dignity.js 0.8.0 → 0.8.2

package/docs/assets/dignity.esm.js

@@ -13300,6 +13300,123 @@ var require_query_replica = __commonJS({
   }
 });
 
+// src/apps/manifest.js
+var require_manifest = __commonJS({
+  "src/apps/manifest.js"(exports, module) {
+    var MANIFEST_SCHEMA_VERSION = 1;
+    var ID_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/;
+    function isNonEmptyString(value) {
+      return typeof value === "string" && value.trim().length > 0;
+    }
+    function validateStoredCommand(command, index) {
+      const prefix = `storedCommands[${index}]`;
+      if (!command || typeof command !== "object") {
+        return { ok: false, reason: `${prefix} must be an object` };
+      }
+      if (!isNonEmptyString(command.id)) {
+        return { ok: false, reason: `${prefix}.id is required` };
+      }
+      if (!isNonEmptyString(command.collection)) {
+        return { ok: false, reason: `${prefix}.collection is required` };
+      }
+      if (!["create", "update", "delete"].includes(command.kind)) {
+        return { ok: false, reason: `${prefix}.kind must be create, update, or delete` };
+      }
+      if (command.allowedFields !== void 0) {
+        if (!Array.isArray(command.allowedFields) || command.allowedFields.some((f) => !isNonEmptyString(f))) {
+          return { ok: false, reason: `${prefix}.allowedFields must be a string array` };
+        }
+      }
+      return { ok: true };
+    }
+    function validateDignityAppManifest(raw) {
+      if (!raw || typeof raw !== "object") {
+        return { ok: false, reason: "manifest must be an object" };
+      }
+      if (raw.schemaVersion !== void 0 && raw.schemaVersion !== MANIFEST_SCHEMA_VERSION) {
+        return { ok: false, reason: `unsupported schemaVersion: ${raw.schemaVersion}` };
+      }
+      if (!isNonEmptyString(raw.id) || !ID_PATTERN.test(raw.id)) {
+        return { ok: false, reason: "id must match [a-z0-9][a-z0-9._-]{0,63}" };
+      }
+      if (!isNonEmptyString(raw.title)) {
+        return { ok: false, reason: "title is required" };
+      }
+      if (!Array.isArray(raw.collections) || raw.collections.length === 0) {
+        return { ok: false, reason: "collections must be a non-empty string array" };
+      }
+      const collections = [];
+      for (const name of raw.collections) {
+        if (!isNonEmptyString(name)) {
+          return { ok: false, reason: "collections entries must be non-empty strings" };
+        }
+        if (collections.includes(name)) {
+          return { ok: false, reason: `duplicate collection: ${name}` };
+        }
+        collections.push(name.trim());
+      }
+      const storedCommands = Array.isArray(raw.storedCommands) ? raw.storedCommands : [];
+      for (let index = 0; index < storedCommands.length; index += 1) {
+        const result = validateStoredCommand(storedCommands[index], index);
+        if (!result.ok) {
+          return result;
+        }
+        const collection = storedCommands[index].collection;
+        if (!collections.includes(collection)) {
+          return {
+            ok: false,
