@dxos/client-services 0.1.0

package/dist/src/packlets/identity/identity-manager.js

@@ -0,0 +1,151 @@
+"use strict";
+//
+// Copyright 2022 DXOS.org
+//
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityManager = void 0;
+const assert_1 = __importDefault(require("assert"));
+const async_1 = require("@dxos/async");
+const credentials_1 = require("@dxos/credentials");
+const echo_db_1 = require("@dxos/echo-db");
+const log_1 = require("@dxos/log");
+const credentials_2 = require("@dxos/protocols/proto/dxos/halo/credentials");
+const identity_1 = require("../identity");
+// TODO(dmaretskyi): Rename: represents the peer's state machine.
+class IdentityManager {
+    // TODO(burdon): IdentityManagerParams.
+    // TODO(dmaretskyi): Perhaps this should take/generate the peerKey outside of an initialized identity.
+    constructor(_metadataStore, _feedStore, _keyring, _networkManager, _modelFactory) {
+        this._metadataStore = _metadataStore;
+        this._feedStore = _feedStore;
+        this._keyring = _keyring;
+        this._networkManager = _networkManager;
+        this._modelFactory = _modelFactory;
+        this.stateUpdate = new async_1.Event();
+    }
+    get identity() {
+        return this._identity;
+    }
+    async open() {
+        await this._metadataStore.load();
+        const identityRecord = this._metadataStore.getIdentityRecord();
+        if (identityRecord) {
+            this._identity = await this._constructIdentity(identityRecord);
+            await this._identity.open();
+            await this._identity.ready();
+            this.stateUpdate.emit();
+        }
+    }
+    async close() {
+        var _a;
+        await ((_a = this._identity) === null || _a === void 0 ? void 0 : _a.close());
+    }
+    async _constructIdentity(identityRecord) {
+        (0, assert_1.default)(!this._identity);
+        (0, log_1.log)('constructing identity', { identityRecord }, { file: "packages/sdk/client-services/src/packlets/identity/identity-manager.ts", line: 79 });
+        const space = await this._constructSpace({
+            spaceRecord: identityRecord.haloSpace,
+            swarmIdentity: {
+                peerKey: identityRecord.deviceKey,
+                credentialProvider: echo_db_1.MOCK_AUTH_PROVIDER,
+                credentialAuthenticator: echo_db_1.MOCK_AUTH_VERIFIER
+            }
+        });
+        (0, log_1.log)('done', { identityKey: identityRecord.identityKey }, { file: "packages/sdk/client-services/src/packlets/identity/identity-manager.ts", line: 90 });
+        return new identity_1.Identity({
+            space,
+            signer: this._keyring,
+            identityKey: identityRecord.identityKey,
+            deviceKey: identityRecord.deviceKey
+        });
+    }
+    async _constructSpace({ spaceRecord, swarmIdentity }) {
+        const controlFeed = await this._feedStore.openFeed(spaceRecord.writeControlFeedKey, { writable: true });
+        const dataFeed = await this._feedStore.openFeed(spaceRecord.writeDataFeedKey, { writable: true });
+        // The genesis feed will be the same as the control feed if the space was created by the local agent.
+        // NOTE: Must be initialized after writable feeds so that it is in a writable state.
+        const genesisFeed = await this._feedStore.openFeed(spaceRecord.genesisFeedKey);
+        const protocol = new echo_db_1.SpaceProtocol({
+            topic: spaceRecord.spaceKey,
+            identity: swarmIdentity,
+            networkManager: this._networkManager
+        });
+        return new echo_db_1.Space({
+            spaceKey: spaceRecord.spaceKey,
+            protocol,
+            genesisFeed,
+            controlFeed,
