@dxos/plugin-client 0.8.4-main.bc674ce → 0.8.4-main.bcb3aa67d6

package/dist/lib/browser/redeem-passkey-ODK47PIR.mjs

@@ -0,0 +1,82 @@
+import {
+  RedeemPasskey
+} from "./chunk-M43LJQ5U.mjs";
+import {
+  ClientCapabilities
+} from "./chunk-WNJRYPGG.mjs";
+import "./chunk-J5LGTIGS.mjs";
+
+// src/operations/redeem-passkey.ts
+import * as Effect from "effect/Effect";
+import * as Match from "effect/Match";
+import { Capability } from "@dxos/app-framework";
+import { decodeUrlSafeBase64, supportsNativePasskeys, loginNativePasskey } from "@dxos/app-toolkit";
+import { PublicKey } from "@dxos/client";
+import { invariant } from "@dxos/invariant";
+import { Operation } from "@dxos/operation";
+var __dxlog_file = "/__w/dxos/dxos/packages/plugins/plugin-client/src/operations/redeem-passkey.ts";
+var handler = RedeemPasskey.pipe(Operation.withHandler(Effect.fnUntraced(function* () {
+  const client = yield* Capability.get(ClientCapabilities.Client);
+  invariant(client.services.services.IdentityService, "IdentityService not available", {
+    F: __dxlog_file,
+    L: 22,
+    S: this,
+    A: [
+      "client.services.services.IdentityService",
+      "'IdentityService not available'"
+    ]
+  });
+  const { deviceKey, controlFeedKey, challenge } = yield* Effect.promise(() => client.services.services.IdentityService.requestRecoveryChallenge());
+  const { lookupKey, signature, clientDataJson, authenticatorData } = yield* Match.value(supportsNativePasskeys()).pipe(Match.when(true, () => Effect.gen(function* () {
+    const result = yield* Effect.promise(() => loginNativePasskey({
+      challenge: Uint8Array.from(Buffer.from(challenge, "base64"))
+    }));
+    invariant(result, "Native passkey login returned no result", {
+      F: __dxlog_file,
+      L: 35,
+      S: this,
+      A: [
+        "result",
+        "'Native passkey login returned no result'"
+      ]
+    });
+    return {
+      lookupKey: PublicKey.from(decodeUrlSafeBase64(result.user_handle)),
+      signature: Buffer.from(decodeUrlSafeBase64(result.signature)),
+      clientDataJson: Buffer.from(decodeUrlSafeBase64(result.client_data_json)),
+      authenticatorData: Buffer.from(decodeUrlSafeBase64(result.authenticator_data))
+    };
+  })), Match.orElse(() => Effect.gen(function* () {
+    const credential = yield* Effect.promise(() => navigator.credentials.get({
+      publicKey: {
+        challenge: Buffer.from(challenge, "base64"),
+        rpId: location.hostname,
+        userVerification: "required"
+      }
+    }));
+    return {
+      lookupKey: PublicKey.from(new Uint8Array(credential.response.userHandle)),
+      signature: Buffer.from(credential.response.signature),
+      clientDataJson: Buffer.from(credential.response.clientDataJSON),
+      authenticatorData: Buffer.from(credential.response.authenticatorData)
+    };
+  })));
+  yield* Effect.promise(() => client.services.services.IdentityService.recoverIdentity({
+    external: {
+      lookupKey,
+      deviceKey,
+      controlFeedKey,
+      signature,
+      clientDataJson,
+      authenticatorData
+    }
+  }, {
+    timeout: RECOVER_IDENTITY_RPC_TIMEOUT
+  }));
+})));
+var redeem_passkey_default = handler;
+var RECOVER_IDENTITY_RPC_TIMEOUT = 2e4;
+export {
+  redeem_passkey_default as default
+};
+//# sourceMappingURL=redeem-passkey-ODK47PIR.mjs.map

