@calimero-network/mero-js 19.18.0 → 19.20.0

package/dist/admin-api/admin-client.d.ts

@@ -1,5 +1,5 @@
 import { HttpClient } from '../http-client/index.js';
-import type { HealthStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, InviteSpecializedNodeRequest, InviteSpecializedNodeResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, BlobReadOptions, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateDeviceAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NamespaceIdentity, NodeIdentity, AccountPairInitRequest, AccountPairInitResponseData, AccountPairCompleteRequest, AccountPairCompleteResponseData, AccountSignWithRootRequest, AccountSignWithRootResponseData, RelinkDeviceRequest, RelinkDeviceResponseData, RescopeDeviceRequest, RescopeDeviceResponseData, LabelDeviceRequest, LabelDeviceResponseData, AccountDeviceEntry, AccountApplicationEntry, RevokeAccountDeviceRequest, RevokeAccountDeviceResponseData, GroupInfoResponseData, CreateGroupRequest, CreateGroupResponseData, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetMemberAutoFollowRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, CascadeStatusEntry, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, IssueOwnershipProofRequest, IssueNamespaceOwnershipProofRequest, IssueOwnershipProofResponseData, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, TeeVerifyQuoteRequest, TeeVerifyQuoteResponseData, PerformIntentRequest, PerformIntentResponseData, IntentRelayInfo, AdmitJoinRequest, AdmitJoinResponseData } from './admin-types.js';
+import type { HealthStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, InviteSpecializedNodeRequest, InviteSpecializedNodeResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, BlobReadOptions, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateDeviceAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NamespaceIdentity, NodeIdentity, AccountPairInitRequest, AccountPairInitResponseData, AccountPairCompleteRequest, AccountPairCompleteResponseData, AccountSignWithRootRequest, AccountSignWithRootResponseData, RelinkDeviceRequest, RelinkDeviceResponseData, RescopeDeviceRequest, RescopeDeviceResponseData, LabelDeviceRequest, LabelDeviceResponseData, AccountDeviceEntry, AccountApplicationEntry, RevokeAccountDeviceRequest, RevokeAccountDeviceResponseData, GroupInfoResponseData, CreateGroupRequest, CreateGroupResponseData, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetMemberAutoFollowRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, SetTeeAuthoringPolicyRequest, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, CascadeStatusEntry, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, IssueOwnershipProofRequest, IssueNamespaceOwnershipProofRequest, IssueOwnershipProofResponseData, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, TeeVerifyQuoteRequest, TeeVerifyQuoteResponseData, PerformIntentRequest, PerformIntentResponseData, IntentRelayInfo, AdmitJoinRequest, AdmitJoinResponseData } from './admin-types.js';
 /**
  * Compare two version strings by SemVer 2.0 precedence, ascending: negative if
  * `a < b`, positive if `a > b`, `0` if equal. Build metadata (`+...`) is stripped
@@ -460,6 +460,13 @@ export declare class AdminApiClient {
     setSubgroupVisibility(groupId: string, request: SetSubgroupVisibilityRequest): Promise<void>;
     setTeeAdmissionPolicy(groupId: string, request: SetTeeAdmissionPolicyRequest): Promise<void>;
     getTeeAdmissionPolicy(groupId: string): Promise<GetTeeAdmissionPolicyResponseData>;
+    /**
+     * Sets which admitted TEEs may author as the TEE authority. Pass
+     * `{ allowedMrtd: [] }` to turn TEE authorship off. `groupId` must be a
+     * namespace root; the node refuses a subgroup. The node exposes no read-back
+     * route for this policy.
+     */
+    setTeeAuthoringPolicy(groupId: string, request: SetTeeAuthoringPolicyRequest): Promise<void>;
     setGroupMetadata(groupId: string, request: SetGroupMetadataRequest): Promise<void>;
     getGroupMetadata(groupId: string): Promise<MetadataRecord | null>;
     setMemberMetadata(groupId: string, identity: string, request: SetMemberMetadataRequest): Promise<void>;

