@dxos/plugin-client 0.7.5-main.499c70c → 0.7.5-main.5ae2ba8

package/dist/types/src/translations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"translations.d.ts","sourceRoot":"","sources":["../../../src/translations.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAMA,wBAgBE"}
+{"version":3,"file":"translations.d.ts","sourceRoot":"","sources":["../../../src/translations.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMA,wBAyBE"}

package/dist/types/src/types.d.ts

@@ -1,6 +1,7 @@
-import { type GraphBuilderProvides, type IntentResolverProvides, type Plugin, type SurfaceProvides, type TranslationsProvides } from '@dxos/app-framework';
+import { type PluginsContext } from '@dxos/app-framework';
 import { S } from '@dxos/echo-schema';
-import { Client, PublicKey, type ClientOptions } from '@dxos/react-client';
+import { type Client, PublicKey, type ClientOptions } from '@dxos/react-client';
+import { type MaybePromise } from '@dxos/util';
 export declare namespace ClientAction {
     const CreateIdentity_base: S.TaggedClass<CreateIdentity, "dxos.org/plugin/client/action/create-identity", {
         readonly _tag: S.tag<"dxos.org/plugin/client/action/create-identity">;
@@ -24,7 +25,7 @@ export declare namespace ClientAction {
         readonly _tag: S.tag<"dxos.org/plugin/client/action/join-identity">;
     } & {
         input: S.Struct<{
-            invitationCode: typeof S.String;
+            invitationCode: S.optional<typeof S.String>;
         }>;
         output: typeof S.Void;
     }>;
@@ -72,13 +73,25 @@ export declare namespace ClientAction {
     }>;
     export class CreateRecoveryCode extends CreateRecoveryCode_base {
     }
+    const CreatePasskey_base: S.TaggedClass<CreatePasskey, "dxos.org/plugin/client/action/create-passkey", {
+        readonly _tag: S.tag<"dxos.org/plugin/client/action/create-passkey">;
+    } & {
+        input: typeof S.Void;
+        output: typeof S.Void;
+    }>;
+    export class CreatePasskey extends CreatePasskey_base {
+    }
+    const RedeemPasskey_base: S.TaggedClass<RedeemPasskey, "dxos.org/plugin/client/action/redeem-passkey", {
+        readonly _tag: S.tag<"dxos.org/plugin/client/action/redeem-passkey">;
+    } & {
+        input: typeof S.Void;
+        output: typeof S.Void;
+    }>;
+    export class RedeemPasskey extends RedeemPasskey_base {
+    }
     export {};
 }
 export type ClientPluginOptions = ClientOptions & {
-    /**
-     * Used to track app-specific state in spaces.
-     */
-    appKey: string;
     /**
      * Base URL for the invitation link.
      */
@@ -90,21 +103,12 @@ export type ClientPluginOptions = ClientOptions & {
     /**
      * Run after the client has been initialized.
      */
-    onClientInitialized?: (client: Client) => Promise<void>;
-    /**
-     * Run after the identity has been successfully initialized.
-     * Run with client during plugin ready phase.
-     */
-    onReady?: (client: Client, plugins: Plugin[]) => Promise<void>;
+    onClientInitialized?: (context: PluginsContext, client: Client) => MaybePromise<void>;
     /**
      * Called when the client is reset.
      */
     onReset?: (params: {
         target?: string;
-    }) => Promise<void>;
-};
-export type ClientPluginProvides = IntentResolverProvides & GraphBuilderProvides & SurfaceProvides & TranslationsProvides & {
-    client: Client;
+    }) => MaybePromise<void>;
 };
-export declare const parseClientPlugin: (plugin?: Plugin) => Plugin<ClientPluginProvides> | undefined;
 //# sourceMappingURL=types.d.ts.map

