@calimero-network/mero-js 29.13.0 → 29.15.0

package/README.md

@@ -104,14 +104,14 @@ Pinned measurements go through `policy.verifyQuote` (`createQuoteVerifier`).
 - **Apps**: `createApp`, `listApps`, `getApp`, `deleteApp`, `setAccess`, `setAppMetadata`, `appStorage`, `appAbi`, `upgradeApp`, `transferApp`, `moveApp`.
 - **Calls**: `call`, `callConfirmed`, `view`, `events`. A call always carries an idempotency key, and is sent again with it while the node answers `503`, then to the next node.
 - **Blobs and presence**: `uploadBlob`, `downloadBlob`, `listBlobs`, `blobInfo`, `deleteBlob`; `publishPresence`, `presence`, `presenceStream`.
-- **Organizations**: `createOrg`, `getOrg`, `orgMembersSecurity` (owners and admins: each member's passkey count to `3+`, recovery code set, last active day, live sessions), `deleteOrg`, `setOrgMetadata`, `setMember`, `removeMember`, `setMemberMetadata`, `setCapabilities` (`ORG_CAPABILITIES`), `setTeamDefaultCapabilities`, teams, app teams (`listAppTeams`, `scopeApps`), `invite`, `redeemInvite`, `listInvites`, `revokeInvite`, recovery (`setRecoveryKey`, `startRecovery`, `cancelRecovery`, `finishRecovery`; `newRecoverySeed`, `recoveryPublicKey`). Setting or removing a member or team member, capabilities, invites (minting and revoking) and scoping apps are approved with the caller's passkey; redeeming an invite is not.
+- **Organizations**: `createOrg`, `getOrg`, `orgMembersSecurity` (owners and admins: each member's passkey count to `3+`, recovery code set, last active day, live sessions), `deleteOrg`, `setOrgMetadata`, `setMember`, `removeMember`, `setMemberMetadata`, `setCapabilities` (`ORG_CAPABILITIES`), `setTeamDefaultCapabilities`, teams, app teams (`listAppTeams`, `scopeApps`), `invite` (`{ allApps: true }`: whoever redeems it gets every app added later), `setAllApps` (owner or admin: every app added later, for a member), `redeemInvite`, `listInvites`, `revokeInvite`, recovery (`setRecoveryKey`, `startRecovery`, `cancelRecovery`, `finishRecovery`; `newRecoverySeed`, `recoveryPublicKey`). Setting or removing a member or team member, capabilities, invites (minting and revoking) and scoping apps are approved with the caller's passkey; redeeming an invite is not.
 - **Owner decisions** (passkey approval, never from an app's frontend): `upgradeOrg`, `upgradeRun`, `retryUpgradeRun`, `approveRelease`, `approveOutbound`, `bindPublisher`, `upgradePublished`.
 - **Approvals from an app**: `appsReport`, `releaseRules`, `pendingApprovals`, then `requestConsent` / `openConsentPage` to send the user to the node's consent page, and `consentResult`. Show the answer's `code` to the user before sending them to `url` (`openConsentPage`'s `confirm` hook); they should see the same code on the page (`confirmationCode(requestId)` checks it). See [Ask your users to approve node images and app upgrades](https://calimero-network.github.io/mero-js/guides/user-approvals/).
 - **Operator** (ops token): `opsApps`, `opsOrgs`, `opsServedOrigins` (every custom domain the log holds, by package label), `setReleaseDeadline`, `liftReleaseDeadline`.
 - **Any route**: `get`, `post`, `put`, `delete`; `postConfirmed` and `deleteConfirmed` answer a `412 CONFIRM_REQUIRED` with a passkey.
 
 Refusals are typed (`LoginRequired`, `PasskeyUnknownHere`, `WrongNode`, `NotFound`, `ConfirmRequired`, `ConfirmCancelled`, `ConfirmPromptBlocked`,
-`ArgsTooLarge`, `IdempotencyMismatch`, `ReleaseDeadlineError`, `ConsentStale`, `AppError`, `TrapError`,
+`ArgsTooLarge`, `IdempotencyMismatch`, `ReleaseDeadlineError`, `RuntimeTooOld`, `ConsentStale`, `AppError`, `TrapError`,
 `UnavailableError`, `OriginNotRegistered`, `BadOrigin`, `OriginTaken`, `QuotaExceeded`),
 all extending `CalimeroError` with the node's `status` and `code`. A `401` once
 the node that issued the session is replaced or out of reach is answered by one

