@peers-app/peers-sdk 0.19.14 → 0.20.1

package/dist/device/get-trust-level-fn.js

@@ -4,6 +4,12 @@ exports.getTrustLevelFn = getTrustLevelFn;
 const context_1 = require("../context");
 const data_1 = require("../data");
 const socket_type_1 = require("./socket.type");
+/**
+ * Build the connection-handshake trust evaluator for a local user identity.
+ *
+ * Known user keys are authoritative even for a newly observed device: a claimed identity
+ * whose signing or box key differs from the stored user record is rejected as untrusted.
+ */
 function getTrustLevelFn(me, serverUrl) {
     return async function getTrustLevel(deviceInfo, _registerNew) {
         const userContext = await (0, context_1.getUserContext)();
@@ -67,12 +73,11 @@ function getTrustLevelFn(me, serverUrl) {
         }
         const effectiveUser = user ?? groupUser;
         if (effectiveUser &&
-            device &&
-            !(deviceInfo.userId === device.userId &&
-                deviceInfo.userId === effectiveUser.userId &&
-                deviceInfo.publicKey === effectiveUser.publicKey &&
-                deviceInfo.publicBoxKey === effectiveUser.publicBoxKey)) {
-            // deviceInfo does not align with local info about user and device, return Untrusted
+            (deviceInfo.userId !== effectiveUser.userId ||
+                deviceInfo.publicKey !== effectiveUser.publicKey ||
+                deviceInfo.publicBoxKey !== effectiveUser.publicBoxKey ||
+                (device ? deviceInfo.userId !== device.userId : false))) {
+            // deviceInfo does not align with local info about the user or device, return Untrusted
             // TODO check if user has changed their public keys
             return socket_type_1.TrustLevel.Untrusted;
         }
@@ -151,7 +156,7 @@ function getTrustLevelFn(me, serverUrl) {
         //     assignedAt: new Date(),
         //   }, { restoreIfDeleted: true });
         // }
-        if (newUser) {
+        if (newUser && user) {
             // TODO: I'm not sure we immediately want to save this user to the my personal db...
             await (0, data_1.Users)(userDataContext).save(user, {
                 restoreIfDeleted: true,

package/dist/device/get-trust-level-fn.test.js

@@ -255,7 +255,7 @@ describe("getTrustLevelFn", () => {
             const result = await getTrustLevel(other);
             expect(result).not.toBe(socket_type_1.TrustLevel.Untrusted);
         });
-        it("does NOT return Untrusted when only user exists (no device record yet)", async () => {
+        it("returns Untrusted for a known user's signing-key mismatch on a new device", async () => {
             const me = makeTestIdentity();
             const other = makeTestIdentity();
             const existingUser = {
@@ -268,7 +268,21 @@ describe("getTrustLevelFn", () => {
             setupMocks(null, existingUser);
             const getTrustLevel = (0, get_trust_level_fn_1.getTrustLevelFn)(me);
             const result = await getTrustLevel(other);
-            expect(result).not.toBe(socket_type_1.TrustLevel.Untrusted);
+            expect(result).toBe(socket_type_1.TrustLevel.Untrusted);
+        });
+        it("returns Untrusted for a known user's box-key mismatch on a new device", async () => {
+            const me = makeTestIdentity();
+            const other = makeTestIdentity();
+            const existingUser = {
+                userId: other.userId,
+                publicKey: other.publicKey,
+                publicBoxKey: `different_pbk_${(0, utils_1.newid)()}`,
+                name: "Alice",
+            };
+            setupMocks(null, existingUser);
+            const getTrustLevel = (0, get_trust_level_fn_1.getTrustLevelFn)(me);
+            const result = await getTrustLevel(other);
+            expect(result).toBe(socket_type_1.TrustLevel.Untrusted);
         });
     });
     // ─── Trusted fast path ──────────────────────────────────────────────────────

package/dist/logging/console-logs.table.d.ts

@@ -35,6 +35,7 @@ export declare const consoleLogSchema: z.ZodObject<{
 export type IConsoleLog = z.infer<typeof consoleLogSchema>;
 /** Cutoff within this many ms of `Date.now()` is treated as "clear all" (manual clear). */
 export declare const CLEAR_ALL_CUTOFF_SLACK_MS = 5000;
+declare const metaData: ITableMetaData;
 /**
  * Returns whether a cutoff timestamp should trigger a full-table clear (drop + recreate)
  * rather than a conditional delete. Used when the UI calls `deleteOldLogs(Date.now())`.
@@ -65,3 +66,5 @@ export declare class ConsoleLogsTable extends Table<IConsoleLog> {
  * Returns the user's personal {@link ConsoleLogsTable} (logs are not synced across devices).
  */
 export declare function ConsoleLogs(): Promise<ConsoleLogsTable>;
+/** Table metadata for the {@link ConsoleLogsTable} (name, primary key, fields). */
+export { metaData as consoleLogsMetaData };

