@dxos/client-services 0.1.0

package/dist/src/packlets/identity/identity.test.js

@@ -0,0 +1,258 @@
+"use strict";
+//
+// Copyright 2022 DXOS.org
+//
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const expect_1 = __importDefault(require("expect"));
+const credentials_1 = require("@dxos/credentials");
+const echo_db_1 = require("@dxos/echo-db");
+const feed_store_1 = require("@dxos/feed-store");
+const keyring_1 = require("@dxos/keyring");
+const messaging_1 = require("@dxos/messaging");
+const model_factory_1 = require("@dxos/model-factory");
+const network_manager_1 = require("@dxos/network-manager");
+const object_model_1 = require("@dxos/object-model");
+const credentials_2 = require("@dxos/protocols/proto/dxos/halo/credentials");
+const random_access_storage_1 = require("@dxos/random-access-storage");
+const testutils_1 = require("@dxos/testutils");
+const authenticator_1 = require("./authenticator");
+const identity_1 = require("./identity");
+const modelFactory = new model_factory_1.ModelFactory().registerModel(object_model_1.ObjectModel);
+describe('identity/identity', function () {
+    it('create', async function () {
+        const keyring = new keyring_1.Keyring();
+        const identityKey = await keyring.createKey();
+        const deviceKey = await keyring.createKey();
+        const spaceKey = await keyring.createKey();
+        const feedStore = new feed_store_1.FeedStore({
+            factory: new feed_store_1.FeedFactory({
+                root: (0, random_access_storage_1.createStorage)({ type: random_access_storage_1.StorageType.RAM }).createDirectory(),
+                signer: keyring,
+                hypercore: {
+                    valueEncoding: echo_db_1.valueEncoding
+                }
+            })
+        });
+        const createFeed = async () => {
+            const feedKey = await keyring.createKey();
+            return feedStore.openFeed(feedKey, { writable: true });
+        };
+        const controlFeed = await createFeed();
+        const dataFeed = await createFeed();
+        const protocol = new echo_db_1.SpaceProtocol({
+            topic: spaceKey,
+            identity: {
+                peerKey: identityKey,
+                credentialProvider: (0, authenticator_1.createHaloAuthProvider)((0, credentials_1.createCredentialSignerWithKey)(keyring, deviceKey)),
+                credentialAuthenticator: (0, authenticator_1.createHaloAuthVerifier)(() => identity.authorizedDeviceKeys)
+            },
+            networkManager: new network_manager_1.NetworkManager({
+                signalManager: new messaging_1.MemorySignalManager(new messaging_1.MemorySignalManagerContext()),
+                transportFactory: network_manager_1.MemoryTransportFactory
+            })
+        });
+        const space = new echo_db_1.Space({
+            spaceKey,
+            protocol,
+            genesisFeed: controlFeed,
+            controlFeed,
+            dataFeed,
+            feedProvider: (feedKey) => feedStore.openFeed(feedKey),
+            databaseFactory: async ({ databaseBackend }) => new echo_db_1.Database(modelFactory, databaseBackend, deviceKey)
+        });
+        const identity = new identity_1.Identity({
+            signer: keyring,
+            identityKey,
+            deviceKey,
+            space
+        });
+        await identity.open();
+        (0, testutils_1.afterTest)(() => identity.close());
+        //
+        // Identity genesis
+        //
+        {
+            const generator = new credentials_1.CredentialGenerator(keyring, identityKey, deviceKey);
+            const credentials = [
+                ...(await generator.createSpaceGenesis(spaceKey, controlFeed.key)),
+                await generator.createDeviceAuthorization(deviceKey),
+                await generator.createFeedAdmission(spaceKey, dataFeed.key, credentials_2.AdmittedFeed.Designation.DATA)
+            ];
+            for (const credential of credentials) {
+                await identity.controlPipeline.writer.write({
+                    '@type': 'dxos.echo.feed.CredentialsMessage',
+                    credential
+                });
+            }
+        }
+        // Wait for identity to be ready.
+        await identity.ready();
+        const identitySigner = identity.getIdentityCredentialSigner();
+        const credential = await identitySigner.createCredential({
+            subject: identityKey,
+            assertion: {
+                '@type': 'dxos.halo.credentials.IdentityProfile',
+                profile: {
+                    displayName: 'Alice'
+                }
+            }
+        });
+        (0, expect_1.default)(credential.issuer).toEqual(identityKey);
+        (0, expect_1.default)(await (0, credentials_1.verifyCredential)(credential)).toEqual({ kind: 'pass' });
+    });
+    it('two devices', async function () {
+        const signalContext = new messaging_1.MemorySignalManagerContext();
+        let spaceKey;
+        let genesisFeedKey;
+        let identity1;
+        let identity2;
+        //
+        // First device
+        //
+        {
+            const keyring = new keyring_1.Keyring();
+            const identityKey = await keyring.createKey();
+            const deviceKey = await keyring.createKey();
+            spaceKey = await keyring.createKey();
+            const feedStore = new feed_store_1.FeedStore({
+                factory: new feed_store_1.FeedFactory({
+                    root: (0, random_access_storage_1.createStorage)({ type: random_access_storage_1.StorageType.RAM }).createDirectory(),
+                    signer: keyring,
+                    hypercore: {
+                        valueEncoding: echo_db_1.valueEncoding
+                    }
+                })
+            });
+            const createFeed = async () => {
+                const feedKey = await keyring.createKey();
+                return feedStore.openFeed(feedKey, { writable: true });
