@dxos/halo 0.0.0 → 0.11.1

package/CHANGELOG.md

@@ -0,0 +1,17 @@
+# @dxos/halo
+
+## 0.11.1
+
+### Patch Changes
+
+- @dxos/errors@0.11.1
+- @dxos/keys@0.11.1
+
+## 0.11.0
+
+### Patch Changes
+
+- 6439417: Publish the HALO Effect service packages (`@dxos/halo`, `@dxos/halo-adapter-client`, `@dxos/halo-react`) and begin migrating Composer/plugins off direct `@dxos/client` HALO access onto them: `plugin-client` now provides `Identity.Service` / `Space.Service` layer specs and wraps the app in `HaloProvider`.
+- Updated dependencies [6a03a30]
+  - @dxos/keys@0.11.0
+  - @dxos/errors@0.11.0

package/dist/lib/index.mjs

@@ -0,0 +1,272 @@
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import * as Stream from "effect/Stream";
+import { IdentityDid, SpaceId } from "@dxos/keys";
+import { BaseError } from "@dxos/errors";
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+//#region src/Identity.ts
+var Identity_exports = /* @__PURE__ */ __exportAll({
+	Credential: () => Credential,
+	DeviceInfo: () => DeviceInfo,
+	DeviceKind: () => DeviceKind,
+	Info: () => Info$1,
+	Service: () => Service$1,
+	create: () => create$1,
+	credentials: () => credentials,
+	devices: () => devices,
+	getDevicesSnapshot: () => getDevicesSnapshot,
+	getSnapshot: () => getSnapshot,
+	grantServiceAccess: () => grantServiceAccess,
+	identity: () => identity,
+	invitations: () => invitations$1,
+	join: () => join$1,
+	recover: () => recover,
+	share: () => share$1,
+	updateProfile: () => updateProfile
+});
+/**
+* Device kind (platform / host class). Replaces the legacy protobuf `DeviceType` enum;
+* `agent`/`agent-managed` denote EDGE- or Hub-hosted agent devices.
+*/
+var DeviceKind = Schema.Literal("unknown", "browser", "native", "mobile", "agent", "agent-managed");
+/**
+* Public view of the local identity. Keyed by the DID; `identityKey` (hex) is retained for
+* consumers that seed deterministic UI (avatar/hue) or address the legacy credential key.
+* `data` carries arbitrary profile metadata (e.g. avatar emoji, hue).
+*/
+var Info$1 = Schema.Struct({
+	did: IdentityDid,
+	/** Hex-encoded identity (credential) key, when known. */
+	identityKey: Schema.optional(Schema.String),
+	displayName: Schema.optional(Schema.String),
+	/** Arbitrary profile metadata. */
+	data: Schema.optional(Schema.Record({
+		key: Schema.String,
+		value: Schema.Any
+	}))
+});
+/**
+* Public view of a device belonging to the local identity. Replaces the legacy `Device` proxy
+* type (`deviceKey` → `key`).
+*/
+var DeviceInfo = Schema.Struct({
+	/** Hex-encoded device key. */
+	key: Schema.String,
+	kind: Schema.optional(DeviceKind),
+	label: Schema.optional(Schema.String),
+	/** Whether this device is the local (current) device. */
+	current: Schema.Boolean
+});
+/**
+* Public view of a HALO credential. Replaces direct consumption of the protobuf `Credential`:
+* `type` is the subject assertion's `@type`, `id` its hex-encoded credential id.
+*/
+var Credential = Schema.Struct({
+	/** Hex-encoded credential id, when assigned. */
+	id: Schema.optional(Schema.String),
+	/** The subject assertion's `@type` (e.g. `dxos.halo.credentials.IdentityRecovery`). */
+	type: Schema.String,
+	issuanceDate: Schema.optional(Schema.DateFromSelf)
+});
+/**
+* Identity and device management, plus device invitations. `share`/`join` construct
+* {@link Invitation.Flow}s driven through the {@link Invitation} flow verbs; `invitations`
+* observes the active (host-created) device-invitation flows.
+*/
+var Service$1 = class extends Context.Tag("@dxos/halo/Identity")() {};
+/** The local identity as a current-value stream (requires {@link Service}). */
+var identity = Stream.unwrap(Effect.map(Service$1, (service) => service.identity));
+/** Synchronous snapshot of the local identity (requires {@link Service}). */
+var getSnapshot = Effect.map(Service$1, (service) => service.getSnapshot());
+/** Create the local identity (requires {@link Service}). */
+var create$1 = (options) => Effect.flatMap(Service$1, (service) => service.create(options));
+/** Re-admit this device via a recovery credential (requires {@link Service}). */
+var recover = (args) => Effect.flatMap(Service$1, (service) => service.recover(args));
+/** Update the identity profile (requires {@link Service}). */
+var updateProfile = (profile) => Effect.flatMap(Service$1, (service) => service.updateProfile(profile));
+/** Devices belonging to the local identity as a current-value stream (requires {@link Service}). */
+var devices = Stream.unwrap(Effect.map(Service$1, (service) => service.devices));
+/** Synchronous snapshot of the local identity's devices (requires {@link Service}). */
+var getDevicesSnapshot = Effect.map(Service$1, (service) => service.getDevicesSnapshot());
+/** HALO credentials as a current-value stream (requires {@link Service}). */
+var credentials = Stream.unwrap(Effect.map(Service$1, (service) => service.credentials));
+/** Grant the identity access to an EDGE/Hub service (requires {@link Service}). */
+var grantServiceAccess = (options) => Effect.flatMap(Service$1, (service) => service.grantServiceAccess(options));
+/** Initiate a device invitation (requires {@link Service}). */
+var share$1 = (options) => Effect.flatMap(Service$1, (service) => service.share(options));
+/** Redeem a device-invitation code (requires {@link Service}). */
+var join$1 = (code) => Effect.flatMap(Service$1, (service) => service.join(code));
+/** Active device-invitation flows as a current-value stream (requires {@link Service}). */
+var invitations$1 = Stream.unwrap(Effect.map(Service$1, (service) => service.invitations));
+//#endregion
+//#region src/Invitation.ts
+var Invitation_exports = /* @__PURE__ */ __exportAll({
+	authenticate: () => authenticate,
+	cancel: () => cancel,
+	code: () => code,
+	events: () => events
+});
+/**
+* Supply the auth code to a flow awaiting authentication. Flow verbs operate on a {@link Flow}
+* handle directly and require no service; the active-flow set is queried through
+* {@link Identity} (device invitations) and {@link Space} (space invitations).
