@peers-app/peers-sdk 0.25.17 → 0.25.19

package/dist/contracts/contract-provider-router.d.ts

@@ -27,10 +27,17 @@ export interface IContractProviderEndpointRequest {
     /** Target contract version. */
     version: number;
     /**
-     * Provider selected by trusted host state. This value is never copied from
-     * an {@link IContractCall} or other guest payload.
+     * Provider selected by trusted host state after any requested provider has
+     * been checked against the registry.
      */
     providerPackageId?: string;
+    /**
+     * Provider named on the call by a local UI consumer.
+     *
+     * Set only when the router was created with `allowRequestedProvider`. Remote
+     * routers leave this unset.
+     */
+    requestedProviderPackageId?: string;
     /** Canonical data context returned by the authorization hook. */
     dataContextId?: string;
     /**
@@ -65,6 +72,13 @@ export interface IContractProviderRouterOptions {
      * provider-aware and automatically selects a new endpoint after a provider switch.
      */
     resolveProviderPackageId?: ContractProviderPackageResolver;
+    /**
+     * When true, a local caller may name `providerPackageId` on the call.
+     *
+     * The resolver must still reject ids that are not registered. Remote routers
+     * leave this false.
+     */
+    allowRequestedProvider?: boolean;
     /** Resolves an endpoint after authorization succeeds. */
     resolveEndpoint: ContractProviderEndpointResolver;
     /** Caller identity derived from the trusted underlying connection/session. */

package/dist/contracts/contract-provider-router.js

@@ -116,16 +116,26 @@ function createContractProviderRouter(transport, opts) {
             if (disposed) {
                 throw new Error("Contract provider router is disposed");
             }
-            const context = authorization.context ?? inboundContext;
+            const context = {
+                ...(authorization.context ?? inboundContext),
+                authority: inboundContext.authority,
+            };
+            if (targetDeviceId && context.authority?.strictActionScope) {
+                throw new Error("Strict delegated calls cannot target another device until authority transport is supported");
+            }
             const routedCall = {
                 ...call,
                 dataContextId: authorization.dataContextId,
             };
+            const requestedProviderPackageId = opts.allowRequestedProvider && !targetDeviceId && typeof call.providerPackageId === "string"
+                ? call.providerPackageId
+                : undefined;
             const endpointRequest = {
                 contractId: call.contractId,
                 version: call.version,
                 dataContextId: authorization.dataContextId,
                 targetDeviceId,
+                requestedProviderPackageId,
                 context,
                 notify,
             };

package/dist/contracts/contract-providers.table.d.ts

@@ -17,15 +17,15 @@ declare const schema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     version: number;
     contractId: string;
-    contractProviderId: string;
     providerPackageId: string;
+    contractProviderId: string;
     isActive: boolean;
     registeredAt: string;
 }, {
     version: number;
     contractId: string;
-    contractProviderId: string;
     providerPackageId: string;
+    contractProviderId: string;
     isActive: boolean;
     registeredAt: string;
 }>;