package/dist/cloud-v2/approvals.d.ts

@@ -82,7 +82,28 @@ export interface ReportedReplica {
     release: string | null;
     approved: boolean;
 }
-/** One app in a report. `name`, `team` and `availableVersions` are in members' and accounts' reports only. */
+/** A replica's node whose runtime is older than a release needs, and what it runs: the version, or `{ before }` for a node on a release from before nodes named their runtime. */
+export interface RuntimeShortNode {
+    node: number;
+    runtime: string | {
+        before: string;
+    } | null;
+}
+/**
+ * Why an app cannot move to the newest release it may see (core's
+ * `latestBlocked`): `runtime`, a replica's node runs an older runtime than
+ * the release's `minRuntimeVersion` (the upgrade would be refused `409
+ * RUNTIME_TOO_OLD`); `authority`, the app's owner upgrades it and the
+ * release would give its upgrades to the publisher.
+ */
+export interface LatestBlocked {
+    version: string;
+    reason: 'runtime' | 'authority';
+    message: string;
+    minRuntimeVersion?: string;
+    nodes?: RuntimeShortNode[];
+}
+/** One app in a report. `name`, `team`, `availableVersions`, `latestReachable` and `latestBlocked` are in members' and accounts' reports only. */
 export interface ReportedApp {
     app: string;
     group: number;
@@ -103,6 +124,14 @@ export interface ReportedApp {
     team?: string;
     /** Newer releases of its package it may be upgraded to, oldest first (at most 16, the newest). */
     availableVersions?: string[];
+    /**
+     * The newest of every newer release it may see that an upgrade would take
+     * now, which may be older than all of `availableVersions`; `null` when none
+     * would. Absent from a node before core 1.0.0-rc.16.
+     */
+    latestReachable?: string | null;
+    /** Present when the newest release it may see is not `latestReachable`: which, and why. */
+    latestBlocked?: LatestBlocked;
 }
 /** A mero-tee release the cluster's nodes run, with how many and whether the scope approved it. */
 export interface ClusterRelease {
@@ -308,8 +337,16 @@ export interface PendingUpgrade {
     name: string | null;
     package: string;
     from: string;
-    /** The newest it may move to. */
+    /**
+     * The newest it can move to now (the report's `latestReachable`); when
+     * none can be (`reachable: false`), or from a node that does not say, the
+     * newest it may see.
+     */
     to: string;
+    /** Whether an upgrade to `to` would be taken now; `false`: `blocked` says why none is. */
+    reachable: boolean;
+    /** Why the newest release it may see is not reachable, when it is not. */
+    blocked: LatestBlocked | null;
     /** Every newer release it may move to, oldest first. */
     available: string[];
     /** Whether owners hold app upgrades on this cluster; the node checks the package's own `upgrades` when asked. */

package/dist/cloud-v2/approvals.js

@@ -140,12 +140,16 @@ export function pendingApprovalsFrom(report, rules, now = Date.now() / 1000) {
         const available = a.availableVersions ?? [];
         if (a.package === null || available.length === 0)
             continue;
+        const latest = available[available.length - 1];
+        const reachable = a.latestReachable === undefined ? latest : a.latestReachable;
         upgrades.push({
             app: a.app,
             name: a.name ?? null,
             package: a.package.package,
             from: a.package.version,
-            to: available[available.length - 1],
+            to: reachable ?? latest,
+            reachable: reachable !== null,
+            blocked: a.latestBlocked ?? null,
             available,
             actionable: upgradesActionable,
         });

