@peers-app/peers-ui 0.21.0 → 0.21.2

package/dist/screens/packages/package-helpers.d.ts

@@ -29,5 +29,26 @@ export declare function isGroupAdmin(): Promise<boolean>;
  * @param pv - The package version to activate.
  */
 export declare function activatePackageVersion(packageId: string, pv: IPackageVersion): Promise<void>;
+/**
+ * After promoting a version that is currently effective-active on this device,
+ * activate it when the new tag matches the group's auto-activate / follow rules.
+ *
+ * This closes the gotcha where a device is already running a `dev` build, promotes
+ * it to `beta`/`stable`, and expects the group active version to advance without a
+ * separate Activate click — but only when the group would accept that channel
+ * (e.g. default follow is `stable`; `beta` only when the group follows beta).
+ *
+ * @param packageId - Package that was promoted
+ * @param promotedPv - PV after the tag change (must include the new `versionTag`)
+ * @param opts.wasEffectiveActive - True when this PV was this device's effective active before promote
+ * @param opts.groupFollowTags - Group `IPackage.followVersionTags` (not device override)
+ * @param opts.groupPinned - True when group `versionFollowRange` is `pinned`
+ * @returns Whether activation was attempted
+ */
+export declare function maybeActivateAfterPromote(packageId: string, promotedPv: IPackageVersion, opts: {
+    wasEffectiveActive: boolean;
+    groupFollowTags: string | undefined;
+    groupPinned: boolean;
+}): Promise<boolean>;
 /** Numeric rank for sorting packages by update urgency. */
 export declare const updateLevelRank: Record<string, number>;

package/dist/screens/packages/package-helpers.js

@@ -4,6 +4,7 @@ exports.updateLevelRank = void 0;
 exports.checkVersionStatus = checkVersionStatus;
 exports.isGroupAdmin = isGroupAdmin;
 exports.activatePackageVersion = activatePackageVersion;
+exports.maybeActivateAfterPromote = maybeActivateAfterPromote;
 const peers_sdk_1 = require("@peers-app/peers-sdk");
 /**
  * Check a package's version status: what's currently active, whether a newer
@@ -106,5 +107,36 @@ async function activatePackageVersion(packageId, pv) {
         await (0, peers_sdk_1.updatePackagePrefs)(packageId, { activePackageVersionId: pv.packageVersionId });
     }
 }
+/**
+ * After promoting a version that is currently effective-active on this device,
+ * activate it when the new tag matches the group's auto-activate / follow rules.
+ *
+ * This closes the gotcha where a device is already running a `dev` build, promotes
+ * it to `beta`/`stable`, and expects the group active version to advance without a
+ * separate Activate click — but only when the group would accept that channel
+ * (e.g. default follow is `stable`; `beta` only when the group follows beta).
+ *
+ * @param packageId - Package that was promoted
+ * @param promotedPv - PV after the tag change (must include the new `versionTag`)
+ * @param opts.wasEffectiveActive - True when this PV was this device's effective active before promote
+ * @param opts.groupFollowTags - Group `IPackage.followVersionTags` (not device override)
+ * @param opts.groupPinned - True when group `versionFollowRange` is `pinned`
+ * @returns Whether activation was attempted
+ */
+async function maybeActivateAfterPromote(packageId, promotedPv, opts) {
+    if (!opts.wasEffectiveActive)
+        return false;
+    if (opts.groupPinned)
+        return false;
+    if (!promotedPv.versionTag || promotedPv.versionTag === "dev")
+        return false;
+    // Docs default: groups follow `stable` when followVersionTags is unset.
+    const followTags = opts.groupFollowTags ?? "stable";
+    if (!(0, peers_sdk_1.doesTagMatch)(undefined, promotedPv.versionTag, followTags, undefined)) {
+        return false;
+    }
+    await activatePackageVersion(packageId, promotedPv);
+    return true;
+}
 /** Numeric rank for sorting packages by update urgency. */
 exports.updateLevelRank = { major: 3, minor: 2, patch: 1 };