+            dataFeed,
+            feedProvider: (feedKey) => this._feedStore.openFeed(feedKey),
+            databaseFactory: async ({ databaseBackend }) => new echo_db_1.Database(this._modelFactory, databaseBackend, swarmIdentity.peerKey)
+        });
+    }
+    async createIdentity() {
+        (0, assert_1.default)(!this._identity, 'Identity already exists.');
+        (0, log_1.log)('creating identity...', {}, { file: "packages/sdk/client-services/src/packlets/identity/identity-manager.ts", line: 127 });
+        const controlFeedKey = await this._keyring.createKey();
+        const identityRecord = {
+            identityKey: await this._keyring.createKey(),
+            deviceKey: await this._keyring.createKey(),
+            haloSpace: {
+                spaceKey: await this._keyring.createKey(),
+                genesisFeedKey: controlFeedKey,
+                writeControlFeedKey: controlFeedKey,
+                writeDataFeedKey: await this._keyring.createKey()
+            }
+        };
+        const identity = await this._constructIdentity(identityRecord);
+        await identity.open();
+        {
+            const generator = new credentials_1.CredentialGenerator(this._keyring, identityRecord.identityKey, identityRecord.deviceKey);
+            const credentials = [
+                // Space genesis.
+                ...(await generator.createSpaceGenesis(identityRecord.haloSpace.spaceKey, identityRecord.haloSpace.genesisFeedKey)),
+                // Feed admission.
+                await generator.createFeedAdmission(identityRecord.haloSpace.spaceKey, identityRecord.haloSpace.writeDataFeedKey, credentials_2.AdmittedFeed.Designation.DATA),
+                // Device authorization (writes device chain).
+                await generator.createDeviceAuthorization(identityRecord.deviceKey)
+            ];
+            for (const credential of credentials) {
+                await identity.controlPipeline.writer.write({
+                    '@type': 'dxos.echo.feed.CredentialsMessage',
+                    credential
+                });
+            }
+        }
+        // await this._keyring.deleteKey(identityRecord.identity_key);
+        // await this._keyring.deleteKey(identityRecord.halo_space.space_key);
+        await this._metadataStore.setIdentityRecord(identityRecord);
+        this._identity = identity;
+        await this._identity.ready();
+        this.stateUpdate.emit();
+        (0, log_1.log)('created identity', { identityKey: identity.identityKey }, { file: "packages/sdk/client-services/src/packlets/identity/identity-manager.ts", line: 180 });
+        return identity;
+    }
+    /**
+     * Accept an existing identity. Expects it's device key to be authorized.
+     */
+    async acceptIdentity(params) {
+        (0, log_1.log)('accepting identity', { params }, { file: "packages/sdk/client-services/src/packlets/identity/identity-manager.ts", line: 188 });
+        (0, assert_1.default)(!this._identity, 'Identity already exists.');
+        const identity = await this._constructIdentity({
+            identityKey: params.identityKey,
+            deviceKey: await this._keyring.createKey(),
+            haloSpace: {
+                spaceKey: params.haloSpaceKey,
+                genesisFeedKey: params.haloGenesisFeedKey,
+                writeControlFeedKey: await this._keyring.createKey(),
+                writeDataFeedKey: await this._keyring.createKey()
+            }
+        });
+        await identity.open();
+        this._identity = identity;
+        this.stateUpdate.emit();
+        return identity;
+    }
+}
+exports.IdentityManager = IdentityManager;
+//# sourceMappingURL=identity-manager.js.map

