@dxos/plugin-client 0.7.5-main.ff8607b → 0.7.5-staging.2ff1350

package/dist/types/src/components/JoinDialog.d.ts

@@ -1,5 +1,4 @@
-import React from 'react';
 import { type JoinPanelProps } from '@dxos/shell/react';
 export declare const JOIN_DIALOG = "dxos.org/plugin/client/JoinDialog";
-export declare const JoinDialog: (props: JoinPanelProps) => React.JSX.Element;
+export declare const JoinDialog: (props: JoinPanelProps) => import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=JoinDialog.d.ts.map

package/dist/types/src/components/JoinDialog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"JoinDialog.d.ts","sourceRoot":"","sources":["../../../../src/components/JoinDialog.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAsB,MAAM,OAAO,CAAC;AAM3C,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKnE,eAAO,MAAM,WAAW,sCAAgC,CAAC;AAEzD,eAAO,MAAM,UAAU,UAAW,cAAc,sBAiC/C,CAAC"}
+{"version":3,"file":"JoinDialog.d.ts","sourceRoot":"","sources":["../../../../src/components/JoinDialog.tsx"],"names":[],"mappings":"AAUA,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKnE,eAAO,MAAM,WAAW,sCAAgC,CAAC;AAEzD,eAAO,MAAM,UAAU,UAAW,cAAc,4CAiC/C,CAAC"}

package/dist/types/src/components/ManageCredentialsDialog.d.ts

@@ -0,0 +1,3 @@
+export declare const MANAGE_CREDENTIALS_DIALOG = "dxos.org/plugin/client/ManageCredentialsDialog";
+export declare const ManageCredentialsDialog: () => import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=ManageCredentialsDialog.d.ts.map

package/dist/types/src/components/ManageCredentialsDialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ManageCredentialsDialog.d.ts","sourceRoot":"","sources":["../../../../src/components/ManageCredentialsDialog.tsx"],"names":[],"mappings":"AAeA,eAAO,MAAM,yBAAyB,mDAA6C,CAAC;AAGpF,eAAO,MAAM,uBAAuB,+CA6CnC,CAAC"}

package/dist/types/src/components/ManageCredentialsDialog.stories.d.ts

@@ -0,0 +1,8 @@
+import '@dxos-theme';
+import { type StoryObj, type Meta } from '@storybook/react';
+import { ManageCredentialsDialog } from './ManageCredentialsDialog';
+declare const meta: Meta;
+export default meta;
+type Story = StoryObj<typeof ManageCredentialsDialog>;
+export declare const Default: Story;
+//# sourceMappingURL=ManageCredentialsDialog.stories.d.ts.map

package/dist/types/src/components/ManageCredentialsDialog.stories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ManageCredentialsDialog.stories.d.ts","sourceRoot":"","sources":["../../../../src/components/ManageCredentialsDialog.stories.tsx"],"names":[],"mappings":"AAIA,OAAO,aAAa,CAAC;AAErB,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAQ5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAcpE,QAAA,MAAM,IAAI,EAAE,IAsBX,CAAC;AAEF,eAAe,IAAI,CAAC;AAEpB,KAAK,KAAK,GAAG,QAAQ,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEtD,eAAO,MAAM,OAAO,EAAE,KAAU,CAAC"}

package/dist/types/src/components/RecoveryCodeDialog.d.ts

@@ -1,7 +1,6 @@
-import React from 'react';
 export declare const RECOVER_CODE_DIALOG = "dxos.org/plugin/client/RecoveryCodeDialog";
 export type RecoveryCodeDialogProps = {
     code: string;
 };
-export declare const RecoveryCodeDialog: ({ code }: RecoveryCodeDialogProps) => React.JSX.Element;
+export declare const RecoveryCodeDialog: ({ code }: RecoveryCodeDialogProps) => import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=RecoveryCodeDialog.d.ts.map