+*/
+var authenticate = (flow, code) => flow.authenticate(code);
+/** Abort a flow. */
+var cancel = (flow) => flow.cancel();
+/** Lifecycle event stream of a flow. */
+var events = (flow) => flow.events;
+/** Encoded, shareable code for a flow. */
+var code = (flow) => flow.code;
+//#endregion
+//#region src/Space.ts
+var Space_exports = /* @__PURE__ */ __exportAll({
+	Access: () => Access,
+	EdgeReplication: () => EdgeReplication,
+	Info: () => Info,
+	Member: () => Member,
+	MembershipPolicy: () => MembershipPolicy,
+	Service: () => Service,
+	State: () => State,
+	create: () => create,
+	exportSpace: () => exportSpace,
+	get: () => get,
+	importSpace: () => importSpace,
+	invitations: () => invitations,
+	join: () => join,
+	members: () => members,
+	removeMember: () => removeMember,
+	setEdgeReplication: () => setEdgeReplication,
+	share: () => share,
+	spaces: () => spaces,
+	updateMemberRole: () => updateMemberRole,
+	waitReady: () => waitReady
+});
+/**
+* Capability level granted to a space member, matching the Keyhive `Access` enum. Ordered; each
+* implies the previous: `pull` < `read` < `edit` < `admin`. Replaces the legacy
+* `SpaceMember.Role` enum.
+*/
+var Access = Schema.Literal("pull", "read", "edit", "admin");
+/**
+* Lifecycle state of a space. Replaces the legacy `SpaceState` protobuf enum (subset relevant to
+* consumers).
+*/
+var State = Schema.Literal("inactive", "closed", "ready");
+/**
+* Who may join a space. Replaces the legacy `MembershipPolicy` protobuf enum: `invite` admits
+* members via invitation only; `locked` admits no new members.
+*/
+var MembershipPolicy = Schema.Literal("invite", "locked");
+/**
+* Whether a space replicates through EDGE. Replaces the legacy `EdgeReplicationSetting` protobuf
+* enum.
+*/
+var EdgeReplication = Schema.Literal("disabled", "enabled");
+/**
+* A space membership entry. Membership (HALO) only — liveness/presence is a separate concern
+* (see API_AUDIT.md §3.6).
+*/
+var Member = Schema.Struct({
+	/** DID of the member identity, when known. */
+	did: Schema.optional(IdentityDid),
+	/** Hex-encoded identity key of the member, for avatar/presence keying. */
+	identityKey: Schema.optional(Schema.String),
+	displayName: Schema.optional(Schema.String),
+	/** Arbitrary profile metadata (e.g. avatar emoji, hue). */
+	data: Schema.optional(Schema.Record({
+		key: Schema.String,
+		value: Schema.Any
+	})),
+	role: Access,
+	/** Whether the member is currently online. */
+	online: Schema.Boolean
+});
+/**
+* Public view of a space. A plain snapshot — database access stays on the ECHO `Database`
+* service keyed by {@link SpaceId}, not on this value.
+*/
+var Info = Schema.Struct({
+	id: SpaceId,
+	name: Schema.optional(Schema.String),
+	state: State
+});
+/**
+* Space management and membership, plus space invitations. `share`/`join` construct
+* {@link Invitation.Flow}s driven through the {@link Invitation} flow verbs; `invitations`
+* observes the active (host-created) space-invitation flows.
+*/
+var Service = class extends Context.Tag("@dxos/halo/Space")() {};
+/** All spaces as a current-value stream (requires {@link Service}). */
+var spaces = Stream.unwrap(Effect.map(Service, (service) => service.spaces));
+/** Resolve a space by id (requires {@link Service}). */
+var get = (id) => Effect.flatMap(Service, (service) => service.get(id));
+/** Create a new space (requires {@link Service}). */
+var create = (options) => Effect.flatMap(Service, (service) => service.create(options));
+/** Resolve once the space is ready (requires {@link Service}). */
+var waitReady = (id) => Effect.flatMap(Service, (service) => service.waitReady(id));
+/** Enable or disable EDGE replication for a space (requires {@link Service}). */
+var setEdgeReplication = (id, setting) => Effect.flatMap(Service, (service) => service.setEdgeReplication(id, setting));
+/** A space's membership as a current-value stream (requires {@link Service}). */
+var members = (id) => Stream.unwrap(Effect.map(Service, (service) => service.members(id)));
+/** Change a member's access level (requires {@link Service}). */
+var updateMemberRole = (id, subject, role) => Effect.flatMap(Service, (service) => service.updateMemberRole(id, subject, role));
+/** Remove a member (requires {@link Service}). */
+var removeMember = (id, subject) => Effect.flatMap(Service, (service) => service.removeMember(id, subject));
+/** Initiate a space invitation (requires {@link Service}). */
+var share = (id, options) => Effect.flatMap(Service, (service) => service.share(id, options));
+/** Redeem a space-invitation code (requires {@link Service}). */
+var join = (code) => Effect.flatMap(Service, (service) => service.join(code));
+/** A space's active invitation flows as a current-value stream (requires {@link Service}). */
+var invitations = (id) => Stream.unwrap(Effect.map(Service, (service) => service.invitations(id)));
+/** Export a space to an archive (requires {@link Service}). */
+var exportSpace = (id) => Effect.flatMap(Service, (service) => service.export(id));
+/** Import a space from an archive (requires {@link Service}). */
+var importSpace = (archive, options) => Effect.flatMap(Service, (service) => service.import(archive, options));
+//#endregion
+//#region src/errors.ts
+/**
+* The acting principal lacks the capability required for the operation
+* (e.g. delegating access above their own level, or revoking without causal seniority).