+            };
+            const controlFeed = await createFeed();
+            genesisFeedKey = controlFeed.key;
+            const dataFeed = await createFeed();
+            const protocol = new echo_db_1.SpaceProtocol({
+                topic: spaceKey,
+                identity: {
+                    peerKey: deviceKey,
+                    credentialProvider: echo_db_1.MOCK_AUTH_PROVIDER,
+                    credentialAuthenticator: echo_db_1.MOCK_AUTH_VERIFIER // createHaloAuthVerifier(() => identity.authorizedDeviceKeys),
+                },
+                networkManager: new network_manager_1.NetworkManager({
+                    signalManager: new messaging_1.MemorySignalManager(signalContext),
+                    transportFactory: network_manager_1.MemoryTransportFactory
+                })
+            });
+            const space = new echo_db_1.Space({
+                spaceKey,
+                protocol,
+                genesisFeed: controlFeed,
+                controlFeed,
+                dataFeed,
+                feedProvider: (feedKey) => feedStore.openFeed(feedKey),
+                databaseFactory: async ({ databaseBackend }) => new echo_db_1.Database(modelFactory, databaseBackend, deviceKey)
+            });
+            const identity = (identity1 = new identity_1.Identity({
+                signer: keyring,
+                identityKey,
+                deviceKey,
+                space
+            }));
+            await identity.open();
+            (0, testutils_1.afterTest)(() => identity.close());
+            //
+            // Identity genesis
+            //
+            {
+                const generator = new credentials_1.CredentialGenerator(keyring, identityKey, deviceKey);
+                const credentials = [
+                    ...(await generator.createSpaceGenesis(spaceKey, controlFeed.key)),
+                    await generator.createDeviceAuthorization(deviceKey),
+                    await generator.createFeedAdmission(spaceKey, dataFeed.key, credentials_2.AdmittedFeed.Designation.DATA)
+                ];
+                for (const credential of credentials) {
+                    await identity.controlPipeline.writer.write({
+                        '@type': 'dxos.echo.feed.CredentialsMessage',
+                        credential
+                    });
+                }
+            }
+            // Wait for identity to be ready.
+            await identity.ready();
+        }
+        //
+        // Second device
+        //
+        {
+            const keyring = new keyring_1.Keyring();
+            const deviceKey = await keyring.createKey();
+            const feedStore = new feed_store_1.FeedStore({
+                factory: new feed_store_1.FeedFactory({
+                    root: (0, random_access_storage_1.createStorage)({ type: random_access_storage_1.StorageType.RAM }).createDirectory(),
+                    signer: keyring,
+                    hypercore: {
+                        valueEncoding: echo_db_1.valueEncoding
+                    }
+                })
+            });
+            const createFeed = async () => {
+                const feedKey = await keyring.createKey();
+                return feedStore.openFeed(feedKey, { writable: true });
+            };
+            const controlFeed = await createFeed();
+            const dataFeed = await createFeed();
+            const protocol = new echo_db_1.SpaceProtocol({
+                topic: spaceKey,
+                identity: {
+                    peerKey: deviceKey,
+                    credentialProvider: echo_db_1.MOCK_AUTH_PROVIDER,
+                    credentialAuthenticator: echo_db_1.MOCK_AUTH_VERIFIER // createHaloAuthVerifier(() => identity.authorizedDeviceKeys),
+                },
+                networkManager: new network_manager_1.NetworkManager({
+                    signalManager: new messaging_1.MemorySignalManager(signalContext),
+                    transportFactory: network_manager_1.MemoryTransportFactory
+                })
+            });
+            const space = new echo_db_1.Space({
+                spaceKey,
+                protocol,
+                genesisFeed: await feedStore.openFeed(genesisFeedKey),
+                controlFeed,
+                dataFeed,
+                feedProvider: (feedKey) => feedStore.openFeed(feedKey),
+                databaseFactory: async ({ databaseBackend }) => new echo_db_1.Database(modelFactory, databaseBackend, deviceKey)
+            });
+            const identity = (identity2 = new identity_1.Identity({
+                signer: keyring,
+                identityKey: identity1.identityKey,
+                deviceKey,
+                space
+            }));
+            await identity.open();
+            (0, testutils_1.afterTest)(() => identity.close());
+        }
+        //
+        // Second device admission
+        //
+        {
+            const signer = identity1.getIdentityCredentialSigner();
+            void identity1.controlPipeline.writer.write({
+                '@type': 'dxos.echo.feed.CredentialsMessage',
+                credential: await signer.createCredential({
+                    subject: identity2.deviceKey,
+                    assertion: {
+                        '@type': 'dxos.halo.credentials.AuthorizedDevice',
+                        identityKey: identity1.identityKey,
+                        deviceKey: identity2.deviceKey
+                    }
+                })
+            });
+            await identity2.ready();
+        }
+        (0, expect_1.default)(Array.from(identity1.authorizedDeviceKeys.values())).toEqual([identity1.deviceKey, identity2.deviceKey]);
+        (0, expect_1.default)(Array.from(identity2.authorizedDeviceKeys.values())).toEqual([identity1.deviceKey, identity2.deviceKey]);
+    });
+});
+//# sourceMappingURL=identity.test.js.map