package/dist/screens/packages/package-versions.d.ts

@@ -1,4 +1,5 @@
 import { type IDoc, type IPackage } from "@peers-app/peers-sdk";
+/** Lists package versions with activate, promote, pin, edit-semver, and delete actions. */
 export declare const PackageVersionsList: (props: {
     pkg: IDoc<IPackage>;
 }) => import("react/jsx-runtime").JSX.Element;

package/dist/screens/packages/package-versions.js

@@ -39,6 +39,7 @@ function tagBadgeClass(tag) {
         return "text-bg-success";
     return "text-bg-secondary";
 }
+/** Lists package versions with activate, promote, pin, edit-semver, and delete actions. */
 const PackageVersionsList = (props) => {
     const { pkg } = props;
     const refreshKey = (0, hooks_1.useObservableState)(0);
@@ -115,24 +116,41 @@ const PackageVersionsList = (props) => {
                 signature: "",
             });
             const pvHash = (0, peers_sdk_1.computePackageVersionHash)(pv.version, newTag, pv.packageBundleFileHash, pv.routesBundleFileHash, pv.uiBundleFileHash);
+            // Auto-sign with package author key if available (server/PWA host — key never
+            // exposed to UI). Soft-fail when the key is missing so group admins can still
+            // promote, but never keep a signature that was computed for the old tag.
+            const authorSig = await peers_sdk_1.rpcServerCalls.signPackageAuthorVersion({
+                packageId: pv.packageId,
+                packageVersionId: pv.packageVersionId,
+                version: pv.version,
+                versionTag: newTag,
+                packageBundleFileHash: pv.packageBundleFileHash,
+                routesBundleFileHash: pv.routesBundleFileHash,
+                uiBundleFileHash: pv.uiBundleFileHash,
+                appNavs: pv.appNavs,
+                createdBy: pv.createdBy,
+                createdAt: pv.createdAt,
+            });
             const updated = {
                 ...pv,
                 versionTag: newTag,
                 packageVersionHash: pvHash,
                 history,
+                packageAuthorSignature: authorSig,
             };
-            // Auto-sign with package author key if available (server-side, key never exposed)
-            const authorSig = await peers_sdk_1.rpcServerCalls.signPackageAuthorVersion({
-                packageId: updated.packageId,
-                packageVersionId: updated.packageVersionId,
-                version: updated.version,
-                versionTag: newTag,
-                packageBundleFileHash: updated.packageBundleFileHash,
-                routesBundleFileHash: updated.routesBundleFileHash,
-                uiBundleFileHash: updated.uiBundleFileHash,
-            });
-            updated.packageAuthorSignature = authorSig;
             await (0, peers_sdk_1.PackageVersions)().signAndSave(updated, { saveAsSnapshot: true });
+            // Promoting the version this device is already running should advance the
+            // group active version when the new tag matches group follow policy
+            // (e.g. promote active → stable with default follow settings).
+            const pkgJs = pkg.toJS();
+            const activated = await (0, package_helpers_1.maybeActivateAfterPromote)(pkg.packageId, updated, {
+                wasEffectiveActive: pv.packageVersionId === effectiveActiveVersionId,
+                groupFollowTags: pkgJs.followVersionTags,
+                groupPinned: pkgJs.versionFollowRange === "pinned",
+            });
+            if (activated) {
+                await pkg.load();
+            }
             refreshKey(refreshKey() + 1);
         }
         catch (err) {
@@ -142,7 +160,25 @@ const PackageVersionsList = (props) => {
     async function updateVersion(pv, newSemver) {
         try {
             const pvHash = (0, peers_sdk_1.computePackageVersionHash)(newSemver, pv.versionTag || "dev", pv.packageBundleFileHash, pv.routesBundleFileHash, pv.uiBundleFileHash);
-            const updated = { ...pv, version: newSemver, packageVersionHash: pvHash };
+            // Semver is part of the author-signed payload — re-sign or clear the old signature.
+            const authorSig = await peers_sdk_1.rpcServerCalls.signPackageAuthorVersion({
+                packageId: pv.packageId,
+                packageVersionId: pv.packageVersionId,
+                version: newSemver,
+                versionTag: pv.versionTag,
+                packageBundleFileHash: pv.packageBundleFileHash,
+                routesBundleFileHash: pv.routesBundleFileHash,
+                uiBundleFileHash: pv.uiBundleFileHash,
+                appNavs: pv.appNavs,
+                createdBy: pv.createdBy,
+                createdAt: pv.createdAt,
+            });
+            const updated = {
+                ...pv,
+                version: newSemver,
+                packageVersionHash: pvHash,
+                packageAuthorSignature: authorSig,
+            };
             await (0, peers_sdk_1.PackageVersions)().signAndSave(updated, { saveAsSnapshot: true });
             refreshKey(refreshKey() + 1);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peers-app/peers-ui",
-  "version": "0.21.0",
+  "version": "0.21.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/peers-app/peers-ui.git"
@@ -28,7 +28,7 @@
     "lint:fix": "biome check --write ."
   },
   "peerDependencies": {
-    "@peers-app/peers-sdk": "^0.21.0",
+    "@peers-app/peers-sdk": "^0.21.2",
     "bootstrap": "^5.3.3",
     "react": "^18.0.0",
     "react-dom": "^18.0.0"
@@ -39,7 +39,7 @@
     "@babel/preset-react": "^7.24.1",
     "@babel/preset-typescript": "^7.27.1",
     "@biomejs/biome": "2.3.11",
-    "@peers-app/peers-sdk": "0.21.0",
+    "@peers-app/peers-sdk": "0.21.2",
     "@testing-library/dom": "^10.4.0",
     "@testing-library/jest-dom": "^6.6.3",
     "@testing-library/react": "^16.3.0",

