@calimero-network/mero-js 19.14.1 → 19.15.0

package/dist/index.d.ts

@@ -1,33 +1,35 @@
-export { MeroJs, createMeroJs } from './mero-js.js';
-export type { MeroJsConfig, TokenData } from './mero-js.js';
-export * from './http-client/index.js';
-export * from './auth-api/index.js';
-export * from './admin-api/index.js';
-export { parseAuthCallback, buildAuthLoginUrl } from './auth/index.js';
-export type { AuthCallbackResult, AuthLoginOptions } from './auth/index.js';
-export { MemoryTokenStore, LocalStorageTokenStore } from './token-store/index.js';
-export type { TokenStore } from './token-store/index.js';
-export { RpcClient, RpcError } from './rpc/index.js';
-export type { MigrateMyEntriesSummary } from './rpc/index.js';
-export type { ExecuteParams } from './rpc/index.js';
-export { SseClient, WsClient } from './events/index.js';
-export type { SseEventData, WsEventData, AppVersionChangedEvent, GroupMembershipEventData, GroupMigrationEventData, MigrationStartedData, MigrationProgressData, CascadeProgressData, MigrationCompletedData, } from './events/index.js';
-export { EphemeralClient, jsonCodec } from './ephemeral/index.js';
-export type { Codec, EphemeralEntry } from './ephemeral/index.js';
-export * from './cloud/index.js';
-export * from './relay/index.js';
-export { signWarrant, intentHash } from './warrant/index.js';
-export { generateAccountRoot, accountRootFromPhrase, accountRootFromSecret, signAccountLink, signAccountLogin, } from './account/index.js';
-export type { AccountRoot, RecoverableAccountRoot, AccountLinkInput, AccountLoginInput, } from './account/index.js';
-export { signDeviceCert, mintDeviceId, deviceCertPayload, accountForRoot, } from './device-cert/index.js';
-export type { DeviceCertInput } from './device-cert/index.js';
-export { signMemberJoinOp, encodeSignedInvitation, SIGNED_NAMESPACE_OP_SCHEMA_VERSION, } from './namespace-op/index.js';
-export type { SignMemberJoinInput } from './namespace-op/index.js';
-export type { WarrantInput } from './warrant/index.js';
-export { signLoginStatement } from './login/index.js';
-export type { Audience, LoginStatementInput } from './login/index.js';
-export { login, generateSessionKey } from './login/index.js';
-export type { LoginConfig, DelegatedSession, SessionKeyPair, } from './login/index.js';
-export * from './capabilities.js';
-export { DEFAULT_LOCAL_NODE_PORTS, localNodeUrl, nodeEndpoint, probeNodeHealth, discoverLocalNodes, } from './nodeDiscovery.js';
-export type { DiscoverLocalNodesOptions } from './nodeDiscovery.js';
+export { MeroJs, createMeroJs } from "./mero-js.js";
+export type { MeroJsConfig, TokenData } from "./mero-js.js";
+export * from "./http-client/index.js";
+export * from "./auth-api/index.js";
+export * from "./admin-api/index.js";
+export { parseAuthCallback, buildAuthLoginUrl } from "./auth/index.js";
+export type { AuthCallbackResult, AuthLoginOptions } from "./auth/index.js";
+export { MemoryTokenStore, LocalStorageTokenStore, } from "./token-store/index.js";
+export type { TokenStore } from "./token-store/index.js";
+export { RpcClient, RpcError } from "./rpc/index.js";
+export type { MigrateMyEntriesSummary } from "./rpc/index.js";
+export type { ExecuteParams } from "./rpc/index.js";
+export { SseClient, WsClient } from "./events/index.js";
+export type { SseEventData, WsEventData, AppVersionChangedEvent, GroupMembershipEventData, GroupMigrationEventData, MigrationStartedData, MigrationProgressData, CascadeProgressData, MigrationCompletedData, } from "./events/index.js";
+export { EphemeralClient, jsonCodec } from "./ephemeral/index.js";
+export type { Codec, EphemeralEntry } from "./ephemeral/index.js";
+export * from "./cloud/index.js";
+export * from "./relay/index.js";
+export { signWarrant, intentHash } from "./warrant/index.js";
+export { generateAccountRoot, accountRootFromPhrase, accountRootFromSecret, signAccountLink, signAccountLogin, } from "./account/index.js";
+export type { AccountRoot, RecoverableAccountRoot, AccountLinkInput, AccountLoginInput, } from "./account/index.js";
+export { signDeviceCert, mintDeviceId, deviceCertPayload, accountForRoot, } from "./device-cert/index.js";
+export type { DeviceCertInput } from "./device-cert/index.js";
+export { signMemberJoinOp, encodeSignedInvitation, SIGNED_NAMESPACE_OP_SCHEMA_VERSION, } from "./namespace-op/index.js";
+export type { SignMemberJoinInput } from "./namespace-op/index.js";
+export type { WarrantInput } from "./warrant/index.js";
+export { requestBodyHash, signRequest } from "./request/index.js";
+export type { RequestSigInput } from "./request/index.js";
+export { signLoginStatement } from "./login/index.js";
+export type { Audience, LoginStatementInput } from "./login/index.js";
+export { login, generateSessionKey } from "./login/index.js";
+export type { LoginConfig, DelegatedSession, SessionKeyPair, } from "./login/index.js";
+export * from "./capabilities.js";
+export { DEFAULT_LOCAL_NODE_PORTS, localNodeUrl, nodeEndpoint, probeNodeHealth, discoverLocalNodes, } from "./nodeDiscovery.js";
+export type { DiscoverLocalNodesOptions } from "./nodeDiscovery.js";