package/dist/lib/browser/redeem-passkey-ODK47PIR.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/operations/redeem-passkey.ts"],
+  "sourcesContent": ["//\n// Copyright 2025 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\nimport * as Match from 'effect/Match';\n\nimport { Capability } from '@dxos/app-framework';\nimport { decodeUrlSafeBase64, supportsNativePasskeys, loginNativePasskey } from '@dxos/app-toolkit';\nimport { PublicKey } from '@dxos/client';\nimport { invariant } from '@dxos/invariant';\nimport { Operation } from '@dxos/operation';\n\nimport { RedeemPasskey } from './definitions';\n\nimport { ClientCapabilities } from '../types';\n\nconst handler: Operation.WithHandler<typeof RedeemPasskey> = RedeemPasskey.pipe(\n  Operation.withHandler(\n    Effect.fnUntraced(function* () {\n      const client = yield* Capability.get(ClientCapabilities.Client);\n      invariant(client.services.services.IdentityService, 'IdentityService not available');\n      const { deviceKey, controlFeedKey, challenge } = yield* Effect.promise(() =>\n        client.services.services.IdentityService!.requestRecoveryChallenge(),\n      );\n\n      const { lookupKey, signature, clientDataJson, authenticatorData } = yield* Match.value(\n        supportsNativePasskeys(),\n      ).pipe(\n        Match.when(true, () =>\n          Effect.gen(function* () {\n            const result = yield* Effect.promise(() =>\n              loginNativePasskey({ challenge: Uint8Array.from(Buffer.from(challenge, 'base64')) }),\n            );\n            invariant(result, 'Native passkey login returned no result');\n            return {\n              lookupKey: PublicKey.from(decodeUrlSafeBase64(result.user_handle)),\n              signature: Buffer.from(decodeUrlSafeBase64(result.signature)),\n              clientDataJson: Buffer.from(decodeUrlSafeBase64(result.client_data_json)),\n              authenticatorData: Buffer.from(decodeUrlSafeBase64(result.authenticator_data)),\n            };\n          }),\n        ),\n        Match.orElse(() =>\n          Effect.gen(function* () {\n            const credential = yield* Effect.promise(() =>\n              navigator.credentials.get({\n                publicKey: {\n                  challenge: Buffer.from(challenge, 'base64'),\n                  rpId: location.hostname,\n                  userVerification: 'required',\n                },\n              }),\n            );\n            return {\n              lookupKey: PublicKey.from(new Uint8Array((credential as any).response.userHandle)),\n              signature: Buffer.from((credential as any).response.signature),\n              clientDataJson: Buffer.from((credential as any).response.clientDataJSON),\n              authenticatorData: Buffer.from((credential as any).response.authenticatorData),\n            };\n          }),\n        ),\n      );\n\n      yield* Effect.promise(() =>\n        client.services.services.IdentityService!.recoverIdentity(\n          {\n            external: {\n              lookupKey,\n              deviceKey,\n              controlFeedKey,\n              signature,\n              clientDataJson,\n              authenticatorData,\n            },\n          },\n          { timeout: RECOVER_IDENTITY_RPC_TIMEOUT },\n        ),\n      );\n    }),\n  ),\n);\n\nexport default handler;\n\nconst RECOVER_IDENTITY_RPC_TIMEOUT = 20_000;\n"],
+  "mappings": ";;;;;;;;;AAIA,YAAYA,YAAY;AACxB,YAAYC,WAAW;AAEvB,SAASC,kBAAkB;AAC3B,SAASC,qBAAqBC,wBAAwBC,0BAA0B;AAChF,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;;AAM1B,IAAMC,UAAuDC,cAAcC,KACzEC,UAAUC,YACDC,kBAAW,aAAA;AAChB,QAAMC,SAAS,OAAOC,WAAWC,IAAIC,mBAAmBC,MAAM;AAC9DC,YAAUL,OAAOM,SAASA,SAASC,iBAAiB,iCAAA;;;;;;;;;AACpD,QAAM,EAAEC,WAAWC,gBAAgBC,UAAS,IAAK,OAAcC,eAAQ,MACrEX,OAAOM,SAASA,SAASC,gBAAiBK,yBAAwB,CAAA;AAGpE,QAAM,EAAEC,WAAWC,WAAWC,gBAAgBC,kBAAiB,IAAK,OAAaC,YAC/EC,uBAAAA,CAAAA,EACAtB,KACMuB,WAAK,MAAM,MACRC,WAAI,aAAA;AACT,UAAMC,SAAS,OAAcV,eAAQ,MACnCW,mBAAmB;MAAEZ,WAAWa,WAAWC,KAAKC,OAAOD,KAAKd,WAAW,QAAA,CAAA;IAAW,CAAA,CAAA;AAEpFL,cAAUgB,QAAQ,2CAAA;;;;;;;;;AAClB,WAAO;MACLR,WAAWa,UAAUF,KAAKG,oBAAoBN,OAAOO,WAAW,CAAA;MAChEd,WAAWW,OAAOD,KAAKG,oBAAoBN,OAAOP,SAAS,CAAA;MAC3DC,gBAAgBU,OAAOD,KAAKG,oBAAoBN,OAAOQ,gBAAgB,CAAA;MACvEb,mBAAmBS,OAAOD,KAAKG,oBAAoBN,OAAOS,kBAAkB,CAAA;IAC9E;EACF,CAAA,CAAA,GAEIC,aAAO,MACJX,WAAI,aAAA;AACT,UAAMY,aAAa,OAAcrB,eAAQ,MACvCsB,UAAUC,YAAYhC,IAAI;MACxBiC,WAAW;QACTzB,WAAWe,OAAOD,KAAKd,WAAW,QAAA;QAClC0B,MAAMC,SAASC;QACfC,kBAAkB;MACpB;IACF,CAAA,CAAA;AAEF,WAAO;MACL1B,WAAWa,UAAUF,KAAK,IAAID,WAAYS,WAAmBQ,SAASC,UAAU,CAAA;MAChF3B,WAAWW,OAAOD,KAAMQ,WAAmBQ,SAAS1B,SAAS;MAC7DC,gBAAgBU,OAAOD,KAAMQ,WAAmBQ,SAASE,cAAc;MACvE1B,mBAAmBS,OAAOD,KAAMQ,WAAmBQ,SAASxB,iBAAiB;IAC/E;EACF,CAAA,CAAA,CAAA;AAIJ,SAAcL,eAAQ,MACpBX,OAAOM,SAASA,SAASC,gBAAiBoC,gBACxC;IACEC,UAAU;MACR/B;MACAL;MACAC;MACAK;MACAC;MACAC;IACF;EACF,GACA;IAAE6B,SAASC;EAA6B,CAAA,CAAA;AAG9C,CAAA,CAAA,CAAA;AAIJ,IAAA,yBAAepD;AAEf,IAAMoD,+BAA+B;",
+  "names": ["Effect", "Match", "Capability", "decodeUrlSafeBase64", "supportsNativePasskeys", "loginNativePasskey", "PublicKey", "invariant", "Operation", "handler", "RedeemPasskey", "pipe", "Operation", "withHandler", "fnUntraced", "client", "Capability", "get", "ClientCapabilities", "Client", "invariant", "services", "IdentityService", "deviceKey", "controlFeedKey", "challenge", "promise", "requestRecoveryChallenge", "lookupKey", "signature", "clientDataJson", "authenticatorData", "value", "supportsNativePasskeys", "when", "gen", "result", "loginNativePasskey", "Uint8Array", "from", "Buffer", "PublicKey", "decodeUrlSafeBase64", "user_handle", "client_data_json", "authenticator_data", "orElse", "credential", "navigator", "credentials", "publicKey", "rpId", "location", "hostname", "userVerification", "response", "userHandle", "clientDataJSON", "recoverIdentity", "external", "timeout", "RECOVER_IDENTITY_RPC_TIMEOUT"]
+}

