@calimero-network/mero-js 7.3.1 → 8.0.0

package/dist/admin-api/admin-client.d.ts

@@ -1,5 +1,5 @@
 import { HttpClient } from '../http-client/index.js';
-import type { HealthStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextRequest, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, InviteSpecializedNodeRequest, InviteSpecializedNodeResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateContextIdentityAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListContextIdentityAliasesResponseData, CreateContextIdentityAliasResponseData, LookupContextIdentityAliasResponseData, DeleteContextIdentityAliasResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceRequest, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NamespaceIdentity, GroupInfoResponseData, DeleteGroupRequest, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, UpdateGroupSettingsRequest, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupRequest, SyncGroupResponseData, RegisterGroupSigningKeyRequest, RegisterGroupSigningKeyResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, CascadeStatusEntry, RetryGroupUpgradeRequest, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, DetachContextFromGroupRequest, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, TeeVerifyQuoteRequest, TeeVerifyQuoteResponseData } from './admin-types.js';
+import type { HealthStatus, AdminAuthStatus, InstallApplicationRequest, InstallApplicationResponseData, InstallDevApplicationRequest, UninstallApplicationResponseData, ListApplicationsResponseData, GetApplicationResponseData, ApplicationVersionEntry, GetApplicationAbiResponseData, GetLatestVersionResponseData, ListPackagesResponseData, ListVersionsResponseData, CreateContextRequest, CreateContextResponseData, DeleteContextRequest, DeleteContextResponseData, GetContextsResponseData, Context, GenerateContextIdentityResponseData, GetContextIdentitiesResponseData, JoinContextResponseData, JoinSubgroupInheritanceResponseData, ContextGroupResponseData, ContextStorageResponseData, InviteSpecializedNodeRequest, InviteSpecializedNodeResponseData, UpdateContextApplicationRequest, ResyncContextRequest, ResyncContextResponseData, ContextsWithExecutorsResponseData, UploadBlobRequest, UploadBlobResponseData, DeleteBlobResponseData, ListBlobsResponseData, GetBlobInfoResponseData, CreateContextAliasRequest, CreateApplicationAliasRequest, CreateContextIdentityAliasRequest, CreateAliasResponseData, LookupAliasResponseData, DeleteAliasResponseData, ListAliasesResponseData, ListContextIdentityAliasesResponseData, CreateContextIdentityAliasResponseData, LookupContextIdentityAliasResponseData, DeleteContextIdentityAliasResponseData, ListNamespacesResponseData, CreateNamespaceRequest, CreateNamespaceResponseData, DeleteNamespaceRequest, DeleteNamespaceResponseData, CreateNamespaceInvitationRequest, CreateNamespaceInvitationResponseData, CreateRecursiveInvitationResponseData, JoinNamespaceRequest, JoinNamespaceResponseData, CreateGroupInNamespaceRequest, CreateGroupInNamespaceResponseData, SubgroupEntry, Namespace, NamespaceIdentity, GroupInfoResponseData, DeleteGroupRequest, DeleteGroupResponseData, ListGroupMembersResponseData, ListGroupContextsResponseData, AddGroupMembersRequest, RemoveGroupMembersRequest, UpdateMemberRoleRequest, MemberCapabilities, SetMemberCapabilitiesRequest, SetDefaultCapabilitiesRequest, SetSubgroupVisibilityRequest, SetTeeAdmissionPolicyRequest, GetTeeAdmissionPolicyResponseData, SetGroupMetadataRequest, SetMemberMetadataRequest, SetContextMetadataRequest, MetadataRecord, SyncGroupRequest, SyncGroupResponseData, RegisterGroupSigningKeyRequest, RegisterGroupSigningKeyResponseData, UpgradeGroupRequest, UpgradeGroupResponseData, GroupUpgradeStatusResponseData, MigrationStatus, CascadeStatusEntry, RetryGroupUpgradeRequest, RetryGroupUpgradeResponseData, ReparentGroupRequest, ReparentGroupResponseData, DetachContextFromGroupRequest, CreateGroupInvitationRequest, CreateGroupInvitationResponseData, CreateRecursiveGroupInvitationResponseData, JoinGroupRequest, JoinGroupResponseData, TeeInfoResponseData, TeeAttestRequest, TeeAttestResponseData, TeeVerifyQuoteRequest, TeeVerifyQuoteResponseData } from './admin-types.js';
 /**
  * Compare two version strings by SemVer 2.0 precedence, ascending: negative if
  * `a < b`, positive if `a > b`, `0` if equal. Build metadata (`+...`) is stripped
@@ -128,7 +128,6 @@ export declare class AdminApiClient {
     setSubgroupVisibility(groupId: string, request: SetSubgroupVisibilityRequest): Promise<void>;
     setTeeAdmissionPolicy(groupId: string, request: SetTeeAdmissionPolicyRequest): Promise<void>;
     getTeeAdmissionPolicy(groupId: string): Promise<GetTeeAdmissionPolicyResponseData>;
-    updateGroupSettings(groupId: string, request: UpdateGroupSettingsRequest): Promise<void>;
     setGroupMetadata(groupId: string, request: SetGroupMetadataRequest): Promise<void>;
     getGroupMetadata(groupId: string): Promise<MetadataRecord | null>;
     setMemberMetadata(groupId: string, identity: string, request: SetMemberMetadataRequest): Promise<void>;
@@ -186,4 +185,3 @@ export declare class AdminApiClient {
     /** Abort a namespace migration (POST /admin-api/groups/:namespace_id/migration/abort). */
     abortMigration(namespaceId: string, request?: Record<string, unknown>): Promise<unknown>;
 }
-//# sourceMappingURL=admin-client.d.ts.map

