@calimero-network/mero-js 29.14.0 → 29.15.0

package/README.md

@@ -111,7 +111,7 @@ Pinned measurements go through `policy.verifyQuote` (`createQuoteVerifier`).
 - **Any route**: `get`, `post`, `put`, `delete`; `postConfirmed` and `deleteConfirmed` answer a `412 CONFIRM_REQUIRED` with a passkey.
 
 Refusals are typed (`LoginRequired`, `PasskeyUnknownHere`, `WrongNode`, `NotFound`, `ConfirmRequired`, `ConfirmCancelled`, `ConfirmPromptBlocked`,
-`ArgsTooLarge`, `IdempotencyMismatch`, `ReleaseDeadlineError`, `ConsentStale`, `AppError`, `TrapError`,
+`ArgsTooLarge`, `IdempotencyMismatch`, `ReleaseDeadlineError`, `RuntimeTooOld`, `ConsentStale`, `AppError`, `TrapError`,
 `UnavailableError`, `OriginNotRegistered`, `BadOrigin`, `OriginTaken`, `QuotaExceeded`),
 all extending `CalimeroError` with the node's `status` and `code`. A `401` once
 the node that issued the session is replaced or out of reach is answered by one

package/dist/cloud-v2/approvals.d.ts

@@ -82,7 +82,28 @@ export interface ReportedReplica {
     release: string | null;
     approved: boolean;
 }
-/** One app in a report. `name`, `team` and `availableVersions` are in members' and accounts' reports only. */
+/** A replica's node whose runtime is older than a release needs, and what it runs: the version, or `{ before }` for a node on a release from before nodes named their runtime. */
+export interface RuntimeShortNode {
+    node: number;
+    runtime: string | {
+        before: string;
+    } | null;
+}
+/**
+ * Why an app cannot move to the newest release it may see (core's
+ * `latestBlocked`): `runtime`, a replica's node runs an older runtime than
+ * the release's `minRuntimeVersion` (the upgrade would be refused `409
+ * RUNTIME_TOO_OLD`); `authority`, the app's owner upgrades it and the
+ * release would give its upgrades to the publisher.
+ */
+export interface LatestBlocked {
+    version: string;
+    reason: 'runtime' | 'authority';
+    message: string;
+    minRuntimeVersion?: string;
+    nodes?: RuntimeShortNode[];
+}
+/** One app in a report. `name`, `team`, `availableVersions`, `latestReachable` and `latestBlocked` are in members' and accounts' reports only. */
 export interface ReportedApp {
     app: string;
     group: number;
@@ -103,6 +124,14 @@ export interface ReportedApp {
     team?: string;
     /** Newer releases of its package it may be upgraded to, oldest first (at most 16, the newest). */
     availableVersions?: string[];
+    /**
+     * The newest of every newer release it may see that an upgrade would take
+     * now, which may be older than all of `availableVersions`; `null` when none
+     * would. Absent from a node before core 1.0.0-rc.16.
+     */
+    latestReachable?: string | null;
+    /** Present when the newest release it may see is not `latestReachable`: which, and why. */
+    latestBlocked?: LatestBlocked;
 }
 /** A mero-tee release the cluster's nodes run, with how many and whether the scope approved it. */
 export interface ClusterRelease {
@@ -308,8 +337,16 @@ export interface PendingUpgrade {
     name: string | null;
     package: string;
     from: string;
-    /** The newest it may move to. */
+    /**
+     * The newest it can move to now (the report's `latestReachable`); when
+     * none can be (`reachable: false`), or from a node that does not say, the
+     * newest it may see.
+     */
     to: string;
+    /** Whether an upgrade to `to` would be taken now; `false`: `blocked` says why none is. */
+    reachable: boolean;
+    /** Why the newest release it may see is not reachable, when it is not. */
+    blocked: LatestBlocked | null;
     /** Every newer release it may move to, oldest first. */
     available: string[];
     /** Whether owners hold app upgrades on this cluster; the node checks the package's own `upgrades` when asked. */

