@calimero-network/mero-js 23.1.0 → 23.2.0

package/dist/cloud/account-ownership.d.ts

@@ -0,0 +1,30 @@
+import { type Signer } from '../signer/signer.js';
+/** The `ownership_proof` body for `POST /api/cloud/me/namespaces/{ns}/enable-ha`. */
+export interface AccountOwnershipProof {
+    kind: 'account';
+    /** hex `AccountProof<DeviceCert>`, the account's credential. */
+    credential: string;
+    /** base64 UTF-8 JSON, the claim. */
+    signed_payload: string;
+    /** base64 ed25519 by the certified device key. */
+    signature: string;
+}
+export interface AccountOwnershipClaimInput {
+    /** The namespace, hex: the id `foundNamespace` returned. */
+    namespaceId: string;
+    /** The founding account, hex. */
+    accountId: string;
+    /** The salt `foundNamespace` returned, hex (32 bytes). */
+    salt: string;
+    /** The cloud login's email: the claim is for this login only. */
+    subject: string;
+    /** The account's credential, hex `AccountProof<DeviceCert>`. */
+    credential: string;
+    deviceSecret?: string;
+    signer?: Signer;
+    /** Lifetime in ms; default one minute, at most five. */
+    ttlMs?: number;
+    /** For tests. */
+    now?: () => number;
+}
+export declare function signAccountOwnershipClaim(input: AccountOwnershipClaimInput): Promise<AccountOwnershipProof>;

package/dist/cloud/account-ownership.js

@@ -0,0 +1,55 @@
+/**
+ * The ownership claim an account with no node presents to enable HA for a
+ * namespace it founded through a relay (mdma#415).
+ *
+ * A node proves ownership with a proof signed by the namespace's group key,
+ * which a nodeless account does not hold. The account instead proves it is the
+ * FOUNDER: a namespace id is `domain_hash("calimero.namespace.id.v1",
+ * [founder_account, salt])`, so only the founding account, with the salt its
+ * founding returned, reproduces it. Its device key signs the claim, and its
+ * certificate says whose device that is. The cloud also requires the login to
+ * be linked to that account.
+ *
+ * Signature input: `"calimero.mdma.account-ownership-claim.v1\0" ‖ payload`,
+ * where `payload` is the UTF-8 JSON sent (base64) as `signed_payload`.
+ */
+import { concat } from '../crypto/internal.js';
+import { resolveSigner } from '../signer/signer.js';
+const DOMAIN = new TextEncoder().encode('calimero.mdma.account-ownership-claim.v1\0');
+/** What the cloud accepts; it caps a claim's lifetime at five minutes. */
+const DEFAULT_TTL_MS = 60000;
+const MAX_TTL_MS = 5 * 60000;
+function base64(bytes) {
+    let binary = '';
+    for (const b of bytes)
+        binary += String.fromCharCode(b);
+    return btoa(binary);
+}
+const hex32 = (value, what) => {
+    if (!/^[0-9a-fA-F]{64}$/.test(value))
+        throw new Error(`${what} must be 64 hex characters`);
+    return value.toLowerCase();
+};
+export async function signAccountOwnershipClaim(input) {
+    const ttl = input.ttlMs ?? DEFAULT_TTL_MS;
+    if (!(ttl > 0 && ttl <= MAX_TTL_MS))
+        throw new Error(`ttlMs must be in (0, ${MAX_TTL_MS}]`);
+    if (!input.subject)
+        throw new Error('subject must be the cloud login email');
+    const signer = await resolveSigner(input.deviceSecret, input.signer, 'deviceSecret');
+    const issued = (input.now ?? Date.now)();
+    const nonce = Array.from(crypto.getRandomValues(new Uint8Array(16)), (b) => b.toString(16).padStart(2, '0')).join('');
+    const payload = new TextEncoder().encode(JSON.stringify({
+        v: 1,
+        audience: 'mdma:enable-ha-namespace',
+        group_id: hex32(input.namespaceId, 'namespaceId'),
+        account_id: hex32(input.accountId, 'accountId'),
+        salt: hex32(input.salt, 'salt'),
+        subject: input.subject,
+        nonce,
+        issued_at_ms: issued,
+        expires_at_ms: issued + ttl,
+    }));
+    const signature = await signer.sign(concat(DOMAIN, payload));
+    return { kind: 'account', credential: input.credential, signed_payload: base64(payload), signature: base64(signature) };
+}

