@calimero-network/mero-js 26.7.0 → 26.9.0

package/dist/admin-api/admin-client.d.ts

@@ -1,5 +1,5 @@
 import { HttpClient } from '../http-client/index.js';
-import type { HealthStatus, ReadinessStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, BlobReadOptions, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateDeviceAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NodeIdentity, AccountPairInitRequest, AccountPairInitResponseData, AccountPairCompleteRequest, AccountPairCompleteResponseData, AccountSignWithRootRequest, AccountSignWithRootResponseData, RelinkDeviceRequest, RelinkDeviceResponseData, RescopeDeviceRequest, RescopeDeviceResponseData, LabelDeviceRequest, LabelDeviceResponseData, AccountDeviceEntry, AccountApplicationEntry, RevokeAccountDeviceRequest, LinkAccountDeviceRequest, LinkAccountDeviceResponseData, RevokeAccountDeviceResponseData, MemberDevicesEntry, ListMemberDevicesOptions, GroupInfoResponseData, CreateGroupRequest, CreateGroupResponseData, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetMemberAutoFollowRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, SetTeeAuthoringPolicyRequest, TransferOwnershipRequest, ChangeNamespaceAdminRequest, OwnerDeleteGroupRequest, RootGuardedOpRequest, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupResponseData, ActivateGroupUpgradeRequest, ActivateGroupUpgradeResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, NamespaceRevokedDevices, CascadeStatusEntry, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, IssueOwnershipProofRequest, IssueNamespaceOwnershipProofRequest, IssueOwnershipProofResponseData, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, PerformIntentRequest, PerformIntentResponseData, IntentRelayInfo, QueryContextRequest, QueryContextResponseData, ListMemberDevicesResponseData, SealToAccountRequest, SealedEnvelope, AdmitJoinRequest, AdmitJoinResponseData } from './admin-types.js';
+import type { HealthStatus, ReadinessStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, BlobReadOptions, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateDeviceAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NodeIdentity, AccountPairInitRequest, AccountPairInitResponseData, AccountPairCompleteRequest, AccountPairCompleteResponseData, AccountSignWithRootRequest, AccountSignWithRootResponseData, RelinkDeviceRequest, RelinkDeviceResponseData, RescopeDeviceRequest, RescopeDeviceResponseData, LabelDeviceRequest, LabelDeviceResponseData, AccountDeviceEntry, AccountApplicationEntry, RevokeAccountDeviceRequest, LinkAccountDeviceRequest, LinkAccountDeviceResponseData, RevokeAccountDeviceResponseData, MemberDevicesEntry, ListMemberDevicesOptions, GroupInfoResponseData, CreateGroupRequest, CreateGroupResponseData, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetMemberAutoFollowRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, SetTeeAuthoringPolicyRequest, TransferOwnershipRequest, ChangeNamespaceAdminRequest, OwnerDeleteGroupRequest, RootGuardedOpRequest, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupResponseData, ActivateGroupUpgradeRequest, ActivateGroupUpgradeResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, NamespaceRevokedDevices, CascadeStatusEntry, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, IssueOwnershipProofRequest, IssueNamespaceOwnershipProofRequest, IssueOwnershipProofResponseData, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, PerformIntentRequest, PerformIntentResponseData, IntentRelayInfo, QueryContextRequest, QueryContextResponseData, ListMemberDevicesResponseData, SealToAccountRequest, SealedEnvelope, AdmitJoinRequest, AdmitJoinResponseData, CreateAccessGrantRequest, AccessGrant, CreatedAccessGrant, RevokeAccessGrantResponseData, AccessGrantCallRequest, AccessGrantCallResponseData } from './admin-types.js';
 import { type RedeemOutcome } from './redeem-invitation.js';
 /**
  * Compare two version strings by SemVer 2.0 precedence, ascending: negative if
@@ -174,6 +174,27 @@ export declare class AdminApiClient {
      * {@link performIntent}).
      */
     queryContext(contextId: string, request: QueryContextRequest): Promise<QueryContextResponseData>;
+    /**
+     * Issue an access grant: a token whose holder may call `request.methods` in
+     * `contextId`, as this node, with no session of its own.
+     *
+     * A grant only narrows: each method must be one this session's own token may
+     * execute in the context (`403` otherwise), and an account session is refused
+     * (`403`), since a granted call runs as the node. The token is in the answer
+     * once and never again; the node keeps only its hash.
+     */
+    createAccessGrant(contextId: string, request: CreateAccessGrantRequest): Promise<CreatedAccessGrant>;
+    /** The access grants of `contextId` this session could have issued. */
+    listAccessGrants(contextId: string): Promise<AccessGrant[]>;
+    /** Revoke an access grant. A grant this session cannot see is a `404`. */
+    revokeAccessGrant(contextId: string, grantId: string): Promise<RevokeAccessGrantResponseData>;
+    /**
+     * Call one method under an access grant. The token is the whole credential:
+     * the route is public on every node, so this works from a client holding no
+     * session at all. A method the grant does not name, an unknown or revoked
+     * token, and an expired grant are each a `403`.
+     */
+    callWithAccessGrant(contextId: string, request: AccessGrantCallRequest): Promise<AccessGrantCallResponseData>;
     /**
      * Ask what this node can do for a member in `contextId`, before they sign
      * anything.