package/dist/src/packlets/identity/identity-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-manager.js","sourceRoot":"","sources":["../../../../src/packlets/identity/identity-manager.ts"],"names":[],"mappings":";AAAA,EAAE;AACF,0BAA0B;AAC1B,EAAE;;;;;;AAEF,oDAA4B;AAE5B,uCAAoC;AACpC,mDAAwD;AACxD,2CAQuB;AAIvB,mCAAgC;AAIhC,6EAAwG;AAExG,0CAAuC;AAcvC,iEAAiE;AACjE,MAAa,eAAe;IAK1B,uCAAuC;IACvC,sGAAsG;IACtG,YACmB,cAA6B,EAC7B,UAAkC,EAClC,QAAiB,EACjB,eAA+B,EAC/B,aAA2B;QAJ3B,mBAAc,GAAd,cAAc,CAAe;QAC7B,eAAU,GAAV,UAAU,CAAwB;QAClC,aAAQ,GAAR,QAAQ,CAAS;QACjB,oBAAe,GAAf,eAAe,CAAgB;QAC/B,kBAAa,GAAb,aAAa,CAAc;QAXrC,gBAAW,GAAG,IAAI,aAAK,EAAE,CAAC;IAYhC,CAAC;IAEJ,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAEjC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAC;QAC/D,IAAI,cAAc,EAAE;YAClB,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;YAC/D,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;SACzB;IACH,CAAC;IAED,KAAK,CAAC,KAAK;;QACT,MAAM,CAAA,MAAA,IAAI,CAAC,SAAS,0CAAE,KAAK,EAAE,CAAA,CAAC;IAChC,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,cAA8B;QAC7D,IAAA,gBAAM,EAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,IAAA,SAAG,EAAC,uBAAuB,EAAE,EAAE,cAAc,EAAE,+FAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC;YACvC,WAAW,EAAE,cAAc,CAAC,SAAS;YACrC,aAAa,EAAE;gBACb,OAAO,EAAE,cAAc,CAAC,SAAS;gBACjC,kBAAkB,EAAE,4BAAkB;gBACtC,uBAAuB,EAAE,4BAAkB;aAC5C;SACF,CAAC,CAAC;QAEH,IAAA,SAAG,EAAC,MAAM,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,WAAW,EAAE,+FAAC,CAAC;QACzD,OAAO,IAAI,mBAAQ,CAAC;YAClB,KAAK;YACL,MAAM,EAAE,IAAI,CAAC,QAAQ;YACrB,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,SAAS,EAAE,cAAc,CAAC,SAAS;SACpC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,aAAa,EAAwB;QAChF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAElG,qGAAqG;QACrG,oFAAoF;QACpF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAE/E,MAAM,QAAQ,GAAG,IAAI,uBAAa,CAAC;YACjC,KAAK,EAAE,WAAW,CAAC,QAAQ;YAC3B,QAAQ,EAAE,aAAa;YACvB,cAAc,EAAE,IAAI,CAAC,eAAe;SACrC,CAAC,CAAC;QAEH,OAAO,IAAI,eAAK,CAAC;YACf,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,QAAQ;YACR,WAAW;YACX,WAAW;YACX,QAAQ;YACR,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5D,eAAe,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAC7C,IAAI,kBAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,aAAa,CAAC,OAAO,CAAC;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAA,gBAAM,EAAC,CAAC,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;QACpD,IAAA,SAAG,EAAC,sBAAsB,oGAAC,CAAC;QAE5B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvD,MAAM,cAAc,GAAmB;YACrC,WAAW,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;YAC5C,SAAS,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;YAC1C,SAAS,EAAE;gBACT,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;gBACzC,cAAc,EAAE,cAAc;gBAC9B,mBAAmB,EAAE,cAAc;gBACnC,gBAAgB,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;aAClD;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEtB;YACE,MAAM,SAAS,GAAG,IAAI,iCAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;YAC/G,MAAM,WAAW,GAAG;gBAClB,iBAAiB;gBACjB,GAAG,CAAC,MAAM,SAAS,CAAC,kBAAkB,CACpC,cAAc,CAAC,SAAS,CAAC,QAAQ,EACjC,cAAc,CAAC,SAAS,CAAC,cAAc,CACxC,CAAC;gBAEF,kBAAkB;gBAClB,MAAM,SAAS,CAAC,mBAAmB,CACjC,cAAc,CAAC,SAAS,CAAC,QAAQ,EACjC,cAAc,CAAC,SAAS,CAAC,gBAAgB,EACzC,0BAAY,CAAC,WAAW,CAAC,IAAI,CAC9B;gBAED,8CAA8C;gBAC9C,MAAM,SAAS,CAAC,yBAAyB,CAAC,cAAc,CAAC,SAAS,CAAC;aACpE,CAAC;YAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;gBACpC,MAAM,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC1C,OAAO,EAAE,mCAAmC;oBAC5C,UAAU;iBACX,CAAC,CAAC;aACJ;SACF;QAED,8DAA8D;QAC9D,sEAAsE;QAEtE,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAExB,IAAA,SAAG,EAAC,kBAAkB,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,gGAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,MAA0B;QAC7C,IAAA,SAAG,EAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,gGAAC,CAAC;QACtC,IAAA,gBAAM,EAAC,CAAC,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;QAEpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC;YAC7C,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;YAC1C,SAAS,EAAE;gBACT,QAAQ,EAAE,MAAM,CAAC,YAAY;gBAC7B,cAAc,EAAE,MAAM,CAAC,kBAAkB;gBACzC,mBAAmB,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;gBACpD,gBAAgB,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;aAClD;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AArKD,0CAqKC"}