package/dist/contracts/contract-proxy.d.ts

@@ -3,6 +3,7 @@ import type { Table } from "../data/orm/table";
 import type { IToolInstance } from "../data/tools";
 import type { Event, ISubscriptionResult } from "../events";
 import { type Observable } from "../observable";
+import type { IIsolatedCallPrincipal } from "../package-loader/isolated-runtime";
 import { type IContractTransport } from "./contract-transport";
 import type { IContractDefinition, IRemoteContractConsumer } from "./types";
 /**
@@ -62,6 +63,14 @@ export interface IContractCall {
      * under its own identity.
      */
     targetDeviceId?: string;
+    /**
+     * Provider to address when a contract has more than one.
+     *
+     * Honored by the local UI router after it checks the id is registered, and by
+     * the isolated runtime when the caller declared a consume of this contract.
+     * Remote device routers ignore it and keep the active provider.
+     */
+    providerPackageId?: string;
     /**
      * For any subscription call (a generic `event`, a table `dataChanged`, or an observable
      * value stream): the consumer-chosen id that ties a `"subscribe"` (and its later
@@ -225,6 +234,18 @@ export interface IContractToolContext {
      * Absent for trusted local callers (the signed-in UI session and the CLI).
      */
     callerPackageId?: string;
+    /** Trusted frame, retained across host-backed action dispatch; never from arguments. */
+    authority?: IIsolatedCallPrincipal;
+    /** Select a target under this tool’s trusted frame; authority never belongs in arguments. */
+    dispatchTool?: (target: IContractToolTarget, args: unknown) => Promise<any>;
+    /** Checked alias dispatch supplied only by the host provider. */
+    dispatchAction?: (name: string, args: unknown) => Promise<any>;
+    /** Signed actor selected by the host. */
+    actorUserId?: string;
+    /** Incoming host frame for read-only infrastructure projections; preserves the turn ceiling. */
+    callContext?: IContractCallContext;
+    /** Original turn context for read-only catalog projection, before infrastructure admission. */
+    incomingCallContext?: IContractCallContext;
 }
 /**
  * Build the **consumer** side of a contract proxy from a contract definition and a
@@ -256,9 +277,12 @@ export interface IContractToolContext {
  * @param transport  Bidirectional channel to the provider; requests go out on
  *   {@link CONTRACT_REQUEST_CHANNEL}, notifications arrive on {@link CONTRACT_NOTIFY_CHANNEL}.
  * @param opts.dataContextId  Optional data context to scope every call to.
+ * @param opts.providerPackageId  Optional provider to address. The local host
+ *   accepts it only when that package is registered for this contract version.
  */
 export declare function createContractConsumer(contract: IContractDefinition, transport: IContractTransport, opts?: {
     dataContextId?: string;
+    providerPackageId?: string;
 }): IContractConsumer;
 /**
  * Build the **remote** consumer side of a contract: a factory of tools-only consumers whose
@@ -293,6 +317,12 @@ export interface IContractResolution {
     version: number;
     tables?: Record<string, Table<any>>;
     tools?: Record<string, IToolInstance>;
+    /** Tool used for alias catalog admission; defaults to a tool requesting preservation. */
+    actionDispatcher?: string;
+    /** Private canonical tools; selectors never carry their own numeric permissions. */
+    actionTools?: Record<string, IToolInstance>;
+    /** Package-owned selector-to-tool mapping, validated by the host. */
+    actionAliases?: Record<string, string>;
     /**
      * Host-only capabilities appended as the final argument to provider tool functions.
      * Omit this for remote or otherwise untrusted provider routes.
@@ -355,6 +385,8 @@ export interface IContractCallContext {
      * In-process only — never serialized across a connection.
      */
     dataContext?: DataContext;
+    /** In-process delegated execution frame. Never serialized or read from a call payload. */
+    authority?: IIsolatedCallPrincipal;
 }
 /**
  * A gate that decides whether a given call is allowed. Runs before dispatch on the
@@ -369,6 +401,25 @@ export type ContractPermissionCheck = (call: IContractCall, context: IContractCa
  * for compatibility and isolated in-process providers that intentionally need the old gate.
  */
 export declare const sameUserContractPermissionCheck: ContractPermissionCheck;
+/** Validate private alias registrations before exposing any action wrapper. */
+export declare function validateContractActions(resolution: IContractResolution): void;
+/**
+ * Project executable aliases using live tool metadata and trusted caller identity.
+ *
+ * Catalog filtering is advisory; execution rechecks every target.
+ */
+export declare function authorizedContractActionNames(resolution: IContractResolution, context: IContractCallContext): Promise<string[]>;
+/** Dynamic local tool reference; provider pinning is required for package-owned actions. */
+export interface IContractToolTarget {
+    contractId: string;
+    version: number;
+    toolName: string;
+    providerPackageId?: string;
+    dataContextId?: string;
+    targetDeviceId?: string;
+}
+/** Host dispatch bridge invoked only with a frame bound by the provider. */
+export type ContractToolDispatch = (target: IContractToolTarget, args: unknown, context: IContractCallContext) => Promise<any>;
 /**
  * Build the **provider** side of a contract proxy: an async handler that permission-checks
  * an {@link IContractCall} and dispatches it to the live table method / tool fn / observable
@@ -379,12 +430,17 @@ export declare const sameUserContractPermissionCheck: ContractPermissionCheck;
  *
  * @param resolution  The live contract implementation to dispatch to.
  * @param opts.permissionCheck  Optional gate run before every dispatch.
+ * @param opts.dispatchTool  Trusted runtime target resolver and invoker for `context.dispatchTool`.
  */
 export declare function createContractProvider(resolution: IContractResolution, opts?: {
     permissionCheck?: ContractPermissionCheck;
+    /** Trusted runtime target resolver and invoker. */
+    dispatchTool?: ContractToolDispatch;
 }): (call: IContractCall, context?: IContractCallContext) => Promise<any>;
 /** Options for {@link createContractProviderSession}. */
 export interface IContractProviderSessionOptions {
+    /** Trusted runtime target resolver and invoker. */
+    dispatchTool?: ContractToolDispatch;
     /** Gate run before every request and every event `subscribe` (see {@link ContractPermissionCheck}). */
     permissionCheck?: ContractPermissionCheck;
     /**
@@ -416,6 +472,8 @@ export interface IContractProviderSession {
 export type ContractNotificationSink = (notification: IContractNotification) => Promise<unknown>;
 /** Options for {@link createContractProviderEndpoint}. */
 export interface IContractProviderEndpointOptions {
+    /** Trusted runtime target resolver and invoker. */
+    dispatchTool?: ContractToolDispatch;
     /** Delivers subscription payloads without binding the endpoint to a transport. */
     notify: ContractNotificationSink;
     /** Optional defense-in-depth gate run before calls and subscription creation. */

