@peers-app/peers-sdk 0.25.18 → 0.25.19

package/dist/contracts/contract-proxy.d.ts

@@ -3,6 +3,7 @@ import type { Table } from "../data/orm/table";
 import type { IToolInstance } from "../data/tools";
 import type { Event, ISubscriptionResult } from "../events";
 import { type Observable } from "../observable";
+import type { IIsolatedCallPrincipal } from "../package-loader/isolated-runtime";
 import { type IContractTransport } from "./contract-transport";
 import type { IContractDefinition, IRemoteContractConsumer } from "./types";
 /**
@@ -233,6 +234,18 @@ export interface IContractToolContext {
      * Absent for trusted local callers (the signed-in UI session and the CLI).
      */
     callerPackageId?: string;
+    /** Trusted frame, retained across host-backed action dispatch; never from arguments. */
+    authority?: IIsolatedCallPrincipal;
+    /** Select a target under this tool’s trusted frame; authority never belongs in arguments. */
+    dispatchTool?: (target: IContractToolTarget, args: unknown) => Promise<any>;
+    /** Checked alias dispatch supplied only by the host provider. */
+    dispatchAction?: (name: string, args: unknown) => Promise<any>;
+    /** Signed actor selected by the host. */
+    actorUserId?: string;
+    /** Incoming host frame for read-only infrastructure projections; preserves the turn ceiling. */
+    callContext?: IContractCallContext;
+    /** Original turn context for read-only catalog projection, before infrastructure admission. */
+    incomingCallContext?: IContractCallContext;
 }
 /**
  * Build the **consumer** side of a contract proxy from a contract definition and a
@@ -304,6 +317,12 @@ export interface IContractResolution {
     version: number;
     tables?: Record<string, Table<any>>;
     tools?: Record<string, IToolInstance>;
+    /** Tool used for alias catalog admission; defaults to a tool requesting preservation. */
+    actionDispatcher?: string;
+    /** Private canonical tools; selectors never carry their own numeric permissions. */
+    actionTools?: Record<string, IToolInstance>;
+    /** Package-owned selector-to-tool mapping, validated by the host. */
+    actionAliases?: Record<string, string>;
     /**
      * Host-only capabilities appended as the final argument to provider tool functions.
      * Omit this for remote or otherwise untrusted provider routes.
@@ -366,6 +385,8 @@ export interface IContractCallContext {
      * In-process only — never serialized across a connection.
      */
     dataContext?: DataContext;
+    /** In-process delegated execution frame. Never serialized or read from a call payload. */
+    authority?: IIsolatedCallPrincipal;
 }
 /**
  * A gate that decides whether a given call is allowed. Runs before dispatch on the
@@ -380,6 +401,25 @@ export type ContractPermissionCheck = (call: IContractCall, context: IContractCa
  * for compatibility and isolated in-process providers that intentionally need the old gate.
  */
 export declare const sameUserContractPermissionCheck: ContractPermissionCheck;
+/** Validate private alias registrations before exposing any action wrapper. */
+export declare function validateContractActions(resolution: IContractResolution): void;
+/**
+ * Project executable aliases using live tool metadata and trusted caller identity.
+ *
+ * Catalog filtering is advisory; execution rechecks every target.
+ */
+export declare function authorizedContractActionNames(resolution: IContractResolution, context: IContractCallContext): Promise<string[]>;
+/** Dynamic local tool reference; provider pinning is required for package-owned actions. */
+export interface IContractToolTarget {
+    contractId: string;
+    version: number;
+    toolName: string;
+    providerPackageId?: string;
+    dataContextId?: string;
+    targetDeviceId?: string;
+}
+/** Host dispatch bridge invoked only with a frame bound by the provider. */
+export type ContractToolDispatch = (target: IContractToolTarget, args: unknown, context: IContractCallContext) => Promise<any>;
 /**
  * Build the **provider** side of a contract proxy: an async handler that permission-checks
  * an {@link IContractCall} and dispatches it to the live table method / tool fn / observable
@@ -390,12 +430,17 @@ export declare const sameUserContractPermissionCheck: ContractPermissionCheck;
  *
  * @param resolution  The live contract implementation to dispatch to.
  * @param opts.permissionCheck  Optional gate run before every dispatch.
+ * @param opts.dispatchTool  Trusted runtime target resolver and invoker for `context.dispatchTool`.
  */
 export declare function createContractProvider(resolution: IContractResolution, opts?: {
     permissionCheck?: ContractPermissionCheck;
+    /** Trusted runtime target resolver and invoker. */
+    dispatchTool?: ContractToolDispatch;
 }): (call: IContractCall, context?: IContractCallContext) => Promise<any>;
 /** Options for {@link createContractProviderSession}. */
 export interface IContractProviderSessionOptions {
+    /** Trusted runtime target resolver and invoker. */
+    dispatchTool?: ContractToolDispatch;
     /** Gate run before every request and every event `subscribe` (see {@link ContractPermissionCheck}). */
     permissionCheck?: ContractPermissionCheck;
     /**
@@ -427,6 +472,8 @@ export interface IContractProviderSession {
 export type ContractNotificationSink = (notification: IContractNotification) => Promise<unknown>;
 /** Options for {@link createContractProviderEndpoint}. */
 export interface IContractProviderEndpointOptions {
+    /** Trusted runtime target resolver and invoker. */
+    dispatchTool?: ContractToolDispatch;
     /** Delivers subscription payloads without binding the endpoint to a transport. */
     notify: ContractNotificationSink;
     /** Optional defense-in-depth gate run before calls and subscription creation. */

