@peers-app/peers-sdk 0.25.21 → 0.26.0

package/dist/contracts/contract-resolvers.js

@@ -1,9 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.stagePackageContractResolvers = stagePackageContractResolvers;
+exports.unregisterPackageContractResolvers = unregisterPackageContractResolvers;
 exports.registerContractResolver = registerContractResolver;
 exports.getContractResolver = getContractResolver;
 exports.verifyRemoteContractIdentity = verifyRemoteContractIdentity;
 exports.isSelfTrustedContractCaller = isSelfTrustedContractCaller;
+exports.isLocalOnlyContractId = isLocalOnlyContractId;
 exports.authorizeRemoteContractCall = authorizeRemoteContractCall;
 exports.createLocalUserContextContractProviderRouter = createLocalUserContextContractProviderRouter;
 exports.createUserContextContractProviderRouter = createUserContextContractProviderRouter;
@@ -20,6 +23,47 @@ const contract_proxy_1 = require("./contract-proxy");
 const remote_contract_transport_1 = require("./remote-contract-transport");
 const types_1 = require("./types");
 const resolvers = new Map();
+const packageResolvers = new WeakMap();
+let stagedRegistration;
+/**
+ * Capture synchronous bundle registrations without publishing candidate code.
+ * The returned callback replaces this context's provider resolvers only when
+ * called in the loader's guarded activation turn. Throwing evaluation discards
+ * the batch; asynchronous installation never holds a process-wide capture open.
+ * Package resolvers always require an owning context and cannot change system
+ * signed-out routing or another package's implementation.
+ * @internal
+ */
+function stagePackageContractResolvers(dataContext, providerPackageId, evaluate) {
+    const pending = new Map();
+    const previous = stagedRegistration;
+    stagedRegistration = (contractId, version, resolver, opts = {}) => {
+        if (opts.providerPackageId && opts.providerPackageId !== providerPackageId)
+            throw new Error("A package cannot register another provider's contract resolver");
+        pending.set((0, types_1.contractKey)(contractId, version), resolver);
+    };
+    try {
+        evaluate();
+    }
+    finally {
+        stagedRegistration = previous;
+    }
+    return () => {
+        let providers = packageResolvers.get(dataContext);
+        if (!providers) {
+            providers = new Map();
+            packageResolvers.set(dataContext, providers);
+        }
+        // Give each activation its own resolver identity even if a legacy bundle
+        // reuses a function. Retained unscoped endpoints must detect that lifetime
+        // change just as provider-scoped endpoints detect activation generations.
+        providers.set(providerPackageId, new Map([...pending].map(([key, resolver]) => [key, (ctx) => resolver(ctx)])));
+    };
+}
+/** Retire one context's host resolver code without changing catalog history. @internal */
+function unregisterPackageContractResolvers(dataContext, providerPackageId) {
+    packageResolvers.get(dataContext)?.delete(providerPackageId);
+}
 /** Resolver keys that may run before a user context exists. */
 const resolversWithoutUser = new Set();
 const resolverKey = (contractId, version, providerPackageId) => providerPackageId
@@ -29,8 +73,14 @@ const resolverKey = (contractId, version, providerPackageId) => providerPackageI
  * Register the resolver that provides the live implementation for a contract version.
  * Later registrations for the same contract+version replace earlier ones (matching the
  * registry's "latest provider wins for dev contracts" behavior).
+ * During PackageLoader bundle evaluation, registration is staged for activation
+ * in the owning context; direct runtime registrations remain process-wide.
  */
 function registerContractResolver(contractId, version, resolver, opts = {}) {
+    if (stagedRegistration) {
+        stagedRegistration(contractId, version, resolver, opts);
+        return;
+    }
     const key = resolverKey(contractId, version, opts.providerPackageId);
     resolvers.set(key, resolver);
     if (opts.requiresUserContext === false) {
@@ -65,8 +115,26 @@ function contractRequiresUserContext(contractId, version) {
  * and the legacy unscoped registration remains the compatibility fallback.
  * An unscoped lookup may use a sole scoped resolver for callers that have not
  * yet adopted provider selection; multiple scoped providers remain ambiguous.
+ * Supplying `dataContext` first checks host packages activated in that context.
+ * Their staged registrations never replace global system/compatibility resolvers.
  */
-function getContractResolver(contractId, version, providerPackageId) {
+function getContractResolver(contractId, version, providerPackageId, dataContext) {
+    const providers = dataContext && packageResolvers.get(dataContext);
+    const key = (0, types_1.contractKey)(contractId, version);
+    if (providers) {
+        if (providerPackageId) {
+            const owned = providers.get(providerPackageId)?.get(key);
+            if (owned)
+                return owned;
+        }
+        else {
+            const matches = [...providers.values()].flatMap((entries) => entries.get(key) ?? []);
+            if (matches.length > 1)
+                return undefined;
+            if (matches.length === 1)
+                return matches[0];
+        }
+    }
     const unscoped = resolvers.get(resolverKey(contractId, version));
     if (providerPackageId) {
         const scoped = resolvers.get(resolverKey(contractId, version, providerPackageId));