package/dist/contracts/contract-proxy.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.sameUserContractPermissionCheck = exports.CONTRACT_CALL_RPC = void 0;
 exports.createContractConsumer = createContractConsumer;
 exports.createRemoteContractConsumer = createRemoteContractConsumer;
+exports.validateContractActions = validateContractActions;
+exports.authorizedContractActionNames = authorizedContractActionNames;
 exports.createContractProvider = createContractProvider;
 exports.createContractProviderEndpoint = createContractProviderEndpoint;
 exports.createContractProviderSession = createContractProviderSession;
@@ -11,6 +13,7 @@ const group_permissions_1 = require("../data/group-permissions");
 const decorators_1 = require("../data/orm/decorators");
 const observable_1 = require("../observable");
 const utils_1 = require("../utils");
+const action_dispatch_1 = require("./action-dispatch");
 const contract_transport_1 = require("./contract-transport");
 const STANDARD_REMOTE_TABLE_METHODS = new Set([
     "get",
@@ -73,12 +76,17 @@ exports.CONTRACT_CALL_RPC = contract_transport_1.CONTRACT_REQUEST_CHANNEL;
  * @param transport  Bidirectional channel to the provider; requests go out on
  *   {@link CONTRACT_REQUEST_CHANNEL}, notifications arrive on {@link CONTRACT_NOTIFY_CHANNEL}.
  * @param opts.dataContextId  Optional data context to scope every call to.
+ * @param opts.providerPackageId  Optional provider to address. The local host
+ *   accepts it only when that package is registered for this contract version.
  */
 function createContractConsumer(contract, transport, opts = {}) {
     const { contractId, version } = contract;
-    const { dataContextId } = opts;
+    const { dataContextId, providerPackageId } = opts;
     let disposed = false;
-    const emitRequest = (call) => transport.emit(contract_transport_1.CONTRACT_REQUEST_CHANNEL, call);
+    const emitRequest = (call) => transport.emit(contract_transport_1.CONTRACT_REQUEST_CHANNEL, {
+        ...call,
+        ...(providerPackageId ? { providerPackageId } : {}),
+    });
     const request = (call) => disposed
         ? Promise.reject(new Error(`Contract consumer ${contractId} v${version} is disposed`))
         : emitRequest(call);
@@ -451,8 +459,9 @@ exports.sameUserContractPermissionCheck = sameUserContractPermissionCheck;
 /**
  * Deny a contract tool when the caller’s group/personal access is below the tool.
  *
- * Tools at {@link AccessLevel.None} are unrestricted and do not need a caller
- * identity. Higher levels fail closed if the transport omitted `callerUserId`
+ * Ordinary infrastructure tools at {@link AccessLevel.None} need no caller identity.
+ * Strict dispatch requires trusted identity/context even at None. Higher levels
+ * fail closed if the transport omitted `callerUserId`
  * and `localUserId`. Role lookup uses {@link IContractCallContext.dataContext}
  * when the host attached one, so multi-device processes do not wait on the
  * user-context singleton.
@@ -464,21 +473,98 @@ exports.sameUserContractPermissionCheck = sameUserContractPermissionCheck;
  * @param context - Caller identity from the transport.
  */
 async function assertContractToolAccess(tool, call, context) {
-    const required = (0, access_level_1.resolveAccessLevel)(tool.tool.accessLevel);
-    if (required <= access_level_1.AccessLevel.None) {
-        return;
-    }
+    const mode = tool.tool.authorityPropagation ?? "cap";
+    const required = (0, action_dispatch_1.dispatchAdmissionLevel)(tool.tool.accessLevel, tool.tool.authorityPropagation);
+    const strict = mode === "preserve" || context.authority?.strictActionScope === true;
+    if (strict && call.dataContextId && call.dataContextId !== context.dataContext?.dataContextId)
+        throw new Error("Cross-context action dispatch is denied");
+    if (strict && call.targetDeviceId)
+        throw new Error("Strict delegated calls cannot target another device until authority transport is supported");
     const userId = context.callerUserId ?? context.localUserId;
-    if (!userId) {
-        throw new Error(`Permission denied: missing caller identity for tool '${tool.tool.name}'`);
+    // Preserve unrestricted infrastructure calls outside the bounded action scope.
+    if (!strict && required === access_level_1.AccessLevel.None)
+        return {
+            ...context.authority,
+            userId,
+            userAccessLevel: context.authority?.userAccessLevel ?? access_level_1.AccessLevel.None,
+            strictActionScope: false,
+            callingToolAccessLevel: required,
+            authorityPropagation: "cap",
+        };
+    if ((!userId || (strict && !context.dataContext)) && (strict || required > access_level_1.AccessLevel.None)) {
+        throw new Error(`Permission denied: missing caller identity or trusted context for tool '${tool.tool.name}'`);
     }
-    const userLevel = context.dataContext
-        ? await (0, group_permissions_1.getUserAccessLevel)(context.dataContext, userId)
-        : (0, access_level_1.accessLevelFromGroupRole)(await (0, group_permissions_1.getUserRole)(call.dataContextId || context.localUserId || userId, userId));
-    if (userLevel < required) {
-        throw new Error(`Permission denied: ${tool.tool.name} requires ${(0, access_level_1.getAccessLevelLabel)(required)} (${required})`);
+    const userLevel = userId
+        ? context.dataContext
+            ? await (0, group_permissions_1.getUserAccessLevel)(context.dataContext, userId)
+            : (0, access_level_1.accessLevelFromGroupRole)(await (0, group_permissions_1.getUserRole)(call.dataContextId || context.localUserId || userId, userId))
+        : access_level_1.AccessLevel.None;
+    return (0, action_dispatch_1.authorizeToolDispatch)({ ...context.authority, userId, userAccessLevel: userLevel }, required, mode, strict);
+}
+/** Validate private alias registrations before exposing any action wrapper. */
+function validateContractActions(resolution) {
+    for (const [name, target] of Object.entries(resolution.actionAliases ?? {})) {
+        const tool = resolution.actionTools?.[target];
+        if (!name || !tool || tool.tool.name !== target || target === resolution.actionDispatcher)
+            throw new Error(`Unregistered action target: ${name} -> ${target}`);
     }
 }
+/**
+ * Project executable aliases using live tool metadata and trusted caller identity.
+ *
+ * Catalog filtering is advisory; execution rechecks every target.
+ */
+async function authorizedContractActionNames(resolution, context) {
+    validateContractActions(resolution);
+    if (!(context.callerUserId ?? context.localUserId) || !context.dataContext)
+        return [];
+    const wrapperName = resolution.actionDispatcher ??
+        Object.keys(resolution.tools ?? {}).find((name) => resolution.tools?.[name].tool.authorityPropagation === "preserve");
+    const wrapper = wrapperName ? resolution.tools?.[wrapperName] : undefined;
+    if (!wrapper)
+        return [];
+    let wrapperAuthority;
+    try {
+        wrapperAuthority = await assertContractToolAccess(wrapper, {
+            contractId: resolution.contractId,
+            version: resolution.version,
+            member: "tool",
+            name: wrapperName,
+            operation: "run",
