@dxos/halo 0.0.0

package/SPEC.mdl

@@ -0,0 +1,137 @@
+---
+id: org.dxos.halo
+name: Halo
+version: 0.1.0
+---
+
+HALO identity, device, space, and invitation model — **definitions only**. This package
+exports Effect service tags, their interfaces, verbs, and ECHO schemas; concrete
+implementations ship as separate layers (e.g. `@dxos/halo-adapter-client` over `@dxos/client`).
+See `API_AUDIT.md` for the consumer audit and `MIGRATION.md` for the HALO → Keyhive plan.
+
+The `Invitation` module holds invitation types and flow-level verbs only (no service tag);
+`Identity` and `Space` own invitation initiation (`share`/`join`) and querying of the active set
+(`invitations`) — device invitations on `Identity`, space invitations on `Space`.
+
+Modules follow the DXOS namespace-module styleguide: PascalCase file in `src/`, marked
+`// @import-as-namespace`, re-exported from `index.ts` as `export * as <Name> from './<Name>'`,
+and consumed as a namespace (`Identity.identity`, never a bare `identityCurrent`).
+
+## Extensions
+
+| Term      | URI                          |
+| --------- | ---------------------------- |
+| `module`  | `org.dxos.mdl.module@1.0`    |
+
+## Modules
+
+### Modules (`Identity` & `Space` are services; `Invitation` is types + flow verbs)
+
+```mdl
+module Identity
+  desc: |
+    Identity and device management, plus device-invitation initiation. `share`/`join` return an
+    `Invitation.Flow`; the flow's lifecycle is driven through `Invitation`. Depends on Invitation.
+  api:
+    # Service
+    Service: Context.Tag                 # the Effect service tag ('@dxos/halo/Identity').
+
+    # Schemas / types
+    Info: Schema.Struct                  # { did: IdentityDid; displayName? } — local identity view.
+    DeviceKind: 'unknown' | 'browser' | 'native' | 'mobile' | 'agent' | 'agent-managed'
+    DeviceInfo: Schema.Struct            # { key; kind?; label?; current } — a device.
+    RecoverArgs: union                   # { recoveryCode } | { token } | { recoveryProof }.
+
+    # Reads — current-value Streams (emit current immediately; take the head for a one-shot read)
+    identity: Stream                     # reactive Option<Info>.
+    devices: Stream                      # reactive readonly DeviceInfo[].
+    invitations: Stream                  # reactive active device-invitation flows.
+
+    # Effects requiring Service
+    create: (options?) => Effect         # create identity (+ first device).
+    recover: (RecoverArgs) => Effect     # re-admit a device via a recovery credential.
+    updateProfile: (profile) => Effect
+    share: (options?: Invitation.ShareOptions) => Effect  # device invitation → Invitation.Flow.
+    join: (code) => Effect               # device join → Invitation.Flow.
+```
+
+```mdl
+module Space
+  desc: |
+    Space management and membership, plus space-invitation initiation. `Info` is a plain snapshot
+    — ECHO database access stays on `@dxos/echo` keyed by SpaceId. Depends on Invitation.
+  api:
+    # Service
+    Service: Context.Tag                 # the Effect service tag ('@dxos/halo/Space').
+
+    # Schemas / types
+    State: 'inactive' | 'closed' | 'ready'
+    Access: 'pull' | 'read' | 'edit' | 'admin'
+    MembershipPolicy: 'invite' | 'locked'
+    EdgeReplication: 'disabled' | 'enabled'
+    Member: Schema.Struct                # { did?; role: Access; online }.
+    Info: Schema.Struct                  # { id: SpaceId; name?; state }.
+    Archive: { filename; contents }      # export / import payload.
+
+    # Reads — current-value Streams (emit current immediately; take the head for a one-shot read)
+    spaces: Stream                       # reactive readonly Info[].
+    members: (id) => Stream              # reactive readonly Member[].
+    invitations: (id) => Stream          # reactive active space-invitation flows.
+
+    # Effects requiring Service
+    get: (id) => Effect                  # resolve a space by id (Option<Info>).
+    create: (options?) => Effect         # options: { name?; tags?; membershipPolicy? }.
+    waitReady: (id) => Effect            # resolve once the space is ready.
+    setEdgeReplication: (id, setting) => Effect  # toggle EDGE replication.
+    updateMemberRole: (id, subject, role) => Effect  # Keyhive delegation.
+    removeMember: (id, subject) => Effect            # Keyhive revocation.
+    share: (id, options?: Invitation.ShareOptions) => Effect  # space invitation → Invitation.Flow.
+    join: (code) => Effect               # space join → Invitation.Flow.
+    exportSpace / importSpace
+```
+
+```mdl
+module Invitation
+  desc: |
+    Invitation types + flow-level verbs only — no service tag. Does NOT initiate invitations nor
+    query the active set (both live on Identity/Space). Models the legacy interactive state
+    machine as a tagged event stream on a Flow handle.
+  api:
+    # Schemas / types
+    Kind: 'device' | 'space'
+    AuthMethod: 'none' | 'shared-secret' | 'known-public-key'
+    Type: 'interactive' | 'delegated' | 'multiuse'
+    ShareOptions: { authMethod?; type?; multiUse?; target? }
+    Event: union                         # connecting → readyForAuthentication → success | cancelled | error.
+    Flow: interface                      # { id; kind; events: Stream<Event>; authenticate; cancel; code }.
+
+    # Flow verbs (operate on a Flow; require no service)
+    authenticate: (Flow, code) => Effect # supply the auth code to an in-flight flow.
+    cancel: (Flow) => Effect
+    events: (Flow) => Stream<Event>
+    code: (Flow) => Effect               # encoded, shareable invitation code.
+```
+
+The value types the services need are inlined into their modules (`Identity.DeviceKind` /
+`Identity.Info`, `Space.Access` / `Space.Member`) rather than living in separate schema modules,
+keeping the package to the two service surfaces (`Identity`, `Space`) plus the serviceless
+`Invitation` module.
+
+---
+
+## Appendix: Extension Definitions
+
+```mdl
+ext module
+  uri: org.dxos.mdl.module@1.0
+  desc: |
+    An ESM namespace module following the DXOS namespace-module styleguide: PascalCase file in
+    src/, marked `// @import-as-namespace`, and re-exported from index.ts as
+    `export * as <Name> from './<Name>'`. Callers import it as a namespace, so members are
+    unprefixed (`Identity.Info`, not `IdentityInfo`). The file path is inferred from the block
+    name (`Identity` → `src/Identity.ts`).