package/dist/admin-api/admin-client.js

@@ -852,6 +852,15 @@ export class AdminApiClient {
         const response = await this.httpClient.get(`/admin-api/groups/${groupId}/settings/tee-admission-policy`);
         return response.data ?? response;
     }
+    /**
+     * Sets which admitted TEEs may author as the TEE authority. Pass
+     * `{ allowedMrtd: [] }` to turn TEE authorship off. `groupId` must be a
+     * namespace root; the node refuses a subgroup. The node exposes no read-back
+     * route for this policy.
+     */
+    async setTeeAuthoringPolicy(groupId, request) {
+        await this.httpClient.put(`/admin-api/groups/${groupId}/settings/tee-authoring-policy`, request);
+    }
     // ---- Group / member / context metadata ----
     async setGroupMetadata(groupId, request) {
         await this.httpClient.put(`/admin-api/groups/${groupId}/metadata`, request);

package/dist/admin-api/admin-types.d.ts

@@ -1303,6 +1303,17 @@ export interface GetTeeAdmissionPolicyResponseData {
     allowedTcbStatuses: string[];
     acceptMock: boolean;
 }
+/**
+ * Which admitted TEEs may author as the group's TEE authority (the writer behind
+ * `TeeOnly` storage and `#[app::tee]` methods). A TEE whose attested MRTD is in
+ * `allowedMrtd` may author; an empty list turns TEE authorship off.
+ *
+ * Namespace-scoped: set it on the namespace root. The node refuses it on a subgroup.
+ */
+export interface SetTeeAuthoringPolicyRequest {
+    allowedMrtd: string[];
+}
+export type SetTeeAuthoringPolicyResponseData = Record<string, never>;
 /**
  * Generic metadata record attached to a group, group member, or
  * context-registered-in-a-group (core `calimero_primitives::metadata::MetadataRecord`).

package/dist/cloud/cloud-client.d.ts

@@ -530,13 +530,24 @@ export declare class CloudClient {
      * Ask the fleet to host a claimed namespace — the step that gets a relay
      * assigned.
      *
-     * Takes no body: {@link claimNamespace} already established ownership, and
-     * this is the separate "now host it" half. Idempotent.
+     * Carries no proof: {@link claimNamespace} already established ownership,
+     * and this is the separate "now host it" half. Idempotent.
+     *
+     * `admitterAddrs` is where the owner's own node can be dialed — take it from
+     * that node's network status with {@link admitterAddrsFromNetworkStatus}.
+     * The first fleet node placed on a namespace has nobody but the owner to ask
+     * for admission, and without these it can only broadcast and hope the
+     * owner's node — often a laptop behind a relay — hears it. They are a dial
+     * hint, not a grant: the owner's node admits by its own policy. Omit them to
+     * leave whatever the cloud already holds; pass them again when the node's
+     * relay address changes, and they replace the stored ones.
      *
      * Not to be confused with {@link enableHA}, which opens the cloud's web flow
      * in a browser tab for a user to complete by hand. This is the API call.
      */
-    enableNamespaceHa(namespaceId: string): Promise<unknown>;
+    enableNamespaceHa(namespaceId: string, options?: {
+        admitterAddrs?: readonly string[];
+    }): Promise<unknown>;
     /**
      * Stop hosting a claimed namespace.
      *
@@ -680,3 +691,15 @@ export declare class CloudClient {
      */
     private adoptRollingRefresh;
 }
+/**
+ * The addresses a fleet node can dial to ask this node for admission, from the
+ * node's `GET /admin-api/network/status` (see `AdminApiClient`).
+ *
+ * Its `externalAddrs`, each made to end in `/p2p/<localPeerId>`: that is the
+ * shape core dials, and an external address is usually reported without it. A
+ * relay-circuit address already contains `/p2p/` — the relay's — so the test is
+ * whether it ends in this node's own id, not whether it names a peer at all.
+ * Anything that is not a multiaddr is dropped. Empty when the status names no
+ * peer id or no external address, which is an honest "not dialable yet".
+ */
+export declare function admitterAddrsFromNetworkStatus(status: unknown): string[];