+            args: [],
+        }, context);
+    }
+    catch {
+        return [];
+    }
+    const allowed = [];
+    for (const [name, target] of Object.entries(resolution.actionAliases ?? {})) {
+        try {
+            const action = resolution.actionTools?.[target];
+            if (!action)
+                continue;
+            await assertContractToolAccess(action, {
+                contractId: resolution.contractId,
+                version: resolution.version,
+                member: "tool",
+                name: target,
+                operation: "run",
+                args: [],
+            }, {
+                ...context,
+                authority: {
+                    ...wrapperAuthority,
+                    strictActionScope: true,
+                },
+            });
+            allowed.push(name);
+        }
+        catch {
+            /* Denied aliases are not executable. */
+        }
+    }
+    return allowed;
+}
 /**
  * Build the **provider** side of a contract proxy: an async handler that permission-checks
  * an {@link IContractCall} and dispatches it to the live table method / tool fn / observable
@@ -489,9 +575,11 @@ async function assertContractToolAccess(tool, call, context) {
  *
  * @param resolution  The live contract implementation to dispatch to.
  * @param opts.permissionCheck  Optional gate run before every dispatch.
+ * @param opts.dispatchTool  Trusted runtime target resolver and invoker for `context.dispatchTool`.
  */
 function createContractProvider(resolution, opts = {}) {
     const { permissionCheck } = opts;
+    validateContractActions(resolution);
     return async (call, context = {}) => {
         if (call.contractId !== resolution.contractId || call.version !== resolution.version) {
             throw new Error(`Contract mismatch: resolution provides ${resolution.contractId} v${resolution.version} ` +
@@ -533,17 +621,70 @@ function createContractProvider(resolution, opts = {}) {
                 if (!tool) {
                     throw new Error(`Contract ${call.contractId} does not provide tool '${call.name}'`);
                 }
-                await assertContractToolAccess(tool, call, context);
-                if (resolution.toolContext || resolution.forwardCallContext) {
+                if (resolution.actionTools && !Object.keys(resolution.actionAliases ?? {}).length)
+                    throw new Error("Action dispatcher requires registered checked actions");
+                const authority = await assertContractToolAccess(tool, call, context);
+                if (resolution.toolContext ||
+                    resolution.forwardCallContext ||
+                    resolution.actionAliases ||
+                    authority.strictActionScope) {
+                    if (call.args.length > 1) {
+                        throw new Error("Permission denied: tool runs accept a single argument when host context is forwarded");
+                    }
                     const base = resolution.toolContext ?? {
                         dataContextId: context.dataContext?.dataContextId ?? "",
                         getVariable: async () => {
                             throw new Error("Persistent variables are not available to this contract tool");
                         },
                     };
-                    return tool.toolFn(...call.args, {
+                    const dispatchTool = (frame) => async (target, args) => {
+                        if (target.dataContextId &&
+                            target.dataContextId !== context.dataContext?.dataContextId)
+                            throw new Error("Cross-context action dispatch is denied");
+                        if (target.targetDeviceId)
+                            throw new Error("Strict delegated calls cannot target another device until authority transport is supported");
+                        if (!context.dataContext || !frame.userId)
+                            throw new Error("Missing trusted execution context");
+                        if (!opts.dispatchTool)
+                            throw new Error("Runtime tool dispatch is unavailable");
+                        return opts.dispatchTool(target, args, {
+                            ...context,
+                            authority: (0, action_dispatch_1.narrowActionPrincipal)(frame, true),
+                        });
+                    };
+                    const checkedActionDispatcher = (frame, capabilities) => async (name, args) => {
+                        const target = resolution.actionAliases?.[name];
+                        const action = target ? resolution.actionTools?.[target] : undefined;
+                        if (!target || !action)
+                            throw new Error(`Unknown action selector: ${name}`);
+                        const actionCall = { ...call, name: target, args: [args] };
+                        const actionContext = {
+                            ...context,
+                            authority: { ...frame, strictActionScope: true },
+                        };
+                        const checked = await assertContractToolAccess(action, actionCall, actionContext);
+                        return action.toolFn(args, {
+                            ...capabilities,
+                            callerPackageId: context.callerPackageId,
+                            actorUserId: checked.userId,
+                            authority: checked,
+                            callContext: { ...context, authority: checked },
+                            incomingCallContext: actionContext,
+                            dispatchAction: checkedActionDispatcher(checked, capabilities),
+                            dispatchTool: dispatchTool(checked),
+                        });
+                    };
+                    return tool.toolFn(call.args[0], {
                         ...base,
                         callerPackageId: context.callerPackageId,
+                        actorUserId: authority.userId,
+                        callContext: { ...context, authority },
+                        incomingCallContext: context,
+                        dispatchTool: dispatchTool(authority),
+                        authority,
+                        dispatchAction: resolution.actionAliases
+                            ? checkedActionDispatcher(authority, base)
+                            : undefined,
                     });
                 }
                 return tool.toolFn(...call.args);
@@ -592,7 +733,10 @@ function createContractProvider(resolution, opts = {}) {
  */
 function createContractProviderEndpoint(resolution, opts) {
     const { notify, permissionCheck, context: defaultContext } = opts;
-    const dispatch = createContractProvider(resolution, { permissionCheck });
+    const dispatch = createContractProvider(resolution, {
+        permissionCheck,
+        dispatchTool: opts.dispatchTool,
+    });
     // One live subscription per resolved subscription key, refcounted by the subscribers
     // currently attached to it, plus a reverse index for unsubscribe. Each subscriber keeps
     // the caller context from its subscribe call so event filters can differ per consumer.