+*/
+var NotAuthorizedError = class extends BaseError.extend("NotAuthorizedError", "Not authorized") {};
+/**
+* The referenced principal (individual or group) is not known to the service.
+*/
+var UnknownPrincipalError = class extends BaseError.extend("UnknownPrincipalError", "Unknown principal") {};
+/**
+* A signed payload failed signature verification or its id does not match its key.
+*/
+var InvalidSignatureError = class extends BaseError.extend("InvalidSignatureError", "Invalid signature") {};
+/**
+* A membership operation references causal predecessors that have not been received.
+*/
+var MissingDependencyError = class extends BaseError.extend("MissingDependencyError", "Missing dependency") {};
+/**
+* An identity/device operation (create, recover, profile/device update, device invitation) failed.
+*/
+var IdentityError = class extends BaseError.extend("IdentityError", "Identity operation failed") {};
+/**
+* A space operation (create, query, membership, invitation, export/import) failed.
+*/
+var SpaceError = class extends BaseError.extend("SpaceError", "Space operation failed") {};
+/**
+* An invitation-lifecycle operation (authenticate, cancel) failed.
+*/
+var InvitationError = class extends BaseError.extend("InvitationError", "Invitation operation failed") {};
+//#endregion
+export { Identity_exports as Identity, IdentityError, InvalidSignatureError, Invitation_exports as Invitation, InvitationError, MissingDependencyError, NotAuthorizedError, Space_exports as Space, SpaceError, UnknownPrincipalError };
+
+//# sourceMappingURL=index.mjs.map

package/dist/lib/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/Identity.ts","../../src/Invitation.ts","../../src/Space.ts","../../src/errors.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\n// @import-as-namespace\n\nimport * as Context from 'effect/Context';\nimport * as Effect from 'effect/Effect';\nimport * as Option from 'effect/Option';\nimport * as Schema from 'effect/Schema';\nimport * as Stream from 'effect/Stream';\n\nimport { IdentityDid } from '@dxos/keys';\n\nimport { type IdentityError } from './errors';\nimport * as Invitation from './Invitation';\n\n/**\n * Device kind (platform / host class). Replaces the legacy protobuf `DeviceType` enum;\n * `agent`/`agent-managed` denote EDGE- or Hub-hosted agent devices.\n */\nexport const DeviceKind = Schema.Literal('unknown', 'browser', 'native', 'mobile', 'agent', 'agent-managed');\nexport type DeviceKind = typeof DeviceKind.Type;\n\n/**\n * Public view of the local identity. Keyed by the DID; `identityKey` (hex) is retained for\n * consumers that seed deterministic UI (avatar/hue) or address the legacy credential key.\n * `data` carries arbitrary profile metadata (e.g. avatar emoji, hue).\n */\nexport const Info = Schema.Struct({\n  did: IdentityDid,\n  /** Hex-encoded identity (credential) key, when known. */\n  identityKey: Schema.optional(Schema.String),\n  displayName: Schema.optional(Schema.String),\n  /** Arbitrary profile metadata. */\n  data: Schema.optional(Schema.Record({ key: Schema.String, value: Schema.Any })),\n});\nexport type Info = typeof Info.Type;\n\n/**\n * Public view of a device belonging to the local identity. Replaces the legacy `Device` proxy\n * type (`deviceKey` → `key`).\n */\nexport const DeviceInfo = Schema.Struct({\n  /** Hex-encoded device key. */\n  key: Schema.String,\n  kind: Schema.optional(DeviceKind),\n  label: Schema.optional(Schema.String),\n  /** Whether this device is the local (current) device. */\n  current: Schema.Boolean,\n});\nexport type DeviceInfo = typeof DeviceInfo.Type;\n\n/**\n * Public view of a HALO credential. Replaces direct consumption of the protobuf `Credential`:\n * `type` is the subject assertion's `@type`, `id` its hex-encoded credential id.\n */\nexport const Credential = Schema.Struct({\n  /** Hex-encoded credential id, when assigned. */\n  id: Schema.optional(Schema.String),\n  /** The subject assertion's `@type` (e.g. `dxos.halo.credentials.IdentityRecovery`). */\n  type: Schema.String,\n  issuanceDate: Schema.optional(Schema.DateFromSelf),\n});\nexport type Credential = typeof Credential.Type;\n\n/**\n * Options for a self-issued `ServiceAccess` credential granting the identity access to an\n * EDGE/Hub service.\n */\nexport type ServiceAccessOptions = {\n  /** Target server name (e.g. `hub.dxos.network`). */\n  readonly serverName: string;\n  /** Capabilities to grant (e.g. `['composer:beta']`). */\n  readonly capabilities: readonly string[];\n};\n\n/**\n * Recovery credential presented to re-admit a device to an existing identity.