+            reason: `storedCommands[${index}] references undeclared collection: ${collection}`
+          };
+        }
+      }
+      const allowedCspOrigins = Array.isArray(raw.allowedCspOrigins) ? raw.allowedCspOrigins : [];
+      for (const origin of allowedCspOrigins) {
+        if (!isNonEmptyString(origin) || !origin.startsWith("https://")) {
+          return { ok: false, reason: "allowedCspOrigins entries must be https:// URLs" };
+        }
+        if (/localhost|127\.0\.0\.1/i.test(origin)) {
+          return { ok: false, reason: "localhost origins are not allowed in allowedCspOrigins" };
+        }
+      }
+      const manifest = {
+        schemaVersion: MANIFEST_SCHEMA_VERSION,
+        id: raw.id.trim(),
+        title: raw.title.trim(),
+        description: isNonEmptyString(raw.description) ? raw.description.trim() : "",
+        collections,
+        peerGroupId: isNonEmptyString(raw.peerGroupId) ? raw.peerGroupId.trim() : null,
+        publisherId: isNonEmptyString(raw.publisherId) ? raw.publisherId.trim() : null,
+        storedCommands: storedCommands.map((cmd) => ({
+          id: cmd.id.trim(),
+          collection: cmd.collection.trim(),
+          kind: cmd.kind,
+          allowedFields: Array.isArray(cmd.allowedFields) ? [...cmd.allowedFields] : null,
+          requiresRole: isNonEmptyString(cmd.requiresRole) ? cmd.requiresRole.trim() : null
+        })),
+        allowedCspOrigins: allowedCspOrigins.map((o) => o.trim()),
+        readOnly: storedCommands.length === 0
+      };
+      return { ok: true, manifest };
+    }
+    function collectionAllowed(manifest, collectionName) {
+      return manifest && Array.isArray(manifest.collections) && manifest.collections.includes(collectionName);
+    }
+    function getStoredCommand(manifest, commandId) {
+      if (!manifest || !Array.isArray(manifest.storedCommands)) {
+        return null;
+      }
+      return manifest.storedCommands.find((cmd) => cmd.id === commandId) || null;
+    }
+    module.exports = {
+      MANIFEST_SCHEMA_VERSION,
+      ID_PATTERN,
+      validateDignityAppManifest,
+      collectionAllowed,
+      getStoredCommand
+    };
+  }
+});
+
 // src/index.js
 var require_index = __commonJS({
   "src/index.js"(exports, module) {
@@ -13364,6 +13481,12 @@ var require_index = __commonJS({
     } = require_peer_group_tiers();
     var { electBulkRelays, DEFAULT_BULK_RELAY_COUNT } = require_bulk_relay();
     var DignityQueryReplica = require_query_replica();
+    var {
+      MANIFEST_SCHEMA_VERSION: DIGNITY_APP_MANIFEST_SCHEMA_VERSION,
+      validateDignityAppManifest,
+      collectionAllowed,
+      getStoredCommand
+    } = require_manifest();
     module.exports = {
       DignityP2P,
       createDefaultSignalingPool,
@@ -13412,7 +13535,11 @@ var require_index = __commonJS({
       filterPeersByTier,
       electBulkRelays,
       DEFAULT_BULK_RELAY_COUNT,
-      DignityQueryReplica
+      DignityQueryReplica,
+      DIGNITY_APP_MANIFEST_SCHEMA_VERSION,
+      validateDignityAppManifest,
+      collectionAllowed,
+      getStoredCommand
     };
   }
 });

