@peers-app/peers-ui 0.27.5 → 0.28.0

package/dist/components/message-logs/tool-access-approval-card.js

@@ -21,6 +21,7 @@ function ToolAccessApprovalCard(props) {
         const userContext = await (0, peers_sdk_1.getUserContext)();
         return (0, peers_sdk_1.getCurrentUserAccessLevel)(userContext.getDataContext(approval.dataContextId));
     }, (0, peers_sdk_1.recordAccessLevel)({ accessLevel: 100 }), [approval.dataContextId]);
+    const isGroup = (0, hooks_1.usePromise)(async () => !!(await (0, peers_sdk_1.getUserContext)()).getDataContext(approval.dataContextId).groupId, true, [approval.dataContextId]);
     const required = approval.requiredAccessLevel;
     const current = userLevel ?? 100;
     const pending = approval.status === peers_sdk_1.ToolAccessApprovalStatus.pending;
@@ -53,7 +54,7 @@ function ToolAccessApprovalCard(props) {
             setBusy(false);
         }
     }
-    return ((0, jsx_runtime_1.jsx)("div", { className: "card my-2 bg-body-secondary border-secondary-subtle", "data-testid": "tool-access-approval-card", children: (0, jsx_runtime_1.jsx)("div", { className: "card-body py-2 px-3", children: (0, jsx_runtime_1.jsxs)("div", { className: "d-flex align-items-start gap-2", children: [(0, jsx_runtime_1.jsx)("i", { className: `bi ${statusStyle.icon} ${statusStyle.iconClass} mt-1`, "aria-hidden": "true" }), (0, jsx_runtime_1.jsxs)("div", { className: "flex-grow-1 min-w-0", children: [(0, jsx_runtime_1.jsx)("div", { className: "fw-semibold text-body", children: pending ? "Approval required" : `Access ${approval.status}` }), (0, jsx_runtime_1.jsxs)("div", { className: "small text-body", children: [(0, jsx_runtime_1.jsx)("code", { className: "text-body", children: approval.toolName }), " needs", " ", (0, peers_sdk_1.getAccessLevelLabel)(required), " (", required, "). You have ", (0, peers_sdk_1.getAccessLevelLabel)(current), " ", "(", current, ")."] }), argsPreview && ((0, jsx_runtime_1.jsx)("pre", { className: "small mb-2 mt-2 p-2 bg-body-tertiary border rounded text-body", style: { whiteSpace: "pre-wrap" }, children: argsPreview })), (0, jsx_runtime_1.jsxs)("div", { className: "text-body-secondary small mt-1", children: ["Expires ", approval.expiresAt.toLocaleTimeString(), expired ? " (expired)" : ""] }), approval.resultSummary && ((0, jsx_runtime_1.jsx)("div", { className: "small text-body mt-1", children: approval.resultSummary })), error && (0, jsx_runtime_1.jsx)("div", { className: "text-danger small mt-1", children: error }), pending && !expired && ((0, jsx_runtime_1.jsxs)("div", { className: "d-flex flex-wrap gap-1 mt-2", children: [(0, jsx_runtime_1.jsx)("button", { type: "button", className: "btn btn-sm btn-primary", disabled: busy, onClick: () => decide("once"), children: "Allow once" }), (0, jsx_runtime_1.jsxs)("button", { type: "button", className: "btn btn-sm btn-outline-secondary", disabled: busy, onClick: () => decide("thread"), children: ["Allow in thread (", GRANT_TTL_MINUTES, " min)"] }), (0, jsx_runtime_1.jsxs)("button", { type: "button", className: "btn btn-sm btn-outline-secondary", disabled: busy, onClick: () => decide("context"), children: ["Allow in this context (", GRANT_TTL_MINUTES, " min)"] }), (0, jsx_runtime_1.jsx)("button", { type: "button", className: "btn btn-sm btn-outline-danger", disabled: busy, onClick: () => decide(undefined, true), children: "Deny" })] }))] })] }) }) }));
+    return ((0, jsx_runtime_1.jsx)("div", { className: "card my-2 bg-body-secondary border-secondary-subtle", "data-testid": "tool-access-approval-card", children: (0, jsx_runtime_1.jsx)("div", { className: "card-body py-2 px-3", children: (0, jsx_runtime_1.jsxs)("div", { className: "d-flex align-items-start gap-2", children: [(0, jsx_runtime_1.jsx)("i", { className: `bi ${statusStyle.icon} ${statusStyle.iconClass} mt-1`, "aria-hidden": "true" }), (0, jsx_runtime_1.jsxs)("div", { className: "flex-grow-1 min-w-0", children: [(0, jsx_runtime_1.jsx)("div", { className: "fw-semibold text-body", children: pending ? "Approval required" : `Access ${approval.status}` }), (0, jsx_runtime_1.jsxs)("div", { className: "small text-body", children: [(0, jsx_runtime_1.jsx)("code", { className: "text-body", children: approval.toolName }), " needs", " ", (0, peers_sdk_1.getAccessLevelLabel)(required), " (", required, "). You have ", (0, peers_sdk_1.getAccessLevelLabel)(current), " ", "(", current, ")."] }), argsPreview && ((0, jsx_runtime_1.jsx)("pre", { className: "small mb-2 mt-2 p-2 bg-body-tertiary border rounded text-body", style: { whiteSpace: "pre-wrap" }, children: argsPreview })), (0, jsx_runtime_1.jsxs)("div", { className: "text-body-secondary small mt-1", children: ["Expires ", approval.expiresAt.toLocaleTimeString(), expired ? " (expired)" : ""] }), approval.resultSummary && ((0, jsx_runtime_1.jsx)("div", { className: "small text-body mt-1", children: approval.resultSummary })), error && (0, jsx_runtime_1.jsx)("div", { className: "text-danger small mt-1", children: error }), pending && !expired && ((0, jsx_runtime_1.jsxs)("div", { className: "d-flex flex-wrap gap-1 mt-2", children: [(0, jsx_runtime_1.jsx)("button", { type: "button", className: "btn btn-sm btn-primary", disabled: busy, onClick: () => decide("once"), children: "Allow once" }), !isGroup && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsxs)("button", { type: "button", className: "btn btn-sm btn-outline-secondary", disabled: busy, onClick: () => decide("thread"), children: ["Allow in thread (", GRANT_TTL_MINUTES, " min)"] }), (0, jsx_runtime_1.jsxs)("button", { type: "button", className: "btn btn-sm btn-outline-secondary", disabled: busy, onClick: () => decide("context"), children: ["Allow in this context (", GRANT_TTL_MINUTES, " min)"] })] })), (0, jsx_runtime_1.jsx)("button", { type: "button", className: "btn btn-sm btn-outline-danger", disabled: busy, onClick: () => decide(undefined, true), children: "Deny" })] }))] })] }) }) }));
 }
 function meaningfulArgsPreview(preview) {
     const trimmed = preview?.trim();