@@ -147,6 +215,8 @@ async function isSelfTrustedContractCaller(userContext, remoteIdentity) {
 }
 const permissionDenied = (call, reason) => new Error(`Permission denied: ${call.member} '${call.name}'.${call.operation} on contract ${call.contractId}${reason ? ` (${reason})` : ""}`);
 const localOnlyContractIds = new Set([
+    system_ids_1.hostToolsContractId,
+    system_ids_1.desktopToolsContractId,
     system_ids_1.contractCatalogContractId,
     system_ids_1.httpContractId,
     system_ids_1.identityContractId,
@@ -154,7 +224,12 @@ const localOnlyContractIds = new Set([
     system_ids_1.localFoldersContractId,
     system_ids_1.schedulerContractId,
     system_ids_1.toolAccessControlContractId,
+    system_ids_1.toolCatalogContractId,
 ]);
+/** Whether a contract must remain on the local host, including Device Operations targets. */
+function isLocalOnlyContractId(contractId) {
+    return localOnlyContractIds.has(contractId);
+}
 /**
  * Authorize one inbound contract call from **another device**.
  *
@@ -169,7 +244,7 @@ const localOnlyContractIds = new Set([
  *    group the provider belongs to, must be a tool run, the contract definition registered
  *    for that group must mark the tool with {@link IContractTool.remoteAccessLevel}, and
  *    the caller's role in that group must meet it. Missing loader, definition, or level
- *    fails closed.
+ *    fails closed. Catalog readiness precedes reading the group's definitions.
  *
  * @param call Inbound call.
  * @param userContext Provider's user context.
@@ -207,6 +282,7 @@ async function authorizeRemoteContractCall(call, userContext, remoteIdentity) {
         throw permissionDenied(call, "only tool runs are remotely callable");
     }
     const dataContext = userContext.getDataContext(dataContextId);
+    await dataContext.packageLoader?.catalogReady;
     const definition = dataContext.packageLoader?.contractRegistry?.getDefinition(call.contractId, call.version);
     const tool = definition?.tools.find((entry) => entry.name === call.name);
     if (!tool) {
@@ -240,7 +316,8 @@ function getAuthorizedLocalDataContext(userContext, requestedId) {
     }
     return userContext.getDataContext(dataContextId);
 }
-function getActiveProviderPackageId(dataContext, contractId, version) {
+async function getActiveProviderPackageId(dataContext, contractId, version) {
+    await dataContext.packageLoader?.catalogReady;
     return dataContext.packageLoader?.getActiveContractProviderPackageId?.(contractId, version);
 }
 async function resolveDataContextEndpoint(dataContext, request, resolveVariable) {
@@ -263,7 +340,7 @@ async function resolveDataContextEndpoint(dataContext, request, resolveVariable)
     if (isolatedEndpoint) {
         return isolatedEndpoint;
     }
-    const resolver = getContractResolver(request.contractId, request.version, request.providerPackageId);
+    const resolver = getContractResolver(request.contractId, request.version, request.providerPackageId, dataContext);
     if (!resolver) {
         throw new Error(`No contract provider registered for ${request.contractId} v${request.version}`);
     }
@@ -306,7 +383,8 @@ function resolvesWithoutUser(contractId, version, peekUserContext) {
  * deferred until each call. This prevents renderer startup from racing provider
  * registration. Calls may target only the local user's personal context or a
  * currently known group context; arbitrary valid IDs are rejected before
- * `UserContext.getDataContext` can create a new context.
+ * `UserContext.getDataContext` can create a new context. Provider selection waits
+ * for catalog readiness, including explicit provider requests on a cold context.
  *
  * Contracts registered with `requiresUserContext: false` resolve before sign-in
  * when `peekUserContext` reports that no user is loaded. Every other call still
@@ -352,6 +430,7 @@ function createLocalUserContextContractProviderRouter(transport, opts) {
             const userContext = await getUserContext();
             const dataContext = getAuthorizedLocalDataContext(userContext, dataContextId);
             if (requestedProviderPackageId) {
+                await dataContext.packageLoader?.catalogReady;
                 const registered = dataContext.packageLoader?.contractRegistry.getRegisteredProviderIds(contractId, version) ?? [];
                 if (!registered.includes(requestedProviderPackageId)) {
                     throw new Error(`Package ${requestedProviderPackageId} is not a registered provider for ${contractId} v${version}`);
@@ -429,7 +508,7 @@ async function handleContractCall(call, opts) {
         const endpoint = await dataContext.packageLoader.resolveContractEndpoint({
             contractId: call.contractId,
             version: call.version,
-            providerPackageId: getActiveProviderPackageId(dataContext, call.contractId, call.version),
+            providerPackageId: await getActiveProviderPackageId(dataContext, call.contractId, call.version),
             dataContextId: authorization.dataContextId,
             context: authorization.context ?? {},
             notify: async () => undefined,
@@ -441,7 +520,7 @@ async function handleContractCall(call, opts) {
             endpoint.dispose();
         }
     }
-    const resolver = getContractResolver(call.contractId, call.version);
+    const resolver = getContractResolver(call.contractId, call.version, undefined, dataContext);
     if (!resolver) {
         throw new Error(`No contract provider registered for ${call.contractId} v${call.version}`);
     }

