@dxos/protocols 0.8.4-main.bc674ce → 0.8.4-main.bcb3aa67d6

package/src/buf/proto/gen/dxos/mesh/teleport/control_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2022 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/mesh/teleport/control.proto (package dxos.mesh.teleport.control, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/mesh/teleport/gossip_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2022 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/mesh/teleport/gossip.proto (package dxos.mesh.teleport.gossip, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/mesh/teleport/notarization_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2022 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/mesh/teleport/notarization.proto (package dxos.mesh.teleport.notarization, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/mesh/teleport/replicator_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2022 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/mesh/teleport/replicator.proto (package dxos.mesh.teleport.replicator, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/registry_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2021 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/registry.proto (package dxos.registry, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/rpc_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2020 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/rpc.proto (package dxos.rpc, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/service/agentmanager_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2022 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/service/agentmanager.proto (package dxos.service.agentmanager, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/service/publisher_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2023 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/service/publisher.proto (package dxos.service.publisher, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/service/supervisor_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2022 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/service/supervisor.proto (package dxos.service.supervisor, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/service/tunnel_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2023 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/service/tunnel.proto (package dxos.service.tunnel, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/tracing_pb.ts

@@ -1,4 +1,4 @@
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/tracing.proto (package dxos.tracing, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/type_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2022 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/type.proto (package dxos.type, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/dxos/value_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2021 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file dxos/value.proto (package dxos.value, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/example/testing/data_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2020 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file example/testing/data.proto (package example.testing.data, syntax proto3)
 /* eslint-disable */
 

package/src/buf/proto/gen/example/testing/rpc_pb.ts

@@ -2,7 +2,7 @@
 // Copyright 2020 DXOS.org
 //
 
-// @generated by protoc-gen-es v2.10.1 with parameter "target=ts,import_extension=js"
+// @generated by protoc-gen-es v2.11.0 with parameter "target=ts,import_extension=js"
 // @generated from file example/testing/rpc.proto (package example.testing.rpc, syntax proto3)
 /* eslint-disable */
 

package/src/codec.test.ts

@@ -4,7 +4,7 @@
 
 import { describe, expect, test } from 'vitest';
 
-import { schema } from './proto/index.js';
+import { schema } from './proto/index.ts';
 
 describe('Codec', () => {
   test('encodes and decodes messages', async () => {

package/src/edge/EdgeFunctionEnv.ts

@@ -4,8 +4,9 @@
 
 import { type SpaceId } from '@dxos/keys';
 
+import type * as FeedProtocol from '../FeedProtocol';
 import { type CreateDocumentRequest, type CreateDocumentResponse } from '../proto/gen/dxos/echo/service';
-import { type QueryResult, type QueueQuery } from '../queue';
+import { type QueryRequest, type QueryResponse } from '../proto/gen/dxos/echo/query';
 
 /*
 
@@ -68,28 +69,35 @@ export interface Env {
  *
  * NOTE: Currently unused in functions.
  */
-export interface ExecutionContext {}
+export interface TraceContext {}
 
 /**
  * Database API for other CF services like functions.
  */
 export interface DataService {
-  getSpaceMeta(ctx: ExecutionContext, spaceId: SpaceId): Promise<RpcResult<SpaceMeta | undefined>>;
-  getDocument(ctx: ExecutionContext, spaceId: SpaceId, documentId: string): Promise<RpcResult<RawDocument | undefined>>;
+  getSpaceMeta(ctx: TraceContext, spaceId: SpaceId): Promise<RpcResult<SpaceMeta | undefined>>;
+  getDocument(ctx: TraceContext, spaceId: SpaceId, documentId: string): Promise<RpcResult<RawDocument | undefined>>;
 
-  query(ctx: ExecutionContext, request: QueryRequest): Promise<RpcResult<QueryResponse>>;
-  queryDocuments(ctx: ExecutionContext, request: QueryRequest): Promise<RpcResult<QueryDocumentsResponse>>;
-  queryReferences(ctx: ExecutionContext, request: QueryReferencesRequest): Promise<RpcResult<QueryReferencesResponse>>;
-
-  createDocument(ctx: ExecutionContext, request: CreateDocumentRequest): Promise<RpcResult<CreateDocumentResponse>>;
+  execQuery(ctx: TraceContext, request: QueryRequest): Promise<RpcResult<QueryResponse>>;
+  createDocument(ctx: TraceContext, request: CreateDocumentRequest): Promise<RpcResult<CreateDocumentResponse>>;
 