package/dist/admin-api/admin-client.js

@@ -485,9 +485,6 @@ export class AdminApiClient {
         const response = await this.httpClient.get(`/admin-api/groups/${groupId}/settings/tee-admission-policy`);
         return response.data ?? response;
     }
-    async updateGroupSettings(groupId, request) {
-        await this.httpClient.patch(`/admin-api/groups/${groupId}`, request);
-    }
     // ---- Group / member / context metadata ----
     async setGroupMetadata(groupId, request) {
         await this.httpClient.put(`/admin-api/groups/${groupId}/metadata`, request);
@@ -628,4 +625,3 @@ export class AdminApiClient {
         return this.httpClient.post(`/admin-api/groups/${namespaceId}/migration/abort`, request ?? {});
     }
 }
-//# sourceMappingURL=admin-client.js.map

package/dist/admin-api/admin-factory.d.ts

@@ -1,8 +1,14 @@
 import { AdminApiClient } from './admin-client.js';
 import { AdminApiClientConfig } from './admin-types.js';
 import { HttpClient } from '../http-client/index.js';
-export declare function createBrowserAdminApiClient(_config: AdminApiClientConfig): AdminApiClient;
-export declare function createNodeAdminApiClient(_config: AdminApiClientConfig): AdminApiClient;
-export declare function createAdminApiClient(_config: AdminApiClientConfig): AdminApiClient;
+/** Admin client over a browser HTTP transport (global `fetch`). */
+export declare function createBrowserAdminApiClient(config: AdminApiClientConfig): AdminApiClient;
+/** Admin client over a Node HTTP transport (Node 18+ `fetch`). */
+export declare function createNodeAdminApiClient(config: AdminApiClientConfig): AdminApiClient;
+/** Admin client over whichever transport suits the current runtime. */
+export declare function createAdminApiClient(config: AdminApiClientConfig): AdminApiClient;
+/**
+ * Admin client over a caller-supplied HTTP client — use this to share one
+ * transport (and its token handling) with the other API clients.
+ */
 export declare function createAdminApiClientFromHttpClient(httpClient: HttpClient, _config: AdminApiClientConfig): AdminApiClient;
-//# sourceMappingURL=admin-factory.d.ts.map