package/dist/types/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/types.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,MAAM,EACX,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAkB3E,yBAAiB,YAAY,CAAC;;;;;;;;;;;;;;;;;IAC5B,MAAM,OAAO,cAAe,SAAQ,mBAKlC;KAAG;;;;;;;;;IAEL,MAAM,OAAO,YAAa,SAAQ,iBAKhC;KAAG;;;;;;;IAEL,MAAM,OAAO,aAAc,SAAQ,kBAGjC;KAAG;;;;;;;IAEL,MAAM,OAAO,eAAgB,SAAQ,oBAGnC;KAAG;;;;;;;;;IAEL,MAAM,OAAO,YAAa,SAAQ,iBAKhC;KAAG;;;;;;;IAEL,MAAM,OAAO,WAAY,SAAQ,gBAG/B;KAAG;;;;;;;IAEL,MAAM,OAAO,kBAAmB,SAAQ,uBAGtC;KAAG;;CACN;AAED,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG;IAChD;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAExD;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/D;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,sBAAsB,GACvD,oBAAoB,GACpB,eAAe,GACf,oBAAoB,GAAG;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEJ,eAAO,MAAM,iBAAiB,YAAa,MAAM,6CAC0D,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/types.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACtC,OAAO,EAAE,KAAK,MAAM,EAAE,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAkB/C,yBAAiB,YAAY,CAAC;;;;;;;;;;;;;;;;;IAC5B,MAAM,OAAO,cAAe,SAAQ,mBAKlC;KAAG;;;;;;;;;IAEL,MAAM,OAAO,YAAa,SAAQ,iBAKhC;KAAG;;;;;;;IAEL,MAAM,OAAO,aAAc,SAAQ,kBAGjC;KAAG;;;;;;;IAEL,MAAM,OAAO,eAAgB,SAAQ,oBAGnC;KAAG;;;;;;;;;IAEL,MAAM,OAAO,YAAa,SAAQ,iBAKhC;KAAG;;;;;;;IAEL,MAAM,OAAO,WAAY,SAAQ,gBAG/B;KAAG;;;;;;;IAEL,MAAM,OAAO,kBAAmB,SAAQ,uBAGtC;KAAG;;;;;;;IAEL,MAAM,OAAO,aAAc,SAAQ,kBAGjC;KAAG;;;;;;;IAEL,MAAM,OAAO,aAAc,SAAQ,kBAGjC;KAAG;;CACN;AAED,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG;IAChD;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAEtF;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;CAC/D,CAAC"}

package/dist/types/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"version":"5.7.2"}
+{"version":"5.7.3"}

