@peers-app/peers-sdk 0.27.2 → 0.27.4

package/dist/package-installer/package-publisher.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/package-installer/package-publisher.test.js

@@ -1,153 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const file_types_1 = require("../data/files/file.types");
-const keys_1 = require("../keys");
-const utils_1 = require("../utils");
-const package_author_signing_1 = require("./package-author-signing");
-const package_publisher_1 = require("./package-publisher");
-const package_tarball_1 = require("./package-tarball");
-function makeOpts(overrides) {
-    const keys = (0, keys_1.newKeys)();
-    return {
-        packageId: (0, utils_1.newid)(),
-        version: "1.0.0",
-        bundles: {
-            packageBundle: 'console.log("main");',
-        },
-        publicKey: keys.publicKey,
-        sign: (payload) => (0, package_author_signing_1.signPackageAuthor)({ ...payload, packageBundleFileHash: payload.packageBundleFileHash }, keys.secretKey),
-        ...overrides,
-    };
-}
-describe("package-publisher", () => {
-    describe("buildPublishArtifacts", () => {
-        it("round-trips through unpackPeersTarball and verifies signature", async () => {
-            const keys = (0, keys_1.newKeys)();
-            const opts = makeOpts({
-                publicKey: keys.publicKey,
-                sign: (payload) => (0, package_author_signing_1.signPackageAuthor)(payload, keys.secretKey),
-            });
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(opts);
-            expect(result.tarball).toBeInstanceOf(Uint8Array);
-            expect(result.tarball.length).toBeGreaterThan(0);
-            const unpacked = await (0, package_tarball_1.unpackPeersTarball)(result.tarball);
-            expect(unpacked.packageBundle).toBe(opts.bundles.packageBundle);
-            expect(unpacked.payload.packageId).toBe(opts.packageId);
-            expect(unpacked.payload.version).toBe("1.0.0");
-            expect(unpacked.payload.versionTag).toBe("stable");
-            expect(unpacked.payload.publicKey).toBe(keys.publicKey);
-            const sigResult = (0, package_author_signing_1.verifyPackageAuthorSignature)({
-                ...unpacked.payload,
-                packageAuthorSignature: unpacked.payload.packageAuthorSignature,
-            }, keys.publicKey);
-            expect(sigResult.valid).toBe(true);
-        });
-        it("pointer SHA-256 matches tarball bytes", async () => {
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(makeOpts());
-            const actualHash = (0, keys_1.hashBytes)(result.tarball);
-            expect(result.pointer.sha256).toBe(actualHash);
-            expect(result.tarballHash).toBe(actualHash);
-        });
-        it("includes optional routes and UI bundles", async () => {
-            const opts = makeOpts({
-                bundles: {
-                    packageBundle: 'console.log("main");',
-                    routesBundle: 'console.log("routes");',
-                    uiBundle: 'console.log("ui");',
-                },
-            });
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(opts);
-            const unpacked = await (0, package_tarball_1.unpackPeersTarball)(result.tarball);
-            expect(unpacked.routesBundle).toBe('console.log("routes");');
-            expect(unpacked.uiBundle).toBe('console.log("ui");');
-            expect(unpacked.payload.routesBundleFileHash).toBe((0, file_types_1.computeFileHash)('console.log("routes");'));
-            expect(unpacked.payload.uiBundleFileHash).toBe((0, file_types_1.computeFileHash)('console.log("ui");'));
-        });
-        it("omits optional bundles when not provided", async () => {
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(makeOpts());
-            const unpacked = await (0, package_tarball_1.unpackPeersTarball)(result.tarball);
-            expect(unpacked.routesBundle).toBeUndefined();
-            expect(unpacked.uiBundle).toBeUndefined();
-            expect(unpacked.payload.routesBundleFileHash).toBeUndefined();