package/dist/src/packlets/identity/identity-manager.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=identity-manager.test.d.ts.map

package/dist/src/packlets/identity/identity-manager.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-manager.test.d.ts","sourceRoot":"","sources":["../../../../src/packlets/identity/identity-manager.test.ts"],"names":[],"mappings":""}

package/dist/src/packlets/identity/identity-manager.test.js

@@ -0,0 +1,92 @@
+"use strict";
+//
+// Copyright 2022 DXOS.org
+//
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const expect_1 = __importDefault(require("expect"));
+const echo_db_1 = require("@dxos/echo-db");
+const feed_store_1 = require("@dxos/feed-store");
+const keyring_1 = require("@dxos/keyring");
+const messaging_1 = require("@dxos/messaging");
+const model_factory_1 = require("@dxos/model-factory");
+const network_manager_1 = require("@dxos/network-manager");
+const object_model_1 = require("@dxos/object-model");
+const random_access_storage_1 = require("@dxos/random-access-storage");
+const testutils_1 = require("@dxos/testutils");
+const identity_manager_1 = require("./identity-manager");
+describe('identity/identity-manager', function () {
+    const setupPeer = async ({ signalContext = new messaging_1.MemorySignalManagerContext(), storage = (0, random_access_storage_1.createStorage)({ type: random_access_storage_1.StorageType.RAM }) } = {}) => {
+        const metadataStore = new echo_db_1.MetadataStore(storage.createDirectory('metadata'));
+        const keyring = new keyring_1.Keyring(storage.createDirectory('keyring'));
+        const feedStore = new feed_store_1.FeedStore({
+            factory: new feed_store_1.FeedFactory({
+                root: storage.createDirectory('feeds'),
+                signer: keyring,
+                hypercore: {
+                    valueEncoding: echo_db_1.valueEncoding
+                }
+            })
+        });
+        (0, testutils_1.afterTest)(() => feedStore.close());
+        const networkManager = new network_manager_1.NetworkManager({
+            signalManager: new messaging_1.MemorySignalManager(signalContext),
+            transportFactory: network_manager_1.MemoryTransportFactory
+        });
+        const identityManager = new identity_manager_1.IdentityManager(metadataStore, feedStore, keyring, networkManager, new model_factory_1.ModelFactory().registerModel(object_model_1.ObjectModel));
+        return {
+            identityManager,
+            feedStore
+        };
+    };
+    it('creates identity', async function () {
+        const { identityManager } = await setupPeer();
+        await identityManager.open();
+        (0, testutils_1.afterTest)(() => identityManager.close());
+        const identity = await identityManager.createIdentity();
+        (0, expect_1.default)(identity).toBeTruthy();
+    });
+    it('reload from storage', async function () {
+        const storage = (0, random_access_storage_1.createStorage)({ type: random_access_storage_1.StorageType.RAM });
+        const peer1 = await setupPeer({ storage });
+        await peer1.identityManager.open();
+        const identity1 = await peer1.identityManager.createIdentity();
+        await peer1.identityManager.close();
+        await peer1.feedStore.close();
+        const peer2 = await setupPeer({ storage });
+        await peer2.identityManager.open();
+        (0, expect_1.default)(peer2.identityManager.identity).toBeDefined();
+        (0, expect_1.default)(peer2.identityManager.identity.identityKey).toEqual(identity1.identityKey);
+        (0, expect_1.default)(peer2.identityManager.identity.deviceKey).toEqual(identity1.deviceKey);
+        // TODO(dmaretskyi): Check that identity is "alive" (space is working and can write mutations).
+    });
+    it('admit another device', async function () {
+        const signalContext = new messaging_1.MemorySignalManagerContext();
+        const peer1 = await setupPeer({ signalContext });
+        const identity1 = await peer1.identityManager.createIdentity();
+        const peer2 = await setupPeer({ signalContext });
+        // Identity2 is not yet ready at this point. Peer1 needs to admit peer2 device key and feed keys.
+        const identity2 = await peer2.identityManager.acceptIdentity({
+            identityKey: identity1.identityKey,
+            haloSpaceKey: identity1.haloSpaceKey,
+            haloGenesisFeedKey: identity1.haloGenesisFeedKey
+        });
+        await identity1.controlPipeline.writer.write({
+            '@type': 'dxos.echo.feed.CredentialsMessage',
+            credential: await identity1.getIdentityCredentialSigner().createCredential({
+                subject: identity2.deviceKey,
+                assertion: {
+                    '@type': 'dxos.halo.credentials.AuthorizedDevice',
+                    identityKey: identity2.identityKey,
+                    deviceKey: identity2.deviceKey
+                }
+            })
+        });
+        // TODO(dmaretskyi): We'd also need to admit device2's feeds otherwise messages from them won't be processed by the pipeline.
+        // This would mean that peer2 has replicated it's device credential chain from peer1 and is ready to issue credentials.
+        await identity2.ready();
+    });
+});
+//# sourceMappingURL=identity-manager.test.js.map

