@peers-app/peers-sdk 0.27.2 → 0.27.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (260) hide show
  1. package/dist/contracts/contract-proxy.d.ts +7 -0
  2. package/dist/contracts/contract-proxy.js +19 -2
  3. package/dist/contracts/create-local-consumer.js +16 -1
  4. package/dist/contracts/index.d.ts +2 -0
  5. package/dist/contracts/index.js +2 -0
  6. package/dist/contracts/system/index.d.ts +2 -0
  7. package/dist/contracts/system/index.js +2 -0
  8. package/dist/contracts/system/invites-contract.js +2 -1
  9. package/dist/contracts/system/sync-check-contract.d.ts +97 -0
  10. package/dist/contracts/system/sync-check-contract.js +115 -0
  11. package/dist/contracts/tool-arguments.d.ts +15 -0
  12. package/dist/contracts/tool-arguments.js +41 -0
  13. package/dist/contracts/tool-catalog-service.js +2 -12
  14. package/dist/data/change-tracking.d.ts +40 -0
  15. package/dist/data/change-tracking.js +89 -0
  16. package/dist/data/orm/types.d.ts +24 -7
  17. package/dist/data/orm/types.js +97 -24
  18. package/dist/data/persistent-vars.d.ts +5 -0
  19. package/dist/data/persistent-vars.js +24 -6
  20. package/dist/define/manifest.js +6 -34
  21. package/dist/package-loader/package-loader.js +27 -22
  22. package/dist/system-ids.d.ts +5 -0
  23. package/dist/system-ids.js +6 -1
  24. package/package.json +4 -2
  25. package/dist/context/user-context-identity.test.d.ts +0 -1
  26. package/dist/context/user-context-identity.test.js +0 -220
  27. package/dist/contracts/__tests__/action-dispatch.test.d.ts +0 -1
  28. package/dist/contracts/__tests__/action-dispatch.test.js +0 -319
  29. package/dist/contracts/__tests__/also-implements.test.d.ts +0 -1
  30. package/dist/contracts/__tests__/also-implements.test.js +0 -110
  31. package/dist/contracts/__tests__/builder.test.d.ts +0 -1
  32. package/dist/contracts/__tests__/builder.test.js +0 -669
  33. package/dist/contracts/__tests__/contract-events.test.d.ts +0 -1
  34. package/dist/contracts/__tests__/contract-events.test.js +0 -199
  35. package/dist/contracts/__tests__/contract-observables.test.d.ts +0 -1
  36. package/dist/contracts/__tests__/contract-observables.test.js +0 -290
  37. package/dist/contracts/__tests__/contract-provider-router.test.d.ts +0 -1
  38. package/dist/contracts/__tests__/contract-provider-router.test.js +0 -315
  39. package/dist/contracts/__tests__/contract-proxy.test.d.ts +0 -1
  40. package/dist/contracts/__tests__/contract-proxy.test.js +0 -657
  41. package/dist/contracts/__tests__/contract-resolvers.test.d.ts +0 -1
  42. package/dist/contracts/__tests__/contract-resolvers.test.js +0 -758
  43. package/dist/contracts/__tests__/contract-subscription-lifecycle.test.d.ts +0 -1
  44. package/dist/contracts/__tests__/contract-subscription-lifecycle.test.js +0 -353
  45. package/dist/contracts/__tests__/contract-table-events.test.d.ts +0 -1
  46. package/dist/contracts/__tests__/contract-table-events.test.js +0 -209
  47. package/dist/contracts/__tests__/contract-transport.test.d.ts +0 -1
  48. package/dist/contracts/__tests__/contract-transport.test.js +0 -163
  49. package/dist/contracts/__tests__/extract.test.d.ts +0 -1
  50. package/dist/contracts/__tests__/extract.test.js +0 -145
  51. package/dist/contracts/__tests__/frozen-contracts.test.d.ts +0 -1
  52. package/dist/contracts/__tests__/frozen-contracts.test.js +0 -191
  53. package/dist/contracts/__tests__/generic-tool-dispatch.test.d.ts +0 -1
  54. package/dist/contracts/__tests__/generic-tool-dispatch.test.js +0 -130
  55. package/dist/contracts/__tests__/host-contract-client.test.d.ts +0 -1
  56. package/dist/contracts/__tests__/host-contract-client.test.js +0 -793
  57. package/dist/contracts/__tests__/host-contract-consumer.test.d.ts +0 -1
  58. package/dist/contracts/__tests__/host-contract-consumer.test.js +0 -163
  59. package/dist/contracts/__tests__/host-contract-transport.test.d.ts +0 -1
  60. package/dist/contracts/__tests__/host-contract-transport.test.js +0 -66
  61. package/dist/contracts/__tests__/integration.test.d.ts +0 -1
  62. package/dist/contracts/__tests__/integration.test.js +0 -348
  63. package/dist/contracts/__tests__/legacy-removal.test.d.ts +0 -1
  64. package/dist/contracts/__tests__/legacy-removal.test.js +0 -128
  65. package/dist/contracts/__tests__/persistent-registry.test.d.ts +0 -1
  66. package/dist/contracts/__tests__/persistent-registry.test.js +0 -109
  67. package/dist/contracts/__tests__/playground.test.d.ts +0 -1
  68. package/dist/contracts/__tests__/playground.test.js +0 -216
  69. package/dist/contracts/__tests__/registry.test.d.ts +0 -1
  70. package/dist/contracts/__tests__/registry.test.js +0 -238
  71. package/dist/contracts/__tests__/remote-contract-transport.test.d.ts +0 -1
  72. package/dist/contracts/__tests__/remote-contract-transport.test.js +0 -119
  73. package/dist/contracts/__tests__/system-contracts.test.d.ts +0 -1
  74. package/dist/contracts/__tests__/system-contracts.test.js +0 -247
  75. package/dist/contracts/__tests__/target-dispatch.d.ts +0 -11
  76. package/dist/contracts/__tests__/target-dispatch.js +0 -24
  77. package/dist/contracts/__tests__/tool-catalog-inventory.test.d.ts +0 -1
  78. package/dist/contracts/__tests__/tool-catalog-inventory.test.js +0 -44
  79. package/dist/contracts/__tests__/tool-catalog-service.test.d.ts +0 -1