package/dist/admin-api/admin-client.js

@@ -448,6 +448,35 @@ export class AdminApiClient {
     async queryContext(contextId, request) {
         return unwrap(await this.httpClient.post(`/admin-api/contexts/${pathSegment(contextId)}/query`, request));
     }
+    /**
+     * Issue an access grant: a token whose holder may call `request.methods` in
+     * `contextId`, as this node, with no session of its own.
+     *
+     * A grant only narrows: each method must be one this session's own token may
+     * execute in the context (`403` otherwise), and an account session is refused
+     * (`403`), since a granted call runs as the node. The token is in the answer
+     * once and never again; the node keeps only its hash.
+     */
+    async createAccessGrant(contextId, request) {
+        return unwrap(await this.httpClient.post(`/admin-api/contexts/${pathSegment(contextId)}/grants`, { methods: request.methods, label: request.label ?? '', notAfter: request.notAfter ?? null }));
+    }
+    /** The access grants of `contextId` this session could have issued. */
+    async listAccessGrants(contextId) {
+        return unwrap(await this.httpClient.get(`/admin-api/contexts/${pathSegment(contextId)}/grants`));
+    }
+    /** Revoke an access grant. A grant this session cannot see is a `404`. */
+    async revokeAccessGrant(contextId, grantId) {
+        return unwrap(await this.httpClient.delete(`/admin-api/contexts/${pathSegment(contextId)}/grants/${pathSegment(grantId)}`));
+    }
+    /**
+     * Call one method under an access grant. The token is the whole credential:
+     * the route is public on every node, so this works from a client holding no
+     * session at all. A method the grant does not name, an unknown or revoked
+     * token, and an expired grant are each a `403`.
+     */
+    async callWithAccessGrant(contextId, request) {
+        return unwrap(await this.httpClient.post(`/admin-api/contexts/${pathSegment(contextId)}/grant-calls`, request));
+    }
     /**
      * Ask what this node can do for a member in `contextId`, before they sign
      * anything.

package/dist/admin-api/admin-types.d.ts

@@ -475,6 +475,55 @@ export interface QueryContextRequest {
     /** Its arguments, as the JSON the guest will receive. */
     argsJson: unknown;
 }
+/**
+ * `POST /admin-api/contexts/:contextId/grants` — let whoever holds the returned
+ * token call these methods in the context, as the node that issued it.
+ */
+export interface CreateAccessGrantRequest {
+    /**
+     * Bare method names (`[A-Za-z0-9_]`). Each must be one the caller's own token
+     * may execute in the context, or the node refuses with `403`.
+     */
+    methods: string[];
+    /** The grantor's own note, for listing. Never shown to the holder. */
+    label?: string;
+    /** Unix seconds after which the grant is refused. Absent: until revoked. */
+    notAfter?: number | null;
+}
+/** One access grant, as its grantor sees it. The token is never in here. */
+export interface AccessGrant {
+    /** Hex. What {@link AdminApiClient.revokeAccessGrant} names. */
+    grantId: string;
+    methods: string[];
+    label: string;
+    /** Unix seconds. */
+    createdAt: number;
+    /** Unix seconds; `null` means until revoked. */
+    notAfter: number | null;
+}
+export interface CreatedAccessGrant extends AccessGrant {
+    /**
+     * Hex. The credential the holder presents. The node keeps only its hash, so
+     * this is the one time it can be read.
+     */
+    token: string;
+}
+export interface RevokeAccessGrantResponseData {
+    grantId: string;
+}
+/** `POST /admin-api/contexts/:contextId/grant-calls`. */
+export interface AccessGrantCallRequest {
+    /** Hex, as {@link AdminApiClient.createAccessGrant} returned it. */
+    token: string;
+    /** One of the methods the grant names. */
+    method: string;
+    /** Its arguments, as the JSON the guest will receive. */
+    argsJson: unknown;
+}
+export interface AccessGrantCallResponseData {
+    /** The method's own return value. */
+    returns: unknown | null;
+}
 export interface QueryContextResponseData {
     /** The method's own return value. */
     returns: unknown | null;

package/dist/agent-gate/policy.d.ts

@@ -36,11 +36,17 @@ export interface VerifySignedAgentPolicyOptions {
     identity?: string;
     /** The OIDC issuer required. Defaults to {@link KMS_RELEASE_SIGNER}'s. */
     issuer?: string;
+    /**
+     * The image role the allowlist must be for: `agent` (the default), or
+     * `inference`, the release's `kms-inference-attestation-policy.<profile>.json`
+     * for its private inference image. Both have the same shape and signer.
+     */
+    role?: 'agent' | 'inference';
 }
 /**
  * Verify an agent allowlist against its cosign bundle, as `cosign verify-blob`
  * would, and return it parsed. Rejects unless it was signed by the KMS release
- * workflow, it is an agent allowlist (`role: "agent"`) for the profile asked
+ * workflow, it is an allowlist for `options.role` (default `agent`) and the profile asked
  * for, every list in it is non-empty, and `expectedVersion`, when given, is its
  * `version`.
  */

package/dist/agent-gate/policy.js

@@ -27,7 +27,7 @@ const LISTS = [
 /**
  * Verify an agent allowlist against its cosign bundle, as `cosign verify-blob`
  * would, and return it parsed. Rejects unless it was signed by the KMS release
- * workflow, it is an agent allowlist (`role: "agent"`) for the profile asked
+ * workflow, it is an allowlist for `options.role` (default `agent`) and the profile asked
  * for, every list in it is non-empty, and `expectedVersion`, when given, is its
  * `version`.
  */
@@ -44,8 +44,9 @@ export async function verifySignedAgentPolicy(policy, bundle, options = {}) {
     catch {
         throw new Error('The signed agent policy is not JSON');
     }
-    if (parsed?.role !== 'agent') {
-        throw new Error(`The signed file is a ${JSON.stringify(parsed?.role)} policy, not an agent one`);
+    const role = options.role ?? 'agent';
+    if (parsed?.role !== role) {
+        throw new Error(`The signed file is a ${JSON.stringify(parsed?.role)} policy, not an ${role} one`);
     }
     const profile = options.profile ?? PRODUCTION_PROFILE;
     if (parsed.profile !== profile) {