@peers-app/peers-sdk 0.21.2 → 0.21.3

package/dist/contracts/__tests__/contract-resolvers.test.js

@@ -146,3 +146,97 @@ describe("Self-trusted contract caller authorization", () => {
         router.dispose();
     });
 });
+describe("local user-context contract routing", () => {
+    function setupLocalRouter() {
+        const userId = (0, utils_1.newid)();
+        const groupId = (0, utils_1.newid)();
+        const personalContext = { dataContextId: userId };
+        const groupContext = { dataContextId: groupId };
+        const getDataContext = jest.fn((dataContextId) => {
+            if (dataContextId === userId)
+                return personalContext;
+            if (dataContextId === groupId)
+                return groupContext;
+            throw new Error("unexpected data context");
+        });
+        const userContext = {
+            userId,
+            userDataContext: personalContext,
+            groupDataContexts: new Map([[groupId, groupContext]]),
+            groupIds: jest.fn(() => [groupId]),
+            getDataContext,
+        };
+        const contractId = (0, utils_1.newid)();
+        (0, index_1.registerContractResolver)(contractId, 1, ({ dataContext }) => ({
+            contractId,
+            version: 1,
+            tools: {
+                inspect: {
+                    tool: {
+                        toolId: (0, utils_1.newid)(),
+                        name: "inspect",
+                        usageDescription: "Return the authorized route.",
+                        inputSchema: { type: "simple", fields: [] },
+                        outputSchema: { type: "simple", fields: [] },
+                        code: "",
+                        packageId: (0, utils_1.newid)(),
+                    },
+                    toolFn: () => dataContext.dataContextId,
+                },
+            },
+        }));
+        const [consumerTransport, providerTransport] = (0, index_1.inProcessTransportPair)();
+        return {
+            consumerTransport,
+            contractId,
+            getDataContext,
+            groupId,
+            providerTransport,
+            userContext,
+            userId,
+        };
+    }
+    const makeToolCall = (contractId, dataContextId) => ({
+        contractId,
+        version: 1,
+        member: "tool",
+        name: "inspect",
+        operation: "run",
+        args: [],
+        dataContextId,
+    });
+    it("registers synchronously and waits for a lazily loaded user context", async () => {
+        const setup = setupLocalRouter();
+        let resolveUserContext;
+        const userContextPromise = new Promise((resolve) => {
+            resolveUserContext = resolve;
+        });
+        const router = (0, index_1.createLocalUserContextContractProviderRouter)(setup.providerTransport, {
+            getUserContext: () => userContextPromise,
+        });
+        const result = setup.consumerTransport.emit(index_1.CONTRACT_REQUEST_CHANNEL, makeToolCall(setup.contractId));
+        resolveUserContext(setup.userContext);
+        await expect(result).resolves.toBe(setup.userId);
+        router.dispose();
+    });
+    it("routes known groups and rejects unknown contexts without creating them", async () => {
+        const setup = setupLocalRouter();
+        const router = (0, index_1.createLocalUserContextContractProviderRouter)(setup.providerTransport, {
+            getUserContext: async () => setup.userContext,
+        });
+        await expect(setup.consumerTransport.emit(index_1.CONTRACT_REQUEST_CHANNEL, makeToolCall(setup.contractId, setup.groupId))).resolves.toBe(setup.groupId);
+        const unknownId = (0, utils_1.newid)();
+        await expect(setup.consumerTransport.emit(index_1.CONTRACT_REQUEST_CHANNEL, makeToolCall(setup.contractId, unknownId))).rejects.toThrow("not available locally");
+        expect(setup.getDataContext).not.toHaveBeenCalledWith(unknownId);
+        router.dispose();
+    });
+    it("enforces an optional contract allowlist before resolving a provider", async () => {
+        const setup = setupLocalRouter();
+        const router = (0, index_1.createLocalUserContextContractProviderRouter)(setup.providerTransport, {
+            getUserContext: async () => setup.userContext,
+            allowedContractIds: new Set([(0, utils_1.newid)()]),
+        });
+        await expect(setup.consumerTransport.emit(index_1.CONTRACT_REQUEST_CHANNEL, makeToolCall(setup.contractId))).rejects.toThrow("contract");
+        router.dispose();
+    });
+});

package/dist/contracts/__tests__/host-contract-transport.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/contracts/__tests__/host-contract-transport.test.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const index_1 = require("../index");
+describe("host contract transport", () => {
+    const disposers = [];
+    afterEach(() => {
+        while (disposers.length > 0) {
+            disposers.pop()?.();
+        }
+    });
+    it("publishes registration lifecycle and clears the active transport", () => {
+        const [transport] = (0, index_1.inProcessTransportPair)();
+        const values = [];
+        const unsubscribe = (0, index_1.subscribeHostContractTransport)((value) => values.push(value));
+        const dispose = (0, index_1.registerHostContractTransport)(transport);
+        disposers.push(dispose);
+        expect((0, index_1.getHostContractTransport)()).toBe(transport);
+        dispose();
+        unsubscribe();
+        expect((0, index_1.getHostContractTransport)()).toBeUndefined();
+        expect(values).toEqual([undefined, transport, undefined]);
+    });
+    it("does not let a stale registration disposer clear its replacement", () => {
+        const [first] = (0, index_1.inProcessTransportPair)();
+        const [second] = (0, index_1.inProcessTransportPair)();
+        const disposeFirst = (0, index_1.registerHostContractTransport)(first);
+        const disposeSecond = (0, index_1.registerHostContractTransport)(second);
+        disposers.push(disposeFirst, disposeSecond);
+        disposeFirst();
+        expect((0, index_1.getHostContractTransport)()).toBe(second);
+    });
+    it("waits for a transport registered after startup", async () => {
+        const pending = (0, index_1.waitForHostContractTransport)();
+        const [transport] = (0, index_1.inProcessTransportPair)();
+        const dispose = (0, index_1.registerHostContractTransport)(transport);
+        disposers.push(dispose);
+        await expect(pending).resolves.toBe(transport);
+    });
+    it("rejects when no transport arrives before timeoutMs", async () => {
+        jest.useFakeTimers();
+        try {
+            const pending = (0, index_1.waitForHostContractTransport)({ timeoutMs: 25 });
+            const expectation = expect(pending).rejects.toThrow("Timed out waiting for host contract transport after 25ms");
+            await jest.advanceTimersByTimeAsync(25);
+            await expectation;
+        }
+        finally {
+            jest.useRealTimers();
+        }
+    });
+});