+  styleguide: ../../../../docs/style/namespace-modules.md
+  fields:
+    desc?: Prose
+    api: ApiMap         # public members reached as `<Name>.<member>`  (name: TypeExpr # comment)
+```

package/dist/lib/neutral/index.mjs

@@ -0,0 +1,186 @@
+import "@dxos/node-std/globals";
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+// src/Identity.ts
+var Identity_exports = {};
+__export(Identity_exports, {
+  Credential: () => Credential,
+  DeviceInfo: () => DeviceInfo,
+  DeviceKind: () => DeviceKind,
+  Info: () => Info,
+  Service: () => Service,
+  create: () => create,
+  credentials: () => credentials,
+  devices: () => devices,
+  getDevicesSnapshot: () => getDevicesSnapshot,
+  getSnapshot: () => getSnapshot,
+  grantServiceAccess: () => grantServiceAccess,
+  identity: () => identity,
+  invitations: () => invitations,
+  join: () => join,
+  recover: () => recover,
+  share: () => share,
+  updateProfile: () => updateProfile
+});
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import * as Stream from "effect/Stream";
+import { IdentityDid } from "@dxos/keys";
+var DeviceKind = Schema.Literal("unknown", "browser", "native", "mobile", "agent", "agent-managed");
+var Info = Schema.Struct({
+  did: IdentityDid,
+  /** Hex-encoded identity (credential) key, when known. */
+  identityKey: Schema.optional(Schema.String),
+  displayName: Schema.optional(Schema.String),
+  /** Arbitrary profile metadata. */
+  data: Schema.optional(Schema.Record({
+    key: Schema.String,
+    value: Schema.Any
+  }))
+});
+var DeviceInfo = Schema.Struct({
+  /** Hex-encoded device key. */
+  key: Schema.String,
+  kind: Schema.optional(DeviceKind),
+  label: Schema.optional(Schema.String),
+  /** Whether this device is the local (current) device. */
+  current: Schema.Boolean
+});
+var Credential = Schema.Struct({
+  /** Hex-encoded credential id, when assigned. */
+  id: Schema.optional(Schema.String),
+  /** The subject assertion's `@type` (e.g. `dxos.halo.credentials.IdentityRecovery`). */
+  type: Schema.String,
+  issuanceDate: Schema.optional(Schema.DateFromSelf)
+});
+var Service = class extends Context.Tag("@dxos/halo/Identity")() {
+};
+var identity = Stream.unwrap(Effect.map(Service, (service) => service.identity));
+var getSnapshot = Effect.map(Service, (service) => service.getSnapshot());
+var create = (options) => Effect.flatMap(Service, (service) => service.create(options));
+var recover = (args) => Effect.flatMap(Service, (service) => service.recover(args));
+var updateProfile = (profile) => Effect.flatMap(Service, (service) => service.updateProfile(profile));
+var devices = Stream.unwrap(Effect.map(Service, (service) => service.devices));
+var getDevicesSnapshot = Effect.map(Service, (service) => service.getDevicesSnapshot());
+var credentials = Stream.unwrap(Effect.map(Service, (service) => service.credentials));
+var grantServiceAccess = (options) => Effect.flatMap(Service, (service) => service.grantServiceAccess(options));
+var share = (options) => Effect.flatMap(Service, (service) => service.share(options));
+var join = (code2) => Effect.flatMap(Service, (service) => service.join(code2));
+var invitations = Stream.unwrap(Effect.map(Service, (service) => service.invitations));
+
+// src/Invitation.ts
+var Invitation_exports = {};
+__export(Invitation_exports, {
+  authenticate: () => authenticate,
+  cancel: () => cancel,
+  code: () => code,
+  events: () => events
+});
+var authenticate = (flow, code2) => flow.authenticate(code2);
+var cancel = (flow) => flow.cancel();
+var events = (flow) => flow.events;
+var code = (flow) => flow.code;
+
+// src/Space.ts
+var Space_exports = {};
+__export(Space_exports, {
+  Access: () => Access,
+  EdgeReplication: () => EdgeReplication,
+  Info: () => Info2,
+  Member: () => Member,
+  MembershipPolicy: () => MembershipPolicy,
+  Service: () => Service2,
+  State: () => State,
+  create: () => create2,
+  exportSpace: () => exportSpace,
+  get: () => get,
+  importSpace: () => importSpace,
+  invitations: () => invitations2,
+  join: () => join2,
+  members: () => members,
+  removeMember: () => removeMember,
+  setEdgeReplication: () => setEdgeReplication,
+  share: () => share2,
+  spaces: () => spaces,
+  updateMemberRole: () => updateMemberRole,
+  waitReady: () => waitReady
+});
+import * as Context2 from "effect/Context";
+import * as Effect2 from "effect/Effect";
+import * as Schema2 from "effect/Schema";
+import * as Stream2 from "effect/Stream";
+import { IdentityDid as IdentityDid2, SpaceId } from "@dxos/keys";
+var Access = Schema2.Literal("pull", "read", "edit", "admin");
+var State = Schema2.Literal("inactive", "closed", "ready");
+var MembershipPolicy = Schema2.Literal("invite", "locked");
+var EdgeReplication = Schema2.Literal("disabled", "enabled");
+var Member = Schema2.Struct({
+  /** DID of the member identity, when known. */
+  did: Schema2.optional(IdentityDid2),
+  /** Hex-encoded identity key of the member, for avatar/presence keying. */
+  identityKey: Schema2.optional(Schema2.String),
+  displayName: Schema2.optional(Schema2.String),
+  /** Arbitrary profile metadata (e.g. avatar emoji, hue). */
+  data: Schema2.optional(Schema2.Record({
+    key: Schema2.String,
+    value: Schema2.Any
+  })),
+  role: Access,
+  /** Whether the member is currently online. */
+  online: Schema2.Boolean
+});
+var Info2 = Schema2.Struct({
+  id: SpaceId,
+  name: Schema2.optional(Schema2.String),
+  state: State
+});
+var Service2 = class extends Context2.Tag("@dxos/halo/Space")() {
+};
+var spaces = Stream2.unwrap(Effect2.map(Service2, (service) => service.spaces));
+var get = (id) => Effect2.flatMap(Service2, (service) => service.get(id));
+var create2 = (options) => Effect2.flatMap(Service2, (service) => service.create(options));
+var waitReady = (id) => Effect2.flatMap(Service2, (service) => service.waitReady(id));
+var setEdgeReplication = (id, setting) => Effect2.flatMap(Service2, (service) => service.setEdgeReplication(id, setting));
+var members = (id) => Stream2.unwrap(Effect2.map(Service2, (service) => service.members(id)));
+var updateMemberRole = (id, subject, role) => Effect2.flatMap(Service2, (service) => service.updateMemberRole(id, subject, role));
+var removeMember = (id, subject) => Effect2.flatMap(Service2, (service) => service.removeMember(id, subject));
+var share2 = (id, options) => Effect2.flatMap(Service2, (service) => service.share(id, options));
+var join2 = (code2) => Effect2.flatMap(Service2, (service) => service.join(code2));
+var invitations2 = (id) => Stream2.unwrap(Effect2.map(Service2, (service) => service.invitations(id)));
+var exportSpace = (id) => Effect2.flatMap(Service2, (service) => service.export(id));
+var importSpace = (archive, options) => Effect2.flatMap(Service2, (service) => service.import(archive, options));
+
+// src/errors.ts
+import { BaseError } from "@dxos/errors";
+var NotAuthorizedError = class extends BaseError.extend("NotAuthorizedError", "Not authorized") {
+};
+var UnknownPrincipalError = class extends BaseError.extend("UnknownPrincipalError", "Unknown principal") {