package/dist/cloud-v2/approvals.js

@@ -140,12 +140,16 @@ export function pendingApprovalsFrom(report, rules, now = Date.now() / 1000) {
         const available = a.availableVersions ?? [];
         if (a.package === null || available.length === 0)
             continue;
+        const latest = available[available.length - 1];
+        const reachable = a.latestReachable === undefined ? latest : a.latestReachable;
         upgrades.push({
             app: a.app,
             name: a.name ?? null,
             package: a.package.package,
             from: a.package.version,
-            to: available[available.length - 1],
+            to: reachable ?? latest,
+            reachable: reachable !== null,
+            blocked: a.latestBlocked ?? null,
             available,
             actionable: upgradesActionable,
         });

package/dist/cloud-v2/client.d.ts

@@ -12,7 +12,7 @@
 import { type AttestationDoc, type CloudPolicy } from './attestation.js';
 import { type PasskeyProvider } from './passkey.js';
 import { type AppsReport, type ConsentRequest, type ConsentResult, type ConsentStarted, type OpenConsentOptions, type OpsAppsReport, type OpsOrgsReport, type PageOptions, type PendingApprovals, type PublisherBindingInfo, type PublisherProof, type ReleaseRules } from './approvals.js';
-export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
+export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, RuntimeTooOld, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
 export type { Committed, SignUpRefusal } from './errors.js';
 export interface CalimeroSession {
     accountId: string;
@@ -1140,8 +1140,10 @@ export declare class CalimeroClient {
     }, passkey?: PasskeyProvider): Promise<MoveAppResult>;
     /**
      * Move an app to another release of its package (`{ version }`), another
-     * package, or a bundle hash, running its migration. Answers the upgrade's
-     * entry; a failed migration rejects with code `UPGRADE_FAILED` (422).
+     * package, or a bundle hash. An upgrade is code only: the app moves to any
+     * newer release in one step. Answers the upgrade's entry; one the app's
+     * group refuses rejects with code `UPGRADE_FAILED` (422), and one a
+     * replica's node is too old to run with {@link RuntimeTooOld} (409).
      * Where owners hold app upgrades, the node asks for the approval of
      * whoever the package's manifest names (`412 CONFIRM_REQUIRED`), which
      * `passkey` gives. Refused (`403`) to a session opened on an app's

package/dist/cloud-v2/client.js

@@ -16,7 +16,7 @@ import { CalimeroError, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired,
 import { b64url, fromB64url } from './passkey.js';
 import { signRecovery } from './recovery.js';
 import { confirmationCode, pageQuery, pendingApprovalsFrom, } from './approvals.js';
-export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
+export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, RuntimeTooOld, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
 /** A deployer's key, as `GET /deployers` lists it and `DELETE /deployers/{key}` takes it. */
 export function deployerKey(deployer) {
     return 'account' in deployer ? `account:${deployer.account}` : `org:${deployer.org}`;
@@ -958,8 +958,10 @@ export class CalimeroClient {
     }
     /**
      * Move an app to another release of its package (`{ version }`), another
-     * package, or a bundle hash, running its migration. Answers the upgrade's
-     * entry; a failed migration rejects with code `UPGRADE_FAILED` (422).
+     * package, or a bundle hash. An upgrade is code only: the app moves to any
+     * newer release in one step. Answers the upgrade's entry; one the app's
+     * group refuses rejects with code `UPGRADE_FAILED` (422), and one a
+     * replica's node is too old to run with {@link RuntimeTooOld} (409).
      * Where owners hold app upgrades, the node asks for the approval of
      * whoever the package's manifest names (`412 CONFIRM_REQUIRED`), which
      * `passkey` gives. Refused (`403`) to a session opened on an app's