package/dist/contracts/__tests__/system-contracts.test.js

@@ -8,11 +8,16 @@ const system_contracts_1 = require("../system-contracts");
 // Populate the catalog with built-in system contracts.
 require("../system");
 describe("system contract catalog", () => {
-    it("self-registers Logs and Device Operations", () => {
+    it("self-registers the built-in system contracts", () => {
         const ids = (0, system_contracts_1.listSystemContracts)()
             .map((entry) => entry.contractId)
             .filter(Boolean);
-        expect(ids).toEqual(expect.arrayContaining([system_ids_1.logsContractId, system_ids_1.deviceOperationsContractId]));
+        expect(ids).toEqual(expect.arrayContaining([
+            system_ids_1.logsContractId,
+            system_ids_1.deviceOperationsContractId,
+            system_ids_1.networkDiagnosticsContractId,
+            system_ids_1.networkControlContractId,
+        ]));
     });
     it("registers the Logs live resolver", async () => {
         await new Promise((resolve) => queueMicrotask(resolve));
@@ -25,6 +30,10 @@ describe("system contract catalog", () => {
         expect(registry.getProviderPackageId(system_ids_1.logsContractId, 1)).toBe(system_ids_1.peersSystemPackageId);
         expect(registry.resolve(system_ids_1.deviceOperationsContractId, 1)?.name).toBe("System Device Operations");
         expect(registry.getProviderPackageId(system_ids_1.deviceOperationsContractId, 1)).toBe(system_ids_1.peersSystemPackageId);
+        expect(registry.resolve(system_ids_1.networkDiagnosticsContractId, 1)?.name).toBe("System Network Diagnostics");
+        expect(registry.getProviderPackageId(system_ids_1.networkDiagnosticsContractId, 1)).toBe(system_ids_1.peersSystemPackageId);
+        expect(registry.resolve(system_ids_1.networkControlContractId, 1)?.name).toBe("System Network Control");
+        expect(registry.getProviderPackageId(system_ids_1.networkControlContractId, 1)).toBe(system_ids_1.peersSystemPackageId);
     });
     it("registerSystemContract makes new contracts installable without loader changes", () => {
         const fakeContractId = (0, utils_1.newid)();

package/dist/contracts/contract-resolvers.d.ts

@@ -30,6 +30,26 @@ export declare function getContractResolver(contractId: string, version: number)
  * {@link TrustLevel.Self}. Unsigned discovery stubs and key mismatches fail closed.
  */
 export declare function isSelfTrustedContractCaller(userContext: UserContext, remoteIdentity: ContractRemoteIdentity): Promise<boolean>;
+/**
+ * Create a provider router for one authenticated UI-to-local-host session.
+ *
+ * The request listener is registered synchronously while user-context loading is
+ * deferred until each call. This prevents renderer startup from racing provider
+ * registration. Calls may target only the local user's personal context or a
+ * currently known group context; arbitrary valid IDs are rejected before
+ * `UserContext.getDataContext` can create a new context.
+ *
+ * This helper trusts the host transport's session authentication. It does not
+ * infer package-level authority from renderer-supplied data.
+ *
+ * @param transport Contract transport backed by an authenticated local session.
+ * @param opts.getUserContext Lazy accessor for the host's loaded user context.
+ * @param opts.allowedContractIds Optional contract allowlist for this session.
+ */
+export declare function createLocalUserContextContractProviderRouter(transport: IContractTransport, opts: {
+    getUserContext: () => Promise<UserContext>;
+    allowedContractIds?: ReadonlySet<string>;
+}): IContractProviderRouter;
 /**
  * Create the local-object provider router for one verified device connection.
  *

package/dist/contracts/contract-resolvers.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerContractResolver = registerContractResolver;
 exports.getContractResolver = getContractResolver;
 exports.isSelfTrustedContractCaller = isSelfTrustedContractCaller;
+exports.createLocalUserContextContractProviderRouter = createLocalUserContextContractProviderRouter;
 exports.createUserContextContractProviderRouter = createUserContextContractProviderRouter;
 exports.handleContractCall = handleContractCall;
 const user_permissions_1 = require("../data/user-permissions");
@@ -74,6 +75,62 @@ async function authorizeUserContextCall(call, userContext, remoteIdentity) {
         context,
     };
 }
+function getAuthorizedLocalDataContext(userContext, requestedId) {
+    const dataContextId = requestedId || userContext.userId;
+    if (dataContextId === userContext.userId) {
+        return userContext.userDataContext;
+    }
+    if (!userContext.groupIds().includes(dataContextId)) {
+        throw new Error(`Permission denied: data context '${dataContextId}' is not available locally`);
+    }
+    return userContext.getDataContext(dataContextId);
+}
+/**
+ * Create a provider router for one authenticated UI-to-local-host session.
+ *
+ * The request listener is registered synchronously while user-context loading is
+ * deferred until each call. This prevents renderer startup from racing provider
+ * registration. Calls may target only the local user's personal context or a
+ * currently known group context; arbitrary valid IDs are rejected before
+ * `UserContext.getDataContext` can create a new context.
+ *
+ * This helper trusts the host transport's session authentication. It does not
+ * infer package-level authority from renderer-supplied data.
+ *
+ * @param transport Contract transport backed by an authenticated local session.
+ * @param opts.getUserContext Lazy accessor for the host's loaded user context.
+ * @param opts.allowedContractIds Optional contract allowlist for this session.
+ */
+function createLocalUserContextContractProviderRouter(transport, opts) {
+    const { getUserContext, allowedContractIds } = opts;
+    return (0, contract_provider_router_1.createContractProviderRouter)(transport, {
+        authorizeCall: async (call) => {
+            if (allowedContractIds && !allowedContractIds.has(call.contractId)) {
+                throw new Error(`Permission denied: contract ${call.contractId} is not available locally`);
+            }
+            const userContext = await getUserContext();
+            const dataContext = getAuthorizedLocalDataContext(userContext, call.dataContextId);
+            const context = {
+                callerUserId: userContext.userId,
+                localUserId: userContext.userId,
+            };
+            return {
+                dataContextId: dataContext.dataContextId,
+                context,
+            };
+        },
+        resolveEndpoint: async ({ contractId, version, dataContextId, context, notify }) => {
+            const userContext = await getUserContext();
+            const resolver = getContractResolver(contractId, version);
+            if (!resolver) {
+                throw new Error(`No contract provider registered for ${contractId} v${version}`);
+            }
+            const dataContext = getAuthorizedLocalDataContext(userContext, dataContextId);
+            const resolution = await resolver({ dataContext });
+            return (0, contract_proxy_1.createContractProviderEndpoint)(resolution, { context, notify });
+        },
+    });
+}
 /**
  * Create the local-object provider router for one verified device connection.
  *