package/dist/logging/console-logs.table.js

@@ -34,7 +34,7 @@ var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn,
     done = true;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConsoleLogsTable = exports.CLEAR_ALL_CUTOFF_SLACK_MS = exports.consoleLogSchema = void 0;
+exports.consoleLogsMetaData = exports.ConsoleLogsTable = exports.CLEAR_ALL_CUTOFF_SLACK_MS = exports.consoleLogSchema = void 0;
 exports.isClearAllCutoff = isClearAllCutoff;
 exports.ConsoleLogs = ConsoleLogs;
 const zod_1 = require("zod");
@@ -73,6 +73,7 @@ const metaData = {
         { fields: ["processInstanceId"] },
     ],
 };
+exports.consoleLogsMetaData = metaData;
 /**
  * Returns whether a cutoff timestamp should trigger a full-table clear (drop + recreate)
  * rather than a conditional delete. Used when the UI calls `deleteOldLogs(Date.now())`.

package/dist/rpc-types.d.ts

@@ -1,7 +1,12 @@
+import type { IDeviceDatabaseQueryResult, IDeviceOperationStatus, IDeviceToolRunInput } from "./contracts/system/device-operations-contract";
+import type { ITool } from "./data/tools";
+import type { IConsoleLog } from "./logging/console-logs.table";
+/** Named event payload sent across the frontend RPC bridge. */
 export interface IEventData<T = any> {
     name: string;
     data: T;
 }
+/** Serializable description of one interactive UI element. */
 export interface UIElement {
     tag: string;
     text?: string;
@@ -18,6 +23,7 @@ export interface UIElement {
         height: number;
     };
 }
+/** Serializable renderer state returned to CLI UI-inspection commands. */
 export interface UIState {
     url: string;
     title: string;
@@ -25,6 +31,24 @@ export interface UIState {
     text: string;
     elements: UIElement[];
 }
+/** One verified direct device connection exposed by the local Electron bridge. */
+export interface IConnectedDeviceSummary {
+    deviceId: string;
+    userId: string;
+    connectionId: string;
+    connectionAddress?: string;
+    trustLevel: number;
+    verified: boolean;
+}
+/** Filters and bounds for one remote System Logs query. */
+export interface IRemoteLogsQueryInput {
+    dataContextId?: string;
+    filter?: Record<string, unknown>;
+    pageSize?: number;
+    sortBy?: string[];
+    textSearch?: string;
+}
+/** RPC methods implemented by the trusted local server/main process. */
 export declare const rpcServerCalls: {
     ping: (msg: string) => Promise<string>;
     openLinkInBrowser: (url: string) => Promise<void>;
@@ -102,6 +126,13 @@ export declare const rpcServerCalls: {
         rowCount: number;
     }>;
     runTool: (toolId: string, args: Record<string, any>, dataContextId?: string, assistantId?: string) => Promise<any>;
+    listConnectedDevices: () => Promise<IConnectedDeviceSummary[]>;
+    getRemoteDeviceStatus: (deviceId: string, dataContextId?: string) => Promise<IDeviceOperationStatus>;
+    remoteDbQuery: (deviceId: string, query: string, dataContextId?: string) => Promise<IDeviceDatabaseQueryResult>;
+    remoteListTools: (deviceId: string, limit?: number, dataContextId?: string) => Promise<ITool[]>;
+    remoteGetTool: (deviceId: string, toolIdOrName: string, dataContextId?: string) => Promise<ITool | null>;
+    remoteRunTool: (deviceId: string, input: IDeviceToolRunInput, dataContextId?: string) => Promise<unknown>;
+    remoteQueryLogs: (deviceId: string, input?: IRemoteLogsQueryInput) => Promise<IConsoleLog[]>;
     uiReload: (options?: {
         ignoreCache?: boolean;
     }) => Promise<void>;
@@ -152,6 +183,7 @@ export declare const rpcServerCalls: {
     subscribePrefixes: (prefixes: string[]) => Promise<void>;
     unsubscribePrefixes: (prefixes: string[]) => Promise<void>;
 };
+/** RPC methods implemented by renderer/frontend clients. */
 export declare const rpcClientCalls: {
     ping: (msg: string) => Promise<string>;
     emitEvent: (event: IEventData) => Promise<boolean>;
@@ -182,8 +214,13 @@ export declare const rpcClientCalls: {
         error?: string;
     }>;
 };
+/** Name of a server/main-process RPC method. */
 export type RpcServerNames = keyof typeof rpcServerCalls;
+/** Name of a renderer/frontend RPC method. */
 export type RpcClientNames = keyof typeof rpcClientCalls;
+/** Whether this module is executing in a renderer, browser, or CLI client context. */
 export declare const isClient: boolean;
+/** Mark the runtime as a single-process client such as the PWA. */
 export declare function setSingleProcessClient(value: boolean): void;
+/** Return whether client and server responsibilities share one process. */
 export declare function isSingleProcessClient(): boolean;

