@peers-app/peers-sdk 0.27.3 → 0.27.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (272) hide show
  1. package/dist/contracts/contract-proxy.d.ts +7 -0
  2. package/dist/contracts/contract-proxy.js +19 -2
  3. package/dist/contracts/contract-transport.d.ts +2 -1
  4. package/dist/contracts/contract-transport.js +24 -2
  5. package/dist/contracts/create-local-consumer.js +16 -1
  6. package/dist/contracts/index.d.ts +2 -0
  7. package/dist/contracts/index.js +2 -0
  8. package/dist/contracts/system/index.d.ts +2 -0
  9. package/dist/contracts/system/index.js +2 -0
  10. package/dist/contracts/system/invites-contract.js +2 -1
  11. package/dist/contracts/system/sync-check-contract.d.ts +97 -0
  12. package/dist/contracts/system/sync-check-contract.js +115 -0
  13. package/dist/contracts/tool-arguments.d.ts +15 -0
  14. package/dist/contracts/tool-arguments.js +41 -0
  15. package/dist/contracts/tool-catalog-service.js +2 -12
  16. package/dist/contracts/tool-catalog.js +6 -2
  17. package/dist/data/change-tracking.d.ts +40 -0
  18. package/dist/data/change-tracking.js +89 -0
  19. package/dist/data/orm/types.d.ts +24 -7
  20. package/dist/data/orm/types.js +97 -24
  21. package/dist/define/manifest.js +6 -34
  22. package/dist/device/binary-peer-connection-v2.d.ts +7 -15
  23. package/dist/device/binary-peer-connection-v2.js +14 -30
  24. package/dist/device/connection.d.ts +34 -43
  25. package/dist/device/connection.js +188 -186
  26. package/dist/device/device.d.ts +1 -8
  27. package/dist/device/device.js +1 -30
  28. package/dist/device/socket.type.d.ts +6 -12
  29. package/dist/package-loader/package-loader.js +27 -22
  30. package/dist/system-ids.d.ts +5 -0
  31. package/dist/system-ids.js +6 -1
  32. package/package.json +4 -2
  33. package/dist/context/user-context-identity.test.d.ts +0 -1
  34. package/dist/context/user-context-identity.test.js +0 -220
  35. package/dist/contracts/__tests__/action-dispatch.test.d.ts +0 -1
  36. package/dist/contracts/__tests__/action-dispatch.test.js +0 -319
  37. package/dist/contracts/__tests__/also-implements.test.d.ts +0 -1
  38. package/dist/contracts/__tests__/also-implements.test.js +0 -110
  39. package/dist/contracts/__tests__/builder.test.d.ts +0 -1
  40. package/dist/contracts/__tests__/builder.test.js +0 -669
  41. package/dist/contracts/__tests__/contract-events.test.d.ts +0 -1
  42. package/dist/contracts/__tests__/contract-events.test.js +0 -199
  43. package/dist/contracts/__tests__/contract-observables.test.d.ts +0 -1
  44. package/dist/contracts/__tests__/contract-observables.test.js +0 -290
  45. package/dist/contracts/__tests__/contract-provider-router.test.d.ts +0 -1
  46. package/dist/contracts/__tests__/contract-provider-router.test.js +0 -315
  47. package/dist/contracts/__tests__/contract-proxy.test.d.ts +0 -1
  48. package/dist/contracts/__tests__/contract-proxy.test.js +0 -657
  49. package/dist/contracts/__tests__/contract-resolvers.test.d.ts +0 -1
  50. package/dist/contracts/__tests__/contract-resolvers.test.js +0 -758
  51. package/dist/contracts/__tests__/contract-subscription-lifecycle.test.d.ts +0 -1
  52. package/dist/contracts/__tests__/contract-subscription-lifecycle.test.js +0 -353
  53. package/dist/contracts/__tests__/contract-table-events.test.d.ts +0 -1
  54. package/dist/contracts/__tests__/contract-table-events.test.js +0 -209
  55. package/dist/contracts/__tests__/contract-transport.test.d.ts +0 -1
  56. package/dist/contracts/__tests__/contract-transport.test.js +0 -163
  57. package/dist/contracts/__tests__/extract.test.d.ts +0 -1
  58. package/dist/contracts/__tests__/extract.test.js +0 -145
  59. package/dist/contracts/__tests__/frozen-contracts.test.d.ts +0 -1
  60. package/dist/contracts/__tests__/frozen-contracts.test.js +0 -191
  61. package/dist/contracts/__tests__/generic-tool-dispatch.test.d.ts +0 -1
  62. package/dist/contracts/__tests__/generic-tool-dispatch.test.js +0 -130
  63. package/dist/contracts/__tests__/host-contract-client.test.d.ts +0 -1
  64. package/dist/contracts/__tests__/host-contract-client.test.js +0 -793
  65. package/dist/contracts/__tests__/host-contract-consumer.test.d.ts +0 -1
  66. package/dist/contracts/__tests__/host-contract-consumer.test.js +0 -163
  67. package/dist/contracts/__tests__/host-contract-transport.test.d.ts +0 -1
  68. package/dist/contracts/__tests__/host-contract-transport.test.js +0 -66
  69. package/dist/contracts/__tests__/integration.test.d.ts +0 -1
  70. package/dist/contracts/__tests__/integration.test.js +0 -348
  71. package/dist/contracts/__tests__/legacy-removal.test.d.ts +0 -1
  72. package/dist/contracts/__tests__/legacy-removal.test.js +0 -128
  73. package/dist/contracts/__tests__/persistent-registry.test.d.ts +0 -1
  74. package/dist/contracts/__tests__/persistent-registry.test.js +0 -109
  75. package/dist/contracts/__tests__/playground.test.d.ts +0 -1
  76. package/dist/contracts/__tests__/playground.test.js +0 -216
  77. package/dist/contracts/__tests__/registry.test.d.ts +0 -1
  78. package/dist/contracts/__tests__/registry.test.js +0 -238
  79. package/dist/contracts/__tests__/remote-contract-transport.test.d.ts +0 -1
  80. package/dist/contracts/__tests__/remote-contract-transport.test.js +0 -119
  81. package/dist/contracts/__tests__/system-contracts.test.d.ts +0 -1
  82. package/dist/contracts/__tests__/system-contracts.test.js +0 -247
  83. package/dist/contracts/__tests__/target-dispatch.d.ts +0 -11