package/dist/globals.d.ts

@@ -30,6 +30,7 @@ export declare const groups: import("@peers-app/peers-sdk").Observable<{
     founderUserId: string;
     disabled?: boolean | undefined;
     iconClassName?: string | undefined;
+    signedAt?: number | undefined;
     publicRole?: import("@peers-app/peers-sdk").GroupMemberRole | undefined;
 }[]>;
 /**

package/dist/screens/groups/group-members.js

@@ -110,8 +110,9 @@ const GroupMembersUI = (props) => {
         try {
             const member = await groupMembersTable.get(memberId);
             if (member) {
-                member.role = newRole;
-                await groupMembersTable.signAndSave(member);
+                // Without `publicKey`, signing binds the grant to the member's key as this device knows it.
+                const { publicKey: _granted, ...rest } = member;
+                await groupMembersTable.signAndSave({ ...rest, role: newRole });
                 setRefreshKey((prev) => prev + 1);
             }
         }

package/dist/screens/network-viewer/sync-recovery.js

@@ -23,6 +23,9 @@ function statusLabel(entry) {
     if (entry.parkedReason === "unresolvable") {
         return "Parked, needs a decision";
     }
+    if (entry.parkedReason === "authorization") {
+        return "Parked, not authorized";
+    }
     return "Parked";
 }
 function statusExplanation(entry) {
@@ -38,6 +41,9 @@ function statusExplanation(entry) {
     if (entry.parkedReason === "unresolvable") {
         return "An automatic fix could not be applied safely — the other record was missing, more than one row matched, or the write failed. The rows were left as they are. Choose an action when you know which version should remain.";
     }
+    if (entry.parkedReason === "authorization") {
+        return "The change isn't signed by someone allowed to make it — for example, a membership or package release that needs an Admin. This device kept its current row. It checks again on its own whenever the group's members or roles change, so a change that was only waiting for its signer's membership to arrive is written then.";
+    }
     return "This entry is waiting and is not being sent to other devices. Retry tries it again. The other actions clear it.";
 }
 /** Show a validation payload as indented JSON when the error ends with one. */

package/dist/ui-router/routes-loader.d.ts

@@ -4,5 +4,7 @@ import "../ui-defaults";
 export type IPackageWithNavs = IPackage & {
     appNavs?: IAppNav[];
 };
+/** Packages with authorized navigation metadata available in the current context. */
 export declare const allPackages: import("@peers-app/peers-sdk").Observable<IPackageWithNavs[]>;
+/** Load package routes and subscribe to changes in the current context. */
 export declare const loadAllRoutes: () => Promise<true | undefined>;