-            expect(unpacked.payload.uiBundleFileHash).toBeUndefined();
-        });
-        it("rejects tampered bundle hash via signature verification", async () => {
-            const keys = (0, keys_1.newKeys)();
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(makeOpts({
-                publicKey: keys.publicKey,
-                sign: (payload) => (0, package_author_signing_1.signPackageAuthor)(payload, keys.secretKey),
-            }));
-            const sigResult = (0, package_author_signing_1.verifyPackageAuthorSignature)({
-                ...result.payload,
-                packageBundleFileHash: "tampered-hash",
-            }, keys.publicKey);
-            expect(sigResult.valid).toBe(false);
-        });
-        it("rejects wrong key via signature verification", async () => {
-            const authorKeys = (0, keys_1.newKeys)();
-            const wrongKeys = (0, keys_1.newKeys)();
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(makeOpts({
-                publicKey: authorKeys.publicKey,
-                sign: (payload) => (0, package_author_signing_1.signPackageAuthor)(payload, authorKeys.secretKey),
-            }));
-            const sigResult = (0, package_author_signing_1.verifyPackageAuthorSignature)(result.payload, wrongKeys.publicKey);
-            expect(sigResult.valid).toBe(false);
-        });
-        it("signs the package id as createdBy when the caller omits it", async () => {
-            const keys = (0, keys_1.newKeys)();
-            const opts = makeOpts({
-                publicKey: keys.publicKey,
-                sign: (payload) => (0, package_author_signing_1.signPackageAuthor)(payload, keys.secretKey),
-            });
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(opts);
-            const unpacked = await (0, package_tarball_1.unpackPeersTarball)(result.tarball);
-            expect(unpacked.payload.createdBy).toBe(opts.packageId);
-            expect((0, package_author_signing_1.verifyPackageAuthorSignature)({ ...unpacked.payload, createdBy: opts.packageId }, keys.publicKey).valid).toBe(true);
-        });
-        it("defaults versionTag to stable", async () => {
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(makeOpts());
-            expect(result.pointer.versionTag).toBe("stable");
-            expect(result.payload.versionTag).toBe("stable");
-        });
-        it("respects custom versionTag", async () => {
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(makeOpts({ versionTag: "beta" }));
-            expect(result.pointer.versionTag).toBe("beta");
-            expect(result.payload.versionTag).toBe("beta");
-            expect(result.pointer.path).toBe("v1.0.0-beta.peers-pkg.tar.gz");
-        });
-        it("uses provided packageVersionId", async () => {
-            const pvId = (0, utils_1.newid)();
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(makeOpts({ packageVersionId: pvId }));
-            expect(result.pointer.packageVersionId).toBe(pvId);
-            expect(result.payload.packageVersionId).toBe(pvId);
-        });
-        it("generates packageVersionId when not provided", async () => {
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(makeOpts());
-            expect(result.pointer.packageVersionId).toHaveLength(25);
-            expect(result.payload.packageVersionId).toBe(result.pointer.packageVersionId);
-        });
-        it("pointer path follows naming convention", async () => {
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(makeOpts({ version: "2.5.1", versionTag: "stable" }));
-            expect(result.pointer.path).toBe("v2.5.1-stable.peers-pkg.tar.gz");
-        });
-        it("pointer contains publishedAt ISO timestamp", async () => {
-            const before = new Date().toISOString();
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(makeOpts());
-            const after = new Date().toISOString();
-            expect(result.pointer.publishedAt).toBeDefined();
-            expect(result.pointer.publishedAt >= before).toBe(true);