package/dist/cloud-v2/client.d.ts

@@ -12,7 +12,7 @@
 import { type AttestationDoc, type CloudPolicy } from './attestation.js';
 import { type PasskeyProvider } from './passkey.js';
 import { type AppsReport, type ConsentRequest, type ConsentResult, type ConsentStarted, type OpenConsentOptions, type OpsAppsReport, type OpsOrgsReport, type PageOptions, type PendingApprovals, type PublisherBindingInfo, type PublisherProof, type ReleaseRules } from './approvals.js';
-export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
+export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, RuntimeTooOld, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
 export type { Committed, SignUpRefusal } from './errors.js';
 export interface CalimeroSession {
     accountId: string;
@@ -151,6 +151,12 @@ export interface OrgInfo extends Record<string, unknown> {
     recovery?: OrgRecovery;
     /** How it holds its apps ({@link OrgMode}); absent from nodes before app teams. */
     mode?: OrgMode;
+    /**
+     * The members (those the caller sees) who get every app added from now on
+     * ({@link CalimeroClient.setAllApps}); absent while there are none, and
+     * from nodes before core's `feat/org-all-apps`.
+     */
+    allApps?: string[];
 }
 /**
  * How an organization holds its apps, derived from its app teams (core
@@ -249,6 +255,8 @@ export interface OrgInvite {
     createdBy: string | null;
     /** Unix seconds; `null` for invites made before core recorded it. */
     createdAt: number | null;
+    /** Whoever redeems it also gets every app added later; absent from nodes before core's `feat/org-all-apps`. */
+    allApps?: boolean;
 }
 /** One direct row of a team ({@link TeamInfo}). */
 export interface TeamMemberInfo {
@@ -1132,8 +1140,10 @@ export declare class CalimeroClient {
     }, passkey?: PasskeyProvider): Promise<MoveAppResult>;
     /**
      * Move an app to another release of its package (`{ version }`), another
-     * package, or a bundle hash, running its migration. Answers the upgrade's
-     * entry; a failed migration rejects with code `UPGRADE_FAILED` (422).
+     * package, or a bundle hash. An upgrade is code only: the app moves to any
+     * newer release in one step. Answers the upgrade's entry; one the app's
+     * group refuses rejects with code `UPGRADE_FAILED` (422), and one a
+     * replica's node is too old to run with {@link RuntimeTooOld} (409).
      * Where owners hold app upgrades, the node asks for the approval of
      * whoever the package's manifest names (`412 CONFIRM_REQUIRED`), which
      * `passkey` gives. Refused (`403`) to a session opened on an app's
@@ -1429,6 +1439,18 @@ export declare class CalimeroClient {
         account?: string;
         team?: string;
     }): Promise<void>;
+    /**
+     * Give a member every app added to the organization from now on, or stop
+     * it (`allApps: false`), core `POST /orgs/{org}/all-apps`: the owner's or
+     * an admin's, approved with `passkey` (`__set_all_apps { account, allApps
+     * }`). Each app team made after gives them a row, so in an organization
+     * that keeps its apps apart a new app reaches them though nobody named
+     * them; apps already there are untouched. {@link invite} with
+     * `{ allApps: true }` gives it to whoever redeems the invite. A member
+     * below admin is refused (`403`), someone outside gets {@link NotFound};
+     * a node from before the route answers a bare `404`.
+     */
+    setAllApps(org: string, account: string, allApps: boolean, passkey: PasskeyProvider): Promise<void>;
     /**
      * Set the capability bits everyone in `team` holds there on top of their
      * own, unless their row sets its own (`POST /orgs/{org}/capabilities` with
@@ -1483,6 +1505,7 @@ export declare class CalimeroClient {
     invite(org: string, role: 'guest' | 'member' | 'admin', passkey: PasskeyProvider, teams?: string[], options?: {
         ttlSecs?: number;
         uses?: number;
+        allApps?: boolean;
     }): Promise<string>;
     redeemInvite(token: string): Promise<Record<string, unknown>>;
     /**

package/dist/cloud-v2/client.js

@@ -16,7 +16,7 @@ import { CalimeroError, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired,
 import { b64url, fromB64url } from './passkey.js';
 import { signRecovery } from './recovery.js';
 import { confirmationCode, pageQuery, pendingApprovalsFrom, } from './approvals.js';
-export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
+export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, RuntimeTooOld, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
 /** A deployer's key, as `GET /deployers` lists it and `DELETE /deployers/{key}` takes it. */
 export function deployerKey(deployer) {
     return 'account' in deployer ? `account:${deployer.account}` : `org:${deployer.org}`;
@@ -958,8 +958,10 @@ export class CalimeroClient {
     }
     /**
      * Move an app to another release of its package (`{ version }`), another
-     * package, or a bundle hash, running its migration. Answers the upgrade's
-     * entry; a failed migration rejects with code `UPGRADE_FAILED` (422).
+     * package, or a bundle hash. An upgrade is code only: the app moves to any
+     * newer release in one step. Answers the upgrade's entry; one the app's
+     * group refuses rejects with code `UPGRADE_FAILED` (422), and one a
+     * replica's node is too old to run with {@link RuntimeTooOld} (409).
      * Where owners hold app upgrades, the node asks for the approval of
      * whoever the package's manifest names (`412 CONFIRM_REQUIRED`), which
      * `passkey` gives. Refused (`403`) to a session opened on an app's
@@ -1414,6 +1416,20 @@ export class CalimeroClient {
     async setCapabilities(org, capabilities, passkey, at = {}) {
         await this.postConfirmed(`orgs/${seg(org)}/capabilities`, { capabilities, ...at }, passkey);
     }
+    /**
+     * Give a member every app added to the organization from now on, or stop
+     * it (`allApps: false`), core `POST /orgs/{org}/all-apps`: the owner's or
+     * an admin's, approved with `passkey` (`__set_all_apps { account, allApps
+     * }`). Each app team made after gives them a row, so in an organization
+     * that keeps its apps apart a new app reaches them though nobody named
+     * them; apps already there are untouched. {@link invite} with
+     * `{ allApps: true }` gives it to whoever redeems the invite. A member
+     * below admin is refused (`403`), someone outside gets {@link NotFound};
+     * a node from before the route answers a bare `404`.
+     */
+    async setAllApps(org, account, allApps, passkey) {
+        await this.postConfirmed(`orgs/${seg(org)}/all-apps`, { account, allApps }, passkey);
+    }
     /**
      * Set the capability bits everyone in `team` holds there on top of their
      * own, unless their row sets its own (`POST /orgs/{org}/capabilities` with

