@calimero-network/mero-js 26.5.0 → 26.7.0

package/dist/index.cjs

@@ -69,11 +69,13 @@ __export(index_exports, {
   RELAY_NODE_KEY_RETRY_MS: () => RELAY_NODE_KEY_RETRY_MS,
   REQUEST_PROOF_HEADER: () => REQUEST_PROOF_HEADER,
   RelayClient: () => RelayClient,
+  RelayLoginError: () => RelayLoginError,
   RelayNotDialableError: () => RelayNotDialableError,
   RelayObserver: () => RelayObserver,
   RelayPresenceClient: () => RelayPresenceClient,
   RelayTransport: () => RelayTransport,
   RelaysUnavailableError: () => RelaysUnavailableError,
+  RequestAuthError: () => RequestAuthError,
   RpcClient: () => RpcClient,
   RpcError: () => RpcError,
   SEALED_CONTENT_TYPE: () => SEALED_CONTENT_TYPE,
@@ -613,6 +615,12 @@ var AuthRevokedError = class extends HTTPError {
     this.message = `Authentication revoked (${reason}): HTTP ${status} ${statusText}`;
   }
 };
+var RequestAuthError = class extends Error {
+  constructor() {
+    super(...arguments);
+    this.name = "RequestAuthError";
+  }
+};
 function headersToRecord(headers) {
   const record = {};
   headers.forEach((value, key) => {
@@ -940,6 +948,7 @@ var WebHttpClient = class {
           headers.Authorization = `Bearer ${token}`;
         }
       } catch (error) {
+        if (error instanceof RequestAuthError) throw error;
       }
     }
     if (initHeaders) {
@@ -1375,6 +1384,30 @@ function withoutCap(mask, cap) {
   return (mask & ~cap) >>> 0;
 }
 
+// src/account/relay-login-error.ts
+var RelayLoginError = class extends RequestAuthError {
+  constructor(relayUrl, cause) {
+    const kind = relayLoginFailureKind(cause);
+    const detail = cause instanceof Error ? cause.message : String(cause);
+    super(
+      kind === "signed-out" ? `the relay ${relayUrl} refused this device's credential (${detail}); sign in again` : `could not log in to the relay ${relayUrl}: ${detail}`
+    );
+    this.name = "RelayLoginError";
+    this.cause = cause;
+    this.relayUrl = relayUrl;
+    this.kind = kind;
+    this.loginStatus = loginStatusOf(cause);
+  }
+};
+function relayLoginFailureKind(cause) {
+  const status = loginStatusOf(cause);
+  return status === 401 || status === 403 ? "signed-out" : "unavailable";
+}
+function loginStatusOf(cause) {
+  const status = cause?.status;
+  return typeof status === "number" && Number.isFinite(status) ? status : void 0;
+}
+
 // src/errors/classify.ts
 var RETRYABLE = {
   invalid: false,
@@ -1445,6 +1478,11 @@ function messageOf(err, fallback = "Request failed") {
   return fallback;
 }
 function classifyError(err) {
+  if (err instanceof RelayLoginError) {
+    const status2 = err.loginStatus;
+    const kind2 = err.kind === "signed-out" ? "unauthorized" : status2 ? kindForStatus(status2) : "unreachable";
+    return { kind: kind2, status: status2, retryable: RETRYABLE[kind2], message: messageOf(err) };
+  }
   const status = statusOf(err);
   let kind;
   if (status !== void 0) {
@@ -1499,6 +1537,9 @@ function reasonFromMessage(message) {
 }
 var FINAL_FROM_TEXT = /* @__PURE__ */ new Set(["already-used", "removed"]);
 function classifyJoinFailure(err, message) {
+  if (err instanceof RelayLoginError) {
+    return { reason: err.kind === "signed-out" ? "signed-out" : "node-unreachable", retryable: true };
+  }
   const { kind, status } = classifyError(err);
   const fromText = reasonFromMessage(message);
   const code = refusalCodeOf(err);
@@ -2089,6 +2130,21 @@ var AdminApiClient = class {
     }
     return data;
   }
+  /**
+   * Bring back a namespace the user removed from this node while the account
+   * stayed a member (POST /admin-api/namespaces/:namespace_id/join, no
+   * invitation). Such namespaces are the `forgotten` ones in
+   * {@link listNamespacesForApplication}.
+   */
+  async restoreNamespace(namespaceId) {
+    return unwrap(
+      await this.httpClient.post(
+        `/admin-api/namespaces/${pathSegment(namespaceId)}/join`,
+        {},
+        { timeoutMs: 65e3 }
+      )
+    );
+  }
   /**
    * Join the namespace an invitation grants, and say what happened — including
    * when the request failed but the join landed anyway.
@@ -2777,9 +2833,15 @@ var AdminApiClient = class {
   async leaveContext(contextId) {
     await this.httpClient.post(`/admin-api/contexts/${pathSegment(contextId)}/leave`, {});
   }
-  /** Leave a namespace (POST /admin-api/namespaces/:namespace_id/leave). */
-  async leaveNamespace(namespaceId) {
-    await this.httpClient.post(`/admin-api/namespaces/${pathSegment(namespaceId)}/leave`, {});
+  /**
+   * Leave a namespace (POST /admin-api/namespaces/:namespace_id/leave).
+   *
+   * With `purge`, every device of the account also takes the namespace off its
+   * disk. Core reads `purge` from the query string, so it is not in the body.
+   */
+  async leaveNamespace(namespaceId, options = {}) {
+    const query = options.purge ? "?purge=true" : "";
+    await this.httpClient.post(`/admin-api/namespaces/${pathSegment(namespaceId)}/leave${query}`, {});
   }
   /** Issue a group ownership proof (POST /admin-api/groups/:group_id/issue-ownership-proof). */
   async issueOwnershipProof(groupId, request) {
@@ -9702,9 +9764,8 @@ function relaySession(s, nodeKey) {
         token = minted.accessToken;
         return token;
       }).catch((e) => {
-        console.warn("[mero-js] relay login failed", e);
         token = null;
-        return void 0;
+        throw new RelayLoginError(s.relayUrl, e);
       }).finally(() => {
         inflight = null;
       });