@calimero-network/mero-js 19.17.0 → 19.19.0

package/dist/cloud/cloud-client.d.ts

@@ -530,13 +530,24 @@ export declare class CloudClient {
      * Ask the fleet to host a claimed namespace — the step that gets a relay
      * assigned.
      *
-     * Takes no body: {@link claimNamespace} already established ownership, and
-     * this is the separate "now host it" half. Idempotent.
+     * Carries no proof: {@link claimNamespace} already established ownership,
+     * and this is the separate "now host it" half. Idempotent.
+     *
+     * `admitterAddrs` is where the owner's own node can be dialed — take it from
+     * that node's network status with {@link admitterAddrsFromNetworkStatus}.
+     * The first fleet node placed on a namespace has nobody but the owner to ask
+     * for admission, and without these it can only broadcast and hope the
+     * owner's node — often a laptop behind a relay — hears it. They are a dial
+     * hint, not a grant: the owner's node admits by its own policy. Omit them to
+     * leave whatever the cloud already holds; pass them again when the node's
+     * relay address changes, and they replace the stored ones.
      *
      * Not to be confused with {@link enableHA}, which opens the cloud's web flow
      * in a browser tab for a user to complete by hand. This is the API call.
      */
-    enableNamespaceHa(namespaceId: string): Promise<unknown>;
+    enableNamespaceHa(namespaceId: string, options?: {
+        admitterAddrs?: readonly string[];
+    }): Promise<unknown>;
     /**
      * Stop hosting a claimed namespace.
      *
@@ -680,3 +691,15 @@ export declare class CloudClient {
      */
     private adoptRollingRefresh;
 }
+/**
+ * The addresses a fleet node can dial to ask this node for admission, from the
+ * node's `GET /admin-api/network/status` (see `AdminApiClient`).
+ *
+ * Its `externalAddrs`, each made to end in `/p2p/<localPeerId>`: that is the
+ * shape core dials, and an external address is usually reported without it. A
+ * relay-circuit address already contains `/p2p/` — the relay's — so the test is
+ * whether it ends in this node's own id, not whether it names a peer at all.
+ * Anything that is not a multiaddr is dropped. Empty when the status names no
+ * peer id or no external address, which is an honest "not dialable yet".
+ */
+export declare function admitterAddrsFromNetworkStatus(status: unknown): string[];

package/dist/cloud/cloud-client.js

@@ -418,14 +418,26 @@ export class CloudClient {
      * Ask the fleet to host a claimed namespace — the step that gets a relay
      * assigned.
      *
-     * Takes no body: {@link claimNamespace} already established ownership, and
-     * this is the separate "now host it" half. Idempotent.
+     * Carries no proof: {@link claimNamespace} already established ownership,
+     * and this is the separate "now host it" half. Idempotent.
+     *
+     * `admitterAddrs` is where the owner's own node can be dialed — take it from
+     * that node's network status with {@link admitterAddrsFromNetworkStatus}.
+     * The first fleet node placed on a namespace has nobody but the owner to ask
+     * for admission, and without these it can only broadcast and hope the
+     * owner's node — often a laptop behind a relay — hears it. They are a dial
+     * hint, not a grant: the owner's node admits by its own policy. Omit them to
+     * leave whatever the cloud already holds; pass them again when the node's
+     * relay address changes, and they replace the stored ones.
      *
      * Not to be confused with {@link enableHA}, which opens the cloud's web flow
      * in a browser tab for a user to complete by hand. This is the API call.
      */
-    async enableNamespaceHa(namespaceId) {
-        return this.request('POST', `/api/cloud/namespaces/${encodeURIComponent(namespaceId)}/enable-ha`, { body: {} });
+    async enableNamespaceHa(namespaceId, options = {}) {
+        const body = options.admitterAddrs === undefined
+            ? {}
+            : { admitter_addrs: [...options.admitterAddrs] };
+        return this.request('POST', `/api/cloud/namespaces/${encodeURIComponent(namespaceId)}/enable-ha`, { body });
     }
     /**
      * Stop hosting a claimed namespace.
@@ -737,3 +749,38 @@ export class CloudClient {
         void this.notifySession(this.session);
     }
 }
+/**
+ * The addresses a fleet node can dial to ask this node for admission, from the
+ * node's `GET /admin-api/network/status` (see `AdminApiClient`).
+ *
+ * Its `externalAddrs`, each made to end in `/p2p/<localPeerId>`: that is the
+ * shape core dials, and an external address is usually reported without it. A
+ * relay-circuit address already contains `/p2p/` — the relay's — so the test is
+ * whether it ends in this node's own id, not whether it names a peer at all.
+ * Anything that is not a multiaddr is dropped. Empty when the status names no
+ * peer id or no external address, which is an honest "not dialable yet".
+ */
+export function admitterAddrsFromNetworkStatus(status) {
+    const record = status && typeof status === 'object'
+        ? (status.data ?? status)
+        : undefined;
+    if (!record || typeof record !== 'object')
+        return [];
+    const peerId = record.localPeerId;
+    const external = record.externalAddrs;
+    if (typeof peerId !== 'string' || !peerId || !Array.isArray(external))
+        return [];
+    const suffix = `/p2p/${peerId}`;
+    const out = [];
+    for (const entry of external) {
+        if (typeof entry !== 'string')
+            continue;
+        const addr = entry.trim();
+        if (!addr.startsWith('/'))
+            continue;
+        const dialable = addr.endsWith(suffix) ? addr : `${addr}${suffix}`;
+        if (!out.includes(dialable))
+            out.push(dialable);
+    }
+    return out;
+}