package/dist/contracts/extract.d.ts

@@ -1,4 +1,5 @@
 import type { z } from "zod";
+import type { ITool } from "../data/tools";
 import type { IField } from "../types/field-type";
 import type { IContractTable, IContractTool } from "./types";
 /**
@@ -20,6 +21,8 @@ export interface IExtractableTableDef {
  * Mirrors the subset of IToolInstance we need.
  */
 export interface IExtractableToolInstance {
+    /** Host-only workflow policy carried into the contract definition. */
+    requiresWorkflowRun?: boolean;
     tool: {
         name: string;
         usageDescription: string;
@@ -31,6 +34,10 @@ export interface IExtractableToolInstance {
         };
         /** See {@link IContractTool.remoteAccessLevel}. */
         remoteAccessLevel?: number;
+        requiresWorkflowRun?: boolean;
+        isAssistantRunner?: boolean;
+        configSchema?: ITool["configSchema"];
+        detailedDescription?: string;
     };
 }
 /** Override the schemaToFields implementation (useful for tests). */

package/dist/contracts/extract.js

@@ -48,6 +48,9 @@ function extractToolShape(inst) {
         usageDescription: tool.usageDescription,
         inputFields: tool.inputSchema?.fields ?? [],
         outputFields: tool.outputSchema?.fields ?? [],
+        ...((inst.requiresWorkflowRun ?? tool.requiresWorkflowRun) !== undefined
+            ? { requiresWorkflowRun: inst.requiresWorkflowRun ?? tool.requiresWorkflowRun }
+            : {}),
         ...(tool.remoteAccessLevel !== undefined ? { remoteAccessLevel: tool.remoteAccessLevel } : {}),
     };
 }