+};
+var InvalidSignatureError = class extends BaseError.extend("InvalidSignatureError", "Invalid signature") {
+};
+var MissingDependencyError = class extends BaseError.extend("MissingDependencyError", "Missing dependency") {
+};
+var IdentityError = class extends BaseError.extend("IdentityError", "Identity operation failed") {
+};
+var SpaceError = class extends BaseError.extend("SpaceError", "Space operation failed") {
+};
+var InvitationError = class extends BaseError.extend("InvitationError", "Invitation operation failed") {
+};
+export {
+  Identity_exports as Identity,
+  IdentityError,
+  InvalidSignatureError,
+  Invitation_exports as Invitation,
+  InvitationError,
+  MissingDependencyError,
+  NotAuthorizedError,
+  Space_exports as Space,
+  SpaceError,
+  UnknownPrincipalError
+};
+//# sourceMappingURL=index.mjs.map

package/dist/lib/neutral/index.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/Identity.ts", "../../../src/Invitation.ts", "../../../src/Space.ts", "../../../src/errors.ts"],
+  "sourcesContent": ["//\n// Copyright 2026 DXOS.org\n//\n\n// @import-as-namespace\n\nimport * as Context from 'effect/Context';\nimport * as Effect from 'effect/Effect';\nimport * as Option from 'effect/Option';\nimport * as Schema from 'effect/Schema';\nimport * as Stream from 'effect/Stream';\n\nimport { IdentityDid } from '@dxos/keys';\n\nimport { type IdentityError } from './errors';\nimport * as Invitation from './Invitation';\n\n/**\n * Device kind (platform / host class). Replaces the legacy protobuf `DeviceType` enum;\n * `agent`/`agent-managed` denote EDGE- or Hub-hosted agent devices.\n */\nexport const DeviceKind = Schema.Literal('unknown', 'browser', 'native', 'mobile', 'agent', 'agent-managed');\nexport type DeviceKind = typeof DeviceKind.Type;\n\n/**\n * Public view of the local identity. Keyed by the DID; `identityKey` (hex) is retained for\n * consumers that seed deterministic UI (avatar/hue) or address the legacy credential key.\n * `data` carries arbitrary profile metadata (e.g. avatar emoji, hue).\n */\nexport const Info = Schema.Struct({\n  did: IdentityDid,\n  /** Hex-encoded identity (credential) key, when known. */\n  identityKey: Schema.optional(Schema.String),\n  displayName: Schema.optional(Schema.String),\n  /** Arbitrary profile metadata. */\n  data: Schema.optional(Schema.Record({ key: Schema.String, value: Schema.Any })),\n});\nexport type Info = typeof Info.Type;\n\n/**\n * Public view of a device belonging to the local identity. Replaces the legacy `Device` proxy\n * type (`deviceKey` → `key`).\n */\nexport const DeviceInfo = Schema.Struct({\n  /** Hex-encoded device key. */\n  key: Schema.String,\n  kind: Schema.optional(DeviceKind),\n  label: Schema.optional(Schema.String),\n  /** Whether this device is the local (current) device. */\n  current: Schema.Boolean,\n});\nexport type DeviceInfo = typeof DeviceInfo.Type;\n\n/**\n * Public view of a HALO credential. Replaces direct consumption of the protobuf `Credential`:\n * `type` is the subject assertion's `@type`, `id` its hex-encoded credential id.\n */\nexport const Credential = Schema.Struct({\n  /** Hex-encoded credential id, when assigned. */\n  id: Schema.optional(Schema.String),\n  /** The subject assertion's `@type` (e.g. `dxos.halo.credentials.IdentityRecovery`). */\n  type: Schema.String,\n  issuanceDate: Schema.optional(Schema.DateFromSelf),\n});\nexport type Credential = typeof Credential.Type;\n\n/**\n * Options for a self-issued `ServiceAccess` credential granting the identity access to an\n * EDGE/Hub service.\n */\nexport type ServiceAccessOptions = {\n  /** Target server name (e.g. `hub.dxos.network`). */\n  readonly serverName: string;\n  /** Capabilities to grant (e.g. `['composer:beta']`). */\n  readonly capabilities: readonly string[];\n};\n\n/**\n * Recovery credential presented to re-admit a device to an existing identity.\n */\nexport type RecoverArgs =\n  | { readonly recoveryCode: string }\n  | { readonly token: string }\n  | { readonly recoveryProof: string };\n\n/**\n * Identity and device management, plus device invitations. `share`/`join` construct\n * {@link Invitation.Flow}s driven through the {@link Invitation} flow verbs; `invitations`\n * observes the active (host-created) device-invitation flows.\n */\nexport class Service extends Context.Tag('@dxos/halo/Identity')<\n  Service,\n  {\n    /**\n     * The local identity (`Option.none` when none exists) as a stream that emits the current\n     * value immediately on subscription. Take the first element for a one-shot read; subscribe\n     * for updates.\n     */\n    readonly identity: Stream.Stream<Option.Option<Info>>;\n    /**\n     * Synchronous snapshot of the local identity (`Option.none` when none exists). For imperative\n     * callers (non-React, non-Effect) that need the current value without subscribing.\n     */\n    readonly getSnapshot: () => Option.Option<Info>;\n    /**\n     * Subscribe to local-identity changes (imperative). Invokes `callback` immediately with the\n     * current value, then on each change. Returns an unsubscribe function.\n     */\n    readonly subscribe: (callback: (identity: Option.Option<Info>) => void) => () => void;\n    /** Create the local identity (and its first device). */\n    readonly create: (options?: { displayName?: string; deviceLabel?: string }) => Effect.Effect<Info, IdentityError>;\n    /** Re-admit this device to an existing identity via a recovery credential. */\n    readonly recover: (args: RecoverArgs) => Effect.Effect<Info, IdentityError>;\n    /** Update the identity profile. */\n    readonly updateProfile: (profile: {\n      displayName?: string;\n      data?: Record<string, unknown>;\n    }) => Effect.Effect<Info, IdentityError>;\n    /** Devices belonging to the local identity; emits the current set immediately. */\n    readonly devices: Stream.Stream<readonly DeviceInfo[]>;\n    /** Synchronous snapshot of the local identity's devices, for imperative callers. */\n    readonly getDevicesSnapshot: () => readonly DeviceInfo[];\n    /** HALO credentials of the local identity; emits the current set immediately. */\n    readonly credentials: Stream.Stream<readonly Credential[]>;\n    /**\n     * Grant this identity access to an EDGE/Hub service by writing a `ServiceAccess` credential\n     * (self-issued). Replaces hand-constructing the protobuf credential at the call site.