@calimero-network/mero-react 3.0.2 → 4.0.1

package/README.md

@@ -91,6 +91,8 @@ Props (`MeroProviderConfig & { children }`):
 | `packageVersion` | `string` | No | Specific version (defaults to latest) |
 | `registryUrl` | `string` | No | Registry URL override |
 | `timeoutMs` | `number` | No | HTTP request timeout (default 30000) |
+| `allowedNodeUrls` | `string[]` | No | Origins the OAuth callback may authenticate against. The initiated node is always trusted; this allowlist additionally permits direct-callback entry. A callback `node_url` matching neither is rejected. |
+| `tokenStore` | `TokenStore` | No | Pluggable access/refresh token store. Defaults to localStorage. Pass a `MemoryTokenStore` or cookie-backed store for sensitive deployments (localStorage tokens are XSS-readable). |
 
 Modes and their permissions:
 
@@ -100,7 +102,7 @@ Modes and their permissions:
 | `MultiContext` | `context:create`, `context:list`, `context:execute` | Apps managing multiple contexts |
 | `Admin` | `admin` | Admin dashboards, dev tools |
 
-Auth flow: when `connectToNode(url)` is called, the provider redirects to the node's auth page. After login, the node redirects back with tokens in the URL hash. The provider processes these once (StrictMode-safe via ref) and sets `isAuthenticated = true`.
+Auth flow: when `connectToNode(url)` is called, the provider redirects to the node's auth page. After login, the node redirects back with tokens in the URL hash. The provider processes these once (StrictMode-safe via ref) and sets `isAuthenticated = true`. The callback's `node_url` is validated against the node login was initiated with (or `allowedNodeUrls`); a `node_url` matching neither is rejected.
 
 Online detection: the provider opens an SSE connection to the node after auth. `isOnline` reflects the SSE connection state — no polling.
 
@@ -348,7 +350,7 @@ useContexts, useApplicationContexts, useContextGroup, useContextDiscovery
 useCreateContext, useDeleteContext, useJoinContext
 useGroupInfo, useGroupMembers, useGroupContexts, useGroupInvitations, useGroupCapabilities
 useJoinGroup, useDeleteGroup, useAddGroupMembers, useRemoveGroupMembers
-useSyncGroup, useNestGroup, useUnnestGroup, useSubgroups
+useSyncGroup, useReparentGroup, useSubgroups
 useUpgradeGroup, useGroupUpgradeStatus, useRetryGroupUpgrade
 useRegisterGroupSigningKey, useUpdateGroupSettings
 useSetGroupMetadata, useSetMemberMetadata, useSetContextMetadata

package/dist/index.cjs

@@ -2273,29 +2273,17 @@ function useRetryGroupUpgrade() {
   );
   return { retryGroupUpgrade, loading, error };
 }
-function useNestGroup() {
+function useReparentGroup() {
   const { mero } = useMero();
   const { loading, error, run } = useAsyncMutation();
-  const nestGroup = react.useCallback(
-    async (parentGroupId, request) => {
+  const reparentGroup = react.useCallback(
+    async (childGroupId, request) => {
       if (!mero) return null;
-      return run(() => mero.admin.nestGroup(parentGroupId, request));
+      return run(() => mero.admin.reparentGroup(childGroupId, request));
     },
     [mero, run]
   );
-  return { nestGroup, loading, error };
-}
-function useUnnestGroup() {
-  const { mero } = useMero();
-  const { loading, error, run } = useAsyncMutation();
-  const unnestGroup = react.useCallback(
-    async (parentGroupId, request) => {
-      if (!mero) return null;
-      return run(() => mero.admin.unnestGroup(parentGroupId, request));
-    },
-    [mero, run]
-  );
-  return { unnestGroup, loading, error };
+  return { reparentGroup, loading, error };
 }
 function useSubgroups(groupId) {
   const { mero } = useMero();
@@ -2743,9 +2731,9 @@ exports.useNamespaceGroups = useNamespaceGroups;
 exports.useNamespaceIdentity = useNamespaceIdentity;
 exports.useNamespaces = useNamespaces;
 exports.useNamespacesForApplication = useNamespacesForApplication;
-exports.useNestGroup = useNestGroup;
 exports.useRegisterGroupSigningKey = useRegisterGroupSigningKey;
 exports.useRemoveGroupMembers = useRemoveGroupMembers;
+exports.useReparentGroup = useReparentGroup;
 exports.useResyncContext = useResyncContext;
 exports.useRetryGroupUpgrade = useRetryGroupUpgrade;
 exports.useSetContextMetadata = useSetContextMetadata;
@@ -2758,7 +2746,6 @@ exports.useSubgroupVisibility = useSubgroupVisibility;
 exports.useSubgroups = useSubgroups;
 exports.useSubscription = useSubscription;
 exports.useSyncGroup = useSyncGroup;
-exports.useUnnestGroup = useUnnestGroup;
 exports.useUpdateGroupSettings = useUpdateGroupSettings;
 exports.useUpdateMemberRole = useUpdateMemberRole;
 exports.useUpgradeGroup = useUpgradeGroup;