@calimero-network/mero-js 27.0.1 → 27.1.0

package/dist/cloud-v2/client.d.ts

@@ -11,7 +11,8 @@
  */
 import { type AttestationDoc, type CloudPolicy } from './attestation.js';
 import { type PasskeyProvider } from './passkey.js';
-export { AppError, ArgsTooLarge, CalimeroError, ConfirmCancelled, ConfirmRequired, IdempotencyMismatch, LoginRequired, NotFound, TrapError, UnavailableError, errorFrom, } from './errors.js';
+import { type AppsReport, type ConsentRequest, type ConsentResult, type ConsentStarted, type OpsAppsReport, type OpsOrgsReport, type PageOptions, type PendingApprovals, type PublisherBindingInfo, type PublisherProof, type ReleaseRules } from './approvals.js';
+export { AppError, ArgsTooLarge, CalimeroError, ConfirmCancelled, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, ReleaseDeadlineError, TrapError, UnavailableError, errorFrom, } from './errors.js';
 export type { Committed } from './errors.js';
 export interface CalimeroSession {
     accountId: string;
@@ -112,6 +113,23 @@ export interface OrgUpgradeTarget {
     cascade?: boolean;
     migrate?: string;
 }
+/**
+ * `GET /orgs/{org}`: the organization as the caller sees it. Besides its
+ * members, teams and metadata, who may approve its releases, the package
+ * signing keys it publishes, and whether a passed release deadline has
+ * stopped new work on its own set.
+ */
+export interface OrgInfo extends Record<string, unknown> {
+    /** Accounts holding `APPROVE_RELEASES` there (owner and admins included). */
+    releaseApprovers: string[];
+    /** The signer ids (`did:key`) bound to it as publisher. */
+    publishes: string[];
+    /** `null` unless a deadline stopped new work: approve `release` (or newer) to lift it. */
+    newWorkStopped: {
+        release: string;
+        after: string;
+    } | null;
+}
 /**
  * How a call or a view is sent again while the node is unavailable (D70): with
  * the same key, after a backoff that starts at `baseDelayMs` and doubles up to
@@ -266,8 +284,11 @@ export declare class CalimeroClient {
      * Move an app to another release of its package (`{ version }`), another
      * package, or a bundle hash, running its migration. Answers the upgrade's
      * entry; a failed migration rejects with code `UPGRADE_FAILED` (422).
-     * Where the owner holds app upgrades, the node asks for the owner's approval
-     * (`412 CONFIRM_REQUIRED`), which `passkey` gives.
+     * Where owners hold app upgrades, the node asks for the approval of
+     * whoever the package's manifest names (`412 CONFIRM_REQUIRED`), which
+     * `passkey` gives. Refused (`403`) to a session opened on an app's
+     * frontend: an app asks its user with {@link requestConsent} instead. Past
+     * a release deadline its approver has not met: {@link ReleaseDeadlineError}.
      */
     upgradeApp(app: string, target: {
         version?: string;
@@ -346,7 +367,7 @@ export declare class CalimeroClient {
     deleteAlias(alias: string): Promise<void>;
     createOrg(name: string): Promise<string>;
     /** The organization, with the teams this caller reaches or manages. */
-    getOrg(org: string): Promise<Record<string, unknown>>;
+    getOrg(org: string): Promise<OrgInfo>;
     /**
      * Delete an organization with its teams, invites and apps (its owner only).
      * The node asks for the owner's passkey (`412 CONFIRM_REQUIRED`), which `passkey` gives.
@@ -370,8 +391,11 @@ export declare class CalimeroClient {
     /**
      * Approve a mero-tee release to hold the apps of `org`, or of this account
      * outside any organization (`org` `null`); `approved: false` withdraws it.
-     * Until then, nodes on that release get none of those apps' data. The owner
-     * approves with `passkey`.
+     * Until then, nodes on that release get none of those apps' data. For an
+     * organization, a member holding `APPROVE_RELEASES` approves with `passkey`;
+     * the node binds the release's measurements itself. Refused (`403`) to a
+     * session opened on an app's frontend: an app asks its user with
+     * {@link requestConsent} instead.
      */
     approveRelease(org: string | null, version: string, passkey: PasskeyProvider, approved?: boolean): Promise<Record<string, unknown>>;
     /**
@@ -379,12 +403,95 @@ export declare class CalimeroClient {
      * `org`'s apps or this account's own (`org` `null`). `prefixes` `'manifest'`
      * (the default) approves every prefix the package's latest release declares;
      * `replace` sets exactly `prefixes`, which is how one is revoked. Approved
-     * with `passkey`.
+     * with `passkey`. Refused (`403`) to a session opened on an app's frontend:
+     * an app asks with {@link requestConsent} (`kind: 'outbound'`) instead.
      */
     approveOutbound(org: string | null, pkg: string, passkey: PasskeyProvider, options?: {
         prefixes?: string[] | 'manifest';
         replace?: boolean;
     }): Promise<Record<string, unknown>>;