package/dist/src/packlets/identity/identity.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.test.js","sourceRoot":"","sources":["../../../../src/packlets/identity/identity.test.ts"],"names":[],"mappings":";AAAA,EAAE;AACF,0BAA0B;AAC1B,EAAE;;;;;AAEF,oDAA4B;AAE5B,mDAAyG;AACzG,2CAAsH;AACtH,iDAA0D;AAC1D,2CAAwC;AAExC,+CAAkF;AAClF,uDAAmD;AACnD,2DAA+E;AAC/E,qDAAiD;AAEjD,6EAA2E;AAC3E,uEAAyE;AACzE,+CAA4C;AAE5C,mDAAiF;AACjF,yCAAsC;AAEtC,MAAM,YAAY,GAAG,IAAI,4BAAY,EAAE,CAAC,aAAa,CAAC,0BAAW,CAAC,CAAC;AAEnE,QAAQ,CAAC,mBAAmB,EAAE;IAC5B,EAAE,CAAC,QAAQ,EAAE,KAAK;QAChB,MAAM,OAAO,GAAG,IAAI,iBAAO,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAE3C,MAAM,SAAS,GAAG,IAAI,sBAAS,CAAc;YAC3C,OAAO,EAAE,IAAI,wBAAW,CAAc;gBACpC,IAAI,EAAE,IAAA,qCAAa,EAAC,EAAE,IAAI,EAAE,mCAAW,CAAC,GAAG,EAAE,CAAC,CAAC,eAAe,EAAE;gBAChE,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE;oBACT,aAAa,EAAb,uBAAa;iBACd;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;YAC5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,UAAU,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAAG,IAAI,uBAAa,CAAC;YACjC,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE;gBACR,OAAO,EAAE,WAAW;gBACpB,kBAAkB,EAAE,IAAA,sCAAsB,EAAC,IAAA,2CAA6B,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAC7F,uBAAuB,EAAE,IAAA,sCAAsB,EAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;aACrF;YACD,cAAc,EAAE,IAAI,gCAAc,CAAC;gBACjC,aAAa,EAAE,IAAI,+BAAmB,CAAC,IAAI,sCAA0B,EAAE,CAAC;gBACxE,gBAAgB,EAAE,wCAAsB;aACzC,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,KAAK,GAAU,IAAI,eAAK,CAAC;YAC7B,QAAQ;YACR,QAAQ;YACR,WAAW,EAAE,WAAW;YACxB,WAAW;YACX,QAAQ;YACR,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;YACtD,eAAe,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,IAAI,kBAAQ,CAAC,YAAY,EAAE,eAAe,EAAE,SAAS,CAAC;SACvG,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,mBAAQ,CAAC;YAC5B,MAAM,EAAE,OAAO;YACf,WAAW;YACX,SAAS;YACT,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,IAAA,qBAAS,EAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAElC,EAAE;QACF,mBAAmB;QACnB,EAAE;QACF;YACE,MAAM,SAAS,GAAG,IAAI,iCAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;YAC3E,MAAM,WAAW,GAAG;gBAClB,GAAG,CAAC,MAAM,SAAS,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;gBAClE,MAAM,SAAS,CAAC,yBAAyB,CAAC,SAAS,CAAC;gBACpD,MAAM,SAAS,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,0BAAY,CAAC,WAAW,CAAC,IAAI,CAAC;aAC3F,CAAC;YAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;gBACpC,MAAM,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC1C,OAAO,EAAE,mCAAmC;oBAC5C,UAAU;iBACX,CAAC,CAAC;aACJ;SACF;QAED,iCAAiC;QACjC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,cAAc,GAAG,QAAQ,CAAC,2BAA2B,EAAE,CAAC;QAC9D,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,gBAAgB,CAAC;YACvD,OAAO,EAAE,WAAW;YACpB,SAAS,EAAE;gBACT,OAAO,EAAE,uCAAuC;gBAChD,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO;iBACrB;aACF;SACF,CAAC,CAAC;QAEH,IAAA,gBAAM,EAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAA,gBAAM,EAAC,MAAM,IAAA,8BAAgB,EAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,aAAa,EAAE,KAAK;QACrB,MAAM,aAAa,GAAG,IAAI,sCAA0B,EAAE,CAAC;QAEvD,IAAI,QAAmB,CAAC;QACxB,IAAI,cAAyB,CAAC;QAC9B,IAAI,SAAmB,CAAC;QACxB,IAAI,SAAmB,CAAC;QAExB,EAAE;QACF,eAAe;QACf,EAAE;QACF;YACE,MAAM,OAAO,GAAG,IAAI,iBAAO,EAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;YAC5C,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;YAErC,MAAM,SAAS,GAAG,IAAI,sBAAS,CAAc;gBAC3C,OAAO,EAAE,IAAI,wBAAW,CAAc;oBACpC,IAAI,EAAE,IAAA,qCAAa,EAAC,EAAE,IAAI,EAAE,mCAAW,CAAC,GAAG,EAAE,CAAC,CAAC,eAAe,EAAE;oBAChE,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE;wBACT,aAAa,EAAb,uBAAa;qBACd;iBACF,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;gBAC5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC1C,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC,CAAC;YAEF,MAAM,WAAW,GAAG,MAAM,UAAU,EAAE,CAAC;YACvC,