package/dist/lib/browser/redeem-token-OYXEFDM3.mjs

@@ -0,0 +1,37 @@
+import {
+  RedeemToken
+} from "./chunk-M43LJQ5U.mjs";
+import {
+  ClientCapabilities
+} from "./chunk-WNJRYPGG.mjs";
+import "./chunk-J5LGTIGS.mjs";
+
+// src/operations/redeem-token.ts
+import * as Effect from "effect/Effect";
+import { Capability } from "@dxos/app-framework";
+import { invariant } from "@dxos/invariant";
+import { Operation } from "@dxos/operation";
+var __dxlog_file = "/__w/dxos/dxos/packages/plugins/plugin-client/src/operations/redeem-token.ts";
+var handler = RedeemToken.pipe(Operation.withHandler(Effect.fnUntraced(function* (data) {
+  const client = yield* Capability.get(ClientCapabilities.Client);
+  invariant(client.services.services.IdentityService, "IdentityService not available", {
+    F: __dxlog_file,
+    L: 19,
+    S: this,
+    A: [
+      "client.services.services.IdentityService",
+      "'IdentityService not available'"
+    ]
+  });
+  yield* Effect.promise(() => client.services.services.IdentityService.recoverIdentity({
+    token: data.token
+  }, {
+    timeout: RECOVER_IDENTITY_RPC_TIMEOUT
+  }));
+})));
+var redeem_token_default = handler;
+var RECOVER_IDENTITY_RPC_TIMEOUT = 2e4;
+export {
+  redeem_token_default as default
+};
+//# sourceMappingURL=redeem-token-OYXEFDM3.mjs.map

package/dist/lib/browser/redeem-token-OYXEFDM3.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/operations/redeem-token.ts"],
+  "sourcesContent": ["//\n// Copyright 2025 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport { Capability } from '@dxos/app-framework';\nimport { invariant } from '@dxos/invariant';\nimport { Operation } from '@dxos/operation';\n\nimport { RedeemToken } from './definitions';\n\nimport { ClientCapabilities } from '../types';\n\nconst handler: Operation.WithHandler<typeof RedeemToken> = RedeemToken.pipe(\n  Operation.withHandler(\n    Effect.fnUntraced(function* (data) {\n      const client = yield* Capability.get(ClientCapabilities.Client);\n      invariant(client.services.services.IdentityService, 'IdentityService not available');\n      yield* Effect.promise(() =>\n        client.services.services.IdentityService!.recoverIdentity(\n          { token: data.token },\n          { timeout: RECOVER_IDENTITY_RPC_TIMEOUT },\n        ),\n      );\n    }),\n  ),\n);\n\nexport default handler;\n\nconst RECOVER_IDENTITY_RPC_TIMEOUT = 20_000;\n"],
+  "mappings": ";;;;;;;;;AAIA,YAAYA,YAAY;AAExB,SAASC,kBAAkB;AAC3B,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;;AAM1B,IAAMC,UAAqDC,YAAYC,KACrEC,UAAUC,YACDC,kBAAW,WAAWC,MAAI;AAC/B,QAAMC,SAAS,OAAOC,WAAWC,IAAIC,mBAAmBC,MAAM;AAC9DC,YAAUL,OAAOM,SAASA,SAASC,iBAAiB,iCAAA;;;;;;;;;AACpD,SAAcC,eAAQ,MACpBR,OAAOM,SAASA,SAASC,gBAAiBE,gBACxC;IAAEC,OAAOX,KAAKW;EAAM,GACpB;IAAEC,SAASC;EAA6B,CAAA,CAAA;AAG9C,CAAA,CAAA,CAAA;AAIJ,IAAA,uBAAenB;AAEf,IAAMmB,+BAA+B;",
+  "names": ["Effect", "Capability", "invariant", "Operation", "handler", "RedeemToken", "pipe", "Operation", "withHandler", "fnUntraced", "data", "client", "Capability", "get", "ClientCapabilities", "Client", "invariant", "services", "IdentityService", "promise", "recoverIdentity", "token", "timeout", "RECOVER_IDENTITY_RPC_TIMEOUT"]
+}

package/dist/lib/browser/reset-storage-JAU4CS2U.mjs

@@ -0,0 +1,26 @@
+import {
+  RESET_DIALOG
+} from "./chunk-ELAYKIQU.mjs";
+import {
+  ResetStorage
+} from "./chunk-M43LJQ5U.mjs";
+import "./chunk-J5LGTIGS.mjs";
+
+// src/operations/reset-storage.ts
+import * as Effect from "effect/Effect";
+import { LayoutOperation } from "@dxos/app-toolkit";
+import { Operation } from "@dxos/operation";
+var handler = ResetStorage.pipe(Operation.withHandler(Effect.fnUntraced(function* (data) {
+  yield* Operation.invoke(LayoutOperation.UpdateDialog, {
+    subject: RESET_DIALOG,
+    blockAlign: "start",
+    props: {
+      mode: data.mode ?? "reset storage"
+    }
+  });
+})));
+var reset_storage_default = handler;
+export {
+  reset_storage_default as default
+};
+//# sourceMappingURL=reset-storage-JAU4CS2U.mjs.map

package/dist/lib/browser/reset-storage-JAU4CS2U.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/operations/reset-storage.ts"],
+  "sourcesContent": ["//\n// Copyright 2025 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport { LayoutOperation } from '@dxos/app-toolkit';\nimport { Operation } from '@dxos/operation';\n\nimport { ResetStorage } from './definitions';\n\nimport { RESET_DIALOG } from '../constants';\n\nconst handler: Operation.WithHandler<typeof ResetStorage> = ResetStorage.pipe(\n  Operation.withHandler(\n    Effect.fnUntraced(function* (data) {\n      yield* Operation.invoke(LayoutOperation.UpdateDialog, {\n        subject: RESET_DIALOG,\n        blockAlign: 'start',\n        props: {\n          mode: data.mode ?? 'reset storage',\n        },\n      });\n    }),\n  ),\n);\n\nexport default handler;\n"],
+  "mappings": ";;;;;;;;;AAIA,YAAYA,YAAY;AAExB,SAASC,uBAAuB;AAChC,SAASC,iBAAiB;AAM1B,IAAMC,UAAsDC,aAAaC,KACvEC,UAAUC,YACDC,kBAAW,WAAWC,MAAI;AAC/B,SAAOH,UAAUI,OAAOC,gBAAgBC,cAAc;IACpDC,SAASC;IACTC,YAAY;IACZC,OAAO;MACLC,MAAMR,KAAKQ,QAAQ;IACrB;EACF,CAAA;AACF,CAAA,CAAA,CAAA;AAIJ,IAAA,wBAAed;",
+  "names": ["Effect", "LayoutOperation", "Operation", "handler", "ResetStorage", "pipe", "Operation", "withHandler", "fnUntraced", "data", "invoke", "LayoutOperation", "UpdateDialog", "subject", "RESET_DIALOG", "blockAlign", "props", "mode"]
+}