package/dist/cloud/cloud-client.d.ts

@@ -24,6 +24,7 @@
  * ever sent, and would be a throughput bottleneck on a path that has no reason
  * to involve it.
  */
+import type { AccountOwnershipProof } from './account-ownership.js';
 import { type RootSource } from '../account/index.js';
 import type { Signer } from '../signer/signer.js';
 import { type DiscoveryChallenge, type RoutingChallenge, type RoutingCredential } from './routing-proof.js';
@@ -602,6 +603,13 @@ export declare class CloudClient {
     enableNamespaceHa(namespaceId: string, options?: {
         admitterAddrs?: readonly string[];
     }): Promise<unknown>;
+    /**
+     * Enable HA for a namespace this ACCOUNT founded through a relay, with the
+     * founder's claim (`signAccountOwnershipClaim`) instead of a node's
+     * ownership proof: a nodeless account holds no node that could issue one.
+     * The login must be linked to that account.
+     */
+    enableFoundedNamespaceHa(namespaceId: string, ownershipProof: AccountOwnershipProof): Promise<unknown>;
     /**
      * Stop hosting a claimed namespace.
      *

package/dist/cloud/cloud-client.js

@@ -500,6 +500,15 @@ export class CloudClient {
             : { admitter_addrs: [...options.admitterAddrs] };
         return this.request('POST', `/api/cloud/namespaces/${encodeURIComponent(namespaceId)}/enable-ha`, { body });
     }
+    /**
+     * Enable HA for a namespace this ACCOUNT founded through a relay, with the
+     * founder's claim (`signAccountOwnershipClaim`) instead of a node's
+     * ownership proof: a nodeless account holds no node that could issue one.
+     * The login must be linked to that account.
+     */
+    async enableFoundedNamespaceHa(namespaceId, ownershipProof) {
+        return this.request('POST', `/api/cloud/me/namespaces/${encodeURIComponent(namespaceId)}/enable-ha`, { body: { groups: [], ownership_proof: ownershipProof } });
+    }
     /**
      * Stop hosting a claimed namespace.
      *

package/dist/cloud/index.d.ts

@@ -8,3 +8,5 @@ export { cloudLinkUrl, beginCloudLink, readCloudLinkCallback, completeCloudLink,
 export type { BeginCloudLinkOptions, CloudLinkCallback, CompleteCloudLinkOptions, } from './link-redirect.js';
 export { deviceEnrolmentUrl, beginDeviceEnrolment, readEnrolmentCallback, completeDeviceEnrolment, callbackIsForeign, } from './enrol-redirect.js';
 export type { DeviceEnrolmentOptions, DeviceEnrolmentCallback, CompleteDeviceEnrolmentOptions, EnrolledDevice, } from './enrol-redirect.js';
+export { signAccountOwnershipClaim } from './account-ownership.js';
+export type { AccountOwnershipProof, AccountOwnershipClaimInput } from './account-ownership.js';

package/dist/cloud/index.js

@@ -7,3 +7,4 @@ export { cloudLinkUrl, beginCloudLink, readCloudLinkCallback, completeCloudLink,
 // Getting this app's device key certified by a wallet on another origin — the
 // redirect that keeps the account root out of the app's reach.
 export { deviceEnrolmentUrl, beginDeviceEnrolment, readEnrolmentCallback, completeDeviceEnrolment, callbackIsForeign, } from './enrol-redirect.js';
+export { signAccountOwnershipClaim } from './account-ownership.js';