package/dist/index.js

@@ -1,37 +1,38 @@
 // Mero.js - Pure JavaScript SDK for Calimero
 // This will contain the pure JavaScript SDK without React dependencies
 // Main SDK class
-export { MeroJs, createMeroJs } from './mero-js.js';
+export { MeroJs, createMeroJs } from "./mero-js.js";
 // HTTP client module (Web Standards based)
-export * from './http-client/index.js';
+export * from "./http-client/index.js";
 // Auth API client
-export * from './auth-api/index.js';
+export * from "./auth-api/index.js";
 // Admin API client
-export * from './admin-api/index.js';
+export * from "./admin-api/index.js";
 // Auth utilities
-export { parseAuthCallback, buildAuthLoginUrl } from './auth/index.js';
+export { parseAuthCallback, buildAuthLoginUrl } from "./auth/index.js";
 // Token store
-export { MemoryTokenStore, LocalStorageTokenStore } from './token-store/index.js';
+export { MemoryTokenStore, LocalStorageTokenStore, } from "./token-store/index.js";
 // RPC client
-export { RpcClient, RpcError } from './rpc/index.js';
+export { RpcClient, RpcError } from "./rpc/index.js";
 // Events (SSE / WebSocket)
-export { SseClient, WsClient } from './events/index.js';
+export { SseClient, WsClient } from "./events/index.js";
 // Ephemeral presence (cursors / typing / online)
-export { EphemeralClient, jsonCodec } from './ephemeral/index.js';
+export { EphemeralClient, jsonCodec } from "./ephemeral/index.js";
 // Cloud client — namespaces, relays, HA, and the cloud sign-in path
-export * from './cloud/index.js';
+export * from "./cloud/index.js";
 // Relay client — write through delegated execution, holding only a signing key
-export * from './relay/index.js';
+export * from "./relay/index.js";
 // Warrant signing — mint the author's consent for a relay to run one intent
-export { signWarrant, intentHash } from './warrant/index.js';
+export { signWarrant, intentHash } from "./warrant/index.js";
 // Account roots — mint one with a recovery phrase, or prove you hold one
-export { generateAccountRoot, accountRootFromPhrase, accountRootFromSecret, signAccountLink, signAccountLogin, } from './account/index.js';
-export { signDeviceCert, mintDeviceId, deviceCertPayload, accountForRoot, } from './device-cert/index.js';
-export { signMemberJoinOp, encodeSignedInvitation, SIGNED_NAMESPACE_OP_SCHEMA_VERSION, } from './namespace-op/index.js';
+export { generateAccountRoot, accountRootFromPhrase, accountRootFromSecret, signAccountLink, signAccountLogin, } from "./account/index.js";
+export { signDeviceCert, mintDeviceId, deviceCertPayload, accountForRoot, } from "./device-cert/index.js";
+export { signMemberJoinOp, encodeSignedInvitation, SIGNED_NAMESPACE_OP_SCHEMA_VERSION, } from "./namespace-op/index.js";
 // Login-statement signing — the device's half of a password-free session
-export { signLoginStatement } from './login/index.js';
-export { login, generateSessionKey } from './login/index.js';
+export { requestBodyHash, signRequest } from "./request/index.js";
+export { signLoginStatement } from "./login/index.js";
+export { login, generateSessionKey } from "./login/index.js";
 // Member capability bitmask constants & helpers
-export * from './capabilities.js';
+export * from "./capabilities.js";
 // Utilities
-export { DEFAULT_LOCAL_NODE_PORTS, localNodeUrl, nodeEndpoint, probeNodeHealth, discoverLocalNodes, } from './nodeDiscovery.js';
+export { DEFAULT_LOCAL_NODE_PORTS, localNodeUrl, nodeEndpoint, probeNodeHealth, discoverLocalNodes, } from "./nodeDiscovery.js";