package/dist/lib/browser/share-identity-H2JNYYCP.mjs

@@ -0,0 +1,31 @@
+import {
+  ShareIdentity
+} from "./chunk-M43LJQ5U.mjs";
+import {
+  Account
+} from "./chunk-WNJRYPGG.mjs";
+import "./chunk-J5LGTIGS.mjs";
+
+// src/operations/share-identity.ts
+import * as Effect from "effect/Effect";
+import { LayoutOperation, getSpacePath } from "@dxos/app-toolkit";
+import { Operation } from "@dxos/operation";
+import { ObservabilityOperation } from "@dxos/plugin-observability/operations";
+var handler = ShareIdentity.pipe(Operation.withHandler(Effect.fnUntraced(function* () {
+  yield* Operation.invoke(LayoutOperation.SwitchWorkspace, {
+    subject: getSpacePath(Account.id)
+  });
+  yield* Operation.invoke(LayoutOperation.Open, {
+    subject: [
+      `${getSpacePath(Account.id)}/${Account.Profile}`
+    ]
+  });
+  yield* Operation.schedule(ObservabilityOperation.SendEvent, {
+    name: "identity.share"
+  });
+})));
+var share_identity_default = handler;
+export {
+  share_identity_default as default
+};
+//# sourceMappingURL=share-identity-H2JNYYCP.mjs.map

package/dist/lib/browser/share-identity-H2JNYYCP.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/operations/share-identity.ts"],
+  "sourcesContent": ["//\n// Copyright 2025 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport { LayoutOperation, getSpacePath } from '@dxos/app-toolkit';\nimport { Operation } from '@dxos/operation';\nimport { ObservabilityOperation } from '@dxos/plugin-observability/operations';\n\nimport { ShareIdentity } from './definitions';\n\nimport { Account } from '../types';\n\nconst handler: Operation.WithHandler<typeof ShareIdentity> = ShareIdentity.pipe(\n  Operation.withHandler(\n    Effect.fnUntraced(function* () {\n      yield* Operation.invoke(LayoutOperation.SwitchWorkspace, { subject: getSpacePath(Account.id) });\n      yield* Operation.invoke(LayoutOperation.Open, {\n        subject: [`${getSpacePath(Account.id)}/${Account.Profile}`],\n      });\n      yield* Operation.schedule(ObservabilityOperation.SendEvent, { name: 'identity.share' });\n    }),\n  ),\n);\n\nexport default handler;\n"],
+  "mappings": ";;;;;;;;;AAIA,YAAYA,YAAY;AAExB,SAASC,iBAAiBC,oBAAoB;AAC9C,SAASC,iBAAiB;AAC1B,SAASC,8BAA8B;AAMvC,IAAMC,UAAuDC,cAAcC,KACzEC,UAAUC,YACDC,kBAAW,aAAA;AAChB,SAAOF,UAAUG,OAAOC,gBAAgBC,iBAAiB;IAAEC,SAASC,aAAaC,QAAQC,EAAE;EAAE,CAAA;AAC7F,SAAOT,UAAUG,OAAOC,gBAAgBM,MAAM;IAC5CJ,SAAS;MAAC,GAAGC,aAAaC,QAAQC,EAAE,CAAA,IAAKD,QAAQG,OAAO;;EAC1D,CAAA;AACA,SAAOX,UAAUY,SAASC,uBAAuBC,WAAW;IAAEC,MAAM;EAAiB,CAAA;AACvF,CAAA,CAAA,CAAA;AAIJ,IAAA,yBAAelB;",
+  "names": ["Effect", "LayoutOperation", "getSpacePath", "Operation", "ObservabilityOperation", "handler", "ShareIdentity", "pipe", "Operation", "withHandler", "fnUntraced", "invoke", "LayoutOperation", "SwitchWorkspace", "subject", "getSpacePath", "Account", "id", "Open", "Profile", "schedule", "ObservabilityOperation", "SendEvent", "name"]
+}

package/dist/lib/browser/testing/index.mjs

@@ -0,0 +1,22 @@
+import "../chunk-J5LGTIGS.mjs";
+
+// src/testing/initializeIdentity.ts
+import * as Effect from "effect/Effect";
+import { PERSONAL_SPACE_TAG } from "@dxos/app-toolkit";
+var initializeIdentity = (client) => Effect.gen(function* () {
+  const identity = yield* Effect.promise(() => client.halo.createIdentity());
+  const personalSpace = yield* Effect.promise(() => client.spaces.create({}, {
+    tags: [
+      PERSONAL_SPACE_TAG
+    ]
+  }));
+  yield* Effect.promise(() => personalSpace.waitUntilReady());
+  return {
+    identity,
+    personalSpace
+  };
+});
+export {
+  initializeIdentity
+};
+//# sourceMappingURL=index.mjs.map