package/dist/types/src/components/RecoveryCodeDialog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RecoveryCodeDialog.d.ts","sourceRoot":"","sources":["../../../../src/components/RecoveryCodeDialog.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAMrD,eAAO,MAAM,mBAAmB,8CAAwC,CAAC;AAEzE,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,eAAO,MAAM,kBAAkB,aAAc,uBAAuB,sBAoCnE,CAAC"}
+{"version":3,"file":"RecoveryCodeDialog.d.ts","sourceRoot":"","sources":["../../../../src/components/RecoveryCodeDialog.tsx"],"names":[],"mappings":"AAUA,eAAO,MAAM,mBAAmB,8CAAwC,CAAC;AAEzE,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAGF,eAAO,MAAM,kBAAkB,aAAc,uBAAuB,4CAoCnE,CAAC"}

package/dist/types/src/components/RecoverySetupDialog.d.ts

@@ -0,0 +1,3 @@
+export declare const RECOVER_SETUP_DIALOG = "dxos.org/plugin/client/RecoverySetupDialog";
+export declare const RecoverySetupDialog: () => import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=RecoverySetupDialog.d.ts.map

package/dist/types/src/components/RecoverySetupDialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RecoverySetupDialog.d.ts","sourceRoot":"","sources":["../../../../src/components/RecoverySetupDialog.tsx"],"names":[],"mappings":"AAcA,eAAO,MAAM,oBAAoB,+CAAyC,CAAC;AAG3E,eAAO,MAAM,mBAAmB,+CAkC/B,CAAC"}

package/dist/types/src/components/RecoverySetupDialog.stories.d.ts

@@ -0,0 +1,8 @@
+import '@dxos-theme';
+import { type StoryObj, type Meta } from '@storybook/react';
+import { RecoverySetupDialog } from './RecoverySetupDialog';
+declare const meta: Meta;
+export default meta;
+type Story = StoryObj<typeof RecoverySetupDialog>;
+export declare const Default: Story;
+//# sourceMappingURL=RecoverySetupDialog.stories.d.ts.map

package/dist/types/src/components/RecoverySetupDialog.stories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RecoverySetupDialog.stories.d.ts","sourceRoot":"","sources":["../../../../src/components/RecoverySetupDialog.stories.tsx"],"names":[],"mappings":"AAIA,OAAO,aAAa,CAAC;AAErB,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAW5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAgB5D,QAAA,MAAM,IAAI,EAAE,IAqCX,CAAC;AAEF,eAAe,IAAI,CAAC;AAEpB,KAAK,KAAK,GAAG,QAAQ,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAElD,eAAO,MAAM,OAAO,EAAE,KAAU,CAAC"}

package/dist/types/src/components/index.d.ts

@@ -1,4 +1,5 @@
 export * from './IdentityDialog';
 export * from './JoinDialog';
 export * from './RecoveryCodeDialog';
+export * from './RecoverySetupDialog';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/src/components/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/index.ts"],"names":[],"mappings":"AAIA,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/index.ts"],"names":[],"mappings":"AAIA,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/types/src/translations.d.ts

@@ -2,6 +2,13 @@ declare const _default: {
     'en-US': {
         "dxos.org/plugin/client": {
             'open shell label': string;
+            'manage credentials dialog title': string;
+            'recovery setup dialog title': string;
+            'recovery setup dialog description': string;
+            'create passkey label': string;
+            'create passkey description': string;
+            'create recovery code label': string;
+            'create recovery code description': string;
             'recovery code dialog title': string;
             'recovery code dialog description': string;
             'recovery code dialog warning 1': string;

package/dist/types/src/translations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"translations.d.ts","sourceRoot":"","sources":["../../../src/translations.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAMA,wBAgBE"}
+{"version":3,"file":"translations.d.ts","sourceRoot":"","sources":["../../../src/translations.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMA,wBAyBE"}