   // TODO(burdon): Update? Return DocumentEntry?
-  changeDocument(ctx: ExecutionContext, spaceId: SpaceId, documentId: string, changes: Uint8Array): Promise<void>;
+  changeDocument(ctx: TraceContext, spaceId: SpaceId, documentId: string, changes: Uint8Array): Promise<void>;
 }
 
 export interface QueueService {
-  query(ctx: ExecutionContext, queueDXN: string, query: Omit<QueueQuery, 'queueId'>): Promise<RpcResult<QueryResult>>;
-  append(ctx: ExecutionContext, queueDXN: string, objects: unknown[]): Promise<void>;
+  queryQueue: (
+    ctx: TraceContext,
+    request: FeedProtocol.QueryQueueRequest,
+  ) => Promise<RpcResult<FeedProtocol.QueryResult>>;
+  insertIntoQueue: (
+    ctx: TraceContext,
+    request: FeedProtocol.InsertIntoQueueRequest,
+  ) => Promise<RpcResult<RpcDisposable>>;
+  deleteFromQueue: (
+    ctx: TraceContext,
+    request: FeedProtocol.DeleteFromQueueRequest,
+  ) => Promise<RpcResult<RpcDisposable>>;
 }
 
 /**
@@ -115,20 +123,6 @@ export type SpaceMeta = {
   rootDocumentId: string;
 };
 
-export type QueryRequest = {
-  spaceId: string;
-  type?: string;
-  where?: Record<string, any>;
-  objectIds?: string[];
-  cursor?: string;
-  limit?: number;
-};
-
-export type QueryResponse = {
-  results: ObjectSnapshot[];
-  cursor?: string;
-};
-
 /**
  * TODO(yaroslav): make Indexer return EchoObject after create() can properly reconstruct an object
  *   from this structure (meta, id and type aren't handled properly)

package/src/edge/edge.ts

@@ -8,11 +8,25 @@ import { BaseError } from '@dxos/errors';
 import { invariant } from '@dxos/invariant';
 import { SpaceId } from '@dxos/keys';
 