  80. package/dist/contracts/__tests__/tool-catalog-service.test.js +0 -482
  81. package/dist/contracts/__tests__/tool-catalog.test.d.ts +0 -1
  82. package/dist/contracts/__tests__/tool-catalog.test.js +0 -1199
  83. package/dist/contracts/__tests__/validate.test.d.ts +0 -1
  84. package/dist/contracts/__tests__/validate.test.js +0 -991
  85. package/dist/contracts/__tests__/workflow-context.test.d.ts +0 -1
  86. package/dist/contracts/__tests__/workflow-context.test.js +0 -50
  87. package/dist/data/access-level.test.d.ts +0 -1
  88. package/dist/data/access-level.test.js +0 -53
  89. package/dist/data/change-tracking.test.d.ts +0 -1
  90. package/dist/data/change-tracking.test.js +0 -62
  91. package/dist/data/files/files.test.d.ts +0 -1
  92. package/dist/data/files/files.test.js +0 -770
  93. package/dist/data/group-members.test.d.ts +0 -1
  94. package/dist/data/group-members.test.js +0 -336
  95. package/dist/data/group-share.test.d.ts +0 -1
  96. package/dist/data/group-share.test.js +0 -110
  97. package/dist/data/groups.test.d.ts +0 -1
  98. package/dist/data/groups.test.js +0 -153
  99. package/dist/data/orm/cursor.test.d.ts +0 -1
  100. package/dist/data/orm/cursor.test.js +0 -314
  101. package/dist/data/orm/data-query.mongo.test.d.ts +0 -1
  102. package/dist/data/orm/data-query.mongo.test.js +0 -367
  103. package/dist/data/orm/data-query.sqlite.test.d.ts +0 -1
  104. package/dist/data/orm/data-query.sqlite.test.js +0 -365
  105. package/dist/data/orm/data-query.test.d.ts +0 -1
  106. package/dist/data/orm/data-query.test.js +0 -545
  107. package/dist/data/orm/dependency-injection.test.d.ts +0 -1
  108. package/dist/data/orm/dependency-injection.test.js +0 -171
  109. package/dist/data/orm/event-registry.test.d.ts +0 -1
  110. package/dist/data/orm/event-registry.test.js +0 -44
  111. package/dist/data/orm/multi-cursors.test.d.ts +0 -1
  112. package/dist/data/orm/multi-cursors.test.js +0 -463
  113. package/dist/data/orm/sql.data-source.test.d.ts +0 -1
  114. package/dist/data/orm/sql.data-source.test.js +0 -731
  115. package/dist/data/orm/table-container-events.test.d.ts +0 -1
  116. package/dist/data/orm/table-container-events.test.js +0 -101
  117. package/dist/data/orm/table-container.test.d.ts +0 -1
  118. package/dist/data/orm/table-container.test.js +0 -273
  119. package/dist/data/orm/table.event-source.test.d.ts +0 -1
  120. package/dist/data/orm/table.event-source.test.js +0 -331
  121. package/dist/data/orm/types.test.d.ts +0 -1
  122. package/dist/data/orm/types.test.js +0 -409
  123. package/dist/data/package-table-identity.test.d.ts +0 -1
  124. package/dist/data/package-table-identity.test.js +0 -46
  125. package/dist/data/package-version-permissions.test.d.ts +0 -1
  126. package/dist/data/package-version-permissions.test.js +0 -107
  127. package/dist/data/package-version-resolver.test.d.ts +0 -4
  128. package/dist/data/package-version-resolver.test.js +0 -543
  129. package/dist/data/package-versions.test.d.ts +0 -1
  130. package/dist/data/package-versions.test.js +0 -227
  131. package/dist/data/persistent-vars.conflict.test.d.ts +0 -1
  132. package/dist/data/persistent-vars.conflict.test.js +0 -126
  133. package/dist/data/persistent-vars.migration.test.d.ts +0 -1
  134. package/dist/data/persistent-vars.migration.test.js +0 -133
  135. package/dist/data/persistent-vars.package-scope.test.d.ts +0 -1
  136. package/dist/data/persistent-vars.package-scope.test.js +0 -27
  137. package/dist/data/sync-recovery-queue.test.d.ts +0 -1
  138. package/dist/data/sync-recovery-queue.test.js +0 -215
  139. package/dist/data/table-signing.test.d.ts +0 -1
  140. package/dist/data/table-signing.test.js +0 -118
  141. package/dist/data/tool-access.test.d.ts +0 -1
  142. package/dist/data/tool-access.test.js +0 -166
  143. package/dist/data/user-permissions.test.d.ts +0 -1
  144. package/dist/data/user-permissions.test.js +0 -305
  145. package/dist/data/user-trust-levels.test.d.ts +0 -1
  146. package/dist/data/user-trust-levels.test.js +0 -37
  147. package/dist/define/also-implements.test.d.ts +0 -1
  148. package/dist/define/also-implements.test.js +0 -123
  149. package/dist/define/declare-contract.test.d.ts +0 -1
  150. package/dist/define/declare-contract.test.js +0 -573
  151. package/dist/define/define.test.d.ts +0 -1
  152. package/dist/define/define.test.js +0 -1010
  153. package/dist/define/empty-fields.test.d.ts +0 -1
  154. package/dist/define/empty-fields.test.js +0 -55
  155. package/dist/define/events-observables.test.d.ts +0 -1
  156. package/dist/define/events-observables.test.js +0 -1013
  157. package/dist/define/serve-members.test.d.ts +0 -1
  158. package/dist/define/serve-members.test.js +0 -630
  159. package/dist/define/vars.test.d.ts +0 -1
  160. package/dist/define/vars.test.js +0 -39
  161. package/dist/device/binary-peer-connection-v2.test.d.ts +0 -1
  162. package/dist/device/binary-peer-connection-v2.test.js +0 -730
  163. package/dist/device/binary-peer-connection.test.d.ts +0 -1
  164. package/dist/device/binary-peer-connection.test.js +0 -184
  165. package/dist/device/connection.test.d.ts +0 -1
  166. package/dist/device/connection.test.js +0 -613
  167. package/dist/device/device-election.test.d.ts +0 -1
  168. package/dist/device/device-election.test.js +0 -516
  169. package/dist/device/device.test.d.ts +0 -1