package/dist/cloud-v2/errors.d.ts

@@ -120,6 +120,24 @@ export declare class ReleaseDeadlineError extends CalimeroError {
     readonly after: string;
     constructor(message: string, details?: Record<string, unknown>);
 }
+/**
+ * `409 RUNTIME_TOO_OLD`: a node that would run the app (one of its replicas
+ * for an upgrade, a node it would be placed on or moved to) runs an older
+ * runtime than the release's signed `minRuntimeVersion`. Nothing ran. The
+ * app's report names the newest release it can reach (`latestReachable`).
+ */
+export declare class RuntimeTooOld extends CalimeroError {
+    /** The runtime the release needs. */
+    readonly minRuntimeVersion: string;
+    /** Each node that falls short, and what it runs (`{ before }`: older than that). */
+    readonly nodes: {
+        node: number;
+        runtime: string | {
+            before: string;
+        } | null;
+    }[];
+    constructor(message: string, details?: Record<string, unknown>);
+}
 /**
  * `409 CONSENT_STALE`: what a consent page showed (the app's bundle, the
  * target release, the release's measurements) changed before the person

package/dist/cloud-v2/errors.js

@@ -151,6 +151,20 @@ export class ReleaseDeadlineError extends CalimeroError {
         this.after = typeof details.after === 'string' ? details.after : '';
     }
 }
+/**
+ * `409 RUNTIME_TOO_OLD`: a node that would run the app (one of its replicas
+ * for an upgrade, a node it would be placed on or moved to) runs an older
+ * runtime than the release's signed `minRuntimeVersion`. Nothing ran. The
+ * app's report names the newest release it can reach (`latestReachable`).
+ */
+export class RuntimeTooOld extends CalimeroError {
+    constructor(message, details = {}) {
+        super(409, 'RUNTIME_TOO_OLD', message, details);
+        this.name = 'RuntimeTooOld';
+        this.minRuntimeVersion = typeof details.minRuntimeVersion === 'string' ? details.minRuntimeVersion : '';
+        this.nodes = Array.isArray(details.nodes) ? details.nodes : [];
+    }
+}
 /**
  * `409 CONSENT_STALE`: what a consent page showed (the app's bundle, the
  * target release, the release's measurements) changed before the person
@@ -383,6 +397,8 @@ export function errorFrom(status, body, retryAfterHeader) {
             return new IdempotencyMismatch(message, details);
         case '409 RELEASE_DEADLINE':
             return new ReleaseDeadlineError(message, details);
+        case '409 RUNTIME_TOO_OLD':
+            return new RuntimeTooOld(message, details);
         case '409 CONSENT_STALE':
             return new ConsentStale(message, details);
         case '403 ORIGIN_NOT_REGISTERED':