package/dist/lib/browser/testing/index.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/testing/initializeIdentity.ts"],
+  "sourcesContent": ["//\n// Copyright 2025 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport { PERSONAL_SPACE_TAG } from '@dxos/app-toolkit';\nimport { type Client } from '@dxos/client';\nimport { type Space } from '@dxos/client-protocol';\nimport { type Identity } from '@dxos/protocols/proto/dxos/client/services';\n\n/**\n * Create an identity and a personal space.\n * Returns the identity and space for further setup.\n */\nexport const initializeIdentity = (\n  client: Client,\n): Effect.Effect<{ identity: Identity; personalSpace: Space }, never, never> =>\n  Effect.gen(function* () {\n    const identity = yield* Effect.promise(() => client.halo.createIdentity());\n    const personalSpace = yield* Effect.promise(() => client.spaces.create({}, { tags: [PERSONAL_SPACE_TAG] }));\n    yield* Effect.promise(() => personalSpace.waitUntilReady());\n    return { identity, personalSpace };\n  });\n"],
+  "mappings": ";;;AAIA,YAAYA,YAAY;AAExB,SAASC,0BAA0B;AAS5B,IAAMC,qBAAqB,CAChCC,WAEOC,WAAI,aAAA;AACT,QAAMC,WAAW,OAAcC,eAAQ,MAAMH,OAAOI,KAAKC,eAAc,CAAA;AACvE,QAAMC,gBAAgB,OAAcH,eAAQ,MAAMH,OAAOO,OAAOC,OAAO,CAAC,GAAG;IAAEC,MAAM;MAACC;;EAAoB,CAAA,CAAA;AACxG,SAAcP,eAAQ,MAAMG,cAAcK,eAAc,CAAA;AACxD,SAAO;IAAET;IAAUI;EAAc;AACnC,CAAA;",
+  "names": ["Effect", "PERSONAL_SPACE_TAG", "initializeIdentity", "client", "gen", "identity", "promise", "halo", "createIdentity", "personalSpace", "spaces", "create", "tags", "PERSONAL_SPACE_TAG", "waitUntilReady"]
+}

package/dist/lib/browser/types/index.mjs

@@ -2,14 +2,13 @@ import {
   Account,
   ClientAction,
   ClientCapabilities,
-  ClientEvents,
-  ClientOperation
-} from "../chunk-4BZGRIFS.mjs";
+  ClientEvents
+} from "../chunk-WNJRYPGG.mjs";
+import "../chunk-J5LGTIGS.mjs";
 export {
   Account,
   ClientAction,
   ClientCapabilities,
-  ClientEvents,
-  ClientOperation
+  ClientEvents
 };
 //# sourceMappingURL=index.mjs.map

package/dist/lib/node-esm/chunk-HSLMI22Q.mjs

@@ -0,0 +1,11 @@
+import { createRequire } from 'node:module';const require = createRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+export {
+  __export
+};
+//# sourceMappingURL=chunk-HSLMI22Q.mjs.map

package/dist/lib/node-esm/chunk-HSLMI22Q.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/lib/node-esm/chunk-IT5LAIV3.mjs

@@ -0,0 +1,133 @@
+import { createRequire } from 'node:module';const require = createRequire(import.meta.url);
+
+// src/types/capabilities.ts
+import { Capability } from "@dxos/app-framework";
+import { meta } from "#meta";
+(function(ClientCapabilities2) {
+  ClientCapabilities2.Client = Capability.make(`${meta.id}.capability.client`);
+  ClientCapabilities2.Schema = Capability.make(`${meta.id}.capability.schema`);
+  ClientCapabilities2.Migration = Capability.make(`${meta.id}.capability.migration`);
+})(ClientCapabilities || (ClientCapabilities = {}));
+var ClientCapabilities;
+
+// src/types/events.ts
+import { ActivationEvent } from "@dxos/app-framework";
+import { meta as meta2 } from "#meta";
+(function(ClientEvents2) {
+  ClientEvents2.ClientReady = ActivationEvent.make(`${meta2.id}.event.client-ready`);
+  ClientEvents2.SetupSchema = ActivationEvent.make(`${meta2.id}.event.setup-schema`);
+  ClientEvents2.SetupMigration = ActivationEvent.make(`${meta2.id}.event.setup-migration`);
+  ClientEvents2.IdentityCreated = ActivationEvent.make(`${meta2.id}.event.identity-created`);
+  ClientEvents2.SpacesReady = ActivationEvent.make(`${meta2.id}.event.spaces-ready`);
+})(ClientEvents || (ClientEvents = {}));
+var ClientEvents;
+
+// src/types/schema.ts
+import * as Schema from "effect/Schema";
+import { PublicKey } from "@dxos/client";
+import { meta as meta3 } from "#meta";
+var IdentitySchema = Schema.Struct({
+  identityKey: Schema.instanceOf(PublicKey),
+  spaceKey: Schema.optional(Schema.instanceOf(PublicKey)),
+  profile: Schema.optional(Schema.Struct({
+    displayName: Schema.optional(Schema.String),
+    avatarCid: Schema.optional(Schema.String),
+    data: Schema.optional(Schema.Record({
+      key: Schema.String,
+      value: Schema.Any
+    }))
+  }))
+});
+(function(ClientAction2) {
+  const ProfileSchema = Schema.Struct({
+    displayName: Schema.optional(Schema.String),
+    avatarCid: Schema.optional(Schema.String),
+    data: Schema.optional(Schema.Record({
+      key: Schema.String,
+      value: Schema.Any
+    }))
+  });
+  class CreateIdentity extends Schema.TaggedClass()(`${meta3.id}.action.create-identity`, {
+    input: ProfileSchema,
+    output: IdentitySchema
+  }) {
+  }
+  ClientAction2.CreateIdentity = CreateIdentity;
+  class JoinIdentity extends Schema.TaggedClass()(`${meta3.id}.action.join-identity`, {
+    input: Schema.Struct({
+      invitationCode: Schema.optional(Schema.String)
+    }),
+    output: Schema.Void
+  }) {
+  }
+  ClientAction2.JoinIdentity = JoinIdentity;
+  class ShareIdentity extends Schema.TaggedClass()(`${meta3.id}.action.share-identity`, {
+    input: Schema.Void,
+    output: Schema.Void
+  }) {
+  }
+  ClientAction2.ShareIdentity = ShareIdentity;
+  class RecoverIdentity extends Schema.TaggedClass()(`${meta3.id}.action.recover-identity`, {
+    input: Schema.Void,
+    output: Schema.Void
+  }) {
+  }
+  ClientAction2.RecoverIdentity = RecoverIdentity;
+  class ResetStorage extends Schema.TaggedClass()(`${meta3.id}.action.reset-storage`, {
+    input: Schema.Struct({
+      mode: Schema.optional(Schema.String)
+    }),
+    output: Schema.Void
+  }) {
+  }
+  ClientAction2.ResetStorage = ResetStorage;
+  class CreateAgent extends Schema.TaggedClass()(`${meta3.id}.action.create-agent`, {
+    input: Schema.Void,
+    output: Schema.Void
+  }) {
+  }
+  ClientAction2.CreateAgent = CreateAgent;
+  class CreateRecoveryCode extends Schema.TaggedClass()(`${meta3.id}.action.create-recovery-code`, {
+    input: Schema.Void,
+    output: Schema.Void
+  }) {
+  }
+  ClientAction2.CreateRecoveryCode = CreateRecoveryCode;
+  class CreatePasskey extends Schema.TaggedClass()(`${meta3.id}.action.create-passkey`, {
+    input: Schema.Void,
+    output: Schema.Void
+  }) {
+  }
+  ClientAction2.CreatePasskey = CreatePasskey;
+  class RedeemPasskey extends Schema.TaggedClass()(`${meta3.id}.action.redeem-passkey`, {
+    input: Schema.Void,
+    output: Schema.Void
+  }) {
+  }
+  ClientAction2.RedeemPasskey = RedeemPasskey;
+  class RedeemToken extends Schema.TaggedClass()(`${meta3.id}.action.redeem-token`, {
+    input: Schema.Struct({
+      token: Schema.String
+    }),
+    output: Schema.Void
+  }) {
+  }
+  ClientAction2.RedeemToken = RedeemToken;
+})(ClientAction || (ClientAction = {}));
+(function(Account2) {
+  const _id = "dxos.org.plugin.client.account";
+  Account2.id = `!${_id}`;
+  Account2.Profile = `${_id}.profile`;
+  Account2.Devices = `${_id}.devices`;
+  Account2.Security = `${_id}.security`;
+})(Account || (Account = {}));
+var ClientAction;
+var Account;
+
+export {
+  ClientCapabilities,
+  ClientEvents,
+  ClientAction,
+  Account
+};
+//# sourceMappingURL=chunk-IT5LAIV3.mjs.map

