@calimero-network/mero-js 23.0.0 → 23.1.0

package/dist/warrant/governance-op.d.ts

@@ -155,3 +155,39 @@ export interface NamespaceCreatedInput {
  * inline. The warrant's scope must be {@link foundedNamespaceId}`(founder, salt)`.
  */
 export declare function namespaceCreatedOp(input: NamespaceCreatedInput): GovernanceOp;
+/** Set `member`'s capabilities in the group (`GroupOp::MemberCapabilitySet`). Bit 9 is refused. */
+export declare function memberCapabilitySetOp(member: string, capabilities: number): GovernanceOp;
+/** Detach a context from the group (`GroupOp::ContextDetached`). */
+export declare function contextDetachedOp(contextId: string): GovernanceOp;
+/** Make a subgroup open (members of the parent may join it themselves) or restricted. */
+export declare function subgroupVisibilitySetOp(mode: 'open' | 'restricted'): GovernanceOp;
+/** Name the group, with optional key/value data (`GroupOp::GroupMetadataSet`). */
+export declare function groupMetadataSetOp(input?: {
+    name?: string;
+    data?: Record<string, string>;
+}): GovernanceOp;
+/** Name a member in the group (`GroupOp::MemberMetadataSet`). */
+export declare function memberMetadataSetOp(member: string, input?: {
+    name?: string;
+    data?: Record<string, string>;
+}): GovernanceOp;
+/** Name a context in the group (`GroupOp::ContextMetadataSet`). */
+export declare function contextMetadataSetOp(contextId: string, input?: {
+    name?: string;
+    data?: Record<string, string>;
+}): GovernanceOp;
+/** Grant `member` a per-context capability (`GroupOp::ContextCapabilityGranted`). */
+export declare function contextCapabilityGrantedOp(contextId: string, member: string, capability: number): GovernanceOp;
+/** Revoke a per-context capability from `member` (`GroupOp::ContextCapabilityRevoked`). */
+export declare function contextCapabilityRevokedOp(contextId: string, member: string, capability: number): GovernanceOp;
+/**
+ * Join an open subgroup yourself (`RootOp::MemberJoinedOpen`), a root op posted
+ * to the namespace. `member` must be the author; `credential` is the author's
+ * own `AccountProof<DeviceCert>`, hex, carried as-is. The author's
+ * `CAN_JOIN_OPEN_SUBGROUPS` and the open inheritance path are checked as usual.
+ */
+export declare function memberJoinedOpenOp(input: {
+    member: string;
+    groupId: string;
+    credential: string;
+}): GovernanceOp;