package/dist/cloud-v2/index.d.ts

@@ -1,7 +1,7 @@
 export { CalimeroClient, deployerKey, frontendManifest, pageDeployment } from './client.js';
 export { DEFAULT_DIRECTORY, DirectoryError } from './directory.js';
 export type { DirectoryFailure } from './directory.js';
-export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ClusterNotUpgraded, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, NotServing, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
+export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ClusterNotUpgraded, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, NotServing, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, RuntimeTooOld, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
 export type { Committed, SignUpRefusal } from './errors.js';
 export type { AppInfo, AppTeam, AppTeams, AppXcalls, BlobContent, BlobInfo, DeadLetter, Deployer, DeployerGrant, DeployersInfo, DeploymentInfo, DeploymentOffer, DeploymentOrgs, OrgMemberSecurity, FrontendManifest, MeInfo, MeOrg, MePasskey, MoveAppResult, AccountSession, AccountActivity, PackageOrigin, PackageOriginAdded, PackageOriginRemoved, PackageOrigins, ServedOrigin, ServedOrigins, SignInOptions, AccountRecovery, SignUpOptions, SignUpPolicy, PublicDeployment, CallResult, CalimeroClientOptions, CalimeroConnectOptions, CloudEvent, CalimeroSession, PackageInfo, PackageInstalled, CloudRetryOptions, OrgInfo, OrgInvite, OrgMode, OrgRecovery, RecoveryTimes, OrgUpgradeTarget, PresenceEntry, ScopeApp, ScopeAppsOptions, ScopeAppsResult, ScopedAppTeam, TeamInfo, TeamMemberInfo, UpgradeRun, ViewResult, } from './client.js';
 export { claimedRelease, fetchAttestedKey, freshCollateral, MOCK_QUOTE_HEADER } from './attestation.js';
@@ -10,6 +10,6 @@ export { browserPasskey, b64url, fromB64url } from './passkey.js';
 export { MAX_RECOVERY_NONCE_BYTES, RECOVERY_DOMAIN, newRecoverySeed, parseRecoverySeed, recoveryMessage, recoveryPublicKey, recoverySeedText, signRecovery, } from './recovery.js';
 export type { AssertionJSON, PasskeyCreateOptions, PasskeyGetOptions, PasskeyProvider, PasskeyUserVerification, RegistrationJSON, } from './passkey.js';
 export { MAX_REPORT_PAGE, RELEASE_VERIFIER, compareVersions, confirmationCode, consentReturn, pageQuery, pendingApprovalsFrom, publisherBindingBytes, publisherBindingMessage, releaseConsent, releaseNotesUrl, stalledBy, upgradeConsent, verifyReleaseUrl, withdrawConsent, } from './approvals.js';
-export type { ActorKind, AppsReport, Authority, ClusterRelease, ConsentReleaseModel, ConsentRequest, ConsentResult, ConsentScope, ConsentStarted, ConsentStatus, OpenConsentOptions, Governance, LastUpgrade, OpsAppsReport, OpsOrgsReport, PageOptions, PendingApprovals, PendingRelease, PendingUpgrade, PublisherBindingInfo, PublisherProof, ReleaseDeadline, ReleaseRules, ReportScope, ReportedApp, ReportedBundle, ReportedRelease, ReportedReplica, UpgradeAuthority, } from './approvals.js';
+export type { ActorKind, AppsReport, Authority, ClusterRelease, ConsentReleaseModel, ConsentRequest, ConsentResult, ConsentScope, ConsentStarted, ConsentStatus, OpenConsentOptions, Governance, LastUpgrade, LatestBlocked, OpsAppsReport, OpsOrgsReport, PageOptions, PendingApprovals, PendingRelease, PendingUpgrade, PublisherBindingInfo, PublisherProof, ReleaseDeadline, ReleaseRules, ReportScope, ReportedApp, ReportedBundle, ReportedRelease, ReportedReplica, RuntimeShortNode, UpgradeAuthority, } from './approvals.js';
 export { DEFAULT_ORG_CAPABILITIES, ORG_CAPABILITIES, orgCapabilities } from './capabilities.js';
 export type { OrgCapability } from './capabilities.js';

package/dist/cloud-v2/index.js

@@ -1,6 +1,6 @@
 export { CalimeroClient, deployerKey, frontendManifest, pageDeployment } from './client.js';
 export { DEFAULT_DIRECTORY, DirectoryError } from './directory.js';
-export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ClusterNotUpgraded, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, NotServing, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
+export { AppError, ArgsTooLarge, BadOrigin, CalimeroError, ClusterNotUpgraded, ConfirmCancelled, ConfirmPromptBlocked, ConfirmRequired, IdempotencyMismatch, LoginRequired, ConsentStale, NotFound, NotServing, OriginNotRegistered, OriginTaken, PasskeyUnknownHere, QuotaExceeded, RecoveryNotReady, ReleaseDeadlineError, RuntimeTooOld, SignUpRefused, TrapError, UnavailableError, WrongNode, WrongRecoveryCode, errorFrom, } from './errors.js';
 export { claimedRelease, fetchAttestedKey, freshCollateral, MOCK_QUOTE_HEADER } from './attestation.js';
 export { browserPasskey, b64url, fromB64url } from './passkey.js';
 export { MAX_RECOVERY_NONCE_BYTES, RECOVERY_DOMAIN, newRecoverySeed, parseRecoverySeed, recoveryMessage, recoveryPublicKey, recoverySeedText, signRecovery, } from './recovery.js';