package/dist/cloud/cloud-client.js

@@ -418,14 +418,26 @@ export class CloudClient {
      * Ask the fleet to host a claimed namespace — the step that gets a relay
      * assigned.
      *
-     * Takes no body: {@link claimNamespace} already established ownership, and
-     * this is the separate "now host it" half. Idempotent.
+     * Carries no proof: {@link claimNamespace} already established ownership,
+     * and this is the separate "now host it" half. Idempotent.
+     *
+     * `admitterAddrs` is where the owner's own node can be dialed — take it from
+     * that node's network status with {@link admitterAddrsFromNetworkStatus}.
+     * The first fleet node placed on a namespace has nobody but the owner to ask
+     * for admission, and without these it can only broadcast and hope the
+     * owner's node — often a laptop behind a relay — hears it. They are a dial
+     * hint, not a grant: the owner's node admits by its own policy. Omit them to
+     * leave whatever the cloud already holds; pass them again when the node's
+     * relay address changes, and they replace the stored ones.
      *
      * Not to be confused with {@link enableHA}, which opens the cloud's web flow
      * in a browser tab for a user to complete by hand. This is the API call.
      */
-    async enableNamespaceHa(namespaceId) {
-        return this.request('POST', `/api/cloud/namespaces/${encodeURIComponent(namespaceId)}/enable-ha`, { body: {} });
+    async enableNamespaceHa(namespaceId, options = {}) {
+        const body = options.admitterAddrs === undefined
+            ? {}
+            : { admitter_addrs: [...options.admitterAddrs] };
+        return this.request('POST', `/api/cloud/namespaces/${encodeURIComponent(namespaceId)}/enable-ha`, { body });
     }
     /**
      * Stop hosting a claimed namespace.
@@ -737,3 +749,38 @@ export class CloudClient {
         void this.notifySession(this.session);
     }
 }
+/**
+ * The addresses a fleet node can dial to ask this node for admission, from the
+ * node's `GET /admin-api/network/status` (see `AdminApiClient`).
+ *
+ * Its `externalAddrs`, each made to end in `/p2p/<localPeerId>`: that is the
+ * shape core dials, and an external address is usually reported without it. A
+ * relay-circuit address already contains `/p2p/` — the relay's — so the test is
+ * whether it ends in this node's own id, not whether it names a peer at all.
+ * Anything that is not a multiaddr is dropped. Empty when the status names no
+ * peer id or no external address, which is an honest "not dialable yet".
+ */
+export function admitterAddrsFromNetworkStatus(status) {
+    const record = status && typeof status === 'object'
+        ? (status.data ?? status)
+        : undefined;
+    if (!record || typeof record !== 'object')
+        return [];
+    const peerId = record.localPeerId;
+    const external = record.externalAddrs;
+    if (typeof peerId !== 'string' || !peerId || !Array.isArray(external))
+        return [];
+    const suffix = `/p2p/${peerId}`;
+    const out = [];
+    for (const entry of external) {
+        if (typeof entry !== 'string')
+            continue;
+        const addr = entry.trim();
+        if (!addr.startsWith('/'))
+            continue;
+        const dialable = addr.endsWith(suffix) ? addr : `${addr}${suffix}`;
+        if (!out.includes(dialable))
+            out.push(dialable);
+    }
+    return out;
+}

package/dist/cloud/index.d.ts

@@ -1,4 +1,4 @@
-export { CloudClient } from './cloud-client.js';
+export { CloudClient, admitterAddrsFromNetworkStatus } from './cloud-client.js';
 export type { CloudClientConfig, CloudSession, CloudNamespace, CloudRelay, CloudAccountRelay, CloudNamespaceNode, CloudNamespaceRouting, CloudMachine, CloudMachineNamespace, CloudLinkedAccount, CloudLinkedAccounts, CloudAccountLink, AccountLinkChallenge, AccountLinkProof, AccountLinkHandoff, AccountLinkCallback, AccountLoginChallenge, AccountLoginProof, EnableHAOptions, DisableHAOptions, } from './cloud-client.js';
 export { connectCloud } from './connect.js';
 export type { ConnectCloudOptions, CloudConnection } from './connect.js';

package/dist/cloud/index.js

@@ -1,3 +1,3 @@
-export { CloudClient } from './cloud-client.js';
+export { CloudClient, admitterAddrsFromNetworkStatus } from './cloud-client.js';
 export { connectCloud } from './connect.js';
 export { signRoutingChallenge, routingProofHeaders } from './routing-proof.js';