@calimero-network/mero-js 19.20.0 → 19.22.0

package/dist/admin-api/admin-types.d.ts

@@ -1284,7 +1284,20 @@ export interface SetSubgroupVisibilityRequest {
     subgroupVisibility: string;
 }
 export type SetSubgroupVisibilityResponseData = Record<string, never>;
-export interface SetTeeAdmissionPolicyRequest {
+/**
+ * The signed-release form of a TEE admission policy: admit a TEE running any
+ * mero-tee node release the mero-tee release workflow signed, if its quote
+ * matches one of `allowedProfiles` in that release's `published-mrtds.json`.
+ * Unlike the measurement lists, it does not need updating for each release.
+ */
+export interface SignedReleaseTeePolicy {
+    /** Image profiles to admit, e.g. `locked-read-only`. */
+    allowedProfiles: string[];
+    /** The oldest release admitted (`2.3.72`); any signed release when absent. */
+    minReleaseVersion?: string;
+}
+/** A policy that lists the measurements it admits. */
+export interface MeasurementTeeAdmissionPolicyRequest {
     allowedMrtd: string[];
     allowedRtmr0: string[];
     allowedRtmr1: string[];
@@ -1293,6 +1306,13 @@ export interface SetTeeAdmissionPolicyRequest {
     allowedTcbStatuses: string[];
     acceptMock: boolean;
 }
+/** A policy that admits by signed release. The node refuses measurement lists beside it. */
+export interface SignedReleaseTeeAdmissionPolicyRequest {
+    signedRelease: SignedReleaseTeePolicy;
+    allowedTcbStatuses: string[];
+    acceptMock: boolean;
+}
+export type SetTeeAdmissionPolicyRequest = MeasurementTeeAdmissionPolicyRequest | SignedReleaseTeeAdmissionPolicyRequest;
 export type SetTeeAdmissionPolicyResponseData = Record<string, never>;
 export interface GetTeeAdmissionPolicyResponseData {
     allowedMrtd: string[];
@@ -1302,6 +1322,8 @@ export interface GetTeeAdmissionPolicyResponseData {
     allowedRtmr3: string[];
     allowedTcbStatuses: string[];
     acceptMock: boolean;
+    /** Set when the policy admits by signed release; the lists are then empty. */
+    signedRelease?: SignedReleaseTeePolicy;
 }
 /**
  * Which admitted TEEs may author as the group's TEE authority (the writer behind
@@ -1472,6 +1494,11 @@ export interface TeeInfoResponseData {
 export interface TeeAttestRequest {
     nonce: string;
     applicationId?: string;
+    /**
+     * Bind the node's X25519 transport key into the quote; the response names it
+     * as `transportPublicKey`. See `fetchAttestedTransportKey`.
+     */
+    bindTransportKey?: boolean;
 }
 export interface QuoteHeader {
     version: number;
@@ -1510,6 +1537,8 @@ export interface Quote {
 export interface TeeAttestResponseData {
     quoteB64: string;
     quote: Quote;
+    /** Hex X25519 transport key, present only when the request set `bindTransportKey`. */
+    transportPublicKey?: string;
 }
 export interface TeeVerifyQuoteRequest {
     quoteB64: string;