package/docs/index.html

@@ -3,7 +3,7 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="description" content="dignity.js v0.8.0 — REST-like P2P object API for decentralized JavaScript applications." />
+    <meta name="description" content="dignity.js v0.8.2 — REST-like P2P object API for decentralized JavaScript applications." />
     <title>dignity.js · Documentation</title>
     <link rel="icon" href="./assets/favicon.svg" type="image/svg+xml" />
     <link rel="icon" href="./favicon.ico" sizes="32x32" />
@@ -16,7 +16,7 @@
       <a class="site-header__brand" href="#overview">
         <img src="./assets/dignity-logo.svg" alt="" width="344" height="80" />
         <!-- <span>dignity.js</span> -->
-        <span class="site-header__version">v0.8.0</span>
+        <span class="site-header__version">v0.8.2</span>
       </a>
       <div class="site-header__links">
         <a href="https://www.npmjs.com/package/dignity.js" target="_blank" rel="noopener noreferrer">npm</a>
@@ -644,8 +644,9 @@ replica.verifyChain();  // hash-chain consistency</code></pre>
             </div>
 
             <h3>Roadmap</h3>
-            <p><strong>v0.8.0 (current)</strong> — CQRS tiered PeerGroups, domain events, DignityQueryReplica, hash chains, bulk relay, maxHops 64.</p>
-            <p><strong>v0.7.1</strong> — live docs playground, demo fixes, syntax highlighting.</p>
+            <p><strong>v0.8.2 (current)</strong> — Dignity App manifest validation, sandboxed-apps threat model (#101, #108).</p>
+            <p><strong>v0.8.1</strong> — openapi-like.json sync with DignityP2P API.</p>
+            <p><strong>v0.8.0</strong> — CQRS tiered PeerGroups, domain events, DignityQueryReplica, hash chains, bulk relay, maxHops 64.</p>
             <p><strong>v0.7.0 (shipped)</strong> — credential-derived keys, identity rotation, PeerGroup hardening, stress harness.</p>
             <p><strong>v0.6.0 (shipped)</strong> — core gossip, chess spectators, unit + e2e tests.</p>
             <p><strong>v0.6.x polish</strong> — <code>subscribeObjectFeed</code> wrapper, connection LRU trim, IndexedDB joined-group persistence, React <code>usePeerGroup</code> hook, 50+ node integration test.</p>
@@ -1039,7 +1040,7 @@ npm run example:chess</code></pre>
 
           <footer class="site-footer">
             <p>
-              dignity.js v0.8.0 ·
+              dignity.js v0.8.2 ·
               <a href="https://github.com/jose-compu/dignity.js/blob/main/LICENSE">Apache 2.0</a> ·
               <a href="https://github.com/jose-compu/dignity.js">GitHub</a> ·
               <a href="https://www.npmjs.com/package/dignity.js">npm</a>

package/docs/openapi-like.json

@@ -1,7 +1,11 @@
 {
   "name": "dignity.js",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "REST-like object API over peer-to-peer replication",
+  "lifecycle": {
+    "start": "attach network message handler and begin receiving",
+    "stop": "leave discovery scopes and detach handler"
+  },
   "resources": {
     "collections/{collection}/{id}": {
       "create": {
@@ -11,7 +15,8 @@
           "id": "optional stable id",
           "collaborators": "optional peer id list",
           "broadcastScope": "scoped broadcast password namespace",
-          "connectToPeers": "optional; defaults to collaborators on PeerJS mesh"
+          "connectToPeers": "optional; defaults to collaborators on PeerJS mesh",
+          "peerGroupId": "optional; auto-publish signed domain event to this PeerGroup (v0.8+, publisher role)"
         }
       },
       "read": {
@@ -43,7 +48,17 @@
       },