-            expect(result.pointer.publishedAt <= after).toBe(true);
-        });
-        it("bundle hashes in payload match actual content hashes", async () => {
-            const bundles = {
-                packageBundle: "const x = 1;",
-                routesBundle: "const r = 2;",
-                uiBundle: "const u = 3;",
-            };
-            const result = await (0, package_publisher_1.buildPublishArtifacts)(makeOpts({ bundles }));
-            expect(result.payload.packageBundleFileHash).toBe((0, file_types_1.computeFileHash)(bundles.packageBundle));
-            expect(result.payload.routesBundleFileHash).toBe((0, file_types_1.computeFileHash)(bundles.routesBundle));
-            expect(result.payload.uiBundleFileHash).toBe((0, file_types_1.computeFileHash)(bundles.uiBundle));
-        });
-    });
-});

package/dist/package-installer/package-remote-checker.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/package-installer/package-remote-checker.test.js

@@ -1,334 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const mockPackageVersionsGet = jest.fn();
-const mockPackageVersionsSignAndSave = jest.fn();
-jest.mock("../data/package-versions", () => {
-    const actual = jest.requireActual("../data/package-versions");
-    return {
-        ...actual,
-        PackageVersions: (ctx) => ({
-            get: (packageVersionId) => mockPackageVersionsGet(ctx, packageVersionId),
-            signAndSave: (pv) => mockPackageVersionsSignAndSave(ctx, pv),
-        }),
-    };
-});
-const mockPackagesGet = jest.fn();
-const mockPackagesSignAndSave = jest.fn();
-jest.mock("../data/packages", () => ({
-    Packages: (ctx) => ({
-        get: (packageId) => mockPackagesGet(ctx, packageId),
-        signAndSave: (pkg) => mockPackagesSignAndSave(ctx, pkg),
-    }),
-}));
-const mockSaveBundleFile = jest.fn();
-jest.mock("./package-installer", () => ({
-    saveBundleFile: (...args) => mockSaveBundleFile(...args),
-}));
-const mockActivateBestEligibleVersion = jest.fn();
-jest.mock("./package-propagation", () => ({
-    activateBestEligibleVersion: (...args) => mockActivateBestEligibleVersion(...args),
-}));
-const mockResolveDevicePackageVersion = jest.fn();
-jest.mock("../data/package-version-resolver", () => ({
-    resolveDevicePackageVersion: (...args) => mockResolveDevicePackageVersion(...args),
-}));
-// Pin the host to a fresh "current" peers-core key and revoke a fresh "old" one so the
-// revocation tests do not depend on the real constants.
-jest.mock("../system-ids", () => {
-    const actual = jest.requireActual("../system-ids");
-    const { newKeys: makeKeys } = jest.requireActual("../keys");
-    const revoked = makeKeys();
-    const current = makeKeys();
-    return {
-        ...actual,
-        peersCorePublishPublicKey: current.publicKey,
-        peersCoreRevokedPublishPublicKeys: [revoked.publicKey],
-        __testKeys: { revoked, current },
-    };
-});
-const file_types_1 = require("../data/files/file.types");
-const keys_1 = require("../keys");
-const systemIds = require("../system-ids");
-const package_author_signing_1 = require("./package-author-signing");
-const package_remote_checker_1 = require("./package-remote-checker");
-const package_tarball_1 = require("./package-tarball");
-// PKG_ID is peers-core's id so the trust-anchor re-pin path is exercised.
-const PKG_ID = "00mh0wlipjixk2gqmurbwee0o";
-const PV_ID = "00mpdg7xstwt3oe51x9brk15i";
-const { revoked: revokedCoreKeys, current: currentCoreKeys } = systemIds.__testKeys;
-function makeContext(dataContextId) {
-    return { dataContextId };
-}
-async function makeSignedRemoteResult(secretKey, publicKey, overrides = {}) {
-    const bundleCode = overrides.packageBundleFileHash
-        ? "console.log('different');"
-        : "console.log('hello');";
-    const bundleHash = (0, file_types_1.computeFileHash)(bundleCode);
-    const payloadBase = {
-        packageId: PKG_ID,
-        packageVersionId: PV_ID,
-        version: "1.0.0",
-        versionTag: "stable",
-        packageBundleFileHash: bundleHash,
