@calimero-network/mero-js 23.3.0 → 23.4.0

package/dist/index.d.ts

@@ -23,7 +23,7 @@ export * from "./cloud/index.js";
 export * from "./sealed/index.js";
 export * from "./relay/index.js";
 export * from "./request-proof/index.js";
-export { signWarrant, intentHash, signCreationWarrant, parseCreationWarrant, creationInitHash, signGovernanceWarrant, parseGovernanceWarrant, governanceOpHash, memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, memberCapabilitySetOp, contextDetachedOp, subgroupVisibilitySetOp, groupMetadataSetOp, memberMetadataSetOp, contextMetadataSetOp, contextCapabilityGrantedOp, contextCapabilityRevokedOp, memberJoinedOpenOp, namespaceCreatedOp, defaultCapabilitiesSetOp, foundedNamespaceId, } from "./warrant/index.js";
+export { signWarrant, intentHash, signCreationWarrant, parseCreationWarrant, creationInitHash, signGovernanceWarrant, parseGovernanceWarrant, governanceOpHash, memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, memberCapabilitySetOp, contextDetachedOp, subgroupVisibilitySetOp, groupMetadataSetOp, memberMetadataSetOp, contextMetadataSetOp, contextCapabilityGrantedOp, contextCapabilityRevokedOp, memberJoinedOpenOp, namespaceCreatedOp, defaultCapabilitiesSetOp, targetApplicationSetOp, foundedNamespaceId, } from "./warrant/index.js";
 export { signerFromSecret, signerFromCryptoKey } from "./signer/index.js";
 export type { Signer } from "./signer/index.js";
 export { generateAccountRoot, accountRootFromPhrase, accountRootFromSecret, createAccountRootSigner, accountRootSignerFromPhrase, signAccountLink, signAccountLogin, resolveRoot, resolveRootPair, } from "./account/index.js";

package/dist/index.js

@@ -36,7 +36,7 @@ export * from "./relay/index.js";
 // Request proofs — a caller's identity on the request itself, no session needed
 export * from "./request-proof/index.js";
 // Warrant signing — mint the author's consent for a relay to run one intent
-export { signWarrant, intentHash, signCreationWarrant, parseCreationWarrant, creationInitHash, signGovernanceWarrant, parseGovernanceWarrant, governanceOpHash, memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, memberCapabilitySetOp, contextDetachedOp, subgroupVisibilitySetOp, groupMetadataSetOp, memberMetadataSetOp, contextMetadataSetOp, contextCapabilityGrantedOp, contextCapabilityRevokedOp, memberJoinedOpenOp, namespaceCreatedOp, defaultCapabilitiesSetOp, foundedNamespaceId, } from "./warrant/index.js";
+export { signWarrant, intentHash, signCreationWarrant, parseCreationWarrant, creationInitHash, signGovernanceWarrant, parseGovernanceWarrant, governanceOpHash, memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, memberCapabilitySetOp, contextDetachedOp, subgroupVisibilitySetOp, groupMetadataSetOp, memberMetadataSetOp, contextMetadataSetOp, contextCapabilityGrantedOp, contextCapabilityRevokedOp, memberJoinedOpenOp, namespaceCreatedOp, defaultCapabilitiesSetOp, targetApplicationSetOp, foundedNamespaceId, } from "./warrant/index.js";
 // Who signs — a key's capability, separated from its material, so a
 // non-extractable key can be used wherever a hex secret could.
 export { signerFromSecret, signerFromCryptoKey } from "./signer/index.js";