       "delete": {
         "method": "remove(collection, id)",
-        "authorization": "owner-only"
+        "authorization": "owner-only",
+        "options": {
+          "peerGroupId": "optional; auto-publish domain event when publisher (v0.8+)"
+        }
+      },
+      "transferOwnership": {
+        "method": "transferOwnership(collection, id, newOwnerId, options)",
+        "authorization": "owner-only",
+        "options": {
+          "keepAsCollaborator": "default true; previous owner stays collaborator"
+        }
       }
     },
     "collections/{collection}": {
@@ -57,7 +72,28 @@
       "getConnectionStats": "{ openCount, peerIds }",
       "ensureConnectedToPeers": "connect to many peers before broadcast",
       "joinDiscovery": "scoped presence; options.bootstrapPeerIds connects before announce",
-      "broadcastMessage": "custom app messages; options.connectToPeers"
+      "leaveDiscovery": "stop heartbeat and remove local presence from scope",
+      "listPeers": "list presence entries in a discovery scope",
+      "announcePresence": "manual presence heartbeat for a joined scope",
+      "broadcastMessage": "custom app messages; options.connectToPeers",
+      "sendDirectMessage": "encrypted direct message to targetId",
+      "registerPeerPublicKey": "trust peer signing/encryption keys with optional generation",
+      "trustPeerPublicKey": "register trusted keys without generation metadata",
+      "getPublicKey": "returns this node's public key bundle",
+      "unbanPeer": "clear manual or automatic peer ban",
+      "getBanInfo": "returns ban expiry and reason for peerId, or null"
+    },
+    "identity": {
+      "getPeerIdentityGeneration": "trusted identity generation for peerId",
+      "getPeerIdentityState": "public key + generation state for peerId",
+      "adoptDerivedIdentityKeyPair": "install credential-derived keys locally",
+      "deriveAndAdoptIdentity": "derive keys from username/password and adopt",
+      "broadcastIdentityRotation": "broadcast signed identity:rotate to peers",
+      "enrollAndBroadcastColdRecovery": "enroll cold recovery key and announce",
+      "revokeAndRotateDerivedIdentity": "compromise recovery rotation helper",
+      "rotateDerivedIdentityPassword": "password-change rotation helper",
+      "applyPeerIdentityRotation": "apply remote identity:rotate message",
+      "applyPeerColdRecoveryEnrollment": "apply remote cold-recovery enrollment"
     },
     "peerGroups": {
       "joinPeerGroup": "join scalable gossip group; options: fanout, maxActivePeers, maxHops (default 64), role, tiered, liveCap, tierMode, domainEvents, publisherId",
@@ -86,8 +122,12 @@
     "bulkrelaychanged": "bulk relay peer set changed for a tiered group",
     "checkpointpublished": "publisher published domain-event checkpoint",
     "peerdiscovered": "peer joined discovery scope",
+    "peergroupjoined": "local node joined a PeerGroup",
+    "peergroupleft": "local node left a PeerGroup",
     "peerleft": "peer left or timed out",
-    "message": "custom decrypted message received"
+    "message": "custom decrypted message received",
+    "securityerror": "signature, PoW, or decrypt failure on incoming message",
+    "messageignored": "message dropped (wrong target, banned peer, etc.)"
   },
   "recordShape": {
     "active": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dignity.js",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "P2P object API for decentralized JavaScript applications",
   "homepage": "https://jose-compu.github.io/dignity.js/",
   "repository": {