package/dist/contracts/index.d.ts

@@ -1,9 +1,9 @@
 export * from "./action-dispatch";
 export { ContractBuilder, definePackage, PackageBuilder } from "./builder";
-export { type ContractCallAuthorizer, type ContractProviderEndpointResolver, type ContractProviderPackageResolver, createContractProviderRouter, type IAuthorizedContractRoute, type IContractProviderEndpointRequest, type IContractProviderRouter, type IContractProviderRouterOptions, } from "./contract-provider-router";
+export { type ContractCallAuthorizer, type ContractProviderEndpointResolver, type ContractProviderPackageResolver, createContractProviderRouter, type IAuthorizedContractRoute, type IContractProviderEndpointRequest, type IContractProviderRouter, type IContractProviderRouterOptions, RetiredContractProviderEndpointError, } from "./contract-provider-router";
 export { ContractProviders, ContractProvidersTable, contractProvidersMetaData, contractProvidersSchema, type IContractProviderRecord, } from "./contract-providers.table";
-export { authorizedContractActionNames, CONTRACT_CALL_RPC, type ContractMemberType, type ContractNotificationSink, type ContractPermissionCheck, type ContractToolDispatch, createContractConsumer, createContractProvider, createContractProviderEndpoint, createContractProviderSession, createRemoteContractConsumer, type IContractCall, type IContractCallContext, type IContractConsumer, type IContractConsumerBase, type IContractNotification, type IContractProviderEndpoint, type IContractProviderEndpointOptions, type IContractProviderSession, type IContractProviderSessionOptions, type IContractResolution, type IContractTableProxy, type IContractToolContext, type IContractToolTarget, type ITableProxy, sameUserContractPermissionCheck, validateContractActions, } from "./contract-proxy";
-export { authorizeRemoteContractCall, type ContractRemoteIdentity, type ContractResolver, createLocalUserContextContractProviderRouter, createUserContextContractProviderRouter, getContractResolver, handleContractCall, type IContractResolverRegistrationOptions, type ILocalContractVariableRequest, isSelfTrustedContractCaller, type LocalContractVariableResolver, registerContractResolver, verifyRemoteContractIdentity, } from "./contract-resolvers";
+export { authorizedContractActionNames, CONTRACT_CALL_RPC, type ContractMemberType, type ContractNotificationSink, type ContractPermissionCheck, type ContractToolDispatch, createContractConsumer, createContractProvider, createContractProviderEndpoint, createContractProviderSession, createRemoteContractConsumer, type IContractCall, type IContractCallContext, type IContractConsumer, type IContractConsumerBase, type IContractNotification, type IContractProviderEndpoint, type IContractProviderEndpointOptions, type IContractProviderSession, type IContractProviderSessionOptions, type IContractResolution, type IContractTableProxy, type IContractToolContext, type IContractToolImplementation, type IContractToolTarget, type ITableProxy, requireWorkflowRunContext, sameUserContractPermissionCheck, validateContractActions, } from "./contract-proxy";
+export { authorizeRemoteContractCall, type ContractRemoteIdentity, type ContractResolver, createLocalUserContextContractProviderRouter, createUserContextContractProviderRouter, getContractResolver, handleContractCall, type IContractResolverRegistrationOptions, type ILocalContractVariableRequest, isLocalOnlyContractId, isSelfTrustedContractCaller, type LocalContractVariableResolver, registerContractResolver, verifyRemoteContractIdentity, } from "./contract-resolvers";
 export { CONTRACT_NOTIFY_CHANNEL, CONTRACT_REQUEST_CHANNEL, connectionContractTransport, type IContractTransport, type IDuplexEmitter, inProcessTransportPair, } from "./contract-transport";
 export { Contracts, ContractsTable, contractsMetaData, contractsSchema, type IContractRecord, } from "./contracts.table";
 export { createLocalContractConsumer } from "./create-local-consumer";
@@ -14,7 +14,9 @@ export { PersistentContractRegistry } from "./persistent-registry";
 export { ContractRegistry, type IContractProviderRegistration } from "./registry";
 export { createRemoteContractEndpoint, getRemoteContractTransportFactory, type IRemoteContractHost, type IRemoteContractTarget, type RemoteContractTransportFactory, resolveRemoteTargetEndpoint, setRemoteContractTransportFactory, } from "./remote-contract-transport";
 export { CONTRACT_CATALOG_VERSION, contractCatalogProviderPackageId, getContractCatalogDefinition, type IContractCatalogConsumer, type IContractProviderInfo, type IListContractProvidersInput, } from "./system/contract-catalog-contract";
+export * from "./system/desktop-tools-contract";
 export { DEVICE_OPERATIONS_CONTRACT_VERSION, DEVICE_OPERATIONS_MAX_QUERY_LENGTH, DEVICE_OPERATIONS_MAX_RESULT_BYTES, DEVICE_OPERATIONS_MAX_ROWS, DEVICE_OPERATIONS_MAX_TOOLS, type DeviceOperationCapability, deviceOperationsProviderPackageId, deviceOperationsToolIds, getDeviceOperationsContractDefinition, type IDeviceDatabaseQueryInput, type IDeviceDatabaseQueryResult, type IDeviceOperationStatus, type IDeviceToolListInput, type IDeviceToolLookupInput, type IDeviceToolLookupResult, type IDeviceToolRunInput, } from "./system/device-operations-contract";
+export * from "./system/host-tools-contract";
 export { getHttpContractDefinition, HTTP_CONTRACT_VERSION, HTTP_DEFAULT_TIMEOUT_MS, HTTP_MAX_BODY_BYTES, HTTP_MAX_TIMEOUT_MS, httpProviderPackageId, type IHttpCancelInput, type IHttpConsumer, type IHttpCredentialInfo, type IHttpMultipartPart, type IHttpPolicyInfo, type IHttpRequestInput, type IHttpRequestResult, } from "./system/http-contract";
 export { getIdentityContractDefinition, IDENTITY_CONTRACT_VERSION, type IIdentityConsumer, type IIdentityKeyInfo, type IIdentityRegistryKey, type IIdentityRotateKeyInput, type IIdentityRotateKeyResult, type IIdentitySessionInfo, } from "./system/identity-contract";
 export { getInvitesContractDefinition, type IAcceptInviteResult, type ICreatedInvite, type IInvitePreview, type IInvitesConsumer, INVITES_CONTRACT_VERSION, } from "./system/invites-contract";
@@ -23,7 +25,12 @@ export { getLogsContractDefinition, type ILogsConsumer, LOGS_CONTRACT_VERSION, r
 export * from "./system/network-contracts";
 export { getSchedulerContractDefinition, type IScheduleInfo, type IScheduleInput, type ISchedulerConsumer, SCHEDULER_CONTRACT_VERSION, SCHEDULER_MAX_DELAY_MS, schedulerProviderPackageId, } from "./system/scheduler-contract";
 export { getToolAccessControlContractDefinition, type IToolAccessControlConsumer, TOOL_ACCESS_CONTROL_CONTRACT_VERSION, } from "./system/tool-access-control-contract";
-export { type ISystemContractRegistration, installSystemContracts, listSystemContracts, registerSystemContract, } from "./system-contracts";
+export * from "./system/tool-catalog-contract";
+export { type ISystemContractRegistration, installSystemContracts, isSystemContractId, listSystemContracts, registerSystemContract, } from "./system-contracts";
+export * from "./tool-catalog";
+export * from "./tool-catalog-identity";
+export * from "./tool-catalog-migrations";
+export * from "./tool-catalog-service";
 export type { IAlsoImplementsDeclaration, IConsumedContract, IConsumedContractHandle, IConsumedContractOptions, IContractDefinition, IContractEvent, IContractObservable, IContractTable, IContractTool, IPackageDefinitionResult, IRemoteContract, IRemoteContractConsumer, IRemoteContractHandle, IResolvedContract, IValidationError, IValidationResult, } from "./types";
 export { contractKey } from "./types";
 export { validateAlsoImplements, validateImmutability, validateProviderSatisfiesContract, } from "./validate";