package/dist/lib/node-esm/chunk-IT5LAIV3.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/types/capabilities.ts", "../../../src/types/events.ts", "../../../src/types/schema.ts"],
+  "sourcesContent": ["//\n// Copyright 2025 DXOS.org\n//\n\nimport { Capability } from '@dxos/app-framework';\nimport { type Client } from '@dxos/client';\nimport { type ObjectMigration } from '@dxos/client/echo';\nimport { type Type } from '@dxos/echo';\n\nimport { meta } from '#meta';\n\nexport namespace ClientCapabilities {\n  export const Client = Capability.make<Client>(`${meta.id}.capability.client`);\n  export const Schema = Capability.make<Type.AnyEntity[]>(`${meta.id}.capability.schema`);\n  export const Migration = Capability.make<ObjectMigration[]>(`${meta.id}.capability.migration`);\n}\n", "//\n// Copyright 2025 DXOS.org\n//\n\nimport { ActivationEvent } from '@dxos/app-framework';\n\nimport { meta } from '#meta';\n\nexport namespace ClientEvents {\n  export const ClientReady = ActivationEvent.make(`${meta.id}.event.client-ready`);\n  export const SetupSchema = ActivationEvent.make(`${meta.id}.event.setup-schema`);\n  export const SetupMigration = ActivationEvent.make(`${meta.id}.event.setup-migration`);\n  export const IdentityCreated = ActivationEvent.make(`${meta.id}.event.identity-created`);\n  export const SpacesReady = ActivationEvent.make(`${meta.id}.event.spaces-ready`);\n}\n", "//\n// Copyright 2024 DXOS.org\n//\n\nimport type * as Effect from 'effect/Effect';\nimport * as Schema from 'effect/Schema';\n\nimport { Capability } from '@dxos/app-framework';\nimport { type Client, type ClientOptions, PublicKey } from '@dxos/client';\n\nimport { meta } from '#meta';\n\n// TODO(wittjosiah): Factor out. Generate?\nconst IdentitySchema = Schema.Struct({\n  identityKey: Schema.instanceOf(PublicKey),\n  spaceKey: Schema.optional(Schema.instanceOf(PublicKey)),\n  profile: Schema.optional(\n    Schema.Struct({\n      displayName: Schema.optional(Schema.String),\n      avatarCid: Schema.optional(Schema.String),\n      data: Schema.optional(Schema.Record({ key: Schema.String, value: Schema.Any })),\n    }),\n  ),\n});\n\nexport namespace ClientAction {\n  const ProfileSchema = Schema.Struct({\n    displayName: Schema.optional(Schema.String),\n    avatarCid: Schema.optional(Schema.String),\n    data: Schema.optional(Schema.Record({ key: Schema.String, value: Schema.Any })),\n  });\n\n  export class CreateIdentity extends Schema.TaggedClass<CreateIdentity>()(`${meta.id}.action.create-identity`, {\n    input: ProfileSchema,\n    output: IdentitySchema,\n  }) {}\n\n  export class JoinIdentity extends Schema.TaggedClass<JoinIdentity>()(`${meta.id}.action.join-identity`, {\n    input: Schema.Struct({\n      invitationCode: Schema.optional(Schema.String),\n    }),\n    output: Schema.Void,\n  }) {}\n\n  export class ShareIdentity extends Schema.TaggedClass<ShareIdentity>()(`${meta.id}.action.share-identity`, {\n    input: Schema.Void,\n    output: Schema.Void,\n  }) {}\n\n  export class RecoverIdentity extends Schema.TaggedClass<RecoverIdentity>()(`${meta.id}.action.recover-identity`, {\n    input: Schema.Void,\n    output: Schema.Void,\n  }) {}\n\n  export class ResetStorage extends Schema.TaggedClass<ResetStorage>()(`${meta.id}.action.reset-storage`, {\n    input: Schema.Struct({\n      mode: Schema.optional(Schema.String),\n    }),\n    output: Schema.Void,\n  }) {}\n\n  export class CreateAgent extends Schema.TaggedClass<CreateAgent>()(`${meta.id}.action.create-agent`, {\n    input: Schema.Void,\n    output: Schema.Void,\n  }) {}\n\n  export class CreateRecoveryCode extends Schema.TaggedClass<CreateRecoveryCode>()(\n    `${meta.id}.action.create-recovery-code`,\n    {\n      input: Schema.Void,\n      output: Schema.Void,\n    },\n  ) {}\n\n  export class CreatePasskey extends Schema.TaggedClass<CreatePasskey>()(`${meta.id}.action.create-passkey`, {\n    input: Schema.Void,\n    output: Schema.Void,\n  }) {}\n\n  export class RedeemPasskey extends Schema.TaggedClass<RedeemPasskey>()(`${meta.id}.action.redeem-passkey`, {\n    input: Schema.Void,\n    output: Schema.Void,\n  }) {}\n\n  export class RedeemToken extends Schema.TaggedClass<RedeemToken>()(`${meta.id}.action.redeem-token`, {\n    input: Schema.Struct({\n      token: Schema.String,\n    }),\n    output: Schema.Void,\n  }) {}\n}\n\nexport type ClientPluginOptions = ClientOptions & {\n  /**\n   * Base origin for the invitation link.\n   */\n  shareableLinkOrigin?: string;\n\n  /**\n   * Path for the invitation link.\n   */\n  invitationPath?: string;\n\n  /**\n   * Query parameter for the invitation code.\n   */\n  invitationProp?: string;\n\n  /**\n   * Run after the client has been initialized.