@peers-app/peers-sdk 0.18.8 → 0.19.0

package/dist/package-installer/package-tarball.test.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const package_tarball_1 = require("./package-tarball");
+const testPayload = {
+    packageId: "00mh0wlipjixk2gqmurbwee0o",
+    packageVersionId: "00mpdg7xstwt3oe51x9brk15i",
+    version: "1.2.3",
+    versionTag: "stable",
+    packageBundleFileHash: "abc123",
+    routesBundleFileHash: "def456",
+    uiBundleFileHash: "ghi789",
+    publicKey: "testPublicKey123",
+    packageAuthorSignature: "testSignature456",
+};
+describe("package-tarball", () => {
+    describe("packPeersTarball + unpackPeersTarball round-trip", () => {
+        it("round-trips all three bundles", async () => {
+            const opts = {
+                payload: testPayload,
+                packageBundle: "console.log('main bundle');",
+                routesBundle: "console.log('routes');",
+                uiBundle: "console.log('ui');",
+            };
+            const tarball = await (0, package_tarball_1.packPeersTarball)(opts);
+            expect(tarball).toBeInstanceOf(Uint8Array);
+            expect(tarball.length).toBeGreaterThan(0);
+            const result = await (0, package_tarball_1.unpackPeersTarball)(tarball);
+            expect(result.payload).toEqual(testPayload);
+            expect(result.packageBundle).toBe(opts.packageBundle);
+            expect(result.routesBundle).toBe(opts.routesBundle);
+            expect(result.uiBundle).toBe(opts.uiBundle);
+        });
+        it("round-trips with only package bundle (no routes/ui)", async () => {
+            const opts = {
+                payload: { ...testPayload, routesBundleFileHash: undefined, uiBundleFileHash: undefined },
+                packageBundle: "module.exports = {};",
+            };
+            const tarball = await (0, package_tarball_1.packPeersTarball)(opts);
+            const result = await (0, package_tarball_1.unpackPeersTarball)(tarball);
+            expect(result.payload.packageId).toBe(testPayload.packageId);
+            expect(result.packageBundle).toBe(opts.packageBundle);
+            expect(result.routesBundle).toBeUndefined();
+            expect(result.uiBundle).toBeUndefined();
+        });
+        it("handles large bundle content", async () => {
+            const largeBundle = "x".repeat(500_000);
+            const opts = {
+                payload: testPayload,
+                packageBundle: largeBundle,
+            };
+            const tarball = await (0, package_tarball_1.packPeersTarball)(opts);
+            // Gzip should compress the repetitive content significantly
+            expect(tarball.length).toBeLessThan(largeBundle.length);
+            const result = await (0, package_tarball_1.unpackPeersTarball)(tarball);
+            expect(result.packageBundle).toBe(largeBundle);
+        });
+    });
+    describe("unpackPeersTarball validation", () => {
+        it("throws on empty/invalid data", async () => {
+            await expect((0, package_tarball_1.unpackPeersTarball)(new Uint8Array(0))).rejects.toThrow();
+        });
+        it("throws if pv-payload.json is missing", async () => {
+            const { createTarGzip } = await Promise.resolve().then(() => require("nanotar"));
+            const tarball = await createTarGzip([{ name: "package.bundle.js", data: "code" }]);
+            await expect((0, package_tarball_1.unpackPeersTarball)(tarball)).rejects.toThrow("missing pv-payload.json");
+        });
+        it("throws if package.bundle.js is missing", async () => {
+            const { createTarGzip } = await Promise.resolve().then(() => require("nanotar"));
+            const tarball = await createTarGzip([
+                { name: "pv-payload.json", data: JSON.stringify(testPayload) },
+            ]);
+            await expect((0, package_tarball_1.unpackPeersTarball)(tarball)).rejects.toThrow("missing package.bundle.js");
+        });
+    });
+});