\n */\nexport type RecoverArgs =\n  | { readonly recoveryCode: string }\n  | { readonly token: string }\n  | { readonly recoveryProof: string };\n\n/**\n * Identity and device management, plus device invitations. `share`/`join` construct\n * {@link Invitation.Flow}s driven through the {@link Invitation} flow verbs; `invitations`\n * observes the active (host-created) device-invitation flows.\n */\nexport class Service extends Context.Tag('@dxos/halo/Identity')<\n  Service,\n  {\n    /**\n     * The local identity (`Option.none` when none exists) as a stream that emits the current\n     * value immediately on subscription. Take the first element for a one-shot read; subscribe\n     * for updates.\n     */\n    readonly identity: Stream.Stream<Option.Option<Info>>;\n    /**\n     * Synchronous snapshot of the local identity (`Option.none` when none exists). For imperative\n     * callers (non-React, non-Effect) that need the current value without subscribing.\n     */\n    readonly getSnapshot: () => Option.Option<Info>;\n    /**\n     * Subscribe to local-identity changes (imperative). Invokes `callback` immediately with the\n     * current value, then on each change. Returns an unsubscribe function.\n     */\n    readonly subscribe: (callback: (identity: Option.Option<Info>) => void) => () => void;\n    /** Create the local identity (and its first device). */\n    readonly create: (options?: { displayName?: string; deviceLabel?: string }) => Effect.Effect<Info, IdentityError>;\n    /** Re-admit this device to an existing identity via a recovery credential. */\n    readonly recover: (args: RecoverArgs) => Effect.Effect<Info, IdentityError>;\n    /** Update the identity profile. */\n    readonly updateProfile: (profile: {\n      displayName?: string;\n      data?: Record<string, unknown>;\n    }) => Effect.Effect<Info, IdentityError>;\n    /** Devices belonging to the local identity; emits the current set immediately. */\n    readonly devices: Stream.Stream<readonly DeviceInfo[]>;\n    /** Synchronous snapshot of the local identity's devices, for imperative callers. */\n    readonly getDevicesSnapshot: () => readonly DeviceInfo[];\n    /** HALO credentials of the local identity; emits the current set immediately. */\n    readonly credentials: Stream.Stream<readonly Credential[]>;\n    /**\n     * Grant this identity access to an EDGE/Hub service by writing a `ServiceAccess` credential\n     * (self-issued). Replaces hand-constructing the protobuf credential at the call site.\n     */\n    readonly grantServiceAccess: (options: ServiceAccessOptions) => Effect.Effect<void, IdentityError>;\n    /** Initiate a device invitation (host side). */\n    readonly share: (options?: Invitation.ShareOptions) => Effect.Effect<Invitation.Flow, IdentityError>;\n    /** Redeem a device-invitation code on a new device (guest side). */\n    readonly join: (code: string) => Effect.Effect<Invitation.Flow, IdentityError>;\n    /** Active (host-created) device-invitation flows; emits the current set immediately. */\n    readonly invitations: Stream.Stream<readonly Invitation.Flow[]>;\n  }\n>() {}\n\n/** The local identity as a current-value stream (requires {@link Service}). */\nexport const identity: Stream.Stream<Option.Option<Info>, never, Service> = Stream.unwrap(\n  Effect.map(Service, (service) => service.identity),\n);\n\n/** Synchronous snapshot of the local identity (requires {@link Service}). */\nexport const getSnapshot: Effect.Effect<Option.Option<Info>, never, Service> = Effect.map(Service, (service) =>\n  service.getSnapshot(),\n);\n\n/** Create the local identity (requires {@link Service}). */\nexport const create = (options?: {\n  displayName?: string;\n  deviceLabel?: string;\n}): Effect.Effect<Info, IdentityError, Service> => Effect.flatMap(Service, (service) => service.create(options));\n\n/** Re-admit this device via a recovery credential (requires {@link Service}). */\nexport const recover = (args: RecoverArgs): Effect.Effect<Info, IdentityError, Service> =>\n  Effect.flatMap(Service, (service) => service.recover(args));\n\n/** Update the identity profile (requires {@link Service}). */\nexport const updateProfile = (profile: {\n  displayName?: string;\n  data?: Record<string, unknown>;\n}): Effect.Effect<Info, IdentityError, Service> => Effect.flatMap(Service, (service) => service.updateProfile(profile));\n\n/** Devices belonging to the local identity as a current-value stream (requires {@link Service}). */\nexport const devices: Stream.Stream<readonly DeviceInfo[], never, Service> = Stream.unwrap(\n  