package/dist/cloud-v2/errors.d.ts

@@ -120,6 +120,24 @@ export declare class ReleaseDeadlineError extends CalimeroError {
     readonly after: string;
     constructor(message: string, details?: Record<string, unknown>);
 }
+/**
+ * `409 RUNTIME_TOO_OLD`: a node that would run the app (one of its replicas
+ * for an upgrade, a node it would be placed on or moved to) runs an older
+ * runtime than the release's signed `minRuntimeVersion`. Nothing ran. The
+ * app's report names the newest release it can reach (`latestReachable`).
+ */
+export declare class RuntimeTooOld extends CalimeroError {
+    /** The runtime the release needs. */
+    readonly minRuntimeVersion: string;
+    /** Each node that falls short, and what it runs (`{ before }`: older than that). */
+    readonly nodes: {
+        node: number;
+        runtime: string | {
+            before: string;
+        } | null;
+    }[];
+    constructor(message: string, details?: Record<string, unknown>);
+}
 /**
  * `409 CONSENT_STALE`: what a consent page showed (the app's bundle, the
  * target release, the release's measurements) changed before the person

package/dist/cloud-v2/errors.js

@@ -151,6 +151,20 @@ export class ReleaseDeadlineError extends CalimeroError {
         this.after = typeof details.after === 'string' ? details.after : '';
     }
 }
+/**
+ * `409 RUNTIME_TOO_OLD`: a node that would run the app (one of its replicas
+ * for an upgrade, a node it would be placed on or moved to) runs an older
+ * runtime than the release's signed `minRuntimeVersion`. Nothing ran. The
+ * app's report names the newest release it can reach (`latestReachable`).
+ */
+export class RuntimeTooOld extends CalimeroError {
+    constructor(message, details = {}) {
+        super(409, 'RUNTIME_TOO_OLD', message, details);
+        this.name = 'RuntimeTooOld';
+        this.minRuntimeVersion = typeof details.minRuntimeVersion === 'string' ? details.minRuntimeVersion : '';
+        this.nodes = Array.isArray(details.nodes) ? details.nodes : [];
+    }
+}
 /**
  * `409 CONSENT_STALE`: what a consent page showed (the app's bundle, the
  * target release, the release's measurements) changed before the person
@@ -383,6 +397,8 @@ export function errorFrom(status, body, retryAfterHeader) {
             return new IdempotencyMismatch(message, details);
         case '409 RELEASE_DEADLINE':
             return new ReleaseDeadlineError(message, details);
+        case '409 RUNTIME_TOO_OLD':
+            return new RuntimeTooOld(message, details);
         case '409 CONSENT_STALE':
             return new ConsentStale(message, details);
         case '403 ORIGIN_NOT_REGISTERED':

