@peers-app/peers-sdk 0.27.3 → 0.27.5

package/dist/device/socket.type.d.ts

@@ -14,8 +14,8 @@ export interface RPCSendOptions {
     /** Arm the outbound frame cipher with these keys right after this reply frame has been sent. */
     armFrameCipherAfter?: FrameKeys;
 }
-/** Reply callback handed to RPC handlers. */
-export type RPCCallback = (error?: any, result?: any, sendOptions?: RPCSendOptions) => void;
+/** Reply callback handed to RPC handlers; async transports resolve after sending the reply. */
+export type RPCCallback = (error?: any, result?: any, sendOptions?: RPCSendOptions) => void | Promise<void>;
 /** Which direction(s) of the frame cipher to arm. */
 export type FrameCipherDirection = "both" | "send" | "receive";
 /**
@@ -40,11 +40,6 @@ export type TransportType = "ws" | "wrtc" | "unknown";
 export interface ISocket {
     id?: string;
     connected?: boolean;
-    /**
-     * @deprecated No longer needed - all sockets handle their own encoding.
-     * Kept temporarily for backwards compatibility during v1->v2 transition.
-     */
-    handlesOwnEncoding?: boolean;
     /**
      * Transport type for this socket. Used to optimize chunk sizes for raw byte streaming.
      * - 'wrtc': WebRTC (64KB max due to SCTP limits)
@@ -82,8 +77,8 @@ export interface ISocket {
     /**
      * Arms the per-connection frame cipher (see `frame-cipher.ts`). Sockets that
      * implement this seal every outbound frame and require every inbound frame to
-     * be sealed once the corresponding direction is armed. `Connection` only
-     * advertises `frameCrypto` support in its handshake when this is present.
+     * be sealed once the corresponding direction is armed. `Connection` refuses
+     * to run a handshake on a socket without it.
      * @param keys - This peer's send and receive keys
      * @param direction - Defaults to `"both"`. The handshake server arms
      *   `"receive"` first and lets the reply's {@link RPCSendOptions} arm send.
@@ -94,9 +89,8 @@ export interface ISocket {
     /**
      * Controls delivery of inbound plaintext `STREAM_*` frames. Sockets start
      * permissive so bare transports keep working; `Connection` turns this off on
-     * construction and only turns it back on for a verified legacy peer. Sealed
-     * stream frames are always delivered because arming implies a completed
-     * handshake.
+     * construction. Sealed stream frames are always delivered because arming
+     * implies a completed handshake.
      */
     setPlaintextStreamsAllowed?(allowed: boolean): void;
 }

