@calimero-network/mero-js 19.10.0 → 19.12.0

package/dist/admin-api/admin-client.d.ts

@@ -1,5 +1,5 @@
 import { HttpClient } from '../http-client/index.js';
-import type { HealthStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, InviteSpecializedNodeRequest, InviteSpecializedNodeResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, BlobReadOptions, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateDeviceAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NamespaceIdentity, NodeIdentity, AccountPairInitRequest, AccountPairInitResponseData, AccountPairCompleteRequest, AccountPairCompleteResponseData, RelinkDeviceRequest, RelinkDeviceResponseData, AccountDeviceEntry, AccountApplicationEntry, RevokeAccountDeviceRequest, RevokeAccountDeviceResponseData, GroupInfoResponseData, CreateGroupRequest, CreateGroupResponseData, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetMemberAutoFollowRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, CascadeStatusEntry, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, IssueOwnershipProofRequest, IssueNamespaceOwnershipProofRequest, IssueOwnershipProofResponseData, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, TeeVerifyQuoteRequest, TeeVerifyQuoteResponseData, PerformIntentRequest, PerformIntentResponseData, IntentRelayInfo, AdmitJoinRequest, AdmitJoinResponseData } from './admin-types.js';
+import type { HealthStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, InviteSpecializedNodeRequest, InviteSpecializedNodeResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, BlobReadOptions, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateDeviceAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NamespaceIdentity, NodeIdentity, AccountPairInitRequest, AccountPairInitResponseData, AccountPairCompleteRequest, AccountPairCompleteResponseData, RelinkDeviceRequest, RelinkDeviceResponseData, RescopeDeviceRequest, RescopeDeviceResponseData, LabelDeviceRequest, LabelDeviceResponseData, AccountDeviceEntry, AccountApplicationEntry, RevokeAccountDeviceRequest, RevokeAccountDeviceResponseData, GroupInfoResponseData, CreateGroupRequest, CreateGroupResponseData, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetMemberAutoFollowRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, CascadeStatusEntry, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, IssueOwnershipProofRequest, IssueNamespaceOwnershipProofRequest, IssueOwnershipProofResponseData, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, TeeVerifyQuoteRequest, TeeVerifyQuoteResponseData, PerformIntentRequest, PerformIntentResponseData, IntentRelayInfo, AdmitJoinRequest, AdmitJoinResponseData } from './admin-types.js';
 /**
  * Compare two version strings by SemVer 2.0 precedence, ascending: negative if
  * `a < b`, positive if `a > b`, `0` if equal. Build metadata (`+...`) is stripped
@@ -272,6 +272,21 @@ export declare class AdminApiClient {
      * would make the accidental request the widest one.
      */
     relinkAccountDevice(deviceId: string, request?: RelinkDeviceRequest): Promise<RelinkDeviceResponseData>;
+    /**
+     * Replace a device's scope outright, in one root-signed op.
+     *
+     * {@link relinkAccountDevice} only ever adds applications; this is how a
+     * scope is narrowed - or an `all` device is given a fixed list instead. The
+     * device need not be online.
+     */
+    rescopeAccountDevice(deviceId: string, request: RescopeDeviceRequest): Promise<RescopeDeviceResponseData>;
+    /**
+     * Name a device of this account, for a listing to render.
+     *
+     * Run on the node holding the account root to name any device; a paired
+     * node is accepted only for that device's own id.
+     */
+    labelAccountDevice(deviceId: string, request: LabelDeviceRequest): Promise<LabelDeviceResponseData>;
     /**
      * Every device of this account, as this node sees them - its own included.
      *

package/dist/admin-api/admin-client.js

@@ -587,6 +587,25 @@ export class AdminApiClient {
     async relinkAccountDevice(deviceId, request) {
         return unwrap(await this.httpClient.post(`/admin-api/account/devices/${deviceId}/relink`, request ?? {}));
     }
+    /**
+     * Replace a device's scope outright, in one root-signed op.
+     *
+     * {@link relinkAccountDevice} only ever adds applications; this is how a
+     * scope is narrowed - or an `all` device is given a fixed list instead. The
+     * device need not be online.
+     */
+    async rescopeAccountDevice(deviceId, request) {
+        return unwrap(await this.httpClient.put(`/admin-api/account/devices/${encodeURIComponent(deviceId)}/scope`, request));
+    }
+    /**
+     * Name a device of this account, for a listing to render.
+     *
+     * Run on the node holding the account root to name any device; a paired
+     * node is accepted only for that device's own id.
+     */
+    async labelAccountDevice(deviceId, request) {
+        return unwrap(await this.httpClient.put(`/admin-api/account/devices/${encodeURIComponent(deviceId)}/label`, request));
+    }
     /**
      * Every device of this account, as this node sees them - its own included.
      *

