@peers-app/peers-sdk 0.27.5 → 0.28.1

package/dist/utils.js

@@ -20,18 +20,18 @@ exports.retryOnErrorOrTimeout = retryOnErrorOrTimeout;
 exports.readResponseTextCapped = readResponseTextCapped;
 exports.getFullTableName = getFullTableName;
 const _ = require("lodash");
-const nacl = require("tweetnacl");
+const peer_id_1 = require("./peer-id");
 const peer_device_1 = require("./types/peer-device");
 const stableStringify = require("fast-json-stable-stringify");
-var peer_id_1 = require("./peer-id");
-Object.defineProperty(exports, "cryptoRandomString", { enumerable: true, get: function () { return peer_id_1.cryptoRandomString; } });
-Object.defineProperty(exports, "idDate", { enumerable: true, get: function () { return peer_id_1.idDate; } });
-Object.defineProperty(exports, "idRandNums", { enumerable: true, get: function () { return peer_id_1.idRandNums; } });
-Object.defineProperty(exports, "idTime", { enumerable: true, get: function () { return peer_id_1.idTime; } });
-Object.defineProperty(exports, "isid", { enumerable: true, get: function () { return peer_id_1.isid; } });
-Object.defineProperty(exports, "MAX_ID", { enumerable: true, get: function () { return peer_id_1.MAX_ID; } });
-Object.defineProperty(exports, "MIN_ID", { enumerable: true, get: function () { return peer_id_1.MIN_ID; } });
-Object.defineProperty(exports, "newid", { enumerable: true, get: function () { return peer_id_1.newid; } });
+var peer_id_2 = require("./peer-id");
+Object.defineProperty(exports, "cryptoRandomString", { enumerable: true, get: function () { return peer_id_2.cryptoRandomString; } });
+Object.defineProperty(exports, "idDate", { enumerable: true, get: function () { return peer_id_2.idDate; } });
+Object.defineProperty(exports, "idRandNums", { enumerable: true, get: function () { return peer_id_2.idRandNums; } });
+Object.defineProperty(exports, "idTime", { enumerable: true, get: function () { return peer_id_2.idTime; } });
+Object.defineProperty(exports, "isid", { enumerable: true, get: function () { return peer_id_2.isid; } });
+Object.defineProperty(exports, "MAX_ID", { enumerable: true, get: function () { return peer_id_2.MAX_ID; } });
+Object.defineProperty(exports, "MIN_ID", { enumerable: true, get: function () { return peer_id_2.MIN_ID; } });
+Object.defineProperty(exports, "newid", { enumerable: true, get: function () { return peer_id_2.newid; } });
 /** Fast non-cryptographic 32-bit string hash (sign-insensitive) for display keys and bucketing. */
 function simpleHash(str) {
     let hash = 0;
@@ -52,25 +52,6 @@ const DETERMINISTIC_PVAR_PREFIX = "000pvar0";
 const DETERMINISTIC_TABLE_PREFIX = "000tbl00";
 /** Well-known prefix for deterministic group-membership IDs. */
 const DETERMINISTIC_GROUP_MEMBER_PREFIX = "000gmbr0";
-/**
- * Converts a byte array to a base-36 string of the requested length, using unbiased modular reduction.
- * Bytes >= 252 are skipped to avoid bias (same technique as {@link cryptoRandomString}).
- */
-function bytesToBase36(bytes, length) {
-    let s = "";
-    for (let i = 0; i < bytes.length && s.length < length; i++) {
-        const n = bytes[i];
-        if (n >= 252)
-            continue;
-        s += (n % 36).toString(36);
-    }
-    return s.substring(0, length);
-}
-function deterministicPeerId(prefix, input) {
-    const hashSuffixLength = 25 - prefix.length;
-    const hash = nacl.hash(new TextEncoder().encode(input));
-    return prefix + bytesToBase36(hash, hashSuffixLength);
-}
 /**
  * Generates a deterministic 25-character peer ID for a persistent variable.
  * The ID has the fixed prefix `000pvar0` (8 chars) followed by 17 base-36 characters
@@ -81,7 +62,7 @@ function deterministicPeerId(prefix, input) {
  *   (already includes group suffixes for groupDevice/groupUser scopes)
  */
 function deterministicPvarId(name) {
-    return deterministicPeerId(DETERMINISTIC_PVAR_PREFIX, name);
+    return (0, peer_id_1.deterministicPeerId)(DETERMINISTIC_PVAR_PREFIX, name);
 }
 /**
  * Returns whether a peer ID was generated by {@link deterministicPvarId}
@@ -99,7 +80,7 @@ function isDeterministicPvarId(id) {
  * @param identity Stable package-scoped table identity.
  */
 function deterministicTableId(identity) {
-    return deterministicPeerId(DETERMINISTIC_TABLE_PREFIX, identity);
+    return (0, peer_id_1.deterministicPeerId)(DETERMINISTIC_TABLE_PREFIX, identity);
 }
 /**
  * Return whether a peer ID was generated by {@link deterministicTableId}.
@@ -120,7 +101,7 @@ function isDeterministicTableId(id) {
  * @param userId The member.
  */
 function deterministicGroupMemberId(groupId, userId) {
-    return deterministicPeerId(DETERMINISTIC_GROUP_MEMBER_PREFIX, `${groupId}:${userId}`);
+    return (0, peer_id_1.deterministicPeerId)(DETERMINISTIC_GROUP_MEMBER_PREFIX, `${groupId}:${userId}`);
 }
 /**
  * Return whether a peer ID was generated by {@link deterministicGroupMemberId}.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peers-app/peers-sdk",
-  "version": "0.27.5",
+  "version": "0.28.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/peers-app/peers-sdk.git"