  170. package/dist/device/device.test.js +0 -243
  171. package/dist/device/frame-cipher.test.d.ts +0 -1
  172. package/dist/device/frame-cipher.test.js +0 -219
  173. package/dist/device/get-trust-level-fn.test.d.ts +0 -1
  174. package/dist/device/get-trust-level-fn.test.js +0 -685
  175. package/dist/device/streamed-socket.test.d.ts +0 -1
  176. package/dist/device/streamed-socket.test.js +0 -216
  177. package/dist/device/tx-encoding.test.d.ts +0 -1
  178. package/dist/device/tx-encoding.test.js +0 -295
  179. package/dist/device-pairing/cpace.test.d.ts +0 -1
  180. package/dist/device-pairing/cpace.test.js +0 -116
  181. package/dist/device-pairing/device-pairing.test.d.ts +0 -1
  182. package/dist/device-pairing/device-pairing.test.js +0 -211
  183. package/dist/hlc.test.d.ts +0 -1
  184. package/dist/hlc.test.js +0 -45
  185. package/dist/host-credentials.test.d.ts +0 -1
  186. package/dist/host-credentials.test.js +0 -88
  187. package/dist/identity/account-email.test.d.ts +0 -1
  188. package/dist/identity/account-email.test.js +0 -59
  189. package/dist/identity/anchor-document.test.d.ts +0 -1
  190. package/dist/identity/anchor-document.test.js +0 -16
  191. package/dist/identity/anchor-resolution.test.d.ts +0 -1
  192. package/dist/identity/anchor-resolution.test.js +0 -130
  193. package/dist/identity/key-change.test.d.ts +0 -1
  194. package/dist/identity/key-change.test.js +0 -811
  195. package/dist/invites/group-approval.test.d.ts +0 -1
  196. package/dist/invites/group-approval.test.js +0 -223
  197. package/dist/invites/invite-token.test.d.ts +0 -1
  198. package/dist/invites/invite-token.test.js +0 -123
  199. package/dist/keys.test.d.ts +0 -1
  200. package/dist/keys.test.js +0 -336
  201. package/dist/logging/console-logger.test.d.ts +0 -1
  202. package/dist/logging/console-logger.test.js +0 -300
  203. package/dist/logging/console-logs.table.test.d.ts +0 -1
  204. package/dist/logging/console-logs.table.test.js +0 -156
  205. package/dist/observable.test.d.ts +0 -1
  206. package/dist/observable.test.js +0 -309
  207. package/dist/package-build/build-package.test.d.ts +0 -1
  208. package/dist/package-build/build-package.test.js +0 -204
  209. package/dist/package-build/contract-add.test.d.ts +0 -1
  210. package/dist/package-build/contract-add.test.js +0 -467
  211. package/dist/package-build/freeze-contracts.test.d.ts +0 -1
  212. package/dist/package-build/freeze-contracts.test.js +0 -355
  213. package/dist/package-installer/package-author-signing.test.d.ts +0 -1
  214. package/dist/package-installer/package-author-signing.test.js +0 -200
  215. package/dist/package-installer/package-cloner.test.d.ts +0 -1
  216. package/dist/package-installer/package-cloner.test.js +0 -278
  217. package/dist/package-installer/package-creator.test.d.ts +0 -1
  218. package/dist/package-installer/package-creator.test.js +0 -908
  219. package/dist/package-installer/package-dev-tools.test.d.ts +0 -1
  220. package/dist/package-installer/package-dev-tools.test.js +0 -64
  221. package/dist/package-installer/package-installer.test.d.ts +0 -1
  222. package/dist/package-installer/package-installer.test.js +0 -882
  223. package/dist/package-installer/package-propagation.test.d.ts +0 -1
  224. package/dist/package-installer/package-propagation.test.js +0 -1269
  225. package/dist/package-installer/package-publisher.test.d.ts +0 -1
  226. package/dist/package-installer/package-publisher.test.js +0 -153
  227. package/dist/package-installer/package-remote-checker.test.d.ts +0 -1
  228. package/dist/package-installer/package-remote-checker.test.js +0 -334
  229. package/dist/package-installer/package-seed-installer.test.d.ts +0 -1
  230. package/dist/package-installer/package-seed-installer.test.js +0 -123
  231. package/dist/package-installer/package-tarball.test.d.ts +0 -1
  232. package/dist/package-installer/package-tarball.test.js +0 -75
  233. package/dist/package-installer/peers-core-installer.test.d.ts +0 -1
  234. package/dist/package-installer/peers-core-installer.test.js +0 -49
  235. package/dist/package-installer/peers-core-trust-anchor.test.d.ts +0 -1
  236. package/dist/package-installer/peers-core-trust-anchor.test.js +0 -155
  237. package/dist/package-loader/contract-package-loader.test.d.ts +0 -1
  238. package/dist/package-loader/contract-package-loader.test.js +0 -274
  239. package/dist/package-loader/host-authority-loading.test.d.ts +0 -1
  240. package/dist/package-loader/host-authority-loading.test.js +0 -104
  241. package/dist/package-loader/host-dispatch-policy.test.d.ts +0 -1
  242. package/dist/package-loader/host-dispatch-policy.test.js +0 -56
  243. package/dist/package-loader/isolated-artifact.test.d.ts +0 -1
  244. package/dist/package-loader/isolated-artifact.test.js +0 -688
  245. package/dist/package-loader/isolated-persistent-var-gateway.test.d.ts +0 -1
  246. package/dist/package-loader/isolated-persistent-var-gateway.test.js +0 -56
  247. package/dist/package-loader/isolated-table-gateway.test.d.ts +0 -1
  248. package/dist/package-loader/isolated-table-gateway.test.js +0 -633
  249. package/dist/package-loader/package-loader.test.d.ts +0 -1
  250. package/dist/package-loader/package-loader.test.js +0 -1764
  251. package/dist/package-loader/resolve-consumed-contracts.test.d.ts +0 -1