\n   * Plugin context is provided so capabilities are accessible.\n   */\n  onClientInitialized?: (params: { client: Client }) => Effect.Effect<void, Error | never, Capability.Service | never>;\n\n  /**\n   * Called when spaces are ready.\n   * Plugin context is provided so capabilities are accessible.\n   */\n  onSpacesReady?: (params: { client: Client }) => Effect.Effect<void, Error | never, Capability.Service | never>;\n\n  /**\n   * Called when the client is reset.\n   * Plugin context is provided so capabilities are accessible.\n   */\n  onReset?: (params: { target?: string }) => Effect.Effect<void, Error | never, Capability.Service | never>;\n};\n\nexport namespace Account {\n  // TODO(wittjosiah): Cannot use slashes in ids until we have a router which decouples ids from url paths.\n  const _id = 'dxos.org.plugin.client.account';\n  // TODO(wittjosiah): This is a hack to prevent the previous deck from being set for pinned items.\n  //  Ideally this should be worked into the data model in a generic way.\n  export const id = `!${_id}`;\n\n  export const Profile = `${_id}.profile`;\n  export const Devices = `${_id}.devices`;\n  export const Security = `${_id}.security`;\n}\n"],
+  "mappings": ";;;AAIA,SAASA,kBAAkB;AAK3B,SAASC,YAAY;UAEJC,qBAAAA;sBACFC,SAASC,WAAWC,KAAa,GAAGC,KAAKC,EAAE,oBAAoB;sBAC/DC,SAASJ,WAAWC,KAAuB,GAAGC,KAAKC,EAAE,oBAAoB;sBACzEE,YAAYL,WAAWC,KAAwB,GAAGC,KAAKC,EAAE,uBAAuB;AAC/F,GAJiBL,uBAAAA,qBAAAA,CAAAA,EAAAA;;;;ACPjB,SAASQ,uBAAuB;AAEhC,SAASC,QAAAA,aAAY;UAEJC,eAAAA;gBACFC,cAAcC,gBAAgBC,KAAK,GAAGC,MAAKC,EAAE,qBAAqB;gBAClEC,cAAcJ,gBAAgBC,KAAK,GAAGC,MAAKC,EAAE,qBAAqB;gBAClEE,iBAAiBL,gBAAgBC,KAAK,GAAGC,MAAKC,EAAE,wBAAwB;gBACxEG,kBAAkBN,gBAAgBC,KAAK,GAAGC,MAAKC,EAAE,yBAAyB;gBAC1EI,cAAcP,gBAAgBC,KAAK,GAAGC,MAAKC,EAAE,qBAAqB;AACjF,GANiBL,iBAAAA,eAAAA,CAAAA,EAAAA;;;;ACHjB,YAAYU,YAAY;AAGxB,SAA0CC,iBAAiB;AAE3D,SAASC,QAAAA,aAAY;AAGrB,IAAMC,iBAAwBC,cAAO;EACnCC,aAAoBC,kBAAWC,SAAAA;EAC/BC,UAAiBC,gBAAgBH,kBAAWC,SAAAA,CAAAA;EAC5CG,SAAgBD,gBACPL,cAAO;IACZO,aAAoBF,gBAAgBG,aAAM;IAC1CC,WAAkBJ,gBAAgBG,aAAM;IACxCE,MAAaL,gBAAgBM,cAAO;MAAEC,KAAYJ;MAAQK,OAAcC;IAAI,CAAA,CAAA;EAC9E,CAAA,CAAA;AAEJ,CAAA;UAEiBC,eAAAA;AACf,QAAMC,gBAAuBhB,cAAO;IAClCO,aAAoBF,gBAAgBG,aAAM;IAC1CC,WAAkBJ,gBAAgBG,aAAM;IACxCE,MAAaL,gBAAgBM,cAAO;MAAEC,KAAYJ;MAAQK,OAAcC;IAAI,CAAA,CAAA;EAC9E,CAAA;EAEO,MAAMG,uBAA8BC,mBAAW,EAAmB,GAAGC,MAAKC,EAAE,2BAA2B;IAC5GC,OAAOL;IACPM,QAAQvB;EACV,CAAA,EAAA;EAAI;gBAHSkB,iBAAAA;EAKN,MAAMM,qBAA4BL,mBAAW,EAAiB,GAAGC,MAAKC,EAAE,yBAAyB;IACtGC,OAAcrB,cAAO;MACnBwB,gBAAuBnB,gBAAgBG,aAAM;IAC/C,CAAA;IACAc,QAAeG;EACjB,CAAA,EAAA;EAAI;gBALSF,eAAAA;EAON,MAAMG,sBAA6BR,mBAAW,EAAkB,GAAGC,MAAKC,EAAE,0BAA0B;IACzGC,OAAcI;IACdH,QAAeG;EACjB,CAAA,EAAA;EAAI;gBAHSC,gBAAAA;EAKN,MAAMC,wBAA+BT,mBAAW,EAAoB,GAAGC,MAAKC,EAAE,4BAA4B;IAC/GC,OAAcI;IACdH,QAAeG;EACjB,CAAA,EAAA;EAAI;gBAHSE,kBAAAA;EAKN,MAAMC,qBAA4BV,mBAAW,EAAiB,GAAGC,MAAKC,EAAE,yBAAyB;IACtGC,OAAcrB,cAAO;MACnB6B,MAAaxB,gBAAgBG,aAAM;IACrC,CAAA;IACAc,QAAeG;EACjB,CAAA,EAAA;EAAI;gBALSG,eAAAA;EAON,MAAME,oBAA2BZ,mBAAW,EAAgB,GAAGC,MAAKC,EAAE,wBAAwB;IACnGC,OAAcI;IACdH,QAAeG;EACjB,CAAA,EAAA;EAAI;gBAHSK,cAAAA;EAKN,MAAMC,2BAAkCb,mBAAW,EACxD,GAAGC,MAAKC,EAAE,gCACV;IACEC,OAAcI;IACdH,QAAeG;EACjB,CAAA,EAAA;EACC;gBANUM,qBAAAA;EAQN,MAAMC,sBAA6Bd,mBAAW,EAAkB,GAAGC,MAAKC,EAAE,0BAA0B;IACzGC,OAAcI;IACdH,QAAeG;EACjB,CAAA,EAAA;EAAI;gBAHSO,gBAAAA;EAKN,MAAMC,sBAA6Bf,mBAAW,EAAkB,GAAGC,MAAKC,EAAE,0BAA0B;IACzGC,OAAcI;IACdH,QAAeG;EACjB,CAAA,EAAA;EAAI;gBAHSQ,gBAAAA;EAKN,MAAMC,oBAA2BhB,mBAAW,EAAgB,GAAGC,MAAKC,EAAE,wBAAwB;IACnGC,OAAcrB,cAAO;MACnBmC,OAAc3B;IAChB,CAAA;IACAc,QAAeG;EACjB,CAAA,EAAA;EAAI;gBALSS,cAAAA;AAMf,GAjEiBnB,iBAAAA,eAAAA,CAAAA,EAAAA;UAsGAqB,UAAAA;AAEf,QAAMC,MAAM;WAGCjB,KAAK,IAAIiB,GAAAA;WAETC,UAAU,GAAGD,GAAAA;WACbE,UAAU,GAAGF,GAAAA;WACbG,WAAW,GAAGH,GAAAA;AAC7B,GAViBD,YAAAA,UAAAA,CAAAA,EAAAA;;;",
+  "names": ["Capability", "meta", "ClientCapabilities", "Client", "Capability", "make", "meta", "id", "Schema", "Migration", "ActivationEvent", "meta", "ClientEvents", "ClientReady", "ActivationEvent", "make", "meta", "id", "SetupSchema", "SetupMigration", "IdentityCreated", "SpacesReady", "Schema", "PublicKey", "meta", "IdentitySchema", "Struct", "identityKey", "instanceOf", "PublicKey", "spaceKey", "optional", "profile", "displayName", "String", "avatarCid", "data", "Record", "key", "value", "Any", "ClientAction", "ProfileSchema", "CreateIdentity", "TaggedClass", "meta", "id", "input", "output", "JoinIdentity", "invitationCode", "Void", "ShareIdentity", "RecoverIdentity", "ResetStorage", "mode", "CreateAgent", "CreateRecoveryCode", "CreatePasskey", "RedeemPasskey", "RedeemToken", "token", "Account", "_id", "Profile", "Devices", "Security"]
+}

