@calimero-network/mero-js 26.8.0 → 26.9.1

package/dist/index.cjs

@@ -2038,6 +2038,53 @@ var AdminApiClient = class {
       )
     );
   }
+  /**
+   * Issue an access grant: a token whose holder may call `request.methods` in
+   * `contextId`, as this node, with no session of its own.
+   *
+   * A grant only narrows: each method must be one this session's own token may
+   * execute in the context (`403` otherwise), and an account session is refused
+   * (`403`), since a granted call runs as the node. The token is in the answer
+   * once and never again; the node keeps only its hash.
+   */
+  async createAccessGrant(contextId, request) {
+    return unwrap(
+      await this.httpClient.post(
+        `/admin-api/contexts/${pathSegment(contextId)}/grants`,
+        { methods: request.methods, label: request.label ?? "", notAfter: request.notAfter ?? null }
+      )
+    );
+  }
+  /** The access grants of `contextId` this session could have issued. */
+  async listAccessGrants(contextId) {
+    return unwrap(
+      await this.httpClient.get(
+        `/admin-api/contexts/${pathSegment(contextId)}/grants`
+      )
+    );
+  }
+  /** Revoke an access grant. A grant this session cannot see is a `404`. */
+  async revokeAccessGrant(contextId, grantId) {
+    return unwrap(
+      await this.httpClient.delete(
+        `/admin-api/contexts/${pathSegment(contextId)}/grants/${pathSegment(grantId)}`
+      )
+    );
+  }
+  /**
+   * Call one method under an access grant. The token is the whole credential:
+   * the route is public on every node, so this works from a client holding no
+   * session at all. A method the grant does not name, an unknown or revoked
+   * token, and an expired grant are each a `403`.
+   */
+  async callWithAccessGrant(contextId, request) {
+    return unwrap(
+      await this.httpClient.post(
+        `/admin-api/contexts/${pathSegment(contextId)}/grant-calls`,
+        request
+      )
+    );
+  }
   /**
    * Ask what this node can do for a member in `contextId`, before they sign
    * anything.
@@ -10577,7 +10624,7 @@ function bytes32(value, label2) {
 }
 
 // src/namespace-op/namespace-op.ts
-var SIGNED_NAMESPACE_OP_SCHEMA_VERSION = 26;
+var SIGNED_NAMESPACE_OP_SCHEMA_VERSION = 27;
 var NAMESPACE_SIGN_DOMAIN = new TextEncoder().encode("calimero.namespace.v1");
 var NAMESPACE_OP_ROOT = 0;
 var ROOT_OP2 = {