package/dist/types/src/types.d.ts

@@ -73,6 +73,22 @@ export declare namespace ClientAction {
     }>;
     export class CreateRecoveryCode extends CreateRecoveryCode_base {
     }
+    const CreatePasskey_base: S.TaggedClass<CreatePasskey, "dxos.org/plugin/client/action/create-passkey", {
+        readonly _tag: S.tag<"dxos.org/plugin/client/action/create-passkey">;
+    } & {
+        input: typeof S.Void;
+        output: typeof S.Void;
+    }>;
+    export class CreatePasskey extends CreatePasskey_base {
+    }
+    const RedeemPasskey_base: S.TaggedClass<RedeemPasskey, "dxos.org/plugin/client/action/redeem-passkey", {
+        readonly _tag: S.tag<"dxos.org/plugin/client/action/redeem-passkey">;
+    } & {
+        input: typeof S.Void;
+        output: typeof S.Void;
+    }>;
+    export class RedeemPasskey extends RedeemPasskey_base {
+    }
     export {};
 }
 export type ClientPluginOptions = ClientOptions & {

package/dist/types/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/types.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACtC,OAAO,EAAE,KAAK,MAAM,EAAE,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAkB/C,yBAAiB,YAAY,CAAC;;;;;;;;;;;;;;;;;IAC5B,MAAM,OAAO,cAAe,SAAQ,mBAKlC;KAAG;;;;;;;;;IAEL,MAAM,OAAO,YAAa,SAAQ,iBAKhC;KAAG;;;;;;;IAEL,MAAM,OAAO,aAAc,SAAQ,kBAGjC;KAAG;;;;;;;IAEL,MAAM,OAAO,eAAgB,SAAQ,oBAGnC;KAAG;;;;;;;;;IAEL,MAAM,OAAO,YAAa,SAAQ,iBAKhC;KAAG;;;;;;;IAEL,MAAM,OAAO,WAAY,SAAQ,gBAG/B;KAAG;;;;;;;IAEL,MAAM,OAAO,kBAAmB,SAAQ,uBAGtC;KAAG;;CACN;AAED,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG;IAChD;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAEtF;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;CAC/D,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/types.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACtC,OAAO,EAAE,KAAK,MAAM,EAAE,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAkB/C,yBAAiB,YAAY,CAAC;;;;;;;;;;;;;;;;;IAC5B,MAAM,OAAO,cAAe,SAAQ,mBAKlC;KAAG;;;;;;;;;IAEL,MAAM,OAAO,YAAa,SAAQ,iBAKhC;KAAG;;;;;;;IAEL,MAAM,OAAO,aAAc,SAAQ,kBAGjC;KAAG;;;;;;;IAEL,MAAM,OAAO,eAAgB,SAAQ,oBAGnC;KAAG;;;;;;;;;IAEL,MAAM,OAAO,YAAa,SAAQ,iBAKhC;KAAG;;;;;;;IAEL,MAAM,OAAO,WAAY,SAAQ,gBAG/B;KAAG;;;;;;;IAEL,MAAM,OAAO,kBAAmB,SAAQ,uBAGtC;KAAG;;;;;;;IAEL,MAAM,OAAO,aAAc,SAAQ,kBAGjC;KAAG;;;;;;;IAEL,MAAM,OAAO,aAAc,SAAQ,kBAGjC;KAAG;;CACN;AAED,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG;IAChD;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IAEtF;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;CAC/D,CAAC"}