package/src/apps/manifest.js

@@ -0,0 +1,131 @@
+const MANIFEST_SCHEMA_VERSION = 1;
+const ID_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/;
+
+function isNonEmptyString(value) {
+  return typeof value === 'string' && value.trim().length > 0;
+}
+
+function validateStoredCommand(command, index) {
+  const prefix = `storedCommands[${index}]`;
+  if (!command || typeof command !== 'object') {
+    return { ok: false, reason: `${prefix} must be an object` };
+  }
+  if (!isNonEmptyString(command.id)) {
+    return { ok: false, reason: `${prefix}.id is required` };
+  }
+  if (!isNonEmptyString(command.collection)) {
+    return { ok: false, reason: `${prefix}.collection is required` };
+  }
+  if (!['create', 'update', 'delete'].includes(command.kind)) {
+    return { ok: false, reason: `${prefix}.kind must be create, update, or delete` };
+  }
+  if (command.allowedFields !== undefined) {
+    if (!Array.isArray(command.allowedFields) || command.allowedFields.some((f) => !isNonEmptyString(f))) {
+      return { ok: false, reason: `${prefix}.allowedFields must be a string array` };
+    }
+  }
+  return { ok: true };
+}
+
+/**
+ * Validate a Dignity App manifest (issue #101).
+ * @returns {{ ok: true, manifest: object } | { ok: false, reason: string }}
+ */
+function validateDignityAppManifest(raw) {
+  if (!raw || typeof raw !== 'object') {
+    return { ok: false, reason: 'manifest must be an object' };
+  }
+
+  if (raw.schemaVersion !== undefined && raw.schemaVersion !== MANIFEST_SCHEMA_VERSION) {
+    return { ok: false, reason: `unsupported schemaVersion: ${raw.schemaVersion}` };
+  }
+
+  if (!isNonEmptyString(raw.id) || !ID_PATTERN.test(raw.id)) {
+    return { ok: false, reason: 'id must match [a-z0-9][a-z0-9._-]{0,63}' };
+  }
+
+  if (!isNonEmptyString(raw.title)) {
+    return { ok: false, reason: 'title is required' };
+  }
+
+  if (!Array.isArray(raw.collections) || raw.collections.length === 0) {
+    return { ok: false, reason: 'collections must be a non-empty string array' };
+  }
+
+  const collections = [];
+  for (const name of raw.collections) {
+    if (!isNonEmptyString(name)) {
+      return { ok: false, reason: 'collections entries must be non-empty strings' };
+    }
+    if (collections.includes(name)) {
+      return { ok: false, reason: `duplicate collection: ${name}` };
+    }
+    collections.push(name.trim());
+  }
+
+  const storedCommands = Array.isArray(raw.storedCommands) ? raw.storedCommands : [];
+  for (let index = 0; index < storedCommands.length; index += 1) {
+    const result = validateStoredCommand(storedCommands[index], index);
+    if (!result.ok) {
+      return result;
+    }
+    const collection = storedCommands[index].collection;
+    if (!collections.includes(collection)) {
+      return {
+        ok: false,
+        reason: `storedCommands[${index}] references undeclared collection: ${collection}`
+      };
+    }
+  }
+
+  const allowedCspOrigins = Array.isArray(raw.allowedCspOrigins) ? raw.allowedCspOrigins : [];
+  for (const origin of allowedCspOrigins) {
+    if (!isNonEmptyString(origin) || !origin.startsWith('https://')) {
+      return { ok: false, reason: 'allowedCspOrigins entries must be https:// URLs' };
+    }
+    if (/localhost|127\.0\.0\.1/i.test(origin)) {
+      return { ok: false, reason: 'localhost origins are not allowed in allowedCspOrigins' };
+    }
+  }
+
+  const manifest = {
+    schemaVersion: MANIFEST_SCHEMA_VERSION,
+    id: raw.id.trim(),
+    title: raw.title.trim(),
+    description: isNonEmptyString(raw.description) ? raw.description.trim() : '',
+    collections,
+    peerGroupId: isNonEmptyString(raw.peerGroupId) ? raw.peerGroupId.trim() : null,
+    publisherId: isNonEmptyString(raw.publisherId) ? raw.publisherId.trim() : null,
+    storedCommands: storedCommands.map((cmd) => ({
+      id: cmd.id.trim(),
+      collection: cmd.collection.trim(),
+      kind: cmd.kind,
+      allowedFields: Array.isArray(cmd.allowedFields) ? [...cmd.allowedFields] : null,
+      requiresRole: isNonEmptyString(cmd.requiresRole) ? cmd.requiresRole.trim() : null
+    })),
+    allowedCspOrigins: allowedCspOrigins.map((o) => o.trim()),
+    readOnly: storedCommands.length === 0
+  };
+
+  return { ok: true, manifest };
+}
+
+function collectionAllowed(manifest, collectionName) {
+  return manifest && Array.isArray(manifest.collections)
+    && manifest.collections.includes(collectionName);
+}
+
+function getStoredCommand(manifest, commandId) {
+  if (!manifest || !Array.isArray(manifest.storedCommands)) {
+    return null;
+  }
+  return manifest.storedCommands.find((cmd) => cmd.id === commandId) || null;
+}
+
+module.exports = {
+  MANIFEST_SCHEMA_VERSION,
+  ID_PATTERN,
+  validateDignityAppManifest,
+  collectionAllowed,
+  getStoredCommand
+};

package/src/index.js

@@ -67,6 +67,12 @@ const {
 } = require('./cqrs/peer-group-tiers');
 const { electBulkRelays, DEFAULT_BULK_RELAY_COUNT } = require('./cqrs/bulk-relay');
 const DignityQueryReplica = require('./cqrs/query-replica');
+const {
+  MANIFEST_SCHEMA_VERSION: DIGNITY_APP_MANIFEST_SCHEMA_VERSION,
+  validateDignityAppManifest,
+  collectionAllowed,
+  getStoredCommand
+} = require('./apps/manifest');
 
 module.exports = {
   DignityP2P,
@@ -116,5 +122,9 @@ module.exports = {
   filterPeersByTier,
   electBulkRelays,
   DEFAULT_BULK_RELAY_COUNT,
-  DignityQueryReplica
+  DignityQueryReplica,
+  DIGNITY_APP_MANIFEST_SCHEMA_VERSION,
+  validateDignityAppManifest,
+  collectionAllowed,
+  getStoredCommand
 };