  252. package/dist/package-loader/resolve-consumed-contracts.test.js +0 -166
  253. package/dist/serial-json.compat.test.d.ts +0 -1
  254. package/dist/serial-json.compat.test.js +0 -369
  255. package/dist/serial-json.test.d.ts +0 -1
  256. package/dist/serial-json.test.js +0 -401
  257. package/dist/testing/mock-host-contract.test.d.ts +0 -1
  258. package/dist/testing/mock-host-contract.test.js +0 -782
  259. package/dist/utils.test.d.ts +0 -1
  260. package/dist/utils.test.js +0 -232
@@ -1,305 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const keys_1 = require("../keys");
4
- const user_permissions_1 = require("./user-permissions");
5
- // Test the user permissions logic directly without ORM dependencies
6
- describe("User Permissions Logic", () => {
7
- let testUser;
8
- let userKeys;
9
- let otherUserKeys;
10
- beforeEach(() => {
11
- userKeys = (0, keys_1.newKeys)();
12
- otherUserKeys = (0, keys_1.newKeys)();
13
- testUser = {
14
- userId: "test-user-1",
15
- name: "Test User",
16
- publicKey: userKeys.publicKey,
17
- publicBoxKey: userKeys.publicBoxKey,
18
- signature: "",
19
- };
20
- });
21
- describe("basic signature functionality", () => {
22
- it("should add signature to user object", () => {
23
- const signedUser = (0, keys_1.addSignatureToObject)(testUser, userKeys.secretKey);
24
- expect(signedUser.signature).toBeTruthy();
25
- expect(signedUser.signature).toContain(":");
26
- expect(signedUser.userId).toBe(testUser.userId);
27
- expect(signedUser.name).toBe(testUser.name);
28
- expect(signedUser.publicKey).toBe(testUser.publicKey);
29
- });
30
- it("should verify valid signature", () => {
31
- const signedUser = (0, keys_1.addSignatureToObject)(testUser, userKeys.secretKey);
32
- const isValid = (0, keys_1.isObjectSignatureValid)(signedUser);
33
- expect(isValid).toBe(true);
34
- });
35
- it("should reject invalid signature after modification", () => {
36
- const signedUser = (0, keys_1.addSignatureToObject)(testUser, userKeys.secretKey);
37
- // Modify the user after signing
38
- signedUser.name = "Modified Name";
39
- const isValid = (0, keys_1.isObjectSignatureValid)(signedUser);
40
- expect(isValid).toBe(false);
41
- });
42
- it("should extract public key from signature", () => {
43
- const signedUser = (0, keys_1.addSignatureToObject)(testUser, userKeys.secretKey);
44
- const extractedPublicKey = (0, keys_1.getPublicKeyFromObjectSignature)(signedUser);
45
- expect(extractedPublicKey).toBe(userKeys.publicKey);
46
- });
47
- });
48
- describe("signUserObject helper", () => {
49
- it("should sign user object correctly", () => {
50
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
51
- expect(signedUser.signature).toBeTruthy();
52
- expect((0, keys_1.isObjectSignatureValid)(signedUser)).toBe(true);
53
- expect((0, keys_1.getPublicKeyFromObjectSignature)(signedUser)).toBe(userKeys.publicKey);
54
- });
55
- });
56
- describe("verifyUserSignature", () => {
57
- it("should verify valid signature for new user", () => {
58
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
59
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser)).not.toThrow();
60
- });
61
- it("should verify valid signature for existing user update", () => {
62
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
63
- const updatedUser = {
64
- ...originalUser,
65
- name: "Updated Name",
66
- signature: "",
67
- };
68
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
69
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).not.toThrow();
70
- });
71
- it("should reject signature that does not match user public key for new user", () => {
72
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, otherUserKeys.secretKey);
73
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser)).toThrow("User signature must be signed with their own public key");
74
- });
75
- it("should reject signature that does not match existing user public key", () => {
76
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
77
- const updatedUser = {
78
- ...originalUser,
79
- name: "Updated Name",
80
- signature: "",
81
- };
82
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, otherUserKeys.secretKey);
83
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).toThrow("User update must be signed by the user themselves");
84
- });
85
- it("should reject public key changes", () => {
86
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
87
- const updatedUser = {
88
- ...originalUser,
89
- publicKey: otherUserKeys.publicKey,
90
- signature: "",
91
- };
92
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
93
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).toThrow("Public key changes are not currently supported");
94
- });
95
- it("should allow missing signature when no existing record", () => {
96
- const userWithoutSignature = { ...testUser };
97
- expect(() => (0, user_permissions_1.verifyUserSignature)(userWithoutSignature)).not.toThrow();
98
- });
99
- });
100
- describe("verifyUserSignature - Group Context (With Signature)", () => {
101
- it("should allow valid signature for new user in group context", () => {
102
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
103
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).not.toThrow();
104
- });
105
- it("should allow valid signature for existing user update in group context", () => {
106
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
