@calimero-network/mero-js 22.9.0 → 23.1.0

package/dist/admin-api/admin-client.d.ts

@@ -1,5 +1,5 @@
 import { HttpClient, HTTPError } from '../http-client/index.js';
-import type { HealthStatus, ReadinessStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, InviteSpecializedNodeRequest, InviteSpecializedNodeResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, BlobReadOptions, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateDeviceAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NamespaceIdentity, NodeIdentity, AccountPairInitRequest, AccountPairInitResponseData, AccountPairCompleteRequest, AccountPairCompleteResponseData, AccountSignWithRootRequest, AccountSignWithRootResponseData, RelinkDeviceRequest, RelinkDeviceResponseData, RescopeDeviceRequest, RescopeDeviceResponseData, LabelDeviceRequest, LabelDeviceResponseData, AccountDeviceEntry, AccountApplicationEntry, RevokeAccountDeviceRequest, LinkAccountDeviceRequest, LinkAccountDeviceResponseData, RevokeAccountDeviceResponseData, MemberDevicesEntry, ListMemberDevicesOptions, GroupInfoResponseData, CreateGroupRequest, CreateGroupResponseData, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetMemberAutoFollowRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, SetTeeAuthoringPolicyRequest, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, CascadeStatusEntry, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, IssueOwnershipProofRequest, IssueNamespaceOwnershipProofRequest, IssueOwnershipProofResponseData, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, TeeVerifyQuoteRequest, TeeVerifyQuoteResponseData, PerformIntentRequest, PerformIntentResponseData, IntentRelayInfo, QueryContextRequest, QueryContextResponseData, ListMemberDevicesResponseData, SealToAccountRequest, SealedEnvelope, AdmitJoinRequest, AdmitJoinResponseData, WarrantNonceState } from './admin-types.js';
+import type { HealthStatus, ReadinessStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, InviteSpecializedNodeRequest, InviteSpecializedNodeResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, BlobReadOptions, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateDeviceAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NamespaceIdentity, NodeIdentity, AccountPairInitRequest, AccountPairInitResponseData, AccountPairCompleteRequest, AccountPairCompleteResponseData, AccountSignWithRootRequest, AccountSignWithRootResponseData, RelinkDeviceRequest, RelinkDeviceResponseData, RescopeDeviceRequest, RescopeDeviceResponseData, LabelDeviceRequest, LabelDeviceResponseData, AccountDeviceEntry, AccountApplicationEntry, RevokeAccountDeviceRequest, LinkAccountDeviceRequest, LinkAccountDeviceResponseData, RevokeAccountDeviceResponseData, MemberDevicesEntry, ListMemberDevicesOptions, GroupInfoResponseData, CreateGroupRequest, CreateGroupResponseData, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetMemberAutoFollowRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, SetTeeAuthoringPolicyRequest, TransferOwnershipRequest, ChangeNamespaceAdminRequest, OwnerDeleteGroupRequest, RootGuardedOpRequest, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, CascadeStatusEntry, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, IssueOwnershipProofRequest, IssueNamespaceOwnershipProofRequest, IssueOwnershipProofResponseData, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, TeeVerifyQuoteRequest, TeeVerifyQuoteResponseData, PerformIntentRequest, PerformIntentResponseData, IntentRelayInfo, QueryContextRequest, QueryContextResponseData, ListMemberDevicesResponseData, SealToAccountRequest, SealedEnvelope, AdmitJoinRequest, AdmitJoinResponseData, WarrantNonceState } from './admin-types.js';
 import { type RedeemOutcome } from './redeem-invitation.js';
 /**
  * Thrown when a node answers the warrant-nonce route with a 404.
@@ -676,8 +676,28 @@ export declare class AdminApiClient {
      * and admitted TEEs stay members. The node applies the same op as
      * `setTeeAuthoringPolicy(groupId, { allowedMrtd: [] })`. `groupId` must be a
      * namespace root.
+     *
+     * `rootProof` is the signing admin's own root proof for that empty policy
+     * (`teeAuthoringPolicyOp([])`); omit it on a node that holds that root.
+     */
+    disableTeeAuthoringPolicy(groupId: string, options?: RootGuardedOpRequest): Promise<void>;
+    /**
+     * Hand the group to `newOwner`, who must already be one of its admins.
+     * Owner-only, and it needs the owner account's root proof; see
+     * {@link RootGuardedOpRequest}.
+     */
+    transferOwnership(groupId: string, request: TransferOwnershipRequest): Promise<void>;
+    /**
+     * Repoint the namespace's admin pin at `newAdmin`, a member of its root.
+     * Owner-only, with the owner account's root proof; see {@link RootGuardedOpRequest}.
+     */
+    changeNamespaceAdmin(namespaceId: string, request: ChangeNamespaceAdminRequest): Promise<void>;
+    /**
+     * Delete a group through the owner-only path: it must hold no contexts, and
+     * the op needs the owner account's root proof. {@link deleteGroup} is the
+     * admin-level cascading delete.
      */
-    disableTeeAuthoringPolicy(groupId: string): Promise<void>;
+    ownerDeleteGroup(groupId: string, request?: OwnerDeleteGroupRequest): Promise<void>;
     setGroupMetadata(groupId: string, request: SetGroupMetadataRequest): Promise<void>;
     getGroupMetadata(groupId: string): Promise<MetadataRecord | null>;
     setMemberMetadata(groupId: string, identity: string, request: SetMemberMetadataRequest): Promise<void>;