+/**
+ * HTTP header sent on every Edge request to classify traffic for metering.
+ */
+export const EDGE_CLIENT_TAG_HEADER = 'X-DXOS-Client-Tag';
+
 // TODO(burdon): Rename EdgerRouterEndpoint.
 // If we would rename it, we need to be careful to not break composer production.
 export enum EdgeService {
   AUTOMERGE_REPLICATOR = 'automerge-replicator',
+  /**
+   * Control feed replicator (hypercore append only logs) for the space.
+   */
+  // TODO(mykola): Remove once we migrate to keyhive for access control.
   FEED_REPLICATOR = 'feed-replicator',
+  /**
+   * Feed replicator (ordered data list) for the space.
+   */
+  // TODO(mykola): Rename to FEED_REPLICATOR when we migrate to keyhive for access control.
+  QUEUE_REPLICATOR = 'queue-replicator',
   SWARM = 'swarm',
   SIGNAL = 'signal',
   STATUS = 'status',
@@ -482,3 +496,109 @@ export const EdgeHttpErrorCodec = Object.freeze({
     return ErrorCodec.decode(body.error);
   },
 });
+
+//
+// Data management.
+//
+
+export type ListSpacesRequest = { limit?: number; cursor?: string; order?: 'asc' | 'desc' };
+export type ListSpacesResponse = {
+  spaces: SpaceActivityEntry[];
+  cursor?: string;
+  limit: number;
+};
+
+export type ListActiveIdentitiesRequest = { cursor?: string; limit?: number };
+export type ListActiveIdentitiesResponse = {
+  identities: {
+    identityKey: string;
+    haloSpaceId: string | null;
+    createdAt: string | null;
+    agentKey: string | null;
+    hasRecovery: boolean;
+  }[];
+  cursor?: string;
+  complete: boolean;
+  totalCount: number;
+};
+
+export type InspectSpaceRequest = { spaceId: string };
+export type InspectSpaceResponse = {
+  spaceId: string;
+  metadata: { createdAt: string; identityKey?: string; status?: 'active' | 'deleting' } | null;
+  members: {
+    count: number;
+    list: { identityKey: string; role?: string; agentKey?: string }[];
+  };
+  controlFeeds: {
+    replicationProgress: { [feedKey: string]: { replicated: number; processed: number } };
+  };
+  echo: {
+    dataFeeds: {
+      count: number;
+      totalBlocks: number;
+      byNamespace: { namespace: string; feeds: { feedId: string; blockCount: number }[] }[];
+    };
+    documentCount: number;
+    objectCount: number;
+    deletedObjectCount: number;
+    indexedDocumentCount: number;
+    objectsByType: { typeDxn: string; count: number }[];
+    indexerStatus: {
+      indexingInProgress: boolean;
+      cursors: { indexName: string; sourceName: string; resourceId: string | null; cursor: string | number }[];
+      totalChanges: number;
+    };
+  };
+  usageInLast30Days: {
+    lastActivity: string | null;
+    wsEvents: number;
+    httpEvents: number;
+    totalEvents: number;
+  } | null;
+  durableObjects: { type: string; doId: string }[];
+};
+
+export type InspectIdentityRequest = { identityKey: string };
+export type InspectIdentityResponse = {
+  identityKey: string;
+  agentKey: string | null;
+  haloSpaceId: string | null;
+  hasRecovery: boolean;
+  routerDoId: string;
+  agentDoId: string | null;
+  ownedFunctions: { id: string; name: string; versionCount: number }[];
+  spaces: InspectSpaceResponse[];
+};
+
+/** Matches the SerializedSpace format from @dxos/echo-db, extended with spaceId. */
+export type SpaceExportPayload = {
+  version: number;
+  timestamp: string;
+  spaceId: string;
+  objects: Record<string, unknown>[];
+};
+
+export type SpaceActivityEntry = {
+  spaceId: string;
+  lastActivity: string;
+  totalEvents: number;
+  metadata: { createdAt: string; identityKey?: string; status?: 'active' | 'deleting' } | null;
+};
+
+export type SpaceExportResult = {
+  spaceId: string;
+  downloadPath: string;
+  downloadUrl: string;
+  expiresAt: string;
+  objectCount: number;
+  sizeBytes: number;
+};
+
+export type ExportSpaceRequest = { spaceId: string; origin: string };
+
+export type DeleteSpaceRequest = { spaceId: string };
+export type DeleteSpaceResponse = { status: string; spaceId: string };
+
+export type DeleteIdentityRequest = { identityKey: string };
+export type DeleteIdentityResponse = { status: string; identityKey: string };

package/src/edge/errors.ts

@@ -2,7 +2,7 @@
 // Copyright 2025 DXOS.org
 //
 
-import { type EdgeErrorData, type EdgeFailure, EdgeHttpErrorCodec, ErrorCodec } from './edge.js';
+import { type EdgeErrorData, type EdgeFailure, EdgeHttpErrorCodec, ErrorCodec } from './edge.ts';
 
 // TODO(burdon): Reconcile with @dxos/errors.
 /**

package/src/edge/index.ts

@@ -2,6 +2,6 @@
 // Copyright 2025 DXOS.org
 //
 
-export * from './edge.js';
-export * as EdgeFunctionEnv from './EdgeFunctionEnv.js';
-export * from './errors.js';
+export * from './edge.ts';
+export * as EdgeFunctionEnv from './EdgeFunctionEnv.ts';
+export * from './errors.ts';

package/src/errors/encoding.ts

@@ -2,9 +2,9 @@
 // Copyright 2023 DXOS.org
 //
 
-import { type Error as SerializedErrorProto } from '../proto/gen/dxos/error.js';
+import { type Error as SerializedErrorProto } from '../proto/gen/dxos/error.ts';
 
-import { reconstructError } from './helpers.js';
+import { reconstructError } from './helpers.ts';
 
 export const encodeError = (err: any): SerializedErrorProto => {
   if (typeof err === 'object' && err?.message) {

package/src/errors/errors.test.ts

@@ -4,7 +4,7 @@
 
 import { describe, expect, test } from 'vitest';
 
-import { ApiError } from './base-errors.js';
+import { ApiError } from './base-errors.ts';
 
 describe('Errors', () => {
   test('test', async () => {

package/src/errors/errors.ts

@@ -5,9 +5,9 @@
 import { BaseError } from '@dxos/errors';
 import { PublicKey } from '@dxos/keys';
 
-import type { ObjectId } from '../types.js';
+import type { ObjectId } from '../types.ts';
 