107
- const updatedUser = {
108
- ...originalUser,
109
- name: "Updated Name",
110
- signature: "",
111
- };
112
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
113
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).not.toThrow();
114
- });
115
- it("should reject invalid signature in group context", () => {
116
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
117
- // Tamper with the signature
118
- signedUser.name = "Tampered Name";
119
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).toThrow();
120
- });
121
- it("should reject signature from wrong user for new user", () => {
122
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, otherUserKeys.secretKey);
123
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).toThrow();
124
- });
125
- it("should reject signature from wrong user for existing user update", () => {
126
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
127
- const updatedUser = {
128
- ...originalUser,
129
- name: "Updated Name",
130
- signature: "",
131
- };
132
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, otherUserKeys.secretKey);
133
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).toThrow();
134
- });
135
- it("should reject public key changes in group context", () => {
136
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
137
- const updatedUser = {
138
- ...originalUser,
139
- publicKey: otherUserKeys.publicKey, // Change public key
140
- signature: "",
141
- };
142
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
143
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).toThrow();
144
- });
145
- it("should allow changes with valid signature", () => {
146
- const originalUser = (0, user_permissions_1.signUserObject)({ ...testUser }, userKeys.secretKey);
147
- const updatedUser = {
148
- ...originalUser,
149
- name: "Updated Name",
150
- signature: "",
151
- };
152
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
153
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).not.toThrow();
154
- });
155
- });
156
- describe("verifyUserSignature - Signature Requirements", () => {
157
- it("should allow unsigned record when no existing record", () => {
158
- const userWithoutSignature = { ...testUser };
159
- expect(() => (0, user_permissions_1.verifyUserSignature)(userWithoutSignature, undefined)).not.toThrow();
160
- });
161
- it("should accept valid signature when signature is provided", () => {
162
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
163
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).not.toThrow();
164
- });
165
- it("should allow empty signature when no existing record", () => {
166
- const userWithEmptySignature = { ...testUser, signature: "" };
167
- expect(() => (0, user_permissions_1.verifyUserSignature)(userWithEmptySignature, undefined)).not.toThrow();
168
- });
169
- it("should reject whitespace-only signature (treated as a bad signature, not a stub)", () => {
170
- const userWithWhitespaceSignature = { ...testUser, signature: " " };
171
- expect(() => (0, user_permissions_1.verifyUserSignature)(userWithWhitespaceSignature, undefined)).toThrow();
172
- });
173
- });
174
- describe("verifyUserSignature - Unsigned stubs", () => {
175
- it("should allow unsigned stub when no existing record", () => {
176
- const stub = { ...testUser, signature: undefined };
177
- expect(() => (0, user_permissions_1.verifyUserSignature)(stub)).not.toThrow();
178
- });
179
- it("should allow unsigned stub to overwrite an existing unsigned stub", () => {
180
- const existingStub = { ...testUser, signature: undefined };
181
- const incomingStub = { ...testUser, name: "Updated Name", signature: undefined };
182
- expect(() => (0, user_permissions_1.verifyUserSignature)(incomingStub, existingStub)).not.toThrow();
183
- });
184
- it("should reject unsigned stub when a signed record already exists", () => {
185
- const signedExisting = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
186
- const incomingStub = { ...testUser, signature: undefined };
187
- expect(() => (0, user_permissions_1.verifyUserSignature)(incomingStub, signedExisting)).toThrow("Cannot overwrite a signed user record with an unsigned one");
188
- });
189
- it("should reject unsigned stub with different keys when signed record exists", () => {
190
- const signedExisting = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
191
- const incomingStub = {
192
- ...testUser,
193
- publicKey: otherUserKeys.publicKey,
194
- signature: undefined,
195
- };
196
- expect(() => (0, user_permissions_1.verifyUserSignature)(incomingStub, signedExisting)).toThrow("Cannot overwrite a signed user record with an unsigned one");
197
- });
198
- it("should allow a signed record to replace an unsigned stub", () => {
199
- const existingStub = { ...testUser, signature: undefined };
200
- const signedIncoming = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
201
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedIncoming, existingStub)).not.toThrow();
202
- });
203
- });
204
- describe("verifyUserSignature - anchors are not part of the claim", () => {
205
- // The anchor list on record is decided by the anchors, not by the row's author. A peer
206
- // stores a confirmed row with the list on record, and a peer on an older release stores
207
- // the row without the field at all. Both must still verify.