Effect.map(Service, (service) => service.devices),\n);\n\n/** Synchronous snapshot of the local identity's devices (requires {@link Service}). */\nexport const getDevicesSnapshot: Effect.Effect<readonly DeviceInfo[], never, Service> = Effect.map(Service, (service) =>\n  service.getDevicesSnapshot(),\n);\n\n/** HALO credentials as a current-value stream (requires {@link Service}). */\nexport const credentials: Stream.Stream<readonly Credential[], never, Service> = Stream.unwrap(\n  Effect.map(Service, (service) => service.credentials),\n);\n\n/** Grant the identity access to an EDGE/Hub service (requires {@link Service}). */\nexport const grantServiceAccess = (options: ServiceAccessOptions): Effect.Effect<void, IdentityError, Service> =>\n  Effect.flatMap(Service, (service) => service.grantServiceAccess(options));\n\n/** Initiate a device invitation (requires {@link Service}). */\nexport const share = (options?: Invitation.ShareOptions): Effect.Effect<Invitation.Flow, IdentityError, Service> =>\n  Effect.flatMap(Service, (service) => service.share(options));\n\n/** Redeem a device-invitation code (requires {@link Service}). */\nexport const join = (code: string): Effect.Effect<Invitation.Flow, IdentityError, Service> =>\n  Effect.flatMap(Service, (service) => service.join(code));\n\n/** Active device-invitation flows as a current-value stream (requires {@link Service}). */\nexport const invitations: Stream.Stream<readonly Invitation.Flow[], never, Service> = Stream.unwrap(\n  Effect.map(Service, (service) => service.invitations),\n);\n","//\n// Copyright 2026 DXOS.org\n//\n\n// @import-as-namespace\n\nimport * as Effect from 'effect/Effect';\nimport * as Stream from 'effect/Stream';\n\nimport { type IdentityDid, type SpaceId } from '@dxos/keys';\n\nimport { type InvitationError } from './errors';\n\n/**\n * Whether an invitation admits a device to an identity or a member to a space.\n */\nexport type Kind = 'device' | 'space';\n\n/**\n * How a guest proves it may redeem the invitation.\n * Mirrors the legacy `Invitation.AuthMethod` protobuf enum.\n */\nexport type AuthMethod = 'none' | 'shared-secret' | 'known-public-key';\n\n/**\n * Interactive (online host+guest handshake) vs delegated (offline-redeemable) invitation.\n * Mirrors the legacy `Invitation.Type` protobuf enum.\n */\nexport type Type = 'interactive' | 'delegated' | 'multiuse';\n\n/**\n * Options for initiating an invitation. Passed to {@link Identity.share} / {@link Space.share}.\n */\nexport type ShareOptions = {\n  readonly authMethod?: AuthMethod;\n  readonly type?: Type;\n  readonly multiUse?: boolean;\n  /** Restrict a `known-public-key` invitation to a specific guest (key/DID). */\n  readonly target?: string;\n};\n\n/**\n * Outcome of a completed invitation flow.\n */\nexport type Result = {\n  readonly spaceId?: SpaceId;\n  readonly identityDid?: IdentityDid;\n};\n\n/**\n * A lifecycle event emitted by an invitation {@link Flow}. Terminal events are `success`,\n * `cancelled`, and `error`. Replaces polling on the legacy `Invitation.State` enum.\n */\nexport type Event =\n  | { readonly _tag: 'connecting' }\n  | { readonly _tag: 'connected' }\n  | { readonly _tag: 'readyForAuthentication'; readonly authCode?: string }\n  | { readonly _tag: 'authenticating' }\n  | { readonly _tag: 'success'; readonly result: Result }\n  | { readonly _tag: 'cancelled' }\n  | { readonly _tag: 'error'; readonly message: string };\n\n/**\n * An in-flight invitation, host or guest side. Produced by {@link Identity.share}/`join` and\n * {@link Space.share}/`join`; its lifecycle is then driven through this handle and the\n * {@link Service}.\n */\nexport interface Flow {\n  readonly id: string;\n  readonly kind: Kind;\n  /** Hot stream of lifecycle events; completes after a terminal event. */\n  readonly events: Stream.Stream<Event>;\n  /** Supply the auth code when the flow reaches `readyForAuthentication`. */\n  authenticate(code: string): Effect.Effect<void, InvitationError>;\n  /** Abort the flow. */\n  cancel(): Effect.Effect<void>;\n  /** Encoded, shareable invitation code (host side). */\n  readonly code: Effect.Effect<string>;\n}\n\n/**\n * Supply the auth code to a flow awaiting authentication. Flow verbs operate on a {@link Flow}\n * handle directly and require no service; the active-flow set is queried through\n * {@link Identity} (device invitations) and {@link Space} (space invitations).