package/dist/contracts/host-contract-transport.d.ts

@@ -0,0 +1,38 @@
+import type { IContractTransport } from "./contract-transport";
+/** Listener notified whenever the active UI-to-host contract transport changes. */
+export type HostContractTransportListener = (transport: IContractTransport | undefined) => void;
+/**
+ * Register the transport used by renderer code to call its trusted local host.
+ *
+ * A newer registration replaces the previous active transport. The returned
+ * disposer clears only its own registration, so disposing a stale Electron
+ * connection cannot remove a transport installed by a later reconnect.
+ *
+ * @param transport UI-side transport connected to the local host provider router.
+ * @returns A disposer for this exact registration.
+ */
+export declare function registerHostContractTransport(transport: IContractTransport): () => void;
+/** Return the currently registered UI-to-host contract transport, if ready. */
+export declare function getHostContractTransport(): IContractTransport | undefined;
+/**
+ * Subscribe to UI-to-host contract transport lifecycle changes.
+ *
+ * The current value is delivered synchronously by default so a consumer owner
+ * can create or dispose its proxy immediately.
+ *
+ * @param listener Callback receiving the active transport or `undefined`.
+ * @param opts.emitCurrent Whether to deliver the current value immediately.
+ * @returns An idempotent unsubscribe function.
+ */
+export declare function subscribeHostContractTransport(listener: HostContractTransportListener, opts?: {
+    emitCurrent?: boolean;
+}): () => void;
+/**
+ * Wait for the next available UI-to-host contract transport.
+ *
+ * @param opts.timeoutMs Optional deadline; rejects if no transport registers in time.
+ * @returns The current transport immediately, or the next registered transport.
+ */
+export declare function waitForHostContractTransport(opts?: {
+    timeoutMs?: number;
+}): Promise<IContractTransport>;

package/dist/contracts/host-contract-transport.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerHostContractTransport = registerHostContractTransport;
+exports.getHostContractTransport = getHostContractTransport;
+exports.subscribeHostContractTransport = subscribeHostContractTransport;
+exports.waitForHostContractTransport = waitForHostContractTransport;
+let activeRegistration;
+const listeners = new Set();
+function notifyListeners() {
+    const transport = activeRegistration?.transport;
+    for (const listener of [...listeners]) {
+        listener(transport);
+    }
+}
+/**
+ * Register the transport used by renderer code to call its trusted local host.
+ *
+ * A newer registration replaces the previous active transport. The returned
+ * disposer clears only its own registration, so disposing a stale Electron
+ * connection cannot remove a transport installed by a later reconnect.
+ *
+ * @param transport UI-side transport connected to the local host provider router.
+ * @returns A disposer for this exact registration.
+ */
+function registerHostContractTransport(transport) {
+    const registration = { id: Symbol("host-contract-transport"), transport };
+    activeRegistration = registration;
+    notifyListeners();
+    let disposed = false;
+    return () => {
+        if (disposed) {
+            return;
+        }
+        disposed = true;
+        if (activeRegistration?.id === registration.id) {
+            activeRegistration = undefined;
+            notifyListeners();
+        }
+    };
+}
+/** Return the currently registered UI-to-host contract transport, if ready. */
+function getHostContractTransport() {
+    return activeRegistration?.transport;
+}
+/**
+ * Subscribe to UI-to-host contract transport lifecycle changes.
+ *
+ * The current value is delivered synchronously by default so a consumer owner
+ * can create or dispose its proxy immediately.
+ *
+ * @param listener Callback receiving the active transport or `undefined`.
+ * @param opts.emitCurrent Whether to deliver the current value immediately.
+ * @returns An idempotent unsubscribe function.
+ */
+function subscribeHostContractTransport(listener, opts = {}) {
+    listeners.add(listener);
+    if (opts.emitCurrent !== false) {
+        listener(activeRegistration?.transport);
+    }
+    let subscribed = true;
+    return () => {
+        if (!subscribed) {
+            return;
+        }
+        subscribed = false;
+        listeners.delete(listener);
+    };
+}
+/**
+ * Wait for the next available UI-to-host contract transport.
+ *
+ * @param opts.timeoutMs Optional deadline; rejects if no transport registers in time.
+ * @returns The current transport immediately, or the next registered transport.
+ */
+function waitForHostContractTransport(opts = {}) {
+    const current = getHostContractTransport();
+    if (current) {
+        return Promise.resolve(current);
+    }
+    const { timeoutMs } = opts;
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        let timer;
+        const finish = (action) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            if (timer !== undefined) {
+                clearTimeout(timer);
+            }
+            unsubscribe();
+            action();
+        };
+        const unsubscribe = subscribeHostContractTransport((transport) => {
+            if (!transport) {
+                return;
+            }
+            finish(() => resolve(transport));
+        }, { emitCurrent: false });
+        if (timeoutMs !== undefined) {
+            timer = setTimeout(() => {
+                finish(() => reject(new Error(`Timed out waiting for host contract transport after ${timeoutMs}ms`)));
+            }, timeoutMs);
+        }
+    });
+}