+    /**
+     * One page of the report of a scope's apps: an organization's (any member;
+     * `404` to anyone else) or, with `org` `null`, the account's own outside any
+     * organization (a session bound to an app's frontend: that package's apps).
+     * The governance, the scope's approved releases, the releases the cluster's
+     * nodes run and whether each is approved, and per app its release, newer
+     * releases it may move to, last upgrade and replicas.
+     */
+    appsReport(org: string | null, page?: PageOptions): Promise<AppsReport>;
+    /** {@link appsReport}, every page, with the apps of all of them in `apps`. */
+    appsReportAll(org: string | null): Promise<AppsReport>;
+    /** `GET /releases`: the cluster's governance and every release deadline. Public. */
+    releaseRules(): Promise<ReleaseRules>;
+    /**
+     * What waits for a decision in a scope (`org`, or the account's own apps
+     * with `null`): mero-tee releases the cluster's nodes run that the scope has
+     * not approved, apps with newer releases of their package, and whether a
+     * passed deadline stops new work. Read over the sealed channel; act on an
+     * item by sending the user to the consent page ({@link requestConsent},
+     * `releaseConsent`, `upgradeConsent`).
+     */
+    pendingApprovals(org?: string | null): Promise<PendingApprovals>;
+    /**
+     * Ask the node to ask the user: a release, upgrade or outbound approval
+     * that only the account holder may make, decided on the node's own consent
+     * page, never in the app. Needs a passkey session (a session bound to the
+     * app's frontend is fine). Send the person to the answer's `url`; the page
+     * sends them back to `returnTo?request_id=…&result=approved|declined`
+     * (`consentReturn`), and {@link consentResult} confirms the decision.
+     */
+    requestConsent(request: ConsentRequest): Promise<ConsentStarted>;
+    /**
+     * {@link requestConsent}, then send the browser to the consent page
+     * (`navigate`, by default `window.location.assign`). Answers the request
+     * once `navigate` returns: with a popup (`url => window.open(url)`), poll it
+     * with {@link waitForConsent}.
+     */
+    openConsentPage(request: ConsentRequest, navigate?: (url: string) => void): Promise<ConsentStarted>;
+    /** The decision on a consent request (any node answers, for the account that asked). */
+    consentResult(requestId: string): Promise<ConsentResult>;
+    /**
+     * Poll {@link consentResult} until the request is decided, every
+     * `intervalMs` (2 s), until `signal` aborts or `expiresAt` (Unix seconds)
+     * passes, when it answers the last `pending` result.
+     */
+    waitForConsent(requestId: string, options?: {
+        intervalMs?: number;
+        signal?: AbortSignal;
+        expiresAt?: number;
+    }): Promise<ConsentResult>;
+    /** `GET /publishers/{signerId}`: the cluster name and binding generation a key signs to bind it next. */
+    publisherBinding(signerId: string): Promise<PublisherBindingInfo>;
+    /**
+     * Bind a package signing key to `org`, which then approves the node images
+     * every instance of the key's packages runs on, and upgrades those whose
+     * package declares `upgrades: publisher`. `proof` is the key's signature
+     * over `publisherBindingMessage(cluster, org, signerId, generation)`; a
+     * member holding `APPROVE_RELEASES` sends it with `passkey`.
+     */
+    bindPublisher(org: string, proof: PublisherProof, passkey: PasskeyProvider): Promise<Record<string, unknown>>;
+    /**
+     * Upgrade every instance of `pkg` whose release declares `upgrades:
+     * publisher`, whoever owns it, as its publisher `org` (a
+     * `MANAGE_APPLICATION` holder there), with one passkey approval. Answers
+     * the run, kept on the publisher.
+     */
+    upgradePublished(org: string, pkg: string, target: {
+        version: string;
+        migrate?: string;
+    }, passkey: PasskeyProvider): Promise<UpgradeRun>;
+    /** `GET /ops/apps`: what every app runs, without names or accounts. Operator token (`useApiKey`). */
+    opsApps(page?: PageOptions): Promise<OpsAppsReport>;
+    /** `GET /ops/orgs`: each organization's approved releases. Operator token. */
+    opsOrgs(page?: PageOptions): Promise<OpsOrgsReport>;
+    /**
+     * Announce when work on images older than `version` ends: from `after` on,
+     * a scope that has not approved it (or newer) starts no new work. Operator
+     * token.
+     */
+    setReleaseDeadline(version: string, after: Date | string): Promise<void>;
+    /** Lift a release's deadline. Operator token. */
+    liftReleaseDeadline(version: string): Promise<void>;
     /** Add a member, or change their role. */
     setMember(org: string, account: string, role: 'guest' | 'member' | 'admin' | 'owner'): Promise<void>;
     removeMember(org: string, account: string): Promise<Record<string, unknown>>;