package/dist/contracts/contract-proxy.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.sameUserContractPermissionCheck = exports.CONTRACT_CALL_RPC = void 0;
 exports.createContractConsumer = createContractConsumer;
 exports.createRemoteContractConsumer = createRemoteContractConsumer;
+exports.validateContractActions = validateContractActions;
+exports.authorizedContractActionNames = authorizedContractActionNames;
 exports.createContractProvider = createContractProvider;
 exports.createContractProviderEndpoint = createContractProviderEndpoint;
 exports.createContractProviderSession = createContractProviderSession;
@@ -11,6 +13,7 @@ const group_permissions_1 = require("../data/group-permissions");
 const decorators_1 = require("../data/orm/decorators");
 const observable_1 = require("../observable");
 const utils_1 = require("../utils");
+const action_dispatch_1 = require("./action-dispatch");
 const contract_transport_1 = require("./contract-transport");
 const STANDARD_REMOTE_TABLE_METHODS = new Set([
     "get",
@@ -456,8 +459,9 @@ exports.sameUserContractPermissionCheck = sameUserContractPermissionCheck;
 /**
  * Deny a contract tool when the caller’s group/personal access is below the tool.
  *
- * Tools at {@link AccessLevel.None} are unrestricted and do not need a caller
- * identity. Higher levels fail closed if the transport omitted `callerUserId`
+ * Ordinary infrastructure tools at {@link AccessLevel.None} need no caller identity.
+ * Strict dispatch requires trusted identity/context even at None. Higher levels
+ * fail closed if the transport omitted `callerUserId`
  * and `localUserId`. Role lookup uses {@link IContractCallContext.dataContext}
  * when the host attached one, so multi-device processes do not wait on the
  * user-context singleton.
@@ -469,20 +473,97 @@ exports.sameUserContractPermissionCheck = sameUserContractPermissionCheck;
  * @param context - Caller identity from the transport.
  */
 async function assertContractToolAccess(tool, call, context) {
-    const required = (0, access_level_1.resolveAccessLevel)(tool.tool.accessLevel);
-    if (required <= access_level_1.AccessLevel.None) {
-        return;
-    }
+    const mode = tool.tool.authorityPropagation ?? "cap";
+    const required = (0, action_dispatch_1.dispatchAdmissionLevel)(tool.tool.accessLevel, tool.tool.authorityPropagation);
+    const strict = mode === "preserve" || context.authority?.strictActionScope === true;
+    if (strict && call.dataContextId && call.dataContextId !== context.dataContext?.dataContextId)
+        throw new Error("Cross-context action dispatch is denied");
+    if (strict && call.targetDeviceId)
+        throw new Error("Strict delegated calls cannot target another device until authority transport is supported");
     const userId = context.callerUserId ?? context.localUserId;
-    if (!userId) {
-        throw new Error(`Permission denied: missing caller identity for tool '${tool.tool.name}'`);
+    // Preserve unrestricted infrastructure calls outside the bounded action scope.
+    if (!strict && required === access_level_1.AccessLevel.None)
+        return {
+            ...context.authority,
+            userId,
+            userAccessLevel: context.authority?.userAccessLevel ?? access_level_1.AccessLevel.None,
+            strictActionScope: false,
+            callingToolAccessLevel: required,
+            authorityPropagation: "cap",
+        };
+    if ((!userId || (strict && !context.dataContext)) && (strict || required > access_level_1.AccessLevel.None)) {
+        throw new Error(`Permission denied: missing caller identity or trusted context for tool '${tool.tool.name}'`);
+    }
+    const userLevel = userId
+        ? context.dataContext
+            ? await (0, group_permissions_1.getUserAccessLevel)(context.dataContext, userId)
+            : (0, access_level_1.accessLevelFromGroupRole)(await (0, group_permissions_1.getUserRole)(call.dataContextId || context.localUserId || userId, userId))
+        : access_level_1.AccessLevel.None;
+    return (0, action_dispatch_1.authorizeToolDispatch)({ ...context.authority, userId, userAccessLevel: userLevel }, required, mode, strict);
+}
+/** Validate private alias registrations before exposing any action wrapper. */
+function validateContractActions(resolution) {
+    for (const [name, target] of Object.entries(resolution.actionAliases ?? {})) {
+        const tool = resolution.actionTools?.[target];
+        if (!name || !tool || tool.tool.name !== target || target === resolution.actionDispatcher)
+            throw new Error(`Unregistered action target: ${name} -> ${target}`);
+    }
+}
+/**
+ * Project executable aliases using live tool metadata and trusted caller identity.
+ *
+ * Catalog filtering is advisory; execution rechecks every target.
+ */
+async function authorizedContractActionNames(resolution, context) {
+    validateContractActions(resolution);
+    if (!(context.callerUserId ?? context.localUserId) || !context.dataContext)
+        return [];
+    const wrapperName = resolution.actionDispatcher ??
+        Object.keys(resolution.tools ?? {}).find((name) => resolution.tools?.[name].tool.authorityPropagation === "preserve");
+    const wrapper = wrapperName ? resolution.tools?.[wrapperName] : undefined;
+    if (!wrapper)
+        return [];
+    let wrapperAuthority;
+    try {
+        wrapperAuthority = await assertContractToolAccess(wrapper, {
+            contractId: resolution.contractId,
+            version: resolution.version,
+            member: "tool",
+            name: wrapperName,
+            operation: "run",
+            args: [],
+        }, context);
     }
-    const userLevel = context.dataContext
-        ? await (0, group_permissions_1.getUserAccessLevel)(context.dataContext, userId)
-        : (0, access_level_1.accessLevelFromGroupRole)(await (0, group_permissions_1.getUserRole)(call.dataContextId || context.localUserId || userId, userId));
-    if (userLevel < required) {
-        throw new Error(`Permission denied: ${tool.tool.name} requires ${(0, access_level_1.getAccessLevelLabel)(required)} (${required})`);
+    catch {
+        return [];
     }
+    const allowed = [];
+    for (const [name, target] of Object.entries(resolution.actionAliases ?? {})) {
+        try {
+            const action = resolution.actionTools?.[target];
+            if (!action)
+                continue;
+            await assertContractToolAccess(action, {
+                contractId: resolution.contractId,