package/dist/contracts/index.d.ts

@@ -2,15 +2,17 @@ export { ContractBuilder, definePackage, PackageBuilder } from "./builder";
 export { type ContractCallAuthorizer, type ContractProviderEndpointResolver, createContractProviderRouter, type IAuthorizedContractRoute, type IContractProviderEndpointRequest, type IContractProviderRouter, type IContractProviderRouterOptions, } from "./contract-provider-router";
 export { ContractProviders, ContractProvidersTable, contractProvidersMetaData, contractProvidersSchema, type IContractProviderRecord, } from "./contract-providers.table";
 export { CONTRACT_CALL_RPC, type ContractMemberType, type ContractNotificationSink, type ContractPermissionCheck, createContractConsumer, createContractProvider, createContractProviderEndpoint, createContractProviderSession, type IContractCall, type IContractCallContext, type IContractConsumer, type IContractConsumerBase, type IContractNotification, type IContractProviderEndpoint, type IContractProviderEndpointOptions, type IContractProviderSession, type IContractProviderSessionOptions, type IContractResolution, type IContractTableProxy, type ITableProxy, sameUserContractPermissionCheck, } from "./contract-proxy";
-export { type ContractRemoteIdentity, type ContractResolver, createUserContextContractProviderRouter, getContractResolver, handleContractCall, isSelfTrustedContractCaller, registerContractResolver, } from "./contract-resolvers";
+export { type ContractRemoteIdentity, type ContractResolver, createLocalUserContextContractProviderRouter, createUserContextContractProviderRouter, getContractResolver, handleContractCall, isSelfTrustedContractCaller, registerContractResolver, } from "./contract-resolvers";
 export { CONTRACT_NOTIFY_CHANNEL, CONTRACT_REQUEST_CHANNEL, connectionContractTransport, type IContractTransport, type IDuplexEmitter, inProcessTransportPair, } from "./contract-transport";
 export { Contracts, ContractsTable, contractsMetaData, contractsSchema, type IContractRecord, } from "./contracts.table";
 export { createLocalContractConsumer } from "./create-local-consumer";
 export { extractTableShape, extractToolShape, type IExtractableTableDef, type IExtractableToolInstance, setSchemaToFieldsFn, } from "./extract";
+export { getHostContractTransport, type HostContractTransportListener, registerHostContractTransport, subscribeHostContractTransport, waitForHostContractTransport, } from "./host-contract-transport";
 export { PersistentContractRegistry } from "./persistent-registry";
 export { ContractRegistry } from "./registry";
 export { DEVICE_OPERATIONS_CONTRACT_VERSION, DEVICE_OPERATIONS_MAX_QUERY_LENGTH, DEVICE_OPERATIONS_MAX_RESULT_BYTES, DEVICE_OPERATIONS_MAX_ROWS, DEVICE_OPERATIONS_MAX_TOOLS, type DeviceOperationCapability, deviceOperationsProviderPackageId, deviceOperationsToolIds, getDeviceOperationsContractDefinition, type IDeviceDatabaseQueryInput, type IDeviceDatabaseQueryResult, type IDeviceOperationStatus, type IDeviceToolListInput, type IDeviceToolLookupInput, type IDeviceToolLookupResult, type IDeviceToolRunInput, } from "./system/device-operations-contract";
 export { getLogsContractDefinition, type ILogsConsumer, LOGS_CONTRACT_VERSION, resolveLogsContract, } from "./system/logs-contract";
+export * from "./system/network-contracts";
 export { type ISystemContractRegistration, installSystemContracts, listSystemContracts, registerSystemContract, } from "./system-contracts";
 export type { IAlsoImplementsDeclaration, IConsumedContract, IConsumedContractHandle, IConsumedContractOptions, IContractDefinition, IContractEvent, IContractObservable, IContractTable, IContractTool, IPackageDefinitionResult, IResolvedContract, IValidationError, IValidationResult, } from "./types";
 export { contractKey } from "./types";

package/dist/contracts/index.js

@@ -1,7 +1,21 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateImmutability = exports.validateAlsoImplements = exports.contractKey = exports.registerSystemContract = exports.listSystemContracts = exports.installSystemContracts = exports.resolveLogsContract = exports.LOGS_CONTRACT_VERSION = exports.getLogsContractDefinition = exports.getDeviceOperationsContractDefinition = exports.deviceOperationsToolIds = exports.deviceOperationsProviderPackageId = exports.DEVICE_OPERATIONS_MAX_TOOLS = exports.DEVICE_OPERATIONS_MAX_ROWS = exports.DEVICE_OPERATIONS_MAX_RESULT_BYTES = exports.DEVICE_OPERATIONS_MAX_QUERY_LENGTH = exports.DEVICE_OPERATIONS_CONTRACT_VERSION = exports.ContractRegistry = exports.PersistentContractRegistry = exports.setSchemaToFieldsFn = exports.extractToolShape = exports.extractTableShape = exports.createLocalContractConsumer = exports.contractsSchema = exports.contractsMetaData = exports.ContractsTable = exports.Contracts = exports.inProcessTransportPair = exports.connectionContractTransport = exports.CONTRACT_REQUEST_CHANNEL = exports.CONTRACT_NOTIFY_CHANNEL = exports.registerContractResolver = exports.isSelfTrustedContractCaller = exports.handleContractCall = exports.getContractResolver = exports.createUserContextContractProviderRouter = exports.sameUserContractPermissionCheck = exports.createContractProviderSession = exports.createContractProviderEndpoint = exports.createContractProvider = exports.createContractConsumer = exports.CONTRACT_CALL_RPC = exports.contractProvidersSchema = exports.contractProvidersMetaData = exports.ContractProvidersTable = exports.ContractProviders = exports.createContractProviderRouter = exports.PackageBuilder = exports.definePackage = exports.ContractBuilder = void 0;
-exports.validateProviderSatisfiesContract = void 0;
+exports.installSystemContracts = exports.resolveLogsContract = exports.LOGS_CONTRACT_VERSION = exports.getLogsContractDefinition = exports.getDeviceOperationsContractDefinition = exports.deviceOperationsToolIds = exports.deviceOperationsProviderPackageId = exports.DEVICE_OPERATIONS_MAX_TOOLS = exports.DEVICE_OPERATIONS_MAX_ROWS = exports.DEVICE_OPERATIONS_MAX_RESULT_BYTES = exports.DEVICE_OPERATIONS_MAX_QUERY_LENGTH = exports.DEVICE_OPERATIONS_CONTRACT_VERSION = exports.ContractRegistry = exports.PersistentContractRegistry = exports.waitForHostContractTransport = exports.subscribeHostContractTransport = exports.registerHostContractTransport = exports.getHostContractTransport = exports.setSchemaToFieldsFn = exports.extractToolShape = exports.extractTableShape = exports.createLocalContractConsumer = exports.contractsSchema = exports.contractsMetaData = exports.ContractsTable = exports.Contracts = exports.inProcessTransportPair = exports.connectionContractTransport = exports.CONTRACT_REQUEST_CHANNEL = exports.CONTRACT_NOTIFY_CHANNEL = exports.registerContractResolver = exports.isSelfTrustedContractCaller = exports.handleContractCall = exports.getContractResolver = exports.createUserContextContractProviderRouter = exports.createLocalUserContextContractProviderRouter = exports.sameUserContractPermissionCheck = exports.createContractProviderSession = exports.createContractProviderEndpoint = exports.createContractProvider = exports.createContractConsumer = exports.CONTRACT_CALL_RPC = exports.contractProvidersSchema = exports.contractProvidersMetaData = exports.ContractProvidersTable = exports.ContractProviders = exports.createContractProviderRouter = exports.PackageBuilder = exports.definePackage = exports.ContractBuilder = void 0;
+exports.validateProviderSatisfiesContract = exports.validateImmutability = exports.validateAlsoImplements = exports.contractKey = exports.registerSystemContract = exports.listSystemContracts = void 0;
 var builder_1 = require("./builder");
 Object.defineProperty(exports, "ContractBuilder", { enumerable: true, get: function () { return builder_1.ContractBuilder; } });
 Object.defineProperty(exports, "definePackage", { enumerable: true, get: function () { return builder_1.definePackage; } });
@@ -21,6 +35,7 @@ Object.defineProperty(exports, "createContractProviderEndpoint", { enumerable: t
 Object.defineProperty(exports, "createContractProviderSession", { enumerable: true, get: function () { return contract_proxy_1.createContractProviderSession; } });
 Object.defineProperty(exports, "sameUserContractPermissionCheck", { enumerable: true, get: function () { return contract_proxy_1.sameUserContractPermissionCheck; } });
 var contract_resolvers_1 = require("./contract-resolvers");
+Object.defineProperty(exports, "createLocalUserContextContractProviderRouter", { enumerable: true, get: function () { return contract_resolvers_1.createLocalUserContextContractProviderRouter; } });
 Object.defineProperty(exports, "createUserContextContractProviderRouter", { enumerable: true, get: function () { return contract_resolvers_1.createUserContextContractProviderRouter; } });
 Object.defineProperty(exports, "getContractResolver", { enumerable: true, get: function () { return contract_resolvers_1.getContractResolver; } });
 Object.defineProperty(exports, "handleContractCall", { enumerable: true, get: function () { return contract_resolvers_1.handleContractCall; } });
@@ -42,6 +57,11 @@ var extract_1 = require("./extract");
 Object.defineProperty(exports, "extractTableShape", { enumerable: true, get: function () { return extract_1.extractTableShape; } });
 Object.defineProperty(exports, "extractToolShape", { enumerable: true, get: function () { return extract_1.extractToolShape; } });
 Object.defineProperty(exports, "setSchemaToFieldsFn", { enumerable: true, get: function () { return extract_1.setSchemaToFieldsFn; } });
+var host_contract_transport_1 = require("./host-contract-transport");
+Object.defineProperty(exports, "getHostContractTransport", { enumerable: true, get: function () { return host_contract_transport_1.getHostContractTransport; } });
+Object.defineProperty(exports, "registerHostContractTransport", { enumerable: true, get: function () { return host_contract_transport_1.registerHostContractTransport; } });
+Object.defineProperty(exports, "subscribeHostContractTransport", { enumerable: true, get: function () { return host_contract_transport_1.subscribeHostContractTransport; } });
+Object.defineProperty(exports, "waitForHostContractTransport", { enumerable: true, get: function () { return host_contract_transport_1.waitForHostContractTransport; } });
 var persistent_registry_1 = require("./persistent-registry");
 Object.defineProperty(exports, "PersistentContractRegistry", { enumerable: true, get: function () { return persistent_registry_1.PersistentContractRegistry; } });
 var registry_1 = require("./registry");
@@ -59,6 +79,7 @@ var logs_contract_1 = require("./system/logs-contract");
 Object.defineProperty(exports, "getLogsContractDefinition", { enumerable: true, get: function () { return logs_contract_1.getLogsContractDefinition; } });
 Object.defineProperty(exports, "LOGS_CONTRACT_VERSION", { enumerable: true, get: function () { return logs_contract_1.LOGS_CONTRACT_VERSION; } });
 Object.defineProperty(exports, "resolveLogsContract", { enumerable: true, get: function () { return logs_contract_1.resolveLogsContract; } });
+__exportStar(require("./system/network-contracts"), exports);
 var system_contracts_1 = require("./system-contracts");
 Object.defineProperty(exports, "installSystemContracts", { enumerable: true, get: function () { return system_contracts_1.installSystemContracts; } });
 Object.defineProperty(exports, "listSystemContracts", { enumerable: true, get: function () { return system_contracts_1.listSystemContracts; } });