package/dist/warrant/governance-op.js

@@ -36,13 +36,22 @@ const GROUP_OP = {
     MemberRemoved: 2,
     MemberLeft: 3,
     MemberRoleSet: 4,
+    MemberCapabilitySet: 5,
     DefaultCapabilitiesSet: 6,
+    ContextDetached: 9,
+    SubgroupVisibilitySet: 10,
+    GroupMetadataSet: 11,
+    MemberMetadataSet: 12,
+    ContextMetadataSet: 13,
+    ContextCapabilityGranted: 16,
+    ContextCapabilityRevoked: 17,
 };
 /** `RootOp` discriminants, by position in core's enum. */
 const ROOT_OP = {
     GroupCreated: 0,
     GroupReparented: 1,
     GroupDeleted: 2,
+    MemberJoinedOpen: 7,
     NamespaceCreatedV2: 9,
 };
 /** core's `NAMESPACE_ID_DOMAIN`, which a founded namespace id is hashed under. */
@@ -212,3 +221,109 @@ export function namespaceCreatedOp(input) {
         bytes: concat(tag(ROOT_OP.NamespaceCreatedV2), fromHex(input.founder, 'founder', 32), credential, fromHex(input.salt, 'salt', 32)),
     };
 }
+// ---------------------------------------------------------------------------
+// The rest of the delegable set. Layouts are pinned against core's
+// `delegable_governance_op_vectors_for_non_rust_encoders_are_stable`
+// (crates/governance-types/src/tests.rs, core#4272).
+/** A borsh `String`: a u32 byte length, then the UTF-8 bytes. */
+function str(value) {
+    const bytes = new TextEncoder().encode(value);
+    return concat(u32le(bytes.length), bytes);
+}
+/** A borsh `Option<String>`: 0, or 1 then the string. */
+function optionalStr(value) {
+    return value === undefined ? tag(0) : concat(tag(1), str(value));
+}
+/**
+ * A borsh `BTreeMap<String, String>`: a u32 count, then each entry in the
+ * map's own order, which is by key BYTES (not JS string order).
+ */
+function stringMap(data = {}) {
+    const enc = new TextEncoder();
+    const entries = Object.entries(data)
+        .map(([k, v]) => [enc.encode(k), v, k])
+        .sort(([a], [b]) => {
+        for (let i = 0; i < Math.min(a.length, b.length); i++)
+            if (a[i] !== b[i])
+                return a[i] - b[i];
+        return a.length - b.length;
+    });
+    return concat(u32le(entries.length), ...entries.flatMap(([, v, k]) => [str(k), str(v)]));
+}
+/** Validate a u32 capability mask a relay may carry: never bit 9. */
+function relayableMask(capabilities, what) {
+    if (!Number.isInteger(capabilities) || capabilities < 0 || capabilities > 4294967295) {
+        throw new Error(`${what} must be a u32 bit mask, got ${String(capabilities)}`);
+    }
+    if (hasCap(capabilities, CAPABILITIES.CAN_AUTHOR_ON_BEHALF)) {
+        throw new Error(`${what} may not include CAN_AUTHOR_ON_BEHALF (512): a relay never carries a change to it`);
+    }
+    return capabilities;
+}
+/** Set `member`'s capabilities in the group (`GroupOp::MemberCapabilitySet`). Bit 9 is refused. */
+export function memberCapabilitySetOp(member, capabilities) {
+    return {
+        kind: 'group',
+        bytes: concat(tag(GROUP_OP.MemberCapabilitySet), fromHex(member, 'member', 32), u32le(relayableMask(capabilities, 'capabilities'))),
+    };
+}
+/** Detach a context from the group (`GroupOp::ContextDetached`). */
+export function contextDetachedOp(contextId) {
+    return { kind: 'group', bytes: concat(tag(GROUP_OP.ContextDetached), fromHex(contextId, 'contextId', 32)) };
+}
+/** Make a subgroup open (members of the parent may join it themselves) or restricted. */
+export function subgroupVisibilitySetOp(mode) {
+    if (mode !== 'open' && mode !== 'restricted')
+        throw new Error(`mode must be open or restricted, got ${String(mode)}`);
+    return { kind: 'group', bytes: concat(tag(GROUP_OP.SubgroupVisibilitySet), tag(mode === 'open' ? 0 : 1)) };
+}
+/** Name the group, with optional key/value data (`GroupOp::GroupMetadataSet`). */
+export function groupMetadataSetOp(input = {}) {
+    return { kind: 'group', bytes: concat(tag(GROUP_OP.GroupMetadataSet), optionalStr(input.name), stringMap(input.data)) };
+}
+/** Name a member in the group (`GroupOp::MemberMetadataSet`). */
+export function memberMetadataSetOp(member, input = {}) {
+    return {
+        kind: 'group',
+        bytes: concat(tag(GROUP_OP.MemberMetadataSet), fromHex(member, 'member', 32), optionalStr(input.name), stringMap(input.data)),
+    };
+}
+/** Name a context in the group (`GroupOp::ContextMetadataSet`). */
+export function contextMetadataSetOp(contextId, input = {}) {
+    return {
+        kind: 'group',
+        bytes: concat(tag(GROUP_OP.ContextMetadataSet), fromHex(contextId, 'contextId', 32), optionalStr(input.name), stringMap(input.data)),
+    };
+}
+function contextCapability(capability) {
+    if (!Number.isInteger(capability) || capability < 1 || capability > 0xff) {
+        throw new Error(`capability must be a non-zero u8, got ${String(capability)}`);
+    }
+    return tag(capability);
+}
+/** Grant `member` a per-context capability (`GroupOp::ContextCapabilityGranted`). */
+export function contextCapabilityGrantedOp(contextId, member, capability) {
+    return {
+        kind: 'group',
+        bytes: concat(tag(GROUP_OP.ContextCapabilityGranted), fromHex(contextId, 'contextId', 32), fromHex(member, 'member', 32), contextCapability(capability)),
+    };
+}
+/** Revoke a per-context capability from `member` (`GroupOp::ContextCapabilityRevoked`). */
+export function contextCapabilityRevokedOp(contextId, member, capability) {
+    return {
+        kind: 'group',
+        bytes: concat(tag(GROUP_OP.ContextCapabilityRevoked), fromHex(contextId, 'contextId', 32), fromHex(member, 'member', 32), contextCapability(capability)),
+    };
+}
+/**
+ * Join an open subgroup yourself (`RootOp::MemberJoinedOpen`), a root op posted
+ * to the namespace. `member` must be the author; `credential` is the author's
+ * own `AccountProof<DeviceCert>`, hex, carried as-is. The author's
+ * `CAN_JOIN_OPEN_SUBGROUPS` and the open inheritance path are checked as usual.
+ */
+export function memberJoinedOpenOp(input) {
+    return {
+        kind: 'root',
+        bytes: concat(tag(ROOT_OP.MemberJoinedOpen), fromHex(input.member, 'member', 32), fromHex(input.groupId, 'groupId', 32), fromHexUnsized(input.credential, 'credential')),
+    };
+}