package/src/screens/packages/package-helpers.ts

@@ -136,5 +136,44 @@ export async function activatePackageVersion(
   }
 }
 
+/**
+ * After promoting a version that is currently effective-active on this device,
+ * activate it when the new tag matches the group's auto-activate / follow rules.
+ *
+ * This closes the gotcha where a device is already running a `dev` build, promotes
+ * it to `beta`/`stable`, and expects the group active version to advance without a
+ * separate Activate click — but only when the group would accept that channel
+ * (e.g. default follow is `stable`; `beta` only when the group follows beta).
+ *
+ * @param packageId - Package that was promoted
+ * @param promotedPv - PV after the tag change (must include the new `versionTag`)
+ * @param opts.wasEffectiveActive - True when this PV was this device's effective active before promote
+ * @param opts.groupFollowTags - Group `IPackage.followVersionTags` (not device override)
+ * @param opts.groupPinned - True when group `versionFollowRange` is `pinned`
+ * @returns Whether activation was attempted
+ */
+export async function maybeActivateAfterPromote(
+  packageId: string,
+  promotedPv: IPackageVersion,
+  opts: {
+    wasEffectiveActive: boolean;
+    groupFollowTags: string | undefined;
+    groupPinned: boolean;
+  },
+): Promise<boolean> {
+  if (!opts.wasEffectiveActive) return false;
+  if (opts.groupPinned) return false;
+  if (!promotedPv.versionTag || promotedPv.versionTag === "dev") return false;
+
+  // Docs default: groups follow `stable` when followVersionTags is unset.
+  const followTags = opts.groupFollowTags ?? "stable";
+  if (!doesTagMatch(undefined, promotedPv.versionTag, followTags, undefined)) {
+    return false;
+  }
+
+  await activatePackageVersion(packageId, promotedPv);
+  return true;
+}
+
 /** Numeric rank for sorting packages by update urgency. */
 export const updateLevelRank: Record<string, number> = { major: 3, minor: 2, patch: 1 };

package/src/screens/packages/package-versions.tsx

@@ -15,7 +15,7 @@ import {
 } from "@peers-app/peers-sdk";
 import { useState } from "react";
 import { useObservable, useObservableState, usePromise } from "../../hooks";
-import { activatePackageVersion, isGroupAdmin } from "./package-helpers";
+import { activatePackageVersion, isGroupAdmin, maybeActivateAfterPromote } from "./package-helpers";
 
 function formatDate(iso: string): string {
   try {
@@ -43,6 +43,7 @@ function tagBadgeClass(tag?: string): string {
   return "text-bg-secondary";
 }
 