\n     */\n    readonly grantServiceAccess: (options: ServiceAccessOptions) => Effect.Effect<void, IdentityError>;\n    /** Initiate a device invitation (host side). */\n    readonly share: (options?: Invitation.ShareOptions) => Effect.Effect<Invitation.Flow, IdentityError>;\n    /** Redeem a device-invitation code on a new device (guest side). */\n    readonly join: (code: string) => Effect.Effect<Invitation.Flow, IdentityError>;\n    /** Active (host-created) device-invitation flows; emits the current set immediately. */\n    readonly invitations: Stream.Stream<readonly Invitation.Flow[]>;\n  }\n>() {}\n\n/** The local identity as a current-value stream (requires {@link Service}). */\nexport const identity: Stream.Stream<Option.Option<Info>, never, Service> = Stream.unwrap(\n  Effect.map(Service, (service) => service.identity),\n);\n\n/** Synchronous snapshot of the local identity (requires {@link Service}). */\nexport const getSnapshot: Effect.Effect<Option.Option<Info>, never, Service> = Effect.map(Service, (service) =>\n  service.getSnapshot(),\n);\n\n/** Create the local identity (requires {@link Service}). */\nexport const create = (options?: {\n  displayName?: string;\n  deviceLabel?: string;\n}): Effect.Effect<Info, IdentityError, Service> => Effect.flatMap(Service, (service) => service.create(options));\n\n/** Re-admit this device via a recovery credential (requires {@link Service}). */\nexport const recover = (args: RecoverArgs): Effect.Effect<Info, IdentityError, Service> =>\n  Effect.flatMap(Service, (service) => service.recover(args));\n\n/** Update the identity profile (requires {@link Service}). */\nexport const updateProfile = (profile: {\n  displayName?: string;\n  data?: Record<string, unknown>;\n}): Effect.Effect<Info, IdentityError, Service> => Effect.flatMap(Service, (service) => service.updateProfile(profile));\n\n/** Devices belonging to the local identity as a current-value stream (requires {@link Service}). */\nexport const devices: Stream.Stream<readonly DeviceInfo[], never, Service> = Stream.unwrap(\n  Effect.map(Service, (service) => service.devices),\n);\n\n/** Synchronous snapshot of the local identity's devices (requires {@link Service}). */\nexport const getDevicesSnapshot: Effect.Effect<readonly DeviceInfo[], never, Service> = Effect.map(Service, (service) =>\n  service.getDevicesSnapshot(),\n);\n\n/** HALO credentials as a current-value stream (requires {@link Service}). */\nexport const credentials: Stream.Stream<readonly Credential[], never, Service> = Stream.unwrap(\n  Effect.map(Service, (service) => service.credentials),\n);\n\n/** Grant the identity access to an EDGE/Hub service (requires {@link Service}). */\nexport const grantServiceAccess = (options: ServiceAccessOptions): Effect.Effect<void, IdentityError, Service> =>\n  Effect.flatMap(Service, (service) => service.grantServiceAccess(options));\n\n/** Initiate a device invitation (requires {@link Service}). */\nexport const share = (options?: Invitation.ShareOptions): Effect.Effect<Invitation.Flow, IdentityError, Service> =>\n  Effect.flatMap(Service, (service) => service.share(options));\n\n/** Redeem a device-invitation code (requires {@link Service}). */\nexport const join = (code: string): Effect.Effect<Invitation.Flow, IdentityError, Service> =>\n  Effect.flatMap(Service, (service) => service.join(code));\n\n/** Active device-invitation flows as a current-value stream (requires {@link Service}). */\nexport const invitations: Stream.Stream<readonly Invitation.Flow[], never, Service> = Stream.unwrap(\n  Effect.map(Service, (service) => service.invitations),\n);\n", "//\n// Copyright 2026 DXOS.org\n//\n\n// @import-as-namespace\n\nimport * as Effect from 'effect/Effect';\nimport * as Stream from 'effect/Stream';\n\nimport { type IdentityDid, type SpaceId } from '@dxos/keys';\n\nimport { type InvitationError } from './errors';\n\n/**\n * Whether an invitation admits a device to an identity or a member to a space.\n */\nexport type Kind = 'device' | 'space';\n\n/**\n * How a guest proves it may redeem the invitation.\n * Mirrors the legacy `Invitation.AuthMethod` protobuf enum.\n */\nexport type AuthMethod = 'none' | 'shared-secret' | 'known-public-key';\n\n/**\n * Interactive (online host+guest handshake) vs delegated (offline-redeemable) invitation.\n * Mirrors the legacy `Invitation.Type` protobuf enum.\n */\nexport type Type = 'interactive' | 'delegated' | 'multiuse';\n\n/**\n * Options for initiating an invitation. Passed to {@link Identity.share} / {@link Space.share}.\n */\nexport type ShareOptions = {\n  readonly authMethod?: AuthMethod;\n  readonly type?: Type;\n  readonly multiUse?: boolean;\n  /** Restrict a `known-public-key` invitation to a specific guest (key/DID). */\n  readonly target?: string;\n};\n\n/**\n * Outcome of a completed invitation flow.\n */\nexport type Result = {\n  readonly spaceId?: SpaceId;\n  readonly identityDid?: IdentityDid;\n};\n\n/**\n * A lifecycle event emitted by an invitation {@link Flow}. Terminal events are `success`,\n * `cancelled`, and `error`. Replaces polling on the legacy `Invitation.State` enum.\n */\nexport type Event =\n  | { readonly _tag: 'connecting' }\n  | { readonly _tag: 'connected' }\n  | { readonly _tag: 'readyForAuthentication'; readonly authCode?: string }\n  | { readonly _tag: 'authenticating' }\n  | { readonly _tag: 'success'; readonly result: Result }\n  | { readonly _tag: 'cancelled' }\n  | { readonly _tag: 'error'; readonly message: string };\n\n/**\n * An in-flight invitation, host or guest side. Produced by {@link Identity.share}/`join` and\n * {@link Space.share}/`join`; its lifecycle is then driven through this handle and the\n * {@link Service}.\n */\nexport interface Flow {\n  readonly id: string;\n  readonly kind: Kind;\n  /** Hot stream of lifecycle events; completes after a terminal event. */\n  readonly events: Stream.Stream<Event>;\n  /** Supply the auth code when the flow reaches `readyForAuthentication`. */\n  authenticate(code: string): Effect.Effect<void, InvitationError>;\n  /** Abort the flow. */\n  cancel(): Effect.Effect<void>;\n  /** Encoded, shareable invitation code (host side). */\n  readonly code: Effect.Effect<string>;\n}\n\n/**\n * Supply the auth code to a flow awaiting authentication. Flow verbs operate on a {@link Flow}\n * handle directly and require no service; the active-flow set is queried through\n * {@link Identity} (device invitations) and {@link Space} (space invitations).\n */\nexport const authenticate = (flow: Flow, code: string): Effect.Effect<void, InvitationError> => flow.authenticate(code);\n\n/** Abort a flow. */\nexport const cancel = (flow: Flow): Effect.Effect<void> => flow.cancel();\n\n/** Lifecycle event stream of a flow. */\nexport const events = (flow: Flow): Stream.Stream<Event> => flow.events;\n\n/** Encoded, shareable code for a flow. */\nexport const code = (flow: Flow): Effect.Effect<string> => flow.code;\n", "//\n// Copyright 2026 DXOS.org\n//\n\n// @import-as-namespace\n\nimport * as Context from 'effect/Context';\nimport * as Effect from 'effect/Effect';\nimport * as Option from 'effect/Option';\nimport * as Schema from 'effect/Schema';\nimport * as Stream from 'effect/Stream';\n\nimport { IdentityDid, SpaceId } from '@dxos/keys';\n\nimport { type SpaceError } from './errors';\nimport * as Invitation from './Invitation';\n\n/**\n * Capability level granted to a space member, matching the Keyhive `Access` enum. Ordered; each\n * implies the previous: `pull` < `read` < `edit` < `admin`. Replaces the legacy\n * `SpaceMember.Role` enum.\n */\nexport const Access = Schema.Literal('pull', 'read', 'edit', 'admin');\nexport type Access = typeof Access.Type;\n\n/**\n * Lifecycle state of a space. Replaces the legacy `SpaceState` protobuf enum (subset relevant to\n * consumers).