package/dist/contracts/system/index.d.ts

@@ -4,5 +4,7 @@
  */
 import "./device-operations-contract";
 import "./logs-contract";
+import "./network-contracts";
 export { DEVICE_OPERATIONS_CONTRACT_VERSION, DEVICE_OPERATIONS_MAX_QUERY_LENGTH, DEVICE_OPERATIONS_MAX_RESULT_BYTES, DEVICE_OPERATIONS_MAX_ROWS, DEVICE_OPERATIONS_MAX_TOOLS, type DeviceOperationCapability, deviceOperationsProviderPackageId, deviceOperationsToolIds, getDeviceOperationsContractDefinition, type IDeviceDatabaseQueryInput, type IDeviceDatabaseQueryResult, type IDeviceOperationStatus, type IDeviceToolListInput, type IDeviceToolLookupInput, type IDeviceToolLookupResult, type IDeviceToolRunInput, } from "./device-operations-contract";
 export { getLogsContractDefinition, type ILogsConsumer, LOGS_CONTRACT_VERSION, resolveLogsContract, } from "./logs-contract";
+export * from "./network-contracts";

package/dist/contracts/system/index.js

@@ -1,4 +1,18 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveLogsContract = exports.LOGS_CONTRACT_VERSION = exports.getLogsContractDefinition = exports.getDeviceOperationsContractDefinition = exports.deviceOperationsToolIds = exports.deviceOperationsProviderPackageId = exports.DEVICE_OPERATIONS_MAX_TOOLS = exports.DEVICE_OPERATIONS_MAX_ROWS = exports.DEVICE_OPERATIONS_MAX_RESULT_BYTES = exports.DEVICE_OPERATIONS_MAX_QUERY_LENGTH = exports.DEVICE_OPERATIONS_CONTRACT_VERSION = void 0;
 /**
@@ -7,6 +21,7 @@ exports.resolveLogsContract = exports.LOGS_CONTRACT_VERSION = exports.getLogsCon
  */
 require("./device-operations-contract");
 require("./logs-contract");
+require("./network-contracts");
 var device_operations_contract_1 = require("./device-operations-contract");
 Object.defineProperty(exports, "DEVICE_OPERATIONS_CONTRACT_VERSION", { enumerable: true, get: function () { return device_operations_contract_1.DEVICE_OPERATIONS_CONTRACT_VERSION; } });
 Object.defineProperty(exports, "DEVICE_OPERATIONS_MAX_QUERY_LENGTH", { enumerable: true, get: function () { return device_operations_contract_1.DEVICE_OPERATIONS_MAX_QUERY_LENGTH; } });
@@ -20,3 +35,4 @@ var logs_contract_1 = require("./logs-contract");
 Object.defineProperty(exports, "getLogsContractDefinition", { enumerable: true, get: function () { return logs_contract_1.getLogsContractDefinition; } });
 Object.defineProperty(exports, "LOGS_CONTRACT_VERSION", { enumerable: true, get: function () { return logs_contract_1.LOGS_CONTRACT_VERSION; } });
 Object.defineProperty(exports, "resolveLogsContract", { enumerable: true, get: function () { return logs_contract_1.resolveLogsContract; } });
+__exportStar(require("./network-contracts"), exports);

