@peers-app/peers-sdk 0.28.8 → 0.28.9

package/dist/contracts/tool-catalog.d.ts

@@ -91,8 +91,15 @@ export declare class ToolCatalog {
     })[]): Promise<void>;
     /** Reject quarantined or conflicting retained evidence before a contract tool call. */
     assertTargetUsable(target: ToolCatalogTarget): Promise<void>;
-    /** Serialize host removal with pending publications while retaining all catalog rows. */
-    removeProvider(provider: string, deactivate: () => void): Promise<void>;
+    /**
+     * Serialize host removal with pending publications while retaining all catalog rows.
+     * An optional load-generation guard runs before any live registration is changed.
+     *
+     * @param provider - Package whose registrations are being removed.
+     * @param deactivate - Synchronously retire its host endpoints and bookkeeping.
+     * @param assertCurrent - Reject a superseded removal without changing the active provider.
+     */
+    removeProvider(provider: string, deactivate: () => void, assertCurrent?: () => void): Promise<void>;
     /** Stop subscriptions and queued lifecycle work; permanent rows are retained. */
     dispose(): Promise<void>;
 }

package/dist/contracts/tool-catalog.js

@@ -605,12 +605,20 @@ class ToolCatalog {
             validateToolCatalogWrite({ toolId, ...resolvedFields(target, toolId) }, row);
         }
     }
-    /** Serialize host removal with pending publications while retaining all catalog rows. */
-    async removeProvider(provider, deactivate) {
+    /**
+     * Serialize host removal with pending publications while retaining all catalog rows.
+     * An optional load-generation guard runs before any live registration is changed.
+     *
+     * @param provider - Package whose registrations are being removed.
+     * @param deactivate - Synchronously retire its host endpoints and bookkeeping.
+     * @param assertCurrent - Reject a superseded removal without changing the active provider.
+     */
+    async removeProvider(provider, deactivate, assertCurrent) {
         // Join the same readiness boundary as publish(), including on a cold context,
         // so an earlier install cannot enqueue its activation behind this removal.
         await this.ready();
         await this.enqueue(async () => {
+            assertCurrent?.();
             this.registry.unregister(provider);
             deactivate();
         });

package/dist/package-loader/isolated-runtime.d.ts

@@ -92,11 +92,13 @@ export interface IIsolatedPackageUninstallOptions {
 /**
  * Host-owned supervisor for isolated package providers.
  *
- * `peers-sdk` defines the interface only. Electron (or a future PWA host)
+ * `peers-sdk` defines the interface only. Each Electron, headless or browser host
  * registers a factory that constructs an implementation backed by
  * `peers-isolate` workers. The SDK never depends on Node or SES.
  */
 export interface IIsolatedPackageRuntime {
+    /** Supported provider execution modes. Omitted by older hosts that support both modes. */
+    readonly supportedExecutionModes?: readonly ("sandbox" | "privileged")[];
     /**
      * Register a validated artifact. Provider source is stored, not evaluated
      * on the host.

package/dist/package-loader/package-loader.js

@@ -955,13 +955,50 @@ class PackageLoader {
                 throw wrapIsolatedArtifactError(new Error(`Isolated package version mismatch: artifact has "${artifact.manifest.version}" but selected PackageVersion has "${selectedPackageVersion.version}"`));
             }
         }
+        const hasProvider = artifact.providerSource.trim() !== "";
+        const executionMode = artifact.manifest.executionMode ?? "sandbox";
+        const unsupportedReason = hasProvider
+            ? !this.isolatedRuntime
+                ? "This host has no isolated package runtime"
+                : this.isolatedRuntime.supportedExecutionModes &&
+                    !this.isolatedRuntime.supportedExecutionModes.includes(executionMode)
+                    ? "This package runs only on desktop or headless"
+                    : undefined
+            : undefined;
+        if (unsupportedReason) {
+            await this.unloadPackage(pkg.packageId, { status: "unsupported", reason: unsupportedReason });
+            console.warn(!this.isolatedRuntime
+                ? `[PackageLoader] Skipping isolated package "${pkg.name}" because this host does not provide an isolated runtime.`
+                : `[PackageLoader] Skipping isolated package "${pkg.name}": ${unsupportedReason}`);
+            return undefined;
+        }
+        // Empty provider source is the validated screen-only artifact shape. A host with
+        // no runtime still publishes its navigation, just as a desktop runtime does.
         if (!this.isolatedRuntime) {
-            await this.unloadPackage(pkg.packageId, {
-                status: "unsupported",
-                reason: "This host has no isolated package runtime",
+            await this.toolCatalog.removeProvider(pkg.packageId, () => {
+                this.retireHostEndpoints(pkg.packageId);
+                (0, contract_resolvers_1.unregisterPackageContractResolvers)(this.dataContext, pkg.packageId);
+                this.hostConsumes.delete(pkg.packageId);
+                this.contractInstalledPackages.delete(pkg.packageId);
+            }, assertCurrent);
+            assertCurrent();
+            const instance = {
+                packageId: artifact.manifest.packageId,
+                appNavs: artifact.manifest.appNavs,
+            };
+            this.packageInstances[pkg.packageId] = instance;
+            this.recordRunning(pkg.packageId, {
+                ...runningVersionFields(selectedPackageVersion),
+                kind: "isolated",
+                executionMode,
+                provides: [],
+                consumes: artifact.manifest.consumes.map(({ contractId, version }) => ({
+                    contractId,
+                    version,
+                    satisfied: !!this.contractRegistry.getProviderPackageId(contractId, version),
+                })),
             });
-            console.warn(`[PackageLoader] Skipping isolated package "${pkg.name}" because this host does not provide an isolated runtime.`);
-            return undefined;
+            return instance;
         }
         assertCurrent();
         if (this.isolatedPackageNames.get(pkg.packageId) !== pkg.name) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peers-app/peers-sdk",
-  "version": "0.28.8",
+  "version": "0.28.9",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/peers-app/peers-sdk.git"