package/dist/contracts/index.js

@@ -14,8 +14,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.contractCatalogProviderPackageId = exports.CONTRACT_CATALOG_VERSION = exports.setRemoteContractTransportFactory = exports.resolveRemoteTargetEndpoint = exports.getRemoteContractTransportFactory = exports.createRemoteContractEndpoint = exports.ContractRegistry = exports.PersistentContractRegistry = exports.waitForHostContractTransport = exports.subscribeHostContractTransport = exports.registerHostContractTransport = exports.getHostContractTransport = exports.hostContractConsumer = exports.setSchemaToFieldsFn = exports.extractToolShape = exports.extractTableShape = exports.createLocalContractConsumer = exports.contractsSchema = exports.contractsMetaData = exports.ContractsTable = exports.Contracts = exports.inProcessTransportPair = exports.connectionContractTransport = exports.CONTRACT_REQUEST_CHANNEL = exports.CONTRACT_NOTIFY_CHANNEL = exports.verifyRemoteContractIdentity = exports.registerContractResolver = exports.isSelfTrustedContractCaller = exports.handleContractCall = exports.getContractResolver = exports.createUserContextContractProviderRouter = exports.createLocalUserContextContractProviderRouter = exports.authorizeRemoteContractCall = exports.validateContractActions = exports.sameUserContractPermissionCheck = exports.createRemoteContractConsumer = exports.createContractProviderSession = exports.createContractProviderEndpoint = exports.createContractProvider = exports.createContractConsumer = exports.CONTRACT_CALL_RPC = exports.authorizedContractActionNames = exports.contractProvidersSchema = exports.contractProvidersMetaData = exports.ContractProvidersTable = exports.ContractProviders = exports.createContractProviderRouter = exports.PackageBuilder = exports.definePackage = exports.ContractBuilder = void 0;
-exports.validateProviderSatisfiesContract = exports.validateImmutability = exports.validateAlsoImplements = exports.contractKey = exports.registerSystemContract = exports.listSystemContracts = exports.installSystemContracts = exports.TOOL_ACCESS_CONTROL_CONTRACT_VERSION = exports.getToolAccessControlContractDefinition = exports.schedulerProviderPackageId = exports.SCHEDULER_MAX_DELAY_MS = exports.SCHEDULER_CONTRACT_VERSION = exports.getSchedulerContractDefinition = exports.resolveLogsContract = exports.LOGS_CONTRACT_VERSION = exports.getLogsContractDefinition = exports.localFoldersProviderPackageId = exports.LOCAL_FOLDERS_RESERVED_DIR = exports.LOCAL_FOLDERS_READ_RANGE_MAX = exports.LOCAL_FOLDERS_JOB_TTL_MS = exports.LOCAL_FOLDERS_HAVE_BATCH = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BYTES = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BLOCKS = exports.LOCAL_FOLDERS_CONTRACT_VERSION = exports.LOCAL_FOLDERS_CHUNK_MIN = exports.LOCAL_FOLDERS_CHUNK_MAX = exports.LOCAL_FOLDERS_CHUNK_AVG = exports.LOCAL_FOLDERS_ASSEMBLE_STALL_MS = exports.getLocalFoldersContractDefinition = exports.INVITES_CONTRACT_VERSION = exports.getInvitesContractDefinition = exports.IDENTITY_CONTRACT_VERSION = exports.getIdentityContractDefinition = exports.httpProviderPackageId = exports.HTTP_MAX_TIMEOUT_MS = exports.HTTP_MAX_BODY_BYTES = exports.HTTP_DEFAULT_TIMEOUT_MS = exports.HTTP_CONTRACT_VERSION = exports.getHttpContractDefinition = exports.getDeviceOperationsContractDefinition = exports.deviceOperationsToolIds = exports.deviceOperationsProviderPackageId = exports.DEVICE_OPERATIONS_MAX_TOOLS = exports.DEVICE_OPERATIONS_MAX_ROWS = exports.DEVICE_OPERATIONS_MAX_RESULT_BYTES = exports.DEVICE_OPERATIONS_MAX_QUERY_LENGTH = exports.DEVICE_OPERATIONS_CONTRACT_VERSION = exports.getContractCatalogDefinition = void 0;
+exports.resolveRemoteTargetEndpoint = exports.getRemoteContractTransportFactory = exports.createRemoteContractEndpoint = exports.ContractRegistry = exports.PersistentContractRegistry = exports.waitForHostContractTransport = exports.subscribeHostContractTransport = exports.registerHostContractTransport = exports.getHostContractTransport = exports.hostContractConsumer = exports.setSchemaToFieldsFn = exports.extractToolShape = exports.extractTableShape = exports.createLocalContractConsumer = exports.contractsSchema = exports.contractsMetaData = exports.ContractsTable = exports.Contracts = exports.inProcessTransportPair = exports.connectionContractTransport = exports.CONTRACT_REQUEST_CHANNEL = exports.CONTRACT_NOTIFY_CHANNEL = exports.verifyRemoteContractIdentity = exports.registerContractResolver = exports.isSelfTrustedContractCaller = exports.isLocalOnlyContractId = exports.handleContractCall = exports.getContractResolver = exports.createUserContextContractProviderRouter = exports.createLocalUserContextContractProviderRouter = exports.authorizeRemoteContractCall = exports.validateContractActions = exports.sameUserContractPermissionCheck = exports.requireWorkflowRunContext = exports.createRemoteContractConsumer = exports.createContractProviderSession = exports.createContractProviderEndpoint = exports.createContractProvider = exports.createContractConsumer = exports.CONTRACT_CALL_RPC = exports.authorizedContractActionNames = exports.contractProvidersSchema = exports.contractProvidersMetaData = exports.ContractProvidersTable = exports.ContractProviders = exports.RetiredContractProviderEndpointError = exports.createContractProviderRouter = exports.PackageBuilder = exports.definePackage = exports.ContractBuilder = void 0;
+exports.validateAlsoImplements = exports.contractKey = exports.registerSystemContract = exports.listSystemContracts = exports.isSystemContractId = exports.installSystemContracts = exports.TOOL_ACCESS_CONTROL_CONTRACT_VERSION = exports.getToolAccessControlContractDefinition = exports.schedulerProviderPackageId = exports.SCHEDULER_MAX_DELAY_MS = exports.SCHEDULER_CONTRACT_VERSION = exports.getSchedulerContractDefinition = exports.resolveLogsContract = exports.LOGS_CONTRACT_VERSION = exports.getLogsContractDefinition = exports.localFoldersProviderPackageId = exports.LOCAL_FOLDERS_RESERVED_DIR = exports.LOCAL_FOLDERS_READ_RANGE_MAX = exports.LOCAL_FOLDERS_JOB_TTL_MS = exports.LOCAL_FOLDERS_HAVE_BATCH = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BYTES = exports.LOCAL_FOLDERS_GETBLOCKS_MAX_BLOCKS = exports.LOCAL_FOLDERS_CONTRACT_VERSION = exports.LOCAL_FOLDERS_CHUNK_MIN = exports.LOCAL_FOLDERS_CHUNK_MAX = exports.LOCAL_FOLDERS_CHUNK_AVG = exports.LOCAL_FOLDERS_ASSEMBLE_STALL_MS = exports.getLocalFoldersContractDefinition = exports.INVITES_CONTRACT_VERSION = exports.getInvitesContractDefinition = exports.IDENTITY_CONTRACT_VERSION = exports.getIdentityContractDefinition = exports.httpProviderPackageId = exports.HTTP_MAX_TIMEOUT_MS = exports.HTTP_MAX_BODY_BYTES = exports.HTTP_DEFAULT_TIMEOUT_MS = exports.HTTP_CONTRACT_VERSION = exports.getHttpContractDefinition = exports.getDeviceOperationsContractDefinition = exports.deviceOperationsToolIds = exports.deviceOperationsProviderPackageId = exports.DEVICE_OPERATIONS_MAX_TOOLS = exports.DEVICE_OPERATIONS_MAX_ROWS = exports.DEVICE_OPERATIONS_MAX_RESULT_BYTES = exports.DEVICE_OPERATIONS_MAX_QUERY_LENGTH = exports.DEVICE_OPERATIONS_CONTRACT_VERSION = exports.getContractCatalogDefinition = exports.contractCatalogProviderPackageId = exports.CONTRACT_CATALOG_VERSION = exports.setRemoteContractTransportFactory = void 0;
+exports.validateProviderSatisfiesContract = exports.validateImmutability = void 0;
 __exportStar(require("./action-dispatch"), exports);
 var builder_1 = require("./builder");