package/dist/contracts/system/network-contracts.d.ts

@@ -0,0 +1,231 @@
+import type { TrustLevel } from "../../device/socket.type";
+import type { IConsoleLog } from "../../logging/console-logs.table";
+import type { Observable } from "../../observable";
+import type { INetworkInfo } from "../../types/peer-device";
+import type { IContractConsumerBase } from "../contract-proxy";
+import type { IContractDefinition } from "../types";
+/** Version of the built-in System Network Diagnostics contract. */
+export declare const NETWORK_DIAGNOSTICS_CONTRACT_VERSION = 1;
+/** Version of the built-in System Network Control contract. */
+export declare const NETWORK_CONTROL_CONTRACT_VERSION = 1;
+/** Stable IDs for tools in System Network Diagnostics v1. */
+export declare const networkDiagnosticsToolIds: {
+    readonly getOverview: "00ms1yb50ym353ads0gel5jpv";
+    readonly getConnections: "00ms1yb50ykny9kdgiclpa1t4";
+    readonly getGroupSyncStatus: "00ms1yb50yp2q7jr0jglzsztq";
+    readonly getDeviceDetails: "00ms1yb50yw792rslve1q99qg";
+    readonly getGroupDetails: "00ms1yb50yuru8h1fg4t9na3e";
+    readonly getDisconnectedDevices: "00ms1yb50y3jpoby5zomltahr";
+    readonly queryRemoteLogs: "00ms1yb50y2fbfnth22yz52eu";
+};
+/** Stable IDs for tools in System Network Control v1. */
+export declare const networkControlToolIds: {
+    readonly refreshNetworkInfo: "00ms1yb50y9rsdyqmr81vjoli";
+    readonly connectToDevice: "00ms1yb50y40ty8tr0sic875x";
+    readonly disconnectDevice: "00ms1yb50yqvboqmhshqvlibr";
+    readonly deleteDevice: "00ms1yb50y5mc448nuavlex86";
+    readonly syncGroupNow: "00ms1yb50ylnqlra26jx232py";
+    readonly resetChangeTracking: "00ms1yb50yfuackpl1w37hmxc";
+};
+/** Overall status shown by the shell's compact network indicator. */
+export type NetworkStatusState = "offline" | "syncing" | "synced" | "error";
+/** Runtime synchronization state for one personal or shared-group context. */
+export type NetworkSyncState = "idle" | "syncing" | "error";
+/** Safe, bounded synchronization error detail suitable for local UI display. */
+export interface INetworkSyncError {
+    dataContextId: string;
+    message: string;
+    occurredAt: number;
+}
+/** Reactive summary consumed by the tabs-strip Network Status indicator. */
+export interface INetworkStatusSummary {
+    state: NetworkStatusState;
+    connectionCount: number;
+    syncingContextCount: number;
+    errorCount: number;
+    lastSuccessfulSyncAt?: number;
+    errors: INetworkSyncError[];
+}
+/** Current synchronization lifecycle for one data context. */
+export interface IDataContextSyncStatus {
+    dataContextId: string;
+    state: NetworkSyncState;
+    lastSuccessfulSyncAt?: number;
+    lastErrorAt?: number;
+    lastError?: string;
+}
+/** Connection/member counts for one personal or shared group. */
+export interface INetworkGroupSummary {
+    groupId: string;
+    groupName: string;
+    connectedDevices: number;
+    totalMembers: number;
+}
+/** Portable overview of the local device's network state. */
+export interface INetworkOverview {
+    localDeviceId: string;
+    localUserId: string;
+    totalConnections: number;
+    availableSlots: number;
+    maxConnections: number;
+    cpuPercent: number;
+    memPercent: number;
+    groups: INetworkGroupSummary[];
+}
+/** Detailed portable information about one active device connection. */
+export interface INetworkConnectionInfo {
+    deviceId: string;
+    userId: string;
+    userName?: string;
+    deviceName?: string;
+    userTrustLevel: TrustLevel;
+    deviceTrustLevel: TrustLevel;
+    connectionState: "connected" | "syncing" | "idle";
+    sharedGroups: string[];
+    roles: Record<string, string>;
+    pathType: "direct" | "indirect" | "unknown";
+    throughDeviceIds?: string[];
+    latencyMs: number;
+    errorRate: number;
+    isServer: boolean;
+    connectionAddress?: string;
+    bytesSent?: number;
+    bytesReceived?: number;
+    sendRateMBps?: number;
+    receiveRateMBps?: number;
+}
+/** Serializable synchronization connection detail for one group. */
+export interface INetworkSyncConnection {
+    deviceId: string;
+    latencyMs: number;
+    errorRate: number;
+    timestampLastApplied?: number;
+    closed?: boolean;
+}
+/** Synchronization status and topology for one data context. */
+export interface INetworkGroupSyncInfo {
+    groupId: string;
+    groupName: string;
+    connectedDevices: INetworkSyncConnection[];
+    preferredDeviceIds: string[];
+    lastSyncTimestamp: number;
+    totalMembers: number;
+    syncStatus: IDataContextSyncStatus;
+}
+/** Detailed portable information about one connected device. */
+export interface INetworkDeviceDetails extends INetworkConnectionInfo {
+    canReadRemoteLogs: boolean;
+    networkInfo?: INetworkInfo;
+    syncStatsByGroup: Record<string, {
+        lastSyncTime: number;
+        isPreferred: boolean;
+    }>;
+}
+/** A known device that does not currently have an active connection. */
+export interface INetworkDisconnectedDevice {
+    deviceId: string;
+    userId: string;
+    userName?: string;
+    trustLevel: TrustLevel;
+    firstSeen: Date;
+    lastSeen: Date;
+    name?: string;
+    serverUrl?: string;
+}
+/** One member shown in Network Viewer's group detail. */
+export interface INetworkGroupMember {
+    userId: string;
+    userName?: string;
+    role: string;
+    trustLevel: TrustLevel;
+}
+/** Detailed portable membership information for one data context. */
+export interface INetworkGroupDetails {
+    groupId: string;
+    groupName: string;
+    founderUserId: string;
+    founderUserName?: string;
+    members: INetworkGroupMember[];
+}
+/** Filters and bounds for a directly connected device's System Logs query. */
+export interface INetworkRemoteLogsQuery {
+    sinceTimestamp?: number;
+    level?: IConsoleLog["level"];
+    process?: string;
+    search?: string;
+    pageSize?: number;
+    timeoutMs?: number;
+}
+/** Bounded remote logs returned through System Network Diagnostics. */
+export interface INetworkRemoteLogsResult {
+    deviceId: string;
+    truncated: boolean;
+    logs: IConsoleLog[];
+    queriedAt: number;
+}
+/** Structured result returned by every System Network Control operation. */
+export interface INetworkControlResult {
+    success: boolean;
+    message: string;
+}
+/** Typed consumer proxy for System Network Diagnostics v1. */
+export interface INetworkDiagnosticsConsumer extends IContractConsumerBase {
+    tools: {
+        getOverview(): Promise<{
+            overview: INetworkOverview;
+        }>;
+        getConnections(): Promise<{
+            connections: INetworkConnectionInfo[];
+        }>;
+        getGroupSyncStatus(input?: {
+            groupId?: string;
+        }): Promise<{
+            groups: INetworkGroupSyncInfo[];
+        }>;
+        getDeviceDetails(input: {
+            deviceId: string;
+        }): Promise<{
+            device?: INetworkDeviceDetails;
+        }>;
+        getGroupDetails(input: {
+            groupId: string;
+        }): Promise<{
+            group?: INetworkGroupDetails;
+        }>;
+        getDisconnectedDevices(): Promise<{
+            devices: INetworkDisconnectedDevice[];
+        }>;
+        queryRemoteLogs(input: {
+            deviceId: string;
+            query?: INetworkRemoteLogsQuery;
+        }): Promise<INetworkRemoteLogsResult>;
+    };
+    observables: {
+        status: Observable<INetworkStatusSummary>;
+    };
+}
+/** Typed consumer proxy for System Network Control v1. */
+export interface INetworkControlConsumer extends IContractConsumerBase {
+    tools: {
+        refreshNetworkInfo(): Promise<INetworkControlResult>;
+        connectToDevice(input: {
+            deviceId: string;
+        }): Promise<INetworkControlResult>;
+        disconnectDevice(input: {
+            deviceId: string;
+        }): Promise<INetworkControlResult>;
+        deleteDevice(input: {
+            deviceId: string;
+        }): Promise<INetworkControlResult>;
+        syncGroupNow(input: {
+            groupId: string;
+        }): Promise<INetworkControlResult>;
+        resetChangeTracking(input: {
+            dataContextId: string;
+        }): Promise<INetworkControlResult>;
+    };
+}
+/** Return the portable read-only network diagnostics contract shape. */
+export declare function getNetworkDiagnosticsContractDefinition(): IContractDefinition;
+/** Return the explicit mutating local network control contract shape. */
+export declare function getNetworkControlContractDefinition(): IContractDefinition;