-        routesBundleFileHash: undefined,
-        uiBundleFileHash: undefined,
-        ...overrides,
-    };
-    const signature = (0, package_author_signing_1.signPackageAuthor)({
-        packageId: payloadBase.packageId,
-        packageVersionId: payloadBase.packageVersionId,
-        version: payloadBase.version,
-        versionTag: payloadBase.versionTag,
-        packageBundleFileHash: payloadBase.packageBundleFileHash,
-        routesBundleFileHash: payloadBase.routesBundleFileHash,
-        uiBundleFileHash: payloadBase.uiBundleFileHash,
-    }, secretKey);
-    const payload = {
-        ...payloadBase,
-        publicKey,
-        packageAuthorSignature: signature,
-    };
-    const tarball = await (0, package_tarball_1.packPeersTarball)({ payload, packageBundle: bundleCode });
-    const pointer = {
-        packageVersionId: payload.packageVersionId,
-        version: payload.version,
-        versionTag: payload.versionTag,
-        path: "v1.0.0-stable.peers-pkg.tar.gz",
-        sha256: (0, keys_1.hashBytes)(tarball),
-        publishedAt: new Date().toISOString(),
-    };
-    return { payload, bundleCode, bundleHash, tarball, pointer };
-}
-describe("package-remote-checker", () => {
-    let keys;
-    beforeAll(() => {
-        keys = (0, keys_1.newKeys)();
-    });
-    beforeEach(() => {
-        (0, package_remote_checker_1.clearRemoteCheckCache)();
-        jest.clearAllMocks();
-        mockSaveBundleFile.mockImplementation(async (_ctx, content, name) => ({
-            fileId: `file-${name}`,
-            fileHash: (0, file_types_1.computeFileHash)(content),
-        }));
-        mockPackageVersionsSignAndSave.mockImplementation(async (_ctx, pv) => pv);
-        mockPackagesSignAndSave.mockImplementation(async (_ctx, pkg) => pkg);
-        mockActivateBestEligibleVersion.mockResolvedValue({
-            activated: true,
-            activePackageVersionId: PV_ID,
-        });
-        mockResolveDevicePackageVersion.mockResolvedValue({ loaded: true, upgraded: true });
-    });
-    describe("checkPackageRemoteForNewVersion", () => {
-        it("downloads and verifies tarball when new version available", async () => {
-            const { pointer, tarball, bundleCode } = await makeSignedRemoteResult(keys.secretKey, keys.publicKey);
-            const http = {
-                fetchJson: jest.fn().mockResolvedValue(pointer),
-                fetchBinary: jest.fn().mockResolvedValue(tarball),
-            };
-            const result = await (0, package_remote_checker_1.checkPackageRemoteForNewVersion)(PKG_ID, "https://example.com/packages/test", "stable", http);
-            expect(result).not.toBeNull();
-            expect(result?.packageId).toBe(PKG_ID);
-            expect(result?.unpacked.payload.version).toBe("1.0.0");
-            expect(result?.unpacked.packageBundle).toBe(bundleCode);
-        });
-        it("verifies tarball integrity with byte-level hash", async () => {
-            const { pointer, tarball } = await makeSignedRemoteResult(keys.secretKey, keys.publicKey);
-            const badPointer = { ...pointer, sha256: (0, keys_1.hashValue)(new TextDecoder().decode(tarball)) };
-            const http = {
-                fetchJson: jest.fn().mockResolvedValue(badPointer),
-                fetchBinary: jest.fn().mockResolvedValue(tarball),
-            };
-            const result = await (0, package_remote_checker_1.checkPackageRemoteForNewVersion)(PKG_ID, "https://example.com/packages/test", "stable", http);
-            expect(result).toBeNull();
-        });
-        it("rejects tarball with invalid author signature", async () => {
-            const bundleCode = "console.log('bad');";
-            const bundleHash = (0, file_types_1.computeFileHash)(bundleCode);
-            const payload = {
-                packageId: PKG_ID,
-                packageVersionId: PV_ID,
-                version: "1.0.0",
-                versionTag: "stable",
-                packageBundleFileHash: bundleHash,
-                publicKey: keys.publicKey,