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC;YAEjC,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;YAEpC,MAAM,QAAQ,GAAG,IAAI,uBAAa,CAAC;gBACjC,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE;oBACR,OAAO,EAAE,SAAS;oBAClB,kBAAkB,EAAE,4BAAkB;oBACtC,uBAAuB,EAAE,4BAAkB,CAAC,+DAA+D;iBAC5G;gBACD,cAAc,EAAE,IAAI,gCAAc,CAAC;oBACjC,aAAa,EAAE,IAAI,+BAAmB,CAAC,aAAa,CAAC;oBACrD,gBAAgB,EAAE,wCAAsB;iBACzC,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,IAAI,eAAK,CAAC;gBACtB,QAAQ;gBACR,QAAQ;gBACR,WAAW,EAAE,WAAW;gBACxB,WAAW;gBACX,QAAQ;gBACR,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACtD,eAAe,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,IAAI,kBAAQ,CAAC,YAAY,EAAE,eAAe,EAAE,SAAS,CAAC;aACvG,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,CAAC,SAAS,GAAG,IAAI,mBAAQ,CAAC;gBACzC,MAAM,EAAE,OAAO;gBACf,WAAW;gBACX,SAAS;gBACT,KAAK;aACN,CAAC,CAAC,CAAC;YAEJ,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,IAAA,qBAAS,EAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YAElC,EAAE;YACF,mBAAmB;YACnB,EAAE;YACF;gBACE,MAAM,SAAS,GAAG,IAAI,iCAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;gBAC3E,MAAM,WAAW,GAAG;oBAClB,GAAG,CAAC,MAAM,SAAS,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;oBAClE,MAAM,SAAS,CAAC,yBAAyB,CAAC,SAAS,CAAC;oBACpD,MAAM,SAAS,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,0BAAY,CAAC,WAAW,CAAC,IAAI,CAAC;iBAC3F,CAAC;gBAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;oBACpC,MAAM,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;wBAC1C,OAAO,EAAE,mCAAmC;wBAC5C,UAAU;qBACX,CAAC,CAAC;iBACJ;aACF;YAED,iCAAiC;YACjC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;SACxB;QAED,EAAE;QACF,gBAAgB;QAChB,EAAE;QACF;YACE,MAAM,OAAO,GAAG,IAAI,iBAAO,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;YAE5C,MAAM,SAAS,GAAG,IAAI,sBAAS,CAAc;gBAC3C,OAAO,EAAE,IAAI,wBAAW,CAAc;oBACpC,IAAI,EAAE,IAAA,qCAAa,EAAC,EAAE,IAAI,EAAE,mCAAW,CAAC,GAAG,EAAE,CAAC,CAAC,eAAe,EAAE;oBAChE,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE;wBACT,aAAa,EAAb,uBAAa;qBACd;iBACF,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;gBAC5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC1C,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC,CAAC;YAEF,MAAM,WAAW,GAAG,MAAM,UAAU,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;YAEpC,MAAM,QAAQ,GAAG,IAAI,uBAAa,CAAC;gBACjC,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE;oBACR,OAAO,EAAE,SAAS;oBAClB,kBAAkB,EAAE,4BAAkB;oBACtC,uBAAuB,EAAE,4BAAkB,CAAC,+DAA+D;iBAC5G;gBACD,cAAc,EAAE,IAAI,gCAAc,CAAC;oBACjC,aAAa,EAAE,IAAI,+BAAmB,CAAC,aAAa,CAAC;oBACrD,gBAAgB,EAAE,wCAAsB;iBACzC,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,IAAI,eAAK,CAAC;gBACtB,QAAQ;gBACR,QAAQ;gBACR,WAAW,EAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC;gBACrD,WAAW;gBACX,QAAQ;gBACR,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACtD,eAAe,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,IAAI,kBAAQ,CAAC,YAAY,EAAE,eAAe,EAAE,SAAS,CAAC;aACvG,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,CAAC,SAAS,GAAG,IAAI,mBAAQ,CAAC;gBACzC,MAAM,EAAE,OAAO;gBACf,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,SAAS;gBACT,KAAK;aACN,CAAC,CAAC,CAAC;YAEJ,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,IAAA,qBAAS,EAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;SACnC;QAED,EAAE;QACF,0BAA0B;QAC1B,EAAE;QACF;YACE,MAAM,MAAM,GAAG,SAAS,CAAC,2BAA2B,EAAE,CAAC;YACvD,KAAK,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC1C,OAAO,EAAE,mCAAmC;gBAC5C,UAAU,EAAE,MAAM,MAAM,CAAC,gBAAgB,CAAC;oBACxC,OAAO,EAAE,SAAS,CAAC,SAAS;oBAC5B,SAAS,EAAE;wBACT,OAAO,EAAE,wCAAwC;wBACjD,WAAW,EAAE,SAAS,CAAC,WAAW;wBAClC,SAAS,EAAE,SAAS,CAAC,SAAS;qBAC/B;iBACF,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;SACzB;QAED,IAAA,gBAAM,EAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAChH,IAAA,gBAAM,EAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/packlets/identity/index.d.ts

