpClient.post(`/admin-api/groups/${groupId}/issue-ownership-proof`, request ?? {});
+        return this.httpClient.post(`/admin-api/groups/${groupId}/issue-ownership-proof`, request);
     }
     /** Issue a namespace ownership proof (POST /admin-api/groups/:group_id/issue-namespace-ownership-proof). */
     async issueNamespaceOwnershipProof(groupId, request) {
-        return this.httpClient.post(`/admin-api/groups/${groupId}/issue-namespace-ownership-proof`, request ?? {});
+        return this.httpClient.post(`/admin-api/groups/${groupId}/issue-namespace-ownership-proof`, request);
     }
     /**
      * Set a member's auto-follow flag (PUT
@@ -829,7 +799,7 @@ export class AdminApiClient {
         await this.httpClient.put(`/admin-api/groups/${groupId}/members/${identity}/auto-follow`, request);
     }
     /** Abort a namespace migration (POST /admin-api/groups/:namespace_id/migration/abort). */
-    async abortMigration(namespaceId, request) {
-        return this.httpClient.post(`/admin-api/groups/${namespaceId}/migration/abort`, request ?? {});
+    async abortMigration(namespaceId) {
+        return this.httpClient.post(`/admin-api/groups/${namespaceId}/migration/abort`, {});
     }
 }

package/dist/admin-api/admin-types.d.ts

@@ -110,9 +110,6 @@ export interface CreateContextResponseData {
     groupId?: string;
     groupCreated?: boolean;
 }
-export interface DeleteContextRequest {
-    requester?: string;
-}
 export interface DeleteContextResponseData {
     isDeleted: boolean;
 }
@@ -480,14 +477,10 @@ export interface CreateNamespaceRequest {
 export interface CreateNamespaceResponseData {
     namespaceId: string;
 }
-export interface DeleteNamespaceRequest {
-    requester?: string;
-}
 export interface DeleteNamespaceResponseData {
     isDeleted: boolean;
 }
 export interface CreateNamespaceInvitationRequest {
-    requester?: string;
     expirationTimestamp?: number;
     recursive?: boolean;
 }
@@ -532,8 +525,9 @@ export interface JoinNamespaceResponseData {
     memberAccount: string;
 }
 export interface CreateGroupInNamespaceRequest {
-    groupId?: string;
-    name?: string;
+    groupName?: string;
+    /** Subgroup visibility at birth. Absent means `'restricted'`. */
+    visibility?: 'open' | 'restricted';
 }
 export interface CreateGroupInNamespaceResponseData {
     groupId: string;
@@ -914,9 +908,15 @@ export interface MemberMigrationReport {
     migrationFailed?: MigrationFailureReason;
 }
 export interface MemberMigrationStatusEntry {
+    /** The reporting device's signing KEY, bs58. One account with two devices
+     * appears as two rows: the cohort is replicas, not people. */
     peer: string;
-    /** Freshest reported facts, or `null` when the member's state is `unknown`. */
-    report: MemberMigrationReport | null;
+    /** The ACCOUNT `peer` speaks for, 64 hex - join it to `listGroupMembers` to
+     * name a person. Absent from nodes predating the field. */
+    account?: string;
+    /** Freshest reported facts. Omitted (not `null`) when the member's state is
+     * `unknown`, so test falsiness rather than `=== null`. */
+    report?: MemberMigrationReport | null;
     state: MemberMigrationState;
 }
 export interface MigrationStatusRollup {
@@ -1001,9 +1001,6 @@ export interface GroupContextEntry {
     name?: string;
 }
 export type ListGroupContextsResponseData = GroupContextEntry[];
-export interface DeleteGroupRequest {
-    requester?: string;
-}
 export interface DeleteGroupResponseData {
     isDeleted: boolean;
 }
@@ -1021,7 +1018,6 @@ export interface GroupMemberInput {
 }
 export interface AddGroupMembersRequest {
     members: GroupMemberInput[];
-    requester?: string;
 }
 export type AddGroupMembersResponseData = Record<string, never>;
 export interface RemoveGroupMembersRequest {
@@ -1031,12 +1027,10 @@ export interface RemoveGroupMembersRequest {
      * {@link GroupMemberInput.identity} took to add them.