package/dist/contracts/system/network-contracts.js

@@ -0,0 +1,192 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.networkControlToolIds = exports.networkDiagnosticsToolIds = exports.NETWORK_CONTROL_CONTRACT_VERSION = exports.NETWORK_DIAGNOSTICS_CONTRACT_VERSION = void 0;
+exports.getNetworkDiagnosticsContractDefinition = getNetworkDiagnosticsContractDefinition;
+exports.getNetworkControlContractDefinition = getNetworkControlContractDefinition;
+const system_ids_1 = require("../../system-ids");
+const field_type_1 = require("../../types/field-type");
+const system_contracts_1 = require("../system-contracts");
+/** Version of the built-in System Network Diagnostics contract. */
+exports.NETWORK_DIAGNOSTICS_CONTRACT_VERSION = 1;
+/** Version of the built-in System Network Control contract. */
+exports.NETWORK_CONTROL_CONTRACT_VERSION = 1;
+/** Stable IDs for tools in System Network Diagnostics v1. */
+exports.networkDiagnosticsToolIds = {
+    getOverview: "00ms1yb50ym353ads0gel5jpv",
+    getConnections: "00ms1yb50ykny9kdgiclpa1t4",
+    getGroupSyncStatus: "00ms1yb50yp2q7jr0jglzsztq",
+    getDeviceDetails: "00ms1yb50yw792rslve1q99qg",
+    getGroupDetails: "00ms1yb50yuru8h1fg4t9na3e",
+    getDisconnectedDevices: "00ms1yb50y3jpoby5zomltahr",
+    queryRemoteLogs: "00ms1yb50y2fbfnth22yz52eu",
+};
+/** Stable IDs for tools in System Network Control v1. */
+exports.networkControlToolIds = {
+    refreshNetworkInfo: "00ms1yb50y9rsdyqmr81vjoli",
+    connectToDevice: "00ms1yb50y40ty8tr0sic875x",
+    disconnectDevice: "00ms1yb50yqvboqmhshqvlibr",
+    deleteDevice: "00ms1yb50y5mc448nuavlex86",
+    syncGroupNow: "00ms1yb50ylnqlra26jx232py",
+    resetChangeTracking: "00ms1yb50yfuackpl1w37hmxc",
+};
+const field = (name, type, description, opts = {}) => ({ name, type, description, ...opts });
+let diagnosticsDefinition;
+let controlDefinition;
+/** Return the portable read-only network diagnostics contract shape. */
+function getNetworkDiagnosticsContractDefinition() {
+    diagnosticsDefinition ??= {
+        contractId: system_ids_1.networkDiagnosticsContractId,
+        version: exports.NETWORK_DIAGNOSTICS_CONTRACT_VERSION,
+        devTag: "dev",
+        name: "System Network Diagnostics",
+        description: "Portable local network, connection, and synchronization diagnostics.",
+        tables: [],
+        tools: [
+            {
+                name: "getOverview",
+                usageDescription: "Return aggregate network and group information.",
+                inputFields: [],
+                outputFields: [field("overview", field_type_1.FieldType.object, "Local network overview.")],
+            },
+            {
+                name: "getConnections",
+                usageDescription: "List active device connections and their health.",
+                inputFields: [],
+                outputFields: [
+                    field("connections", field_type_1.FieldType.object, "Active connection details.", { isArray: true }),
+                ],
+            },
+            {
+                name: "getGroupSyncStatus",
+                usageDescription: "Return sync status for one context or every local context.",
+                inputFields: [
+                    field("groupId", field_type_1.FieldType.id, "Optional personal or group context ID.", {
+                        optional: true,
+                    }),
+                ],
+                outputFields: [
+                    field("groups", field_type_1.FieldType.object, "Group synchronization details.", { isArray: true }),
+                ],
+            },
+            {
+                name: "getDeviceDetails",
+                usageDescription: "Return details for one currently connected device.",
+                inputFields: [field("deviceId", field_type_1.FieldType.id, "Connected device ID.")],
+                outputFields: [
+                    field("device", field_type_1.FieldType.object, "Connected device details.", { optional: true }),
+                ],
+            },
+            {
+                name: "getGroupDetails",
+                usageDescription: "Return membership details for one local data context.",
+                inputFields: [field("groupId", field_type_1.FieldType.id, "Personal or group context ID.")],
+                outputFields: [
+                    field("group", field_type_1.FieldType.object, "Group membership details.", { optional: true }),
+                ],
+            },
+            {
+                name: "getDisconnectedDevices",
+                usageDescription: "List known devices without an active connection.",
+                inputFields: [],
+                outputFields: [
+                    field("devices", field_type_1.FieldType.object, "Disconnected device details.", { isArray: true }),
+                ],
+            },
+            {
+                name: "queryRemoteLogs",
+                usageDescription: "Query bounded logs from a directly connected authorized device.",
+                inputFields: [
+                    field("deviceId", field_type_1.FieldType.id, "Connected device ID."),
+                    field("query", field_type_1.FieldType.object, "Optional remote log filters.", { optional: true }),
+                ],
+                outputFields: [
+                    field("deviceId", field_type_1.FieldType.id, "Queried device ID."),
+                    field("truncated", field_type_1.FieldType.boolean, "Whether matching rows were omitted."),
+                    field("logs", field_type_1.FieldType.object, "Matching console logs.", { isArray: true }),
+                    field("queriedAt", field_type_1.FieldType.number, "Local completion timestamp."),
+                ],
+            },
+        ],
+        observables: [
+            {
+                name: "status",
+                description: "Reactive connection and synchronization status summary.",
+                valueType: field_type_1.FieldType.object,
+                writable: false,
+            },
+        ],
+        events: [],
+    };
+    return diagnosticsDefinition;
+}
+/** Return the explicit mutating local network control contract shape. */
+function getNetworkControlContractDefinition() {
+    const deviceInput = [field("deviceId", field_type_1.FieldType.id, "Target device ID.")];
+    const resultFields = [
+        field("success", field_type_1.FieldType.boolean, "Whether the operation completed successfully."),
+        field("message", field_type_1.FieldType.string, "Human-readable operation result."),
+    ];
+    controlDefinition ??= {
+        contractId: system_ids_1.networkControlContractId,
+        version: exports.NETWORK_CONTROL_CONTRACT_VERSION,
+        devTag: "dev",
+        name: "System Network Control",
+        description: "Explicit local device connection and synchronization control operations.",
+        tables: [],
+        tools: [
+            {
+                name: "refreshNetworkInfo",
+                usageDescription: "Refresh network information and preferred connection choices.",
+                inputFields: [],
+                outputFields: resultFields,
+            },
+            {
+                name: "connectToDevice",
+                usageDescription: "Start a connection attempt to one known device.",
+                inputFields: deviceInput,
+                outputFields: resultFields,
+            },
+            {
+                name: "disconnectDevice",
+                usageDescription: "Close the active connection to one device.",
+                inputFields: deviceInput,
+                outputFields: resultFields,
+            },
+            {
+                name: "deleteDevice",
+                usageDescription: "Forget one known, disconnected device.",
+                inputFields: deviceInput,
+                outputFields: resultFields,
+            },
+            {
+                name: "syncGroupNow",
+                usageDescription: "Notify connected devices of changes in one data context.",
+                inputFields: [field("groupId", field_type_1.FieldType.id, "Personal or group context ID.")],
+                outputFields: resultFields,
+            },
+            {
+                name: "resetChangeTracking",
+                usageDescription: "Reset one data context's change tracking for an expensive full sync.",
+                inputFields: [
+                    field("dataContextId", field_type_1.FieldType.id, "Personal or group context ID to reset."),
+                ],
+                outputFields: resultFields,
+            },
+        ],
+        observables: [],
+        events: [],
+    };
+    return controlDefinition;
+}
+(0, system_contracts_1.registerSystemContract)({
+    providerPackageId: system_ids_1.peersSystemPackageId,
+    contractId: system_ids_1.networkDiagnosticsContractId,
+    version: exports.NETWORK_DIAGNOSTICS_CONTRACT_VERSION,
+    getDefinition: getNetworkDiagnosticsContractDefinition,
+});
+(0, system_contracts_1.registerSystemContract)({
+    providerPackageId: system_ids_1.peersSystemPackageId,
+    contractId: system_ids_1.networkControlContractId,
+    version: exports.NETWORK_CONTROL_CONTRACT_VERSION,
+    getDefinition: getNetworkControlContractDefinition,
+});