@@ -0,0 +1,4 @@
+export * from './authenticator';
+export * from './identity';
+export * from './identity-manager';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/packlets/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/packlets/identity/index.ts"],"names":[],"mappings":"AAIA,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC"}

package/dist/src/packlets/identity/index.js

@@ -0,0 +1,23 @@
+"use strict";
+//
+// Copyright 2022 DXOS.org
+//
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authenticator"), exports);
+__exportStar(require("./identity"), exports);
+__exportStar(require("./identity-manager"), exports);
+//# sourceMappingURL=index.js.map

package/dist/src/packlets/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/packlets/identity/index.ts"],"names":[],"mappings":";AAAA,EAAE;AACF,0BAA0B;AAC1B,EAAE;;;;;;;;;;;;;;;;AAEF,kDAAgC;AAChC,6CAA2B;AAC3B,qDAAmC"}

package/dist/src/packlets/invitations/common.d.ts

@@ -0,0 +1,35 @@
+import { SecretProvider, SecretValidator } from '@dxos/credentials';
+/**
+ * Defines a way for peers to authenticate each other through a side channel.
+ */
+export interface InvitationAuthenticator {
+    secretProvider?: SecretProvider;
+    secretValidator: SecretValidator;
+}
+export declare const defaultInvitationAuthenticator: Required<InvitationAuthenticator>;
+/**
+ * Additional set of callbacks and options used in the invitation process.
+ */
+export interface InvitationOptions {
+    /**
+     * A function to be called when the invitation is closed (successfully or not).
+     */
+    onFinish?: ({ expired }: {
+        expired?: boolean;
+    }) => void;
+    /**
+     * Date.now()-style timestamp of when this invitation should expire.
+     */
+    expiration?: number;
+}
+export declare type InviterInvitation = {
+    invitationCode: string;
+    secret: Uint8Array | undefined;
+};
+export declare type InviteeInvitation = {
+    secret?: Uint8Array | undefined;
+    secretTrigger?: () => void;
+};
+export declare type InviterInvitations = InviterInvitation[];
+export declare type InviteeInvitations = Map<string, InviteeInvitation>;
+//# sourceMappingURL=common.d.ts.map

package/dist/src/packlets/invitations/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../../src/packlets/invitations/common.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiD,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEnH;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,eAAe,EAAE,eAAe,CAAC;CAClC;AAED,eAAO,MAAM,8BAA8B,EAAE,QAAQ,CAAC,uBAAuB,CAG5E,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAExD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAGD,oBAAY,iBAAiB,GAAG;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;CAChC,CAAC;AAGF,oBAAY,iBAAiB,GAAG;IAC9B,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;CAC5B,CAAC;AAEF,oBAAY,kBAAkB,GAAG,iBAAiB,EAAE,CAAC;AACrD,oBAAY,kBAAkB,GAAG,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC"}

package/dist/src/packlets/invitations/common.js

@@ -0,0 +1,12 @@
+"use strict";
+//
+// Copyright 2020 DXOS.org
+//
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultInvitationAuthenticator = void 0;
+const credentials_1 = require("@dxos/credentials");
+exports.defaultInvitationAuthenticator = {
+    secretProvider: credentials_1.defaultSecretProvider,
+    secretValidator: credentials_1.defaultSecretValidator
+};
+//# sourceMappingURL=common.js.map

package/dist/src/packlets/invitations/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../../src/packlets/invitations/common.ts"],"names":[],"mappings":";AAAA,EAAE;AACF,0BAA0B;AAC1B,EAAE;;;AAEF,mDAAmH;AAUtG,QAAA,8BAA8B,GAAsC;IAC/E,cAAc,EAAE,mCAAqB;IACrC,eAAe,EAAE,oCAAsB;CACxC,CAAC"}

package/dist/src/packlets/invitations/halo-invitations.d.ts

@@ -0,0 +1,23 @@
+import { NetworkManager } from '@dxos/network-manager';
+import { InvitationDescriptor } from '@dxos/protocols/proto/dxos/halo/invitations';
+import { Identity, IdentityManager } from '../identity';
+/**
+ * Creates and processes Halo invitations between devices.
+ */
+export declare class HaloInvitations {
+    private readonly _identityManager;
+    private readonly _networkManager;
+    private readonly _onInitialize;
+    constructor(_identityManager: IdentityManager, _networkManager: NetworkManager, _onInitialize: () => Promise<void>);
+    /**
+     * Sends a HALO admission offer and waits for guest to accept.
+     */
+    createInvitation({ onFinish }?: {
+        onFinish?: () => void;
+    }): Promise<InvitationDescriptor>;
+    /**
+     * Joins an existing identity HALO by invitation.
+     */
+    acceptInvitation(invitation: InvitationDescriptor): Promise<Identity>;
+}
+//# sourceMappingURL=halo-invitations.d.ts.map

package/dist/src/packlets/invitations/halo-invitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"halo-invitations.d.ts","sourceRoot":"","sources":["../../../../src/packlets/invitations/halo-invitations.ts"],"names":[],"mappings":"AAQA,OAAO,EAAyB,cAAc,EAAgB,MAAM,uBAAuB,CAAC;AAG5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAGnF,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAExD;;GAEG;AACH,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAFb,gBAAgB,EAAE,eAAe,EACjC,eAAe,EAAE,cAAc,EAC/B,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC;IAGrD;;OAEG;IACG,gBAAgB,CAAC,EAAE,QAAQ,EAAE,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqEnG;;OAEG;IACG,gBAAgB,CAAC,UAAU,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC;CA4D5E"}

