@calimero-network/mero-js 23.9.0 → 24.1.0

package/dist/account/account-admin.js

@@ -181,7 +181,9 @@ export function createAccountAdmin(input, deps = {}) {
             return { namespaceId, haEnabled, ...(haError !== undefined ? { haError } : {}) };
         },
         async createGroupInNamespace(namespaceId, req = {}) {
-            const { op } = await subgroupCreation({ parentId: namespaceId, restricted: req.visibility !== 'open', admin: s.account });
+            // Absent ⇒ Open, as on a node: a subgroup created Restricted and flipped
+            // Open strands every namespace member outside it.
+            const { op } = await subgroupCreation({ parentId: namespaceId, restricted: req.visibility === 'restricted', admin: s.account });
             const { groupId } = await root(s, namespaceId, op);
             rememberGroupNamespace(s.account, groupId, namespaceId);
             if (req.groupName)

package/dist/admin-api/admin-types.d.ts

@@ -668,7 +668,12 @@ export interface JoinNamespaceResponseData {
 }
 export interface CreateGroupInNamespaceRequest {
     groupName?: string;
-    /** Subgroup visibility at birth. Absent means `'restricted'`. */
+    /**
+     * Subgroup visibility at birth. Absent means `'open'` (core 0.11 and later;
+     * older nodes default to `'restricted'`). Pass `'restricted'` for a private
+     * subgroup, and choose here rather than flipping it afterwards: a subgroup
+     * created Restricted and flipped Open strands namespace members outside it.
+     */
     visibility?: 'open' | 'restricted';
 }
 export interface CreateGroupInNamespaceResponseData {

package/dist/cloud/cloud-client.d.ts

@@ -155,6 +155,54 @@ export interface CloudRelay {
     canExecute: boolean;
     lastSeenAt?: string | null;
     confirmedAt?: string | null;
+    /**
+     * How far along this relay's admission is, as the cloud judges it:
+     * `'confirmed'` (in), `'pending'` (trying), `'refused'` (alive and turned
+     * away), `'absent'` (stopped talking before getting in). `null` from a cloud
+     * that predates the field. A string, not a closed union, so a verdict the
+     * cloud adds later is passed through rather than dropped.
+     */
+    admission: string | null;
+    /** The cloud's one-line explanation of `admission`, for a person; `null` when none. */
+    admissionHint: string | null;
+    /**
+     * What the relay itself reported about its latest attempt to join, reasons
+     * included — or `null` when it has reported nothing (an older fleet node or
+     * cloud, or a relay assigned since its last report).
+     */
+    join: CloudRelayJoin | null;
+}
+/**
+ * A fleet node's own account of its latest attempt to join a namespace.
+ *
+ * A refusal happens peer to peer, between the node and the namespace's
+ * admitters, so this is the only place a client learns WHY a relay is stuck:
+ * the node forwards what each admitter it asked directly answered.
+ */
+export interface CloudRelayJoin {
+    /**
+     * `'admitted'` (in, or an admitter said yes and the key is on its way),
+     * `'refused'` (every admitter asked declined; see `refusals`), `'waiting'`
+     * (nobody answered directly yet), or `'error'` (the attempt itself failed;
+     * see `error`). Passed through as sent.
+     */
+    state: string;
+    /** Consecutive attempts without admission, as the node counts them. */
+    attempts: number;
+    /**
+     * Each directly-asked admitter that declined: its libp2p peer id and its
+     * reason, verbatim. Text to show a person, never to parse — the most useful
+     * one is "was removed from group … and cannot rejoin; an admin must re-add
+     * them", which the namespace owner can fix by re-adding the node.
+     */
+    refusals: Array<{
+        peer: string;
+        reason: string;
+    }>;
+    /** Why the attempt itself failed, when `state` is `'error'`. */
+    error: string | null;
+    /** When the node reported this, ISO 8601 (UTC, no offset), or `null`. */
+    reportedAt: string | null;
 }
 /**
  * One node serving a namespace, as a caller with no cloud account sees it.

package/dist/cloud/cloud-client.js

@@ -66,6 +66,27 @@ function teeRoleOf(row) {
 export function pickExecutingRelay(relays) {
     return (relays.find((r) => r.canExecute && r.relayUrl !== null && r.executorAccount !== null) ?? null);
 }
+/** `join` from a relay row, or `null` when absent or not an object. */
+function joinOf(row) {
+    const raw = row.join;
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return null;
+    const join = raw;
+    if (typeof join.state !== 'string')
+        return null;
+    const refusals = Array.isArray(join.refusals)
+        ? join.refusals
+            .filter((r) => !!r && typeof r === 'object')
+            .map((r) => ({ peer: String(r.peer ?? ''), reason: String(r.reason ?? '') }))
+        : [];
+    return {
+        state: join.state,
+        attempts: typeof join.attempts === 'number' ? join.attempts : 0,
+        refusals,
+        error: typeof join.error === 'string' ? join.error : null,
+        reportedAt: typeof join.reported_at === 'string' ? join.reported_at : null,
+    };
+}
 const ACCOUNT_HEX = /^[0-9a-f]{64}$/;
 function accountHexOrNull(value) {
     return typeof value === 'string' && ACCOUNT_HEX.test(value) ? value : null;
@@ -349,6 +370,9 @@ export class CloudClient {
                 canExecute: canExecuteOf(row, authorshipReady && relayUrl !== null && executorAccount !== null),
                 lastSeenAt: row.last_seen_at ?? null,
                 confirmedAt: row.confirmed_at ?? null,
+                admission: typeof row.admission === 'string' ? row.admission : null,
+                admissionHint: typeof row.admission_hint === 'string' ? row.admission_hint : null,
+                join: joinOf(row),
             };
         });
     }

package/dist/cloud/index.d.ts

@@ -1,5 +1,5 @@
 export { CloudClient, admitterAddrsFromNetworkStatus, AccountHaRefusedError, AccountNotLinkedError, AccountLinkedToSeveralUsersError, HaRequestPendingError, UnknownRelayError, RelayNotDialableError, } from './cloud-client.js';
-export type { CloudClientConfig, CloudSession, CloudNamespace, CloudRelay, CloudAccountRelay, CloudNamespaceNode, CloudNamespaceRouting, CloudMachine, CloudMachineNamespace, CloudLinkedAccount, CloudLinkedAccounts, CloudAccountLink, AccountLinkChallenge, AccountLinkProof, AccountLinkHandoff, AccountLinkCallback, AccountLoginChallenge, AccountLoginProof, EnableHAOptions, DisableHAOptions, EnableHaAsAccountOptions, } from './cloud-client.js';
+export type { CloudClientConfig, CloudSession, CloudNamespace, CloudRelay, CloudRelayJoin, CloudAccountRelay, CloudNamespaceNode, CloudNamespaceRouting, CloudMachine, CloudMachineNamespace, CloudLinkedAccount, CloudLinkedAccounts, CloudAccountLink, AccountLinkChallenge, AccountLinkProof, AccountLinkHandoff, AccountLinkCallback, AccountLoginChallenge, AccountLoginProof, EnableHAOptions, DisableHAOptions, EnableHaAsAccountOptions, } from './cloud-client.js';
 export { connectCloud, connectCloudWithAccount } from './connect.js';
 export type { ConnectCloudOptions, ConnectCloudWithAccountOptions, CloudConnection, } from './connect.js';
 export { signRoutingChallenge, routingProofHeaders } from './routing-proof.js';