package/dist/ui-router/routes-loader.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadAllRoutes = exports.allPackages = void 0;
 const peers_sdk_1 = require("@peers-app/peers-sdk");
 require("../ui-defaults");
+/** Packages with authorized navigation metadata available in the current context. */
 exports.allPackages = (0, peers_sdk_1.observable)([]);
 let allRoutesLoaded = false;
 const prefsSubscribed = new Set();
@@ -46,7 +47,10 @@ async function enrichWithPvAppNavs(pkg) {
     if (!pvId)
         return pkg;
     try {
-        const pv = await (0, peers_sdk_1.PackageVersions)().get(pvId);
+        const dataContext = await (0, peers_sdk_1.getDefaultDataContext)();
+        const pv = await (0, peers_sdk_1.PackageVersions)(dataContext).get(pvId);
+        if (pv)
+            await (0, peers_sdk_1.assertPackageVersionRunnable)(pkg, pv, dataContext);
         if (pv?.appNavs) {
             return { ...pkg, appNavs: pv.appNavs };
         }
@@ -56,6 +60,7 @@ async function enrichWithPvAppNavs(pkg) {
     }
     return pkg;
 }
+/** Load package routes and subscribe to changes in the current context. */
 const loadAllRoutes = async () => {
     if (allRoutesLoaded)
         return;
@@ -125,9 +130,15 @@ function loadRoutesBundle(pkg, forceRefresh) {
                     /* use group default */
                 }
                 let routesBundleFileId;
+                let selected;
                 if (pvId) {
                     try {
-                        const pv = await (0, peers_sdk_1.PackageVersions)().get(pvId);
+                        const dataContext = await (0, peers_sdk_1.getDefaultDataContext)();
+                        const pv = await (0, peers_sdk_1.PackageVersions)(dataContext).get(pvId);
+                        if (pv) {
+                            await (0, peers_sdk_1.assertPackageVersionRunnable)(pkg, pv, dataContext);
+                            selected = { pv, dataContext };
+                        }
                         routesBundleFileId = pv?.routesBundleFileId;
                     }
                     catch {
@@ -139,6 +150,8 @@ function loadRoutesBundle(pkg, forceRefresh) {
                     bundleCode = await peers_sdk_1.rpcServerCalls.getFileContents(routesBundleFileId);
                 }
                 if (bundleCode) {
+                    if (selected?.dataContext.groupId)
+                        (0, peers_sdk_1.assertPackageBundleIntegrity)(selected.pv, "routes", bundleCode);
                     const exportRoutes = (peerRoutes) => {
                         const rw = window;
                         peerRoutes.routes.forEach((route) => {

package/dist/ui-router/ui-loader.js

@@ -182,7 +182,7 @@ const UILoader = (args) => {
     return (0, jsx_runtime_1.jsx)(UIAsyncLoader, { peersUIId: peersUIId, props: props }, peersUIId);
 };
 const uiLoadingPromises = {};
-async function resolveUiBundleFileId(pkg) {
+async function resolveUiBundleVersion(pkg) {
     let pvId = pkg.activePackageVersionId;
     try {
         const pvar = (0, peers_sdk_1.packagePrefsVar)(pkg.packageId);
@@ -195,8 +195,11 @@ async function resolveUiBundleFileId(pkg) {
     if (!pvId)
         return undefined;
     try {
-        const pv = await (0, peers_sdk_1.PackageVersions)().get(pvId);
-        return pv?.uiBundleFileId;
+        const dataContext = await (0, peers_sdk_1.getDefaultDataContext)();
+        const pv = await (0, peers_sdk_1.PackageVersions)(dataContext).get(pvId);
+        if (pv)
+            await (0, peers_sdk_1.assertPackageVersionRunnable)(pkg, pv, dataContext);
+        return pv ? { pv, dataContext } : undefined;
     }
     catch {
         return undefined;
@@ -208,12 +211,15 @@ function loadUIBundle(pkg, forceRefresh) {
         const sTime = Date.now();
         console.log(`loading ui bundle for ${pkg.name}`);
         importPromise = (async () => {
-            const uiBundleFileId = await resolveUiBundleFileId(pkg);
-            if (!uiBundleFileId) {
+            const selected = await resolveUiBundleVersion(pkg);
+            const uiBundleFileId = selected?.pv.uiBundleFileId;
+            if (!selected || !uiBundleFileId) {
                 return;
             }
             const bundleCode = await peers_sdk_1.rpcServerCalls.getFileContents(uiBundleFileId);
             if (bundleCode) {
+                if (selected.dataContext.groupId)
+                    (0, peers_sdk_1.assertPackageBundleIntegrity)(selected.pv, "ui", bundleCode);
                 const exportUIs = (peerUIs) => {
                     peerUIs?.uis?.forEach((ui) => {
                         peersUIs[ui.peersUIId] = ui;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peers-app/peers-ui",
-  "version": "0.27.5",
+  "version": "0.28.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/peers-app/peers-ui.git"
@@ -36,7 +36,7 @@
     "lint:fix": "biome check --write ."
   },
   "peerDependencies": {
-    "@peers-app/peers-sdk": "^0.27.5",
+    "@peers-app/peers-sdk": "^0.28.0",
     "bootstrap": "^5.3.3",
     "react": "^18.0.0",
     "react-dom": "^18.0.0"
@@ -47,7 +47,7 @@
     "@babel/preset-react": "^7.24.1",
     "@babel/preset-typescript": "^7.27.1",
     "@biomejs/biome": "2.3.11",
-    "@peers-app/peers-sdk": "0.27.5",
+    "@peers-app/peers-sdk": "0.28.0",
     "@testing-library/dom": "^10.4.0",
     "@testing-library/jest-dom": "^6.6.3",
     "@testing-library/react": "^16.3.0",