package/dist/package-installer/types.d.ts

@@ -0,0 +1,110 @@
+import type { IPackageVersion } from "../data/package-versions";
+import type { IPeersPackage } from "../types/peers-package";
+/**
+ * Abstraction over local filesystem operations.
+ * Each runtime (Electron, CLI, tests) provides its own implementation.
+ */
+export interface IFileSystemDeps {
+    readFile(path: string): Promise<string>;
+    writeFile(path: string, content: string): Promise<void>;
+    exists(path: string): Promise<boolean>;
+    readJson<T = unknown>(path: string): Promise<T>;
+}
+/**
+ * Abstraction over shell command execution (git, npm, etc.).
+ */
+export interface IShellDeps {
+    exec(cmd: string, opts?: {
+        cwd?: string;
+    }): Promise<{
+        stdout: string;
+        stderr: string;
+    }>;
+}
+/**
+ * Abstraction over HTTP fetching for remote package updates.
+ * Each runtime provides its own implementation (Node fetch, browser fetch).
+ */
+export interface IHttpDeps {
+    fetchJson<T = unknown>(url: string): Promise<T>;
+    fetchBinary(url: string): Promise<Uint8Array>;
+}
+/**
+ * All external dependencies needed by the package-installer module.
+ * Injected by the host runtime to keep the SDK runtime-agnostic.
+ */
+export interface IPackageInstallerDeps {
+    fs: IFileSystemDeps;
+    shell: IShellDeps;
+    resolvePath(...segments: string[]): string;
+    packagesRootDir: string;
+    /** Optional HTTP interface for remote package checking. No-op if omitted. */
+    http?: IHttpDeps;
+}
+/** Options for {@link installPackageFromBundles}. */
+export interface IInstallOpts {
+    /** Override local path; otherwise read from the packageLocalPath device var. */
+    localPath?: string;
+    /** Version tag for the created PackageVersion. Defaults to `"dev"`. */
+    versionTag?: string;
+    /** Skip `packageLoader.loadPackage` (useful for batch installs). */
+    skipLoad?: boolean;
+    /** Skip `resolveDevicePackageVersion` after install. */
+    skipResolve?: boolean;
+}
+/** Result of {@link installPackageFromBundles}. */
+export interface IInstallResult {
+    packageVersion: IPackageVersion;
+    loaded: IPeersPackage | undefined;
+    /** True when the on-disk bundles match the existing PackageVersion hash — no writes occurred. */
+    unchanged: boolean;
+}
+/** Metadata extracted from a local package directory's `package.json`. */
+export interface IPackageInfo {
+    packageId?: string;
+    name: string;
+    description?: string;
+    version?: string;
+    remoteRepo?: string;
+}
+/** Options for {@link createPackage}. */
+export interface ICreatePackageOpts {
+    /** Human-readable package name (e.g. "My Widget"). */
+    name: string;
+    /** Override default location (`{packagesRootDir}/{slug}`). */
+    location?: string;
+    /** Override the template repo URL. Defaults to peers-package-template on GitHub. */
+    templateRepo?: string;
+    /** Author name written into package.json. */
+    author?: string;
+    /**
+     * The user's personal DataContext for storing the signing key as a secret `userVar`.
+     * If omitted, keypair generation is skipped (useful for tests or contexts where
+     * personal storage isn't available). The migration script backfills these.
+     */
+    personalContext?: import("../context/data-context").DataContext;
+}
+/** Result of {@link createPackage}. */
+export interface ICreatePackageResult {
+    packageId: string;
+    localPath: string;
+    packageVersion: IPackageVersion;
+}
+/** Options for {@link clonePackage}. */
+export interface IClonePackageOpts {
+    /** Remote git URL to clone. */
+    remoteRepo: string;
+    /** Override default location (`{packagesRootDir}/{repo-slug}`). */
+    location?: string;
+    /** Override auto-detection of disabled state. */
+    disabled?: boolean;
+    /** Skip `npm install` + `npm run build` (useful if pre-built). */
+    skipBuild?: boolean;
+}
+/** Result of {@link clonePackage}. */
+export interface IClonePackageResult {
+    packageId: string;
+    localPath: string;
+    remoteRepo: string;
+    packageVersion: IPackageVersion;
+}

package/dist/package-installer/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/rpc-types.d.ts

@@ -36,6 +36,7 @@ export declare const rpcServerCalls: {
         update?: boolean;
         linkRemote?: boolean;
     }) => Promise<string>;
+    seedBundledPeersCore: (dataContextId?: string) => Promise<boolean>;
     setUserIdAndSecretKey: (userId: string, secretKey: string) => Promise<void>;
     getUserId: () => Promise<string | undefined>;
     encryptData: (value: string, groupId?: string) => Promise<string>;
@@ -69,6 +70,19 @@ export declare const rpcServerCalls: {
     /** Deletes the pre-migration data directory after the user confirms. */
     cleanupOldDataDir: () => Promise<void>;
     importGroupShare: (groupShareJson: string) => Promise<string>;
+    /**
+     * Sign a package version with the package author's key (server-side only — key never leaves the server).
+     * Returns the base64url detached signature, or undefined if the signing key isn't available.
+     */
+    signPackageAuthorVersion: (pvFields: {
+        packageId: string;
+        packageVersionId: string;
+        version: string;
+        versionTag?: string;
+        packageBundleFileHash: string;
+        routesBundleFileHash?: string;
+        uiBundleFileHash?: string;
+    }) => Promise<string | undefined>;
     registerWithPeersServices: () => Promise<string>;
     appQuit: () => Promise<void>;
     appRestart: () => Promise<void>;