package/dist/src/packlets/invitations/halo-invitations.js

@@ -0,0 +1,150 @@
+"use strict";
+//
+// Copyright 2022 DXOS.org
+//
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HaloInvitations = void 0;
+const async_1 = require("@dxos/async");
+const debug_1 = require("@dxos/debug");
+const keys_1 = require("@dxos/keys");
+const log_1 = require("@dxos/log");
+const network_manager_1 = require("@dxos/network-manager");
+const protocol_plugin_rpc_1 = require("@dxos/protocol-plugin-rpc");
+const protocols_1 = require("@dxos/protocols");
+const invitations_1 = require("@dxos/protocols/proto/dxos/halo/invitations");
+const rpc_1 = require("@dxos/rpc");
+/**
+ * Creates and processes Halo invitations between devices.
+ */
+class HaloInvitations {
+    constructor(_identityManager, _networkManager, _onInitialize // TODO(burdon): ???
+    ) {
+        this._identityManager = _identityManager;
+        this._networkManager = _networkManager;
+        this._onInitialize = _onInitialize;
+    }
+    /**
+     * Sends a HALO admission offer and waits for guest to accept.
+     */
+    async createInvitation({ onFinish } = {}) {
+        var _a;
+        const identity = (_a = this._identityManager.identity) !== null && _a !== void 0 ? _a : (0, debug_1.failUndefined)();
+        const plugin = (0, protocol_plugin_rpc_1.createRpcPlugin)(async (port) => {
+            const peer = (0, rpc_1.createProtoRpcPeer)({
+                port,
+                requested: {
+                    HaloGuestService: protocols_1.schema.getService('dxos.halo.invitations.HaloGuestService')
+                },
+                exposed: {
+                    HaloHostService: protocols_1.schema.getService('dxos.halo.invitations.HaloHostService')
+                },
+                handlers: {
+                    HaloHostService: {
+                        presentAdmissionCredentials: async ({ deviceKey, controlFeedKey, dataFeedKey }) => {
+                            (0, log_1.log)('processing admission request', { identityKey: identity.identityKey, deviceKey }, { file: "packages/sdk/client-services/src/packlets/invitations/halo-invitations.ts", line: 45 });
+                            // TODO(burdon): Use CredentialGenerator.
+                            const signer = identity.getIdentityCredentialSigner();
+                            await identity.controlPipeline.writer.write({
+                                '@type': 'dxos.echo.feed.CredentialsMessage',
+                                credential: await signer.createCredential({
+                                    subject: deviceKey,
+                                    assertion: {
+                                        '@type': 'dxos.halo.credentials.AuthorizedDevice',
+                                        identityKey: identity.identityKey,
+                                        deviceKey
+                                    }
+                                })
+                            });
+                            // TODO(dmaretskyi): Admit guest's feeds otherwise messages from them won't be processed by the pipeline.
+                        }
+                    }
+                }
+            });
+            await peer.open();
+            {
+                (0, log_1.log)('sending admission offer', { identityKey: identity.identityKey }, { file: "packages/sdk/client-services/src/packlets/invitations/halo-invitations.ts", line: 69 });
+                await peer.rpc.HaloGuestService.presentAdmissionOffer({
+                    identityKey: identity.identityKey,
+                    haloSpaceKey: identity.haloSpaceKey,
+                    genesisFeedKey: identity.haloGenesisFeedKey
+                });
+                onFinish === null || onFinish === void 0 ? void 0 : onFinish();
+            }
+            await peer.close();
+            await connection.close();
+        });
+        const topic = keys_1.PublicKey.random();
+        const peerId = keys_1.PublicKey.random(); // TODO(burdon): Fails if using the actual peer key.
+        const connection = await this._networkManager.openSwarmConnection({
+            topic,
+            peerId: topic,
+            // peerId,
+            protocol: (0, network_manager_1.createProtocolFactory)(topic, peerId, [plugin]),
+            topology: new network_manager_1.StarTopology(topic)
+        });
+        return {
+            type: invitations_1.InvitationDescriptor.Type.INTERACTIVE,
+            swarmKey: topic.asUint8Array(),
+            invitation: new Uint8Array() // TODO(burdon): Remove.
+        };
+    }
+    /**
+     * Joins an existing identity HALO by invitation.
+     */
+    async acceptInvitation(invitation) {
+        const admitted = new async_1.Trigger(); // TODO(burdon): Must not share across multiple connections.
+        const plugin = (0, protocol_plugin_rpc_1.createRpcPlugin)(async (port) => {
+            const peer = (0, rpc_1.createProtoRpcPeer)({
+                port,
+                requested: {
+                    // TODO(burdon): Rename in-bound.
+                    HaloHostService: protocols_1.schema.getService('dxos.halo.invitations.HaloHostService')
+                },
+                exposed: {
+                    // TODO(burdon): Rename out-bound?
+                    HaloGuestService: protocols_1.schema.getService('dxos.halo.invitations.HaloGuestService')
+                },
+                handlers: {
+                    // TODO(burdon): Factory to create handlers and open/close handlers.
+                    HaloGuestService: {
+                        presentAdmissionOffer: async ({ identityKey, haloSpaceKey, genesisFeedKey }) => {
+                            (0, log_1.log)('processing admission offer', { identityKey }, { file: "packages/sdk/client-services/src/packlets/invitations/halo-invitations.ts", line: 120 });
+                            const identity = await this._identityManager.acceptIdentity({
+                                identityKey,
+                                haloSpaceKey,
+                                haloGenesisFeedKey: genesisFeedKey
+                            });
+                            (0, log_1.log)('sending admission request', { identityKey: invitation.identityKey }, { file: "packages/sdk/client-services/src/packlets/invitations/halo-invitations.ts", line: 127 });
+                            await peer.rpc.HaloHostService.presentAdmissionCredentials({
+                                deviceKey: identity.deviceKey,
+                                controlFeedKey: keys_1.PublicKey.random(),
+                                dataFeedKey: keys_1.PublicKey.random()
+                            });
+                            // TODO(burdon): Document.
+                            await identity.ready();
+                            admitted.wake(identity);
+                        }
+                    }
+                }
+            });
+            await peer.open();
+            await admitted.wait();
+            await peer.close();
+        });
+        const topic = keys_1.PublicKey.from(invitation.swarmKey);
+        const peerId = keys_1.PublicKey.random(); // TODO(burdon): Fails if using the actual peer key.
+        const connection = await this._networkManager.openSwarmConnection({
+            topic,
+            peerId: keys_1.PublicKey.random(),
+            // peerId,
+            protocol: (0, network_manager_1.createProtocolFactory)(topic, peerId, [plugin]),
+            topology: new network_manager_1.StarTopology(topic)
+        });
+        const identity = await admitted.wait();
+        await this._onInitialize();
+        await connection.close();
+        return identity;
+    }
+}
+exports.HaloInvitations = HaloInvitations;
+//# sourceMappingURL=halo-invitations.js.map