package/dist/cloud-v2/client.js

@@ -13,7 +13,8 @@ import { SealedTransportError, createSealedFetch } from '../sealed/sealed.js';
 import { fetchAttestedKey } from './attestation.js';
 import { CalimeroError, ConfirmCancelled, ConfirmRequired, UnavailableError, errorFrom } from './errors.js';
 import { b64url, fromB64url } from './passkey.js';
-export { AppError, ArgsTooLarge, CalimeroError, ConfirmCancelled, ConfirmRequired, IdempotencyMismatch, LoginRequired, NotFound, TrapError, UnavailableError, errorFrom, } from './errors.js';
+import { pageQuery, pendingApprovalsFrom, } from './approvals.js';
+export { AppError, ArgsTooLarge, CalimeroError, ConfirmCancelled, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, ReleaseDeadlineError, TrapError, UnavailableError, errorFrom, } from './errors.js';
 /** One URL path segment, so an id cannot reach another route. */
 function seg(value) {
     return encodeURIComponent(value);
@@ -399,8 +400,11 @@ export class CalimeroClient {
      * Move an app to another release of its package (`{ version }`), another
      * package, or a bundle hash, running its migration. Answers the upgrade's
      * entry; a failed migration rejects with code `UPGRADE_FAILED` (422).
-     * Where the owner holds app upgrades, the node asks for the owner's approval
-     * (`412 CONFIRM_REQUIRED`), which `passkey` gives.
+     * Where owners hold app upgrades, the node asks for the approval of
+     * whoever the package's manifest names (`412 CONFIRM_REQUIRED`), which
+     * `passkey` gives. Refused (`403`) to a session opened on an app's
+     * frontend: an app asks its user with {@link requestConsent} instead. Past
+     * a release deadline its approver has not met: {@link ReleaseDeadlineError}.
      */
     upgradeApp(app, target, passkey) {
         const path = `apps/${seg(app)}/upgrade`;
@@ -578,8 +582,11 @@ export class CalimeroClient {
     /**
      * Approve a mero-tee release to hold the apps of `org`, or of this account
      * outside any organization (`org` `null`); `approved: false` withdraws it.
-     * Until then, nodes on that release get none of those apps' data. The owner
-     * approves with `passkey`.
+     * Until then, nodes on that release get none of those apps' data. For an
+     * organization, a member holding `APPROVE_RELEASES` approves with `passkey`;
+     * the node binds the release's measurements itself. Refused (`403`) to a
+     * session opened on an app's frontend: an app asks its user with
+     * {@link requestConsent} instead.
      */
     async approveRelease(org, version, passkey, approved = true) {
         const path = org === null ? 'auth/releases' : `orgs/${seg(org)}/releases`;
@@ -590,12 +597,148 @@ export class CalimeroClient {
      * `org`'s apps or this account's own (`org` `null`). `prefixes` `'manifest'`
      * (the default) approves every prefix the package's latest release declares;
      * `replace` sets exactly `prefixes`, which is how one is revoked. Approved
-     * with `passkey`.
+     * with `passkey`. Refused (`403`) to a session opened on an app's frontend:
+     * an app asks with {@link requestConsent} (`kind: 'outbound'`) instead.
      */
     async approveOutbound(org, pkg, passkey, options = {}) {
         const path = org === null ? 'auth/outbound' : `orgs/${seg(org)}/outbound`;
         return this.postConfirmed(path, { package: pkg, prefixes: options.prefixes ?? 'manifest', replace: options.replace ?? false }, passkey);
     }
+    // ---------------------------------------------------------------- approvals
+    /**
+     * One page of the report of a scope's apps: an organization's (any member;
+     * `404` to anyone else) or, with `org` `null`, the account's own outside any
+     * organization (a session bound to an app's frontend: that package's apps).
+     * The governance, the scope's approved releases, the releases the cluster's
+     * nodes run and whether each is approved, and per app its release, newer
+     * releases it may move to, last upgrade and replicas.
+     */
+    appsReport(org, page = {}) {
+        const path = org === null ? 'auth/apps' : `orgs/${seg(org)}/apps`;
+        return this.get(`${path}${pageQuery(page)}`);
+    }
+    /** {@link appsReport}, every page, with the apps of all of them in `apps`. */
+    async appsReportAll(org) {
+        const first = await this.appsReport(org);
+        const apps = [...first.apps];
+        let next = first.next;
+        while (next !== null) {
+            const page = await this.appsReport(org, { after: next });
+            apps.push(...page.apps);
+            next = page.next;
+        }
+        return { ...first, apps, next: null };
+    }
+    /** `GET /releases`: the cluster's governance and every release deadline. Public. */
+    releaseRules() {
+        return this.get('releases');
+    }
+    /**
+     * What waits for a decision in a scope (`org`, or the account's own apps
+     * with `null`): mero-tee releases the cluster's nodes run that the scope has