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@dxos/plugin-client",
-  "version": "0.7.5-main.ff8607b",
+  "version": "0.7.5-staging.2ff1350",
   "description": "DXOS Surface plugin for DXOS Client",
   "homepage": "https://dxos.org",
   "bugs": "https://github.com/dxos/dxos/issues",
   "license": "MIT",
   "author": "DXOS.org",
   "sideEffects": true,
+  "type": "module",
   "exports": {
     ".": {
       "types": "./dist/types/src/index.d.ts",
@@ -33,19 +34,18 @@
   ],
   "dependencies": {
     "@preact/signals-core": "^1.6.0",
-    "@dxos/app-framework": "0.7.5-main.ff8607b",
-    "@dxos/config": "0.7.5-main.ff8607b",
-    "@dxos/echo-schema": "0.7.5-main.ff8607b",
-    "@dxos/echo-signals": "0.7.5-main.ff8607b",
-    "@dxos/invariant": "0.7.5-main.ff8607b",
-    "@dxos/log": "0.7.5-main.ff8607b",
-    "@dxos/local-storage": "0.7.5-main.ff8607b",
-    "@dxos/plugin-graph": "0.7.5-main.ff8607b",
-    "@dxos/plugin-observability": "0.7.5-main.ff8607b",
-    "@dxos/react-client": "0.7.5-main.ff8607b",
-    "@dxos/shell": "0.7.5-main.ff8607b",
-    "@dxos/react-ui": "0.7.5-main.ff8607b",
-    "@dxos/util": "0.7.5-main.ff8607b"
+    "@dxos/app-framework": "0.7.5-staging.2ff1350",
+    "@dxos/config": "0.7.5-staging.2ff1350",
+    "@dxos/echo-signals": "0.7.5-staging.2ff1350",
+    "@dxos/echo-schema": "0.7.5-staging.2ff1350",
+    "@dxos/invariant": "0.7.5-staging.2ff1350",
+    "@dxos/local-storage": "0.7.5-staging.2ff1350",
+    "@dxos/plugin-graph": "0.7.5-staging.2ff1350",
+    "@dxos/log": "0.7.5-staging.2ff1350",
+    "@dxos/plugin-observability": "0.7.5-staging.2ff1350",
+    "@dxos/react-client": "0.7.5-staging.2ff1350",
+    "@dxos/util": "0.7.5-staging.2ff1350",
+    "@dxos/shell": "0.7.5-staging.2ff1350"
   },
   "devDependencies": {
     "@phosphor-icons/react": "^2.1.5",
@@ -54,12 +54,17 @@
     "react": "~18.2.0",
     "react-dom": "~18.2.0",
     "vite": "5.4.7",
-    "@dxos/storybook-utils": "0.7.5-main.ff8607b"
+    "@dxos/live-object": "0.7.5-staging.2ff1350",
+    "@dxos/react-ui-theme": "0.7.5-staging.2ff1350",
+    "@dxos/react-ui": "0.7.5-staging.2ff1350",
+    "@dxos/storybook-utils": "0.7.5-staging.2ff1350"
   },
   "peerDependencies": {
     "@phosphor-icons/react": "^2.1.5",
     "react": "~18.2.0",
-    "react-dom": "~18.2.0"
+    "react-dom": "~18.2.0",
+    "@dxos/react-ui": "0.7.5-staging.2ff1350",
+    "@dxos/react-ui-theme": "0.7.5-staging.2ff1350"
   },
   "publishConfig": {
     "access": "public"

package/src/ClientPlugin.ts

@@ -42,7 +42,7 @@ export const ClientPlugin = ({
     }),
     defineModule({
       id: `${meta.id}/module/react-surface`,
-      activatesOn: Events.SetupSurfaces,
+      activatesOn: Events.SetupReactSurface,
       activate: () => ReactSurface({ createInvitationUrl }),
     }),
     defineModule({
@@ -52,7 +52,7 @@ export const ClientPlugin = ({
     }),
     defineModule({
       id: `${meta.id}/module/intent-resolver`,
-      activatesOn: Events.SetupIntents,
+      activatesOn: Events.SetupIntentResolver,
       activate: (context) => IntentResolver({ context, onReset }),
     }),
     defineModule({

package/src/capabilities/capabilities.ts

@@ -11,6 +11,4 @@ import { CLIENT_PLUGIN } from '../meta';
 export namespace ClientCapabilities {
   export const Client = defineCapability<Client>(`${CLIENT_PLUGIN}/capability/client`);
   export const Schema = defineCapability<TypedObject[]>(`${CLIENT_PLUGIN}/capability/schema`);
-  // TODO(wittjosiah): Rename this. Reserve "system" nomenclature for internal use.
-  export const SystemSchema = defineCapability<TypedObject[]>(`${CLIENT_PLUGIN}/capability/system-schema`);
 }

package/src/capabilities/client.ts

@@ -3,7 +3,6 @@
 //
 
 import { contributes, type PluginsContext } from '@dxos/app-framework';
-import { Config, Defaults, Envs, Local, Storage } from '@dxos/config';
 import { Client } from '@dxos/react-client';
 