\n */\nexport const State = Schema.Literal('inactive', 'closed', 'ready');\nexport type State = typeof State.Type;\n\n/**\n * Who may join a space. Replaces the legacy `MembershipPolicy` protobuf enum: `invite` admits\n * members via invitation only; `locked` admits no new members.\n */\nexport const MembershipPolicy = Schema.Literal('invite', 'locked');\nexport type MembershipPolicy = typeof MembershipPolicy.Type;\n\n/**\n * Whether a space replicates through EDGE. Replaces the legacy `EdgeReplicationSetting` protobuf\n * enum.\n */\nexport const EdgeReplication = Schema.Literal('disabled', 'enabled');\nexport type EdgeReplication = typeof EdgeReplication.Type;\n\n/**\n * A space membership entry. Membership (HALO) only — liveness/presence is a separate concern\n * (see API_AUDIT.md §3.6).\n */\nexport const Member = Schema.Struct({\n  /** DID of the member identity, when known. */\n  did: Schema.optional(IdentityDid),\n  /** Hex-encoded identity key of the member, for avatar/presence keying. */\n  identityKey: Schema.optional(Schema.String),\n  displayName: Schema.optional(Schema.String),\n  /** Arbitrary profile metadata (e.g. avatar emoji, hue). */\n  data: Schema.optional(Schema.Record({ key: Schema.String, value: Schema.Any })),\n  role: Access,\n  /** Whether the member is currently online. */\n  online: Schema.Boolean,\n});\nexport type Member = typeof Member.Type;\n\n/**\n * Public view of a space. A plain snapshot — database access stays on the ECHO `Database`\n * service keyed by {@link SpaceId}, not on this value.\n */\nexport const Info = Schema.Struct({\n  id: SpaceId,\n  name: Schema.optional(Schema.String),\n  state: State,\n});\nexport type Info = typeof Info.Type;\n\n/**\n * A serialized space archive (export/import payload).\n */\nexport type Archive = {\n  readonly filename: string;\n  readonly contents: Uint8Array;\n};\n\nexport type CreateOptions = {\n  readonly name?: string;\n  /** Tags applied to the new space. */\n  readonly tags?: readonly string[];\n  /** Who may join the space (defaults to `invite`). */\n  readonly membershipPolicy?: MembershipPolicy;\n};\n\n/**\n * Space management and membership, plus space invitations. `share`/`join` construct\n * {@link Invitation.Flow}s driven through the {@link Invitation} flow verbs; `invitations`\n * observes the active (host-created) space-invitation flows.\n */\nexport class Service extends Context.Tag('@dxos/halo/Space')<\n  Service,\n  {\n    /**\n     * All spaces known to the local identity as a stream that emits the current set immediately\n     * on subscription. Take the first element for a one-shot read; subscribe for updates.\n     */\n    readonly spaces: Stream.Stream<readonly Info[]>;\n    /** Resolve a space by id. */\n    readonly get: (id: SpaceId) => Effect.Effect<Option.Option<Info>>;\n    /** Create a new space. */\n    readonly create: (options?: CreateOptions) => Effect.Effect<Info, SpaceError>;\n    /** Resolve once the space has reached the `ready` state. */\n    readonly waitReady: (id: SpaceId) => Effect.Effect<void, SpaceError>;\n    /** Enable or disable EDGE replication for a space. */\n    readonly setEdgeReplication: (id: SpaceId, setting: EdgeReplication) => Effect.Effect<void, SpaceError>;\n    /** A space's membership; emits the current set immediately, then on join/leave/role/presence. */\n    readonly members: (id: SpaceId) => Stream.Stream<readonly Member[]>;\n    /** Change a member's access level (Keyhive delegation). */\n    readonly updateMemberRole: (id: SpaceId, subject: IdentityDid, role: Access) => Effect.Effect<void, SpaceError>;\n    /** Remove a member (Keyhive revocation). */\n    readonly removeMember: (id: SpaceId, subject: IdentityDid) => Effect.Effect<void, SpaceError>;\n    /** Initiate a space invitation (host side). */\n    readonly share: (id: SpaceId, options?: Invitation.ShareOptions) => Effect.Effect<Invitation.Flow, SpaceError>;\n    /** Redeem a space-invitation code (guest side). */\n    readonly join: (code: string) => Effect.Effect<Invitation.Flow, SpaceError>;\n    /** A space's active (host-created) invitation flows; emits the current set immediately. */\n    readonly invitations: (id: SpaceId) => Stream.Stream<readonly Invitation.Flow[]>;\n    /** Export a space to an archive. */\n    readonly export: (id: SpaceId) => Effect.Effect<Archive, SpaceError>;\n    /** Import a space from an archive. */\n    readonly import: (archive: Archive, options?: { tags?: readonly string[] }) => Effect.Effect<Info, SpaceError>;\n  }\n>() {}\n\n/** All spaces as a current-value stream (requires {@link Service}). */\nexport const spaces: Stream.Stream<readonly Info[], never, Service> = Stream.unwrap(\n  Effect.map(Service, (service) => service.spaces),\n);\n\n/** Resolve a space by id (requires {@link Service}). */\nexport const get = (id: SpaceId): Effect.Effect<Option.Option<Info>, never, Service> =>\n  Effect.flatMap(Service, (service) => service.get(id));\n\n/** Create a new space (requires {@link Service}). */\nexport const create = (options?: CreateOptions): Effect.Effect<Info, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.create(options));\n\n/** Resolve once the space is ready (requires {@link Service}). */\nexport const waitReady = (id: SpaceId): Effect.Effect<void, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.waitReady(id));\n\n/** Enable or disable EDGE replication for a space (requires {@link Service}). */\nexport const setEdgeReplication = (id: SpaceId, setting: EdgeReplication): Effect.Effect<void, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.setEdgeReplication(id, setting));\n\n/** A space's membership as a current-value stream (requires {@link Service}). */\nexport const members = (id: SpaceId): Stream.Stream<readonly Member[], never, Service> =>\n  Stream.unwrap(Effect.map(Service, (service) => service.members(id)));\n\n/** Change a member's access level (requires {@link Service}). */\nexport const updateMemberRole = (\n  id: SpaceId,\n  subject: IdentityDid,\n  role: Access,\n): Effect.Effect<void, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.updateMemberRole(id, subject, role));\n\n/** Remove a member (requires {@link Service}). */\nexport const removeMember = (id: SpaceId, subject: IdentityDid): Effect.Effect<void, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.removeMember(id, subject));\n\n/** Initiate a space invitation (requires {@link Service}). */\nexport const share = (\n  id: SpaceId,\n  options?: Invitation.ShareOptions,\n): Effect.Effect<Invitation.Flow, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.share(id, options));\n\n/** Redeem a space-invitation code (requires {@link Service}). */\nexport const join = (code: string): Effect.Effect<Invitation.Flow, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.join(code));\n\n/** A space's active invitation flows as a current-value stream (requires {@link Service}). */\nexport const invitations = (id: SpaceId): Stream.Stream<readonly Invitation.Flow[], never, Service> =>\n  Stream.unwrap(Effect.map(Service, (service) => service.invitations(id)));\n\n/** Export a space to an archive (requires {@link Service}). */\nexport const exportSpace = (id: SpaceId): Effect.Effect<Archive, SpaceError, Service> =>\n  Effect.flatMap(Service, (service) => service.export(id));\n\n/** Import a space from an archive (requires {@link Service}). */\nexport const importSpace = (\n  archive: Archive,\n  options?: { tags?: readonly string[] },\n): Effect.Effect<Info, SpaceError, Service> => Effect.flatMap(Service, (service) => service.import(archive, options));\n", "//\n// Copyright 2026 DXOS.org\n//\n\nimport { BaseError } from '@dxos/errors';\n\n/**\n * The acting principal lacks the capability required for the operation\n * (e.g. delegating access above their own level, or revoking without causal seniority).