package/dist/admin-api/admin-types.d.ts

@@ -530,6 +530,18 @@ export interface NodeIdentity {
      * a root nor has paired with the id; absent on an old node.
      */
     accountNamespaceId?: string | null;
+    /**
+     * The account that withdrew this node's device, absent on a node no
+     * revocation has reached.
+     */
+    revokedFrom?: RevokedFromEntry;
+}
+/** Which account withdrew this node's device, and which device it was. */
+export interface RevokedFromEntry {
+    /** The account the device spoke for, 64 hex characters. */
+    accountId: string;
+    /** The device that was withdrawn, 64 hex characters. */
+    deviceId: string;
 }
 /**
  * @deprecated Use {@link AdminApiClient.getNodeIdentity} instead. Nothing here
@@ -811,6 +823,25 @@ export interface RelinkDeviceRequest {
      */
     applications?: string[];
 }
+/**
+ * The scope to hold: every application, or only the ones named.
+ *
+ * A tagged shape rather than a list whose emptiness means everything - `all`
+ * and `only: []` differ by a whole order of magnitude in what they grant, and
+ * an empty `only` is refused rather than treated as `all`.
+ */
+export type DeviceScope = 'all' | {
+    only: string[];
+};
+/**
+ * Replace a device's scope outright, in one root-signed op.
+ *
+ * {@link relinkAccountDevice} only ever adds applications; this is how a
+ * scope is narrowed, or an `all` device is given a fixed list instead.
+ */
+export interface RescopeDeviceRequest {
+    scope: DeviceScope;
+}
 /** One namespace the relink published the device's link into. */
 export interface RelinkOutcomeEntry {
     /** The namespace id, 64 hex characters. */
@@ -834,6 +865,31 @@ export interface RelinkSkipEntry {
      */
     reason: string;
 }
+/** One namespace a scope replacement no longer reaches. */
+export interface RescopeDescopeEntry {
+    /** The namespace id, 64 hex characters. */
+    namespaceId: string;
+    /**
+     * Whether the scope key was rotated. `false` means the device stopped writing
+     * there but still holds the key it had, until an admin rotates.
+     */
+    keyRotated: boolean;
+}
+/** The scope a device now holds, and what each namespace did about it. */
+export interface RescopeDeviceResponseData {
+    /** The account the device speaks for, 64 hex characters. */
+    accountId: string;
+    /** The device that was rescoped, 64 hex characters. */
+    deviceId: string;
+    /** The scope after the request, 64 hex each. Empty means every application. */
+    applications: string[];
+    /** Namespaces the new scope no longer reaches. */
+    descoped: RescopeDescopeEntry[];
+    /** Namespaces the device was linked into by this call. */
+    linkedIn: RelinkOutcomeEntry[];
+    /** Namespaces nothing was published into, and why. */
+    skipped: RelinkSkipEntry[];
+}
 /** What the relink repaired, and what it left alone. */
 export interface RelinkDeviceResponseData {
     /** The account the device speaks for, 64 hex characters. */
@@ -879,6 +935,33 @@ export interface AccountDeviceEntry {
      * hex characters each. Empty for a certified device not yet bound anywhere.
      */
     namespaces: string[];
+    /**
+     * The replicated name the account gave this device, absent while it has
+     * none. Every device of the account reads the same one.
+     */
+    label?: string;
+}
+/**
+ * Name a device of this account, for a listing to render.
+ *
+ * Run on the node holding the account root to name any device; a paired node
+ * is accepted only for that device's own id.
+ */
+export interface LabelDeviceRequest {
+    /** Trimmed, non-empty, bounded and free of control characters. */
+    label: string;
+}
+/**
+ * The name that was published, and the epoch that orders it against a rename
+ * another device of the account made at the same time.
+ */
+export interface LabelDeviceResponseData {
+    /** The account the device speaks for, 64 hex characters. */
+    accountId: string;
+    /** The device that was named, 64 hex characters. */
+    deviceId: string;
+    label: string;
+    labelEpoch: number;
 }
 /**
  * One application this account speaks in, derived from the namespaces this node