package/dist/package-loader/package-loader.js

@@ -9,6 +9,7 @@ const contract_resolvers_1 = require("../contracts/contract-resolvers");
 const contract_transport_1 = require("../contracts/contract-transport");
 const registry_1 = require("../contracts/registry");
 const remote_contract_transport_1 = require("../contracts/remote-contract-transport");
+const tool_arguments_1 = require("../contracts/tool-arguments");
 const tool_catalog_1 = require("../contracts/tool-catalog");
 const files_1 = require("../data/files");
 const package_version_resolver_1 = require("../data/package-version-resolver");
@@ -412,7 +413,7 @@ class PackageLoader {
                 (0, contract_resolvers_1.getContractResolver)(implementation.contractId, implementation.version, providerPackageId, this.dataContext) !== resolver)
                 throw new contract_provider_router_1.RetiredContractProviderEndpointError(guardedEndpoint);
         };
-        const endpoint = (0, contract_proxy_1.createContractProviderEndpoint)(this.guardResolutionTools(localResolution, request, assertProviderCurrent), {
+        const endpoint = (0, contract_proxy_1.createContractProviderEndpoint)(this.guardResolutionTools(localResolution, request, assertProviderCurrent, providerPackageId), {
             dispatchTool: (target, args, context) => this.dispatchToolFromProvider(providerPackageId, target, args, context),
             context: request.context,
             notify: (notification) => request.notify({
@@ -435,29 +436,33 @@ class PackageLoader {
         };
         return guardedEndpoint;
     }
-    guardResolutionTools(resolution, request, assertProviderCurrent) {
-        const guard = (instances) => instances &&
-            Object.fromEntries(Object.entries(instances).map(([name, instance]) => [
-                name,
-                {
-                    ...instance,
-                    // The dispatcher awaits authorization before calling toolFn. Check again
-                    // here so those awaits cannot retain old code. Once provider code has
-                    // started, its nested action errors must not request a router replay.
-                    toolFn: async (...args) => {
-                        await this.toolCatalog.assertTargetUsable({
-                            contractId: request.contractId,
-                            version: request.version,
-                            toolName: name,
-                        });
-                        assertProviderCurrent();
-                        return instance.toolFn(...args);
-                    },
-                },
-            ]));
+    guardResolutionTools(resolution, request, assertProviderCurrent, providerPackageId) {
+        // The version the caller asked for: each run's arguments are checked against its tools.
+        const definition = (providerPackageId &&
+            this.contractRegistry.getProviderDefinition(request.contractId, request.version, providerPackageId)) ||
+            this.contractRegistry.getDefinition(request.contractId, request.version);
         return {
             ...resolution,
-            tools: guard(resolution.tools),
+            invokeTool: async (name, args) => {
+                // Authorization may await; retire old code before checking its schema or running it.
+                // Nested action errors after this point must not request a router replay.
+                await this.toolCatalog.assertTargetUsable({
+                    contractId: request.contractId,
+                    version: request.version,
+                    toolName: name,
+                });
+                assertProviderCurrent();
+                const tool = resolution.tools?.[name];
+                if (!tool)
+                    throw new Error(`Contract ${request.contractId} does not provide tool '${name}'`);
+                const member = definition?.tools.find((tool) => tool.name === name);
+                if (definition && !member)
+                    throw new Error(`Contract ${request.contractId} does not declare tool '${name}'`);
+                const inputFields = member?.inputFields ?? tool.tool.inputSchema?.fields;
+                if (inputFields?.length)
+                    (0, tool_arguments_1.checkToolArguments)(inputFields, args[0], name);
+                return tool.toolFn(...args);
+            },
         };
     }
     /**

package/dist/system-ids.d.ts

@@ -71,6 +71,11 @@ export declare const networkControlContractId = "00ms1yb50yj9w5qbytl69qfht";
  * provide status and relay tools, while Electron also implements local updates.
  */
 export declare const appUpdatesContractId = "00mvczoafequsatpfjaj3r4g8";
+/**
+ * Contract id for **System Sync Check**: the daily check that finds changes another device has
+ * and this one is missing. `countChanges` is remotely callable by group Readers.
+ */
+export declare const syncCheckContractId = "00mvrnfgmc14ea0ktkr86vjd2";
 /**
  * Contract id for the local-only tool-access approval control surface.
  * Not available over device-to-device connections.