  84. package/dist/contracts/__tests__/target-dispatch.js +0 -24
  85. package/dist/contracts/__tests__/tool-catalog-inventory.test.d.ts +0 -1
  86. package/dist/contracts/__tests__/tool-catalog-inventory.test.js +0 -44
  87. package/dist/contracts/__tests__/tool-catalog-service.test.d.ts +0 -1
  88. package/dist/contracts/__tests__/tool-catalog-service.test.js +0 -482
  89. package/dist/contracts/__tests__/tool-catalog.test.d.ts +0 -1
  90. package/dist/contracts/__tests__/tool-catalog.test.js +0 -1199
  91. package/dist/contracts/__tests__/validate.test.d.ts +0 -1
  92. package/dist/contracts/__tests__/validate.test.js +0 -991
  93. package/dist/contracts/__tests__/workflow-context.test.d.ts +0 -1
  94. package/dist/contracts/__tests__/workflow-context.test.js +0 -50
  95. package/dist/data/access-level.test.d.ts +0 -1
  96. package/dist/data/access-level.test.js +0 -53
  97. package/dist/data/change-tracking.test.d.ts +0 -1
  98. package/dist/data/change-tracking.test.js +0 -62
  99. package/dist/data/files/files.test.d.ts +0 -1
  100. package/dist/data/files/files.test.js +0 -770
  101. package/dist/data/group-members.test.d.ts +0 -1
  102. package/dist/data/group-members.test.js +0 -336
  103. package/dist/data/group-share.test.d.ts +0 -1
  104. package/dist/data/group-share.test.js +0 -110
  105. package/dist/data/groups.test.d.ts +0 -1
  106. package/dist/data/groups.test.js +0 -153
  107. package/dist/data/orm/cursor.test.d.ts +0 -1
  108. package/dist/data/orm/cursor.test.js +0 -314
  109. package/dist/data/orm/data-query.mongo.test.d.ts +0 -1
  110. package/dist/data/orm/data-query.mongo.test.js +0 -367
  111. package/dist/data/orm/data-query.sqlite.test.d.ts +0 -1
  112. package/dist/data/orm/data-query.sqlite.test.js +0 -365
  113. package/dist/data/orm/data-query.test.d.ts +0 -1
  114. package/dist/data/orm/data-query.test.js +0 -545
  115. package/dist/data/orm/dependency-injection.test.d.ts +0 -1
  116. package/dist/data/orm/dependency-injection.test.js +0 -171
  117. package/dist/data/orm/event-registry.test.d.ts +0 -1
  118. package/dist/data/orm/event-registry.test.js +0 -44
  119. package/dist/data/orm/multi-cursors.test.d.ts +0 -1
  120. package/dist/data/orm/multi-cursors.test.js +0 -463
  121. package/dist/data/orm/sql.data-source.test.d.ts +0 -1
  122. package/dist/data/orm/sql.data-source.test.js +0 -731
  123. package/dist/data/orm/table-container-events.test.d.ts +0 -1
  124. package/dist/data/orm/table-container-events.test.js +0 -101
  125. package/dist/data/orm/table-container.test.d.ts +0 -1
  126. package/dist/data/orm/table-container.test.js +0 -273
  127. package/dist/data/orm/table.event-source.test.d.ts +0 -1
  128. package/dist/data/orm/table.event-source.test.js +0 -331
  129. package/dist/data/orm/types.test.d.ts +0 -1
  130. package/dist/data/orm/types.test.js +0 -409
  131. package/dist/data/package-table-identity.test.d.ts +0 -1
  132. package/dist/data/package-table-identity.test.js +0 -46
  133. package/dist/data/package-version-permissions.test.d.ts +0 -1
  134. package/dist/data/package-version-permissions.test.js +0 -107
  135. package/dist/data/package-version-resolver.test.d.ts +0 -4
  136. package/dist/data/package-version-resolver.test.js +0 -543
  137. package/dist/data/package-versions.test.d.ts +0 -1
  138. package/dist/data/package-versions.test.js +0 -227
  139. package/dist/data/persistent-vars.conflict.test.d.ts +0 -1
  140. package/dist/data/persistent-vars.conflict.test.js +0 -126
  141. package/dist/data/persistent-vars.migration.test.d.ts +0 -1
  142. package/dist/data/persistent-vars.migration.test.js +0 -133
  143. package/dist/data/persistent-vars.package-scope.test.d.ts +0 -1
  144. package/dist/data/persistent-vars.package-scope.test.js +0 -27
  145. package/dist/data/sync-recovery-queue.test.d.ts +0 -1
  146. package/dist/data/sync-recovery-queue.test.js +0 -215
  147. package/dist/data/table-signing.test.d.ts +0 -1
  148. package/dist/data/table-signing.test.js +0 -118
  149. package/dist/data/tool-access.test.d.ts +0 -1
  150. package/dist/data/tool-access.test.js +0 -166
  151. package/dist/data/user-permissions.test.d.ts +0 -1
  152. package/dist/data/user-permissions.test.js +0 -305
  153. package/dist/data/user-trust-levels.test.d.ts +0 -1
  154. package/dist/data/user-trust-levels.test.js +0 -37
  155. package/dist/define/also-implements.test.d.ts +0 -1
  156. package/dist/define/also-implements.test.js +0 -123
  157. package/dist/define/declare-contract.test.d.ts +0 -1
  158. package/dist/define/declare-contract.test.js +0 -573
  159. package/dist/define/define.test.d.ts +0 -1
  160. package/dist/define/define.test.js +0 -1010
  161. package/dist/define/empty-fields.test.d.ts +0 -1
  162. package/dist/define/empty-fields.test.js +0 -55
  163. package/dist/define/events-observables.test.d.ts +0 -1
  164. package/dist/define/events-observables.test.js +0 -1013
  165. package/dist/define/serve-members.test.d.ts +0 -1
  166. package/dist/define/serve-members.test.js +0 -630
  167. package/dist/define/vars.test.d.ts +0 -1
  168. package/dist/define/vars.test.js +0 -39
  169. package/dist/device/binary-peer-connection-v2.test.d.ts +0 -1
  170. package/dist/device/binary-peer-connection-v2.test.js +0 -730
  171. package/dist/device/binary-peer-connection.d.ts +0 -58
  172. package/dist/device/binary-peer-connection.js +0 -516
  173. package/dist/device/binary-peer-connection.test.d.ts +0 -1
  174. package/dist/device/binary-peer-connection.test.js +0 -184