+     * not approved, apps with newer releases of their package, and whether a
+     * passed deadline stops new work. Read over the sealed channel; act on an
+     * item by sending the user to the consent page ({@link requestConsent},
+     * `releaseConsent`, `upgradeConsent`).
+     */
+    async pendingApprovals(org = null) {
+        const [report, rules] = await Promise.all([this.appsReportAll(org), this.releaseRules()]);
+        return pendingApprovalsFrom(report, rules);
+    }
+    /**
+     * Ask the node to ask the user: a release, upgrade or outbound approval
+     * that only the account holder may make, decided on the node's own consent
+     * page, never in the app. Needs a passkey session (a session bound to the
+     * app's frontend is fine). Send the person to the answer's `url`; the page
+     * sends them back to `returnTo?request_id=…&result=approved|declined`
+     * (`consentReturn`), and {@link consentResult} confirms the decision.
+     */
+    requestConsent(request) {
+        return this.post('consent/requests', request);
+    }
+    /**
+     * {@link requestConsent}, then send the browser to the consent page
+     * (`navigate`, by default `window.location.assign`). Answers the request
+     * once `navigate` returns: with a popup (`url => window.open(url)`), poll it
+     * with {@link waitForConsent}.
+     */
+    async openConsentPage(request, navigate = (url) => {
+        const w = globalThis.window;
+        if (!w)
+            throw new Error('no window to open the consent page in; pass `navigate`');
+        w.location.assign(url);
+    }) {
+        const started = await this.requestConsent(request);
+        navigate(started.url);
+        return started;
+    }
+    /** The decision on a consent request (any node answers, for the account that asked). */
+    consentResult(requestId) {
+        return this.get(`consent/${seg(requestId)}/result`);
+    }
+    /**
+     * Poll {@link consentResult} until the request is decided, every
+     * `intervalMs` (2 s), until `signal` aborts or `expiresAt` (Unix seconds)
+     * passes, when it answers the last `pending` result.
+     */
+    async waitForConsent(requestId, options = {}) {
+        const interval = options.intervalMs ?? 2000;
+        for (;;) {
+            const result = await this.consentResult(requestId);
+            if (result.status !== 'pending')
+                return result;
+            if (options.signal?.aborted)
+                return result;
+            if (options.expiresAt !== undefined && Date.now() / 1000 >= options.expiresAt)
+                return result;
+            await new Promise((resolve) => setTimeout(resolve, interval));
+        }
+    }
+    /** `GET /publishers/{signerId}`: the cluster name and binding generation a key signs to bind it next. */
+    publisherBinding(signerId) {
+        return this.get(`publishers/${seg(signerId)}`);
+    }
+    /**
+     * Bind a package signing key to `org`, which then approves the node images
+     * every instance of the key's packages runs on, and upgrades those whose
+     * package declares `upgrades: publisher`. `proof` is the key's signature
+     * over `publisherBindingMessage(cluster, org, signerId, generation)`; a
+     * member holding `APPROVE_RELEASES` sends it with `passkey`.
+     */
+    bindPublisher(org, proof, passkey) {
+        return this.postConfirmed(`orgs/${seg(org)}/publishers`, { ...proof }, passkey);
+    }
+    /**
+     * Upgrade every instance of `pkg` whose release declares `upgrades:
+     * publisher`, whoever owns it, as its publisher `org` (a
+     * `MANAGE_APPLICATION` holder there), with one passkey approval. Answers
+     * the run, kept on the publisher.
+     */
+    upgradePublished(org, pkg, target, passkey) {
+        return this.postConfirmed(`orgs/${seg(org)}/packages/${seg(pkg)}/upgrade`, { ...target }, passkey);
+    }
+    // ---------------------------------------------------------------- operator
+    /** `GET /ops/apps`: what every app runs, without names or accounts. Operator token (`useApiKey`). */
+    opsApps(page = {}) {
+        return this.get(`ops/apps${pageQuery(page)}`);
+    }
+    /** `GET /ops/orgs`: each organization's approved releases. Operator token. */
+    opsOrgs(page = {}) {
+        return this.get(`ops/orgs${pageQuery(page)}`);
+    }
+    /**
+     * Announce when work on images older than `version` ends: from `after` on,
+     * a scope that has not approved it (or newer) starts no new work. Operator
+     * token.
+     */
+    async setReleaseDeadline(version, after) {
+        const at = typeof after === 'string' ? after : after.toISOString();
+        await this.post(`ops/releases/${seg(version)}/deadline`, { after: at });
+    }
+    /** Lift a release's deadline. Operator token. */
+    async liftReleaseDeadline(version) {
+        await this.delete(`ops/releases/${seg(version)}/deadline`);
+    }
     /** Add a member, or change their role. */
     async setMember(org, account, role) {
         await this.post(`orgs/${seg(org)}/members`, { account, role });