 Object.defineProperty(exports, "ContractBuilder", { enumerable: true, get: function () { return builder_1.ContractBuilder; } });
@@ -23,6 +24,7 @@ Object.defineProperty(exports, "definePackage", { enumerable: true, get: functio
 Object.defineProperty(exports, "PackageBuilder", { enumerable: true, get: function () { return builder_1.PackageBuilder; } });
 var contract_provider_router_1 = require("./contract-provider-router");
 Object.defineProperty(exports, "createContractProviderRouter", { enumerable: true, get: function () { return contract_provider_router_1.createContractProviderRouter; } });
+Object.defineProperty(exports, "RetiredContractProviderEndpointError", { enumerable: true, get: function () { return contract_provider_router_1.RetiredContractProviderEndpointError; } });
 var contract_providers_table_1 = require("./contract-providers.table");
 Object.defineProperty(exports, "ContractProviders", { enumerable: true, get: function () { return contract_providers_table_1.ContractProviders; } });
 Object.defineProperty(exports, "ContractProvidersTable", { enumerable: true, get: function () { return contract_providers_table_1.ContractProvidersTable; } });
@@ -36,6 +38,7 @@ Object.defineProperty(exports, "createContractProvider", { enumerable: true, get
 Object.defineProperty(exports, "createContractProviderEndpoint", { enumerable: true, get: function () { return contract_proxy_1.createContractProviderEndpoint; } });
 Object.defineProperty(exports, "createContractProviderSession", { enumerable: true, get: function () { return contract_proxy_1.createContractProviderSession; } });
 Object.defineProperty(exports, "createRemoteContractConsumer", { enumerable: true, get: function () { return contract_proxy_1.createRemoteContractConsumer; } });
+Object.defineProperty(exports, "requireWorkflowRunContext", { enumerable: true, get: function () { return contract_proxy_1.requireWorkflowRunContext; } });
 Object.defineProperty(exports, "sameUserContractPermissionCheck", { enumerable: true, get: function () { return contract_proxy_1.sameUserContractPermissionCheck; } });
 Object.defineProperty(exports, "validateContractActions", { enumerable: true, get: function () { return contract_proxy_1.validateContractActions; } });
 var contract_resolvers_1 = require("./contract-resolvers");
@@ -44,6 +47,7 @@ Object.defineProperty(exports, "createLocalUserContextContractProviderRouter", {
 Object.defineProperty(exports, "createUserContextContractProviderRouter", { enumerable: true, get: function () { return contract_resolvers_1.createUserContextContractProviderRouter; } });
 Object.defineProperty(exports, "getContractResolver", { enumerable: true, get: function () { return contract_resolvers_1.getContractResolver; } });
 Object.defineProperty(exports, "handleContractCall", { enumerable: true, get: function () { return contract_resolvers_1.handleContractCall; } });
+Object.defineProperty(exports, "isLocalOnlyContractId", { enumerable: true, get: function () { return contract_resolvers_1.isLocalOnlyContractId; } });
 Object.defineProperty(exports, "isSelfTrustedContractCaller", { enumerable: true, get: function () { return contract_resolvers_1.isSelfTrustedContractCaller; } });
 Object.defineProperty(exports, "registerContractResolver", { enumerable: true, get: function () { return contract_resolvers_1.registerContractResolver; } });
 Object.defineProperty(exports, "verifyRemoteContractIdentity", { enumerable: true, get: function () { return contract_resolvers_1.verifyRemoteContractIdentity; } });
@@ -83,6 +87,7 @@ var contract_catalog_contract_1 = require("./system/contract-catalog-contract");
 Object.defineProperty(exports, "CONTRACT_CATALOG_VERSION", { enumerable: true, get: function () { return contract_catalog_contract_1.CONTRACT_CATALOG_VERSION; } });
 Object.defineProperty(exports, "contractCatalogProviderPackageId", { enumerable: true, get: function () { return contract_catalog_contract_1.contractCatalogProviderPackageId; } });
 Object.defineProperty(exports, "getContractCatalogDefinition", { enumerable: true, get: function () { return contract_catalog_contract_1.getContractCatalogDefinition; } });
+__exportStar(require("./system/desktop-tools-contract"), exports);
 var device_operations_contract_1 = require("./system/device-operations-contract");
 Object.defineProperty(exports, "DEVICE_OPERATIONS_CONTRACT_VERSION", { enumerable: true, get: function () { return device_operations_contract_1.DEVICE_OPERATIONS_CONTRACT_VERSION; } });
 Object.defineProperty(exports, "DEVICE_OPERATIONS_MAX_QUERY_LENGTH", { enumerable: true, get: function () { return device_operations_contract_1.DEVICE_OPERATIONS_MAX_QUERY_LENGTH; } });
@@ -92,6 +97,7 @@ Object.defineProperty(exports, "DEVICE_OPERATIONS_MAX_TOOLS", { enumerable: true
 Object.defineProperty(exports, "deviceOperationsProviderPackageId", { enumerable: true, get: function () { return device_operations_contract_1.deviceOperationsProviderPackageId; } });
 Object.defineProperty(exports, "deviceOperationsToolIds", { enumerable: true, get: function () { return device_operations_contract_1.deviceOperationsToolIds; } });
 Object.defineProperty(exports, "getDeviceOperationsContractDefinition", { enumerable: true, get: function () { return device_operations_contract_1.getDeviceOperationsContractDefinition; } });
+__exportStar(require("./system/host-tools-contract"), exports);
 var http_contract_1 = require("./system/http-contract");
 Object.defineProperty(exports, "getHttpContractDefinition", { enumerable: true, get: function () { return http_contract_1.getHttpContractDefinition; } });
 Object.defineProperty(exports, "HTTP_CONTRACT_VERSION", { enumerable: true, get: function () { return http_contract_1.HTTP_CONTRACT_VERSION; } });
@@ -132,10 +138,16 @@ Object.defineProperty(exports, "schedulerProviderPackageId", { enumerable: true,
 var tool_access_control_contract_1 = require("./system/tool-access-control-contract");
 Object.defineProperty(exports, "getToolAccessControlContractDefinition", { enumerable: true, get: function () { return tool_access_control_contract_1.getToolAccessControlContractDefinition; } });
 Object.defineProperty(exports, "TOOL_ACCESS_CONTROL_CONTRACT_VERSION", { enumerable: true, get: function () { return tool_access_control_contract_1.TOOL_ACCESS_CONTROL_CONTRACT_VERSION; } });
+__exportStar(require("./system/tool-catalog-contract"), exports);
 var system_contracts_1 = require("./system-contracts");
 Object.defineProperty(exports, "installSystemContracts", { enumerable: true, get: function () { return system_contracts_1.installSystemContracts; } });
+Object.defineProperty(exports, "isSystemContractId", { enumerable: true, get: function () { return system_contracts_1.isSystemContractId; } });
 Object.defineProperty(exports, "listSystemContracts", { enumerable: true, get: function () { return system_contracts_1.listSystemContracts; } });
 Object.defineProperty(exports, "registerSystemContract", { enumerable: true, get: function () { return system_contracts_1.registerSystemContract; } });
+__exportStar(require("./tool-catalog"), exports);
+__exportStar(require("./tool-catalog-identity"), exports);
+__exportStar(require("./tool-catalog-migrations"), exports);
+__exportStar(require("./tool-catalog-service"), exports);
 var types_1 = require("./types");
 Object.defineProperty(exports, "contractKey", { enumerable: true, get: function () { return types_1.contractKey; } });
 var validate_1 = require("./validate");