package/package.json

@@ -1,23 +1,19 @@
 {
   "name": "@dxos/plugin-client",
-  "version": "0.7.5-main.499c70c",
+  "version": "0.7.5-main.5ae2ba8",
   "description": "DXOS Surface plugin for DXOS Client",
   "homepage": "https://dxos.org",
   "bugs": "https://github.com/dxos/dxos/issues",
   "license": "MIT",
   "author": "DXOS.org",
   "sideEffects": true,
+  "type": "module",
   "exports": {
     ".": {
       "types": "./dist/types/src/index.d.ts",
       "browser": "./dist/lib/browser/index.mjs",
       "node": "./dist/lib/node-esm/index.mjs"
     },
-    "./meta": {
-      "types": "./dist/types/src/meta.d.ts",
-      "browser": "./dist/lib/browser/meta.mjs",
-      "node": "./dist/lib/node-esm/meta.mjs"
-    },
     "./types": {
       "types": "./dist/types/src/types.d.ts",
       "browser": "./dist/lib/browser/types.mjs",
@@ -27,9 +23,6 @@
   "types": "dist/types/src/index.d.ts",
   "typesVersions": {
     "*": {
-      "meta": [
-        "dist/types/src/meta.d.ts"
-      ],
       "types": [
         "dist/types/src/types.d.ts"
       ]
@@ -40,32 +33,38 @@
     "src"
   ],
   "dependencies": {
-    "@phosphor-icons/react": "^2.1.5",
-    "@dxos/echo-schema": "0.7.5-main.499c70c",
-    "@dxos/app-framework": "0.7.5-main.499c70c",
-    "@dxos/echo-signals": "0.7.5-main.499c70c",
-    "@dxos/config": "0.7.5-main.499c70c",
-    "@dxos/invariant": "0.7.5-main.499c70c",
-    "@dxos/local-storage": "0.7.5-main.499c70c",
-    "@dxos/log": "0.7.5-main.499c70c",
-    "@dxos/plugin-graph": "0.7.5-main.499c70c",
-    "@dxos/plugin-observability": "0.7.5-main.499c70c",
-    "@dxos/react-client": "0.7.5-main.499c70c",
-    "@dxos/react-ui": "0.7.5-main.499c70c",
-    "@dxos/shell": "0.7.5-main.499c70c"
+    "@preact/signals-core": "^1.6.0",
+    "@dxos/app-framework": "0.7.5-main.5ae2ba8",
+    "@dxos/config": "0.7.5-main.5ae2ba8",
+    "@dxos/echo-signals": "0.7.5-main.5ae2ba8",
+    "@dxos/local-storage": "0.7.5-main.5ae2ba8",
+    "@dxos/echo-schema": "0.7.5-main.5ae2ba8",
+    "@dxos/log": "0.7.5-main.5ae2ba8",
+    "@dxos/invariant": "0.7.5-main.5ae2ba8",
+    "@dxos/plugin-graph": "0.7.5-main.5ae2ba8",
+    "@dxos/react-client": "0.7.5-main.5ae2ba8",
+    "@dxos/shell": "0.7.5-main.5ae2ba8",
+    "@dxos/plugin-observability": "0.7.5-main.5ae2ba8",
+    "@dxos/util": "0.7.5-main.5ae2ba8"
   },
   "devDependencies": {
+    "@phosphor-icons/react": "^2.1.5",
     "@types/react": "~18.2.0",
     "@types/react-dom": "~18.2.0",
     "react": "~18.2.0",
     "react-dom": "~18.2.0",
     "vite": "5.4.7",
-    "@dxos/storybook-utils": "0.7.5-main.499c70c"
+    "@dxos/live-object": "0.7.5-main.5ae2ba8",
+    "@dxos/react-ui": "0.7.5-main.5ae2ba8",
+    "@dxos/storybook-utils": "0.7.5-main.5ae2ba8",
+    "@dxos/react-ui-theme": "0.7.5-main.5ae2ba8"
   },
   "peerDependencies": {
     "@phosphor-icons/react": "^2.1.5",
     "react": "~18.2.0",
-    "react-dom": "~18.2.0"
+    "react-dom": "~18.2.0",
+    "@dxos/react-ui-theme": "0.7.5-main.5ae2ba8",
+    "@dxos/react-ui": "0.7.5-main.5ae2ba8"
   },
   "publishConfig": {
     "access": "public"

package/src/ClientPlugin.ts

@@ -0,0 +1,64 @@
+//
+// Copyright 2025 DXOS.org
+//
+
+import { Capabilities, contributes, defineModule, definePlugin, Events, oneOf } from '@dxos/app-framework';
+
+import { Client, AppGraphBuilder, IntentResolver, ReactContext, ReactSurface, Schema } from './capabilities';
+import { ClientEvents } from './events';
+import { meta } from './meta';
+import translations from './translations';
+import { type ClientPluginOptions } from './types';
+
+export const ClientPlugin = ({
+  invitationUrl = window.location.origin,
+  invitationParam = 'deviceInvitationCode',
+  onReset,
+  ...options
+}: ClientPluginOptions) => {
+  const createInvitationUrl = (invitationCode: string) => {
+    const baseUrl = new URL(invitationUrl);
+    baseUrl.searchParams.set(invitationParam, invitationCode);
+    return baseUrl.toString();
+  };
+
+  return definePlugin(meta, [
+    defineModule({
+      id: `${meta.id}/module/client`,
+      activatesOn: oneOf(Events.Startup, Events.SetupAppGraph),
+      activatesAfter: [ClientEvents.ClientReady],
+      activate: (context) => Client({ ...options, context }),
+    }),
+    defineModule({
+      id: `${meta.id}/module/schema`,
+      activatesOn: ClientEvents.ClientReady,
+      activatesBefore: [ClientEvents.SetupSchema],
+      activate: Schema,
+    }),
+    defineModule({
+      id: `${meta.id}/module/react-context`,
+      activatesOn: Events.Startup,
+      activate: ReactContext,
+    }),
+    defineModule({
+      id: `${meta.id}/module/react-surface`,
+      activatesOn: Events.SetupReactSurface,
+      activate: () => ReactSurface({ createInvitationUrl }),
+    }),
+    defineModule({
+      id: `${meta.id}/module/app-graph-builder`,
+      activatesOn: Events.SetupAppGraph,
+      activate: AppGraphBuilder,
+    }),
+    defineModule({
+      id: `${meta.id}/module/intent-resolver`,
+      activatesOn: Events.SetupIntentResolver,
+      activate: (context) => IntentResolver({ context, onReset }),
+    }),
+    defineModule({
+      id: `${meta.id}/module/translations`,
+      activatesOn: Events.SetupTranslations,
+      activate: () => contributes(Capabilities.Translations, translations),
+    }),
+  ]);
+};