package/dist/rpc-types.js

@@ -10,6 +10,7 @@ function rpcStub(rpcName) {
             JSON.stringify({ rpcName, args }, null, 2));
     };
 }
+/** RPC methods implemented by the trusted local server/main process. */
 exports.rpcServerCalls = {
     ping: async (msg) => `pong: ${msg}`,
     // TODO collapse these two down to just openPath
@@ -60,6 +61,14 @@ exports.rpcServerCalls = {
     dbQuery: rpcStub("dbQuery"),
     // Direct tool execution (for CLI)
     runTool: rpcStub("runTool"),
+    // Headless direct-device administration bridge (for CLI)
+    listConnectedDevices: rpcStub("listConnectedDevices"),
+    getRemoteDeviceStatus: rpcStub("getRemoteDeviceStatus"),
+    remoteDbQuery: rpcStub("remoteDbQuery"),
+    remoteListTools: rpcStub("remoteListTools"),
+    remoteGetTool: rpcStub("remoteGetTool"),
+    remoteRunTool: rpcStub("remoteRunTool"),
+    remoteQueryLogs: rpcStub("remoteQueryLogs"),
     // UI control (for CLI)
     uiReload: rpcStub("uiReload"),
     uiInspect: rpcStub("uiInspect"),
@@ -90,6 +99,7 @@ exports.rpcServerCalls = {
     subscribePrefixes: rpcStub("subscribePrefixes"),
     unsubscribePrefixes: rpcStub("unsubscribePrefixes"),
 };
+/** RPC methods implemented by renderer/frontend clients. */
 exports.rpcClientCalls = {
     ping: async (msg) => `pong: ${msg}`,
     // emitEvent: rpcStub('emitEvent') as ((event: IEventData) => Promise<boolean>),
@@ -106,14 +116,17 @@ exports.rpcClientCalls = {
 // Check if we're in a client context (browser, webview, or CLI connected to server)
 // - Browser: window + document exist
 // - CLI: process.env.PEERS_IS_CLIENT === 'true'
+/** Whether this module is executing in a renderer, browser, or CLI client context. */
 exports.isClient = (typeof window !== "undefined" && typeof document !== "undefined") ||
     (typeof process !== "undefined" && process.env?.PEERS_IS_CLIENT === "true");
 // Single-process mode (PWA): client and server live in the same process,
 // so Table events must NOT be suppressed on the client side.
 let _singleProcessClient = false;
+/** Mark the runtime as a single-process client such as the PWA. */
 function setSingleProcessClient(value) {
     _singleProcessClient = value;
 }
+/** Return whether client and server responsibilities share one process. */
 function isSingleProcessClient() {
     return _singleProcessClient;
 }

package/dist/system-ids.d.ts

@@ -1,9 +1,34 @@
+/** Stable user ID that owns built-in Peers system records. */
 export declare const peersRootUserId = "000peers0user000000000001";
+/** Default assistant used when no user-selected assistant is available. */
 export declare const defaultAssistantId = "000peers0bot00000000shell";
+/** Stable ID of the bundled OpenCode assistant. */
 export declare const openCodeAssistantId = "00mlwl2km2opencode0000001";
+/** Stable ID of the default assistant-runner tool. */
 export declare const defaultAssistantRunnerToolId = "000peers0tool00000runner1";
+/** Stable ID of the built-in send-message tool. */
 export declare const defaultSendMessageToolId = "000peers0tool00000sendmsg";
+/** Stable ID of the built-in workflow runner tool. */
 export declare const runWorkflowToolId = "000peers0tool0runworkflow";
+/** Stable package ID of the bundled peers-core package. */
 export declare const peersCorePackageId = "00mh0wlipjixk2gqmurbwee0o";
+/** Canonical source repository for peers-core. */
 export declare const peersCorePackageRepoUrl = "https://github.com/peers-app/peers-core";
+/** Trusted publishing key for official peers-core releases. */
 export declare const peersCorePublishPublicKey = "S7cQqnvVz-FVDO6Lk5zC7epSvcP_-NyBVZz9gdcj73c";
+/**
+ * Stable id of the peers **system** itself, used as the `providerPackageId` for
+ * built-in system contracts (contracts the platform provides rather than a package).
+ */
+export declare const peersSystemPackageId = "000peers0system0000000001";
+/**
+ * Contract id for the built-in **System Logs** contract (read/write the local device's
+ * console logs). This is the first minimal system contract and the proof-of-concept for
+ * contract-consumer-based remote RPC. See `contracts/system/logs-contract.ts`.
+ */
+export declare const logsContractId = "000peers0logs000000000001";
+/**
+ * Contract id for the built-in **System Device Operations** contract. The provider exposes
+ * explicit owner-authorized status, bounded read-only database, and installed-tool operations.
+ */
+export declare const deviceOperationsContractId = "00mriijkhq94msfe9m2j6quwp";