package/dist/cloud-v2/index.d.ts

@@ -1,7 +1,7 @@
 export { CalimeroClient, deployerKey, frontendManifest, pageDeployment } from './client.js';
 export { DEFAULT_DIRECTORY, DirectoryError } from './directory.js';
 export type { DirectoryFailure } from './directory.js';
-export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ClusterNotUpgraded, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, NotServing, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
+export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ClusterNotUpgraded, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, NotServing, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, RuntimeTooOld, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
 export type { Committed, SignUpRefusal } from './errors.js';
 export type { AppInfo, AppTeam, AppTeams, AppXcalls, BlobContent, BlobInfo, DeadLetter, Deployer, DeployerGrant, DeployersInfo, DeploymentInfo, DeploymentOffer, DeploymentOrgs, OrgMemberSecurity, FrontendManifest, MeInfo, MeOrg, MePasskey, MoveAppResult, AccountSession, AccountActivity, PackageOrigin, PackageOriginAdded, PackageOriginRemoved, PackageOrigins, ServedOrigin, ServedOrigins, SignInOptions, AccountRecovery, SignUpOptions, SignUpPolicy, PublicDeployment, CallResult, CalimeroClientOptions, CalimeroConnectOptions, CloudEvent, CalimeroSession, PackageInfo, PackageInstalled, CloudRetryOptions, OrgInfo, OrgInvite, OrgMode, OrgRecovery, RecoveryTimes, OrgUpgradeTarget, PresenceEntry, ScopeApp, ScopeAppsOptions, ScopeAppsResult, ScopedAppTeam, TeamInfo, TeamMemberInfo, UpgradeRun, ViewResult, } from './client.js';
 export { claimedRelease, fetchAttestedKey, freshCollateral, MOCK_QUOTE_HEADER } from './attestation.js';
@@ -10,6 +10,6 @@ export { browserPasskey, b64url, fromB64url } from './passkey.js';
 export { MAX_RECOVERY_NONCE_BYTES, RECOVERY_DOMAIN, newRecoverySeed, parseRecoverySeed, recoveryMessage, recoveryPublicKey, recoverySeedText, signRecovery, } from './recovery.js';
 export type { AssertionJSON, PasskeyCreateOptions, PasskeyGetOptions, PasskeyProvider, PasskeyUserVerification, RegistrationJSON, } from './passkey.js';
 export { MAX_REPORT_PAGE, RELEASE_VERIFIER, compareVersions, confirmationCode, consentReturn, pageQuery, pendingApprovalsFrom, publisherBindingBytes, publisherBindingMessage, releaseConsent, releaseNotesUrl, stalledBy, upgradeConsent, verifyReleaseUrl, withdrawConsent, } from './approvals.js';
-export type { ActorKind, AppsReport, Authority, ClusterRelease, ConsentReleaseModel, ConsentRequest, ConsentResult, ConsentScope, ConsentStarted, ConsentStatus, OpenConsentOptions, Governance, LastUpgrade, OpsAppsReport, OpsOrgsReport, PageOptions, PendingApprovals, PendingRelease, PendingUpgrade, PublisherBindingInfo, PublisherProof, ReleaseDeadline, ReleaseRules, ReportScope, ReportedApp, ReportedBundle, ReportedRelease, ReportedReplica, UpgradeAuthority, } from './approvals.js';
+export type { ActorKind, AppsReport, Authority, ClusterRelease, ConsentReleaseModel, ConsentRequest, ConsentResult, ConsentScope, ConsentStarted, ConsentStatus, OpenConsentOptions, Governance, LastUpgrade, LatestBlocked, OpsAppsReport, OpsOrgsReport, PageOptions, PendingApprovals, PendingRelease, PendingUpgrade, PublisherBindingInfo, PublisherProof, ReleaseDeadline, ReleaseRules, ReportScope, ReportedApp, ReportedBundle, ReportedRelease, ReportedReplica, RuntimeShortNode, UpgradeAuthority, } from './approvals.js';
 export { DEFAULT_ORG_CAPABILITIES, ORG_CAPABILITIES, orgCapabilities } from './capabilities.js';
 export type { OrgCapability } from './capabilities.js';

package/dist/cloud-v2/index.js

@@ -1,6 +1,6 @@
 export { CalimeroClient, deployerKey, frontendManifest, pageDeployment } from './client.js';
 export { DEFAULT_DIRECTORY, DirectoryError } from './directory.js';
-export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ClusterNotUpgraded, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, NotServing, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
+export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ClusterNotUpgraded, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, NotServing, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, RuntimeTooOld, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
 export { claimedRelease, fetchAttestedKey, freshCollateral, MOCK_QUOTE_HEADER } from './attestation.js';
 export { browserPasskey, b64url, fromB64url } from './passkey.js';
 export { MAX_RECOVERY_NONCE_BYTES, RECOVERY_DOMAIN, newRecoverySeed, parseRecoverySeed, recoveryMessage, recoveryPublicKey, recoverySeedText, signRecovery, } from './recovery.js';