 import { ClientCapabilities } from './capabilities';
@@ -15,8 +14,7 @@ type ClientCapabilityOptions = Omit<ClientPluginOptions, 'appKey' | 'invitationU
 };
 
 export default async ({ context, onClientInitialized, ...options }: ClientCapabilityOptions) => {
-  const config = new Config(await Storage(), Envs(), Local(), Defaults());
-  const client = new Client({ config, ...options });
+  const client = new Client(options);
   await client.initialize();
   await onClientInitialized?.(context, client);
 

package/src/capabilities/intent-resolver.ts

@@ -12,6 +12,7 @@ import {
 } from '@dxos/app-framework';
 import { invariant } from '@dxos/invariant';
 import { ObservabilityAction } from '@dxos/plugin-observability/types';
+import { PublicKey } from '@dxos/react-client';
 import { type JoinPanelProps } from '@dxos/shell/react';
 
 import { ClientCapabilities } from './capabilities';
@@ -21,9 +22,10 @@ import { ClientAction, type ClientPluginOptions } from '../types';
 
 type IntentResolverOptions = Pick<ClientPluginOptions, 'onReset'> & {
   context: PluginsContext;
+  appName?: string;
 };
 
-export default ({ context, onReset }: IntentResolverOptions) =>
+export default ({ context, appName = 'Composer', onReset }: IntentResolverOptions) =>
   contributes(Capabilities.IntentResolver, [
     createResolver({
       intent: ClientAction.CreateIdentity,
@@ -110,8 +112,8 @@ export default ({ context, onReset }: IntentResolverOptions) =>
       resolve: async () => {
         const client = context.requestCapability(ClientCapabilities.Client);
         invariant(client.services.services.IdentityService, 'IdentityService not available');
-        // TODO(wittjosiah): This needs a proper api. Rename property.
-        const { seedphrase } = await client.services.services.IdentityService.createRecoveryPhrase();
+        // TODO(wittjosiah): This needs a proper api.
+        const { recoveryCode } = await client.services.services.IdentityService.createRecoveryCredential({});
         return {
           intents: [
             createIntent(LayoutAction.UpdateDialog, {
@@ -120,11 +122,77 @@ export default ({ context, onReset }: IntentResolverOptions) =>
               options: {
                 blockAlign: 'start',
                 type: 'alert',
-                props: { code: seedphrase },
+                props: { code: recoveryCode },
               },
             }),
           ],
         };
       },
     }),
+    createResolver({
+      intent: ClientAction.CreatePasskey,
+      resolve: async () => {
+        const client = context.requestCapability(ClientCapabilities.Client);
+        const identity = client.halo.identity.get();
+        invariant(identity, 'Identity not available');
+
+        // TODO(wittjosiah): Consider factoring out passkey creation to the halo api.
+        const credential = await navigator.credentials.create({
+          publicKey: {
+            challenge: new Uint8Array(),
+            rp: { id: location.hostname, name: appName },
+            user: {
+              id: new TextEncoder().encode(identity.did),
+              name: identity.did,
+              displayName: identity.profile?.displayName ?? '',
+            },
+            pubKeyCredParams: [
+              { type: 'public-key', alg: -8 }, // Ed25519 (not yet supported across all browsers)
+              { type: 'public-key', alg: -7 }, // ES256
+            ],
+            // https://web.dev/articles/webauthn-discoverable-credentials#resident-key
+            authenticatorSelection: {
+              residentKey: 'required',
+              requireResidentKey: true,
+            },
+          },
+        });
+
+        invariant(credential, 'Credential not available');
+        const recoveryKey = PublicKey.from(new Uint8Array((credential as any).response.getPublicKey()));
+        const algorithm = (credential as any).response.getPublicKeyAlgorithm() === -7 ? 'ES256' : 'ED25519';
+
+        // TODO(wittjosiah): This needs a proper api.
+        invariant(client.services.services.IdentityService, 'IdentityService not available');
+        await client.services.services.IdentityService.createRecoveryCredential({ recoveryKey, algorithm });
+      },
+    }),
+    createResolver({
+      intent: ClientAction.RedeemPasskey,
+      resolve: async () => {
+        const client = context.requestCapability(ClientCapabilities.Client);
+        // TODO(wittjosiah): This needs a proper api.
+        invariant(client.services.services.IdentityService, 'IdentityService not available');
+        const { deviceKey, controlFeedKey, challenge } =
+          await client.services.services.IdentityService.requestRecoveryChallenge();
+        const credential = await navigator.credentials.get({
+          publicKey: {
+            challenge: Buffer.from(challenge, 'base64'),
+            rpId: location.hostname,
+            userVerification: 'required',
+          },
+        });
+        const identityDid = new TextDecoder().decode((credential as any).response.userHandle);
+        await client.services.services.IdentityService.recoverIdentity({
+          external: {
+            identityDid,
+            deviceKey,
+            controlFeedKey,
+            signature: Buffer.from((credential as any).response.signature),
+            clientDataJson: Buffer.from((credential as any).response.clientDataJSON),
+            authenticatorData: Buffer.from((credential as any).response.authenticatorData),
+          },
+        });
+      },
+    }),
   ]);

