@calimero-network/mero-js 19.21.0 → 19.22.0

package/dist/admin-api/admin-types.d.ts

@@ -1284,7 +1284,20 @@ export interface SetSubgroupVisibilityRequest {
     subgroupVisibility: string;
 }
 export type SetSubgroupVisibilityResponseData = Record<string, never>;
-export interface SetTeeAdmissionPolicyRequest {
+/**
+ * The signed-release form of a TEE admission policy: admit a TEE running any
+ * mero-tee node release the mero-tee release workflow signed, if its quote
+ * matches one of `allowedProfiles` in that release's `published-mrtds.json`.
+ * Unlike the measurement lists, it does not need updating for each release.
+ */
+export interface SignedReleaseTeePolicy {
+    /** Image profiles to admit, e.g. `locked-read-only`. */
+    allowedProfiles: string[];
+    /** The oldest release admitted (`2.3.72`); any signed release when absent. */
+    minReleaseVersion?: string;
+}
+/** A policy that lists the measurements it admits. */
+export interface MeasurementTeeAdmissionPolicyRequest {
     allowedMrtd: string[];
     allowedRtmr0: string[];
     allowedRtmr1: string[];
@@ -1293,6 +1306,13 @@ export interface SetTeeAdmissionPolicyRequest {
     allowedTcbStatuses: string[];
     acceptMock: boolean;
 }
+/** A policy that admits by signed release. The node refuses measurement lists beside it. */
+export interface SignedReleaseTeeAdmissionPolicyRequest {
+    signedRelease: SignedReleaseTeePolicy;
+    allowedTcbStatuses: string[];
+    acceptMock: boolean;
+}
+export type SetTeeAdmissionPolicyRequest = MeasurementTeeAdmissionPolicyRequest | SignedReleaseTeeAdmissionPolicyRequest;
 export type SetTeeAdmissionPolicyResponseData = Record<string, never>;
 export interface GetTeeAdmissionPolicyResponseData {
     allowedMrtd: string[];
@@ -1302,6 +1322,8 @@ export interface GetTeeAdmissionPolicyResponseData {
     allowedRtmr3: string[];
     allowedTcbStatuses: string[];
     acceptMock: boolean;
+    /** Set when the policy admits by signed release; the lists are then empty. */
+    signedRelease?: SignedReleaseTeePolicy;
 }
 /**
  * Which admitted TEEs may author as the group's TEE authority (the writer behind