@peers-app/peers-ui 0.27.5 → 0.28.1

package/dist/components/message-logs/tool-access-approval-card.js

@@ -21,6 +21,7 @@ function ToolAccessApprovalCard(props) {
         const userContext = await (0, peers_sdk_1.getUserContext)();
         return (0, peers_sdk_1.getCurrentUserAccessLevel)(userContext.getDataContext(approval.dataContextId));
     }, (0, peers_sdk_1.recordAccessLevel)({ accessLevel: 100 }), [approval.dataContextId]);
+    const isGroup = (0, hooks_1.usePromise)(async () => !!(await (0, peers_sdk_1.getUserContext)()).getDataContext(approval.dataContextId).groupId, true, [approval.dataContextId]);
     const required = approval.requiredAccessLevel;
     const current = userLevel ?? 100;
     const pending = approval.status === peers_sdk_1.ToolAccessApprovalStatus.pending;
@@ -53,7 +54,7 @@ function ToolAccessApprovalCard(props) {
             setBusy(false);
         }
     }
-    return ((0, jsx_runtime_1.jsx)("div", { className: "card my-2 bg-body-secondary border-secondary-subtle", "data-testid": "tool-access-approval-card", children: (0, jsx_runtime_1.jsx)("div", { className: "card-body py-2 px-3", children: (0, jsx_runtime_1.jsxs)("div", { className: "d-flex align-items-start gap-2", children: [(0, jsx_runtime_1.jsx)("i", { className: `bi ${statusStyle.icon} ${statusStyle.iconClass} mt-1`, "aria-hidden": "true" }), (0, jsx_runtime_1.jsxs)("div", { className: "flex-grow-1 min-w-0", children: [(0, jsx_runtime_1.jsx)("div", { className: "fw-semibold text-body", children: pending ? "Approval required" : `Access ${approval.status}` }), (0, jsx_runtime_1.jsxs)("div", { className: "small text-body", children: [(0, jsx_runtime_1.jsx)("code", { className: "text-body", children: approval.toolName }), " needs", " ", (0, peers_sdk_1.getAccessLevelLabel)(required), " (", required, "). You have ", (0, peers_sdk_1.getAccessLevelLabel)(current), " ", "(", current, ")."] }), argsPreview && ((0, jsx_runtime_1.jsx)("pre", { className: "small mb-2 mt-2 p-2 bg-body-tertiary border rounded text-body", style: { whiteSpace: "pre-wrap" }, children: argsPreview })), (0, jsx_runtime_1.jsxs)("div", { className: "text-body-secondary small mt-1", children: ["Expires ", approval.expiresAt.toLocaleTimeString(), expired ? " (expired)" : ""] }), approval.resultSummary && ((0, jsx_runtime_1.jsx)("div", { className: "small text-body mt-1", children: approval.resultSummary })), error && (0, jsx_runtime_1.jsx)("div", { className: "text-danger small mt-1", children: error }), pending && !expired && ((0, jsx_runtime_1.jsxs)("div", { className: "d-flex flex-wrap gap-1 mt-2", children: [(0, jsx_runtime_1.jsx)("button", { type: "button", className: "btn btn-sm btn-primary", disabled: busy, onClick: () => decide("once"), children: "Allow once" }), (0, jsx_runtime_1.jsxs)("button", { type: "button", className: "btn btn-sm btn-outline-secondary", disabled: busy, onClick: () => decide("thread"), children: ["Allow in thread (", GRANT_TTL_MINUTES, " min)"] }), (0, jsx_runtime_1.jsxs)("button", { type: "button", className: "btn btn-sm btn-outline-secondary", disabled: busy, onClick: () => decide("context"), children: ["Allow in this context (", GRANT_TTL_MINUTES, " min)"] }), (0, jsx_runtime_1.jsx)("button", { type: "button", className: "btn btn-sm btn-outline-danger", disabled: busy, onClick: () => decide(undefined, true), children: "Deny" })] }))] })] }) }) }));
+    return ((0, jsx_runtime_1.jsx)("div", { className: "card my-2 bg-body-secondary border-secondary-subtle", "data-testid": "tool-access-approval-card", children: (0, jsx_runtime_1.jsx)("div", { className: "card-body py-2 px-3", children: (0, jsx_runtime_1.jsxs)("div", { className: "d-flex align-items-start gap-2", children: [(0, jsx_runtime_1.jsx)("i", { className: `bi ${statusStyle.icon} ${statusStyle.iconClass} mt-1`, "aria-hidden": "true" }), (0, jsx_runtime_1.jsxs)("div", { className: "flex-grow-1 min-w-0", children: [(0, jsx_runtime_1.jsx)("div", { className: "fw-semibold text-body", children: pending ? "Approval required" : `Access ${approval.status}` }), (0, jsx_runtime_1.jsxs)("div", { className: "small text-body", children: [(0, jsx_runtime_1.jsx)("code", { className: "text-body", children: approval.toolName }), " needs", " ", (0, peers_sdk_1.getAccessLevelLabel)(required), " (", required, "). You have ", (0, peers_sdk_1.getAccessLevelLabel)(current), " ", "(", current, ")."] }), argsPreview && ((0, jsx_runtime_1.jsx)("pre", { className: "small mb-2 mt-2 p-2 bg-body-tertiary border rounded text-body", style: { whiteSpace: "pre-wrap" }, children: argsPreview })), (0, jsx_runtime_1.jsxs)("div", { className: "text-body-secondary small mt-1", children: ["Expires ", approval.expiresAt.toLocaleTimeString(), expired ? " (expired)" : ""] }), approval.resultSummary && ((0, jsx_runtime_1.jsx)("div", { className: "small text-body mt-1", children: approval.resultSummary })), error && (0, jsx_runtime_1.jsx)("div", { className: "text-danger small mt-1", children: error }), pending && !expired && ((0, jsx_runtime_1.jsxs)("div", { className: "d-flex flex-wrap gap-1 mt-2", children: [(0, jsx_runtime_1.jsx)("button", { type: "button", className: "btn btn-sm btn-primary", disabled: busy, onClick: () => decide("once"), children: "Allow once" }), !isGroup && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsxs)("button", { type: "button", className: "btn btn-sm btn-outline-secondary", disabled: busy, onClick: () => decide("thread"), children: ["Allow in thread (", GRANT_TTL_MINUTES, " min)"] }), (0, jsx_runtime_1.jsxs)("button", { type: "button", className: "btn btn-sm btn-outline-secondary", disabled: busy, onClick: () => decide("context"), children: ["Allow in this context (", GRANT_TTL_MINUTES, " min)"] })] })), (0, jsx_runtime_1.jsx)("button", { type: "button", className: "btn btn-sm btn-outline-danger", disabled: busy, onClick: () => decide(undefined, true), children: "Deny" })] }))] })] }) }) }));
 }
 function meaningfulArgsPreview(preview) {
     const trimmed = preview?.trim();