package/dist/cloud/index.d.ts

@@ -1,4 +1,4 @@
-export { CloudClient } from './cloud-client.js';
+export { CloudClient, admitterAddrsFromNetworkStatus } from './cloud-client.js';
 export type { CloudClientConfig, CloudSession, CloudNamespace, CloudRelay, CloudAccountRelay, CloudNamespaceNode, CloudNamespaceRouting, CloudMachine, CloudMachineNamespace, CloudLinkedAccount, CloudLinkedAccounts, CloudAccountLink, AccountLinkChallenge, AccountLinkProof, AccountLinkHandoff, AccountLinkCallback, AccountLoginChallenge, AccountLoginProof, EnableHAOptions, DisableHAOptions, } from './cloud-client.js';
 export { connectCloud } from './connect.js';
 export type { ConnectCloudOptions, CloudConnection } from './connect.js';

package/dist/cloud/index.js

@@ -1,3 +1,3 @@
-export { CloudClient } from './cloud-client.js';
+export { CloudClient, admitterAddrsFromNetworkStatus } from './cloud-client.js';
 export { connectCloud } from './connect.js';
 export { signRoutingChallenge, routingProofHeaders } from './routing-proof.js';

package/dist/events/sse.d.ts

@@ -30,10 +30,12 @@ export declare class SseClient {
     private subscribedGroupIds;
     private closed;
     private listeners;
+    private fetchImpl;
     constructor(opts: {
         baseUrl: string;
         getAuthToken: () => Promise<string>;
         reconnectDelayMs?: number;
+        fetch?: typeof fetch;
     });
     on(event: 'connect', handler: SseConnectHandler): void;
     on(event: 'event', handler: SseEventHandler): void;

package/dist/events/sse.js

@@ -44,6 +44,9 @@ export class SseClient {
         this.baseUrl = opts.baseUrl.replace(/\/+$/, '');
         this.getAuthToken = opts.getAuthToken;
         this.reconnectDelayMs = opts.reconnectDelayMs ?? 3000;
+        // globalThis.fetch must be called as a method on globalThis, not through a
+        // variable, or browsers throw "Illegal invocation".
+        this.fetchImpl = (url, init) => opts.fetch ? opts.fetch(url, init) : globalThis.fetch(url, init);
     }
     on(event, handler) {
         const key = event;
@@ -122,7 +125,7 @@ export class SseClient {
         try {
             const token = await this.getAuthToken();
             const url = `${this.baseUrl}/sse`;
-            const response = await fetch(url, {
+            const response = await this.fetchImpl(url, {
                 headers: {
                     'Authorization': `Bearer ${token}`,
                     'Accept': 'text/event-stream',
@@ -300,7 +303,7 @@ export class SseClient {
                 params.contextIds = ids.contextIds;
             if (ids.groupIds && ids.groupIds.length > 0)
                 params.groupIds = ids.groupIds;
-            const response = await fetch(`${this.baseUrl}/sse/subscription`, {
+            const response = await this.fetchImpl(`${this.baseUrl}/sse/subscription`, {
                 method: 'POST',
                 headers: {
                     'Authorization': `Bearer ${token}`,

package/dist/http-client/http-factory.d.ts

@@ -2,6 +2,7 @@ import { Transport, HttpClient } from './http-types.js';
 export declare function createHttpClient(transport: Transport): HttpClient;
 export declare function createBrowserHttpClient(options: {
     baseUrl: string;
+    fetch?: typeof fetch;
     getAuthToken?: () => Promise<string | undefined>;
     getProof?: Transport['getProof'];
     onTokenRefresh?: (newToken: string) => Promise<void>;

package/dist/http-client/http-factory.js

@@ -6,9 +6,9 @@ export function createHttpClient(transport) {
 // Factory function for browser environments
 export function createBrowserHttpClient(options) {
     const transport = {
-        // Wrap fetch in arrow function to prevent "Illegal invocation" error
-        // This preserves the correct 'this' context when fetch is called
-        fetch: (url, init) => globalThis.fetch(url, init),
+        // globalThis.fetch must be called as a method on globalThis, not through a
+        // variable, or browsers throw "Illegal invocation".
+        fetch: (url, init) => options.fetch ? options.fetch(url, init) : globalThis.fetch(url, init),
         baseUrl: options.baseUrl,
         getAuthToken: options.getAuthToken,
         getProof: options.getProof,