feat(halo): member roles

[yarolegovich]

Details

Changes:

• Credential may contain parentCredentialIds that are signed.
• SpaceMember.Role.MEMBER -> SpaceMember.Role.EDITOR.
• dxos.halo.credentials.Revocation credential removed, SpaceMember.Role.REMOVED added instead.
• An explicit SpaceMember.Role.OWNER added.
• If parentCredentialIds array is empty it's deleted from the object for compatibility with old Credentials.
• When generating a SpaceMember credential we set parentCredentialIds to ids of all the "leaf" SpaceMember credentials we knew about at the moment. Leaf credentials are those to which no parentCredentialIds are pointing.
• MemberStateMachine inserts SpaceMember credentials into a CredentialGraph.
• If a Credential was appended to the graph (the new credential has all the previously-leaf credentials in its parent references) we simply apply an update on top of the previous state.
• Otherwise, we traverse the graph root-to-leaf handling concurrent branches using graph-structure- or domain-logic-specific rules to compute the new state.

Minor changes:

• If log context is a function we evaluate it only if we're going to actually log the statement. Avoids doing unnecessary work for debug logs which do object transformations.
• range supports a generator second argument.

TODO (in another PR):

• Client API for role management.
• Disconnect from peers who were removed.
• Leave the swarm is you were removed.
• Check a member has sufficient rights for creating an invitation.

re #6386

[nx-cloud]

☁️ Nx Cloud Report

CI is running/has finished running commands for commit 81fb707. As they complete they will appear below. Click to see the status, the terminal output, and the build insights.

📂 See all runs for this CI Pipeline Execution

---

✅ Successfully ran 4 targets

• nx affected --base=247377cb555e36d2b56b1aacd78ba5fdeead9b7b --head=81fb707b89bdd9bbde6bb332d92b4934d1b1a83e --target=vitest
• nx affected --base=247377cb555e36d2b56b1aacd78ba5fdeead9b7b --head=81fb707b89bdd9bbde6bb332d92b4934d1b1a83e --target=test --coverage --xmlReport --environments=nodejs
• nx affected --base=247377cb555e36d2b56b1aacd78ba5fdeead9b7b --head=81fb707b89bdd9bbde6bb332d92b4934d1b1a83e --target=build
• nx affected --base=247377cb555e36d2b56b1aacd78ba5fdeead9b7b --head=81fb707b89bdd9bbde6bb332d92b4934d1b1a83e --target=lint

---

Sent with 💌 from NxCloud.

[cloudflare-pages]

Deploying docs with    Cloudflare Pages

Latest commit:	734e1eb
Status:	🚫  Build failed.

View logs

[codecov]

Codecov Report

Attention: Patch coverage is 86.50519% with 39 lines in your changes are missing coverage. Please review.

Project coverage is 67.78%. Comparing base (247377c) to head (81fb707).

Files	Patch %	Lines
...ore/halo/credentials/src/graph/credential-graph.ts	84.95%	10 Missing and 21 partials ⚠️
...dentials/src/state-machine/member-state-machine.ts	88.67%	2 Missing and 4 partials ⚠️
packages/common/util/src/range.ts	80.00%	0 Missing and 1 partial ⚠️
...ent-services/src/packlets/spaces/spaces-service.ts	50.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #6656      +/-   ##
==========================================
- Coverage   68.28%   67.78%   -0.51%     
==========================================
  Files         793      740      -53     
  Lines       23200    22740     -460     
  Branches     3789     3708      -81     
==========================================
- Hits        15843    15415     -428     
+ Misses       5450     5431      -19     
+ Partials     1907     1894      -13     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.