@calimero-network/mero-js 27.3.0 → 27.4.0

package/dist/sealed/index.d.ts

@@ -2,6 +2,6 @@ export { HANDSHAKE_PATH, SEALED_CONTENT_TYPE, SEALED_PATH, SealedTransportError,
 export type { SealedFetchOptions, VerifyTransportQuote } from './sealed.js';
 export { PRODUCTION_PROFILE, createQuoteVerifier, trustedMeasurementsFromReleases } from './verify.js';
 export type { DcapCollateral, DcapVerifiedReport, DcapVerify, PublishedMrtds, QuoteVerifier, QuoteVerifierOptions, TrustedMeasurements, TrustedProfileOptions, } from './verify.js';
-export { DEFAULT_RELEASE_MIRROR, GITHUB_RELEASES, NODE_RELEASE_SIGNER, cloudNodeReleaseUrl, createSignedReleaseVerifier, fetchGithubNodeRelease, fetchNodeRelease, trustSignedRelease, verifySignedNodeRelease, } from './release.js';
+export { DEFAULT_COLLATERAL_MIRROR, DEFAULT_RELEASE_MIRROR, GITHUB_RELEASES, NODE_RELEASE_SIGNER, cloudNodeReleaseUrl, createSignedReleaseVerifier, fetchGithubNodeRelease, fetchNodeRelease, trustSignedRelease, verifySignedNodeRelease, } from './release.js';
 export type { SignedNodeRelease, SignedReleaseVerifierOptions, TrustSignedReleaseOptions, VerifySignedNodeReleaseOptions, } from './release.js';
 export type { SignerIdentity } from './sigstore.js';

package/dist/sealed/index.js

@@ -1,3 +1,3 @@
 export { HANDSHAKE_PATH, SEALED_CONTENT_TYPE, SEALED_PATH, SealedTransportError, StaleTransportKeyError, createSealedFetch, transportKeyBinding, } from './sealed.js';
 export { PRODUCTION_PROFILE, createQuoteVerifier, trustedMeasurementsFromReleases } from './verify.js';
-export { DEFAULT_RELEASE_MIRROR, GITHUB_RELEASES, NODE_RELEASE_SIGNER, cloudNodeReleaseUrl, createSignedReleaseVerifier, fetchGithubNodeRelease, fetchNodeRelease, trustSignedRelease, verifySignedNodeRelease, } from './release.js';
+export { DEFAULT_COLLATERAL_MIRROR, DEFAULT_RELEASE_MIRROR, GITHUB_RELEASES, NODE_RELEASE_SIGNER, cloudNodeReleaseUrl, createSignedReleaseVerifier, fetchGithubNodeRelease, fetchNodeRelease, trustSignedRelease, verifySignedNodeRelease, } from './release.js';

package/dist/sealed/release.d.ts

@@ -36,6 +36,12 @@ export declare const NODE_RELEASE_SIGNER: Readonly<SignerIdentity>;
  * answer but cannot make a release trusted.
  */
 export declare const DEFAULT_RELEASE_MIRROR = "https://cloud.calimero.network";
+/**
+ * Where browsers get Intel's collateral for a quote: the cloud's mirror of the
+ * PCCS paths `@phala/dcap-qvl` reads, open to any origin. Intel's PCS sends no
+ * CORS header. The mirror only carries Intel-signed items.
+ */
+export declare const DEFAULT_COLLATERAL_MIRROR: string;
 /**
  * A node release as the servers hand it out, wrapped as `{"data": ...}`: the
  * release's `published-mrtds.json`, byte for byte, and its cosign bundle.

package/dist/sealed/release.js

@@ -40,6 +40,12 @@ const MEASUREMENTS = ['mrtd', 'rtmr0', 'rtmr1', 'rtmr2', 'rtmr3'];
  * answer but cannot make a release trusted.
  */
 export const DEFAULT_RELEASE_MIRROR = 'https://cloud.calimero.network';
+/**
+ * Where browsers get Intel's collateral for a quote: the cloud's mirror of the
+ * PCCS paths `@phala/dcap-qvl` reads, open to any origin. Intel's PCS sends no
+ * CORS header. The mirror only carries Intel-signed items.
+ */
+export const DEFAULT_COLLATERAL_MIRROR = `${DEFAULT_RELEASE_MIRROR}/api/tee/pcs`;
 /**
  * Verify a node release's `published-mrtds.json` against its cosign bundle,
  * as `cosign verify-blob` would, and return the file parsed. Rejects, with the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@calimero-network/mero-js",
-  "version": "27.3.0",
+  "version": "27.4.0",
   "description": "JavaScript client for Calimero 1.0: attested TEE nodes, a sealed channel, passkeys and API keys",
   "type": "module",
   "exports": {