+                version: resolution.version,
+                member: "tool",
+                name: target,
+                operation: "run",
+                args: [],
+            }, {
+                ...context,
+                authority: {
+                    ...wrapperAuthority,
+                    strictActionScope: true,
+                },
+            });
+            allowed.push(name);
+        }
+        catch {
+            /* Denied aliases are not executable. */
+        }
+    }
+    return allowed;
 }
 /**
  * Build the **provider** side of a contract proxy: an async handler that permission-checks
@@ -494,9 +575,11 @@ async function assertContractToolAccess(tool, call, context) {
  *
  * @param resolution  The live contract implementation to dispatch to.
  * @param opts.permissionCheck  Optional gate run before every dispatch.
+ * @param opts.dispatchTool  Trusted runtime target resolver and invoker for `context.dispatchTool`.
  */
 function createContractProvider(resolution, opts = {}) {
     const { permissionCheck } = opts;
+    validateContractActions(resolution);
     return async (call, context = {}) => {
         if (call.contractId !== resolution.contractId || call.version !== resolution.version) {
             throw new Error(`Contract mismatch: resolution provides ${resolution.contractId} v${resolution.version} ` +
@@ -538,8 +621,13 @@ function createContractProvider(resolution, opts = {}) {
                 if (!tool) {
                     throw new Error(`Contract ${call.contractId} does not provide tool '${call.name}'`);
                 }
-                await assertContractToolAccess(tool, call, context);
-                if (resolution.toolContext || resolution.forwardCallContext) {
+                if (resolution.actionTools && !Object.keys(resolution.actionAliases ?? {}).length)
+                    throw new Error("Action dispatcher requires registered checked actions");
+                const authority = await assertContractToolAccess(tool, call, context);
+                if (resolution.toolContext ||
+                    resolution.forwardCallContext ||
+                    resolution.actionAliases ||
+                    authority.strictActionScope) {
                     if (call.args.length > 1) {
                         throw new Error("Permission denied: tool runs accept a single argument when host context is forwarded");
                     }
@@ -549,9 +637,54 @@ function createContractProvider(resolution, opts = {}) {
                             throw new Error("Persistent variables are not available to this contract tool");
                         },
                     };
+                    const dispatchTool = (frame) => async (target, args) => {
+                        if (target.dataContextId &&
+                            target.dataContextId !== context.dataContext?.dataContextId)
+                            throw new Error("Cross-context action dispatch is denied");
+                        if (target.targetDeviceId)
+                            throw new Error("Strict delegated calls cannot target another device until authority transport is supported");
+                        if (!context.dataContext || !frame.userId)
+                            throw new Error("Missing trusted execution context");
+                        if (!opts.dispatchTool)
+                            throw new Error("Runtime tool dispatch is unavailable");
+                        return opts.dispatchTool(target, args, {
+                            ...context,
+                            authority: (0, action_dispatch_1.narrowActionPrincipal)(frame, true),
+                        });
+                    };
+                    const checkedActionDispatcher = (frame, capabilities) => async (name, args) => {
+                        const target = resolution.actionAliases?.[name];
+                        const action = target ? resolution.actionTools?.[target] : undefined;
+                        if (!target || !action)
+                            throw new Error(`Unknown action selector: ${name}`);
+                        const actionCall = { ...call, name: target, args: [args] };
+                        const actionContext = {
+                            ...context,
+                            authority: { ...frame, strictActionScope: true },
+                        };
+                        const checked = await assertContractToolAccess(action, actionCall, actionContext);
+                        return action.toolFn(args, {
+                            ...capabilities,
+                            callerPackageId: context.callerPackageId,
+                            actorUserId: checked.userId,
+                            authority: checked,
+                            callContext: { ...context, authority: checked },
+                            incomingCallContext: actionContext,
+                            dispatchAction: checkedActionDispatcher(checked, capabilities),
+                            dispatchTool: dispatchTool(checked),
+                        });
+                    };
                     return tool.toolFn(call.args[0], {
                         ...base,
                         callerPackageId: context.callerPackageId,
+                        actorUserId: authority.userId,
+                        callContext: { ...context, authority },
+                        incomingCallContext: context,
+                        dispatchTool: dispatchTool(authority),
+                        authority,
+                        dispatchAction: resolution.actionAliases
+                            ? checkedActionDispatcher(authority, base)
+                            : undefined,
                     });
                 }
                 return tool.toolFn(...call.args);
@@ -600,7 +733,10 @@ function createContractProvider(resolution, opts = {}) {
  */
 function createContractProviderEndpoint(resolution, opts) {
     const { notify, permissionCheck, context: defaultContext } = opts;
-    const dispatch = createContractProvider(resolution, { permissionCheck });
+    const dispatch = createContractProvider(resolution, {
+        permissionCheck,
+        dispatchTool: opts.dispatchTool,
+    });
     // One live subscription per resolved subscription key, refcounted by the subscribers
     // currently attached to it, plus a reverse index for unsubscribe. Each subscriber keeps
     // the caller context from its subscribe call so event filters can differ per consumer.