package/dist/system-ids.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.hostShellContractId = exports.packagesContractId = exports.desktopToolsContractId = exports.hostToolsContractId = exports.toolCatalogContractId = exports.schedulerToolIds = exports.schedulerContractId = exports.contractCatalogToolIds = exports.contractCatalogContractId = exports.httpToolIds = exports.httpContractId = exports.localFoldersToolIds = exports.localFoldersContractId = exports.identityToolIds = exports.identityContractId = exports.invitesToolIds = exports.invitesContractId = exports.toolAccessControlToolIds = exports.toolAccessControlContractId = exports.appUpdatesContractId = exports.networkControlContractId = exports.networkDiagnosticsContractId = exports.deviceOperationsContractId = exports.logsContractId = exports.peersSystemPackageId = exports.peersCoreRevokedPublishPublicKeys = exports.peersCorePublishPublicKey = exports.peersCorePackageRepoUrl = exports.peersCorePackageId = exports.createGroupToolId = exports.queryDatabaseToolId = exports.runWorkflowToolId = exports.defaultSendMessageToolId = exports.defaultAssistantRunnerToolId = exports.adminAssistantId = exports.openCodeAssistantId = exports.defaultAssistantId = exports.peersRootUserId = void 0;
+exports.hostShellContractId = exports.packagesContractId = exports.desktopToolsContractId = exports.hostToolsContractId = exports.toolCatalogContractId = exports.schedulerToolIds = exports.schedulerContractId = exports.contractCatalogToolIds = exports.contractCatalogContractId = exports.httpToolIds = exports.httpContractId = exports.localFoldersToolIds = exports.localFoldersContractId = exports.identityToolIds = exports.identityContractId = exports.invitesToolIds = exports.invitesContractId = exports.toolAccessControlToolIds = exports.toolAccessControlContractId = exports.syncCheckContractId = exports.appUpdatesContractId = exports.networkControlContractId = exports.networkDiagnosticsContractId = exports.deviceOperationsContractId = exports.logsContractId = exports.peersSystemPackageId = exports.peersCoreRevokedPublishPublicKeys = exports.peersCorePublishPublicKey = exports.peersCorePackageRepoUrl = exports.peersCorePackageId = exports.createGroupToolId = exports.queryDatabaseToolId = exports.runWorkflowToolId = exports.defaultSendMessageToolId = exports.defaultAssistantRunnerToolId = exports.adminAssistantId = exports.openCodeAssistantId = exports.defaultAssistantId = exports.peersRootUserId = void 0;
 /** Stable user ID that owns built-in Peers system records. */
 exports.peersRootUserId = "000peers0user000000000001";
 /** Default assistant used when no user-selected assistant is available. */
@@ -78,6 +78,11 @@ exports.networkControlContractId = "00ms1yb50yj9w5qbytl69qfht";
  * provide status and relay tools, while Electron also implements local updates.
  */
 exports.appUpdatesContractId = "00mvczoafequsatpfjaj3r4g8";
+/**
+ * Contract id for **System Sync Check**: the daily check that finds changes another device has
+ * and this one is missing. `countChanges` is remotely callable by group Readers.
+ */
+exports.syncCheckContractId = "00mvrnfgmc14ea0ktkr86vjd2";
 /**
  * Contract id for the local-only tool-access approval control surface.
  * Not available over device-to-device connections.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peers-app/peers-sdk",
-  "version": "0.27.3",
+  "version": "0.27.5",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/peers-app/peers-sdk.git"
@@ -16,7 +16,9 @@
     "dist",
     "define",
     "testing",
-    "bin"
+    "bin",
+    "!dist/**/*.test.*",
+    "!dist/**/__tests__"
   ],
   "publishConfig": {
     "access": "public"

package/dist/context/user-context-identity.test.d.ts

@@ -1 +0,0 @@
-import "../identity/user-row-change";