package/dist/src/packlets/identity/identity-manager.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-manager.test.js","sourceRoot":"","sources":["../../../../src/packlets/identity/identity-manager.test.ts"],"names":[],"mappings":";AAAA,EAAE;AACF,0BAA0B;AAC1B,EAAE;;;;;AAEF,oDAA4B;AAE5B,2CAA6D;AAC7D,iDAA0D;AAC1D,2CAAwC;AACxC,+CAAkF;AAClF,uDAAmD;AACnD,2DAA+E;AAC/E,qDAAiD;AAEjD,uEAAkF;AAClF,+CAA4C;AAE5C,yDAAqD;AAErD,QAAQ,CAAC,2BAA2B,EAAE;IACpC,MAAM,SAAS,GAAG,KAAK,EAAE,EACvB,aAAa,GAAG,IAAI,sCAA0B,EAAE,EAChD,OAAO,GAAG,IAAA,qCAAa,EAAC,EAAE,IAAI,EAAE,mCAAW,CAAC,GAAG,EAAE,CAAC,KAIhD,EAAE,EAAE,EAAE;QACR,MAAM,aAAa,GAAG,IAAI,uBAAa,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;QAE7E,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,sBAAS,CAAc;YAC3C,OAAO,EAAE,IAAI,wBAAW,CAAc;gBACpC,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC;gBACtC,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE;oBACT,aAAa,EAAb,uBAAa;iBACd;aACF,CAAC;SACH,CAAC,CAAC;QAEH,IAAA,qBAAS,EAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;QAEnC,MAAM,cAAc,GAAG,IAAI,gCAAc,CAAC;YACxC,aAAa,EAAE,IAAI,+BAAmB,CAAC,aAAa,CAAC;YACrD,gBAAgB,EAAE,wCAAsB;SACzC,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,IAAI,kCAAe,CACzC,aAAa,EACb,SAAS,EACT,OAAO,EACP,cAAc,EACd,IAAI,4BAAY,EAAE,CAAC,aAAa,CAAC,0BAAW,CAAC,CAC9C,CAAC;QAEF,OAAO;YACL,eAAe;YACf,SAAS;SACV,CAAC;IACJ,CAAC,CAAC;IAEF,EAAE,CAAC,kBAAkB,EAAE,KAAK;QAC1B,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9C,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAA,qBAAS,EAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC;QAEzC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,cAAc,EAAE,CAAC;QACxD,IAAA,gBAAM,EAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,KAAK;QAC7B,MAAM,OAAO,GAAG,IAAA,qCAAa,EAAC,EAAE,IAAI,EAAE,mCAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QAEzD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC;QAC/D,MAAM,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAE9B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QAEnC,IAAA,gBAAM,EAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,IAAA,gBAAM,EAAC,KAAK,CAAC,eAAe,CAAC,QAAS,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACnF,IAAA,gBAAM,EAAC,KAAK,CAAC,eAAe,CAAC,QAAS,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAE/E,+FAA+F;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,KAAK;QAC9B,MAAM,aAAa,GAAG,IAAI,sCAA0B,EAAE,CAAC;QAEvD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC;QAE/D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;QAEjD,iGAAiG;QACjG,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC;YAC3D,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;SACjD,CAAC,CAAC;QAEH,MAAM,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;YAC3C,OAAO,EAAE,mCAAmC;YAC5C,UAAU,EAAE,MAAM,SAAS,CAAC,2BAA2B,EAAE,CAAC,gBAAgB,CAAC;gBACzE,OAAO,EAAE,SAAS,CAAC,SAAS;gBAC5B,SAAS,EAAE;oBACT,OAAO,EAAE,wCAAwC;oBACjD,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B;aACF,CAAC;SACH,CAAC,CAAC;QAEH,6HAA6H;QAC7H,uHAAuH;QACvH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/packlets/identity/identity.d.ts