-                packageAuthorSignature: "invalidSignatureHere", // invalid
-            };
-            const tarball = await (0, package_tarball_1.packPeersTarball)({ payload, packageBundle: bundleCode });
-            const pointer = {
-                packageVersionId: PV_ID,
-                version: "1.0.0",
-                versionTag: "stable",
-                path: "v1.0.0-stable.peers-pkg.tar.gz",
-                sha256: "",
-                publishedAt: new Date().toISOString(),
-            };
-            const http = {
-                fetchJson: jest.fn().mockResolvedValue(pointer),
-                fetchBinary: jest.fn().mockResolvedValue(tarball),
-            };
-            // Should return null (error caught internally and logged)
-            const result = await (0, package_remote_checker_1.checkPackageRemoteForNewVersion)(PKG_ID, "https://example.com/packages/test", "stable", http);
-            expect(result).toBeNull();
-        });
-        it("memoizes results per (updateUrl, tag)", async () => {
-            const { pointer, tarball } = await makeSignedRemoteResult(keys.secretKey, keys.publicKey);
-            const http = {
-                fetchJson: jest.fn().mockResolvedValue(pointer),
-                fetchBinary: jest.fn().mockResolvedValue(tarball),
-            };
-            await (0, package_remote_checker_1.checkPackageRemoteForNewVersion)(PKG_ID, "https://example.com/pkg", "stable", http);
-            await (0, package_remote_checker_1.checkPackageRemoteForNewVersion)(PKG_ID, "https://example.com/pkg", "stable", http);
-            expect(http.fetchJson).toHaveBeenCalledTimes(1);
-            expect(http.fetchBinary).toHaveBeenCalledTimes(1);
-        });
-        it("rejects tarball with mismatched bundle hash", async () => {
-            const bundleCode = "console.log('real');";
-            const fakeHash = "notTheRealHash";
-            const signature = (0, package_author_signing_1.signPackageAuthor)({
-                packageId: PKG_ID,
-                packageVersionId: PV_ID,
-                version: "1.0.0",
-                versionTag: "stable",
-                packageBundleFileHash: fakeHash, // hash in payload doesn't match actual bundle
-            }, keys.secretKey);
-            const payload = {
-                packageId: PKG_ID,
-                packageVersionId: PV_ID,
-                version: "1.0.0",
-                versionTag: "stable",
-                packageBundleFileHash: fakeHash,
-                publicKey: keys.publicKey,
-                packageAuthorSignature: signature,
-            };
-            const tarball = await (0, package_tarball_1.packPeersTarball)({ payload, packageBundle: bundleCode });
-            const http = {
-                fetchJson: jest.fn().mockResolvedValue({
-                    packageVersionId: PV_ID,
-                    version: "1.0.0",
-                    versionTag: "stable",
-                    path: "test.tar.gz",
-                    sha256: "",
-                    publishedAt: new Date().toISOString(),
-                }),
-                fetchBinary: jest.fn().mockResolvedValue(tarball),
-            };
-            const result = await (0, package_remote_checker_1.checkPackageRemoteForNewVersion)(PKG_ID, "https://example.com/pkg2", "stable", http);
-            // Error logged, returns null
-            expect(result).toBeNull();
-        });
-        it("rejects pointer and payload mismatches", async () => {
-            const { pointer, tarball } = await makeSignedRemoteResult(keys.secretKey, keys.publicKey);
-            const http = {
-                fetchJson: jest.fn().mockResolvedValue({ ...pointer, version: "2.0.0" }),
-                fetchBinary: jest.fn().mockResolvedValue(tarball),
-            };
-            const result = await (0, package_remote_checker_1.checkPackageRemoteForNewVersion)(PKG_ID, "https://example.com/pkg3", "stable", http);
-            expect(result).toBeNull();
-        });
-    });
-    describe("checkAndInstallPackageRemoteVersion", () => {