+/** Lists package versions with activate, promote, pin, edit-semver, and delete actions. */
 export const PackageVersionsList = (props: { pkg: IDoc<IPackage> }) => {
   const { pkg } = props;
   const refreshKey = useObservableState(0);
@@ -127,26 +128,46 @@ export const PackageVersionsList = (props: { pkg: IDoc<IPackage> }) => {
         pv.routesBundleFileHash,
         pv.uiBundleFileHash,
       );
+
+      // Auto-sign with package author key if available (server/PWA host — key never
+      // exposed to UI). Soft-fail when the key is missing so group admins can still
+      // promote, but never keep a signature that was computed for the old tag.
+      const authorSig = await rpcServerCalls.signPackageAuthorVersion({
+        packageId: pv.packageId,
+        packageVersionId: pv.packageVersionId,
+        version: pv.version,
+        versionTag: newTag,
+        packageBundleFileHash: pv.packageBundleFileHash,
+        routesBundleFileHash: pv.routesBundleFileHash,
+        uiBundleFileHash: pv.uiBundleFileHash,
+        appNavs: pv.appNavs,
+        createdBy: pv.createdBy,
+        createdAt: pv.createdAt,
+      });
+
       const updated: IPackageVersion = {
         ...pv,
         versionTag: newTag,
         packageVersionHash: pvHash,
         history,
+        packageAuthorSignature: authorSig,
       };
 
-      // Auto-sign with package author key if available (server-side, key never exposed)
-      const authorSig = await rpcServerCalls.signPackageAuthorVersion({
-        packageId: updated.packageId,
-        packageVersionId: updated.packageVersionId,
-        version: updated.version,
-        versionTag: newTag,
-        packageBundleFileHash: updated.packageBundleFileHash,
-        routesBundleFileHash: updated.routesBundleFileHash,
-        uiBundleFileHash: updated.uiBundleFileHash,
+      await PackageVersions().signAndSave(updated, { saveAsSnapshot: true });
+
+      // Promoting the version this device is already running should advance the
+      // group active version when the new tag matches group follow policy
+      // (e.g. promote active → stable with default follow settings).
+      const pkgJs = pkg.toJS();
+      const activated = await maybeActivateAfterPromote(pkg.packageId, updated, {
+        wasEffectiveActive: pv.packageVersionId === effectiveActiveVersionId,
+        groupFollowTags: pkgJs.followVersionTags,
+        groupPinned: pkgJs.versionFollowRange === "pinned",
       });
-      updated.packageAuthorSignature = authorSig;
+      if (activated) {
+        await pkg.load();
+      }
 
-      await PackageVersions().signAndSave(updated, { saveAsSnapshot: true });
       refreshKey(refreshKey() + 1);
     } catch (err: unknown) {
       alert(`Failed to promote version: ${err instanceof Error ? err.message : String(err)}`);
@@ -162,7 +183,25 @@ export const PackageVersionsList = (props: { pkg: IDoc<IPackage> }) => {
         pv.routesBundleFileHash,
         pv.uiBundleFileHash,
       );
-      const updated = { ...pv, version: newSemver, packageVersionHash: pvHash };
+      // Semver is part of the author-signed payload — re-sign or clear the old signature.
+      const authorSig = await rpcServerCalls.signPackageAuthorVersion({
+        packageId: pv.packageId,
+        packageVersionId: pv.packageVersionId,
+        version: newSemver,
+        versionTag: pv.versionTag,
+        packageBundleFileHash: pv.packageBundleFileHash,
+        routesBundleFileHash: pv.routesBundleFileHash,
+        uiBundleFileHash: pv.uiBundleFileHash,
+        appNavs: pv.appNavs,
+        createdBy: pv.createdBy,
+        createdAt: pv.createdAt,
+      });
+      const updated: IPackageVersion = {
+        ...pv,
+        version: newSemver,
+        packageVersionHash: pvHash,
+        packageAuthorSignature: authorSig,
+      };
       await PackageVersions().signAndSave(updated, { saveAsSnapshot: true });
       refreshKey(refreshKey() + 1);
     } catch (err: unknown) {