package/dist/context/user-context-identity.test.js

@@ -1,220 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const SQLiteDB = require("better-sqlite3");
-const sql_data_source_1 = require("../data/orm/sql.data-source");
-const user_permissions_1 = require("../data/user-permissions");
-const users_1 = require("../data/users");
-const anchor_document_1 = require("../identity/anchor-document");
-const anchor_resolution_1 = require("../identity/anchor-resolution");
-const key_change_1 = require("../identity/key-change");
-const keys_1 = require("../keys");
-const utils_1 = require("../utils");
-const user_context_1 = require("./user-context");
-const user_context_singleton_1 = require("./user-context-singleton");
-// Installs the UsersTable guard.
-require("../identity/user-row-change");
-class DBHarness {
-    _db = null;
-    get db() {
-        if (!this._db) {
-            this._db = new SQLiteDB(":memory:");
-            this._db.pragma("journal_mode = WAL");
-        }
-        return this._db;
-    }
-    async get(sql, params = []) {
-        return this.db.prepare(sql).get(params);
-    }
-    async all(sql, params = []) {
-        return this.db.prepare(sql).all(params);
-    }
-    async exec(sql, params = []) {
-        const result = this.db.prepare(sql).run(params);
-        return { changes: result.changes };
-    }
-    async close() {
-        this._db?.close();
-        this._db = null;
-    }
-}
-describe("UserContext.syncUserAndGroupObjects and the profile row's key", () => {
-    const anchor = {
-        type: "https",
-        url: "https://example.com/.well-known/peers-identity.json",
-    };
-    // The process-wide user context can be installed once, so one context serves every case;
-    // each case starts by writing the profile row it needs (the owner's own row is unrestricted).
-    const db = new DBHarness();
-    const userId = (0, utils_1.newid)();
-    let userContext;
-    beforeAll(async () => {
-        const dataSourceFactory = (metaData, schema) => new sql_data_source_1.SQLDataSource(db, metaData, schema);
-        userContext = new user_context_1.UserContext(userId, dataSourceFactory, true);
-        await userContext.loadingPromise;
-        userContext.deviceId((0, utils_1.newid)());
-        (0, user_context_singleton_1.setUserContext)(userContext);
-    });
-    afterEach(() => {
-        (0, anchor_resolution_1.setAnchorFetcher)(undefined);
-    });
-    afterAll(async () => {
-        userContext.dispose();
-        await db.close();
-    });
-    function document(publicKey, authorizedBy) {
-        return {
-            outcome: "document",
-            document: {
-                version: 1,
-                userId,
-                keys: [{ publicKey, issuedAt: "2026-10-03T18:00:00.000Z", authorizedBy }],
-                anchors: [anchor],
-                updatedAt: "2026-10-03T18:00:00.000Z",
-            },
-        };
-    }
-    it("signs a fresh profile with the device key", async () => {
-        const keys = (0, keys_1.newKeys)();
-        await userContext.syncUserAndGroupObjects(userId, keys);
-        const me = await (0, users_1.Users)(userContext.userDataContext).get(userId);
-        expect(me?.publicKey).toBe(keys.publicKey);
-        expect(() => (0, user_permissions_1.verifyUserSignature)(me)).not.toThrow();
-    });
-    it("re-signs a profile the anchors say this device's key succeeded", async () => {
-        // A rotation stored the new secret and then stopped before re-signing the row, or an
-        // operator replaced the secret in credentials.json after publishing the key. The anchors
-        // list the device key with the old key's co-signature, so the row follows the device.
-        const k1 = (0, keys_1.newKeys)();
-        const k2 = (0, keys_1.newKeys)();
-        await (0, users_1.Users)(userContext.userDataContext).save((0, user_permissions_1.signUserObject)({
-            userId,
-            name: "Alice",
-            publicKey: k1.publicKey,
-            publicBoxKey: k1.publicBoxKey,
-            anchors: [anchor],
-        }, k1.secretKey));
-        const succession = (0, anchor_document_1.signSuccession)({
-            purpose: "peers-key-succession",
-            userId,
-            publicKey: k2.publicKey,
-            issuedAt: "2026-10-03T18:00:00.000Z",
-        }, k1.secretKey);
-        (0, anchor_resolution_1.setAnchorFetcher)(async () => document(k2.publicKey, { publicKey: succession.publicKey, signature: succession.signature }));
-        await userContext.syncUserAndGroupObjects(userId, k2);
-        const me = await (0, users_1.Users)(userContext.userDataContext).get(userId);
-        expect(me?.publicKey).toBe(k2.publicKey);
-        expect(me?.publicBoxKey).toBe(k2.publicBoxKey);
-        expect(me?.name).toBe("Alice");
-        expect(me?.anchors).toEqual([anchor]);
-        expect(() => (0, user_permissions_1.verifyUserSignature)(me)).not.toThrow();
-    });
-    it("does not put the device key back over a row the anchors still confirm", async () => {
-        // The row holds K2 and the anchors list only K2: this device's K1 was rotated away. The
-        // row must not be re-signed with K1, or the device would publish a retired key.
-        const k1 = (0, keys_1.newKeys)();
-        const k2 = (0, keys_1.newKeys)();
-        const row = (0, user_permissions_1.signUserObject)({
-            userId,