package/dist/contracts/contract-resolvers.js

@@ -147,9 +147,12 @@ async function isSelfTrustedContractCaller(userContext, remoteIdentity) {
 }
 const permissionDenied = (call, reason) => new Error(`Permission denied: ${call.member} '${call.name}'.${call.operation} on contract ${call.contractId}${reason ? ` (${reason})` : ""}`);
 const localOnlyContractIds = new Set([
+    system_ids_1.contractCatalogContractId,
+    system_ids_1.httpContractId,
     system_ids_1.identityContractId,
     system_ids_1.invitesContractId,
     system_ids_1.localFoldersContractId,
+    system_ids_1.schedulerContractId,
     system_ids_1.toolAccessControlContractId,
 ]);
 /**
@@ -322,6 +325,7 @@ function resolvesWithoutUser(contractId, version, peekUserContext) {
 function createLocalUserContextContractProviderRouter(transport, opts) {
     const { getUserContext, peekUserContext, allowedContractIds, resolveVariable } = opts;
     return (0, contract_provider_router_1.createContractProviderRouter)(transport, {
+        allowRequestedProvider: true,
         authorizeCall: async (call) => {
             if (allowedContractIds && !allowedContractIds.has(call.contractId)) {
                 throw new Error(`Permission denied: contract ${call.contractId} is not available locally`);
@@ -341,12 +345,19 @@ function createLocalUserContextContractProviderRouter(transport, opts) {
                 context,
             };
         },
-        resolveProviderPackageId: async ({ contractId, version, dataContextId }) => {
+        resolveProviderPackageId: async ({ contractId, version, dataContextId, requestedProviderPackageId, }) => {
             if (resolvesWithoutUser(contractId, version, peekUserContext)) {
                 return undefined;
             }
             const userContext = await getUserContext();
             const dataContext = getAuthorizedLocalDataContext(userContext, dataContextId);
+            if (requestedProviderPackageId) {
+                const registered = dataContext.packageLoader?.contractRegistry.getRegisteredProviderIds(contractId, version) ?? [];
+                if (!registered.includes(requestedProviderPackageId)) {
+                    throw new Error(`Package ${requestedProviderPackageId} is not a registered provider for ${contractId} v${version}`);
+                }
+                return requestedProviderPackageId;
+            }
             return getActiveProviderPackageId(dataContext, contractId, version);
         },
         resolveEndpoint: async (request) => {