package/dist/contracts/index.d.ts

@@ -1,7 +1,8 @@
+export * from "./action-dispatch";
 export { ContractBuilder, definePackage, PackageBuilder } from "./builder";
 export { type ContractCallAuthorizer, type ContractProviderEndpointResolver, type ContractProviderPackageResolver, createContractProviderRouter, type IAuthorizedContractRoute, type IContractProviderEndpointRequest, type IContractProviderRouter, type IContractProviderRouterOptions, } from "./contract-provider-router";
 export { ContractProviders, ContractProvidersTable, contractProvidersMetaData, contractProvidersSchema, type IContractProviderRecord, } from "./contract-providers.table";
-export { CONTRACT_CALL_RPC, type ContractMemberType, type ContractNotificationSink, type ContractPermissionCheck, createContractConsumer, createContractProvider, createContractProviderEndpoint, createContractProviderSession, createRemoteContractConsumer, type IContractCall, type IContractCallContext, type IContractConsumer, type IContractConsumerBase, type IContractNotification, type IContractProviderEndpoint, type IContractProviderEndpointOptions, type IContractProviderSession, type IContractProviderSessionOptions, type IContractResolution, type IContractTableProxy, type IContractToolContext, type ITableProxy, sameUserContractPermissionCheck, } from "./contract-proxy";
+export { authorizedContractActionNames, CONTRACT_CALL_RPC, type ContractMemberType, type ContractNotificationSink, type ContractPermissionCheck, type ContractToolDispatch, createContractConsumer, createContractProvider, createContractProviderEndpoint, createContractProviderSession, createRemoteContractConsumer, type IContractCall, type IContractCallContext, type IContractConsumer, type IContractConsumerBase, type IContractNotification, type IContractProviderEndpoint, type IContractProviderEndpointOptions, type IContractProviderSession, type IContractProviderSessionOptions, type IContractResolution, type IContractTableProxy, type IContractToolContext, type IContractToolTarget, type ITableProxy, sameUserContractPermissionCheck, validateContractActions, } from "./contract-proxy";
 export { authorizeRemoteContractCall, type ContractRemoteIdentity, type ContractResolver, createLocalUserContextContractProviderRouter, createUserContextContractProviderRouter, getContractResolver, handleContractCall, type IContractResolverRegistrationOptions, type ILocalContractVariableRequest, isSelfTrustedContractCaller, type LocalContractVariableResolver, registerContractResolver, verifyRemoteContractIdentity, } from "./contract-resolvers";
 export { CONTRACT_NOTIFY_CHANNEL, CONTRACT_REQUEST_CHANNEL, connectionContractTransport, type IContractTransport, type IDuplexEmitter, inProcessTransportPair, } from "./contract-transport";
 export { Contracts, ContractsTable, contractsMetaData, contractsSchema, type IContractRecord, } from "./contracts.table";