package/src/capabilities/app-graph-builder.ts

@@ -0,0 +1,39 @@
+//
+// Copyright 2025 DXOS.org
+//
+
+import { createIntent } from '@dxos/app-framework';
+import { Capabilities, contributes, type PluginsContext } from '@dxos/app-framework';
+import { createExtension, type Node } from '@dxos/plugin-graph';
+
+import { CLIENT_PLUGIN } from '../meta';
+import { ClientAction } from '../types';
+
+export default (context: PluginsContext) =>
+  contributes(
+    Capabilities.AppGraphBuilder,
+    createExtension({
+      id: CLIENT_PLUGIN,
+      filter: (node): node is Node<null> => node.id === 'root',
+      actions: () => [
+        {
+          id: `${CLIENT_PLUGIN}/open-shell`,
+          data: async () => {
+            const { dispatchPromise: dispatch } = context.requestCapability(Capabilities.IntentDispatcher);
+            await dispatch(createIntent(ClientAction.ShareIdentity));
+          },
+          properties: {
+            label: ['open shell label', { ns: CLIENT_PLUGIN }],
+            icon: 'ph--address-book--regular',
+            keyBinding: {
+              macos: 'meta+shift+.',
+              // TODO(wittjosiah): Test on windows to see if it behaves the same as linux.
+              windows: 'alt+shift+.',
+              linux: 'alt+shift+>',
+            },
+            testId: 'clientPlugin.openShell',
+          },
+        },
+      ],
+    }),
+  );

package/src/capabilities/capabilities.ts

@@ -0,0 +1,14 @@
+//
+// Copyright 2025 DXOS.org
+//
+
+import { defineCapability } from '@dxos/app-framework';
+import { type TypedObject } from '@dxos/echo-schema';
+import { type Client } from '@dxos/react-client';
+
+import { CLIENT_PLUGIN } from '../meta';
+
+export namespace ClientCapabilities {
+  export const Client = defineCapability<Client>(`${CLIENT_PLUGIN}/capability/client`);
+  export const Schema = defineCapability<TypedObject[]>(`${CLIENT_PLUGIN}/capability/schema`);
+}

package/src/capabilities/client.ts

@@ -0,0 +1,40 @@
+//
+// Copyright 2025 DXOS.org
+//
+
+import { contributes, type PluginsContext } from '@dxos/app-framework';
+import { Client } from '@dxos/react-client';
+
+import { ClientCapabilities } from './capabilities';
+import { ClientEvents } from '../events';
+import { type ClientPluginOptions } from '../types';
+
+type ClientCapabilityOptions = Omit<ClientPluginOptions, 'appKey' | 'invitationUrl' | 'invitationParam' | 'onReset'> & {
+  context: PluginsContext;
+};
+
+export default async ({ context, onClientInitialized, ...options }: ClientCapabilityOptions) => {
+  const client = new Client(options);
+  await client.initialize();
+  await onClientInitialized?.(context, client);
+
+  // TODO(wittjosiah): Remove. This is a hack to get the app to boot with the new identity after a reset.
+  client.reloaded.on(() => {
+    client.halo.identity.subscribe(async (identity) => {
+      if (identity) {
+        window.location.href = window.location.origin;
+      }
+    });
+  });
+
+  const subscription = client.spaces.isReady.subscribe(async (ready) => {
+    if (ready) {
+      await context.activate(ClientEvents.SpacesReady);
+    }
+  });
+
+  return contributes(ClientCapabilities.Client, client, async () => {
+    subscription.unsubscribe();
+    await client.destroy();
+  });
+};