package/dist/contracts/index.d.ts

@@ -1,7 +1,8 @@
+export * from "./action-dispatch";
 export { ContractBuilder, definePackage, PackageBuilder } from "./builder";
 export { type ContractCallAuthorizer, type ContractProviderEndpointResolver, type ContractProviderPackageResolver, createContractProviderRouter, type IAuthorizedContractRoute, type IContractProviderEndpointRequest, type IContractProviderRouter, type IContractProviderRouterOptions, } from "./contract-provider-router";
 export { ContractProviders, ContractProvidersTable, contractProvidersMetaData, contractProvidersSchema, type IContractProviderRecord, } from "./contract-providers.table";
-export { CONTRACT_CALL_RPC, type ContractMemberType, type ContractNotificationSink, type ContractPermissionCheck, createContractConsumer, createContractProvider, createContractProviderEndpoint, createContractProviderSession, createRemoteContractConsumer, type IContractCall, type IContractCallContext, type IContractConsumer, type IContractConsumerBase, type IContractNotification, type IContractProviderEndpoint, type IContractProviderEndpointOptions, type IContractProviderSession, type IContractProviderSessionOptions, type IContractResolution, type IContractTableProxy, type IContractToolContext, type ITableProxy, sameUserContractPermissionCheck, } from "./contract-proxy";
+export { authorizedContractActionNames, CONTRACT_CALL_RPC, type ContractMemberType, type ContractNotificationSink, type ContractPermissionCheck, type ContractToolDispatch, createContractConsumer, createContractProvider, createContractProviderEndpoint, createContractProviderSession, createRemoteContractConsumer, type IContractCall, type IContractCallContext, type IContractConsumer, type IContractConsumerBase, type IContractNotification, type IContractProviderEndpoint, type IContractProviderEndpointOptions, type IContractProviderSession, type IContractProviderSessionOptions, type IContractResolution, type IContractTableProxy, type IContractToolContext, type IContractToolTarget, type ITableProxy, sameUserContractPermissionCheck, validateContractActions, } from "./contract-proxy";
 export { authorizeRemoteContractCall, type ContractRemoteIdentity, type ContractResolver, createLocalUserContextContractProviderRouter, createUserContextContractProviderRouter, getContractResolver, handleContractCall, type IContractResolverRegistrationOptions, type ILocalContractVariableRequest, isSelfTrustedContractCaller, type LocalContractVariableResolver, registerContractResolver, verifyRemoteContractIdentity, } from "./contract-resolvers";
 export { CONTRACT_NOTIFY_CHANNEL, CONTRACT_REQUEST_CHANNEL, connectionContractTransport, type IContractTransport, type IDuplexEmitter, inProcessTransportPair, } from "./contract-transport";
 export { Contracts, ContractsTable, contractsMetaData, contractsSchema, type IContractRecord, } from "./contracts.table";
@@ -12,12 +13,15 @@ export { getHostContractTransport, type HostContractTransportListener, registerH
 export { PersistentContractRegistry } from "./persistent-registry";
 export { ContractRegistry, type IContractProviderRegistration } from "./registry";
 export { createRemoteContractEndpoint, getRemoteContractTransportFactory, type IRemoteContractHost, type IRemoteContractTarget, type RemoteContractTransportFactory, resolveRemoteTargetEndpoint, setRemoteContractTransportFactory, } from "./remote-contract-transport";
+export { CONTRACT_CATALOG_VERSION, contractCatalogProviderPackageId, getContractCatalogDefinition, type IContractCatalogConsumer, type IContractProviderInfo, type IListContractProvidersInput, } from "./system/contract-catalog-contract";
 export { DEVICE_OPERATIONS_CONTRACT_VERSION, DEVICE_OPERATIONS_MAX_QUERY_LENGTH, DEVICE_OPERATIONS_MAX_RESULT_BYTES, DEVICE_OPERATIONS_MAX_ROWS, DEVICE_OPERATIONS_MAX_TOOLS, type DeviceOperationCapability, deviceOperationsProviderPackageId, deviceOperationsToolIds, getDeviceOperationsContractDefinition, type IDeviceDatabaseQueryInput, type IDeviceDatabaseQueryResult, type IDeviceOperationStatus, type IDeviceToolListInput, type IDeviceToolLookupInput, type IDeviceToolLookupResult, type IDeviceToolRunInput, } from "./system/device-operations-contract";
+export { getHttpContractDefinition, HTTP_CONTRACT_VERSION, HTTP_DEFAULT_TIMEOUT_MS, HTTP_MAX_BODY_BYTES, HTTP_MAX_TIMEOUT_MS, httpProviderPackageId, type IHttpCancelInput, type IHttpConsumer, type IHttpCredentialInfo, type IHttpMultipartPart, type IHttpPolicyInfo, type IHttpRequestInput, type IHttpRequestResult, } from "./system/http-contract";
 export { getIdentityContractDefinition, IDENTITY_CONTRACT_VERSION, type IIdentityConsumer, type IIdentityKeyInfo, type IIdentityRegistryKey, type IIdentityRotateKeyInput, type IIdentityRotateKeyResult, type IIdentitySessionInfo, } from "./system/identity-contract";
 export { getInvitesContractDefinition, type IAcceptInviteResult, type ICreatedInvite, type IInvitePreview, type IInvitesConsumer, INVITES_CONTRACT_VERSION, } from "./system/invites-contract";
 export { getLocalFoldersContractDefinition, type ILocalFolderAssembleInput, type ILocalFolderAssembleResult, type ILocalFolderChange, type ILocalFolderChangedEvent, type ILocalFolderEntry, type ILocalFolderFileBlocks, type ILocalFolderFileBlocksInput, type ILocalFolderGrantInfo, type ILocalFolderIndexInput, type ILocalFolderIndexResult, type ILocalFolderJobFinishedEvent, type ILocalFolderJobHandle, type ILocalFolderJobInfo, type ILocalFolderJobProgressEvent, type ILocalFolderListInput, type ILocalFolderManifestBlock, type ILocalFolderMoveInput, type ILocalFolderPathInput, type ILocalFolderPurgeTrashInput, type ILocalFolderReadRangeInput, type ILocalFolderReadRangeResult, type ILocalFolderRequestGrantInput, type ILocalFolderStatInput, LOCAL_FOLDERS_ASSEMBLE_STALL_MS, LOCAL_FOLDERS_CHUNK_AVG, LOCAL_FOLDERS_CHUNK_MAX, LOCAL_FOLDERS_CHUNK_MIN, LOCAL_FOLDERS_CONTRACT_VERSION, LOCAL_FOLDERS_GETBLOCKS_MAX_BLOCKS, LOCAL_FOLDERS_GETBLOCKS_MAX_BYTES, LOCAL_FOLDERS_HAVE_BATCH, LOCAL_FOLDERS_JOB_TTL_MS, LOCAL_FOLDERS_READ_RANGE_MAX, LOCAL_FOLDERS_RESERVED_DIR, type LocalFolderChangeKind, type LocalFolderEntryKind, type LocalFolderJobKind, type LocalFolderMode, localFoldersProviderPackageId, } from "./system/local-folders-contract";
 export { getLogsContractDefinition, type ILogsConsumer, LOGS_CONTRACT_VERSION, resolveLogsContract, } from "./system/logs-contract";
 export * from "./system/network-contracts";
+export { getSchedulerContractDefinition, type IScheduleInfo, type IScheduleInput, type ISchedulerConsumer, SCHEDULER_CONTRACT_VERSION, SCHEDULER_MAX_DELAY_MS, schedulerProviderPackageId, } from "./system/scheduler-contract";
 export { getToolAccessControlContractDefinition, type IToolAccessControlConsumer, TOOL_ACCESS_CONTROL_CONTRACT_VERSION, } from "./system/tool-access-control-contract";
 export { type ISystemContractRegistration, installSystemContracts, listSystemContracts, registerSystemContract, } from "./system-contracts";
 export type { IAlsoImplementsDeclaration, IConsumedContract, IConsumedContractHandle, IConsumedContractOptions, IContractDefinition, IContractEvent, IContractObservable, IContractTable, IContractTool, IPackageDefinitionResult, IRemoteContract, IRemoteContractConsumer, IRemoteContractHandle, IResolvedContract, IValidationError, IValidationResult, } from "./types";