package/dist/warrant/index.d.ts

@@ -4,5 +4,5 @@ export { signCreationWarrant, parseCreationWarrant, creationInitHash, } from './
 export type { CreationWarrantInput, CreationWarrantFields, SignedCreationWarrant, } from './creation-warrant.js';
 export { signGovernanceWarrant, parseGovernanceWarrant, governanceOpHash, } from './governance-warrant.js';
 export type { GovernanceWarrantInput, GovernanceWarrantFields, } from './governance-warrant.js';
-export { memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, namespaceCreatedOp, defaultCapabilitiesSetOp, foundedNamespaceId, } from './governance-op.js';
+export { memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, memberCapabilitySetOp, contextDetachedOp, subgroupVisibilitySetOp, groupMetadataSetOp, memberMetadataSetOp, contextMetadataSetOp, contextCapabilityGrantedOp, contextCapabilityRevokedOp, memberJoinedOpenOp, namespaceCreatedOp, defaultCapabilitiesSetOp, foundedNamespaceId, } from './governance-op.js';
 export type { GovernanceOp, GovernanceOpKind, GovernanceMemberRole, GroupCreatedInput, SubgroupCreation, NamespaceCreatedInput, } from './governance-op.js';

package/dist/warrant/index.js

@@ -2,4 +2,4 @@
 export { signWarrant, intentHash } from './warrant.js';
 export { signCreationWarrant, parseCreationWarrant, creationInitHash, } from './creation-warrant.js';
 export { signGovernanceWarrant, parseGovernanceWarrant, governanceOpHash, } from './governance-warrant.js';
-export { memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, namespaceCreatedOp, defaultCapabilitiesSetOp, foundedNamespaceId, } from './governance-op.js';
+export { memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, memberCapabilitySetOp, contextDetachedOp, subgroupVisibilitySetOp, groupMetadataSetOp, memberMetadataSetOp, contextMetadataSetOp, contextCapabilityGrantedOp, contextCapabilityRevokedOp, memberJoinedOpenOp, namespaceCreatedOp, defaultCapabilitiesSetOp, foundedNamespaceId, } from './governance-op.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@calimero-network/mero-js",
-  "version": "23.0.0",
+  "version": "23.1.0",
   "description": "Pure JavaScript SDK for Calimero",
   "type": "module",
   "exports": {