-        it("checks local version existence per context outside the remote cache", async () => {
-            const groupA = makeContext("group-a");
-            const groupB = makeContext("group-b");
-            const { pointer, tarball } = await makeSignedRemoteResult(keys.secretKey, keys.publicKey);
-            const pkg = {
-                packageId: PKG_ID,
-                name: "test",
-                publishPublicKey: keys.publicKey,
-                updateUrl: "https://example.com/pkg",
-            };
-            const http = {
-                fetchJson: jest.fn().mockResolvedValue(pointer),
-                fetchBinary: jest.fn().mockResolvedValue(tarball),
-            };
-            mockPackageVersionsGet.mockImplementation(async (ctx, pvId) => ctx.dataContextId === "group-a" ? { packageVersionId: pvId } : undefined);
-            mockPackagesGet.mockResolvedValue(pkg);
-            const first = await (0, package_remote_checker_1.checkAndInstallPackageRemoteVersion)(groupA, pkg, "stable", http);
-            const second = await (0, package_remote_checker_1.checkAndInstallPackageRemoteVersion)(groupB, pkg, "stable", http);
-            expect(first).toBeNull();
-            expect(second?.packageVersion.packageVersionId).toBe(PV_ID);
-            expect(http.fetchJson).toHaveBeenCalledTimes(1);
-            expect(mockSaveBundleFile).toHaveBeenCalled();
-        });
-        it("re-pins peers-core from a revoked key and installs a release signed by the current key", async () => {
-            expect(PKG_ID).toBe(systemIds.peersCorePackageId);
-            const ctx = makeContext("user-ctx");
-            const { pointer, tarball } = await makeSignedRemoteResult(currentCoreKeys.secretKey, currentCoreKeys.publicKey);
-            let pkg = {
-                packageId: PKG_ID,
-                name: "peers-core",
-                publishPublicKey: revokedCoreKeys.publicKey,
-                updateUrl: "https://example.com/peers-core",
-            };
-            const http = {
-                fetchJson: jest.fn().mockResolvedValue(pointer),
-                fetchBinary: jest.fn().mockResolvedValue(tarball),
-            };
-            mockPackageVersionsGet.mockResolvedValue(undefined);
-            mockPackagesGet.mockImplementation(async () => pkg);
-            mockPackagesSignAndSave.mockImplementation(async (_ctx, saved) => {
-                pkg = saved;
-            });
-            const warn = jest.spyOn(console, "warn").mockImplementation(() => { });
-            const installed = await (0, package_remote_checker_1.checkAndInstallPackageRemoteVersion)(ctx, pkg, "stable", http);
-            expect(installed?.packageVersion.packageVersionId).toBe(PV_ID);
-            expect(mockPackagesSignAndSave).toHaveBeenCalledWith(expect.anything(), expect.objectContaining({ packageId: PKG_ID, publishPublicKey: currentCoreKeys.publicKey }));
-            expect(pkg.publishPublicKey).toBe(currentCoreKeys.publicKey);
-            warn.mockRestore();
-        });
-        it("rejects a remote release signed by a revoked key", async () => {
-            const ctx = makeContext("user-ctx");
-            const { pointer, tarball } = await makeSignedRemoteResult(revokedCoreKeys.secretKey, revokedCoreKeys.publicKey);
-            const pkg = {
-                packageId: PKG_ID,
-                name: "peers-core",
-                publishPublicKey: currentCoreKeys.publicKey,
-                updateUrl: "https://example.com/peers-core-old",
-            };
-            const http = {
-                fetchJson: jest.fn().mockResolvedValue(pointer),
-                fetchBinary: jest.fn().mockResolvedValue(tarball),
-            };
-            mockPackageVersionsGet.mockResolvedValue(undefined);
-            mockPackagesGet.mockResolvedValue(pkg);
-            const error = jest.spyOn(console, "error").mockImplementation(() => { });
-            const installed = await (0, package_remote_checker_1.checkAndInstallPackageRemoteVersion)(ctx, pkg, "stable", http);
-            expect(installed).toBeNull();