package/dist/contracts/index.js

@@ -14,8 +14,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEVICE_OPERATIONS_MAX_ROWS = exports.DEVICE_OPERATIONS_MAX_RESULT_BYTES = exports.DEVICE_OPERATIONS_MAX_QUERY_LENGTH = exports.DEVICE_OPERATIONS_CONTRACT_VERSION = exports.setRemoteContractTransportFactory = exports.resolveRemoteTargetEndpoint = exports.getRemoteContractTransportFactory = exports.createRemoteContractEndpoint = exports.ContractRegistry = exports.PersistentContractRegistry = exports.waitForHostContractTransport = exports.subscribeHostContractTransport = exports.registerHostContractTransport = exports.getHostContractTransport = exports.hostContractConsumer = exports.setSchemaToFieldsFn = exports.extractToolShape = exports.extractTableShape = exports.createLocalContractConsumer = exports.contractsSchema = exports.contractsMetaData = exports.ContractsTable = exports.Contracts = exports.inProcessTransportPair = exports.connectionContractTransport = exports.CONTRACT_REQUEST_CHANNEL = exports.CONTRACT_NOTIFY_CHANNEL = exports.verifyRemoteContractIdentity = exports.registerContractResolver = exports.isSelfTrustedContractCaller = exports.handleContractCall = exports.getContractResolver = exports.createUserContextContractProviderRouter = exports.createLocalUserContextContractProviderRouter = exports.authorizeRemoteContractCall = exports.sameUserContractPermissionCheck = exports.createRemoteContractConsumer = exports.createContractProviderSession = exports.createContractProviderEndpoint = exports.createContractProvider = exports.createContractConsumer = exports.CONTRACT_CALL_RPC = exports.contractProvidersSchema = exports.contractProvidersMetaData = exports.ContractProvidersTable = exports.ContractProviders = exports.createContractProviderRouter = exports.PackageBuilder = exports.definePackage = exports.ContractBuilder = void 0;
-exports.validateProviderSatisfiesContract = exports.validateImmutability = exports.validateAlsoImplements = exports.contractKey = exports.registerSystemContract = exports.listSystemContracts = exports.installSystemContracts = exports.TOOL_ACCESS_CONTROL_CONTRACT_VERSION = exports.getToolAccessControlContractDefinition = exports.resolveLogsContract = exports.LOGS_CONTRACT_VERSION = exports.getLogsContractDefinition = exports.localFoldersProviderPackageId = exports.LOCAL_FOLDERS_RESERVED_DIR = exports.LOCAL_FOLDERS_READ_RANGE_MAX = exports.LOCAL_FOLDERS_JOB_TTL_MS = exports.LOCAL_FOLDERS_HAVE_BATCH = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BYTES = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BLOCKS = exports.LOCAL_FOLDERS_CONTRACT_VERSION = exports.LOCAL_FOLDERS_CHUNK_MIN = exports.LOCAL_FOLDERS_CHUNK_MAX = exports.LOCAL_FOLDERS_CHUNK_AVG = exports.LOCAL_FOLDERS_ASSEMBLE_STALL_MS = exports.getLocalFoldersContractDefinition = exports.INVITES_CONTRACT_VERSION = exports.getInvitesContractDefinition = exports.IDENTITY_CONTRACT_VERSION = exports.getIdentityContractDefinition = exports.getDeviceOperationsContractDefinition = exports.deviceOperationsToolIds = exports.deviceOperationsProviderPackageId = exports.DEVICE_OPERATIONS_MAX_TOOLS = void 0;
+exports.contractCatalogProviderPackageId = exports.CONTRACT_CATALOG_VERSION = exports.setRemoteContractTransportFactory = exports.resolveRemoteTargetEndpoint = exports.getRemoteContractTransportFactory = exports.createRemoteContractEndpoint = exports.ContractRegistry = exports.PersistentContractRegistry = exports.waitForHostContractTransport = exports.subscribeHostContractTransport = exports.registerHostContractTransport = exports.getHostContractTransport = exports.hostContractConsumer = exports.setSchemaToFieldsFn = exports.extractToolShape = exports.extractTableShape = exports.createLocalContractConsumer = exports.contractsSchema = exports.contractsMetaData = exports.ContractsTable = exports.Contracts = exports.inProcessTransportPair = exports.connectionContractTransport = exports.CONTRACT_REQUEST_CHANNEL = exports.CONTRACT_NOTIFY_CHANNEL = exports.verifyRemoteContractIdentity = exports.registerContractResolver = exports.isSelfTrustedContractCaller = exports.handleContractCall = exports.getContractResolver = exports.createUserContextContractProviderRouter = exports.createLocalUserContextContractProviderRouter = exports.authorizeRemoteContractCall = exports.validateContractActions = exports.sameUserContractPermissionCheck = exports.createRemoteContractConsumer = exports.createContractProviderSession = exports.createContractProviderEndpoint = exports.createContractProvider = exports.createContractConsumer = exports.CONTRACT_CALL_RPC = exports.authorizedContractActionNames = exports.contractProvidersSchema = exports.contractProvidersMetaData = exports.ContractProvidersTable = exports.ContractProviders = exports.createContractProviderRouter = exports.PackageBuilder = exports.definePackage = exports.ContractBuilder = void 0;
+exports.validateProviderSatisfiesContract = exports.validateImmutability = exports.validateAlsoImplements = exports.contractKey = exports.registerSystemContract = exports.listSystemContracts = exports.installSystemContracts = exports.TOOL_ACCESS_CONTROL_CONTRACT_VERSION = exports.getToolAccessControlContractDefinition = exports.schedulerProviderPackageId = exports.SCHEDULER_MAX_DELAY_MS = exports.SCHEDULER_CONTRACT_VERSION = exports.getSchedulerContractDefinition = exports.resolveLogsContract = exports.LOGS_CONTRACT_VERSION = exports.getLogsContractDefinition = exports.localFoldersProviderPackageId = exports.LOCAL_FOLDERS_RESERVED_DIR = exports.LOCAL_FOLDERS_READ_RANGE_MAX = exports.LOCAL_FOLDERS_JOB_TTL_MS = exports.LOCAL_FOLDERS_HAVE_BATCH = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BYTES = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BLOCKS = exports.LOCAL_FOLDERS_CONTRACT_VERSION = exports.LOCAL_FOLDERS_CHUNK_MIN = exports.LOCAL_FOLDERS_CHUNK_MAX = exports.LOCAL_FOLDERS_CHUNK_AVG = exports.LOCAL_FOLDERS_ASSEMBLE_STALL_MS = exports.getLocalFoldersContractDefinition = exports.INVITES_CONTRACT_VERSION = exports.getInvitesContractDefinition = exports.IDENTITY_CONTRACT_VERSION = exports.getIdentityContractDefinition = exports.httpProviderPackageId = exports.HTTP_MAX_TIMEOUT_MS = exports.HTTP_MAX_BODY_BYTES = exports.HTTP_DEFAULT_TIMEOUT_MS = exports.HTTP_CONTRACT_VERSION = exports.getHttpContractDefinition = exports.getDeviceOperationsContractDefinition = exports.deviceOperationsToolIds = exports.deviceOperationsProviderPackageId = exports.DEVICE_OPERATIONS_MAX_TOOLS = exports.DEVICE_OPERATIONS_MAX_ROWS = exports.DEVICE_OPERATIONS_MAX_RESULT_BYTES = exports.DEVICE_OPERATIONS_MAX_QUERY_LENGTH = exports.DEVICE_OPERATIONS_CONTRACT_VERSION = exports.getContractCatalogDefinition = void 0;
+__exportStar(require("./action-dispatch"), exports);
 var builder_1 = require("./builder");
 Object.defineProperty(exports, "ContractBuilder", { enumerable: true, get: function () { return builder_1.ContractBuilder; } });
 Object.defineProperty(exports, "definePackage", { enumerable: true, get: function () { return builder_1.definePackage; } });
@@ -28,6 +29,7 @@ Object.defineProperty(exports, "ContractProvidersTable", { enumerable: true, get
 Object.defineProperty(exports, "contractProvidersMetaData", { enumerable: true, get: function () { return contract_providers_table_1.contractProvidersMetaData; } });
