@calimero-network/mero-js 29.1.0 → 29.3.0

package/dist/index.cjs

@@ -64,6 +64,7 @@ __export(index_exports, {
   SEALED_CONTENT_TYPE: () => SEALED_CONTENT_TYPE,
   SEALED_PATH: () => SEALED_PATH,
   SealedTransportError: () => SealedTransportError,
+  SignUpRefused: () => SignUpRefused,
   StaleTransportKeyError: () => StaleTransportKeyError,
   TrapError: () => TrapError,
   UnavailableError: () => UnavailableError,
@@ -1536,6 +1537,21 @@ var OriginTaken = class extends CalimeroError {
     this.name = "OriginTaken";
   }
 };
+var SignUpRefused = class extends CalimeroError {
+  constructor(message, details = {}) {
+    super(403, "SIGN_UP_REFUSED", message, details);
+    this.name = "SignUpRefused";
+    this.reason = signUpRefusal(message);
+  }
+};
+function signUpRefusal(message) {
+  if (/invite only/.test(message)) return "invite-only";
+  if (/pre-authorized|sign-up invite/.test(message)) return "closed";
+  if (/unknown invite/.test(message)) return "unknown-invite";
+  if (/invite has expired/.test(message)) return "expired-invite";
+  if (/organization is gone/.test(message)) return "org-gone";
+  return "other";
+}
 var QuotaExceeded = class extends CalimeroError {
   constructor(message, details = {}) {
     super(429, "QUOTA_EXCEEDED", message, details);
@@ -1610,6 +1626,8 @@ function errorFrom(status, body, retryAfterHeader) {
       return new OriginTaken(message, details);
     case "429 QUOTA_EXCEEDED":
       return new QuotaExceeded(message, details);
+    case "403 SIGN_UP_REFUSED":
+      return new SignUpRefused(message, details);
     case "412 CONFIRM_REQUIRED":
       return new ConfirmRequired(message, details);
     case "413 ARGS_TOO_LARGE":
@@ -2178,23 +2196,33 @@ var CalimeroClient = class _CalimeroClient {
    * origin's relying party (the confirmation's `rpId` is that origin's too)
    * and binds the session to the package the origin is registered for; an
    * unregistered origin is refused with {@link OriginNotRegistered}.
+   *
+   * `invite` ({@link SignUpOptions}) goes on both halves and on the retry,
+   * as the node judges it on each before it spends anything; a sign-up the
+   * cluster's policy refuses, or an unknown, expired or used invite, is
+   * {@link SignUpRefused} (from `begin`, before any passkey is made).
    */
   async signUp(passkey, name, options = {}) {
     const origin = this.pageOrigin(options);
+    const invite = options.invite ? { invite: options.invite } : {};
     const begin = await this.begin(
       "auth/passkey/register/begin",
-      origin === void 0 ? { name } : { name, origin },
+      origin === void 0 ? { name, ...invite } : { name, origin, ...invite },
       origin
     );
     const registration = await passkey.create(begin.options);
     const session = await this.postConfirmed(
       "auth/passkey/register/finish",
-      { challengeId: begin.challengeId, registration },
+      { challengeId: begin.challengeId, registration, ...invite },
       passkey
     );
     this.useSession(session);
     return session;
   }
+  /** Who may create an account on the cluster (`GET /sign-up`); needs no session. */
+  signUpPolicy() {
+    return this.get("sign-up");
+  }
   /**
    * Sign in with an existing passkey. On a page whose origin is not the
    * cluster's ({@link SignInOptions}), the assertion is made for that
@@ -2341,6 +2369,12 @@ var CalimeroClient = class _CalimeroClient {
    * Create an API key for an agent or server, approved with the account's
    * `passkey` (`412 CONFIRM_REQUIRED`); needs a passkey session (an API key
    * is refused `403`). The key is returned once.
+   *
+   * `upgrades: { app, package? }` makes an upgrade key, for CI: it upgrades
+   * that one app to signed releases of its package (default: the one the app
+   * runs, by that package's pinned signer) with {@link upgradeApp} and no
+   * passkey, and every other request with it is refused
+   * `403 UPGRADE_KEY_ONLY`. It takes no other scope field.
    */
   createApiKey(options, passkey) {
     return this.postConfirmed("auth/apikeys", { ...options }, passkey);
@@ -2480,6 +2514,8 @@ var CalimeroClient = class _CalimeroClient {
    * `passkey` gives. Refused (`403`) to a session opened on an app's
    * frontend: an app asks its user with {@link requestConsent} instead. Past
    * a release deadline its approver has not met: {@link ReleaseDeadlineError}.
+   * With an upgrade key ({@link createApiKey} `upgrades`) pass no passkey and
+   * a `version` of the key's package: the key's own proof stands in for it.
    */
   upgradeApp(app, target, passkey) {
     const path = `apps/${seg(app)}/upgrade`;