\n */\nexport const authenticate = (flow: Flow, code: string): Effect.Effect<void, InvitationError> => flow.authenticate(code);\n\n/** Abort a flow. */\nexport const cancel = (flow: Flow): Effect.Effect<void> => flow.cancel();\n\n/** Lifecycle event stream of a flow. */\nexport const events = (flow: Flow): Stream.Stream<Event> => flow.events;\n\n/** Encoded, shareable code for a flow. */\nexport const code = (flow: Flow): Effect.Effect<string> => flow.code;\n","//\n// Copyright 2026 DXOS.org\n//\n\n// @import-as-namespace\n\nimport * as Context from 'effect/Context';\nimport * as Effect from 'effect/Effect';\nimport * as Option from 'effect/Option';\nimport * as Schema from 'effect/Schema';\nimport * as Stream from 'effect/Stream';\n\nimport { IdentityDid, SpaceId } from '@dxos/keys';\n\nimport { type SpaceError } from './errors';\nimport * as Invitation from './Invitation';\n\n/**\n * Capability level granted to a space member, matching the Keyhive `Access` enum. Ordered; each\n * implies the previous: `pull` < `read` < `edit` < `admin`. Replaces the legacy\n * `SpaceMember.Role` enum.\n */\nexport const Access = Schema.Literal('pull', 'read', 'edit', 'admin');\nexport type Access = typeof Access.Type;\n\n/**\n * Lifecycle state of a space. Replaces the legacy `SpaceState` protobuf enum (subset relevant to\n * consumers).\n */\nexport const State = Schema.Literal('inactive', 'closed', 'ready');\nexport type State = typeof State.Type;\n\n/**\n * Who may join a space. Replaces the legacy `MembershipPolicy` protobuf enum: `invite` admits\n * members via invitation only; `locked` admits no new members.\n */\nexport const MembershipPolicy = Schema.Literal('invite', 'locked');\nexport type MembershipPolicy = typeof MembershipPolicy.Type;\n\n/**\n * Whether a space replicates through EDGE. Replaces the legacy `EdgeReplicationSetting` protobuf\n * enum.\n */\nexport const EdgeReplication = Schema.Literal('disabled', 'enabled');\nexport type EdgeReplication = typeof EdgeReplication.Type;\n\n/**\n * A space membership entry. Membership (HALO) only — liveness/presence is a separate concern\n * (see API_AUDIT.md §3.6).\n */\nexport const Member = Schema.Struct({\n  /** DID of the member identity, when known. */\n  did: Schema.optional(IdentityDid),\n  /** Hex-encoded identity key of the member, for avatar/presence keying. */\n  identityKey: Schema.optional(Schema.String),\n  displayName: Schema.optional(Schema.String),\n  /** Arbitrary profile metadata (e.g. avatar emoji, hue). */\n  data: Schema.optional(Schema.Record({ key: Schema.String, value: Schema.Any })),\n  role: Access,\n  /** Whether the member is currently online. */\n  online: Schema.Boolean,\n});\nexport type Member = typeof Member.Type;\n\n/**\n * Public view of a space. A plain snapshot — database access stays on the ECHO `Database`\n * service keyed by {@link SpaceId}, not on this value.\n */\nexport const Info = Schema.Struct({\n  id: SpaceId,\n  name: Schema.optional(Schema.String),\n  state: State,\n});\nexport type Info = typeof Info.Type;\n\n/**\n * A serialized space archive (export/import payload).\n */\nexport type Archive = {\n  readonly filename: string;\n  readonly contents: Uint8Array;\n};\n\nexport type CreateOptions = {\n  readonly name?: string;\n  /** Tags applied to the new space. */\n  readonly tags?: readonly string[];\n  /** Who may join the space (defaults to `invite`). */\n  readonly membershipPolicy?: MembershipPolicy;\n};\n\n/**\n * Space management and membership, plus space invitations. `share`/`join` construct\n * {@link Invitation.Flow}s driven through the {@link Invitation} flow verbs; `invitations`\n * observes the active (host-created) space-invitation flows.\n */\nexport class Service extends Context.Tag('@dxos/halo/Space')<\n  Service,\n  {\n    /**\n     * All spaces known to the local identity as a stream that emits the current set immediately\n     * on subscription. Take the first element for a one-shot read; subscribe for updates.\n     */\n    readonly spaces: Stream.Stream<readonly Info[]>;\n    /** Resolve a space by id. */\n    readonly get: (id: SpaceId) => Effect.Effect<Option.Option<Info>>;\n    /** Create a new space. */\n    readonly create: (options?: CreateOptions) => Effect.Effect<Info, SpaceError>;\n    /** Resolve once the space has reached the `ready` state. */\n    readonly waitReady: (id: SpaceId) => Effect.Effect<void, SpaceError>;\n    /** Enable or disable EDGE replication for a space. */\n    readonly setEdgeReplication: (id: SpaceId, setting: EdgeReplication) => Effect.Effect<void, SpaceError>;\n    /** A space's membership; emits the current set immediately, then on join/leave/role/presence. */\n    readonly members: (id: SpaceId) => Stream.Stream<readonly Member[]>;\n    /** Change a member's access level (Keyhive delegation). */\n    readonly updateMemberRole: (id: SpaceId, subject: IdentityDid, role: Access) => Effect.Effect<void, SpaceError>;\n    /** Remove a member (Keyhive revocation). */\n    readonly removeMember: (id: SpaceId, subject: IdentityDid) => Effect.Effect<void, SpaceError>;\n    /** Initiate a space invitation (host side). */\n    readonly share: (id: SpaceId, options?: Invitation.ShareOptions) => Effect.Effect<Invitation.Flow, SpaceError>;\n    /** Redeem a space-invitation code (guest side). */\n    readonly join: (code: string) => Effect.Effect<Invitation.Flow, SpaceError>;\n    /** A space's active (host-created) invitation flows; emits the current set immediately. */\n    readonly invitations: (id: SpaceId) => Stream.Stream<readonly Invitation.Flow[]>;\n    /** Export a space to an archive. */\n    readonly export: (id: SpaceId) => Effect.Effect<Archive, SpaceError>;\n    /** Import a space from an archive. */\n    readonly import: (archive: Archive, options?: { tags?: readonly string[] }) => Effect.Effect<Info, SpaceError>;\n  }\n>() {}\n\n/** All spaces as a current-value stream (requires {@link Service}). */\nexport const spaces: Stream.Stream<readonly Info[], never, Service> = Stream.unwrap(\n  Effect.map(Service, (service) => service.spaces),\n);\n\n/** Resolve a space by id (requires {@link Service}). */\nexport const get = (id: SpaceId): Effect.Effect<Option.Option<Info>, never, Service> =>\n  Effect.flatMap(Service, (service) => service.get(id));\n\n/** Create a new space (requires {@link Service}). */\nexport const create = (options?: CreateOptions): Effect.Effect<Info, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.create(options));\n\n/** Resolve once the space is ready (requires {@link Service}). */\nexport const waitReady = (id: SpaceId): Effect.Effect<void, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.waitReady(id));\n\n/** Enable or disable EDGE replication for a space (requires {@link Service}). */\nexport const setEdgeReplication = (id: SpaceId, setting: EdgeReplication): Effect.Effect<void, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.setEdgeReplication(id, setting));\n\n/** A space's membership as a current-value stream (requires {@link Service}). */\nexport const members = (id: SpaceId): Stream.Stream<readonly Member[], never, Service> =>\n  Stream.unwrap(Effect.map(Service, (service) => service.members(id)));\n\n/** Change a member's access level (requires {@link Service}). */\nexport const updateMemberRole = (\n  id: SpaceId,\n  subject: IdentityDid,\n  role: Access,\n): Effect.Effect<void, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.updateMemberRole(id, subject, role));\n\n/** Remove a member (requires {@link Service}). */\nexport const removeMember = (id: SpaceId, subject: IdentityDid): Effect.Effect<void, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.removeMember(id, subject));\n\n/** Initiate a space invitation (requires {@link Service}). */\nexport const share = (\n  id: SpaceId,\n  options?: Invitation.ShareOptions,\n): Effect.Effect<Invitation.Flow, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.share(id, options));\n\n/** Redeem a space-invitation code (requires {@link Service}). */\nexport const join = (code: string): Effect.Effect<Invitation.Flow, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.join(code));\n\n/** A space's active invitation flows as a current-value stream (requires {@link Service}). */\nexport const invitations = (id: SpaceId): Stream.Stream<readonly Invitation.Flow[], never, Service> =>\n  Stream.unwrap(Effect.map(Service, (service) => service.invitations(id)));\n\n/** Export a space to an archive (requires {@link Service}). */\nexport const exportSpace = (id: SpaceId): Effect.Effect<Archive, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.export(id));\n\n/** Import a space from an archive (requires {@link Service}). */\nexport const importSpace = (\n  archive: Archive,\n  options?: { tags?: readonly string[] },\n): Effect.Effect<Info, SpaceError, Service> => Effect.flatMap(Service, (service) => service.import(archive, options));\n","//\n// Copyright 2026 DXOS.org\n//\n\nimport { BaseError } from '@dxos/errors';\n\n/**\n * The acting principal lacks the capability required for the operation\n * (e.g. delegating access above their own level, or revoking without causal seniority).\n */\nexport class NotAuthorizedError extends BaseError.extend('NotAuthorizedError', 'Not authorized') {}\n\n/**\n * The referenced principal (individual or group) is not known to the service.