package/dist/src/packlets/invitations/halo-invitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"halo-invitations.js","sourceRoot":"","sources":["../../../../src/packlets/invitations/halo-invitations.ts"],"names":[],"mappings":";AAAA,EAAE;AACF,0BAA0B;AAC1B,EAAE;;;AAEF,uCAAsC;AACtC,uCAA4C;AAC5C,qCAAuC;AACvC,mCAAgC;AAChC,2DAA4F;AAC5F,mEAA4D;AAC5D,+CAAyC;AACzC,6EAAmF;AACnF,mCAA+C;AAI/C;;GAEG;AACH,MAAa,eAAe;IAC1B,YACmB,gBAAiC,EACjC,eAA+B,EAC/B,aAAkC,CAAC,oBAAoB;;QAFvD,qBAAgB,GAAhB,gBAAgB,CAAiB;QACjC,oBAAe,GAAf,eAAe,CAAgB;QAC/B,kBAAa,GAAb,aAAa,CAAqB;IAClD,CAAC;IAEJ;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,EAAE,QAAQ,KAAgC,EAAE;;QACjE,MAAM,QAAQ,GAAG,MAAA,IAAI,CAAC,gBAAgB,CAAC,QAAQ,mCAAI,IAAA,qBAAa,GAAE,CAAC;QAEnE,MAAM,MAAM,GAAG,IAAA,qCAAe,EAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC5C,MAAM,IAAI,GAAG,IAAA,wBAAkB,EAAC;gBAC9B,IAAI;gBACJ,SAAS,EAAE;oBACT,gBAAgB,EAAE,kBAAM,CAAC,UAAU,CAAC,wCAAwC,CAAC;iBAC9E;gBACD,OAAO,EAAE;oBACP,eAAe,EAAE,kBAAM,CAAC,UAAU,CAAC,uCAAuC,CAAC;iBAC5E;gBACD,QAAQ,EAAE;oBACR,eAAe,EAAE;wBACf,2BAA2B,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,EAAE;4BAChF,IAAA,SAAG,EAAC,8BAA8B,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,kGAAC,CAAC;4BAEtF,yCAAyC;4BACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,2BAA2B,EAAE,CAAC;4BACtD,MAAM,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;gCAC1C,OAAO,EAAE,mCAAmC;gCAC5C,UAAU,EAAE,MAAM,MAAM,CAAC,gBAAgB,CAAC;oCACxC,OAAO,EAAE,SAAS;oCAClB,SAAS,EAAE;wCACT,OAAO,EAAE,wCAAwC;wCACjD,WAAW,EAAE,QAAQ,CAAC,WAAW;wCACjC,SAAS;qCACV;iCACF,CAAC;6BACH,CAAC,CAAC;4BAEH,yGAAyG;wBAC3G,CAAC;qBACF;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB;gBACE,IAAA,SAAG,EAAC,yBAAyB,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,kGAAC,CAAC;gBACtE,MAAM,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,qBAAqB,CAAC;oBACpD,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,cAAc,EAAE,QAAQ,CAAC,kBAAkB;iBAC5C,CAAC,CAAC;gBAEH,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,EAAI,CAAC;aACd;YACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,gBAAS,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,gBAAS,CAAC,MAAM,EAAE,CAAC,CAAC,oDAAoD;QACvF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC;YAChE,KAAK;YACL,MAAM,EAAE,KAAK;YACb,UAAU;YACV,QAAQ,EAAE,IAAA,uCAAqB,EAAC,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;YACxD,QAAQ,EAAE,IAAI,8BAAY,CAAC,KAAK,CAAC;SAClC,CAAC,CAAC;QAEH,OAAO;YACL,IAAI,EAAE,kCAAoB,CAAC,IAAI,CAAC,WAAW;YAC3C,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE;YAC9B,UAAU,EAAE,IAAI,UAAU,EAAE,CAAC,wBAAwB;SACtD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,UAAgC;QACrD,MAAM,QAAQ,GAAG,IAAI,eAAO,EAAY,CAAC,CAAC,4DAA4D;QAEtG,MAAM,MAAM,GAAG,IAAA,qCAAe,EAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC5C,MAAM,IAAI,GAAG,IAAA,wBAAkB,EAAC;gBAC9B,IAAI;gBACJ,SAAS,EAAE;oBACT,iCAAiC;oBACjC,eAAe,EAAE,kBAAM,CAAC,UAAU,CAAC,uCAAuC,CAAC;iBAC5E;gBACD,OAAO,EAAE;oBACP,kCAAkC;oBAClC,gBAAgB,EAAE,kBAAM,CAAC,UAAU,CAAC,wCAAwC,CAAC;iBAC9E;gBACD,QAAQ,EAAE;oBACR,oEAAoE;oBACpE,gBAAgB,EAAE;wBAChB,qBAAqB,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,EAAE,EAAE;4BAC7E,IAAA,SAAG,EAAC,4BAA4B,EAAE,EAAE,WAAW,EAAE,mGAAC,CAAC;4BACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC;gCAC1D,WAAW;gCACX,YAAY;gCACZ,kBAAkB,EAAE,cAAc;6BACnC,CAAC,CAAC;4BAEH,IAAA,SAAG,EAAC,2BAA2B,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,mGAAC,CAAC;4BAC1E,MAAM,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,2BAA2B,CAAC;gCACzD,SAAS,EAAE,QAAQ,CAAC,SAAS;gCAC7B,cAAc,EAAE,gBAAS,CAAC,MAAM,EAAE;gCAClC,WAAW,EAAE,gBAAS,CAAC,MAAM,EAAE;6BAChC,CAAC,CAAC;4BAEH,0BAA0B;4BAC1B,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;4BACvB,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBAC1B,CAAC;qBACF;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,gBAAS,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,gBAAS,CAAC,MAAM,EAAE,CAAC,CAAC,oDAAoD;QACvF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC;YAChE,KAAK;YACL,MAAM,EAAE,gBAAS,CAAC,MAAM,EAAE;YAC1B,UAAU;YACV,QAAQ,EAAE,IAAA,uCAAqB,EAAC,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;YACxD,QAAQ,EAAE,IAAI,8BAAY,CAAC,KAAK,CAAC;SAClC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AA9ID,0CA8IC"}