\n */\nexport class NotAuthorizedError extends BaseError.extend('NotAuthorizedError', 'Not authorized') {}\n\n/**\n * The referenced principal (individual or group) is not known to the service.\n */\nexport class UnknownPrincipalError extends BaseError.extend('UnknownPrincipalError', 'Unknown principal') {}\n\n/**\n * A signed payload failed signature verification or its id does not match its key.\n */\nexport class InvalidSignatureError extends BaseError.extend('InvalidSignatureError', 'Invalid signature') {}\n\n/**\n * A membership operation references causal predecessors that have not been received.\n */\nexport class MissingDependencyError extends BaseError.extend('MissingDependencyError', 'Missing dependency') {}\n\n/**\n * An identity/device operation (create, recover, profile/device update, device invitation) failed.\n */\nexport class IdentityError extends BaseError.extend('IdentityError', 'Identity operation failed') {}\n\n/**\n * A space operation (create, query, membership, invitation, export/import) failed.\n */\nexport class SpaceError extends BaseError.extend('SpaceError', 'Space operation failed') {}\n\n/**\n * An invitation-lifecycle operation (authenticate, cancel) failed.\n */\nexport class InvitationError extends BaseError.extend('InvitationError', 'Invitation operation failed') {}\n"],
+  "mappings": ";;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;AAMA,YAAYA,aAAa;AACzB,YAAYC,YAAY;AAExB,YAAYC,YAAY;AACxB,YAAYC,YAAY;AAExB,SAASC,mBAAmB;AASrB,IAAMC,aAAoBC,eAAQ,WAAW,WAAW,UAAU,UAAU,SAAS,eAAA;AAQrF,IAAMC,OAAcC,cAAO;EAChCC,KAAKL;;EAELM,aAAoBC,gBAAgBC,aAAM;EAC1CC,aAAoBF,gBAAgBC,aAAM;;EAE1CE,MAAaH,gBAAgBI,cAAO;IAAEC,KAAYJ;IAAQK,OAAcC;EAAI,CAAA,CAAA;AAC9E,CAAA;AAOO,IAAMC,aAAoBX,cAAO;;EAEtCQ,KAAYJ;EACZQ,MAAaT,gBAASN,UAAAA;EACtBgB,OAAcV,gBAAgBC,aAAM;;EAEpCU,SAAgBC;AAClB,CAAA;AAOO,IAAMC,aAAoBhB,cAAO;;EAEtCiB,IAAWd,gBAAgBC,aAAM;;EAEjCc,MAAad;EACbe,cAAqBhB,gBAAgBiB,mBAAY;AACnD,CAAA;AA2BO,IAAMC,UAAN,cAA8BC,YAAI,qBAAA,EAAA,EAAA;AA8CpC;AAGE,IAAMC,WAAsEC,cAC1EC,WAAIJ,SAAS,CAACK,YAAYA,QAAQH,QAAQ,CAAA;AAI5C,IAAMI,cAAyEF,WAAIJ,SAAS,CAACK,YAClGA,QAAQC,YAAW,CAAA;AAId,IAAMC,SAAS,CAACC,YAGmCC,eAAQT,SAAS,CAACK,YAAYA,QAAQE,OAAOC,OAAAA,CAAAA;AAGhG,IAAME,UAAU,CAACC,SACfF,eAAQT,SAAS,CAACK,YAAYA,QAAQK,QAAQC,IAAAA,CAAAA;AAGhD,IAAMC,gBAAgB,CAACC,YAG4BJ,eAAQT,SAAS,CAACK,YAAYA,QAAQO,cAAcC,OAAAA,CAAAA;AAGvG,IAAMC,UAAuEX,cAC3EC,WAAIJ,SAAS,CAACK,YAAYA,QAAQS,OAAO,CAAA;AAI3C,IAAMC,qBAAkFX,WAAIJ,SAAS,CAACK,YAC3GA,QAAQU,mBAAkB,CAAA;AAIrB,IAAMC,cAA2Eb,cAC/EC,WAAIJ,SAAS,CAACK,YAAYA,QAAQW,WAAW,CAAA;AAI/C,IAAMC,qBAAqB,CAACT,YAC1BC,eAAQT,SAAS,CAACK,YAAYA,QAAQY,mBAAmBT,OAAAA,CAAAA;AAG3D,IAAMU,QAAQ,CAACV,YACbC,eAAQT,SAAS,CAACK,YAAYA,QAAQa,MAAMV,OAAAA,CAAAA;AAG9C,IAAMW,OAAO,CAACC,UACZX,eAAQT,SAAS,CAACK,YAAYA,QAAQc,KAAKC,KAAAA,CAAAA;AAG7C,IAAMC,cAAgFlB,cACpFC,WAAIJ,SAAS,CAACK,YAAYA,QAAQgB,WAAW,CAAA;;;ACjMtD;;;;;;;AAqFO,IAAMC,eAAe,CAACC,MAAYC,UAAuDD,KAAKD,aAAaE,KAAAA;AAG3G,IAAMC,SAAS,CAACF,SAAoCA,KAAKE,OAAM;AAG/D,IAAMC,SAAS,CAACH,SAAqCA,KAAKG;AAG1D,IAAMF,OAAO,CAACD,SAAsCA,KAAKC;;;AC9FhE;;;;cAAAG;EAAA;;iBAAAC;EAAA;gBAAAC;EAAA;;;qBAAAC;EAAA,YAAAC;EAAA;;;eAAAC;EAAA;;;;AAMA,YAAYC,cAAa;AACzB,YAAYC,aAAY;AAExB,YAAYC,aAAY;AACxB,YAAYC,aAAY;AAExB,SAASC,eAAAA,cAAaC,eAAe;AAU9B,IAAMC,SAAgBC,gBAAQ,QAAQ,QAAQ,QAAQ,OAAA;AAOtD,IAAMC,QAAeD,gBAAQ,YAAY,UAAU,OAAA;AAOnD,IAAME,mBAA0BF,gBAAQ,UAAU,QAAA;AAOlD,IAAMG,kBAAyBH,gBAAQ,YAAY,SAAA;AAOnD,IAAMI,SAAgBC,eAAO;;EAElCC,KAAYC,iBAASV,YAAAA;;EAErBW,aAAoBD,iBAAgBE,cAAM;EAC1CC,aAAoBH,iBAAgBE,cAAM;;EAE1CE,MAAaJ,iBAAgBK,eAAO;IAAEC,KAAYJ;IAAQK,OAAcC;EAAI,CAAA,CAAA;EAC5EC,MAAMjB;;EAENkB,QAAeC;AACjB,CAAA;AAOO,IAAM/B,QAAckB,eAAO;EAChCc,IAAIrB;EACJsB,MAAab,iBAAgBE,cAAM;EACnCY,OAAOpB;AACT,CAAA;AAwBO,IAAMb,WAAN,cAA8BkC,aAAI,kBAAA,EAAA,EAAA;AAiCpC;AAGE,IAAMC,SAAgEC,eACpEC,YAAIrC,UAAS,CAACsC,YAAYA,QAAQH,MAAM,CAAA;AAI1C,IAAMI,MAAM,CAACR,OACXS,gBAAQxC,UAAS,CAACsC,YAAYA,QAAQC,IAAIR,EAAAA,CAAAA;AAG5C,IAAM9B,UAAS,CAACwC,YACdD,gBAAQxC,UAAS,CAACsC,YAAYA,QAAQrC,OAAOwC,OAAAA,CAAAA;AAG/C,IAAMC,YAAY,CAACX,OACjBS,gBAAQxC,UAAS,CAACsC,YAAYA,QAAQI,UAAUX,EAAAA,CAAAA;AAGlD,IAAMY,qBAAqB,CAACZ,IAAaa,YACvCJ,gBAAQxC,UAAS,CAACsC,YAAYA,QAAQK,mBAAmBZ,IAAIa,OAAAA,CAAAA;AAG/D,IAAMC,UAAU,CAACd,OACfK,eAAcC,YAAIrC,UAAS,CAACsC,YAAYA,QAAQO,QAAQd,EAAAA,CAAAA,CAAAA;AAG1D,IAAMe,mBAAmB,CAC9Bf,IACAgB,SACAnB,SAEOY,gBAAQxC,UAAS,CAACsC,YAAYA,QAAQQ,iBAAiBf,IAAIgB,SAASnB,IAAAA,CAAAA;AAGtE,IAAMoB,eAAe,CAACjB,IAAagB,YACjCP,gBAAQxC,UAAS,CAACsC,YAAYA,QAAQU,aAAajB,IAAIgB,OAAAA,CAAAA;AAGzD,IAAM3C,SAAQ,CACnB2B,IACAU,YAEOD,gBAAQxC,UAAS,CAACsC,YAAYA,QAAQlC,MAAM2B,IAAIU,OAAAA,CAAAA;AAGlD,IAAMtC,QAAO,CAAC8C,UACZT,gBAAQxC,UAAS,CAACsC,YAAYA,QAAQnC,KAAK8C,KAAAA,CAAAA;AAG7C,IAAM/C,eAAc,CAAC6B,OACnBK,eAAcC,YAAIrC,UAAS,CAACsC,YAAYA,QAAQpC,YAAY6B,EAAAA,CAAAA,CAAAA;AAG9D,IAAMmB,cAAc,CAACnB,OACnBS,gBAAQxC,UAAS,CAACsC,YAAYA,QAAQa,OAAOpB,EAAAA,CAAAA;AAG/C,IAAMqB,cAAc,CACzBC,SACAZ,YACoDD,gBAAQxC,UAAS,CAACsC,YAAYA,QAAQgB,OAAOD,SAASZ,OAAAA,CAAAA;;;AC3L5G,SAASc,iBAAiB;AAMnB,IAAMC,qBAAN,cAAiCD,UAAUE,OAAO,sBAAsB,gBAAA,EAAA;AAAmB;AAK3F,IAAMC,wBAAN,cAAoCH,UAAUE,OAAO,yBAAyB,mBAAA,EAAA;AAAsB;AAKpG,IAAME,wBAAN,cAAoCJ,UAAUE,OAAO,yBAAyB,mBAAA,EAAA;AAAsB;AAKpG,IAAMG,yBAAN,cAAqCL,UAAUE,OAAO,0BAA0B,oBAAA,EAAA;AAAuB;AAKvG,IAAMI,gBAAN,cAA4BN,UAAUE,OAAO,iBAAiB,2BAAA,EAAA;AAA8B;AAK5F,IAAMK,aAAN,cAAyBP,UAAUE,OAAO,cAAc,wBAAA,EAAA;AAA2B;AAKnF,IAAMM,kBAAN,cAA8BR,UAAUE,OAAO,mBAAmB,6BAAA,EAAA;AAAgC;",
+  "names": ["Context", "Effect", "Schema", "Stream", "IdentityDid", "DeviceKind", "Literal", "Info", "Struct", "did", "identityKey", "optional", "String", "displayName", "data", "Record", "key", "value", "Any", "DeviceInfo", "kind", "label", "current", "Boolean", "Credential", "id", "type", "issuanceDate", "DateFromSelf", "Service", "Tag", "identity", "unwrap", "map", "service", "getSnapshot", "create", "options", "flatMap", "recover", "args", "updateProfile", "profile", "devices", "getDevicesSnapshot", "credentials", "grantServiceAccess", "share", "join", "code", "invitations", "authenticate", "flow", "code", "cancel", "events", "Info", "Service", "create", "invitations", "join", "share", "Context", "Effect", "Schema", "Stream", "IdentityDid", "SpaceId", "Access", "Literal", "State", "MembershipPolicy", "EdgeReplication", "Member", "Struct", "did", "optional", "identityKey", "String", "displayName", "data", "Record", "key", "value", "Any", "role", "online", "Boolean", "id", "name", "state", "Tag", "spaces", "unwrap", "map", "service", "get", "flatMap", "options", "waitReady", "setEdgeReplication", "setting", "members", "updateMemberRole", "subject", "removeMember", "code", "exportSpace", "export", "importSpace", "archive", "import", "BaseError", "NotAuthorizedError", "extend", "UnknownPrincipalError", "InvalidSignatureError", "MissingDependencyError", "IdentityError", "SpaceError", "InvitationError"]