package/dist/cloud-v2/errors.d.ts

@@ -52,6 +52,29 @@ export declare class ArgsTooLarge extends CalimeroError {
 export declare class IdempotencyMismatch extends CalimeroError {
     constructor(message: string, details?: Record<string, unknown>);
 }
+/**
+ * `409 RELEASE_DEADLINE`: a mero-tee release's deadline has passed and the
+ * set that governs this work (the app's publisher's, or its owner's) has not
+ * approved it or a newer one, so new work (creating an app, installing a
+ * release, upgrading an app) is refused. Apps already running keep running.
+ * Approving `release` lifts it at once.
+ */
+export declare class ReleaseDeadlineError extends CalimeroError {
+    /** The release to approve. */
+    readonly release: string;
+    /** Its deadline, RFC 3339 (`''` when the node did not say). */
+    readonly after: string;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * `409 CONSENT_STALE`: what a consent page showed (the app's bundle, the
+ * target release, the release's measurements) changed before the person
+ * approved. Nothing was approved; ask for a new consent request so they see
+ * the new facts.
+ */
+export declare class ConsentStale extends CalimeroError {
+    constructor(message: string, details?: Record<string, unknown>);
+}
 /**
  * `422 APP_ERROR`: the app refused the call. `appCode` is the app's declared
  * error (`Taken`, `Forbidden`, ...) and `fields` its named fields. The call was

package/dist/cloud-v2/errors.js

@@ -73,6 +73,33 @@ export class IdempotencyMismatch extends CalimeroError {
         this.name = 'IdempotencyMismatch';
     }
 }
+/**
+ * `409 RELEASE_DEADLINE`: a mero-tee release's deadline has passed and the
+ * set that governs this work (the app's publisher's, or its owner's) has not
+ * approved it or a newer one, so new work (creating an app, installing a
+ * release, upgrading an app) is refused. Apps already running keep running.
+ * Approving `release` lifts it at once.
+ */
+export class ReleaseDeadlineError extends CalimeroError {
+    constructor(message, details = {}) {
+        super(409, 'RELEASE_DEADLINE', message, details);
+        this.name = 'ReleaseDeadlineError';
+        this.release = typeof details.release === 'string' ? details.release : '';
+        this.after = typeof details.after === 'string' ? details.after : '';
+    }
+}
+/**
+ * `409 CONSENT_STALE`: what a consent page showed (the app's bundle, the
+ * target release, the release's measurements) changed before the person
+ * approved. Nothing was approved; ask for a new consent request so they see
+ * the new facts.
+ */
+export class ConsentStale extends CalimeroError {
+    constructor(message, details = {}) {
+        super(409, 'CONSENT_STALE', message, details);
+        this.name = 'ConsentStale';
+    }
+}
 /**
  * `422 APP_ERROR`: the app refused the call. `appCode` is the app's declared
  * error (`Taken`, `Forbidden`, ...) and `fields` its named fields. The call was
@@ -151,6 +178,10 @@ export function errorFrom(status, body, retryAfterHeader) {
             return new NotFound(message, details);
         case '409 IDEMPOTENCY_MISMATCH':
             return new IdempotencyMismatch(message, details);
+        case '409 RELEASE_DEADLINE':
+            return new ReleaseDeadlineError(message, details);
+        case '409 CONSENT_STALE':
+            return new ConsentStale(message, details);
         case '412 CONFIRM_REQUIRED':
             return new ConfirmRequired(message, details);
         case '413 ARGS_TOO_LARGE':