  175. package/dist/device/connection.test.d.ts +0 -1
  176. package/dist/device/connection.test.js +0 -613
  177. package/dist/device/device-election.test.d.ts +0 -1
  178. package/dist/device/device-election.test.js +0 -516
  179. package/dist/device/device.test.d.ts +0 -1
  180. package/dist/device/device.test.js +0 -243
  181. package/dist/device/frame-cipher.test.d.ts +0 -1
  182. package/dist/device/frame-cipher.test.js +0 -219
  183. package/dist/device/get-trust-level-fn.test.d.ts +0 -1
  184. package/dist/device/get-trust-level-fn.test.js +0 -685
  185. package/dist/device/streamed-socket.d.ts +0 -23
  186. package/dist/device/streamed-socket.js +0 -255
  187. package/dist/device/streamed-socket.test.d.ts +0 -1
  188. package/dist/device/streamed-socket.test.js +0 -216
  189. package/dist/device/tx-encoding.test.d.ts +0 -1
  190. package/dist/device/tx-encoding.test.js +0 -295
  191. package/dist/device-pairing/cpace.test.d.ts +0 -1
  192. package/dist/device-pairing/cpace.test.js +0 -116
  193. package/dist/device-pairing/device-pairing.test.d.ts +0 -1
  194. package/dist/device-pairing/device-pairing.test.js +0 -211
  195. package/dist/hlc.test.d.ts +0 -1
  196. package/dist/hlc.test.js +0 -45
  197. package/dist/host-credentials.test.d.ts +0 -1
  198. package/dist/host-credentials.test.js +0 -88
  199. package/dist/identity/account-email.test.d.ts +0 -1
  200. package/dist/identity/account-email.test.js +0 -59
  201. package/dist/identity/anchor-document.test.d.ts +0 -1
  202. package/dist/identity/anchor-document.test.js +0 -16
  203. package/dist/identity/anchor-resolution.test.d.ts +0 -1
  204. package/dist/identity/anchor-resolution.test.js +0 -130
  205. package/dist/identity/key-change.test.d.ts +0 -1
  206. package/dist/identity/key-change.test.js +0 -811
  207. package/dist/invites/group-approval.test.d.ts +0 -1
  208. package/dist/invites/group-approval.test.js +0 -223
  209. package/dist/invites/invite-token.test.d.ts +0 -1
  210. package/dist/invites/invite-token.test.js +0 -123
  211. package/dist/keys.test.d.ts +0 -1
  212. package/dist/keys.test.js +0 -336
  213. package/dist/logging/console-logger.test.d.ts +0 -1
  214. package/dist/logging/console-logger.test.js +0 -300
  215. package/dist/logging/console-logs.table.test.d.ts +0 -1
  216. package/dist/logging/console-logs.table.test.js +0 -156
  217. package/dist/observable.test.d.ts +0 -1
  218. package/dist/observable.test.js +0 -309
  219. package/dist/package-build/build-package.test.d.ts +0 -1
  220. package/dist/package-build/build-package.test.js +0 -204
  221. package/dist/package-build/contract-add.test.d.ts +0 -1
  222. package/dist/package-build/contract-add.test.js +0 -467
  223. package/dist/package-build/freeze-contracts.test.d.ts +0 -1
  224. package/dist/package-build/freeze-contracts.test.js +0 -355
  225. package/dist/package-installer/package-author-signing.test.d.ts +0 -1
  226. package/dist/package-installer/package-author-signing.test.js +0 -200
  227. package/dist/package-installer/package-cloner.test.d.ts +0 -1
  228. package/dist/package-installer/package-cloner.test.js +0 -278
  229. package/dist/package-installer/package-creator.test.d.ts +0 -1
  230. package/dist/package-installer/package-creator.test.js +0 -908
  231. package/dist/package-installer/package-dev-tools.test.d.ts +0 -1
  232. package/dist/package-installer/package-dev-tools.test.js +0 -64
  233. package/dist/package-installer/package-installer.test.d.ts +0 -1
  234. package/dist/package-installer/package-installer.test.js +0 -882
  235. package/dist/package-installer/package-propagation.test.d.ts +0 -1
  236. package/dist/package-installer/package-propagation.test.js +0 -1269
  237. package/dist/package-installer/package-publisher.test.d.ts +0 -1
  238. package/dist/package-installer/package-publisher.test.js +0 -153
  239. package/dist/package-installer/package-remote-checker.test.d.ts +0 -1
  240. package/dist/package-installer/package-remote-checker.test.js +0 -334
  241. package/dist/package-installer/package-seed-installer.test.d.ts +0 -1
  242. package/dist/package-installer/package-seed-installer.test.js +0 -123
  243. package/dist/package-installer/package-tarball.test.d.ts +0 -1
  244. package/dist/package-installer/package-tarball.test.js +0 -75
  245. package/dist/package-installer/peers-core-installer.test.d.ts +0 -1
  246. package/dist/package-installer/peers-core-installer.test.js +0 -49
  247. package/dist/package-installer/peers-core-trust-anchor.test.d.ts +0 -1
  248. package/dist/package-installer/peers-core-trust-anchor.test.js +0 -155
  249. package/dist/package-loader/contract-package-loader.test.d.ts +0 -1
  250. package/dist/package-loader/contract-package-loader.test.js +0 -274
  251. package/dist/package-loader/host-authority-loading.test.d.ts +0 -1
  252. package/dist/package-loader/host-authority-loading.test.js +0 -104
  253. package/dist/package-loader/host-dispatch-policy.test.d.ts +0 -1
  254. package/dist/package-loader/host-dispatch-policy.test.js +0 -56
  255. package/dist/package-loader/isolated-artifact.test.d.ts +0 -1
  256. package/dist/package-loader/isolated-artifact.test.js +0 -688
  257. package/dist/package-loader/isolated-persistent-var-gateway.test.d.ts +0 -1
  258. package/dist/package-loader/isolated-persistent-var-gateway.test.js +0 -56
  259. package/dist/package-loader/isolated-table-gateway.test.d.ts +0 -1
  260. package/dist/package-loader/isolated-table-gateway.test.js +0 -633