package/dist/contracts/index.js

@@ -14,8 +14,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEVICE_OPERATIONS_CONTRACT_VERSION = exports.getContractCatalogDefinition = exports.contractCatalogProviderPackageId = exports.CONTRACT_CATALOG_VERSION = exports.setRemoteContractTransportFactory = exports.resolveRemoteTargetEndpoint = exports.getRemoteContractTransportFactory = exports.createRemoteContractEndpoint = exports.ContractRegistry = exports.PersistentContractRegistry = exports.waitForHostContractTransport = exports.subscribeHostContractTransport = exports.registerHostContractTransport = exports.getHostContractTransport = exports.hostContractConsumer = exports.setSchemaToFieldsFn = exports.extractToolShape = exports.extractTableShape = exports.createLocalContractConsumer = exports.contractsSchema = exports.contractsMetaData = exports.ContractsTable = exports.Contracts = exports.inProcessTransportPair = exports.connectionContractTransport = exports.CONTRACT_REQUEST_CHANNEL = exports.CONTRACT_NOTIFY_CHANNEL = exports.verifyRemoteContractIdentity = exports.registerContractResolver = exports.isSelfTrustedContractCaller = exports.handleContractCall = exports.getContractResolver = exports.createUserContextContractProviderRouter = exports.createLocalUserContextContractProviderRouter = exports.authorizeRemoteContractCall = exports.sameUserContractPermissionCheck = exports.createRemoteContractConsumer = exports.createContractProviderSession = exports.createContractProviderEndpoint = exports.createContractProvider = exports.createContractConsumer = exports.CONTRACT_CALL_RPC = exports.contractProvidersSchema = exports.contractProvidersMetaData = exports.ContractProvidersTable = exports.ContractProviders = exports.createContractProviderRouter = exports.PackageBuilder = exports.definePackage = exports.ContractBuilder = void 0;
-exports.validateProviderSatisfiesContract = exports.validateImmutability = exports.validateAlsoImplements = exports.contractKey = exports.registerSystemContract = exports.listSystemContracts = exports.installSystemContracts = exports.TOOL_ACCESS_CONTROL_CONTRACT_VERSION = exports.getToolAccessControlContractDefinition = exports.schedulerProviderPackageId = exports.SCHEDULER_MAX_DELAY_MS = exports.SCHEDULER_CONTRACT_VERSION = exports.getSchedulerContractDefinition = exports.resolveLogsContract = exports.LOGS_CONTRACT_VERSION = exports.getLogsContractDefinition = exports.localFoldersProviderPackageId = exports.LOCAL_FOLDERS_RESERVED_DIR = exports.LOCAL_FOLDERS_READ_RANGE_MAX = exports.LOCAL_FOLDERS_JOB_TTL_MS = exports.LOCAL_FOLDERS_HAVE_BATCH = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BYTES = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BLOCKS = exports.LOCAL_FOLDERS_CONTRACT_VERSION = exports.LOCAL_FOLDERS_CHUNK_MIN = exports.LOCAL_FOLDERS_CHUNK_MAX = exports.LOCAL_FOLDERS_CHUNK_AVG = exports.LOCAL_FOLDERS_ASSEMBLE_STALL_MS = exports.getLocalFoldersContractDefinition = exports.INVITES_CONTRACT_VERSION = exports.getInvitesContractDefinition = exports.IDENTITY_CONTRACT_VERSION = exports.getIdentityContractDefinition = exports.httpProviderPackageId = exports.HTTP_MAX_TIMEOUT_MS = exports.HTTP_MAX_BODY_BYTES = exports.HTTP_DEFAULT_TIMEOUT_MS = exports.HTTP_CONTRACT_VERSION = exports.getHttpContractDefinition = exports.getDeviceOperationsContractDefinition = exports.deviceOperationsToolIds = exports.deviceOperationsProviderPackageId = exports.DEVICE_OPERATIONS_MAX_TOOLS = exports.DEVICE_OPERATIONS_MAX_ROWS = exports.DEVICE_OPERATIONS_MAX_RESULT_BYTES = exports.DEVICE_OPERATIONS_MAX_QUERY_LENGTH = void 0;
+exports.contractCatalogProviderPackageId = exports.CONTRACT_CATALOG_VERSION = exports.setRemoteContractTransportFactory = exports.resolveRemoteTargetEndpoint = exports.getRemoteContractTransportFactory = exports.createRemoteContractEndpoint = exports.ContractRegistry = exports.PersistentContractRegistry = exports.waitForHostContractTransport = exports.subscribeHostContractTransport = exports.registerHostContractTransport = exports.getHostContractTransport = exports.hostContractConsumer = exports.setSchemaToFieldsFn = exports.extractToolShape = exports.extractTableShape = exports.createLocalContractConsumer = exports.contractsSchema = exports.contractsMetaData = exports.ContractsTable = exports.Contracts = exports.inProcessTransportPair = exports.connectionContractTransport = exports.CONTRACT_REQUEST_CHANNEL = exports.CONTRACT_NOTIFY_CHANNEL = exports.verifyRemoteContractIdentity = exports.registerContractResolver = exports.isSelfTrustedContractCaller = exports.handleContractCall = exports.getContractResolver = exports.createUserContextContractProviderRouter = exports.createLocalUserContextContractProviderRouter = exports.authorizeRemoteContractCall = exports.validateContractActions = exports.sameUserContractPermissionCheck = exports.createRemoteContractConsumer = exports.createContractProviderSession = exports.createContractProviderEndpoint = exports.createContractProvider = exports.createContractConsumer = exports.CONTRACT_CALL_RPC = exports.authorizedContractActionNames = exports.contractProvidersSchema = exports.contractProvidersMetaData = exports.ContractProvidersTable = exports.ContractProviders = exports.createContractProviderRouter = exports.PackageBuilder = exports.definePackage = exports.ContractBuilder = void 0;