-            name: "Alice",
-            publicKey: k2.publicKey,
-            publicBoxKey: k2.publicBoxKey,
-            anchors: [anchor],
-        }, k2.secretKey);
-        await (0, users_1.Users)(userContext.userDataContext).save(row);
-        (0, anchor_resolution_1.setAnchorFetcher)(async () => document(k2.publicKey));
-        await userContext.syncUserAndGroupObjects(userId, k1);
-        const me = await (0, users_1.Users)(userContext.userDataContext).get(userId);
-        expect(me?.publicKey).toBe(k2.publicKey);
-        expect(me?.signature).toBe(row.signature);
-    });
-    it("leaves the row alone while the anchors have not answered", async () => {
-        const k1 = (0, keys_1.newKeys)();
-        const k2 = (0, keys_1.newKeys)();
-        const row = (0, user_permissions_1.signUserObject)({
-            userId,
-            name: "Alice",
-            publicKey: k1.publicKey,
-            publicBoxKey: k1.publicBoxKey,
-            anchors: [anchor],
-        }, k1.secretKey);
-        await (0, users_1.Users)(userContext.userDataContext).save(row);
-        (0, anchor_resolution_1.setAnchorFetcher)(async () => ({ outcome: "abstain" }));
-        await userContext.syncUserAndGroupObjects(userId, k2);
-        const me = await (0, users_1.Users)(userContext.userDataContext).get(userId);
-        expect(me?.publicKey).toBe(k1.publicKey);
-        expect(me?.signature).toBe(row.signature);
-    });
-    describe("the rotated-away notice", () => {
-        const noticeFor = (oldKey, newKey) => ({
-            userId,
-            oldPublicKey: oldKey,
-            newPublicKey: newKey,
-            detectedAt: "2026-10-03T18:00:00.000Z",
-        });
-        afterEach(async () => {
-            await key_change_1.identityRotatedAwayVar.loadingPromise;
-            (0, key_change_1.identityRotatedAwayVar)(null);
-        });
-        it("is cleared once this device holds the key the anchors confirmed", async () => {
-            // The device was told its K1 was rotated away, then paired again onto the same
-            // database and now holds K2. The banner must not outlive the problem.
-            const k1 = (0, keys_1.newKeys)();
-            const k2 = (0, keys_1.newKeys)();
-            await (0, users_1.Users)(userContext.userDataContext).save((0, user_permissions_1.signUserObject)({
-                userId,
-                name: "Alice",
-                publicKey: k2.publicKey,
-                publicBoxKey: k2.publicBoxKey,
-                anchors: [anchor],
-            }, k2.secretKey));
-            await key_change_1.identityRotatedAwayVar.loadingPromise;
-            (0, key_change_1.identityRotatedAwayVar)(noticeFor(k1.publicKey, k2.publicKey));
-            await userContext.syncUserAndGroupObjects(userId, k2);
-            expect((0, key_change_1.identityRotatedAwayVar)()).toBeNull();
-        });
-        it("is cleared when the anchors confirm the key this device now holds", async () => {
-            // Paired again after a further rotation: the notice names K2, the device holds K3, and
-            // the row on disk is still K1 until the anchors answer.
-            const k1 = (0, keys_1.newKeys)();
-            const k2 = (0, keys_1.newKeys)();
-            const k3 = (0, keys_1.newKeys)();
-            await (0, users_1.Users)(userContext.userDataContext).save((0, user_permissions_1.signUserObject)({
-                userId,
-                name: "Alice",
-                publicKey: k1.publicKey,
-                publicBoxKey: k1.publicBoxKey,
-                anchors: [anchor],
-            }, k1.secretKey));
-            const succession = (0, anchor_document_1.signSuccession)({
-                purpose: "peers-key-succession",
-                userId,
-                publicKey: k3.publicKey,
-                issuedAt: "2026-10-03T18:00:00.000Z",
-            }, k1.secretKey);
-            (0, anchor_resolution_1.setAnchorFetcher)(async () => document(k3.publicKey, {
-                publicKey: succession.publicKey,
-                signature: succession.signature,
-            }));
-            await key_change_1.identityRotatedAwayVar.loadingPromise;
-            (0, key_change_1.identityRotatedAwayVar)(noticeFor(k1.publicKey, k2.publicKey));
-            await userContext.syncUserAndGroupObjects(userId, k3);
-            expect((0, key_change_1.identityRotatedAwayVar)()).toBeNull();
-        });
-        it("stays on a device that still holds the retired key", async () => {
-            const k1 = (0, keys_1.newKeys)();
-            const k2 = (0, keys_1.newKeys)();
-            await (0, users_1.Users)(userContext.userDataContext).save((0, user_permissions_1.signUserObject)({
-                userId,
-                name: "Alice",
-                publicKey: k1.publicKey,
-                publicBoxKey: k1.publicBoxKey,
-                anchors: [anchor],
-            }, k1.secretKey));
-            await key_change_1.identityRotatedAwayVar.loadingPromise;
-            const notice = noticeFor(k1.publicKey, k2.publicKey);
-            (0, key_change_1.identityRotatedAwayVar)(notice);
-            await userContext.syncUserAndGroupObjects(userId, k1);
-            expect((0, key_change_1.identityRotatedAwayVar)()).toEqual(notice);
-        });
-    });
-});

package/dist/contracts/__tests__/action-dispatch.test.d.ts

@@ -1 +0,0 @@
-export {};