package/src/capabilities/index.ts

@@ -0,0 +1,14 @@
+//
+// Copyright 2025 DXOS.org
+//
+
+import { lazy } from '@dxos/app-framework';
+
+export const AppGraphBuilder = lazy(async () => import('./app-graph-builder'));
+export const Client = lazy(async () => import('./client'));
+export const IntentResolver = lazy(async () => import('./intent-resolver'));
+export const ReactContext = lazy(async () => import('./react-context'));
+export const ReactSurface = lazy(async () => import('./react-surface'));
+export const Schema = lazy(async () => import('./schema'));
+
+export * from './capabilities';

package/src/capabilities/intent-resolver.ts

@@ -0,0 +1,198 @@
+//
+// Copyright 2025 DXOS.org
+//
+
+import {
+  Capabilities,
+  contributes,
+  createIntent,
+  createResolver,
+  LayoutAction,
+  type PluginsContext,
+} from '@dxos/app-framework';
+import { invariant } from '@dxos/invariant';
+import { ObservabilityAction } from '@dxos/plugin-observability/types';
+import { PublicKey } from '@dxos/react-client';
+import { type JoinPanelProps } from '@dxos/shell/react';
+
+import { ClientCapabilities } from './capabilities';
+import { IDENTITY_DIALOG, JOIN_DIALOG, RECOVER_CODE_DIALOG } from '../components';
+import { ClientEvents } from '../events';
+import { ClientAction, type ClientPluginOptions } from '../types';
+
+type IntentResolverOptions = Pick<ClientPluginOptions, 'onReset'> & {
+  context: PluginsContext;
+  appName?: string;
+};
+
+export default ({ context, appName = 'Composer', onReset }: IntentResolverOptions) =>
+  contributes(Capabilities.IntentResolver, [
+    createResolver({
+      intent: ClientAction.CreateIdentity,
+      resolve: async () => {
+        const manager = context.requestCapability(Capabilities.PluginManager);
+        const client = context.requestCapability(ClientCapabilities.Client);
+        const data = await client.halo.createIdentity();
+        await manager.activate(ClientEvents.IdentityCreated);
+        return { data, intents: [createIntent(ObservabilityAction.SendEvent, { name: 'identity.create' })] };
+      },
+    }),
+    createResolver({
+      intent: ClientAction.JoinIdentity,
+      resolve: async (data) => {
+        return {
+          intents: [
+            createIntent(LayoutAction.UpdateDialog, {
+              part: 'dialog',
+              subject: JOIN_DIALOG,
+              options: {
+                blockAlign: 'start',
+                props: {
+                  initialInvitationCode: data.invitationCode,
+                  initialDisposition: 'accept-halo-invitation',
+                },
+              },
+            }),
+          ],
+        };
+      },
+    }),
+    createResolver({
+      intent: ClientAction.ShareIdentity,
+      resolve: async () => {
+        return {
+          intents: [
+            createIntent(LayoutAction.UpdateDialog, {
+              part: 'dialog',
+              subject: IDENTITY_DIALOG,
+              options: {
+                blockAlign: 'start',
+              },
+            }),
+            createIntent(ObservabilityAction.SendEvent, { name: 'identity.share' }),
+          ],
+        };
+      },
+    }),
+    createResolver({
+      intent: ClientAction.RecoverIdentity,
+      resolve: async () => {
+        return {
+          intents: [
+            createIntent(LayoutAction.UpdateDialog, {
+              part: 'dialog',
+              subject: JOIN_DIALOG,
+              options: {
+                blockAlign: 'start',
+                props: {
+                  initialDisposition: 'recover-identity',
+                } satisfies Partial<JoinPanelProps>,
+              },
+            }),
+          ],
+        };
+      },
+    }),
+    createResolver({
+      intent: ClientAction.ResetStorage,
+      resolve: async (data) => {
+        await onReset?.({ target: data.target });
+      },
+    }),
+    createResolver({
+      intent: ClientAction.CreateAgent,
+      resolve: async () => {
+        const client = context.requestCapability(ClientCapabilities.Client);
