@calimero-network/mero-js 23.3.0 → 23.4.1

package/dist/relay/relay-client.d.ts

@@ -210,6 +210,17 @@ export interface FoundNamespaceInput {
      * signed.
      */
     defaultCapabilities?: number;
+    /**
+     * The application the namespace runs, set right after founding. Without one
+     * a founded namespace targets no application, and no context can be created
+     * in it. Set through the relay with a delegated `TargetApplicationSet`, which
+     * core accepts only as a group's first application.
+     */
+    application?: {
+        applicationId: string;
+        package: string;
+        version: string;
+    };
 }
 /** A namespace founded through a relay. */
 export interface FoundedNamespace {
@@ -237,6 +248,14 @@ export interface FoundedNamespace {
     defaultCapabilitiesSet?: boolean;
     /** Why `defaultCapabilitiesSet` is `false`. */
     defaultCapabilitiesError?: string;
+    /**
+     * Present only when `application` was asked for: whether the namespace now
+     * runs it. `false` leaves it with no application; retry with
+     * `govern({ groupId: namespaceId, op: targetApplicationSetOp(application) })`.
+     */
+    applicationSet?: boolean;
+    /** Why `applicationSet` is `false`. */
+    applicationError?: string;
 }
 /** Where an accepted intent landed. */
 export interface IntentResult<T = unknown> {

package/dist/relay/relay-client.js

@@ -31,7 +31,7 @@ import { signWarrant } from '../warrant/warrant.js';
 import { resolveSigner } from '../signer/signer.js';
 import { signCreationWarrant } from '../warrant/creation-warrant.js';
 import { signGovernanceWarrant } from '../warrant/governance-warrant.js';
-import { defaultCapabilitiesSetOp, foundedNamespaceId, namespaceCreatedOp, } from '../warrant/governance-op.js';
+import { defaultCapabilitiesSetOp, targetApplicationSetOp, foundedNamespaceId, namespaceCreatedOp, } from '../warrant/governance-op.js';
 import { HTTPError } from '../http-client/web-client.js';
 import { fromHex, hex } from '../crypto/internal.js';
 /** How long a freshly minted warrant stays presentable, in seconds. */
@@ -351,6 +351,7 @@ export class RelayClient {
         const capabilitiesOp = input.defaultCapabilities === undefined
             ? undefined
             : defaultCapabilitiesSetOp(input.defaultCapabilities);
+        const applicationOp = input.application ? targetApplicationSetOp(input.application) : undefined;
         // Resolved before the nonce, so a misconfigured key burns none.
         const signer = await this.authorSigner();
         const nonce = await this.config.nonces.next();
@@ -371,23 +372,32 @@ export class RelayClient {
             teeEnabled: data.teeEnabled ?? false,
             ...(data.teeError ? { teeError: data.teeError } : {}),
         };
-        if (!capabilitiesOp)
-            return founded;
-        // A second op, under its own warrant, on the namespace root: the founder is
-        // its admin and the relay was seated to act for members, so it goes through
-        // the ordinary `govern` path. The namespace exists whatever happens here, so
-        // a failure is reported rather than thrown.
-        try {
-            await this.govern({ groupId: founded.namespaceId, op: capabilitiesOp });
-            return { ...founded, defaultCapabilitiesSet: true };
+        // Follow-up ops, each under its own warrant, on the namespace root: the
+        // founder is its admin and the relay was seated to act for members, so they
+        // go through the ordinary `govern` path. The namespace exists whatever
+        // happens here, so a failure is reported rather than thrown. The
+        // application first: without it the namespace can hold no context at all.
+        let result = founded;
+        const message = (err) => (err instanceof Error ? err.message : String(err));
+        if (applicationOp) {
+            try {
+                await this.govern({ groupId: founded.namespaceId, op: applicationOp });
+                result = { ...result, applicationSet: true };
+            }
+            catch (err) {
+                result = { ...result, applicationSet: false, applicationError: message(err) };
+            }
         }
-        catch (err) {
-            return {
-                ...founded,
-                defaultCapabilitiesSet: false,
-                defaultCapabilitiesError: err instanceof Error ? err.message : String(err),
-            };
+        if (capabilitiesOp) {
+            try {
+                await this.govern({ groupId: founded.namespaceId, op: capabilitiesOp });
+                result = { ...result, defaultCapabilitiesSet: true };
+            }
+            catch (err) {
+                result = { ...result, defaultCapabilitiesSet: false, defaultCapabilitiesError: message(err) };
+            }
         }
+        return result;
     }
     async postGovernance(groupId, op, warrant) {
         const body = await this.json('POST', `/admin-api/groups/${encodeURIComponent(groupId)}/governance-intents`, {

package/dist/warrant/governance-op.d.ts

@@ -64,13 +64,22 @@ export declare function memberRoleSetOp(member: string, memberRole: GovernanceMe
  */
 export declare function createdSubgroupId(admin: string, parentId: string, restricted: boolean, salt: string): Promise<string>;
 /**
- * Set the group's default capability mask (`MemberCapabilities` bits, a `u32`),
- * the capabilities every member holds without a per-member grant. Needs admin.
+ * Choose the application a group runs (`GroupOp::TargetApplicationSet`), in
+ * its delegable form: `bytecode_id` is left for the relay to fill (32 zero
+ * bytes), resolved from `package@version` in the registry. The member signs
+ * the application id, package and version, so the relay can pick no other
+ * build; the application id binds package and signer, and every node checks
+ * the bundle's signature.
  *
- * The relay refuses any change to `CAN_AUTHOR_ON_BEHALF` (bit 9) through this
- * path, and no namespace starts with it in its default mask, so a mask that
- * sets it is refused here rather than burning a nonce on a certain 403.
+ * Through a relay this is accepted only as a group's FIRST application, on a
+ * group that targets none yet (a namespace an account founded). Moving an
+ * existing target is an upgrade, which never goes through a relay.
  */
+export declare function targetApplicationSetOp(input: {
+    applicationId: string;
+    package: string;
+    version: string;
+}): GovernanceOp;
 export declare function defaultCapabilitiesSetOp(capabilities: number): GovernanceOp;
 /** What a subgroup is created with. */
 export interface GroupCreatedInput {