  261. package/dist/package-loader/package-loader.test.d.ts +0 -1
  262. package/dist/package-loader/package-loader.test.js +0 -1764
  263. package/dist/package-loader/resolve-consumed-contracts.test.d.ts +0 -1
  264. package/dist/package-loader/resolve-consumed-contracts.test.js +0 -166
  265. package/dist/serial-json.compat.test.d.ts +0 -1
  266. package/dist/serial-json.compat.test.js +0 -369
  267. package/dist/serial-json.test.d.ts +0 -1
  268. package/dist/serial-json.test.js +0 -401
  269. package/dist/testing/mock-host-contract.test.d.ts +0 -1
  270. package/dist/testing/mock-host-contract.test.js +0 -782
  271. package/dist/utils.test.d.ts +0 -1
  272. package/dist/utils.test.js +0 -232
@@ -1,305 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const keys_1 = require("../keys");
4
- const user_permissions_1 = require("./user-permissions");
5
- // Test the user permissions logic directly without ORM dependencies
6
- describe("User Permissions Logic", () => {
7
- let testUser;
8
- let userKeys;
9
- let otherUserKeys;
10
- beforeEach(() => {
11
- userKeys = (0, keys_1.newKeys)();
12
- otherUserKeys = (0, keys_1.newKeys)();
13
- testUser = {
14
- userId: "test-user-1",
15
- name: "Test User",
16
- publicKey: userKeys.publicKey,
17
- publicBoxKey: userKeys.publicBoxKey,
18
- signature: "",
19
- };
20
- });
21
- describe("basic signature functionality", () => {
22
- it("should add signature to user object", () => {
23
- const signedUser = (0, keys_1.addSignatureToObject)(testUser, userKeys.secretKey);
24
- expect(signedUser.signature).toBeTruthy();
25
- expect(signedUser.signature).toContain(":");
26
- expect(signedUser.userId).toBe(testUser.userId);
27
- expect(signedUser.name).toBe(testUser.name);
28
- expect(signedUser.publicKey).toBe(testUser.publicKey);
29
- });
30
- it("should verify valid signature", () => {
31
- const signedUser = (0, keys_1.addSignatureToObject)(testUser, userKeys.secretKey);
32
- const isValid = (0, keys_1.isObjectSignatureValid)(signedUser);
33
- expect(isValid).toBe(true);
34
- });
35
- it("should reject invalid signature after modification", () => {
36
- const signedUser = (0, keys_1.addSignatureToObject)(testUser, userKeys.secretKey);
37
- // Modify the user after signing
38
- signedUser.name = "Modified Name";
39
- const isValid = (0, keys_1.isObjectSignatureValid)(signedUser);
40
- expect(isValid).toBe(false);
41
- });
42
- it("should extract public key from signature", () => {
43
- const signedUser = (0, keys_1.addSignatureToObject)(testUser, userKeys.secretKey);
44
- const extractedPublicKey = (0, keys_1.getPublicKeyFromObjectSignature)(signedUser);
45
- expect(extractedPublicKey).toBe(userKeys.publicKey);
46
- });
47
- });
48
- describe("signUserObject helper", () => {
49
- it("should sign user object correctly", () => {
50
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
51
- expect(signedUser.signature).toBeTruthy();
52
- expect((0, keys_1.isObjectSignatureValid)(signedUser)).toBe(true);
53
- expect((0, keys_1.getPublicKeyFromObjectSignature)(signedUser)).toBe(userKeys.publicKey);
54
- });
55
- });
56
- describe("verifyUserSignature", () => {
57
- it("should verify valid signature for new user", () => {
58
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
59
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser)).not.toThrow();
60
- });
61
- it("should verify valid signature for existing user update", () => {
62
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
63
- const updatedUser = {
64
- ...originalUser,
65
- name: "Updated Name",
66
- signature: "",
67
- };
68
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
69
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).not.toThrow();
70
- });
71
- it("should reject signature that does not match user public key for new user", () => {
72
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, otherUserKeys.secretKey);
73
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser)).toThrow("User signature must be signed with their own public key");
74
- });
75
- it("should reject signature that does not match existing user public key", () => {
76
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
77
- const updatedUser = {
78
- ...originalUser,
79
- name: "Updated Name",
80
- signature: "",
81
- };
82
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, otherUserKeys.secretKey);
83
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).toThrow("User update must be signed by the user themselves");
84
- });
85
- it("should reject public key changes", () => {
86
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
87
- const updatedUser = {
88
- ...originalUser,
89
- publicKey: otherUserKeys.publicKey,
90
- signature: "",
91
- };
92
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
93
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).toThrow("Public key changes are not currently supported");
94
- });
95
- it("should allow missing signature when no existing record", () => {
96
- const userWithoutSignature = { ...testUser };
97
- expect(() => (0, user_permissions_1.verifyUserSignature)(userWithoutSignature)).not.toThrow();
98
- });
99
- });
100
- describe("verifyUserSignature - Group Context (With Signature)", () => {
101
- it("should allow valid signature for new user in group context", () => {
102
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
103
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).not.toThrow();
104
- });
105