package/dist/admin-api/admin-factory.js

@@ -1,42 +1,22 @@
 import { AdminApiClient } from './admin-client.js';
-// Mock HTTP client for testing
-class MockHttpClient {
-    async get() {
-        throw new Error('HTTP client not implemented - use createAdminApiClientFromHttpClient with a real HTTP client');
-    }
-    async post() {
-        throw new Error('HTTP client not implemented - use createAdminApiClientFromHttpClient with a real HTTP client');
-    }
-    async put() {
-        throw new Error('HTTP client not implemented - use createAdminApiClientFromHttpClient with a real HTTP client');
-    }
-    async delete() {
-        throw new Error('HTTP client not implemented - use createAdminApiClientFromHttpClient with a real HTTP client');
-    }
-    async patch() {
-        throw new Error('HTTP client not implemented - use createAdminApiClientFromHttpClient with a real HTTP client');
-    }
-    async head() {
-        throw new Error('HTTP client not implemented - use createAdminApiClientFromHttpClient with a real HTTP client');
-    }
-    async request() {
-        throw new Error('HTTP client not implemented - use createAdminApiClientFromHttpClient with a real HTTP client');
-    }
-}
+import { createBrowserHttpClient, createNodeHttpClient, createUniversalHttpClient, } from '../http-client/index.js';
 // Factory functions for creating Admin API clients
-export function createBrowserAdminApiClient(_config) {
-    const httpClient = new MockHttpClient();
-    return new AdminApiClient(httpClient);
+/** Admin client over a browser HTTP transport (global `fetch`). */
+export function createBrowserAdminApiClient(config) {
+    return new AdminApiClient(createBrowserHttpClient(config));
 }
-export function createNodeAdminApiClient(_config) {
-    const httpClient = new MockHttpClient();
-    return new AdminApiClient(httpClient);
+/** Admin client over a Node HTTP transport (Node 18+ `fetch`). */
+export function createNodeAdminApiClient(config) {
+    return new AdminApiClient(createNodeHttpClient(config));
 }
-export function createAdminApiClient(_config) {
-    const httpClient = new MockHttpClient();
-    return new AdminApiClient(httpClient);
+/** Admin client over whichever transport suits the current runtime. */
+export function createAdminApiClient(config) {
+    return new AdminApiClient(createUniversalHttpClient(config));
 }
+/**
+ * Admin client over a caller-supplied HTTP client — use this to share one
+ * transport (and its token handling) with the other API clients.
+ */
 export function createAdminApiClientFromHttpClient(httpClient, _config) {
     return new AdminApiClient(httpClient);
 }
-//# sourceMappingURL=admin-factory.js.map