208
- const anchorA = { type: "https", url: "https://a.example/peers-identity.json" };
209
- const anchorB = { type: "https", url: "https://b.example/peers-identity.json" };
210
- it("verifies a signed row after its anchor list is replaced or removed", () => {
211
- const signed = (0, user_permissions_1.signUserObject)({ ...testUser, anchors: [anchorA] }, userKeys.secretKey);
212
- expect(() => (0, user_permissions_1.verifyUserSignature)({ ...signed, anchors: [anchorB] })).not.toThrow();
213
- const { anchors: _dropped, ...withoutAnchors } = signed;
214
- expect(() => (0, user_permissions_1.verifyUserSignature)(withoutAnchors)).not.toThrow();
215
- });
216
- it("verifies a row signed without anchors after a list is added", () => {
217
- const signed = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
218
- expect(() => (0, user_permissions_1.verifyUserSignature)({ ...signed, anchors: [anchorA] })).not.toThrow();
219
- });
220
- it("still rejects a change to any other field", () => {
221
- const signed = (0, user_permissions_1.signUserObject)({ ...testUser, anchors: [anchorA] }, userKeys.secretKey);
222
- expect(() => (0, user_permissions_1.verifyUserSignature)({ ...signed, name: "Someone else" })).toThrow();
223
- expect(() => (0, user_permissions_1.verifyUserSignature)({ ...signed, publicBoxKey: otherUserKeys.publicBoxKey })).toThrow();
224
- });
225
- it("does not leave the anchors off the signed row", () => {
226
- const signed = (0, user_permissions_1.signUserObject)({ ...testUser, anchors: [anchorA] }, userKeys.secretKey);
227
- expect(signed.anchors).toEqual([anchorA]);
228
- });
229
- });
230
- describe("edge cases and error handling", () => {
231
- it("should handle undefined user gracefully", () => {
232
- // @ts-expect-error - Testing edge case
233
- expect(() => (0, user_permissions_1.verifyUserSignature)(undefined, undefined)).toThrow();
234
- });
235
- it("should handle malformed signature", () => {
236
- const userWithBadSignature = { ...testUser, signature: "invalid-signature" };
237
- expect(() => (0, user_permissions_1.verifyUserSignature)(userWithBadSignature, undefined)).toThrow();
238
- });
239
- it("should handle missing public key in user object", () => {
240
- const userWithoutPublicKey = { ...testUser, publicKey: "" };
241
- const signedUser = (0, user_permissions_1.signUserObject)(userWithoutPublicKey, userKeys.secretKey);
242
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).toThrow();
243
- });
244
- it("should handle existing user with missing public key", () => {
245
- const originalUser = { ...testUser, publicKey: "" };
246
- const updatedUser = { ...testUser, name: "Updated" };
247
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
248
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).toThrow();
249
- });
250
- it("should handle various user values", () => {
251
- const userWithValues = {
252
- ...testUser,
253
- name: "Complex Name",
254
- };
255
- const signedUser = (0, user_permissions_1.signUserObject)(userWithValues, userKeys.secretKey);
256
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).not.toThrow();
257
- });
258
- });
259
- describe("security scenarios", () => {
260
- it("should prevent impersonation attacks", () => {
261
- // Attacker tries to create a user record with victim's public key but signed with attacker's key
262
- const victimUser = {
263
- userId: "victim-user",
264
- name: "Victim User",
265
- publicKey: userKeys.publicKey, // Victim's public key
266
- publicBoxKey: userKeys.publicBoxKey,
267
- signature: "",
268
- };
269
- const maliciousSignedUser = (0, user_permissions_1.signUserObject)(victimUser, otherUserKeys.secretKey); // Signed with attacker's key
270
- expect(() => (0, user_permissions_1.verifyUserSignature)(maliciousSignedUser, undefined)).toThrow();
271
- });
272
- it("should prevent profile takeover attacks", () => {
273
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
274
- // Attacker tries to update the user's profile with their own signature
275
- const maliciousUpdate = {
276
- ...originalUser,
277
- name: "Attacker Name",
278
- signature: "",
279
- };
280
- const maliciousSignedUpdate = (0, user_permissions_1.signUserObject)(maliciousUpdate, otherUserKeys.secretKey);
281
- expect(() => (0, user_permissions_1.verifyUserSignature)(maliciousSignedUpdate, originalUser)).toThrow();
282
- });
283
- it("should prevent public key rotation attacks", () => {
284
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
285
- // Attacker tries to change the public key to their own
286
- const keyRotationAttack = {
287
- ...originalUser,
288
- publicKey: otherUserKeys.publicKey, // Change to attacker's key
289
- signature: "",
290
- };
291
- const signedAttack = (0, user_permissions_1.signUserObject)(keyRotationAttack, userKeys.secretKey);
292
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedAttack, originalUser)).toThrow();
293
- });
294