package/dist/cloud-v2/index.d.ts

@@ -1,10 +1,12 @@
 export { CalimeroClient } from './client.js';
-export { AppError, ArgsTooLarge, CalimeroError, ConfirmCancelled, ConfirmRequired, IdempotencyMismatch, LoginRequired, NotFound, TrapError, UnavailableError, errorFrom, } from './errors.js';
+export { AppError, ArgsTooLarge, CalimeroError, ConfirmCancelled, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, ReleaseDeadlineError, TrapError, UnavailableError, errorFrom, } from './errors.js';
 export type { Committed } from './errors.js';
-export type { AppInfo, BlobInfo, CallResult, CalimeroClientOptions, CloudEvent, CalimeroSession, PackageInfo, PackageInstalled, CloudRetryOptions, OrgUpgradeTarget, PresenceEntry, UpgradeRun, ViewResult, } from './client.js';
+export type { AppInfo, BlobInfo, CallResult, CalimeroClientOptions, CloudEvent, CalimeroSession, PackageInfo, PackageInstalled, CloudRetryOptions, OrgInfo, OrgUpgradeTarget, PresenceEntry, UpgradeRun, ViewResult, } from './client.js';
 export { claimedRelease, fetchAttestedKey, MOCK_QUOTE_HEADER } from './attestation.js';
 export type { AttestationDoc, CloudPolicy, CloudReleasePolicy } from './attestation.js';
 export { browserPasskey, b64url, fromB64url } from './passkey.js';
 export type { AssertionJSON, PasskeyProvider, RegistrationJSON } from './passkey.js';
+export { MAX_REPORT_PAGE, RELEASE_VERIFIER, compareVersions, consentReturn, pageQuery, pendingApprovalsFrom, publisherBindingBytes, publisherBindingMessage, releaseConsent, releaseNotesUrl, stalledBy, upgradeConsent, verifyReleaseUrl, withdrawConsent, } from './approvals.js';
+export type { ActorKind, AppsReport, Authority, ClusterRelease, ConsentReleaseModel, ConsentRequest, ConsentResult, ConsentScope, ConsentStarted, ConsentStatus, Governance, LastUpgrade, OpsAppsReport, OpsOrgsReport, PageOptions, PendingApprovals, PendingRelease, PendingUpgrade, PublisherBindingInfo, PublisherProof, ReleaseDeadline, ReleaseRules, ReportScope, ReportedApp, ReportedBundle, ReportedRelease, ReportedReplica, UpgradeAuthority, } from './approvals.js';
 export { DEFAULT_ORG_CAPABILITIES, ORG_CAPABILITIES, orgCapabilities } from './capabilities.js';
 export type { OrgCapability } from './capabilities.js';

package/dist/cloud-v2/index.js

@@ -1,5 +1,6 @@
 export { CalimeroClient } from './client.js';
-export { AppError, ArgsTooLarge, CalimeroError, ConfirmCancelled, ConfirmRequired, IdempotencyMismatch, LoginRequired, NotFound, TrapError, UnavailableError, errorFrom, } from './errors.js';
+export { AppError, ArgsTooLarge, CalimeroError, ConfirmCancelled, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, ReleaseDeadlineError, TrapError, UnavailableError, errorFrom, } from './errors.js';
 export { claimedRelease, fetchAttestedKey, MOCK_QUOTE_HEADER } from './attestation.js';
 export { browserPasskey, b64url, fromB64url } from './passkey.js';
+export { MAX_REPORT_PAGE, RELEASE_VERIFIER, compareVersions, consentReturn, pageQuery, pendingApprovalsFrom, publisherBindingBytes, publisherBindingMessage, releaseConsent, releaseNotesUrl, stalledBy, upgradeConsent, verifyReleaseUrl, withdrawConsent, } from './approvals.js';
 export { DEFAULT_ORG_CAPABILITIES, ORG_CAPABILITIES, orgCapabilities } from './capabilities.js';