      */
     members: string[];
-    requester?: string;
 }
 export type RemoveGroupMembersResponseData = Record<string, never>;
 export interface UpdateMemberRoleRequest {
     role: string;
-    requester?: string;
 }
 export type UpdateMemberRoleResponseData = Record<string, never>;
 export interface MemberCapabilities {
@@ -1044,17 +1038,21 @@ export interface MemberCapabilities {
 }
 export interface SetMemberCapabilitiesRequest {
     capabilities: number;
-    requester?: string;
 }
 export type SetMemberCapabilitiesResponseData = Record<string, never>;
 export interface SetDefaultCapabilitiesRequest {
     defaultCapabilities: number;
-    requester?: string;
 }
 export type SetDefaultCapabilitiesResponseData = Record<string, never>;
+export interface SetMemberAutoFollowRequest {
+    /** Auto-join contexts registered in this group. */
+    autoFollowContexts: boolean;
+    /** Self-admit into subgroups nested under this group. */
+    autoFollowSubgroups: boolean;
+}
+export type SetMemberAutoFollowResponseData = Record<string, never>;
 export interface SetSubgroupVisibilityRequest {
     subgroupVisibility: string;
-    requester?: string;
 }
 export type SetSubgroupVisibilityResponseData = Record<string, never>;
 export interface SetTeeAdmissionPolicyRequest {
@@ -1065,7 +1063,6 @@ export interface SetTeeAdmissionPolicyRequest {
     allowedRtmr3: string[];
     allowedTcbStatuses: string[];
     acceptMock: boolean;
-    requester?: string;
 }
 export type SetTeeAdmissionPolicyResponseData = Record<string, never>;
 export interface GetTeeAdmissionPolicyResponseData {
@@ -1102,7 +1099,6 @@ export interface MetadataRecord {
 export interface SetMetadataRequest {
     name?: string;
     data?: Record<string, string>;
-    requester?: string;
 }
 export type SetGroupMetadataRequest = SetMetadataRequest;
 export type SetMemberMetadataRequest = SetMetadataRequest;
@@ -1115,9 +1111,6 @@ export type SetMetadataResponseData = Record<string, never>;
 export interface GetMetadataResponseData {
     data: MetadataRecord | null;
 }
-export interface SyncGroupRequest {
-    requester?: string;
-}
 export interface SyncGroupResponseData {
     groupId: string;
     appKey: string;
@@ -1127,7 +1120,6 @@ export interface SyncGroupResponseData {
 }
 export interface UpgradeGroupRequest {
     targetApplicationId: string;
-    requester?: string;
     /** Fan the upgrade out to every descendant subgroup running the same app
      *  (one atomic cascade op). Without it the upgrade applies to the target
      *  group only - members' subgroups never learn the migration. Server
@@ -1148,24 +1140,41 @@ export interface UpgradeGroupResponseData {
     localContextsFailed?: number;
 }
 export type GroupUpgradeStatusResponseData = GroupUpgradeStatus | null;
-export interface RetryGroupUpgradeRequest {
-    requester?: string;
-}
 export type RetryGroupUpgradeResponseData = UpgradeGroupResponseData;
 export interface ReparentGroupRequest {
     /** 64-char id of the destination parent group. */
     newParentId: string;
-    requester?: string;
 }
 export interface ReparentGroupResponseData {
     reparented: boolean;
 }
-export interface DetachContextFromGroupRequest {
-    requester?: string;
-}
 export type DetachContextFromGroupResponseData = Record<string, never>;
+export interface IssueOwnershipProofRequest {
+    /** Who the proof is for. Non-empty, <= 256 characters. */
+    audience: string;
+    /** 64-hex context id the proof is scoped to. */
+    contextId: string;
+    /** What is being claimed. Non-empty, <= 512 characters. */
+    subject: string;
+    /** Caller-chosen hex nonce, 32-128 characters (even length). */
+    nonce: string;
+    /** Requested expiry, unix ms. Core clamps it to issue time + 5 minutes. */
+    expiresAtMs: number;
+}
+/** Namespace-scoped sibling: identical minus `contextId`. */
+export type IssueNamespaceOwnershipProofRequest = Omit<IssueOwnershipProofRequest, 'contextId'>;
+export interface IssueOwnershipProofResponseData {
+    /** Hex 32-byte ed25519 public key of the signer. */
+    signerPublicKey: string;
+    /**
+     * Base64 opaque UTF-8 JSON bytes of the claim. Verifiers re-parse these exact
+     * bytes and sign over `"calimero.ownership-claim.v1\0" || signedPayload`.
+     */
+    signedPayload: string;
+    /** Base64 64-byte ed25519 signature. */
+    signature: string;
+}
 export interface CreateGroupInvitationRequest {
-    requester?: string;
     expirationTimestamp?: number;
     recursive?: boolean;
     /**