- it("should allow legitimate name changes with proper signature", () => {
295
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
296
- const legitimateUpdate = {
297
- ...originalUser,
298
- name: "New Legal Name",
299
- signature: "",
300
- };
301
- const signedUpdate = (0, user_permissions_1.signUserObject)(legitimateUpdate, userKeys.secretKey);
302
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdate, originalUser)).not.toThrow();
303
- });
304
- });
305
- });
@@ -1 +0,0 @@
1
- export {};
@@ -1,37 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const socket_type_1 = require("../device/socket.type");
4
- const utils_1 = require("../utils");
5
- const user_trust_levels_1 = require("./user-trust-levels");
6
- function makeDataContext(userId, trustRecord) {
7
- const get = jest.fn().mockResolvedValue(trustRecord);
8
- const userContext = { userId };
9
- const dataContext = {
10
- userContext,
11
- tableContainer: {
12
- getTable: jest.fn().mockReturnValue({ get }),
13
- },
14
- };
15
- Object.assign(userContext, { userDataContext: dataContext });
16
- return { dataContext, get };
17
- }
18
- describe("getUserTrustLevel", () => {
19
- it("derives Self from the supplied personal context without a global user context", async () => {
20
- const userId = (0, utils_1.newid)();
21
- const { dataContext, get } = makeDataContext(userId);
22
- await expect((0, user_trust_levels_1.getUserTrustLevel)(dataContext, userId)).resolves.toBe(socket_type_1.TrustLevel.Self);
23
- expect(get).not.toHaveBeenCalled();
24
- });
25
- it("reads explicit trust from the supplied context", async () => {
26
- const remoteUserId = (0, utils_1.newid)();
27
- const { dataContext, get } = makeDataContext((0, utils_1.newid)(), {
28
- trustLevel: socket_type_1.TrustLevel.Trusted,
29
- });
30
- await expect((0, user_trust_levels_1.getUserTrustLevel)(dataContext, remoteUserId)).resolves.toBe(socket_type_1.TrustLevel.Trusted);
31
- expect(get).toHaveBeenCalledWith(remoteUserId);
32
- });
33
- it("returns Unknown when the supplied context has no trust assignment", async () => {
34
- const { dataContext } = makeDataContext((0, utils_1.newid)());
35
- await expect((0, user_trust_levels_1.getUserTrustLevel)(dataContext, (0, utils_1.newid)())).resolves.toBe(socket_type_1.TrustLevel.Unknown);
36
- });
37
- });
@@ -1 +0,0 @@
1
- export {};
@@ -1,123 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const frozen_contracts_1 = require("../contracts/frozen-contracts");
4
- const registry_1 = require("../contracts/registry");
5
- const isolated_artifact_1 = require("../package-loader/isolated-artifact");
6
- const peer_id_1 = require("../peer-id");
7
- const index_1 = require("./index");
8
- const manifest_1 = require("./manifest");
9
- const packageId = (0, peer_id_1.newid)();
10
- const contractId = (0, peer_id_1.newid)();
11
- /** Notes vN: `add` takes a title, and each later version adds an optional field. */
12
- function notes(version, extra = {}, alsoImplements) {
13
- return (0, index_1.defineContract)({
14
- contractId,
15
- version,
16
- name: "Notes",
17
- tools: [
18
- (0, index_1.defineTool)({
19
- name: "add",
20
- usageDescription: "Add a note.",
21
- accessLevel: index_1.AccessLevel.Writer,
22
- inputSchema: index_1.z.object({ title: index_1.z.string(), ...extra }),
23
- outputSchema: index_1.z.object({ id: index_1.z.string() }),
24
- handler: () => ({ id: "n1" }),
25
- }),
26
- ],
27
- ...(alsoImplements ? { alsoImplements } : {}),
28
- });
29
- }
30
- const pkg = (...contracts) => (0, index_1.definePackage)((builder) => {
31
- builder.packageId = packageId;
32
- builder.version = "2.0.0";
33
- for (const contract of contracts)
34
- builder.provides(contract);
35
- });
36
- /** What `frozen-contracts.json` holds after a stable release that provided `contracts`. */
37
- function frozenAfter(...contracts) {
38
- const manifest = (0, manifest_1.buildPackageManifest)(pkg(...contracts));
39
- return (0, frozen_contracts_1.freezeContracts)(undefined, manifest.provides.map((contract) => (0, isolated_artifact_1.isolatedContractToDefinition)(contract, [])), "1.0.0").frozen;
40
- }
41
- describe("alsoImplements in /define", () => {
42
- it("takes older versions by number and declarations, and refuses itself, repeats, and the rest", () => {
43
- expect(notes(2, {}, [1]).alsoImplements).toEqual([1]);
44
- expect(() => notes(2, {}, [2])).toThrow("can't also implement itself");
45
- expect(() => notes(2, {}, [3])).toThrow("alsoImplements v3 must be older than v2");
46
- expect(() => notes(3, {}, [1, 1])).toThrow(`also implements ${contractId}@1 twice`);
47
- expect(() => notes(2, {}, [0])).toThrow("must be a positive integer");
48
- expect(() => (0, index_1.defineContract)({ contractId, version: 2, name: "Notes", alsoImplements: [{}] })).toThrow("takes version numbers and declarations from declareContract");
49
- // Its own older version by declaration would skip the shape its stable release froze.
