@calimero-network/mero-js 18.3.0 → 19.0.0

package/dist/index.cjs

@@ -3164,8 +3164,10 @@ async function derivePublicKey(secretHex) {
 }
 
 // src/warrant/warrant.ts
-var SIGN_DOMAIN = new TextEncoder().encode("calimero.warrant.v1");
+var SIGN_DOMAIN = new TextEncoder().encode("calimero.warrant.v2");
 var INTENT_DOMAIN = new TextEncoder().encode("calimero.warrant.intent.v1");
+var MAX_CITED_HEADS = 64;
+var UNPINNED_APP = "00".repeat(32);
 async function intentHash(method, argsJson) {
   const args = new TextEncoder().encode(JSON.stringify(argsJson));
   return domainHash(INTENT_DOMAIN, [new TextEncoder().encode(method), args]);
@@ -3174,8 +3176,16 @@ async function signWarrant(input) {
   const context = fromHex(input.context, "context", 32);
   const authorAccount = fromHex(input.authorAccount, "authorAccount", 32);
   const executor = fromHex(input.executor, "executor", 32);
+  const appVersion = fromHex(
+    input.appVersion ?? UNPINNED_APP,
+    "appVersion",
+    32
+  );
+  const accountHeads = citedHeads(input.accountHeads, "accountHeads");
+  const governanceFloor = citedHeads(input.governanceFloor, "governanceFloor");
   const key = await importSigningKey(input.deviceSecret);
   const publicKey = await derivePublicKey(input.deviceSecret);
+  const method = new TextEncoder().encode(input.method);
   const commitment = await intentHash(input.method, input.argsJson);
   const nonce = u64le(input.nonce);
   const notAfter = u64le(input.notAfter);
@@ -3184,7 +3194,13 @@ async function signWarrant(input) {
     authorAccount,
     publicKey,
     executor,
+    appVersion,
+    method,
     commitment,
+    u64le(accountHeads.length),
+    ...accountHeads,
+    u64le(governanceFloor.length),
+    ...governanceFloor,
     nonce,
     notAfter
   ]);
@@ -3197,13 +3213,29 @@ async function signWarrant(input) {
       authorAccount,
       publicKey,
       executor,
+      appVersion,
+      u32le(method.length),
+      method,
       commitment,
+      u32le(accountHeads.length),
+      ...accountHeads,
+      u32le(governanceFloor.length),
+      ...governanceFloor,
       nonce,
       notAfter,
       signature
     )
   );
 }
+function citedHeads(heads, label) {
+  const list = heads ?? [];
+  if (list.length > MAX_CITED_HEADS) {
+    throw new Error(
+      `${label} cites ${list.length} heads, over the ${MAX_CITED_HEADS} a node accepts`
+    );
+  }
+  return list.map((head, i) => fromHex(head, `${label}[${i}]`, 32));
+}
 
 // src/relay/relay-client.ts
 var DEFAULT_TTL_SECONDS = 300;