package/dist/admin-api/admin-types.d.ts

@@ -26,18 +26,24 @@ export interface InstallApplicationResponseData {
 export interface UninstallApplicationResponseData {
     applicationId: string;
 }
+export interface ApplicationBlob {
+    bytecode: string;
+    compiled: string;
+}
 export interface Application {
     id: string;
-    blob: {
-        bytecode: string;
-        compiled: string;
-    };
+    blob: ApplicationBlob;
     size: number;
     source: string;
     metadata: number[];
-    signer_id: string;
-    package: string;
-    version: string;
+    /** Absent for a raw-wasm install (no signed bundle) and for bootstrap stubs. */
+    signer_id?: string;
+    /** Absent on a bootstrap stub row, written before the app's blob arrives. */
+    package?: string;
+    /** Absent when the stored version is empty or not valid semver. */
+    version?: string;
+    /** Named services of a multi-service bundle; absent for single-service apps. */
+    services?: Record<string, ApplicationBlob>;
 }
 export interface ListApplicationsResponseData {
     apps: Application[];
@@ -70,9 +76,9 @@ export interface ListVersionsResponseData {
 /**
  * Per-service migration descriptor carried in a multi-service bundle manifest,
  * emitted from the app's `#[app::migrate]` declaration. `toSchemaVersion` is the
- * CRDT schema version the migrate targets (the engine's gate); `toVersion` is
- * the user-facing bundle semver an admin matches on; `method` is the migrate
- * entrypoint.
+ * ABI state version the migrate targets (from `#[app::state(version = N)]`,
+ * the engine's gate) — NOT the bundle semver, which is `toVersion`, the
+ * user-facing string an admin matches on; `method` is the migrate entrypoint.
  */
 export interface BundleMigration {
     method: string;
@@ -122,7 +128,8 @@ export interface Context {
      * namespaceStateHash). Renamed from `rootHash`, which never populated.
      */
     contextStateHash: string;
-    dagHeads: number[][];
+    /** Absent while the context has no deltas yet (core omits an empty list). */
+    dagHeads?: number[][];
     /** Bundle semver of the installed application (skew #2). Absent on older nodes. */
     applicationVersion?: string;
 }
@@ -214,13 +221,12 @@ export interface CreateContextIdentityAliasRequest {
     alias: string;
     identity: string;
 }
-export interface AliasEntry {
-    name: string;
-    value: string;
-}
-export interface ListAliasesResponseData {
-    aliases: AliasEntry[];
-}
+/**
+ * Core's `ListAliasesResponse` is `{ data: BTreeMap<Alias<T>, T> }`, so once the
+ * `data` envelope is stripped the payload is a flat `{ alias: id }` map — not a
+ * list of entries. Applies to context, application and context-identity aliases.
+ */
+export type ListAliasesResponseData = Record<string, string>;
 export type CreateAliasResponseData = Record<string, never>;
 export type DeleteAliasResponseData = Record<string, never>;
 export interface LookupAliasResponseData {
@@ -232,16 +238,44 @@ export interface LookupContextIdentityAliasResponseData {
     value?: string;
 }
 export type DeleteContextIdentityAliasResponseData = Record<string, never>;
+/**
+ * The signed half of an invitation. Wire keys are snake_case: this type mirrors
+ * a core primitive (`calimero_context_config::types`), which carries no
+ * camelCase rename — unlike the admin DTOs that wrap it.
+ */
 export interface GroupInvitationFromAdmin {
-    inviterIdentity: number[];
-    groupId: number[];
-    expirationTimestamp: number;
-    secretSalt: number[];
-    invitedRole?: number;
+    readonly inviter_identity: number[];
+    readonly group_id: number[];
+    readonly expiration_timestamp: number;
+    /** Per-invitation nonce; core keeps the legacy `secret_salt` wire name. */
+    readonly secret_salt: number[];
+    readonly invited_role: number;
 }
+/**
+ * An invitation blob the node signed. **Opaque: pass it through unchanged.**
+ *
+ * `inviter_signature` covers `invitation`, and the trailing bootstrap fields
+ * (`application_id`, `app_key`) are needed by the joiner even though they sit
+ * outside the signature — so a value that has been rebuilt field-by-field is
+ * not the value the node signed. Rebuilding is what a schema derived from these
+ * declarations does: an object schema drops the keys it wasn't told about, and
+ * core may add more (both trailing fields were added this way). Carry the value
+ * verbatim from the call that produced it to {@link JoinGroupRequest}, and treat
+ * the fields below as read-only detail for display.
+ *
+ * The `never`-typed brand makes that structural: an object literal or a schema
+ * result cannot satisfy this type, while a value the SDK returned — or one
+ * recovered with `JSON.parse` after transport — still does.
+ */
 export interface SignedGroupOpenInvitation {
-    invitation: GroupInvitationFromAdmin;
-    inviterSignature: string;
+    readonly invitation: GroupInvitationFromAdmin;
+    readonly inviter_signature: string;
+    /** Unsigned bootstrap field; absent on invitations from older nodes. */
+    readonly application_id?: number[];
+    /** Unsigned bootstrap field; absent on invitations from older nodes. */
+    readonly app_key?: number[];
+    /** @internal Brand — never present at runtime, never write it. */
+    readonly __nodeSigned: never;
 }
 export interface RecursiveInvitationEntry {
     groupId: string;
@@ -258,6 +292,12 @@ export interface Namespace {
     memberCount: number;
     contextCount: number;
     subgroupCount: number;
+    /**
+     * Bundle version of this namespace's `appKey` blob — the per-namespace truth,
+     * where the application row only says "latest fetched". Absent when core
+     * cannot resolve it (raw-wasm app, legacy key, blob not retained locally).
+     */
+    appVersion?: string;
 }
 export type ListNamespacesResponseData = Namespace[];
 export interface NamespaceIdentity {
@@ -342,7 +382,6 @@ export type MigrationFailureReason = 'check_aborted' | 'apply_failed' | 'no_migr
 export interface MemberMigrationReport {
     schemaVersion: number;
     residueAuto: number;
-    residueIdentity: number;
     syncedUpToHlc: number;
     reportedAt: number;
     /** Member's self-reported pending-authored count (best-effort; skew #1). */
@@ -483,11 +522,6 @@ export interface GetTeeAdmissionPolicyResponseData {
     allowedTcbStatuses: string[];
     acceptMock: boolean;
 }
-export interface UpdateGroupSettingsRequest {
-    upgradePolicy: string;
-    requester?: string;
-}
-export type UpdateGroupSettingsResponseData = Record<string, never>;
 /**
  * Generic metadata record attached to a group, group member, or
  * context-registered-in-a-group (core `calimero_primitives::metadata::MetadataRecord`).
@@ -665,4 +699,3 @@ export interface AdminApiClientConfig {
     getAuthToken?: () => Promise<string | undefined>;
     timeoutMs?: number;
 }
-//# sourceMappingURL=admin-types.d.ts.map