-            expect(mockSaveBundleFile).not.toHaveBeenCalled();
-            expect(mockPackageVersionsSignAndSave).not.toHaveBeenCalled();
-            error.mockRestore();
-        });
-    });
-    describe("installRemotePackageVersion", () => {
-        it("rejects publisher key mismatch before saving files", async () => {
-            const { pointer, payload } = await makeSignedRemoteResult(keys.secretKey, keys.publicKey);
-            const result = {
-                packageId: PKG_ID,
-                pointer,
-                unpacked: { payload, packageBundle: "console.log('hello');" },
-            };
-            mockPackagesGet.mockResolvedValue({
-                packageId: PKG_ID,
-                name: "test",
-                publishPublicKey: (0, keys_1.newKeys)().publicKey,
-            });
-            await expect((0, package_remote_checker_1.installRemotePackageVersion)(makeContext("group-a"), result)).rejects.toThrow("Package publisher key mismatch");
-            expect(mockSaveBundleFile).not.toHaveBeenCalled();
-        });
-        it("establishes TOFU key and activates after installing", async () => {
-            const { pointer, payload, bundleCode } = await makeSignedRemoteResult(keys.secretKey, keys.publicKey);
-            const pkg = { packageId: PKG_ID, name: "test", publishPublicKey: "" };
-            mockPackagesGet.mockResolvedValue(pkg);
-            const installed = await (0, package_remote_checker_1.installRemotePackageVersion)(makeContext("group-a"), {
-                packageId: PKG_ID,
-                pointer,
-                unpacked: { payload, packageBundle: bundleCode },
-            });
-            expect(installed.activated).toBe(true);
-            expect(mockPackagesSignAndSave).toHaveBeenCalledWith(expect.anything(), expect.objectContaining({ publishPublicKey: keys.publicKey }));
-            expect(mockPackageVersionsSignAndSave).toHaveBeenCalled();
-            expect(mockResolveDevicePackageVersion).toHaveBeenCalledWith(expect.objectContaining({ packageId: PKG_ID }), expect.anything(), { force: true });
-        });
-    });
-});

package/dist/package-installer/package-seed-installer.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/package-installer/package-seed-installer.test.js

@@ -1,123 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const mockPackageVersionsList = jest.fn();
-const mockPackageVersionsSignAndSave = jest.fn();
-jest.mock("../data/package-versions", () => {
-    const actual = jest.requireActual("../data/package-versions");
-    return {
-        ...actual,
-        PackageVersions: (_ctx) => ({
-            list: (filter) => mockPackageVersionsList(filter),
-            signAndSave: (pv, opts) => mockPackageVersionsSignAndSave(pv, opts),
-        }),
-    };
-});
-const mockPackagesGet = jest.fn();
-const mockPackagesSignAndSave = jest.fn();
-jest.mock("../data/packages", () => ({
-    Packages: (_ctx) => ({
-        get: (packageId) => mockPackagesGet(packageId),
-        signAndSave: (pkg, opts) => mockPackagesSignAndSave(pkg, opts),
-    }),
-}));
-const mockSaveBundleFile = jest.fn();
-jest.mock("./package-installer", () => ({
-    saveBundleFile: (...args) => mockSaveBundleFile(...args),
-}));
-const keys_1 = require("../keys");
-const package_seed_installer_1 = require("./package-seed-installer");
-const PKG_ID = "00mh0wlipjixk2gqmurbwee0o";
-function makeContext() {
-    return {
-        dataContextId: "ctx",
-        packageLoader: {
-            loadPackage: jest.fn(),
-        },
-    };
-}
-function makeOpts(overrides = {}) {
-    return {
-        packageId: PKG_ID,
-        name: "peers-core",
-        description: "Core package",
-        createdBy: "00m87fbwu96jzf8qnwllly0fd",
-        publishPublicKey: "publish-key",
-        versionFollowRange: "latest",
-        followVersionTags: "stable",
-        updateUrl: "https://example.com/packages/peers-core",
-        remoteRepo: "https://github.com/peers-app/peers-core",
-        version: "1.2.3",
-        versionTag: "stable",