package/dist/index.mjs

@@ -6442,8 +6442,47 @@ async function signMemberJoinOp(input) {
   return hex(concat(signable, signature, unendorsed));
 }
 
+// src/request/request-sig.ts
+var SIGN_DOMAIN2 = new TextEncoder().encode("calimero.auth.request.v1");
+var BODY_DOMAIN = new TextEncoder().encode("calimero.auth.request.body.v1");
+function borshString2(value) {
+  const bytes = new TextEncoder().encode(value);
+  return concat(u32le(bytes.length), bytes);
+}
+async function requestBodyHash(body = new Uint8Array(0)) {
+  const bytes = typeof body === "string" ? new TextEncoder().encode(body) : body;
+  return domainHash(BODY_DOMAIN, [bytes]);
+}
+async function signRequest(input) {
+  const key = await importSigningKey(input.signerSecret);
+  const bodyHash = await requestBodyHash(input.body);
+  const issuedAt = u64le(input.issuedAt);
+  const expiresAt = u64le(input.expiresAt);
+  const encoder = new TextEncoder();
+  const preimage = await domainHash(SIGN_DOMAIN2, [
+    encoder.encode(input.method),
+    encoder.encode(input.path),
+    bodyHash,
+    issuedAt,
+    expiresAt
+  ]);
+  const signature = new Uint8Array(
+    await crypto.subtle.sign({ name: "Ed25519" }, key, preimage)
+  );
+  return hex(
+    concat(
+      borshString2(input.method),
+      borshString2(input.path),
+      bodyHash,
+      issuedAt,
+      expiresAt,
+      signature
+    )
+  );
+}
+
 // src/login/login.ts
-var SIGN_DOMAIN2 = new TextEncoder().encode("calimero.auth.login.v1");
+var SIGN_DOMAIN3 = new TextEncoder().encode("calimero.auth.login.v1");
 var AUDIENCE_TAG = {
   webOrigin: 0,
   codeSigningId: 1,
@@ -6482,7 +6521,7 @@ async function signLoginStatement(input) {
   const deviceKey = await derivePublicKey(input.deviceSecret);
   const issuedAt = u64le(input.issuedAt);
   const expiresAt = u64le(input.expiresAt);
-  const preimage = await domainHash(SIGN_DOMAIN2, [
+  const preimage = await domainHash(SIGN_DOMAIN3, [
     node,
     audienceSigningBytes(input.audience),
     challenge,
@@ -6718,12 +6757,14 @@ export {
   nodeEndpoint,
   parseAuthCallback,
   probeNodeHealth,
+  requestBodyHash,
   routingProofHeaders,
   signAccountLink,
   signAccountLogin,
   signDeviceCert,
   signLoginStatement,
   signMemberJoinOp,
+  signRequest,
   signRoutingChallenge,
   signWarrant,
   withCap,