package/dist/contracts/registry.d.ts

@@ -1,3 +1,4 @@
+import type { ToolCatalog } from "./tool-catalog";
 import type { IAlsoImplementsDeclaration, IConsumedContract, IContractDefinition, IValidationResult } from "./types";
 /**
  * One contract-provider registration in an atomic
@@ -15,6 +16,8 @@ export interface IContractProviderRegistration {
  * be added when the registry is integrated with the runtime install flow.
  */
 export declare class ContractRegistry {
+    /** Runtime-owned catalog bound to this context, shared with isolated providers. */
+    toolCatalog?: ToolCatalog;
     /** All known contract definitions, keyed by contractKey. */
     private definitions;
     /** Active provider for each contract, keyed by contractKey. */

package/dist/contracts/registry.js

@@ -9,6 +9,8 @@ const validate_1 = require("./validate");
  * be added when the registry is integrated with the runtime install flow.
  */
 class ContractRegistry {
+    /** Runtime-owned catalog bound to this context, shared with isolated providers. */
+    toolCatalog;
     /** All known contract definitions, keyed by contractKey. */
     definitions = new Map();
     /** Active provider for each contract, keyed by contractKey. */

package/dist/contracts/system/desktop-tools-contract.d.ts

@@ -0,0 +1,5 @@
+import type { IContractDefinition } from "../types";
+/** Version of the local-only Electron utilities contract. */
+export declare const DESKTOP_TOOLS_CONTRACT_VERSION = 1;
+/** Portable desktop shapes; only an Electron host supplies executable providers. */
+export declare function getDesktopToolsContractDefinition(): IContractDefinition;

package/dist/contracts/system/desktop-tools-contract.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DESKTOP_TOOLS_CONTRACT_VERSION = void 0;
+exports.getDesktopToolsContractDefinition = getDesktopToolsContractDefinition;
+const system_ids_1 = require("../../system-ids");
+const field_type_1 = require("../../types/field-type");
+const system_contracts_1 = require("../system-contracts");
+const field = (name, type, description, optional = false) => ({
+    name,
+    type,
+    description,
+    ...(optional ? { optional: true } : {}),
+});
+/** Version of the local-only Electron utilities contract. */
+exports.DESKTOP_TOOLS_CONTRACT_VERSION = 1;
+/** Portable desktop shapes; only an Electron host supplies executable providers. */
+function getDesktopToolsContractDefinition() {
+    const simple = (name, usageDescription) => ({
+        name,
+        usageDescription,
+        inputFields: [],
+        outputFields: [],
+    });
+    return {
+        contractId: system_ids_1.desktopToolsContractId,
+        version: exports.DESKTOP_TOOLS_CONTRACT_VERSION,
+        devTag: "dev",
+        name: "System Desktop Tools",
+        description: "Local desktop directories, app version and package publishing.",
+        tables: [],
+        observables: [],
+        events: [],
+        tools: [
+            {
+                ...simple("cd", "Change the workflow and thread working directory."),
+                requiresWorkflowRun: true,
+                inputFields: [field("dirPath", field_type_1.FieldType.string, "Directory path")],
+            },
+            {
+                ...simple("send-notification", "Send an OS notification linked to the workflow thread."),
+                requiresWorkflowRun: true,
+                inputFields: [
+                    field("title", field_type_1.FieldType.string, "Title"),
+                    field("body", field_type_1.FieldType.string, "Body", true),
+                    {
+                        ...field("priority", field_type_1.FieldType.string, "low, normal, high or critical", true),
+                        defaultValue: "normal",
+                    },
+                ],
+            },
+            simple("get-user-home-directory", "Get the path to the user's home directory"),
+            simple("get-peers-data-directory", "Get the path to the directory where Peers stores its data"),
+            {
+                ...simple("open-directory-in-os", "Open a directory in the OS file UI. Omitting dirPath opens the root directory."),
+                inputFields: [field("dirPath", field_type_1.FieldType.string, "Path to the directory to show", true)],
+            },
+            simple("get-peers-packages-directory", "Get the path to the directory where Peers stores its packages"),
+            {
+                ...simple("describe-directory-contents", "Get files and subdirectories as a string"),
+                inputFields: [
+                    field("dirPath", field_type_1.FieldType.string, "Path to describe"),
+                    {
+                        ...field("recurseDepth", field_type_1.FieldType.number, "Depth to recurse; defaults to 0", true),
+                        defaultValue: 0,
+                    },
+                ],
+            },
+            simple("app-version", "This tool returns the version of the app.  Rarely used, but useful for debugging."),
+            {
+                ...simple("publish-package", "Build signed tarball and pointer JSON for manual upload. Requires the package signing key in the user's personal group."),
+                inputFields: [
+                    field("packageId", field_type_1.FieldType.string, "Package ID; either packageId or name is required", true),
+                    field("name", field_type_1.FieldType.string, "Exact package name", true),
+                    field("localPath", field_type_1.FieldType.string, "Override package source path", true),
+                    field("versionTag", field_type_1.FieldType.string, "Version tag; defaults to stable", true),
+                    field("version", field_type_1.FieldType.string, "Override package.json version", true),
+                    field("outputDir", field_type_1.FieldType.string, "Artifact directory; defaults to dist/publish", true),
+                ],
+            },
+        ],
+    };
+}
+(0, system_contracts_1.registerSystemContract)({
+    providerPackageId: system_ids_1.peersSystemPackageId,
+    contractId: system_ids_1.desktopToolsContractId,
+    version: exports.DESKTOP_TOOLS_CONTRACT_VERSION,
+    getDefinition: getDesktopToolsContractDefinition,
+});