- it("should allow valid signature for existing user update in group context", () => {
106
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
107
- const updatedUser = {
108
- ...originalUser,
109
- name: "Updated Name",
110
- signature: "",
111
- };
112
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
113
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).not.toThrow();
114
- });
115
- it("should reject invalid signature in group context", () => {
116
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
117
- // Tamper with the signature
118
- signedUser.name = "Tampered Name";
119
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).toThrow();
120
- });
121
- it("should reject signature from wrong user for new user", () => {
122
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, otherUserKeys.secretKey);
123
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).toThrow();
124
- });
125
- it("should reject signature from wrong user for existing user update", () => {
126
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
127
- const updatedUser = {
128
- ...originalUser,
129
- name: "Updated Name",
130
- signature: "",
131
- };
132
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, otherUserKeys.secretKey);
133
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).toThrow();
134
- });
135
- it("should reject public key changes in group context", () => {
136
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
137
- const updatedUser = {
138
- ...originalUser,
139
- publicKey: otherUserKeys.publicKey, // Change public key
140
- signature: "",
141
- };
142
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
143
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).toThrow();
144
- });
145
- it("should allow changes with valid signature", () => {
146
- const originalUser = (0, user_permissions_1.signUserObject)({ ...testUser }, userKeys.secretKey);
147
- const updatedUser = {
148
- ...originalUser,
149
- name: "Updated Name",
150
- signature: "",
151
- };
152
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
153
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).not.toThrow();
154
- });
155
- });
156
- describe("verifyUserSignature - Signature Requirements", () => {
157
- it("should allow unsigned record when no existing record", () => {
158
- const userWithoutSignature = { ...testUser };
159
- expect(() => (0, user_permissions_1.verifyUserSignature)(userWithoutSignature, undefined)).not.toThrow();
160
- });
161
- it("should accept valid signature when signature is provided", () => {
162
- const signedUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
163
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).not.toThrow();
164
- });
165
- it("should allow empty signature when no existing record", () => {
166
- const userWithEmptySignature = { ...testUser, signature: "" };
167
- expect(() => (0, user_permissions_1.verifyUserSignature)(userWithEmptySignature, undefined)).not.toThrow();
168
- });
169
- it("should reject whitespace-only signature (treated as a bad signature, not a stub)", () => {
170
- const userWithWhitespaceSignature = { ...testUser, signature: " " };
171
- expect(() => (0, user_permissions_1.verifyUserSignature)(userWithWhitespaceSignature, undefined)).toThrow();
172
- });
173
- });
174
- describe("verifyUserSignature - Unsigned stubs", () => {
175
- it("should allow unsigned stub when no existing record", () => {
176
- const stub = { ...testUser, signature: undefined };
177
- expect(() => (0, user_permissions_1.verifyUserSignature)(stub)).not.toThrow();
178
- });
179
- it("should allow unsigned stub to overwrite an existing unsigned stub", () => {
180
- const existingStub = { ...testUser, signature: undefined };
181
- const incomingStub = { ...testUser, name: "Updated Name", signature: undefined };
182
- expect(() => (0, user_permissions_1.verifyUserSignature)(incomingStub, existingStub)).not.toThrow();
183
- });
184
- it("should reject unsigned stub when a signed record already exists", () => {
185
- const signedExisting = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
186
- const incomingStub = { ...testUser, signature: undefined };
187
- expect(() => (0, user_permissions_1.verifyUserSignature)(incomingStub, signedExisting)).toThrow("Cannot overwrite a signed user record with an unsigned one");
188
- });
189
- it("should reject unsigned stub with different keys when signed record exists", () => {
190
- const signedExisting = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
191
- const incomingStub = {
192
- ...testUser,
193
- publicKey: otherUserKeys.publicKey,
194
- signature: undefined,
195
- };
196
- expect(() => (0, user_permissions_1.verifyUserSignature)(incomingStub, signedExisting)).toThrow("Cannot overwrite a signed user record with an unsigned one");
197
- });
198
- it("should allow a signed record to replace an unsigned stub", () => {
199
- const existingStub = { ...testUser, signature: undefined };
200
- const signedIncoming = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
201
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedIncoming, existingStub)).not.toThrow();
202
- });
203
- });
204
- describe("verifyUserSignature - anchors are not part of the claim", () => {
205
- // The anchor list on record is decided by the anchors, not by the row's author. A peer
206
- // stores a confirmed row with the list on record, and a peer on an older release stores
207
- // the row without the field at all. Both must still verify.