package/dist/system-ids.js

@@ -1,13 +1,38 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.peersCorePublishPublicKey = exports.peersCorePackageRepoUrl = exports.peersCorePackageId = exports.runWorkflowToolId = exports.defaultSendMessageToolId = exports.defaultAssistantRunnerToolId = exports.openCodeAssistantId = exports.defaultAssistantId = exports.peersRootUserId = void 0;
+exports.deviceOperationsContractId = exports.logsContractId = exports.peersSystemPackageId = exports.peersCorePublishPublicKey = exports.peersCorePackageRepoUrl = exports.peersCorePackageId = exports.runWorkflowToolId = exports.defaultSendMessageToolId = exports.defaultAssistantRunnerToolId = exports.openCodeAssistantId = exports.defaultAssistantId = exports.peersRootUserId = void 0;
+/** Stable user ID that owns built-in Peers system records. */
 exports.peersRootUserId = "000peers0user000000000001";
+/** Default assistant used when no user-selected assistant is available. */
 exports.defaultAssistantId = "000peers0bot00000000shell";
 // export const defaultAssistantId = '000peers0bot000000000bot1';
+/** Stable ID of the bundled OpenCode assistant. */
 exports.openCodeAssistantId = "00mlwl2km2opencode0000001";
+/** Stable ID of the default assistant-runner tool. */
 exports.defaultAssistantRunnerToolId = "000peers0tool00000runner1";
+/** Stable ID of the built-in send-message tool. */
 exports.defaultSendMessageToolId = "000peers0tool00000sendmsg";
+/** Stable ID of the built-in workflow runner tool. */
 exports.runWorkflowToolId = "000peers0tool0runworkflow";
+/** Stable package ID of the bundled peers-core package. */
 exports.peersCorePackageId = "00mh0wlipjixk2gqmurbwee0o";
+/** Canonical source repository for peers-core. */
 exports.peersCorePackageRepoUrl = "https://github.com/peers-app/peers-core";
+/** Trusted publishing key for official peers-core releases. */
 exports.peersCorePublishPublicKey = "S7cQqnvVz-FVDO6Lk5zC7epSvcP_-NyBVZz9gdcj73c";
+/**
+ * Stable id of the peers **system** itself, used as the `providerPackageId` for
+ * built-in system contracts (contracts the platform provides rather than a package).
+ */
+exports.peersSystemPackageId = "000peers0system0000000001";
+/**
+ * Contract id for the built-in **System Logs** contract (read/write the local device's
+ * console logs). This is the first minimal system contract and the proof-of-concept for
+ * contract-consumer-based remote RPC. See `contracts/system/logs-contract.ts`.
+ */
+exports.logsContractId = "000peers0logs000000000001";
+/**
+ * Contract id for the built-in **System Device Operations** contract. The provider exposes
+ * explicit owner-authorized status, bounded read-only database, and installed-tool operations.
+ */
+exports.deviceOperationsContractId = "00mriijkhq94msfe9m2j6quwp";

package/dist/types/workflow.d.ts

@@ -44,6 +44,8 @@ export declare const workflowSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     name: string;
     description: string;
+    createdAt: Date;
+    updatedAt: Date;
     workflowId: string;
     defaultAssistantId: string;
     instructions: {
@@ -53,8 +55,6 @@ export declare const workflowSchema: z.ZodObject<{
         subWorkflowId?: string | undefined;
     }[];
     createdBy: string;
-    createdAt: Date;
-    updatedAt: Date;
     packageId?: string | undefined;
 }, {
     name: string;
@@ -63,13 +63,13 @@ export declare const workflowSchema: z.ZodObject<{
     defaultAssistantId: string;
     createdBy: string;
     packageId?: string | undefined;
+    createdAt?: Date | undefined;
+    updatedAt?: Date | undefined;
     instructions?: {
         markdown?: string | undefined;
         onError?: string | undefined;
         directCallToolId?: string | undefined;
         subWorkflowId?: string | undefined;
     }[] | undefined;
-    createdAt?: Date | undefined;
-    updatedAt?: Date | undefined;
 }>;
 export type IWorkflow = z.infer<typeof workflowSchema>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peers-app/peers-sdk",
-  "version": "0.19.14",
+  "version": "0.20.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/peers-app/peers-sdk.git"