+        invariant(client.services.services.EdgeAgentService, 'Missing EdgeAgentService');
+        await client.services.services.EdgeAgentService.createAgent(null as any, { timeout: 10_000 });
+      },
+    }),
+    createResolver({
+      intent: ClientAction.CreateRecoveryCode,
+      resolve: async () => {
+        const client = context.requestCapability(ClientCapabilities.Client);
+        invariant(client.services.services.IdentityService, 'IdentityService not available');
+        // TODO(wittjosiah): This needs a proper api.
+        const { recoveryCode } = await client.services.services.IdentityService.createRecoveryCredential({});
+        return {
+          intents: [
+            createIntent(LayoutAction.UpdateDialog, {
+              part: 'dialog',
+              subject: RECOVER_CODE_DIALOG,
+              options: {
+                blockAlign: 'start',
+                type: 'alert',
+                props: { code: recoveryCode },
+              },
+            }),
+          ],
+        };
+      },
+    }),
+    createResolver({
+      intent: ClientAction.CreatePasskey,
+      resolve: async () => {
+        const client = context.requestCapability(ClientCapabilities.Client);
+        const identity = client.halo.identity.get();
+        invariant(identity, 'Identity not available');
+
+        // TODO(wittjosiah): Consider factoring out passkey creation to the halo api.
+        const credential = await navigator.credentials.create({
+          publicKey: {
+            challenge: new Uint8Array(),
+            rp: { id: location.hostname, name: appName },
+            user: {
+              id: new TextEncoder().encode(identity.did),
+              name: identity.did,
+              displayName: identity.profile?.displayName ?? '',
+            },
+            pubKeyCredParams: [
+              { type: 'public-key', alg: -8 }, // Ed25519 (not yet supported across all browsers)
+              { type: 'public-key', alg: -7 }, // ES256
+            ],
+            // https://web.dev/articles/webauthn-discoverable-credentials#resident-key
+            authenticatorSelection: {
+              residentKey: 'required',
+              requireResidentKey: true,
+            },
+          },
+        });
+
+        invariant(credential, 'Credential not available');
+        const recoveryKey = PublicKey.from(new Uint8Array((credential as any).response.getPublicKey()));
+        const algorithm = (credential as any).response.getPublicKeyAlgorithm() === -7 ? 'ES256' : 'ED25519';
+
+        // TODO(wittjosiah): This needs a proper api.
+        invariant(client.services.services.IdentityService, 'IdentityService not available');
+        await client.services.services.IdentityService.createRecoveryCredential({ recoveryKey, algorithm });
+      },
+    }),
+    createResolver({
+      intent: ClientAction.RedeemPasskey,
+      resolve: async () => {
+        const client = context.requestCapability(ClientCapabilities.Client);
+        // TODO(wittjosiah): This needs a proper api.
+        invariant(client.services.services.IdentityService, 'IdentityService not available');
+        const { deviceKey, controlFeedKey, challenge } =
+          await client.services.services.IdentityService.requestRecoveryChallenge();
+        const credential = await navigator.credentials.get({
+          publicKey: {
+            challenge: Buffer.from(challenge, 'base64'),
+            rpId: location.hostname,
+            userVerification: 'required',
+          },
+        });
+        const identityDid = new TextDecoder().decode((credential as any).response.userHandle);
+        await client.services.services.IdentityService.recoverIdentity({
+          external: {
+            identityDid,
+            deviceKey,
+            controlFeedKey,
+            signature: Buffer.from((credential as any).response.signature),
+            clientDataJson: Buffer.from((credential as any).response.clientDataJSON),
+            authenticatorData: Buffer.from((credential as any).response.authenticatorData),
+          },
+        });
+      },
+    }),
+  ]);