package/dist/globals.d.ts

@@ -30,6 +30,7 @@ export declare const groups: import("@peers-app/peers-sdk").Observable<{
     founderUserId: string;
     disabled?: boolean | undefined;
     iconClassName?: string | undefined;
+    signedAt?: number | undefined;
     publicRole?: import("@peers-app/peers-sdk").GroupMemberRole | undefined;
 }[]>;
 /**

package/dist/screens/groups/group-members.js

@@ -110,8 +110,9 @@ const GroupMembersUI = (props) => {
         try {
             const member = await groupMembersTable.get(memberId);
             if (member) {
-                member.role = newRole;
-                await groupMembersTable.signAndSave(member);
+                // Without `publicKey`, signing binds the grant to the member's key as this device knows it.
+                const { publicKey: _granted, ...rest } = member;
+                await groupMembersTable.signAndSave({ ...rest, role: newRole });
                 setRefreshKey((prev) => prev + 1);
             }
         }

package/dist/screens/network-viewer/sync-recovery.js

@@ -23,6 +23,9 @@ function statusLabel(entry) {
     if (entry.parkedReason === "unresolvable") {
         return "Parked, needs a decision";
     }
+    if (entry.parkedReason === "authorization") {
+        return "Parked, not authorized";
+    }
     return "Parked";
 }
 function statusExplanation(entry) {
@@ -38,6 +41,9 @@ function statusExplanation(entry) {
     if (entry.parkedReason === "unresolvable") {
         return "An automatic fix could not be applied safely — the other record was missing, more than one row matched, or the write failed. The rows were left as they are. Choose an action when you know which version should remain.";
     }
+    if (entry.parkedReason === "authorization") {
+        return "The change isn't signed by someone allowed to make it — for example, a membership or package release that needs an Admin. This device kept its current row. It checks again on its own whenever the group's members or roles change, so a change that was only waiting for its signer's membership to arrive is written then.";
+    }
     return "This entry is waiting and is not being sent to other devices. Retry tries it again. The other actions clear it.";
 }
 /** Show a validation payload as indented JSON when the error ends with one. */