package/dist/admin-api/admin-types.js

@@ -1,4 +1,3 @@
 // Admin API Types — aligned with core server routes
 // All types use camelCase to match core's #[serde(rename_all = "camelCase")]
 export {};
-//# sourceMappingURL=admin-types.js.map

package/dist/admin-api/index.d.ts

@@ -1,4 +1,3 @@
 export * from './admin-client.js';
 export * from './admin-types.js';
 export * from './admin-factory.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/admin-api/index.js

@@ -2,4 +2,3 @@
 export * from './admin-client.js';
 export * from './admin-types.js';
 export * from './admin-factory.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/index.d.ts

@@ -23,4 +23,3 @@ export declare function parseAuthCallback(url: string): AuthCallbackResult | nul
  * Build the auth login URL for redirecting users to the node's auth page.
  */
 export declare function buildAuthLoginUrl(nodeUrl: string, opts: AuthLoginOptions): string;
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.js

@@ -48,4 +48,3 @@ export function buildAuthLoginUrl(nodeUrl, opts) {
     const base = nodeUrl.replace(/\/+$/, '');
     return `${base}/auth/login?${params.toString()}`;
 }
-//# sourceMappingURL=index.js.map

package/dist/auth-api/auth-client.d.ts

@@ -29,4 +29,3 @@ export declare class AuthApiClient {
     getKeyPermissions(keyId: string): Promise<PermissionResponse>;
     updateKeyPermissions(keyId: string, changes: UpdateKeyPermissionsRequest): Promise<PermissionResponse>;
 }
-//# sourceMappingURL=auth-client.d.ts.map

package/dist/auth-api/auth-client.js

@@ -114,4 +114,3 @@ export class AuthApiClient {
         return this.httpClient.put(`/admin/keys/${keyId}/permissions`, { add: changes.add, remove: changes.remove });
     }
 }
-//# sourceMappingURL=auth-client.js.map

package/dist/auth-api/auth-factory.d.ts

@@ -5,4 +5,3 @@ export declare function createBrowserAuthApiClient(_config: AuthApiClientConfig)
 export declare function createNodeAuthApiClient(_config: AuthApiClientConfig): AuthApiClient;
 export declare function createAuthApiClient(_config: AuthApiClientConfig): AuthApiClient;
 export declare function createAuthApiClientFromHttpClient(httpClient: HttpClient, _config: AuthApiClientConfig): AuthApiClient;
-//# sourceMappingURL=auth-factory.d.ts.map

package/dist/auth-api/auth-factory.js

@@ -39,4 +39,3 @@ export function createAuthApiClient(_config) {
 export function createAuthApiClientFromHttpClient(httpClient, _config) {
     return new AuthApiClient(httpClient);
 }
-//# sourceMappingURL=auth-factory.js.map

package/dist/auth-api/auth-types.d.ts

@@ -120,4 +120,3 @@ export interface AuthApiClientConfig {
     getAuthToken?: () => Promise<string | undefined>;
     timeoutMs?: number;
 }
-//# sourceMappingURL=auth-types.d.ts.map

package/dist/auth-api/auth-types.js

@@ -1,3 +1,2 @@
 // Auth API Types - Generated from OpenAPI 3.0.3 specification
 export {};
-//# sourceMappingURL=auth-types.js.map

package/dist/auth-api/index.d.ts

@@ -1,4 +1,3 @@
 export * from './auth-client.js';
 export * from './auth-types.js';
 export * from './auth-factory.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth-api/index.js