package/dist/admin-api/admin-client.js

@@ -1192,9 +1192,45 @@ export class AdminApiClient {
      * and admitted TEEs stay members. The node applies the same op as
      * `setTeeAuthoringPolicy(groupId, { allowedMrtd: [] })`. `groupId` must be a
      * namespace root.
+     *
+     * `rootProof` is the signing admin's own root proof for that empty policy
+     * (`teeAuthoringPolicyOp([])`); omit it on a node that holds that root.
+     */
+    async disableTeeAuthoringPolicy(groupId, options = {}) {
+        const path = `/admin-api/groups/${groupId}/settings/tee-authoring-policy`;
+        if (options.rootProof === undefined) {
+            await this.httpClient.delete(path);
+            return;
+        }
+        await this.httpClient.request(path, {
+            method: 'DELETE',
+            body: JSON.stringify({ rootProof: options.rootProof }),
+            headers: { 'Content-Type': 'application/json' },
+        });
+    }
+    // ---- Root-guarded owner ops (core schema 18) ----
+    /**
+     * Hand the group to `newOwner`, who must already be one of its admins.
+     * Owner-only, and it needs the owner account's root proof; see
+     * {@link RootGuardedOpRequest}.
+     */
+    async transferOwnership(groupId, request) {
+        await this.httpClient.post(`/admin-api/groups/${groupId}/transfer-ownership`, request);
+    }
+    /**
+     * Repoint the namespace's admin pin at `newAdmin`, a member of its root.
+     * Owner-only, with the owner account's root proof; see {@link RootGuardedOpRequest}.
+     */
+    async changeNamespaceAdmin(namespaceId, request) {
+        await this.httpClient.post(`/admin-api/namespaces/${namespaceId}/admin`, request);
+    }
+    /**
+     * Delete a group through the owner-only path: it must hold no contexts, and
+     * the op needs the owner account's root proof. {@link deleteGroup} is the
+     * admin-level cascading delete.
      */
-    async disableTeeAuthoringPolicy(groupId) {
-        await this.httpClient.delete(`/admin-api/groups/${groupId}/settings/tee-authoring-policy`);
+    async ownerDeleteGroup(groupId, request = {}) {
+        await this.httpClient.post(`/admin-api/groups/${groupId}/owner-delete`, request);
     }
     // ---- Group / member / context metadata ----
     async setGroupMetadata(groupId, request) {