\n */\nexport class UnknownPrincipalError extends BaseError.extend('UnknownPrincipalError', 'Unknown principal') {}\n\n/**\n * A signed payload failed signature verification or its id does not match its key.\n */\nexport class InvalidSignatureError extends BaseError.extend('InvalidSignatureError', 'Invalid signature') {}\n\n/**\n * A membership operation references causal predecessors that have not been received.\n */\nexport class MissingDependencyError extends BaseError.extend('MissingDependencyError', 'Missing dependency') {}\n\n/**\n * An identity/device operation (create, recover, profile/device update, device invitation) failed.\n */\nexport class IdentityError extends BaseError.extend('IdentityError', 'Identity operation failed') {}\n\n/**\n * A space operation (create, query, membership, invitation, export/import) failed.\n */\nexport class SpaceError extends BaseError.extend('SpaceError', 'Space operation failed') {}\n\n/**\n * An invitation-lifecycle operation (authenticate, cancel) failed.\n */\nexport class InvitationError extends BaseError.extend('InvitationError', 'Invitation operation failed') {}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,IAAa,aAAa,OAAO,QAAQ,WAAW,WAAW,UAAU,UAAU,SAAS,eAAe;;;;;;AAQ3G,IAAa,SAAO,OAAO,OAAO;CAChC,KAAK;;CAEL,aAAa,OAAO,SAAS,OAAO,MAAM;CAC1C,aAAa,OAAO,SAAS,OAAO,MAAM;;CAE1C,MAAM,OAAO,SAAS,OAAO,OAAO;EAAE,KAAK,OAAO;EAAQ,OAAO,OAAO;CAAI,CAAC,CAAC;AAChF,CAAC;;;;;AAOD,IAAa,aAAa,OAAO,OAAO;;CAEtC,KAAK,OAAO;CACZ,MAAM,OAAO,SAAS,UAAU;CAChC,OAAO,OAAO,SAAS,OAAO,MAAM;;CAEpC,SAAS,OAAO;AAClB,CAAC;;;;;AAOD,IAAa,aAAa,OAAO,OAAO;;CAEtC,IAAI,OAAO,SAAS,OAAO,MAAM;;CAEjC,MAAM,OAAO;CACb,cAAc,OAAO,SAAS,OAAO,YAAY;AACnD,CAAC;;;;;;AA2BD,IAAa,YAAb,cAA6B,QAAQ,IAAI,qBAAqB,CAAC,CA8C7D,CAAC,CAAC,CAAC;;AAGL,IAAa,WAA+D,OAAO,OACjF,OAAO,IAAI,YAAU,YAAY,QAAQ,QAAQ,CACnD;;AAGA,IAAa,cAAkE,OAAO,IAAI,YAAU,YAClG,QAAQ,YAAY,CACtB;;AAGA,IAAa,YAAU,YAG4B,OAAO,QAAQ,YAAU,YAAY,QAAQ,OAAO,OAAO,CAAC;;AAG/G,IAAa,WAAW,SACtB,OAAO,QAAQ,YAAU,YAAY,QAAQ,QAAQ,IAAI,CAAC;;AAG5D,IAAa,iBAAiB,YAGqB,OAAO,QAAQ,YAAU,YAAY,QAAQ,cAAc,OAAO,CAAC;;AAGtH,IAAa,UAAgE,OAAO,OAClF,OAAO,IAAI,YAAU,YAAY,QAAQ,OAAO,CAClD;;AAGA,IAAa,qBAA2E,OAAO,IAAI,YAAU,YAC3G,QAAQ,mBAAmB,CAC7B;;AAGA,IAAa,cAAoE,OAAO,OACtF,OAAO,IAAI,YAAU,YAAY,QAAQ,WAAW,CACtD;;AAGA,IAAa,sBAAsB,YACjC,OAAO,QAAQ,YAAU,YAAY,QAAQ,mBAAmB,OAAO,CAAC;;AAG1E,IAAa,WAAS,YACpB,OAAO,QAAQ,YAAU,YAAY,QAAQ,MAAM,OAAO,CAAC;;AAG7D,IAAa,UAAQ,SACnB,OAAO,QAAQ,YAAU,YAAY,QAAQ,KAAK,IAAI,CAAC;;AAGzD,IAAa,gBAAyE,OAAO,OAC3F,OAAO,IAAI,YAAU,YAAY,QAAQ,WAAW,CACtD;;;;;;;;;;;;;;AC7GA,IAAa,gBAAgB,MAAY,SAAuD,KAAK,aAAa,IAAI;;AAGtH,IAAa,UAAU,SAAoC,KAAK,OAAO;;AAGvE,IAAa,UAAU,SAAqC,KAAK;;AAGjE,IAAa,QAAQ,SAAsC,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACxEhE,IAAa,SAAS,OAAO,QAAQ,QAAQ,QAAQ,QAAQ,OAAO;;;;;AAOpE,IAAa,QAAQ,OAAO,QAAQ,YAAY,UAAU,OAAO;;;;;AAOjE,IAAa,mBAAmB,OAAO,QAAQ,UAAU,QAAQ;;;;;AAOjE,IAAa,kBAAkB,OAAO,QAAQ,YAAY,SAAS;;;;;AAOnE,IAAa,SAAS,OAAO,OAAO;;CAElC,KAAK,OAAO,SAAS,WAAW;;CAEhC,aAAa,OAAO,SAAS,OAAO,MAAM;CAC1C,aAAa,OAAO,SAAS,OAAO,MAAM;;CAE1C,MAAM,OAAO,SAAS,OAAO,OAAO;EAAE,KAAK,OAAO;EAAQ,OAAO,OAAO;CAAI,CAAC,CAAC;CAC9E,MAAM;;CAEN,QAAQ,OAAO;AACjB,CAAC;;;;;AAOD,IAAa,OAAO,OAAO,OAAO;CAChC,IAAI;CACJ,MAAM,OAAO,SAAS,OAAO,MAAM;CACnC,OAAO;AACT,CAAC;;;;;;AAwBD,IAAa,UAAb,cAA6B,QAAQ,IAAI,kBAAkB,CAAC,CAiC1D,CAAC,CAAC,CAAC;;AAGL,IAAa,SAAyD,OAAO,OAC3E,OAAO,IAAI,UAAU,YAAY,QAAQ,MAAM,CACjD;;AAGA,IAAa,OAAO,OAClB,OAAO,QAAQ,UAAU,YAAY,QAAQ,IAAI,EAAE,CAAC;;AAGtD,IAAa,UAAU,YACrB,OAAO,QAAQ,UAAU,YAAY,QAAQ,OAAO,OAAO,CAAC;;AAG9D,IAAa,aAAa,OACxB,OAAO,QAAQ,UAAU,YAAY,QAAQ,UAAU,EAAE,CAAC;;AAG5D,IAAa,sBAAsB,IAAa,YAC9C,OAAO,QAAQ,UAAU,YAAY,QAAQ,mBAAmB,IAAI,OAAO,CAAC;;AAG9E,IAAa,WAAW,OACtB,OAAO,OAAO,OAAO,IAAI,UAAU,YAAY,QAAQ,QAAQ,EAAE,CAAC,CAAC;;AAGrE,IAAa,oBACX,IACA,SACA,SAEA,OAAO,QAAQ,UAAU,YAAY,QAAQ,iBAAiB,IAAI,SAAS,IAAI,CAAC;;AAGlF,IAAa,gBAAgB,IAAa,YACxC,OAAO,QAAQ,UAAU,YAAY,QAAQ,aAAa,IAAI,OAAO,CAAC;;AAGxE,IAAa,SACX,IACA,YAEA,OAAO,QAAQ,UAAU,YAAY,QAAQ,MAAM,IAAI,OAAO,CAAC;;AAGjE,IAAa,QAAQ,SACnB,OAAO,QAAQ,UAAU,YAAY,QAAQ,KAAK,IAAI,CAAC;;AAGzD,IAAa,eAAe,OAC1B,OAAO,OAAO,OAAO,IAAI,UAAU,YAAY,QAAQ,YAAY,EAAE,CAAC,CAAC;;AAGzE,IAAa,eAAe,OAC1B,OAAO,QAAQ,UAAU,YAAY,QAAQ,OAAO,EAAE,CAAC;;AAGzD,IAAa,eACX,SACA,YAC6C,OAAO,QAAQ,UAAU,YAAY,QAAQ,OAAO,SAAS,OAAO,CAAC;;;;;;;ACrLpH,IAAa,qBAAb,cAAwC,UAAU,OAAO,sBAAsB,gBAAgB,CAAC,CAAC,CAAC;;;;AAKlG,IAAa,wBAAb,cAA2C,UAAU,OAAO,yBAAyB,mBAAmB,CAAC,CAAC,CAAC;;;;AAK3G,IAAa,wBAAb,cAA2C,UAAU,OAAO,yBAAyB,mBAAmB,CAAC,CAAC,CAAC;;;;AAK3G,IAAa,yBAAb,cAA4C,UAAU,OAAO,0BAA0B,oBAAoB,CAAC,CAAC,CAAC;;;;AAK9G,IAAa,gBAAb,cAAmC,UAAU,OAAO,iBAAiB,2BAA2B,CAAC,CAAC,CAAC;;;;AAKnG,IAAa,aAAb,cAAgC,UAAU,OAAO,cAAc,wBAAwB,CAAC,CAAC,CAAC;;;;AAK1F,IAAa,kBAAb,cAAqC,UAAU,OAAO,mBAAmB,6BAA6B,CAAC,CAAC,CAAC"}