package/src/capabilities/react-surface.tsx

@@ -13,9 +13,12 @@ import {
   JOIN_DIALOG,
   JoinDialog,
   RECOVER_CODE_DIALOG,
+  RECOVER_SETUP_DIALOG,
   RecoveryCodeDialog,
+  RecoverySetupDialog,
   type RecoveryCodeDialogProps,
 } from '../components';
+import { MANAGE_CREDENTIALS_DIALOG, ManageCredentialsDialog } from '../components/ManageCredentialsDialog';
 
 type ReactSurfaceOptions = {
   createInvitationUrl: (invitationCode: string) => string;
@@ -41,4 +44,16 @@ export default ({ createInvitationUrl }: ReactSurfaceOptions) =>
       filter: (data): data is { props: RecoveryCodeDialogProps } => data.component === RECOVER_CODE_DIALOG,
       component: ({ data }) => <RecoveryCodeDialog {...data.props} />,
     }),
+    createSurface({
+      id: RECOVER_SETUP_DIALOG,
+      role: 'dialog',
+      filter: (data): data is any => data.component === RECOVER_SETUP_DIALOG,
+      component: () => <RecoverySetupDialog />,
+    }),
+    createSurface({
+      id: MANAGE_CREDENTIALS_DIALOG,
+      role: 'dialog',
+      filter: (data): data is any => data.component === MANAGE_CREDENTIALS_DIALOG,
+      component: () => <ManageCredentialsDialog />,
+    }),
   ]);

package/src/capabilities/schema.ts

@@ -9,28 +9,18 @@ import { type TypedObject } from '@dxos/echo-schema';
 
 import { ClientCapabilities } from './capabilities';
 
-// TODO(wittjosiah): Remove types?
 export default (context: PluginsContext) => {
   const client = context.requestCapability(ClientCapabilities.Client);
 
-  let previousSystem: TypedObject[] = [];
-  const unsubscribeSystem = effect(() => {
-    const systemSchemas = Array.from(new Set(context.requestCapabilities(ClientCapabilities.SystemSchema).flat()));
-    const newSchemas = systemSchemas.filter((schema) => !previousSystem.includes(schema));
-    previousSystem = systemSchemas;
-    client.addTypes(newSchemas);
-  });
-
+  // TODO(wittjosiah): Unregister schemas when they are disabled.
   let previous: TypedObject[] = [];
   const unsubscribe = effect(() => {
     const schemas = Array.from(new Set(context.requestCapabilities(ClientCapabilities.Schema).flat()));
+    // TODO(wittjosiah): Filter out schemas which the client has already registered.
     const newSchemas = schemas.filter((schema) => !previous.includes(schema));
     previous = schemas;
     client.addTypes(newSchemas);
   });
 