208
- const anchorA = { type: "https", url: "https://a.example/peers-identity.json" };
209
- const anchorB = { type: "https", url: "https://b.example/peers-identity.json" };
210
- it("verifies a signed row after its anchor list is replaced or removed", () => {
211
- const signed = (0, user_permissions_1.signUserObject)({ ...testUser, anchors: [anchorA] }, userKeys.secretKey);
212
- expect(() => (0, user_permissions_1.verifyUserSignature)({ ...signed, anchors: [anchorB] })).not.toThrow();
213
- const { anchors: _dropped, ...withoutAnchors } = signed;
214
- expect(() => (0, user_permissions_1.verifyUserSignature)(withoutAnchors)).not.toThrow();
215
- });
216
- it("verifies a row signed without anchors after a list is added", () => {
217
- const signed = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
218
- expect(() => (0, user_permissions_1.verifyUserSignature)({ ...signed, anchors: [anchorA] })).not.toThrow();
219
- });
220
- it("still rejects a change to any other field", () => {
221
- const signed = (0, user_permissions_1.signUserObject)({ ...testUser, anchors: [anchorA] }, userKeys.secretKey);
222
- expect(() => (0, user_permissions_1.verifyUserSignature)({ ...signed, name: "Someone else" })).toThrow();
223
- expect(() => (0, user_permissions_1.verifyUserSignature)({ ...signed, publicBoxKey: otherUserKeys.publicBoxKey })).toThrow();
224
- });
225
- it("does not leave the anchors off the signed row", () => {
226
- const signed = (0, user_permissions_1.signUserObject)({ ...testUser, anchors: [anchorA] }, userKeys.secretKey);
227
- expect(signed.anchors).toEqual([anchorA]);
228
- });
229
- });
230
- describe("edge cases and error handling", () => {
231
- it("should handle undefined user gracefully", () => {
232
- // @ts-expect-error - Testing edge case
233
- expect(() => (0, user_permissions_1.verifyUserSignature)(undefined, undefined)).toThrow();
234
- });
235
- it("should handle malformed signature", () => {
236
- const userWithBadSignature = { ...testUser, signature: "invalid-signature" };
237
- expect(() => (0, user_permissions_1.verifyUserSignature)(userWithBadSignature, undefined)).toThrow();
238
- });
239
- it("should handle missing public key in user object", () => {
240
- const userWithoutPublicKey = { ...testUser, publicKey: "" };
241
- const signedUser = (0, user_permissions_1.signUserObject)(userWithoutPublicKey, userKeys.secretKey);
242
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).toThrow();
243
- });
244
- it("should handle existing user with missing public key", () => {
245
- const originalUser = { ...testUser, publicKey: "" };
246
- const updatedUser = { ...testUser, name: "Updated" };
247
- const signedUpdatedUser = (0, user_permissions_1.signUserObject)(updatedUser, userKeys.secretKey);
248
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdatedUser, originalUser)).toThrow();
249
- });
250
- it("should handle various user values", () => {
251
- const userWithValues = {
252
- ...testUser,
253
- name: "Complex Name",
254
- };
255
- const signedUser = (0, user_permissions_1.signUserObject)(userWithValues, userKeys.secretKey);
256
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUser, undefined)).not.toThrow();
257
- });
258
- });
259
- describe("security scenarios", () => {
260
- it("should prevent impersonation attacks", () => {
261
- // Attacker tries to create a user record with victim's public key but signed with attacker's key
262
- const victimUser = {
263
- userId: "victim-user",
264
- name: "Victim User",
265
- publicKey: userKeys.publicKey, // Victim's public key
266
- publicBoxKey: userKeys.publicBoxKey,
267
- signature: "",
268
- };
269
- const maliciousSignedUser = (0, user_permissions_1.signUserObject)(victimUser, otherUserKeys.secretKey); // Signed with attacker's key
270
- expect(() => (0, user_permissions_1.verifyUserSignature)(maliciousSignedUser, undefined)).toThrow();
271
- });
272
- it("should prevent profile takeover attacks", () => {
273
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
274
- // Attacker tries to update the user's profile with their own signature
275
- const maliciousUpdate = {
276
- ...originalUser,
277
- name: "Attacker Name",
278
- signature: "",
279
- };
280
- const maliciousSignedUpdate = (0, user_permissions_1.signUserObject)(maliciousUpdate, otherUserKeys.secretKey);
281
- expect(() => (0, user_permissions_1.verifyUserSignature)(maliciousSignedUpdate, originalUser)).toThrow();
282
- });
283
- it("should prevent public key rotation attacks", () => {
284
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
285
- // Attacker tries to change the public key to their own
286
- const keyRotationAttack = {
287
- ...originalUser,
288
- publicKey: otherUserKeys.publicKey, // Change to attacker's key
289
- signature: "",
290
- };
291
- const signedAttack = (0, user_permissions_1.signUserObject)(keyRotationAttack, userKeys.secretKey);
292
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedAttack, originalUser)).toThrow();
293
- });
294