package/dist/ui-router/routes-loader.d.ts

@@ -4,5 +4,7 @@ import "../ui-defaults";
 export type IPackageWithNavs = IPackage & {
     appNavs?: IAppNav[];
 };
+/** Packages with authorized navigation metadata available in the current context. */
 export declare const allPackages: import("@peers-app/peers-sdk").Observable<IPackageWithNavs[]>;
+/** Load package routes and subscribe to changes in the current context. */
 export declare const loadAllRoutes: () => Promise<true | undefined>;

package/dist/ui-router/routes-loader.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadAllRoutes = exports.allPackages = void 0;
 const peers_sdk_1 = require("@peers-app/peers-sdk");
 require("../ui-defaults");
+const runnable_version_1 = require("./runnable-version");
+/** Packages with authorized navigation metadata available in the current context. */
 exports.allPackages = (0, peers_sdk_1.observable)([]);
 let allRoutesLoaded = false;
 const prefsSubscribed = new Set();
@@ -34,28 +36,10 @@ function subscribeToPrefs(packageId) {
  * Enrich an IPackage with appNavs from the device's active PackageVersion record.
  */
 async function enrichWithPvAppNavs(pkg) {
-    let pvId = pkg.activePackageVersionId;
-    try {
-        const pvar = (0, peers_sdk_1.packagePrefsVar)(pkg.packageId);
-        await pvar.loadingPromise;
-        pvId = pvar()?.activePackageVersionId ?? pvId;
-    }
-    catch {
-        /* use group default */
-    }
-    if (!pvId)
-        return pkg;
-    try {
-        const pv = await (0, peers_sdk_1.PackageVersions)().get(pvId);
-        if (pv?.appNavs) {
-            return { ...pkg, appNavs: pv.appNavs };
-        }
-    }
-    catch {
-        /* PV not found */
-    }
-    return pkg;
+    const appNavs = (await (0, runnable_version_1.resolveRunnableVersion)(pkg))?.pv.appNavs;
+    return appNavs ? { ...pkg, appNavs } : pkg;
 }
+/** Load package routes and subscribe to changes in the current context. */
 const loadAllRoutes = async () => {
     if (allRoutesLoaded)
         return;
@@ -115,30 +99,15 @@ function loadRoutesBundle(pkg, forceRefresh) {
                     console.log(`waiting for registerPeersUIRoute to be defined on the window object`);
                     await new Promise((resolve) => setTimeout(resolve, 20));
                 }
-                let pvId = pkg.activePackageVersionId;
-                try {
-                    const pvar = (0, peers_sdk_1.packagePrefsVar)(pkg.packageId);
-                    await pvar.loadingPromise;
-                    pvId = pvar()?.activePackageVersionId ?? pvId;
-                }
-                catch {
-                    /* use group default */
-                }
-                let routesBundleFileId;
-                if (pvId) {
-                    try {
-                        const pv = await (0, peers_sdk_1.PackageVersions)().get(pvId);
-                        routesBundleFileId = pv?.routesBundleFileId;
-                    }
-                    catch {
-                        /* no version record */
-                    }
-                }
+                const selected = await (0, runnable_version_1.resolveRunnableVersion)(pkg);
+                const routesBundleFileId = selected?.pv.routesBundleFileId;
                 let bundleCode = "";
                 if (routesBundleFileId) {
                     bundleCode = await peers_sdk_1.rpcServerCalls.getFileContents(routesBundleFileId);
                 }
                 if (bundleCode) {
+                    if (selected?.dataContext.groupId)
+                        (0, peers_sdk_1.assertPackageBundleIntegrity)(selected.pv, "routes", bundleCode);
                     const exportRoutes = (peerRoutes) => {
                         const rw = window;
                         peerRoutes.routes.forEach((route) => {

package/dist/ui-router/runnable-version.d.ts

@@ -0,0 +1,12 @@
+import { type DataContext, type IPackage, type IPackageVersion } from "@peers-app/peers-sdk";
+/**
+ * The version of `pkg` this device runs, when it may run here: the device's own selection, else
+ * the group's, checked with `assertPackageVersionRunnable`. A refusal is logged and gives
+ * undefined, so the package's app links, routes and screens are left out rather than loaded.
+ *
+ * @param pkg - The package.
+ */
+export declare function resolveRunnableVersion(pkg: IPackage): Promise<{
+    pv: IPackageVersion;
+    dataContext: DataContext;
+} | undefined>;