package/dist/src/packlets/invitations/index.d.ts

@@ -0,0 +1,5 @@
+export * from './common';
+export * from './halo-invitations';
+export * from './invitation-wrapper';
+export * from './space-invitations';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/packlets/invitations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/packlets/invitations/index.ts"],"names":[],"mappings":"AAIA,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC"}

package/dist/src/packlets/invitations/index.js

@@ -0,0 +1,24 @@
+"use strict";
+//
+// Copyright 2022 DXOS.org
+//
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./common"), exports);
+__exportStar(require("./halo-invitations"), exports);
+__exportStar(require("./invitation-wrapper"), exports);
+__exportStar(require("./space-invitations"), exports);
+//# sourceMappingURL=index.js.map

package/dist/src/packlets/invitations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/packlets/invitations/index.ts"],"names":[],"mappings":";AAAA,EAAE;AACF,0BAA0B;AAC1B,EAAE;;;;;;;;;;;;;;;;AAEF,2CAAyB;AACzB,qDAAmC;AACnC,uDAAqC;AACrC,sDAAoC"}

package/dist/src/packlets/invitations/invitation-wrapper.d.ts

@@ -0,0 +1,36 @@
+import { PublicKey } from '@dxos/keys';
+import { InvitationDescriptor } from '@dxos/protocols/proto/dxos/halo/invitations';
+/**
+ * A serialized version of InvitationWrapper that's suitable to be encoded as an URL query string.
+ */
+export interface InvitationQueryParameters {
+    hash: string;
+    swarmKey: string;
+    invitation: string;
+    identityKey?: string;
+    type: string;
+}
+/**
+ * Describes an issued invitation.
+ *
+ * Can be serialized to protobuf or JSON.
+ * Invitations can be interactive or offline.
+ *
+ * This descriptor might also have a bundled secret for authentication in interactive mode.
+ */
+export declare class InvitationWrapper {
+    readonly type: InvitationDescriptor.Type;
+    readonly swarmKey: PublicKey;
+    readonly invitation: Uint8Array;
+    readonly identityKey?: PublicKey | undefined;
+    secret?: Uint8Array | undefined;
+    static decode(code: string): InvitationWrapper;
+    static encode(invitation: InvitationWrapper): string;
+    static fromQueryParameters(queryParameters: InvitationQueryParameters): InvitationWrapper;
+    static fromProto(invitation: InvitationDescriptor): InvitationWrapper;
+    constructor(type: InvitationDescriptor.Type, swarmKey: PublicKey, invitation: Uint8Array, identityKey?: PublicKey | undefined, secret?: Uint8Array | undefined);
+    get hash(): string;
+    toProto(): InvitationDescriptor;
+    toQueryParameters(): InvitationQueryParameters;
+}
+//# sourceMappingURL=invitation-wrapper.d.ts.map

package/dist/src/packlets/invitations/invitation-wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation-wrapper.d.ts","sourceRoot":"","sources":["../../../../src/packlets/invitations/invitation-wrapper.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAOnF;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AAEH,qBAAa,iBAAiB;aA0CV,IAAI,EAAE,oBAAoB,CAAC,IAAI;aAC/B,QAAQ,EAAE,SAAS;aACnB,UAAU,EAAE,UAAU;aACtB,WAAW,CAAC;IACrB,MAAM,CAAC;IA7ChB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB;IAK9C,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAiB,GAAG,MAAM;IAKpD,MAAM,CAAC,mBAAmB,CAAC,eAAe,EAAE,yBAAyB,GAAG,iBAAiB;IAgBzF,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,oBAAoB,GAAG,iBAAiB;gBAenD,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAC/B,QAAQ,EAAE,SAAS,EACnB,UAAU,EAAE,UAAU,EACtB,WAAW,CAAC,uBAAW,EAChC,MAAM,CAAC,wBAAY;IAa5B,IAAI,IAAI,WAGP;IAED,OAAO,IAAI,oBAAoB;IAU/B,iBAAiB,IAAI,yBAAyB;CAc/C"}