+exports.validateProviderSatisfiesContract = exports.validateImmutability = exports.validateAlsoImplements = exports.contractKey = exports.registerSystemContract = exports.listSystemContracts = exports.installSystemContracts = exports.TOOL_ACCESS_CONTROL_CONTRACT_VERSION = exports.getToolAccessControlContractDefinition = exports.schedulerProviderPackageId = exports.SCHEDULER_MAX_DELAY_MS = exports.SCHEDULER_CONTRACT_VERSION = exports.getSchedulerContractDefinition = exports.resolveLogsContract = exports.LOGS_CONTRACT_VERSION = exports.getLogsContractDefinition = exports.localFoldersProviderPackageId = exports.LOCAL_FOLDERS_RESERVED_DIR = exports.LOCAL_FOLDERS_READ_RANGE_MAX = exports.LOCAL_FOLDERS_JOB_TTL_MS = exports.LOCAL_FOLDERS_HAVE_BATCH = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BYTES = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BLOCKS = exports.LOCAL_FOLDERS_CONTRACT_VERSION = exports.LOCAL_FOLDERS_CHUNK_MIN = exports.LOCAL_FOLDERS_CHUNK_MAX = exports.LOCAL_FOLDERS_CHUNK_AVG = exports.LOCAL_FOLDERS_ASSEMBLE_STALL_MS = exports.getLocalFoldersContractDefinition = exports.INVITES_CONTRACT_VERSION = exports.getInvitesContractDefinition = exports.IDENTITY_CONTRACT_VERSION = exports.getIdentityContractDefinition = exports.httpProviderPackageId = exports.HTTP_MAX_TIMEOUT_MS = exports.HTTP_MAX_BODY_BYTES = exports.HTTP_DEFAULT_TIMEOUT_MS = exports.HTTP_CONTRACT_VERSION = exports.getHttpContractDefinition = exports.getDeviceOperationsContractDefinition = exports.deviceOperationsToolIds = exports.deviceOperationsProviderPackageId = exports.DEVICE_OPERATIONS_MAX_TOOLS = exports.DEVICE_OPERATIONS_MAX_ROWS = exports.DEVICE_OPERATIONS_MAX_RESULT_BYTES = exports.DEVICE_OPERATIONS_MAX_QUERY_LENGTH = exports.DEVICE_OPERATIONS_CONTRACT_VERSION = exports.getContractCatalogDefinition = void 0;
+__exportStar(require("./action-dispatch"), exports);
 var builder_1 = require("./builder");
 Object.defineProperty(exports, "ContractBuilder", { enumerable: true, get: function () { return builder_1.ContractBuilder; } });
 Object.defineProperty(exports, "definePackage", { enumerable: true, get: function () { return builder_1.definePackage; } });
@@ -28,6 +29,7 @@ Object.defineProperty(exports, "ContractProvidersTable", { enumerable: true, get
 Object.defineProperty(exports, "contractProvidersMetaData", { enumerable: true, get: function () { return contract_providers_table_1.contractProvidersMetaData; } });
 Object.defineProperty(exports, "contractProvidersSchema", { enumerable: true, get: function () { return contract_providers_table_1.contractProvidersSchema; } });
 var contract_proxy_1 = require("./contract-proxy");
+Object.defineProperty(exports, "authorizedContractActionNames", { enumerable: true, get: function () { return contract_proxy_1.authorizedContractActionNames; } });
 Object.defineProperty(exports, "CONTRACT_CALL_RPC", { enumerable: true, get: function () { return contract_proxy_1.CONTRACT_CALL_RPC; } });
 Object.defineProperty(exports, "createContractConsumer", { enumerable: true, get: function () { return contract_proxy_1.createContractConsumer; } });
 Object.defineProperty(exports, "createContractProvider", { enumerable: true, get: function () { return contract_proxy_1.createContractProvider; } });
@@ -35,6 +37,7 @@ Object.defineProperty(exports, "createContractProviderEndpoint", { enumerable: t
 Object.defineProperty(exports, "createContractProviderSession", { enumerable: true, get: function () { return contract_proxy_1.createContractProviderSession; } });
 Object.defineProperty(exports, "createRemoteContractConsumer", { enumerable: true, get: function () { return contract_proxy_1.createRemoteContractConsumer; } });
 Object.defineProperty(exports, "sameUserContractPermissionCheck", { enumerable: true, get: function () { return contract_proxy_1.sameUserContractPermissionCheck; } });
+Object.defineProperty(exports, "validateContractActions", { enumerable: true, get: function () { return contract_proxy_1.validateContractActions; } });
 var contract_resolvers_1 = require("./contract-resolvers");
 Object.defineProperty(exports, "authorizeRemoteContractCall", { enumerable: true, get: function () { return contract_resolvers_1.authorizeRemoteContractCall; } });
 Object.defineProperty(exports, "createLocalUserContextContractProviderRouter", { enumerable: true, get: function () { return contract_resolvers_1.createLocalUserContextContractProviderRouter; } });