@@ -0,0 +1,43 @@
+import { CredentialSigner } from '@dxos/credentials';
+import { Signer } from '@dxos/crypto';
+import { Database, Space } from '@dxos/echo-db';
+import { PublicKey } from '@dxos/keys';
+import { ComplexSet } from '@dxos/util';
+export declare type IdentityParams = {
+    identityKey: PublicKey;
+    deviceKey: PublicKey;
+    signer: Signer;
+    space: Space;
+};
+/**
+ * Agent identity manager, which includes the agent's Halo space.
+ */
+export declare class Identity {
+    private readonly _space;
+    private readonly _signer;
+    private readonly _deviceStateMachine;
+    readonly identityKey: PublicKey;
+    readonly deviceKey: PublicKey;
+    constructor({ space, signer, identityKey, deviceKey }: IdentityParams);
+    get authorizedDeviceKeys(): ComplexSet<PublicKey>;
+    open(): Promise<void>;
+    close(): Promise<void>;
+    ready(): Promise<void>;
+    /**
+     * @test-only
+     */
+    get controlPipeline(): import("@dxos/echo-db/dist/src/packlets/pipeline").PipelineAccessor;
+    get haloSpaceKey(): PublicKey;
+    get haloGenesisFeedKey(): PublicKey;
+    get haloDatabase(): Database;
+    /**
+     * Issues credentials as identity.
+     * Requires identity to be ready.
+     */
+    getIdentityCredentialSigner(): CredentialSigner;
+    /**
+     * Issues credentials as device.
+     */
+    getDeviceCredentialSigner(): CredentialSigner;
+}
+//# sourceMappingURL=identity.d.ts.map

package/dist/src/packlets/identity/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../../src/packlets/identity/identity.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,gBAAgB,EAGjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,oBAAY,cAAc,GAAG;IAC3B,WAAW,EAAE,SAAS,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;CACd,CAAC;AAEF;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IAEzD,SAAgB,WAAW,EAAE,SAAS,CAAC;IACvC,SAAgB,SAAS,EAAE,SAAS,CAAC;gBAEzB,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,cAAc;IAgBrE,IAAI,oBAAoB,IAAI,UAAU,CAAC,SAAS,CAAC,CAEhD;IAEK,IAAI;IAIJ,KAAK;IAIL,KAAK;IAMX;;OAEG;IACH,IAAI,eAAe,wEAElB;IAED,IAAI,YAAY,cAEf;IAED,IAAI,kBAAkB,cAErB;IAED,IAAI,YAAY,IAAI,QAAQ,CAE3B;IAED;;;OAGG;IACH,2BAA2B,IAAI,gBAAgB;IAS/C;;OAEG;IACH,yBAAyB,IAAI,gBAAgB;CAG9C"}