+}

package/dist/lib/neutral/meta.json

@@ -0,0 +1 @@
+{"inputs":{"src/Identity.ts":{"bytes":20329,"imports":[{"path":"effect/Context","kind":"import-statement","external":true},{"path":"effect/Effect","kind":"import-statement","external":true},{"path":"effect/Schema","kind":"import-statement","external":true},{"path":"effect/Stream","kind":"import-statement","external":true},{"path":"@dxos/keys","kind":"import-statement","external":true}],"format":"esm"},"src/Invitation.ts":{"bytes":5705,"imports":[],"format":"esm"},"src/Space.ts":{"bytes":20439,"imports":[{"path":"effect/Context","kind":"import-statement","external":true},{"path":"effect/Effect","kind":"import-statement","external":true},{"path":"effect/Schema","kind":"import-statement","external":true},{"path":"effect/Stream","kind":"import-statement","external":true},{"path":"@dxos/keys","kind":"import-statement","external":true}],"format":"esm"},"src/errors.ts":{"bytes":4689,"imports":[{"path":"@dxos/errors","kind":"import-statement","external":true}],"format":"esm"},"src/index.ts":{"bytes":824,"imports":[{"path":"src/Identity.ts","kind":"import-statement","original":"./Identity"},{"path":"src/Invitation.ts","kind":"import-statement","original":"./Invitation"},{"path":"src/Space.ts","kind":"import-statement","original":"./Space"},{"path":"src/errors.ts","kind":"import-statement","original":"./errors"}],"format":"esm"}},"outputs":{"dist/lib/neutral/index.mjs.map":{"imports":[],"exports":[],"inputs":{},"bytes":28089},"dist/lib/neutral/index.mjs":{"imports":[{"path":"effect/Context","kind":"import-statement","external":true},{"path":"effect/Effect","kind":"import-statement","external":true},{"path":"effect/Schema","kind":"import-statement","external":true},{"path":"effect/Stream","kind":"import-statement","external":true},{"path":"@dxos/keys","kind":"import-statement","external":true},{"path":"effect/Context","kind":"import-statement","external":true},{"path":"effect/Effect","kind":"import-statement","external":true},{"path":"effect/Schema","kind":"import-statement","external":true},{"path":"effect/Stream","kind":"import-statement","external":true},{"path":"@dxos/keys","kind":"import-statement","external":true},{"path":"@dxos/errors","kind":"import-statement","external":true}],"exports":["Identity","IdentityError","InvalidSignatureError","Invitation","InvitationError","MissingDependencyError","NotAuthorizedError","Space","SpaceError","UnknownPrincipalError"],"entryPoint":"src/index.ts","inputs":{"src/Identity.ts":{"bytesInOutput":2904},"src/index.ts":{"bytesInOutput":0},"src/Invitation.ts":{"bytesInOutput":335},"src/Space.ts":{"bytesInOutput":3139},"src/errors.ts":{"bytesInOutput":779}},"bytes":7722}}}

package/dist/types/src/Identity.d.ts

@@ -0,0 +1,166 @@
+import * as Context from 'effect/Context';
+import * as Effect from 'effect/Effect';
+import * as Option from 'effect/Option';
+import * as Schema from 'effect/Schema';
+import * as Stream from 'effect/Stream';
+import { IdentityDid } from '@dxos/keys';
+import { type IdentityError } from './errors';
+import * as Invitation from './Invitation';
+/**
+ * Device kind (platform / host class). Replaces the legacy protobuf `DeviceType` enum;
+ * `agent`/`agent-managed` denote EDGE- or Hub-hosted agent devices.
+ */
+export declare const DeviceKind: Schema.Literal<["unknown", "browser", "native", "mobile", "agent", "agent-managed"]>;
+export type DeviceKind = typeof DeviceKind.Type;
+/**
+ * Public view of the local identity. Keyed by the DID; `identityKey` (hex) is retained for
+ * consumers that seed deterministic UI (avatar/hue) or address the legacy credential key.
+ * `data` carries arbitrary profile metadata (e.g. avatar emoji, hue).
+ */
+export declare const Info: Schema.Struct<{
+    did: Schema.Schema<IdentityDid, string, never> & {
+        byteLength: number;
+        encode: (value: Uint8Array<ArrayBufferLike>) => IdentityDid;
+        decode: (value: IdentityDid) => Uint8Array<ArrayBufferLike>;
+        isValid: (value: unknown) => value is IdentityDid;
+        make: (value: string) => IdentityDid;
+        random: () => IdentityDid;
+    };
+    /** Hex-encoded identity (credential) key, when known. */
+    identityKey: Schema.optional<typeof Schema.String>;
+    displayName: Schema.optional<typeof Schema.String>;
+    /** Arbitrary profile metadata. */
+    data: Schema.optional<Schema.Record$<typeof Schema.String, typeof Schema.Any>>;
+}>;
+export type Info = typeof Info.Type;
+/**
+ * Public view of a device belonging to the local identity. Replaces the legacy `Device` proxy
+ * type (`deviceKey` → `key`).
+ */
+export declare const DeviceInfo: Schema.Struct<{
+    /** Hex-encoded device key. */
+    key: typeof Schema.String;
+    kind: Schema.optional<Schema.Literal<["unknown", "browser", "native", "mobile", "agent", "agent-managed"]>>;
+    label: Schema.optional<typeof Schema.String>;
+    /** Whether this device is the local (current) device. */
+    current: typeof Schema.Boolean;
+}>;
+export type DeviceInfo = typeof DeviceInfo.Type;
+/**
+ * Public view of a HALO credential. Replaces direct consumption of the protobuf `Credential`:
+ * `type` is the subject assertion's `@type`, `id` its hex-encoded credential id.
+ */
+export declare const Credential: Schema.Struct<{
+    /** Hex-encoded credential id, when assigned. */
+    id: Schema.optional<typeof Schema.String>;
+    /** The subject assertion's `@type` (e.g. `dxos.halo.credentials.IdentityRecovery`). */
+    type: typeof Schema.String;
+    issuanceDate: Schema.optional<typeof Schema.DateFromSelf>;
+}>;
+export type Credential = typeof Credential.Type;
+/**
+ * Options for a self-issued `ServiceAccess` credential granting the identity access to an
+ * EDGE/Hub service.
+ */
+export type ServiceAccessOptions = {
+    /** Target server name (e.g. `hub.dxos.network`). */
+    readonly serverName: string;
+    /** Capabilities to grant (e.g. `['composer:beta']`). */
+    readonly capabilities: readonly string[];
+};
+/**
+ * Recovery credential presented to re-admit a device to an existing identity.
+ */
+export type RecoverArgs = {
+    readonly recoveryCode: string;
+} | {
+    readonly token: string;
+} | {
+    readonly recoveryProof: string;
+};
+declare const Service_base: Context.TagClass<Service, "@dxos/halo/Identity", {
+    /**
+     * The local identity (`Option.none` when none exists) as a stream that emits the current
+     * value immediately on subscription. Take the first element for a one-shot read; subscribe
+     * for updates.