@@ -2,4 +2,3 @@
 export * from './auth-client.js';
 export * from './auth-types.js';
 export * from './auth-factory.js';
-//# sourceMappingURL=index.js.map

package/dist/capabilities.d.ts

@@ -28,4 +28,3 @@ export declare function hasCap(mask: number, cap: number): boolean;
 export declare function withCap(mask: number, cap: number): number;
 /** Returns `mask` with every bit of `cap` cleared (u32-normalized). */
 export declare function withoutCap(mask: number, cap: number): number;
-//# sourceMappingURL=capabilities.d.ts.map

package/dist/capabilities.js

@@ -39,4 +39,3 @@ export function withCap(mask, cap) {
 export function withoutCap(mask, cap) {
     return (mask & ~cap) >>> 0;
 }
-//# sourceMappingURL=capabilities.js.map

package/dist/cloud/cloud-client.d.ts

@@ -17,4 +17,3 @@ export declare class CloudClient {
     enableHA(options: EnableHAOptions): void;
     disableHA(options: DisableHAOptions): void;
 }
-//# sourceMappingURL=cloud-client.d.ts.map

package/dist/cloud/cloud-client.js

@@ -23,4 +23,3 @@ export class CloudClient {
         window.open(`${this.baseUrl}/disable-ha?${params.toString()}`);
     }
 }
-//# sourceMappingURL=cloud-client.js.map

package/dist/cloud/index.d.ts

@@ -1,3 +1,2 @@
 export { CloudClient } from './cloud-client.js';
 export type { CloudClientConfig, EnableHAOptions, DisableHAOptions } from './cloud-client.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/cloud/index.js

@@ -1,2 +1 @@
 export { CloudClient } from './cloud-client.js';
-//# sourceMappingURL=index.js.map

package/dist/events/group.d.ts

@@ -7,4 +7,3 @@ export interface GroupMembershipEventData {
         role?: string;
     };
 }
-//# sourceMappingURL=group.d.ts.map

package/dist/events/group.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=group.js.map

package/dist/events/index.d.ts

@@ -3,4 +3,3 @@ export type { SseEventData, AppVersionChangedEvent } from './sse.js';
 export { WsClient } from './ws.js';
 export type { WsEventData } from './ws.js';
 export type { GroupMembershipEventData } from './group.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/events/index.js

@@ -1,3 +1,2 @@
 export { SseClient } from './sse.js';
 export { WsClient } from './ws.js';
-//# sourceMappingURL=index.js.map

package/dist/events/sse.d.ts

@@ -61,4 +61,3 @@ export declare class SseClient {
     private scheduleReconnect;
     close(): void;
 }
-//# sourceMappingURL=sse.d.ts.map

package/dist/events/sse.js

@@ -285,4 +285,3 @@ export class SseClient {
         this.subscribedGroupIds.clear();
     }
 }
-//# sourceMappingURL=sse.js.map

package/dist/events/ws.d.ts

@@ -52,4 +52,3 @@ export declare class WsClient {
     private scheduleReconnect;
     close(): void;
 }
-//# sourceMappingURL=ws.d.ts.map

package/dist/events/ws.js

@@ -209,4 +209,3 @@ export class WsClient {
     }
 }
 WsClient.MAX_BACKOFF_MS = 30000;
-//# sourceMappingURL=ws.js.map

package/dist/http-client/api-response.d.ts

@@ -13,4 +13,3 @@ export type ApiResponse<D = unknown> = Promise<ResponseData<D>>;
 export interface SuccessResponse {
     success: boolean;
 }
-//# sourceMappingURL=api-response.d.ts.map

package/dist/http-client/api-response.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=api-response.js.map

package/dist/http-client/http-factory.d.ts

@@ -65,4 +65,3 @@ export declare function createUniversalHttpClient(options: {
     credentials?: RequestCredentials;
     defaultAbortSignal?: AbortSignal;
 }): HttpClient;
-//# sourceMappingURL=http-factory.d.ts.map

package/dist/http-client/http-factory.js

@@ -64,4 +64,3 @@ export function createUniversalHttpClient(options) {
         return createNodeHttpClient(options);
     }
 }
-//# sourceMappingURL=http-factory.js.map