package/dist/data/package-permissions.d.ts

@@ -1,14 +0,0 @@
-import type { IPackage } from "./packages";
-/**
- * Verifies that a package update signature is valid.
- *
- * Writers can create or update packages that have a dev active version.
- * Admins are required for packages with beta or stable active versions.
- *
- * @param packageObj The package record to verify
- * @param opts.isDevVersion When true, allows Writer role (for dev version operations)
- * @throws Error if signature is invalid or unauthorized
- */
-export declare function verifyPackageSignature(packageObj: IPackage, groupId: string, opts?: {
-    isDevVersion?: boolean;
-}): Promise<void>;

package/dist/data/package-permissions.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyPackageSignature = verifyPackageSignature;
-const keys_1 = require("../keys");
-const group_permissions_1 = require("./group-permissions");
-/**
- * Verifies that a package update signature is valid.
- *
- * Writers can create or update packages that have a dev active version.
- * Admins are required for packages with beta or stable active versions.
- *
- * @param packageObj The package record to verify
- * @param opts.isDevVersion When true, allows Writer role (for dev version operations)
- * @throws Error if signature is invalid or unauthorized
- */
-async function verifyPackageSignature(packageObj, groupId, opts) {
-    (0, keys_1.verifyObjectSignature)(packageObj);
-    const signerPublicKey = (0, keys_1.getPublicKeyFromObjectSignature)(packageObj) ?? "";
-    const signerRole = await (0, group_permissions_1.getUserRoleFromPublicKey)(groupId, signerPublicKey);
-    const requiredRole = opts?.isDevVersion ? group_permissions_1.GroupMemberRole.Writer : group_permissions_1.GroupMemberRole.Admin;
-    if (signerRole < requiredRole) {
-        throw new Error(opts?.isDevVersion
-            ? "Only group writers or above can create or update dev packages"
-            : "Only group admins can create or update packages");
-    }
-}

package/dist/data/package-version-permissions.d.ts

@@ -1,14 +0,0 @@
-import { GroupMemberRole } from "./group-permissions";
-import type { IPackageVersion } from "./package-versions";
-/**
- * Verifies that a package version update signature is valid.
- *
- * Dev versions (`versionTag === "dev"`) require Writer role.
- * Beta and stable versions require Admin role.
- *
- * @param packageVersion The package version record to verify
- * @param groupId The group context to check roles against
- * @param signerRole Optional pre-resolved role (skips `getUserRoleFromPublicKey` lookup; useful in tests)
- * @throws Error if signature is invalid or unauthorized
- */
-export declare function verifyPackageVersionSignature(packageVersion: IPackageVersion, groupId: string, signerRole?: GroupMemberRole): Promise<void>;

package/dist/data/package-version-permissions.js

@@ -1,30 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyPackageVersionSignature = verifyPackageVersionSignature;
-const keys_1 = require("../keys");
-const group_permissions_1 = require("./group-permissions");
-/**
- * Verifies that a package version update signature is valid.
- *
- * Dev versions (`versionTag === "dev"`) require Writer role.
- * Beta and stable versions require Admin role.
- *
- * @param packageVersion The package version record to verify
- * @param groupId The group context to check roles against
- * @param signerRole Optional pre-resolved role (skips `getUserRoleFromPublicKey` lookup; useful in tests)
- * @throws Error if signature is invalid or unauthorized
- */
-async function verifyPackageVersionSignature(packageVersion, groupId, signerRole) {
-    (0, keys_1.verifyObjectSignature)(packageVersion);
-    if (signerRole === undefined) {
-        const signerPublicKey = (0, keys_1.getPublicKeyFromObjectSignature)(packageVersion) ?? "";
-        signerRole = await (0, group_permissions_1.getUserRoleFromPublicKey)(groupId, signerPublicKey);
-    }
-    const isDevVersion = packageVersion.versionTag === "dev";
-    const requiredRole = isDevVersion ? group_permissions_1.GroupMemberRole.Writer : group_permissions_1.GroupMemberRole.Admin;
-    if (signerRole < requiredRole) {
-        throw new Error(isDevVersion
-            ? "Only group writers or above can create dev package versions"
-            : "Only group admins can create or update beta/stable package versions");
-    }
-}