package/dist/contracts/system/contract-catalog-contract.d.ts

@@ -11,6 +11,8 @@ export interface IContractProviderInfo {
     name: string;
     /** True when this package is the active provider for the contract version. */
     active: boolean;
+    /** Executable package selectors for this trusted turn. Missing metadata grants no actions. */
+    authorizedActions?: string[];
 }
 /** Input for listing providers of one contract version. */
 export interface IListContractProvidersInput {

package/dist/data/messages.d.ts

@@ -18,8 +18,8 @@ export declare const messageSchema: z.ZodObject<{
     channelId: string;
     messageId: string;
     assistantId?: string | undefined;
-    vars?: z.objectOutputType<{}, z.ZodAny, "strip"> | undefined;
     messageParentId?: string | undefined;
+    vars?: z.objectOutputType<{}, z.ZodAny, "strip"> | undefined;
     editedAt?: Date | undefined;
     fileIds?: string[] | undefined;
 }, {
@@ -29,8 +29,8 @@ export declare const messageSchema: z.ZodObject<{
     channelId: string;
     messageId: string;
     assistantId?: string | undefined;
-    vars?: z.objectInputType<{}, z.ZodAny, "strip"> | undefined;
     messageParentId?: string | undefined;
+    vars?: z.objectInputType<{}, z.ZodAny, "strip"> | undefined;
     editedAt?: Date | undefined;
     fileIds?: string[] | undefined;
 }>;
@@ -42,8 +42,8 @@ export declare function Messages(dataContext?: DataContext): import("..").Table<
     channelId: string;
     messageId: string;
     assistantId?: string | undefined;
-    vars?: z.objectOutputType<{}, z.ZodAny, "strip"> | undefined;
     messageParentId?: string | undefined;
+    vars?: z.objectOutputType<{}, z.ZodAny, "strip"> | undefined;
     editedAt?: Date | undefined;
     fileIds?: string[] | undefined;
 }>;

package/dist/data/package-versions.d.ts

@@ -66,17 +66,17 @@ declare const schema: z.ZodObject<{
         signature: string;
         by: string;
     }[] | undefined;
-    versionTag?: string | undefined;
-    routesBundleFileId?: string | undefined;
-    routesBundleFileHash?: string | undefined;
-    uiBundleFileId?: string | undefined;
-    uiBundleFileHash?: string | undefined;
     appNavs?: {
         name: string;
         iconClassName: string;
         navigationPath: string;
         displayName?: string | undefined;
     }[] | undefined;
+    versionTag?: string | undefined;
+    routesBundleFileId?: string | undefined;
+    routesBundleFileHash?: string | undefined;
+    uiBundleFileId?: string | undefined;
+    uiBundleFileHash?: string | undefined;
     packageAuthorSignature?: string | undefined;
 }, {
     version: string;
@@ -94,17 +94,17 @@ declare const schema: z.ZodObject<{
         signature: string;
         by: string;
     }[] | undefined;
-    versionTag?: string | undefined;
-    routesBundleFileId?: string | undefined;
-    routesBundleFileHash?: string | undefined;
-    uiBundleFileId?: string | undefined;
-    uiBundleFileHash?: string | undefined;
     appNavs?: {
         name: string;
         iconClassName: string;
         navigationPath: string;
         displayName?: string | undefined;
     }[] | undefined;
+    versionTag?: string | undefined;
+    routesBundleFileId?: string | undefined;
+    routesBundleFileHash?: string | undefined;
+    uiBundleFileId?: string | undefined;
+    uiBundleFileHash?: string | undefined;
     packageAuthorSignature?: string | undefined;
 }>;
 export type IPackageVersion = z.infer<typeof schema>;

package/dist/data/tool-access.d.ts

@@ -65,12 +65,14 @@ export declare function hashToolArgs(args: Record<string, unknown> | undefined):
  */
 export declare function annotateToolAccessDescription(usageDescription: string, accessLevel: unknown): string;
 /**
- * Return the fail-closed access level for a record that may omit the field.
+ * Resolve admission from record metadata. Omitted preservation-request tools enter at None;
+ * ordinary tools and Assistants retain the fail-closed Self default.
  *
  * @param record - Tool or Assistant-like object.
  */
 export declare function recordAccessLevel(record: {
     accessLevel?: unknown;
+    authorityPropagation?: unknown;
 } | undefined): number;
 /**
  * Choose the delegated Assistant ceiling for a run.