package/dist/http-client/http-types.d.ts

@@ -52,4 +52,3 @@ export interface HeadResponse {
 export interface LegacyRequestOptions {
     responseType?: 'arraybuffer' | 'blob' | 'json';
 }
-//# sourceMappingURL=http-types.d.ts.map

package/dist/http-client/http-types.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=http-types.js.map

package/dist/http-client/index.d.ts

@@ -5,4 +5,3 @@ export { createHttpClient, createBrowserHttpClient, createNodeHttpClient, create
 export { withRetry, createRetryableMethod } from './retry.js';
 export type { RetryOptions } from './retry.js';
 export { combineSignals, createTimeoutSignal } from './signal-utils.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/http-client/index.js

@@ -9,4 +9,3 @@ export { createHttpClient, createBrowserHttpClient, createNodeHttpClient, create
 export { withRetry, createRetryableMethod } from './retry.js';
 // Signal utilities
 export { combineSignals, createTimeoutSignal } from './signal-utils.js';
-//# sourceMappingURL=index.js.map

package/dist/http-client/retry.d.ts

@@ -3,4 +3,3 @@ export interface RetryOptions {
 }
 export declare function withRetry<T>(fn: (attempt: number) => Promise<T>, options?: RetryOptions): Promise<T>;
 export declare function createRetryableMethod<T extends unknown[], R>(method: (...args: T) => Promise<R>, retryOptions?: RetryOptions): (...args: T) => Promise<R>;
-//# sourceMappingURL=retry.d.ts.map

package/dist/http-client/retry.js

@@ -80,4 +80,3 @@ export function createRetryableMethod(method, retryOptions = {}) {
         return withRetry(() => method(...args), retryOptions);
     };
 }
-//# sourceMappingURL=retry.js.map

package/dist/http-client/signal-utils.d.ts

@@ -1,3 +1,2 @@
 export declare function combineSignals(signals: Array<AbortSignal | undefined>): AbortSignal | undefined;
 export declare function createTimeoutSignal(timeoutMs: number): AbortSignal;
-//# sourceMappingURL=signal-utils.d.ts.map

package/dist/http-client/signal-utils.js

@@ -39,4 +39,3 @@ export function createTimeoutSignal(timeoutMs) {
     }, timeoutMs);
     return controller.signal;
 }
-//# sourceMappingURL=signal-utils.js.map

package/dist/http-client/web-client.d.ts

@@ -52,4 +52,3 @@ export declare class WebHttpClient implements HttpClient {
     private parseResponse;
     private getBodyText;
 }
-//# sourceMappingURL=web-client.d.ts.map

package/dist/http-client/web-client.js

@@ -8,10 +8,35 @@ import { combineSignals, createTimeoutSignal } from './signal-utils.js';
  * a fresh login.
  */
 const TERMINAL_AUTH_ERRORS = new Set(['token_reuse', 'token_revoked']);
+/**
+ * Pull the node's explanation out of an error body. Core answers every handled
+ * failure with `{"error": "<message>"}` (`ApiError::into_response`); the nested
+ * `{"error": {"message": ...}}` form is what proxies in front of a node emit.
+ * Returns undefined for a non-JSON, empty, or envelope-less body.
+ */
+function extractErrorMessage(bodyText) {
+    if (!bodyText)
+        return undefined;
+    try {
+        const error = JSON.parse(bodyText)?.error;
+        if (typeof error === 'string' && error.trim() !== '')
+            return error;
+        const nested = error?.message;
+        if (typeof nested === 'string' && nested.trim() !== '')
+            return nested;
+    }
+    catch {
+        // Not JSON — the status line is all we can honestly report.
+    }
+    return undefined;
+}
 // Custom error class for HTTP errors
 export class HTTPError extends Error {
     constructor(status, statusText, url, headers, bodyText) {
-        super(`HTTP ${status} ${statusText}`);
+        const explanation = extractErrorMessage(bodyText);
+        super(explanation
+            ? `HTTP ${status} ${statusText}: ${explanation}`
+            : `HTTP ${status} ${statusText}`);
         this.status = status;
         this.statusText = statusText;
         this.url = url;
@@ -424,4 +449,3 @@ export class WebHttpClient {
         }
     }
 }
-//# sourceMappingURL=web-client.js.map