package/dist/warrant/governance-op.js

@@ -38,6 +38,7 @@ const GROUP_OP = {
     MemberRoleSet: 4,
     MemberCapabilitySet: 5,
     DefaultCapabilitiesSet: 6,
+    TargetApplicationSet: 7,
     ContextDetached: 9,
     SubgroupVisibilitySet: 10,
     GroupMetadataSet: 11,
@@ -137,6 +138,31 @@ export async function createdSubgroupId(admin, parentId, restricted, salt) {
  * path, and no namespace starts with it in its default mask, so a mask that
  * sets it is refused here rather than burning a nonce on a certain 403.
  */
+/** A borsh `String`: a u32 byte length, then the UTF-8 bytes. */
+function borshString(value, what) {
+    if (value.length === 0)
+        throw new Error(`${what} must not be empty`);
+    const bytes = new TextEncoder().encode(value);
+    return concat(u32le(bytes.length), bytes);
+}
+/**
+ * Choose the application a group runs (`GroupOp::TargetApplicationSet`), in
+ * its delegable form: `bytecode_id` is left for the relay to fill (32 zero
+ * bytes), resolved from `package@version` in the registry. The member signs
+ * the application id, package and version, so the relay can pick no other
+ * build; the application id binds package and signer, and every node checks
+ * the bundle's signature.
+ *
+ * Through a relay this is accepted only as a group's FIRST application, on a
+ * group that targets none yet (a namespace an account founded). Moving an
+ * existing target is an upgrade, which never goes through a relay.
+ */
+export function targetApplicationSetOp(input) {
+    return {
+        kind: 'group',
+        bytes: concat(tag(GROUP_OP.TargetApplicationSet), CLEARED_HASH, fromHex(input.applicationId, 'applicationId', 32), borshString(input.package, 'package'), borshString(input.version, 'version')),
+    };
+}
 export function defaultCapabilitiesSetOp(capabilities) {
     if (!Number.isInteger(capabilities) || capabilities < 0 || capabilities > 4294967295) {
         throw new Error(`capabilities must be a u32 bit mask, got ${String(capabilities)}`);

package/dist/warrant/index.d.ts

@@ -4,5 +4,5 @@ export { signCreationWarrant, parseCreationWarrant, creationInitHash, } from './
 export type { CreationWarrantInput, CreationWarrantFields, SignedCreationWarrant, } from './creation-warrant.js';
 export { signGovernanceWarrant, parseGovernanceWarrant, governanceOpHash, } from './governance-warrant.js';
 export type { GovernanceWarrantInput, GovernanceWarrantFields, } from './governance-warrant.js';
-export { memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, memberCapabilitySetOp, contextDetachedOp, subgroupVisibilitySetOp, groupMetadataSetOp, memberMetadataSetOp, contextMetadataSetOp, contextCapabilityGrantedOp, contextCapabilityRevokedOp, memberJoinedOpenOp, namespaceCreatedOp, defaultCapabilitiesSetOp, foundedNamespaceId, } from './governance-op.js';
+export { memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, memberCapabilitySetOp, contextDetachedOp, subgroupVisibilitySetOp, groupMetadataSetOp, memberMetadataSetOp, contextMetadataSetOp, contextCapabilityGrantedOp, contextCapabilityRevokedOp, memberJoinedOpenOp, namespaceCreatedOp, defaultCapabilitiesSetOp, targetApplicationSetOp, foundedNamespaceId, } from './governance-op.js';
 export type { GovernanceOp, GovernanceOpKind, GovernanceMemberRole, GroupCreatedInput, SubgroupCreation, NamespaceCreatedInput, } from './governance-op.js';

package/dist/warrant/index.js

@@ -2,4 +2,4 @@
 export { signWarrant, intentHash } from './warrant.js';
 export { signCreationWarrant, parseCreationWarrant, creationInitHash, } from './creation-warrant.js';
 export { signGovernanceWarrant, parseGovernanceWarrant, governanceOpHash, } from './governance-warrant.js';
-export { memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, memberCapabilitySetOp, contextDetachedOp, subgroupVisibilitySetOp, groupMetadataSetOp, memberMetadataSetOp, contextMetadataSetOp, contextCapabilityGrantedOp, contextCapabilityRevokedOp, memberJoinedOpenOp, namespaceCreatedOp, defaultCapabilitiesSetOp, foundedNamespaceId, } from './governance-op.js';
+export { memberAddedOp, memberRemovedOp, memberLeftOp, memberRoleSetOp, groupCreatedOp, createdSubgroupId, subgroupCreation, groupReparentedOp, groupDeletedOp, memberCapabilitySetOp, contextDetachedOp, subgroupVisibilitySetOp, groupMetadataSetOp, memberMetadataSetOp, contextMetadataSetOp, contextCapabilityGrantedOp, contextCapabilityRevokedOp, memberJoinedOpenOp, namespaceCreatedOp, defaultCapabilitiesSetOp, targetApplicationSetOp, foundedNamespaceId, } from './governance-op.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@calimero-network/mero-js",
-  "version": "23.3.0",
+  "version": "23.4.1",
   "description": "Pure JavaScript SDK for Calimero",
   "type": "module",
   "exports": {