 Object.defineProperty(exports, "contractProvidersSchema", { enumerable: true, get: function () { return contract_providers_table_1.contractProvidersSchema; } });
 var contract_proxy_1 = require("./contract-proxy");
+Object.defineProperty(exports, "authorizedContractActionNames", { enumerable: true, get: function () { return contract_proxy_1.authorizedContractActionNames; } });
 Object.defineProperty(exports, "CONTRACT_CALL_RPC", { enumerable: true, get: function () { return contract_proxy_1.CONTRACT_CALL_RPC; } });
 Object.defineProperty(exports, "createContractConsumer", { enumerable: true, get: function () { return contract_proxy_1.createContractConsumer; } });
 Object.defineProperty(exports, "createContractProvider", { enumerable: true, get: function () { return contract_proxy_1.createContractProvider; } });
@@ -35,6 +37,7 @@ Object.defineProperty(exports, "createContractProviderEndpoint", { enumerable: t
 Object.defineProperty(exports, "createContractProviderSession", { enumerable: true, get: function () { return contract_proxy_1.createContractProviderSession; } });
 Object.defineProperty(exports, "createRemoteContractConsumer", { enumerable: true, get: function () { return contract_proxy_1.createRemoteContractConsumer; } });
 Object.defineProperty(exports, "sameUserContractPermissionCheck", { enumerable: true, get: function () { return contract_proxy_1.sameUserContractPermissionCheck; } });
+Object.defineProperty(exports, "validateContractActions", { enumerable: true, get: function () { return contract_proxy_1.validateContractActions; } });
 var contract_resolvers_1 = require("./contract-resolvers");
 Object.defineProperty(exports, "authorizeRemoteContractCall", { enumerable: true, get: function () { return contract_resolvers_1.authorizeRemoteContractCall; } });
 Object.defineProperty(exports, "createLocalUserContextContractProviderRouter", { enumerable: true, get: function () { return contract_resolvers_1.createLocalUserContextContractProviderRouter; } });
@@ -76,6 +79,10 @@ Object.defineProperty(exports, "createRemoteContractEndpoint", { enumerable: tru
 Object.defineProperty(exports, "getRemoteContractTransportFactory", { enumerable: true, get: function () { return remote_contract_transport_1.getRemoteContractTransportFactory; } });
 Object.defineProperty(exports, "resolveRemoteTargetEndpoint", { enumerable: true, get: function () { return remote_contract_transport_1.resolveRemoteTargetEndpoint; } });
 Object.defineProperty(exports, "setRemoteContractTransportFactory", { enumerable: true, get: function () { return remote_contract_transport_1.setRemoteContractTransportFactory; } });
+var contract_catalog_contract_1 = require("./system/contract-catalog-contract");
+Object.defineProperty(exports, "CONTRACT_CATALOG_VERSION", { enumerable: true, get: function () { return contract_catalog_contract_1.CONTRACT_CATALOG_VERSION; } });
+Object.defineProperty(exports, "contractCatalogProviderPackageId", { enumerable: true, get: function () { return contract_catalog_contract_1.contractCatalogProviderPackageId; } });
+Object.defineProperty(exports, "getContractCatalogDefinition", { enumerable: true, get: function () { return contract_catalog_contract_1.getContractCatalogDefinition; } });
 var device_operations_contract_1 = require("./system/device-operations-contract");
 Object.defineProperty(exports, "DEVICE_OPERATIONS_CONTRACT_VERSION", { enumerable: true, get: function () { return device_operations_contract_1.DEVICE_OPERATIONS_CONTRACT_VERSION; } });
 Object.defineProperty(exports, "DEVICE_OPERATIONS_MAX_QUERY_LENGTH", { enumerable: true, get: function () { return device_operations_contract_1.DEVICE_OPERATIONS_MAX_QUERY_LENGTH; } });
@@ -85,6 +92,13 @@ Object.defineProperty(exports, "DEVICE_OPERATIONS_MAX_TOOLS", { enumerable: true
 Object.defineProperty(exports, "deviceOperationsProviderPackageId", { enumerable: true, get: function () { return device_operations_contract_1.deviceOperationsProviderPackageId; } });
 Object.defineProperty(exports, "deviceOperationsToolIds", { enumerable: true, get: function () { return device_operations_contract_1.deviceOperationsToolIds; } });
 Object.defineProperty(exports, "getDeviceOperationsContractDefinition", { enumerable: true, get: function () { return device_operations_contract_1.getDeviceOperationsContractDefinition; } });
+var http_contract_1 = require("./system/http-contract");
+Object.defineProperty(exports, "getHttpContractDefinition", { enumerable: true, get: function () { return http_contract_1.getHttpContractDefinition; } });
+Object.defineProperty(exports, "HTTP_CONTRACT_VERSION", { enumerable: true, get: function () { return http_contract_1.HTTP_CONTRACT_VERSION; } });
+Object.defineProperty(exports, "HTTP_DEFAULT_TIMEOUT_MS", { enumerable: true, get: function () { return http_contract_1.HTTP_DEFAULT_TIMEOUT_MS; } });
+Object.defineProperty(exports, "HTTP_MAX_BODY_BYTES", { enumerable: true, get: function () { return http_contract_1.HTTP_MAX_BODY_BYTES; } });
+Object.defineProperty(exports, "HTTP_MAX_TIMEOUT_MS", { enumerable: true, get: function () { return http_contract_1.HTTP_MAX_TIMEOUT_MS; } });
+Object.defineProperty(exports, "httpProviderPackageId", { enumerable: true, get: function () { return http_contract_1.httpProviderPackageId; } });
 var identity_contract_1 = require("./system/identity-contract");
 Object.defineProperty(exports, "getIdentityContractDefinition", { enumerable: true, get: function () { return identity_contract_1.getIdentityContractDefinition; } });
 Object.defineProperty(exports, "IDENTITY_CONTRACT_VERSION", { enumerable: true, get: function () { return identity_contract_1.IDENTITY_CONTRACT_VERSION; } });
@@ -110,6 +124,11 @@ Object.defineProperty(exports, "getLogsContractDefinition", { enumerable: true,
 Object.defineProperty(exports, "LOGS_CONTRACT_VERSION", { enumerable: true, get: function () { return logs_contract_1.LOGS_CONTRACT_VERSION; } });
 Object.defineProperty(exports, "resolveLogsContract", { enumerable: true, get: function () { return logs_contract_1.resolveLogsContract; } });
 __exportStar(require("./system/network-contracts"), exports);
+var scheduler_contract_1 = require("./system/scheduler-contract");
+Object.defineProperty(exports, "getSchedulerContractDefinition", { enumerable: true, get: function () { return scheduler_contract_1.getSchedulerContractDefinition; } });
+Object.defineProperty(exports, "SCHEDULER_CONTRACT_VERSION", { enumerable: true, get: function () { return scheduler_contract_1.SCHEDULER_CONTRACT_VERSION; } });
+Object.defineProperty(exports, "SCHEDULER_MAX_DELAY_MS", { enumerable: true, get: function () { return scheduler_contract_1.SCHEDULER_MAX_DELAY_MS; } });
+Object.defineProperty(exports, "schedulerProviderPackageId", { enumerable: true, get: function () { return scheduler_contract_1.schedulerProviderPackageId; } });
 var tool_access_control_contract_1 = require("./system/tool-access-control-contract");
 Object.defineProperty(exports, "getToolAccessControlContractDefinition", { enumerable: true, get: function () { return tool_access_control_contract_1.getToolAccessControlContractDefinition; } });
 Object.defineProperty(exports, "TOOL_ACCESS_CONTROL_CONTRACT_VERSION", { enumerable: true, get: function () { return tool_access_control_contract_1.TOOL_ACCESS_CONTROL_CONTRACT_VERSION; } });