50
- const NotesV1 = (0, index_1.declareContract)({ contractId, version: 1, name: "Notes" });
51
- expect(() => (0, index_1.defineContract)({ contractId, version: 2, name: "Notes", alsoImplements: [NotesV1] })).toThrow("takes its own contract's older versions by number, not by declaration");
52
- });
53
- it("carries an older version's frozen shape in the manifest, so the host can register it", () => {
54
- const frozen = frozenAfter(notes(1));
55
- const manifest = (0, manifest_1.buildPackageManifest)(pkg(notes(2, { tag: index_1.z.string().optional() }, [1])), {
56
- frozen,
57
- });
58
- const [entry] = manifest.provides[0].alsoImplements ?? [];
59
- expect(entry).toMatchObject({ contractId, version: 1, definition: { contractId, version: 1 } });
60
- expect(entry.definition).not.toHaveProperty("frozenBy");
61
- expect(() => (0, isolated_artifact_1.validateIsolatedPackageArtifact)({ manifest, providerSource: "void 0;" }, { strict: true })).not.toThrow();
62
- // A cold start: the registry has never seen v1, and still routes it to v2.
63
- const registry = new registry_1.ContractRegistry();
64
- registry.registerBatch(packageId, manifest.provides.map((contract) => ({
65
- definition: (0, isolated_artifact_1.isolatedContractToDefinition)(contract, []),
66
- alsoImplements: contract.alsoImplements,
67
- })));
68
- expect(registry.getProviderPackageId(contractId, 1)).toBe(packageId);
69
- expect(registry.getProviderImplementation(contractId, 1, packageId)).toEqual({
70
- contractId,
71
- version: 2,
72
- });
73
- });
74
- it("needs the older version frozen, and refuses one the contract no longer satisfies", () => {
75
- expect(() => (0, manifest_1.buildPackageManifest)(pkg(notes(2, {}, [1])))).toThrow("also implements v1, which frozen-contracts.json doesn't record");
76
- const frozen = frozenAfter(notes(1));
77
- // v1 callers may leave out an optional field, so v2 can't require one.
78
- expect(() => (0, manifest_1.buildPackageManifest)(pkg(notes(2, { tag: index_1.z.string() }, [1])), { frozen })).toThrow(/doesn't satisfy Notes .*@1.*extra required input field 'tag'/);
79
- expect(() => (0, manifest_1.buildPackageManifest)(pkg(notes(1), notes(2, {}, [1])), { frozen })).toThrow(`also implements ${contractId}@1, which the package provides with pkg.provides`);
80
- });
81
- it("takes another contract's declaration, and implementContract takes alsoImplements too", () => {
82
- const otherId = (0, peer_id_1.newid)();
83
- const Other = (0, index_1.declareContract)({
84
- contractId: otherId,
85
- version: 1,
86
- name: "Other",
87
- tools: [
88
- (0, index_1.declareTool)({
89
- name: "add",
90
- usageDescription: "Add.",
91
- accessLevel: index_1.AccessLevel.Writer,
92
- inputSchema: index_1.z.object({ title: index_1.z.string() }),
93
- outputSchema: index_1.z.object({ id: index_1.z.string() }),
94
- }),
95
- ],
96
- });
97
- const manifest = (0, manifest_1.buildPackageManifest)(pkg(notes(2, {}, [Other])));
98
- expect(manifest.provides[0].alsoImplements?.[0]).toMatchObject({
99
- contractId: otherId,
100
- version: 1,
101
- definition: { name: "Other", tools: [expect.objectContaining({ name: "add" })] },
102
- });
103
- const NotesV2 = (0, index_1.declareContract)({
104
- contractId,
105
- version: 2,
106
- name: "Notes",
107
- tools: [
108
- (0, index_1.declareTool)({
109
- name: "add",
110
- usageDescription: "Add a note.",
111
- accessLevel: index_1.AccessLevel.Writer,
112
- inputSchema: index_1.z.object({ title: index_1.z.string() }),
113
- outputSchema: index_1.z.object({ id: index_1.z.string() }),
114
- }),
115
- ],
116
- });
117
- const implemented = (0, index_1.implementContract)(NotesV2, {
118
- tools: { add: () => ({ id: "n1" }) },
119
- alsoImplements: [1],
120
- });
121
- expect(implemented.alsoImplements).toEqual([1]);
122
- });
123
- });
@@ -1 +0,0 @@
1
- export {};