- it("should allow legitimate name changes with proper signature", () => {
295
- const originalUser = (0, user_permissions_1.signUserObject)(testUser, userKeys.secretKey);
296
- const legitimateUpdate = {
297
- ...originalUser,
298
- name: "New Legal Name",
299
- signature: "",
300
- };
301
- const signedUpdate = (0, user_permissions_1.signUserObject)(legitimateUpdate, userKeys.secretKey);
302
- expect(() => (0, user_permissions_1.verifyUserSignature)(signedUpdate, originalUser)).not.toThrow();
303
- });
304
- });
305
- });
@@ -1 +0,0 @@
1
- export {};
@@ -1,37 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const socket_type_1 = require("../device/socket.type");
4
- const utils_1 = require("../utils");
5
- const user_trust_levels_1 = require("./user-trust-levels");
6
- function makeDataContext(userId, trustRecord) {
7
- const get = jest.fn().mockResolvedValue(trustRecord);
8
- const userContext = { userId };
9
- const dataContext = {
10
- userContext,
11
- tableContainer: {
12
- getTable: jest.fn().mockReturnValue({ get }),
13
- },
14
- };
15
- Object.assign(userContext, { userDataContext: dataContext });
16
- return { dataContext, get };
17
- }
18
- describe("getUserTrustLevel", () => {
19
- it("derives Self from the supplied personal context without a global user context", async () => {
20
- const userId = (0, utils_1.newid)();
21
- const { dataContext, get } = makeDataContext(userId);
22
- await expect((0, user_trust_levels_1.getUserTrustLevel)(dataContext, userId)).resolves.toBe(socket_type_1.TrustLevel.Self);
23
- expect(get).not.toHaveBeenCalled();
24
- });
25
- it("reads explicit trust from the supplied context", async () => {
26
- const remoteUserId = (0, utils_1.newid)();
27
- const { dataContext, get } = makeDataContext((0, utils_1.newid)(), {
28
- trustLevel: socket_type_1.TrustLevel.Trusted,
29
- });
30
- await expect((0, user_trust_levels_1.getUserTrustLevel)(dataContext, remoteUserId)).resolves.toBe(socket_type_1.TrustLevel.Trusted);
31
- expect(get).toHaveBeenCalledWith(remoteUserId);
32
- });
33
- it("returns Unknown when the supplied context has no trust assignment", async () => {
34
- const { dataContext } = makeDataContext((0, utils_1.newid)());
35
- await expect((0, user_trust_levels_1.getUserTrustLevel)(dataContext, (0, utils_1.newid)())).resolves.toBe(socket_type_1.TrustLevel.Unknown);
36
- });
37
- });
@@ -1 +0,0 @@
1
- export {};
@@ -1,123 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const frozen_contracts_1 = require("../contracts/frozen-contracts");
4
- const registry_1 = require("../contracts/registry");
5
- const isolated_artifact_1 = require("../package-loader/isolated-artifact");
6
- const peer_id_1 = require("../peer-id");
7
- const index_1 = require("./index");
8
- const manifest_1 = require("./manifest");
9
- const packageId = (0, peer_id_1.newid)();
10
- const contractId = (0, peer_id_1.newid)();
11
- /** Notes vN: `add` takes a title, and each later version adds an optional field. */
12
- function notes(version, extra = {}, alsoImplements) {
13
- return (0, index_1.defineContract)({
14
- contractId,
15
- version,
16
- name: "Notes",
17
- tools: [
18
- (0, index_1.defineTool)({
19
- name: "add",
20
- usageDescription: "Add a note.",
21
- accessLevel: index_1.AccessLevel.Writer,
22
- inputSchema: index_1.z.object({ title: index_1.z.string(), ...extra }),
23
- outputSchema: index_1.z.object({ id: index_1.z.string() }),
24
- handler: () => ({ id: "n1" }),
25
- }),
26
- ],
27
- ...(alsoImplements ? { alsoImplements } : {}),
28
- });
29
- }
30
- const pkg = (...contracts) => (0, index_1.definePackage)((builder) => {
31
- builder.packageId = packageId;
32
- builder.version = "2.0.0";
33
- for (const contract of contracts)
34
- builder.provides(contract);
35
- });
36
- /** What `frozen-contracts.json` holds after a stable release that provided `contracts`. */
37
- function frozenAfter(...contracts) {
38
- const manifest = (0, manifest_1.buildPackageManifest)(pkg(...contracts));
39
- return (0, frozen_contracts_1.freezeContracts)(undefined, manifest.provides.map((contract) => (0, isolated_artifact_1.isolatedContractToDefinition)(contract, [])), "1.0.0").frozen;
40
- }
41
- describe("alsoImplements in /define", () => {
42
- it("takes older versions by number and declarations, and refuses itself, repeats, and the rest", () => {
43
- expect(notes(2, {}, [1]).alsoImplements).toEqual([1]);
44
- expect(() => notes(2, {}, [2])).toThrow("can't also implement itself");
45
- expect(() => notes(2, {}, [3])).toThrow("alsoImplements v3 must be older than v2");
46
- expect(() => notes(3, {}, [1, 1])).toThrow(`also implements ${contractId}@1 twice`);
47
- expect(() => notes(2, {}, [0])).toThrow("must be a positive integer");
48
- expect(() => (0, index_1.defineContract)({ contractId, version: 2, name: "Notes", alsoImplements: [{}] })).toThrow("takes version numbers and declarations from declareContract");
49
- // Its own older version by declaration would skip the shape its stable release froze.