-        packageBundleCode: "console.log('package');",
-        routesBundleCode: "console.log('routes');",
-        uiBundleCode: "console.log('ui');",
-        ...overrides,
-    };
-}
-describe("package-seed-installer", () => {
-    beforeEach(() => {
-        jest.clearAllMocks();
-        mockSaveBundleFile.mockImplementation(async (_ctx, content, name) => ({
-            fileId: `file-${name}`,
-            fileHash: (0, keys_1.hashValue)(content),
-        }));
-        mockPackagesSignAndSave.mockImplementation(async (pkg) => pkg);
-        mockPackageVersionsSignAndSave.mockImplementation(async (pv) => pv);
-        mockPackageVersionsList.mockResolvedValue([]);
-        mockPackagesGet.mockResolvedValue(undefined);
-    });
-    it("creates package and initial active package version", async () => {
-        const seeded = await (0, package_seed_installer_1.seedPackageInContext)(makeContext(), makeOpts());
-        expect(seeded).toBe(true);
-        expect(mockPackagesSignAndSave).toHaveBeenCalledWith(expect.objectContaining({
-            packageId: PKG_ID,
-            publishPublicKey: "publish-key",
-            versionFollowRange: "latest",
-            followVersionTags: "stable",
-        }), { saveAsSnapshot: true });
-        expect(mockPackageVersionsSignAndSave).toHaveBeenCalledWith(expect.objectContaining({
-            packageId: PKG_ID,
-            version: "1.2.3",
-            versionTag: "stable",
-            packageBundleFileHash: (0, keys_1.hashValue)("console.log('package');"),
-        }), { saveAsSnapshot: true });
-        expect(mockPackagesSignAndSave).toHaveBeenLastCalledWith(expect.objectContaining({ activePackageVersionId: expect.any(String) }), { saveAsSnapshot: true });
-    });
-    it("is a no-op when package already has any version installed", async () => {
-        mockPackagesGet.mockResolvedValue({ packageId: PKG_ID, name: "peers-core" });
-        mockPackageVersionsList.mockResolvedValue([{ packageVersionId: "existing" }]);
-        const seeded = await (0, package_seed_installer_1.seedPackageInContext)(makeContext(), makeOpts());
-        expect(seeded).toBe(false);
-        expect(mockSaveBundleFile).not.toHaveBeenCalled();
-        expect(mockPackageVersionsSignAndSave).not.toHaveBeenCalled();
-    });
-    it("installs initial version when package exists without versions", async () => {
-        mockPackagesGet.mockResolvedValue({
-            packageId: PKG_ID,
-            name: "peers-core",
-            publishPublicKey: "",
-            signature: "",
-        });
-        mockPackageVersionsList.mockResolvedValue([]);
-        const seeded = await (0, package_seed_installer_1.seedPackageInContext)(makeContext(), makeOpts());
-        expect(seeded).toBe(true);
-        expect(mockSaveBundleFile).toHaveBeenCalled();
-        expect(mockPackageVersionsSignAndSave).toHaveBeenCalled();
-        expect(mockPackagesSignAndSave).toHaveBeenLastCalledWith(expect.objectContaining({
-            activePackageVersionId: expect.any(String),
-            publishPublicKey: "publish-key",
-            updateUrl: "https://example.com/packages/peers-core",
-        }), { saveAsSnapshot: true });
-    });
-    it("loads seeded package and persists appNavs when requested", async () => {
-        const ctx = makeContext();
-        ctx.packageLoader.loadPackage.mockResolvedValue({
-            appNavs: [{ appId: "tasks", label: "Tasks", path: "tasks" }],
-        });
-        await (0, package_seed_installer_1.seedPackageInContext)(ctx, makeOpts({ loadAfterSeed: true }));
-        expect(ctx.packageLoader.loadPackage).toHaveBeenCalledWith(expect.objectContaining({ packageId: PKG_ID }), expect.objectContaining({ force: true, packageVersionId: expect.any(String) }));
-        expect(mockPackageVersionsSignAndSave).toHaveBeenLastCalledWith(expect.objectContaining({
-            appNavs: [{ appId: "tasks", label: "Tasks", path: "tasks" }],
-        }), { saveAsSnapshot: true });
-    });
-});

package/dist/package-installer/package-tarball.test.d.ts

@@ -1 +0,0 @@
-export {};