-  return contributes(Capabilities.Null, null, () => {
-    unsubscribeSystem();
-    unsubscribe();
-  });
+  return contributes(Capabilities.Null, null, () => unsubscribe());
 };

package/src/components/IdentityDialog.tsx

@@ -9,6 +9,7 @@ import { useClient } from '@dxos/react-client';
 import { Clipboard, Dialog } from '@dxos/react-ui';
 import { IdentityPanel, type IdentityPanelProps } from '@dxos/shell/react';
 
+import { MANAGE_CREDENTIALS_DIALOG } from './ManageCredentialsDialog';
 import { CLIENT_PLUGIN } from '../meta';
 import { ClientAction } from '../types';
 
@@ -44,6 +45,16 @@ export const IdentityDialog = (props: IdentityPanelProps) => {
     await dispatch(createIntent(ClientAction.ResetStorage, { target: 'deviceInvitation' }));
   }, [dispatch]);
 
+  const handleManageCredentials = useCallback(async () => {
+    await dispatch(
+      createIntent(LayoutAction.UpdateDialog, {
+        part: 'dialog',
+        subject: MANAGE_CREDENTIALS_DIALOG,
+        options: { state: true, blockAlign: 'start' },
+      }),
+    );
+  }, [dispatch]);
+
   return (
     <Dialog.Content>
       <Clipboard.Provider>
@@ -54,6 +65,7 @@ export const IdentityDialog = (props: IdentityPanelProps) => {
           onResetStorage={handleResetStorage}
           onRecover={handleRecover}
           onJoinNewIdentity={handleJoinNewIdentity}
+          onManageCredentials={handleManageCredentials}
         />
       </Clipboard.Provider>
     </Dialog.Content>

package/src/components/ManageCredentialsDialog.stories.tsx

@@ -0,0 +1,57 @@
+//
+// Copyright 2023 DXOS.org
+//
+
+import '@dxos-theme';
+
+import { type StoryObj, type Meta } from '@storybook/react';
+import React from 'react';
+
+import { IntentPlugin } from '@dxos/app-framework';
+import { withPluginManager } from '@dxos/app-framework/testing';
+import { AlertDialog } from '@dxos/react-ui';
+import { withTheme, withLayout } from '@dxos/storybook-utils';
+
+import { ManageCredentialsDialog } from './ManageCredentialsDialog';
+import { ClientPlugin } from '../ClientPlugin';
+import translations from '../translations';
+
+const Render = () => {
+  return (
+    <AlertDialog.Root open>
+      <AlertDialog.Overlay>
+        <ManageCredentialsDialog />
+      </AlertDialog.Overlay>
+    </AlertDialog.Root>
+  );
+};
+
+const meta: Meta = {
+  title: 'plugins/plugin-client/ManageCredentialsDialog',
+  component: ManageCredentialsDialog,
+  render: Render,
+  decorators: [
+    withPluginManager({
+      plugins: [
+        IntentPlugin(),
+        ClientPlugin({
+          onClientInitialized: async (_, client) => {
+            await client.halo.createIdentity();
+          },
+        }),
+      ],
+    }),
+    withTheme,
+    withLayout({ tooltips: true }),
+  ],
+  parameters: {
+    layout: 'fullscreen',
+    translations,
+  },
+};
+
+export default meta;
+
+type Story = StoryObj<typeof ManageCredentialsDialog>;
+
+export const Default: Story = {};