package/dist/rpc-types.js

@@ -17,6 +17,7 @@ exports.rpcServerCalls = {
     openPath: rpcStub("openPath"),
     openPackage: rpcStub("OpenPackage"),
     addOrUpdatePackage: rpcStub("addOrUpdatePackage"),
+    seedBundledPeersCore: rpcStub("seedBundledPeersCore"),
     setUserIdAndSecretKey: rpcStub("setUserIdAndSecretKey"),
     getUserId: rpcStub("getUserId"),
     encryptData: rpcStub("encryptData"),
@@ -39,6 +40,11 @@ exports.rpcServerCalls = {
     /** Deletes the pre-migration data directory after the user confirms. */
     cleanupOldDataDir: rpcStub("cleanupOldDataDir"),
     importGroupShare: rpcStub("importGroupShare"),
+    /**
+     * Sign a package version with the package author's key (server-side only — key never leaves the server).
+     * Returns the base64url detached signature, or undefined if the signing key isn't available.
+     */
+    signPackageAuthorVersion: rpcStub("signPackageAuthorVersion"),
     registerWithPeersServices: rpcStub("registerWithPeersServices"),
     // App lifecycle commands (for CLI control)
     appQuit: rpcStub("appQuit"),

package/dist/system-ids.d.ts

@@ -6,3 +6,4 @@ export declare const defaultSendMessageToolId = "000peers0tool00000sendmsg";
 export declare const runWorkflowToolId = "000peers0tool0runworkflow";
 export declare const peersCorePackageId = "00mh0wlipjixk2gqmurbwee0o";
 export declare const peersCorePackageRepoUrl = "https://github.com/peers-app/peers-core";
+export declare const peersCorePublishPublicKey = "S7cQqnvVz-FVDO6Lk5zC7epSvcP_-NyBVZz9gdcj73c";

package/dist/system-ids.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.peersCorePackageRepoUrl = exports.peersCorePackageId = exports.runWorkflowToolId = exports.defaultSendMessageToolId = exports.defaultAssistantRunnerToolId = exports.openCodeAssistantId = exports.defaultAssistantId = exports.peersRootUserId = void 0;
+exports.peersCorePublishPublicKey = exports.peersCorePackageRepoUrl = exports.peersCorePackageId = exports.runWorkflowToolId = exports.defaultSendMessageToolId = exports.defaultAssistantRunnerToolId = exports.openCodeAssistantId = exports.defaultAssistantId = exports.peersRootUserId = void 0;
 exports.peersRootUserId = "000peers0user000000000001";
 exports.defaultAssistantId = "000peers0bot00000000shell";
 // export const defaultAssistantId = '000peers0bot000000000bot1';
@@ -10,3 +10,4 @@ exports.defaultSendMessageToolId = "000peers0tool00000sendmsg";
 exports.runWorkflowToolId = "000peers0tool0runworkflow";
 exports.peersCorePackageId = "00mh0wlipjixk2gqmurbwee0o";
 exports.peersCorePackageRepoUrl = "https://github.com/peers-app/peers-core";
+exports.peersCorePublishPublicKey = "S7cQqnvVz-FVDO6Lk5zC7epSvcP_-NyBVZz9gdcj73c";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peers-app/peers-sdk",
-  "version": "0.18.8",
+  "version": "0.19.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/peers-app/peers-sdk.git"
@@ -34,15 +34,16 @@
     "release": "npm run release:patch"
   },
   "dependencies": {
-    "buffer": "^6.0.3",
     "@msgpack/msgpack": "^3.1.2",
     "@noble/hashes": "^1.8.0",
+    "buffer": "^6.0.3",
     "ed2curve": "^0.3.0",
     "fast-json-stable-stringify": "^2.1.0",
     "fflate": "^0.8.2",
     "lodash": "^4.17.21",
     "moment": "^2.30.1",
     "moment-timezone": "^0.5.46",
+    "nanotar": "^0.3.0",
     "tweetnacl": "^1.0.3",
     "tweetnacl-util": "^0.15.1",
     "zod": "3.25.76"