package/dist/admin-api/admin-types.d.ts

@@ -758,7 +758,9 @@ export interface AccountPairInitResponseData {
      */
     signPublicKey: string;
     /**
-     * Ed25519 signature over the account, the device id and both keys above, hex.
+     * The time the device signed, then its Ed25519 signature over the account, the
+     * device id, both keys above and that time, hex (8 + 64 bytes). The holder's
+     * node refuses a statement older than a few minutes.
      *
      * Carried so the three values arrive as a statement by the device that minted
      * them rather than as assertions by whoever relayed them; `pair-complete`
@@ -1337,6 +1339,19 @@ export interface GroupInfo {
      * `null` if no metadata has ever been set for this group.
      */
     metadata?: MetadataRecord | null;
+    /** Hex hash of the group's authorization-relevant state, for convergence polling. */
+    groupStateHash?: string;
+    /**
+     * The namespace this group belongs to (itself, for a namespace root). An
+     * owner-op root proof binds it. Absent from nodes before core schema 18.
+     */
+    namespaceId?: string;
+    /**
+     * How many root-guarded owner ops this group has applied: the `counter` a
+     * root proof for its next one must name. Absent from nodes before core
+     * schema 18.
+     */
+    ownerOpCounter?: number;
 }
 export type GroupInfoResponseData = GroupInfo;
 /**
@@ -1513,6 +1528,12 @@ export interface MeasurementTeeAdmissionPolicyRequest {
     acceptMock: boolean;
     /** Absent means `replica`. */
     mode?: TeeAdmissionMode;
+    /**
+     * Hex borsh of the signing admin's own root proof for this policy op
+     * ({@link signOwnerOpProof} with the matching policy encoder). Omit it on a
+     * node that holds that admin's account root, which signs one itself.
+     */
+    rootProof?: string;
 }
 /** A policy that admits by signed release. The node refuses measurement lists beside it. */
 export interface SignedReleaseTeeAdmissionPolicyRequest {
@@ -1521,6 +1542,12 @@ export interface SignedReleaseTeeAdmissionPolicyRequest {
     acceptMock: boolean;
     /** Absent means `replica`. */
     mode?: TeeAdmissionMode;
+    /**
+     * Hex borsh of the signing admin's own root proof for this policy op
+     * ({@link signOwnerOpProof} with the matching policy encoder). Omit it on a
+     * node that holds that admin's account root, which signs one itself.
+     */
+    rootProof?: string;
 }
 export type SetTeeAdmissionPolicyRequest = MeasurementTeeAdmissionPolicyRequest | SignedReleaseTeeAdmissionPolicyRequest;
 export type SetTeeAdmissionPolicyResponseData = Record<string, never>;
@@ -1551,7 +1578,42 @@ export interface GetTeeAdmissionPolicyResponseData {
  */
 export interface SetTeeAuthoringPolicyRequest {
     allowedMrtd: string[];
+    /**
+     * Hex borsh of the signing admin's own root proof for this policy op
+     * ({@link signOwnerOpProof} with the matching policy encoder). Omit it on a
+     * node that holds that admin's account root, which signs one itself.
+     */
+    rootProof?: string;
+}
+/**
+ * The root proof an owner-level op carries (core schema 18).
+ *
+ * A device key alone cannot transfer a group, repoint a namespace's admin,
+ * delete a group through the owner-only path, or set a TEE policy: each needs a
+ * proof signed by the account's ROOT key. On a node that holds that root (as
+ * `merod init` provisions) omit `rootProof` and the node signs it. Otherwise sign
+ * one offline with {@link signOwnerOpProof}, over the group's current
+ * `ownerOpCounter` and `namespaceId` from {@link GroupInfo}. Each proof applies
+ * once. Without either, the node answers `403`.
+ */
+export interface RootGuardedOpRequest {
+    /** Hex borsh of an `AccountProof<OwnerOpAuthorization>`. */
+    rootProof?: string;
 }
+/** Hand a group to `newOwner`, an account (64 hex) that is already one of its admins. */
+export interface TransferOwnershipRequest extends RootGuardedOpRequest {
+    newOwner: string;
+}
+/** Repoint a namespace's admin pin at `newAdmin`, an account that is a member of its root. */
+export interface ChangeNamespaceAdminRequest extends RootGuardedOpRequest {
+    newAdmin: string;
+}
+/**
+ * The owner-only deletion of a group that holds no contexts. The admin-level
+ * cascading delete is {@link AdminApiClient.deleteGroup}.
+ */
+export type OwnerDeleteGroupRequest = RootGuardedOpRequest;
+export type RootGuardedOpResponseData = Record<string, never>;
 export type SetTeeAuthoringPolicyResponseData = Record<string, never>;
 /**
  * Generic metadata record attached to a group, group member, or