package/src/components/ManageCredentialsDialog.tsx

@@ -0,0 +1,64 @@
+//
+// Copyright 2024 DXOS.org
+//
+
+import { Receipt, Key } from '@phosphor-icons/react';
+import React, { useMemo } from 'react';
+
+import { createIntent, useIntentDispatcher } from '@dxos/app-framework';
+import { useCredentials } from '@dxos/react-client/halo';
+import { Dialog, Icon, List, ListItem, useTranslation } from '@dxos/react-ui';
+import { BifurcatedAction, type ActionMenuItem } from '@dxos/shell/react';
+
+import { CLIENT_PLUGIN } from '../meta';
+import { ClientAction } from '../types';
+
+export const MANAGE_CREDENTIALS_DIALOG = `${CLIENT_PLUGIN}/ManageCredentialsDialog`;
+
+// TODO(wittjosiah): Factor panel out to @dxos/shell.
+export const ManageCredentialsDialog = () => {
+  const { t } = useTranslation(CLIENT_PLUGIN);
+  const { dispatchPromise: dispatch } = useIntentDispatcher();
+  const credentials = useCredentials();
+  const recoveryCredentials = credentials.filter(
+    (credential) => credential.subject.assertion['@type'] === 'dxos.halo.credentials.IdentityRecovery',
+  );
+
+  // TODO(wittjosiah): Reconsile w/ RecoverySetupDialog actions.
+  const actions: Record<string, ActionMenuItem> = useMemo(
+    () => ({
+      createPasskey: {
+        label: t('create passkey label'),
+        description: t('create passkey description'),
+        // TODO(wittjosiah): Ideally this would be a `user-key` icon.
+        icon: Key,
+        onClick: () => dispatch(createIntent(ClientAction.CreatePasskey)),
+      },
+      createRecoveryCode: {
+        label: t('create recovery code label'),
+        description: t('create recovery code description'),
+        icon: Receipt,
+        onClick: () => dispatch(createIntent(ClientAction.CreateRecoveryCode)),
+      },
+    }),
+    [t],
+  );
+
+  return (
+    <Dialog.Content classNames='bs-content min-bs-[15rem] max-bs-full md:max-is-[25rem] overflow-hidden'>
+      <Dialog.Title>{t('manage credentials dialog title')}</Dialog.Title>
+      <List classNames='py-4'>
+        {recoveryCredentials.map((credential) => (
+          <ListItem.Root key={credential.id?.toHex()}>
+            <ListItem.Endcap>
+              <Icon icon='ph--key--regular' size={5} />
+            </ListItem.Endcap>
+            <ListItem.Heading>{credential.issuanceDate.toLocaleString()}</ListItem.Heading>
+          </ListItem.Root>
+        ))}
+      </List>
+      <div className='grow' />
+      <BifurcatedAction actions={actions} />
+    </Dialog.Content>
+  );
+};

package/src/components/RecoveryCodeDialog.stories.tsx

@@ -17,16 +17,16 @@ import translations from '../translations';
 
 const Render = () => {
   const client = useClient();
-  const [seedphrase, setSeedphrase] = useState<string>();
+  const [recoveryCode, setRecoveryCode] = useState<string>();
   useAsyncEffect(async () => {
-    const { seedphrase } = (await client.services.services.IdentityService?.createRecoveryPhrase()) ?? {};
-    setSeedphrase(seedphrase);
+    const { recoveryCode } = (await client.services.services.IdentityService?.createRecoveryCredential({})) ?? {};
+    setRecoveryCode(recoveryCode);
   }, [client]);
 
   return (
-    <AlertDialog.Root open={!!seedphrase}>
+    <AlertDialog.Root open={!!recoveryCode}>
       <AlertDialog.Overlay>
-        <RecoveryCodeDialog code={seedphrase ?? ''} />
+        <RecoveryCodeDialog code={recoveryCode ?? ''} />
       </AlertDialog.Overlay>
     </AlertDialog.Root>
   );

package/src/components/RecoveryCodeDialog.tsx

@@ -14,6 +14,7 @@ export type RecoveryCodeDialogProps = {
   code: string;
 };
 
+// TODO(wittjosiah): Factor panel out to @dxos/shell.
 export const RecoveryCodeDialog = ({ code }: RecoveryCodeDialogProps) => {
   const { t } = useTranslation(CLIENT_PLUGIN);
   const [confirmation, setConfirmation] = useState(false);
@@ -59,7 +60,7 @@ const Code = ({ code }: { code: string }) => {
       <Clipboard.IconButton value={code} classNames='absolute top-2 right-2 invisible group-hover:visible' />
       <div className='grid grid-cols-4'>
         {words.map((word, i) => (
-          <div key={i} className='flex items-center p-2 gap-2 items-center'>
+          <div key={i} className='flex items-center p-2 gap-2'>
             <div className='w-4 text-xs text-center text-subdued'>{i + 1}</div>
             <div className='text-sm'>{word}</div>
           </div>