package/dist/ui-router/runnable-version.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRunnableVersion = resolveRunnableVersion;
+const peers_sdk_1 = require("@peers-app/peers-sdk");
+/**
+ * The version of `pkg` this device runs, when it may run here: the device's own selection, else
+ * the group's, checked with `assertPackageVersionRunnable`. A refusal is logged and gives
+ * undefined, so the package's app links, routes and screens are left out rather than loaded.
+ *
+ * @param pkg - The package.
+ */
+async function resolveRunnableVersion(pkg) {
+    let pvId = pkg.activePackageVersionId;
+    try {
+        const pvar = (0, peers_sdk_1.packagePrefsVar)(pkg.packageId);
+        await pvar.loadingPromise;
+        pvId = pvar()?.activePackageVersionId ?? pvId;
+    }
+    catch {
+        /* use group default */
+    }
+    if (!pvId)
+        return undefined;
+    try {
+        const dataContext = await (0, peers_sdk_1.getDefaultDataContext)();
+        const pv = await (0, peers_sdk_1.PackageVersions)(dataContext).get(pvId);
+        if (!pv)
+            return undefined;
+        await (0, peers_sdk_1.assertPackageVersionRunnable)(pkg, pv, dataContext);
+        return { pv, dataContext };
+    }
+    catch (error) {
+        console.warn(`Not showing ${pkg.name}: ${error instanceof Error ? error.message : String(error)}`);
+        return undefined;
+    }
+}

package/dist/ui-router/ui-loader.js

@@ -44,6 +44,7 @@ const globals_1 = require("../globals");
 const hooks_1 = require("../hooks");
 require("../ui-defaults");
 const routes_loader_1 = require("./routes-loader");
+const runnable_version_1 = require("./runnable-version");
 const peersUIs = {};
 class UIErrorBoundary extends react_1.Component {
     constructor(props) {
@@ -182,38 +183,21 @@ const UILoader = (args) => {
     return (0, jsx_runtime_1.jsx)(UIAsyncLoader, { peersUIId: peersUIId, props: props }, peersUIId);
 };
 const uiLoadingPromises = {};
-async function resolveUiBundleFileId(pkg) {
-    let pvId = pkg.activePackageVersionId;
-    try {
-        const pvar = (0, peers_sdk_1.packagePrefsVar)(pkg.packageId);
-        await pvar.loadingPromise;
-        pvId = pvar()?.activePackageVersionId ?? pvId;
-    }
-    catch {
-        /* use group default */
-    }
-    if (!pvId)
-        return undefined;
-    try {
-        const pv = await (0, peers_sdk_1.PackageVersions)().get(pvId);
-        return pv?.uiBundleFileId;
-    }
-    catch {
-        return undefined;
-    }
-}
 function loadUIBundle(pkg, forceRefresh) {
     let importPromise = uiLoadingPromises[pkg.packageId];
     if (!importPromise || forceRefresh) {
         const sTime = Date.now();
         console.log(`loading ui bundle for ${pkg.name}`);
         importPromise = (async () => {
-            const uiBundleFileId = await resolveUiBundleFileId(pkg);
-            if (!uiBundleFileId) {
+            const selected = await (0, runnable_version_1.resolveRunnableVersion)(pkg);
+            const uiBundleFileId = selected?.pv.uiBundleFileId;
+            if (!selected || !uiBundleFileId) {
                 return;
             }
             const bundleCode = await peers_sdk_1.rpcServerCalls.getFileContents(uiBundleFileId);
             if (bundleCode) {
+                if (selected.dataContext.groupId)
+                    (0, peers_sdk_1.assertPackageBundleIntegrity)(selected.pv, "ui", bundleCode);
                 const exportUIs = (peerUIs) => {
                     peerUIs?.uis?.forEach((ui) => {
                         peersUIs[ui.peersUIId] = ui;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peers-app/peers-ui",
-  "version": "0.27.5",
+  "version": "0.28.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/peers-app/peers-ui.git"
@@ -36,7 +36,7 @@
     "lint:fix": "biome check --write ."
   },
   "peerDependencies": {
-    "@peers-app/peers-sdk": "^0.27.5",
+    "@peers-app/peers-sdk": "^0.28.1",
     "bootstrap": "^5.3.3",
     "react": "^18.0.0",
     "react-dom": "^18.0.0"
@@ -47,7 +47,7 @@
     "@babel/preset-react": "^7.24.1",
     "@babel/preset-typescript": "^7.27.1",
     "@biomejs/biome": "2.3.11",
-    "@peers-app/peers-sdk": "0.27.5",
+    "@peers-app/peers-sdk": "0.28.1",
     "@testing-library/dom": "^10.4.0",
     "@testing-library/jest-dom": "^6.6.3",
     "@testing-library/react": "^16.3.0",