package/dist/system-ids.d.ts

@@ -32,3 +32,7 @@ export declare const logsContractId = "000peers0logs000000000001";
  * explicit owner-authorized status, bounded read-only database, and installed-tool operations.
  */
 export declare const deviceOperationsContractId = "00mriijkhq94msfe9m2j6quwp";
+/** Contract id for portable read-only network and synchronization diagnostics. */
+export declare const networkDiagnosticsContractId = "00ms1yb50w29oi116uwwrg7rl";
+/** Contract id for explicit local network and synchronization control operations. */
+export declare const networkControlContractId = "00ms1yb50yj9w5qbytl69qfht";

package/dist/system-ids.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deviceOperationsContractId = exports.logsContractId = exports.peersSystemPackageId = exports.peersCorePublishPublicKey = exports.peersCorePackageRepoUrl = exports.peersCorePackageId = exports.runWorkflowToolId = exports.defaultSendMessageToolId = exports.defaultAssistantRunnerToolId = exports.openCodeAssistantId = exports.defaultAssistantId = exports.peersRootUserId = void 0;
+exports.networkControlContractId = exports.networkDiagnosticsContractId = exports.deviceOperationsContractId = exports.logsContractId = exports.peersSystemPackageId = exports.peersCorePublishPublicKey = exports.peersCorePackageRepoUrl = exports.peersCorePackageId = exports.runWorkflowToolId = exports.defaultSendMessageToolId = exports.defaultAssistantRunnerToolId = exports.openCodeAssistantId = exports.defaultAssistantId = exports.peersRootUserId = void 0;
 /** Stable user ID that owns built-in Peers system records. */
 exports.peersRootUserId = "000peers0user000000000001";
 /** Default assistant used when no user-selected assistant is available. */
@@ -36,3 +36,7 @@ exports.logsContractId = "000peers0logs000000000001";
  * explicit owner-authorized status, bounded read-only database, and installed-tool operations.
  */
 exports.deviceOperationsContractId = "00mriijkhq94msfe9m2j6quwp";
+/** Contract id for portable read-only network and synchronization diagnostics. */
+exports.networkDiagnosticsContractId = "00ms1yb50w29oi116uwwrg7rl";
+/** Contract id for explicit local network and synchronization control operations. */
+exports.networkControlContractId = "00ms1yb50yj9w5qbytl69qfht";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peers-app/peers-sdk",
-  "version": "0.21.2",
+  "version": "0.21.3",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/peers-app/peers-sdk.git"