+     */
+    readonly identity: Stream.Stream<Option.Option<Info>>;
+    /**
+     * Synchronous snapshot of the local identity (`Option.none` when none exists). For imperative
+     * callers (non-React, non-Effect) that need the current value without subscribing.
+     */
+    readonly getSnapshot: () => Option.Option<Info>;
+    /**
+     * Subscribe to local-identity changes (imperative). Invokes `callback` immediately with the
+     * current value, then on each change. Returns an unsubscribe function.
+     */
+    readonly subscribe: (callback: (identity: Option.Option<Info>) => void) => () => void;
+    /** Create the local identity (and its first device). */
+    readonly create: (options?: {
+        displayName?: string;
+        deviceLabel?: string;
+    }) => Effect.Effect<Info, IdentityError>;
+    /** Re-admit this device to an existing identity via a recovery credential. */
+    readonly recover: (args: RecoverArgs) => Effect.Effect<Info, IdentityError>;
+    /** Update the identity profile. */
+    readonly updateProfile: (profile: {
+        displayName?: string;
+        data?: Record<string, unknown>;
+    }) => Effect.Effect<Info, IdentityError>;
+    /** Devices belonging to the local identity; emits the current set immediately. */
+    readonly devices: Stream.Stream<readonly DeviceInfo[]>;
+    /** Synchronous snapshot of the local identity's devices, for imperative callers. */
+    readonly getDevicesSnapshot: () => readonly DeviceInfo[];
+    /** HALO credentials of the local identity; emits the current set immediately. */
+    readonly credentials: Stream.Stream<readonly Credential[]>;
+    /**
+     * Grant this identity access to an EDGE/Hub service by writing a `ServiceAccess` credential
+     * (self-issued). Replaces hand-constructing the protobuf credential at the call site.
+     */
+    readonly grantServiceAccess: (options: ServiceAccessOptions) => Effect.Effect<void, IdentityError>;
+    /** Initiate a device invitation (host side). */
+    readonly share: (options?: Invitation.ShareOptions) => Effect.Effect<Invitation.Flow, IdentityError>;
+    /** Redeem a device-invitation code on a new device (guest side). */
+    readonly join: (code: string) => Effect.Effect<Invitation.Flow, IdentityError>;
+    /** Active (host-created) device-invitation flows; emits the current set immediately. */
+    readonly invitations: Stream.Stream<readonly Invitation.Flow[]>;
+}>;
+/**
+ * Identity and device management, plus device invitations. `share`/`join` construct
+ * {@link Invitation.Flow}s driven through the {@link Invitation} flow verbs; `invitations`
+ * observes the active (host-created) device-invitation flows.
+ */
+export declare class Service extends Service_base {
+}
+/** The local identity as a current-value stream (requires {@link Service}). */
+export declare const identity: Stream.Stream<Option.Option<Info>, never, Service>;
+/** Synchronous snapshot of the local identity (requires {@link Service}). */
+export declare const getSnapshot: Effect.Effect<Option.Option<Info>, never, Service>;
+/** Create the local identity (requires {@link Service}). */
+export declare const create: (options?: {
+    displayName?: string;
+    deviceLabel?: string;
+}) => Effect.Effect<Info, IdentityError, Service>;
+/** Re-admit this device via a recovery credential (requires {@link Service}). */
+export declare const recover: (args: RecoverArgs) => Effect.Effect<Info, IdentityError, Service>;
+/** Update the identity profile (requires {@link Service}). */
+export declare const updateProfile: (profile: {
+    displayName?: string;
+    data?: Record<string, unknown>;
+}) => Effect.Effect<Info, IdentityError, Service>;
+/** Devices belonging to the local identity as a current-value stream (requires {@link Service}). */
+export declare const devices: Stream.Stream<readonly DeviceInfo[], never, Service>;
+/** Synchronous snapshot of the local identity's devices (requires {@link Service}). */
+export declare const getDevicesSnapshot: Effect.Effect<readonly DeviceInfo[], never, Service>;
+/** HALO credentials as a current-value stream (requires {@link Service}). */
+export declare const credentials: Stream.Stream<readonly Credential[], never, Service>;
+/** Grant the identity access to an EDGE/Hub service (requires {@link Service}). */
+export declare const grantServiceAccess: (options: ServiceAccessOptions) => Effect.Effect<void, IdentityError, Service>;
+/** Initiate a device invitation (requires {@link Service}). */
+export declare const share: (options?: Invitation.ShareOptions) => Effect.Effect<Invitation.Flow, IdentityError, Service>;
+/** Redeem a device-invitation code (requires {@link Service}). */
+export declare const join: (code: string) => Effect.Effect<Invitation.Flow, IdentityError, Service>;
+/** Active device-invitation flows as a current-value stream (requires {@link Service}). */
+export declare const invitations: Stream.Stream<readonly Invitation.Flow[], never, Service>;
+export {};
+//# sourceMappingURL=Identity.d.ts.map

package/dist/types/src/Identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Identity.d.ts","sourceRoot":"","sources":["../../../src/Identity.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAE3C;;;GAGG;AACH,eAAO,MAAM,UAAU,sFAAqF,CAAC;AAC7G,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,IAAI;;;;;;;;;IAEf,yDAAyD;;;IAGzD,kCAAkC;;EAElC,CAAC;AACH,MAAM,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC;AAEpC;;;GAGG;AACH,eAAO,MAAM,UAAU;IACrB,8BAA8B;;;;IAI9B,yDAAyD;;EAEzD,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,UAAU;IACrB,gDAAgD;;IAEhD,uFAAuF;;;EAGvF,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,oDAAoD;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;;IAUnC;;;;OAIG;uBACgB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD;;;OAGG;0BACmB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;IAC/C;;;OAGG;wBACiB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,MAAM,IAAI;IACrF,wDAAwD;qBACvC,CAAC,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC;IACjH,8EAA8E;sBAC5D,CAAC,IAAI,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC;IAC3E,mCAAmC;4BACX,CAAC,OAAO,EAAE;QAChC,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAChC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC;IACxC,kFAAkF;sBAChE,MAAM,CAAC,MAAM,CAAC,SAAS,UAAU,EAAE,CAAC;IACtD,oFAAoF;iCACvD,MAAM,SAAS,UAAU,EAAE;IACxD,iFAAiF;0BAC3D,MAAM,CAAC,MAAM,CAAC,SAAS,UAAU,EAAE,CAAC;IAC1D;;;OAGG;iCAC0B,CAAC,OAAO,EAAE,oBAAoB,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC;IAClG,gDAAgD;oBAChC,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC;IACpG,oEAAoE;mBACrD,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC;IAC9E,wFAAwF;0BAClE,MAAM,CAAC,MAAM,CAAC,SAAS,UAAU,CAAC,IAAI,EAAE,CAAC;;AAjDnE;;;;GAIG;AACH,qBAAa,OAAQ,SAAQ,YA8C1B;CAAG;AAEN,+EAA+E;AAC/E,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAEvE,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAE1E,CAAC;AAEF,4DAA4D;AAC5D,eAAO,MAAM,MAAM,aAAc;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAkE,CAAC;AAEjH,iFAAiF;AACjF,eAAO,MAAM,OAAO,SAAU,WAAW,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CACzB,CAAC;AAE9D,8DAA8D;AAC9D,eAAO,MAAM,aAAa,YAAa;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAyE,CAAC;AAExH,oGAAoG;AACpG,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,CAExE,CAAC;AAEF,uFAAuF;AACvF,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,CAEnF,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,CAE5E,CAAC;AAEF,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,YAAa,oBAAoB,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAClC,CAAC;AAE5E,+DAA+D;AAC/D,eAAO,MAAM,KAAK,aAAc,UAAU,CAAC,YAAY,KAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CACjD,CAAC;AAE/D,kEAAkE;AAClE,eAAO,MAAM,IAAI,SAAU,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAC/B,CAAC;AAE3D,2FAA2F;AAC3F,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,UAAU,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAEjF,CAAC"}