-import { registerError, registerErrorMessageContext, registerErrorNoArgs } from './helpers.js';
+import { registerError, registerErrorMessageContext, registerErrorNoArgs } from './helpers.ts';
 
 /**
  * Thrown when request was terminated because the RPC endpoint has been closed.

package/src/errors/helpers.ts

@@ -5,7 +5,7 @@
 import { BaseError } from '@dxos/errors';
 import { invariant } from '@dxos/invariant';
 
-import { type Error as SerializedErrorProto } from '../proto/gen/dxos/error.js';
+import { type Error as SerializedErrorProto } from '../proto/gen/dxos/error.ts';
 
 export const reconstructError = (error: SerializedErrorProto) => {
   const { name, message, context } = error;

package/src/errors/index.ts

@@ -2,8 +2,8 @@
 // Copyright 2022 DXOS.org
 //
 
-export * from './encoding.js';
-export * from './errors.js';
-export * from './helpers.js';
-export * from './base-errors.js';
-export * from './parameter.js';
+export * from './encoding.ts';
+export * from './errors.ts';
+export * from './helpers.ts';
+export * from './base-errors.ts';
+export * from './parameter.ts';

package/src/index.ts

@@ -2,17 +2,15 @@
 // Copyright 2021 DXOS.org
 //
 
-// TODO(burdon): Why export .js?
-
-export * from './automerge.js';
-export * from './edge/index.js';
-export * from './errors/index.js';
-export * from './indexing.js';
-export * from './messenger.js';
-export * from './profile-archive.js';
-export * from './queue.js';
-export * from './space-archive.js';
-export * from './storage.js';
-export * from './tracing.js';
-export type * from './types.js';
-export * as FunctionProtocol from './FunctionProtocol.js';
+export * from './automerge.ts';
+export * from './edge/index.ts';
+export * from './errors/index.ts';
+export * from './indexing.ts';
+export * from './messenger.ts';
+export * from './profile-archive.ts';
+export * from './space-archive.ts';
+export * from './storage.ts';
+export * from './tracing.ts';
+export type * from './types.ts';
+export * as FunctionProtocol from './FunctionProtocol.ts';
+export * as FeedProtocol from './FeedProtocol.ts';

package/src/indexing.test.ts

@@ -4,7 +4,7 @@
 
 import { describe, expect, test } from 'vitest';
 
-import { ObjectPointerVersion, objectPointerCodec } from './indexing.js';
+import { ObjectPointerVersion, objectPointerCodec } from './indexing.ts';
 
 describe('Indexing object pointer codec', () => {
   test('getVersion', async () => {

package/src/proto/dxos/client/queue.proto

@@ -60,8 +60,19 @@ message DeleteFromQueueRequest {
   repeated string object_ids = 4;
 }
 
+message SyncQueueRequest {
+  string subspace_tag = 1;
+  string space_id = 2;
+  string queue_id = 3;
+  /// Whether to push local changes to the server. Defaults to true.
+  optional bool should_push = 4;
+  /// Whether to pull remote changes from the server. Defaults to true.
+  optional bool should_pull = 5;
+}
+
 service QueueService {
   rpc QueryQueue(QueryQueueRequest) returns (QueueQueryResult);
   rpc InsertIntoQueue(InsertIntoQueueRequest) returns (google.protobuf.Empty);
   rpc DeleteFromQueue(DeleteFromQueueRequest) returns (google.protobuf.Empty);
+  rpc SyncQueue(SyncQueueRequest) returns (google.protobuf.Empty);
 }

package/src/proto/dxos/client/services.proto

@@ -72,6 +72,7 @@ message Platform {
     BROWSER = 0;
     SHARED_WORKER = 1;
     NODE = 2;
+    DEDICATED_WORKER = 3;
   }
 
   PLATFORM_TYPE type = 1;
@@ -331,6 +332,8 @@ message Space {
   optional PipelineState pipeline = 3;
   optional dxos.error.Error error = 4;
   optional dxos.echo.metadata.EdgeReplicationSetting edge_replication = 6;
+  repeated string tags = 7;
+  dxos.halo.credentials.MembershipPolicy membership_policy = 8;
 
   repeated SpaceMember members = 10;
   optional dxos.keys.PublicKey creator = 11;
@@ -341,6 +344,11 @@ message Space {
 
 // TODO(burdon): Create type for epoch?
 