package/dist/src/packlets/identity/identity.js

@@ -0,0 +1,74 @@
+"use strict";
+//
+// Copyright 2022 DXOS.org
+//
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Identity = void 0;
+const assert_1 = __importDefault(require("assert"));
+const credentials_1 = require("@dxos/credentials");
+const debug_1 = require("@dxos/debug");
+/**
+ * Agent identity manager, which includes the agent's Halo space.
+ */
+class Identity {
+    constructor({ space, signer, identityKey, deviceKey }) {
+        this._space = space;
+        this._signer = signer;
+        this.identityKey = identityKey;
+        this.deviceKey = deviceKey;
+        this._deviceStateMachine = new credentials_1.DeviceStateMachine(this.identityKey, this.deviceKey);
+        // Save device key chain credential when processed by the party state machine.
+        this._space.onCredentialProcessed.set(async (credential) => {
+            await this._deviceStateMachine.process(credential);
+        });
+    }
+    // TODO(burdon): Expose state object?
+    get authorizedDeviceKeys() {
+        return this._deviceStateMachine.authorizedDeviceKeys;
+    }
+    async open() {
+        await this._space.open();
+    }
+    async close() {
+        await this._space.close();
+    }
+    async ready() {
+        await this._deviceStateMachine.deviceChainReady.wait();
+        // TODO(dmaretskyi): Should we also wait for our feeds to be admitted?
+    }
+    /**
+     * @test-only
+     */
+    get controlPipeline() {
+        return this._space.controlPipeline;
+    }
+    get haloSpaceKey() {
+        return this._space.key;
+    }
+    get haloGenesisFeedKey() {
+        return this._space.genesisFeedKey;
+    }
+    get haloDatabase() {
+        var _a;
+        return (_a = this._space.database) !== null && _a !== void 0 ? _a : (0, debug_1.failUndefined)();
+    }
+    /**
+     * Issues credentials as identity.
+     * Requires identity to be ready.
+     */
+    getIdentityCredentialSigner() {
+        (0, assert_1.default)(this._deviceStateMachine.deviceCredentialChain, 'Device credential chain is not ready.');
+        return (0, credentials_1.createCredentialSignerWithChain)(this._signer, this._deviceStateMachine.deviceCredentialChain, this.deviceKey);
+    }
+    /**
+     * Issues credentials as device.
+     */
+    getDeviceCredentialSigner() {
+        return (0, credentials_1.createCredentialSignerWithKey)(this._signer, this.deviceKey);
+    }
+}
+exports.Identity = Identity;
+//# sourceMappingURL=identity.js.map

package/dist/src/packlets/identity/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../../src/packlets/identity/identity.ts"],"names":[],"mappings":";AAAA,EAAE;AACF,0BAA0B;AAC1B,EAAE;;;;;;AAEF,oDAA4B;AAE5B,mDAK2B;AAE3B,uCAA4C;AAY5C;;GAEG;AACH,MAAa,QAAQ;IAQnB,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAkB;QACnE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QAEtB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3B,IAAI,CAAC,mBAAmB,GAAG,IAAI,gCAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEpF,8EAA8E;QAC9E,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YACzD,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qCAAqC;IACrC,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,mBAAmB,CAAC,oBAAoB,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAEvD,sEAAsE;IACxE,CAAC;IAED;;OAEG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;IACrC,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;IACzB,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;IACpC,CAAC;IAED,IAAI,YAAY;;QACd,OAAO,MAAA,IAAI,CAAC,MAAM,CAAC,QAAQ,mCAAI,IAAA,qBAAa,GAAE,CAAC;IACjD,CAAC;IAED;;;OAGG;IACH,2BAA2B;QACzB,IAAA,gBAAM,EAAC,IAAI,CAAC,mBAAmB,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAC;QAChG,OAAO,IAAA,6CAA+B,EACpC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,mBAAmB,CAAC,qBAAqB,EAC9C,IAAI,CAAC,SAAS,CACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,yBAAyB;QACvB,OAAO,IAAA,2CAA6B,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;CACF;AAhFD,4BAgFC"}

package/dist/src/packlets/identity/identity.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=identity.test.d.ts.map

package/dist/src/packlets/identity/identity.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.test.d.ts","sourceRoot":"","sources":["../../../../src/packlets/identity/identity.test.ts"],"names":[],"mappings":""}