50
- const NotesV1 = (0, index_1.declareContract)({ contractId, version: 1, name: "Notes" });
51
- expect(() => (0, index_1.defineContract)({ contractId, version: 2, name: "Notes", alsoImplements: [NotesV1] })).toThrow("takes its own contract's older versions by number, not by declaration");
52
- });
53
- it("carries an older version's frozen shape in the manifest, so the host can register it", () => {
54
- const frozen = frozenAfter(notes(1));
55
- const manifest = (0, manifest_1.buildPackageManifest)(pkg(notes(2, { tag: index_1.z.string().optional() }, [1])), {
56
- frozen,
57
- });
58
- const [entry] = manifest.provides[0].alsoImplements ?? [];
59
- expect(entry).toMatchObject({ contractId, version: 1, definition: { contractId, version: 1 } });
60
- expect(entry.definition).not.toHaveProperty("frozenBy");
61
- expect(() => (0, isolated_artifact_1.validateIsolatedPackageArtifact)({ manifest, providerSource: "void 0;" }, { strict: true })).not.toThrow();
62
- // A cold start: the registry has never seen v1, and still routes it to v2.
63
- const registry = new registry_1.ContractRegistry();
64
- registry.registerBatch(packageId, manifest.provides.map((contract) => ({
65
- definition: (0, isolated_artifact_1.isolatedContractToDefinition)(contract, []),
66
- alsoImplements: contract.alsoImplements,
67
- })));
68
- expect(registry.getProviderPackageId(contractId, 1)).toBe(packageId);
69
- expect(registry.getProviderImplementation(contractId, 1, packageId)).toEqual({
70
- contractId,
71
- version: 2,
72
- });
73
- });
74
- it("needs the older version frozen, and refuses one the contract no longer satisfies", () => {
75
- expect(() => (0, manifest_1.buildPackageManifest)(pkg(notes(2, {}, [1])))).toThrow("also implements v1, which frozen-contracts.json doesn't record");
76
- const frozen = frozenAfter(notes(1));
77
- // v1 callers may leave out an optional field, so v2 can't require one.
78
- expect(() => (0, manifest_1.buildPackageManifest)(pkg(notes(2, { tag: index_1.z.string() }, [1])), { frozen })).toThrow(/doesn't satisfy Notes .*@1.*extra required input field 'tag'/);
79
- expect(() => (0, manifest_1.buildPackageManifest)(pkg(notes(1), notes(2, {}, [1])), { frozen })).toThrow(`also implements ${contractId}@1, which the package provides with pkg.provides`);
80
- });
81
- it("takes another contract's declaration, and implementContract takes alsoImplements too", () => {
82
- const otherId = (0, peer_id_1.newid)();
83
- const Other = (0, index_1.declareContract)({
84
- contractId: otherId,
85
- version: 1,
86
- name: "Other",
87
- tools: [
88
- (0, index_1.declareTool)({
89
- name: "add",
90
- usageDescription: "Add.",
91
- accessLevel: index_1.AccessLevel.Writer,
92
- inputSchema: index_1.z.object({ title: index_1.z.string() }),
93
- outputSchema: index_1.z.object({ id: index_1.z.string() }),
94
- }),
95
- ],
96
- });
97
- const manifest = (0, manifest_1.buildPackageManifest)(pkg(notes(2, {}, [Other])));
98
- expect(manifest.provides[0].alsoImplements?.[0]).toMatchObject({
99
- contractId: otherId,
100
- version: 1,
101
- definition: { name: "Other", tools: [expect.objectContaining({ name: "add" })] },
102
- });
103
- const NotesV2 = (0, index_1.declareContract)({
104
- contractId,
105
- version: 2,
106
- name: "Notes",
107
- tools: [
108
- (0, index_1.declareTool)({
109
- name: "add",
110
- usageDescription: "Add a note.",
111
- accessLevel: index_1.AccessLevel.Writer,
112
- inputSchema: index_1.z.object({ title: index_1.z.string() }),
113
- outputSchema: index_1.z.object({ id: index_1.z.string() }),
114
- }),
115
- ],
116
- });
117
- const implemented = (0, index_1.implementContract)(NotesV2, {
118
- tools: { add: () => ({ id: "n1" }) },
119
- alsoImplements: [1],
120
- });
121
- expect(implemented.alsoImplements).toEqual([1]);
122
- });
123
- });
@@ -1 +0,0 @@
1
- export {};