+message CreateSpaceRequest {
+  repeated string tags = 1;
+  dxos.halo.credentials.MembershipPolicy membership_policy = 2;
+}
+
 message UpdateSpaceRequest {
   dxos.keys.PublicKey space_key = 1;
 
@@ -457,7 +465,7 @@ message ImportSpaceResponse {
 }
 
 service SpacesService {
-  rpc CreateSpace(google.protobuf.Empty) returns (Space);
+  rpc CreateSpace(CreateSpaceRequest) returns (Space);
   rpc UpdateSpace(UpdateSpaceRequest) returns (google.protobuf.Empty);
   rpc QuerySpaces(google.protobuf.Empty) returns (stream QuerySpacesResponse);
 

package/src/proto/dxos/config.proto

@@ -59,7 +59,7 @@ message Module {
   optional string id = 8;   // TODO(burdon): Ensured FQ (e.g., 'dxos.app.xxx')
   optional string name = 1; // TODO(burdon): Replace with id (or key?)
   optional string type = 2; // TODO(burdon): Define namespace (e.g.,
-                            // 'dxos.org/type/frame' vs. 'dxos.type.frame')
+                            // 'org.dxos.type.frame')
 
   // TODO(burdon): Developer info message.
 
@@ -155,8 +155,6 @@ message Runtime {
     optional bool enable_vector_indexing = 12;
 
     optional EdgeFeatures edge_features = 11;
-
-    optional bool enable_local_queues = 13;
   }
 
   message App {

package/src/proto/dxos/echo/metadata.proto

@@ -54,6 +54,9 @@ message SpaceMetadata {
   /// Space key.
   dxos.keys.PublicKey key = 1;
 
+  /// Immutable tags assigned at space creation time.
+  repeated string tags = 12;
+
   /// ACTIVE, INACTIVE, etc.
   optional dxos.client.services.SpaceState state = 10;
 

package/src/proto/dxos/edge/messenger.proto

@@ -76,9 +76,19 @@ message Message {
   /// Maybe be used to address a service at EDGE, but also to address components inside the client.
   optional string service_id = 20;
 
+  optional TraceContext trace_context = 21;
+
   optional google.protobuf.Any payload = 100;
 }
 
+/// W3C Trace Context propagation (https://www.w3.org/TR/trace-context/).
+message TraceContext {
+  /// W3C `traceparent` header value (e.g. "00-<trace-id>-<parent-id>-<trace-flags>").
+  string traceparent = 1;
+  /// W3C `tracestate` header value; vendor-specific key-value pairs.
+  optional string tracestate = 2;
+}
+
 //
 // Swarms are used to publish and subscribe to messages based on a topic.
 //

package/src/proto/dxos/halo/credentials.proto

@@ -28,9 +28,18 @@ import "dxos/keys.proto";
 // First message written to initial Feed in a new Space.
 //
 
+enum MembershipPolicy {
+  /// Members can be invited by admins/owners.
+  INVITE = 0;
+  /// No new members can be added after genesis.
+  LOCKED = 1;
+}
+
 // [ASSERTION]
 message SpaceGenesis {
   dxos.keys.PublicKey space_key = 1; // Feeds belong to Spaces.
+  repeated string tags = 2;
+  MembershipPolicy membership_policy = 3;
 }
 
 //
@@ -60,6 +69,9 @@ message SpaceMember {
   dxos.keys.PublicKey space_key = 1;
   Role role = 2;
 
+  /// Immutable tags assigned at space creation time.
+  repeated string tags = 6;
+
   // TODO(burdon): Identity key?
   optional ProfileDocument profile = 3;
 
@@ -163,6 +175,8 @@ enum DeviceType {
   UNKNOWN = 0;
   BROWSER = 1;
   NATIVE = 2;
+  // TODO(wittjosiah): Rename "agent" to avoid naming collision with AI agents.
+  // TODO(wittjosiah): Unknown, Browser, CLI, Desktop, Mobile, Custodian?
   AGENT = 3;
   AGENT_MANAGED = 4;
   MOBILE = 5;
@@ -188,6 +202,7 @@ message DeviceProfile {
 }
 
 /// [ASSERTION]: Sets default space for identity.
+/// @deprecated Default space is no longer managed by the SDK. Existing credentials are ignored.
 message DefaultSpace {
   string space_id = 1;
 }