package/dist/index.mjs

@@ -7409,6 +7409,7 @@ var GROUP_OP = {
   MemberRoleSet: 4,
   MemberCapabilitySet: 5,
   DefaultCapabilitiesSet: 6,
+  TargetApplicationSet: 7,
   ContextDetached: 9,
   SubgroupVisibilitySet: 10,
   GroupMetadataSet: 11,
@@ -7482,6 +7483,23 @@ async function createdSubgroupId(admin, parentId, restricted, salt) {
     ])
   );
 }
+function borshString2(value, what) {
+  if (value.length === 0) throw new Error(`${what} must not be empty`);
+  const bytes = new TextEncoder().encode(value);
+  return concat(u32le(bytes.length), bytes);
+}
+function targetApplicationSetOp(input) {
+  return {
+    kind: "group",
+    bytes: concat(
+      tag(GROUP_OP.TargetApplicationSet),
+      CLEARED_HASH,
+      fromHex(input.applicationId, "applicationId", 32),
+      borshString2(input.package, "package"),
+      borshString2(input.version, "version")
+    )
+  };
+}
 function defaultCapabilitiesSetOp(capabilities) {
   if (!Number.isInteger(capabilities) || capabilities < 0 || capabilities > 4294967295) {
     throw new Error(`capabilities must be a u32 bit mask, got ${String(capabilities)}`);
@@ -7936,6 +7954,7 @@ var RelayClient = class {
       salt
     });
     const capabilitiesOp = input.defaultCapabilities === void 0 ? void 0 : defaultCapabilitiesSetOp(input.defaultCapabilities);
+    const applicationOp = input.application ? targetApplicationSetOp(input.application) : void 0;
     const signer = await this.authorSigner();
     const nonce2 = await this.config.nonces.next();
     const ttl = this.config.ttlSeconds ?? DEFAULT_TTL_SECONDS;
@@ -7955,17 +7974,25 @@ var RelayClient = class {
       teeEnabled: data.teeEnabled ?? false,
       ...data.teeError ? { teeError: data.teeError } : {}
     };
-    if (!capabilitiesOp) return founded;
-    try {
-      await this.govern({ groupId: founded.namespaceId, op: capabilitiesOp });
-      return { ...founded, defaultCapabilitiesSet: true };
-    } catch (err) {
-      return {
-        ...founded,
-        defaultCapabilitiesSet: false,
-        defaultCapabilitiesError: err instanceof Error ? err.message : String(err)
-      };
+    let result = founded;
+    const message = (err) => err instanceof Error ? err.message : String(err);
+    if (applicationOp) {
+      try {
+        await this.govern({ groupId: founded.namespaceId, op: applicationOp });
+        result = { ...result, applicationSet: true };
+      } catch (err) {
+        result = { ...result, applicationSet: false, applicationError: message(err) };
+      }
+    }
+    if (capabilitiesOp) {
+      try {
+        await this.govern({ groupId: founded.namespaceId, op: capabilitiesOp });
+        result = { ...result, defaultCapabilitiesSet: true };
+      } catch (err) {
+        result = { ...result, defaultCapabilitiesSet: false, defaultCapabilitiesError: message(err) };
+      }
     }
+    return result;
   }
   async postGovernance(groupId, op, warrant) {
     const body = await this.json("POST", `/admin-api/groups/${encodeURIComponent(groupId)}/governance-intents`, {
@@ -10615,7 +10642,7 @@ function optionalBytes32(value, label2) {
   }
   return concat(new Uint8Array([1]), new Uint8Array(value));
 }
-function borshString2(value) {
+function borshString3(value) {
   const bytes = new TextEncoder().encode(value);
   return concat(u32le(bytes.length), bytes);
 }
@@ -10629,7 +10656,7 @@ function encodeSignedInvitation(signed) {
     // ...then the enclosing SignedGroupOpenInvitation, in declaration order.
     // `inviter_account` sits between the signature and the addresses; putting it
     // anywhere else still encodes 32 bytes and still verifies as nothing.
-    borshString2(signed.inviter_signature),
+    borshString3(signed.inviter_signature),
     signed.inviter_account ? concat(new Uint8Array([1]), fromHex(signed.inviter_account, "inviter_account", 32)) : new Uint8Array([0]),
     // A `Vec<String>`, so each entry is a bare borsh string. This carried an
     // enum until core dropped the URL variant, and an enum writes a
@@ -10637,7 +10664,7 @@ function encodeSignedInvitation(signed) {
     // every following byte and fail as `invalid invitation signature`, pointing
     // nowhere near this line.
     u32le(admitterAddrs.length),
-    ...admitterAddrs.map(borshString2),
+    ...admitterAddrs.map(borshString3),
     optionalBytes32(signed.application_id, "application_id"),
     // Borsh order follows core's field order, where this is `bytecode_id`; the
     // JSON key is `app_key`, a rename covering both directions that core pins in
@@ -10710,12 +10737,12 @@ var te = new TextEncoder();
 function tag2(byte) {
   return new Uint8Array([byte]);
 }
-function borshString3(value) {
+function borshString4(value) {
   const bytes = te.encode(value);
   return concat(u32le(bytes.length), bytes);
 }
 function borshStrings(values) {
-  return concat(u32le(values.length), ...values.map(borshString3));
+  return concat(u32le(values.length), ...values.map(borshString4));
 }
 function borshBool(value) {
   return tag2(value ? 1 : 0);
@@ -10769,7 +10796,7 @@ function teeAdmissionPolicyOp(input) {
   };
 }
 function teeReleaseAdmissionPolicyOp(input) {
-  const minRelease = input.minReleaseVersion === void 0 ? tag2(0) : concat(tag2(1), borshString3(input.minReleaseVersion));
+  const minRelease = input.minReleaseVersion === void 0 ? tag2(0) : concat(tag2(1), borshString4(input.minReleaseVersion));
   return {
     kind: "teeReleaseAdmissionPolicy",
     plane: "group",
@@ -11184,6 +11211,7 @@ export {
   subgroupCreation,
   subgroupVisibilitySetOp,
   subscribePresence,
+  targetApplicationSetOp,
   teeAdmissionPolicyOp,
   teeAuthoringPolicyOp,
   teeReleaseAdmissionPolicyOp,