package/dist/contracts/system/host-tools-contract.d.ts

@@ -0,0 +1,5 @@
+import type { IContractDefinition } from "../types";
+/** Version of the local-only host utilities contract. */
+export declare const HOST_TOOLS_CONTRACT_VERSION = 1;
+/** Host utilities; implementations are bound by peers-device to the authorized context. */
+export declare function getHostToolsContractDefinition(): IContractDefinition;

package/dist/contracts/system/host-tools-contract.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HOST_TOOLS_CONTRACT_VERSION = void 0;
+exports.getHostToolsContractDefinition = getHostToolsContractDefinition;
+const system_ids_1 = require("../../system-ids");
+const field_type_1 = require("../../types/field-type");
+const system_contracts_1 = require("../system-contracts");
+const device_operations_contract_1 = require("./device-operations-contract");
+const field = (name, type, description, optional = false) => ({
+    name,
+    type,
+    description,
+    ...(optional ? { optional: true } : {}),
+});
+/** Version of the local-only host utilities contract. */
+exports.HOST_TOOLS_CONTRACT_VERSION = 1;
+/** Host utilities; implementations are bound by peers-device to the authorized context. */
+function getHostToolsContractDefinition() {
+    const query = (0, device_operations_contract_1.getDeviceOperationsContractDefinition)().tools.find((t) => t.name === "queryDatabase");
+    if (!query)
+        throw new Error("Missing Device Operations query definition");
+    return {
+        contractId: system_ids_1.hostToolsContractId,
+        version: exports.HOST_TOOLS_CONTRACT_VERSION,
+        devTag: "dev",
+        name: "System Host Tools",
+        description: "Local group creation and bounded database queries.",
+        tables: [],
+        observables: [],
+        events: [],
+        tools: [
+            {
+                name: "default_assistant_runner",
+                usageDescription: "Run an assistant through hosted inference.",
+                requiresWorkflowRun: true,
+                inputFields: [
+                    field("workflowRunId", field_type_1.FieldType.string, "Workflow run ID"),
+                    field("assistantId", field_type_1.FieldType.string, "Assistant ID"),
+                    field("messageContent", field_type_1.FieldType.string, "Override message", true),
+                ],
+                outputFields: [field("response", field_type_1.FieldType.string, "Assistant response")],
+            },
+            {
+                name: "tool-search",
+                usageDescription: "Search workflow-invocable tools available to the current user.",
+                requiresWorkflowRun: true,
+                inputFields: [field("searchText", field_type_1.FieldType.string, "Search text, all or omitted", true)],
+                outputFields: [],
+            },
+            {
+                name: "create-group",
+                usageDescription: "Create a new group owned by the current user. Invite others afterwards with the Invites contract or peers groups invite.",
+                inputFields: [
+                    field("name", field_type_1.FieldType.string, "Display name of the new group"),
+                    field("description", field_type_1.FieldType.string, "Optional description", true),
+                    field("iconClassName", field_type_1.FieldType.string, "Bootstrap icon class, e.g. bi-people-fill", true),
+                ],
+                outputFields: [field("groupId", field_type_1.FieldType.id, "Created group ID")],
+            },
+            {
+                name: "query-database",
+                usageDescription: "Run a bounded read-only SQL query against the current data context. Only one SELECT or approved PRAGMA is allowed (no writes, CTEs, or multiple statements). List tables with PRAGMA table_list or SELECT name FROM sqlite_master WHERE type='table'. Results are capped at 500 rows / 1MB and are not redacted.",
+                inputFields: [
+                    field("query", field_type_1.FieldType.string, "One SELECT or approved read-only PRAGMA. List tables with PRAGMA table_list or SELECT name FROM sqlite_master WHERE type='table'."),
+                ],
+                outputFields: query.outputFields,
+            },
+        ],
+    };
+}
+(0, system_contracts_1.registerSystemContract)({
+    providerPackageId: system_ids_1.peersSystemPackageId,
+    contractId: system_ids_1.hostToolsContractId,
+    version: exports.HOST_TOOLS_CONTRACT_VERSION,
+    getDefinition: getHostToolsContractDefinition,
+});

package/dist/contracts/system/index.d.ts

@@ -17,3 +17,6 @@ export { getInvitesContractDefinition, type IAcceptInviteResult, type ICreatedIn
 export { getLogsContractDefinition, type ILogsConsumer, LOGS_CONTRACT_VERSION, resolveLogsContract, } from "./logs-contract";
 export * from "./network-contracts";
 export { getToolAccessControlContractDefinition, type IToolAccessControlConsumer, TOOL_ACCESS_CONTROL_CONTRACT_VERSION, } from "./tool-access-control-contract";
+import "./tool-catalog-contract";
+export * from "./desktop-tools-contract";
+export * from "./host-tools-contract";

package/dist/contracts/system/index.js

@@ -51,3 +51,6 @@ __exportStar(require("./network-contracts"), exports);
 var tool_access_control_contract_1 = require("./tool-access-control-contract");
 Object.defineProperty(exports, "getToolAccessControlContractDefinition", { enumerable: true, get: function () { return tool_access_control_contract_1.getToolAccessControlContractDefinition; } });
 Object.defineProperty(exports, "TOOL_ACCESS_CONTROL_CONTRACT_VERSION", { enumerable: true, get: function () { return tool_access_control_contract_1.TOOL_ACCESS_CONTROL_CONTRACT_VERSION; } });
+require("./tool-catalog-contract");
+__exportStar(require("./desktop-tools-contract"), exports);
+__exportStar(require("./host-tools-contract"), exports);