package/src/capabilities/react-context.tsx

@@ -0,0 +1,20 @@
+//
+// Copyright 2025 DXOS.org
+//
+
+import React from 'react';
+
+import { Capabilities, contributes, useCapability } from '@dxos/app-framework';
+import { ClientProvider } from '@dxos/react-client';
+
+import { ClientCapabilities } from './capabilities';
+import { CLIENT_PLUGIN } from '../meta';
+
+export default () =>
+  contributes(Capabilities.ReactContext, {
+    id: CLIENT_PLUGIN,
+    context: ({ children }) => {
+      const client = useCapability(ClientCapabilities.Client);
+      return <ClientProvider client={client}>{children}</ClientProvider>;
+    },
+  });

package/src/capabilities/react-surface.tsx

@@ -0,0 +1,59 @@
+//
+// Copyright 2025 DXOS.org
+//
+
+import React from 'react';
+
+import { createSurface, Capabilities, contributes } from '@dxos/app-framework';
+import { type IdentityPanelProps, type JoinPanelProps } from '@dxos/shell/react';
+
+import {
+  IDENTITY_DIALOG,
+  IdentityDialog,
+  JOIN_DIALOG,
+  JoinDialog,
+  RECOVER_CODE_DIALOG,
+  RECOVER_SETUP_DIALOG,
+  RecoveryCodeDialog,
+  RecoverySetupDialog,
+  type RecoveryCodeDialogProps,
+} from '../components';
+import { MANAGE_CREDENTIALS_DIALOG, ManageCredentialsDialog } from '../components/ManageCredentialsDialog';
+
+type ReactSurfaceOptions = {
+  createInvitationUrl: (invitationCode: string) => string;
+};
+
+export default ({ createInvitationUrl }: ReactSurfaceOptions) =>
+  contributes(Capabilities.ReactSurface, [
+    createSurface({
+      id: IDENTITY_DIALOG,
+      role: 'dialog',
+      filter: (data): data is { props: IdentityPanelProps } => data.component === IDENTITY_DIALOG,
+      component: ({ data }) => <IdentityDialog {...data.props} createInvitationUrl={createInvitationUrl} />,
+    }),
+    createSurface({
+      id: JOIN_DIALOG,
+      role: 'dialog',
+      filter: (data): data is { props: JoinPanelProps } => data.component === JOIN_DIALOG,
+      component: ({ data }) => <JoinDialog {...data.props} />,
+    }),
+    createSurface({
+      id: RECOVER_CODE_DIALOG,
+      role: 'dialog',
+      filter: (data): data is { props: RecoveryCodeDialogProps } => data.component === RECOVER_CODE_DIALOG,
+      component: ({ data }) => <RecoveryCodeDialog {...data.props} />,
+    }),
+    createSurface({
+      id: RECOVER_SETUP_DIALOG,
+      role: 'dialog',
+      filter: (data): data is any => data.component === RECOVER_SETUP_DIALOG,
+      component: () => <RecoverySetupDialog />,
+    }),
+    createSurface({
+      id: MANAGE_CREDENTIALS_DIALOG,
+      role: 'dialog',
+      filter: (data): data is any => data.component === MANAGE_CREDENTIALS_DIALOG,
+      component: () => <ManageCredentialsDialog />,
+    }),
+  ]);

package/src/capabilities/schema.ts

@@ -0,0 +1,26 @@
+//
+// Copyright 2025 DXOS.org
+//
+
+import { effect } from '@preact/signals-core';
+
+import { Capabilities, contributes, type PluginsContext } from '@dxos/app-framework';
+import { type TypedObject } from '@dxos/echo-schema';
+
+import { ClientCapabilities } from './capabilities';
+
+export default (context: PluginsContext) => {
+  const client = context.requestCapability(ClientCapabilities.Client);
+
+  // TODO(wittjosiah): Unregister schemas when they are disabled.
+  let previous: TypedObject[] = [];
+  const unsubscribe = effect(() => {
+    const schemas = Array.from(new Set(context.requestCapabilities(ClientCapabilities.Schema).flat()));
+    // TODO(wittjosiah): Filter out schemas which the client has already registered.
+    const newSchemas = schemas.filter((schema) => !previous.includes(schema));
+    previous = schemas;
+    client.addTypes(newSchemas);
+  });
+
+  return contributes(Capabilities.Null, null, () => unsubscribe());
+};