package/dist/lib/node-esm/chunk-J5RWSQT6.mjs

@@ -0,0 +1,14 @@
+import { createRequire } from 'node:module';const require = createRequire(import.meta.url);
+
+// src/constants.ts
+import { meta } from "#meta";
+var JOIN_DIALOG = `${meta.id}.JoinDialog`;
+var RECOVERY_CODE_DIALOG = `${meta.id}.RecoveryCodeDialog`;
+var RESET_DIALOG = `${meta.id}.ResetDialog`;
+
+export {
+  JOIN_DIALOG,
+  RECOVERY_CODE_DIALOG,
+  RESET_DIALOG
+};
+//# sourceMappingURL=chunk-J5RWSQT6.mjs.map

package/dist/lib/node-esm/chunk-J5RWSQT6.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/constants.ts"],
+  "sourcesContent": ["//\n// Copyright 2025 DXOS.org\n//\n\nimport { meta } from '#meta';\n\nexport const JOIN_DIALOG = `${meta.id}.JoinDialog`;\nexport const RECOVERY_CODE_DIALOG = `${meta.id}.RecoveryCodeDialog`;\nexport const RESET_DIALOG = `${meta.id}.ResetDialog`;\n"],
+  "mappings": ";;;AAIA,SAASA,YAAY;AAEd,IAAMC,cAAc,GAAGC,KAAKC,EAAE;AAC9B,IAAMC,uBAAuB,GAAGF,KAAKC,EAAE;AACvC,IAAME,eAAe,GAAGH,KAAKC,EAAE;",
+  "names": ["meta", "JOIN_DIALOG", "meta", "id", "RECOVERY_CODE_DIALOG", "RESET_DIALOG"]
+}