package/dist/data/tool-access.js

@@ -105,13 +105,16 @@ function annotateToolAccessDescription(usageDescription, accessLevel) {
     return `${usageDescription}\n\n${annotation}`;
 }
 /**
- * Return the fail-closed access level for a record that may omit the field.
+ * Resolve admission from record metadata. Omitted preservation-request tools enter at None;
+ * ordinary tools and Assistants retain the fail-closed Self default.
  *
  * @param record - Tool or Assistant-like object.
  */
 function recordAccessLevel(record) {
     return record?.accessLevel == null
-        ? access_level_1.DEFAULT_ACCESS_LEVEL
+        ? record?.authorityPropagation === "preserve"
+            ? access_level_1.AccessLevel.None
+            : access_level_1.DEFAULT_ACCESS_LEVEL
         : (0, access_level_1.resolveAccessLevel)(record.accessLevel);
 }
 /**

package/dist/data/tool-access.test.js

@@ -59,6 +59,13 @@ describe("annotateToolAccessDescription", () => {
         expect((0, tool_access_1.annotateToolAccessDescription)(once, 40)).toBe(once);
     });
 });
+test("legacy host admission and descriptions use the preservation request, not a grant", () => {
+    const tool = { authorityPropagation: "preserve" };
+    expect((0, tool_access_1.recordAccessLevel)(tool)).toBe(0);
+    expect((0, tool_access_1.annotateToolAccessDescription)("route", (0, tool_access_1.recordAccessLevel)(tool))).toContain("None (0)");
+    expect((0, tool_access_1.recordAccessLevel)({})).toBe(100);
+    expect((0, tool_access_1.recordAccessLevel)({ ...tool, accessLevel: 40 })).toBe(40);
+});
 describe("recordAccessLevel", () => {
     it("defaults missing records to 100", () => {
         expect((0, tool_access_1.recordAccessLevel)(undefined)).toBe(100);

package/dist/data/tools.d.ts

@@ -219,7 +219,8 @@ export declare const toolSchema: z.ZodObject<{
     codeRepository: z.ZodOptional<z.ZodString>;
     isAssistantRunner: z.ZodOptional<z.ZodBoolean>;
     packageId: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
-    accessLevel: z.ZodDefault<z.ZodNumber>;
+    authorityPropagation: z.ZodOptional<z.ZodEnum<["cap", "preserve"]>>;
+    accessLevel: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
     remoteAccessLevel: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     code: string;
@@ -250,7 +251,6 @@ export declare const toolSchema: z.ZodObject<{
             subType?: string | undefined;
         }[];
     };
-    accessLevel: number;
     detailedDescription?: string | undefined;
     configSchema?: {
         type: IOSchemaType;
@@ -267,6 +267,8 @@ export declare const toolSchema: z.ZodObject<{
     codeRepository?: string | undefined;
     isAssistantRunner?: boolean | undefined;
     packageId?: string | undefined;
+    authorityPropagation?: "preserve" | "cap" | undefined;
+    accessLevel?: number | undefined;
     remoteAccessLevel?: number | undefined;
 }, {
     name: string;
@@ -313,6 +315,7 @@ export declare const toolSchema: z.ZodObject<{
     codeRepository?: string | undefined;
     isAssistantRunner?: boolean | undefined;
     packageId?: string | undefined;
+    authorityPropagation?: "preserve" | "cap" | undefined;
     accessLevel?: number | undefined;
     remoteAccessLevel?: number | undefined;
 }>;
@@ -359,7 +362,6 @@ export declare function Tools(dataContext?: DataContext): import("..").Table<{
             subType?: string | undefined;
         }[];
     };
-    accessLevel: number;
     detailedDescription?: string | undefined;
     configSchema?: {
         type: IOSchemaType;
@@ -376,5 +378,7 @@ export declare function Tools(dataContext?: DataContext): import("..").Table<{
     codeRepository?: string | undefined;
     isAssistantRunner?: boolean | undefined;
     packageId?: string | undefined;
+    authorityPropagation?: "preserve" | "cap" | undefined;
+    accessLevel?: number | undefined;
     remoteAccessLevel?: number | undefined;
 }>;

package/dist/data/tools.js

@@ -48,7 +48,13 @@ exports.toolSchema = zod_1.z.object({
         .optional()
         .describe("Whether this tool is a model that can be used to run an assistant"),
     packageId: zod_types_1.zodPeerId.optional().describe("The package that installed this tool, if any"),
-    accessLevel: access_level_1.accessLevelSchema.describe("Required access level (0-100) to run this tool. Unclassified tools default to 100 (Self)."),
+    authorityPropagation: zod_1.z
+        .enum(["cap", "preserve"])
+        .optional()
+        .describe("Declared outgoing authority behavior in strict dispatch. 'cap' (default) includes this tool's level in the outgoing ceiling; 'preserve' omits it and passes the caller's authority through."),
+    accessLevel: access_level_1.accessLevelSchema
+        .optional()
+        .describe("Admission level (0-100). Omitted 'preserve' tools enter at None (0); other omitted tools require Self (100)."),
     remoteAccessLevel: zod_1.z
         .number()
         .int()

package/dist/invites/invite-messages.d.ts

@@ -1704,16 +1704,16 @@ export declare const inviteEnvelopeSchema: z.ZodObject<{
         fromPublicKey: string;
     }>;
 }, "strict", z.ZodTypeAny, {
-    v: 1;
     to: string;
+    v: 1;
     box: {
         nonce: string;
         contents: string;
         fromPublicKey: string;
     };
 }, {
-    v: 1;
     to: string;
+    v: 1;
     box: {
         nonce: string;
         contents: string;

package/dist/package-loader/host-authority-loading.test.d.ts

@@ -0,0 +1 @@
+export {};