@dxos/client-services 0.1.53-main.f5aedb7 → 0.1.53-next.3ab34c0

package/dist/lib/browser/{chunk-PWZ2J6KS.mjs → chunk-F4BHRFH4.mjs}

@@ -353,6 +353,7 @@ import { verifyCredential } from "@dxos/credentials";
 import { log } from "@dxos/log";
 import { schema } from "@dxos/protocols";
 var __dxlog_file = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/authenticator.ts";
+var Credential = schema.getCodecForType("dxos.halo.credentials.Credential");
 var createAuthProvider = (signer) => async (nonce) => {
   const credential = await signer.createCredential({
     assertion: {
@@ -361,7 +362,7 @@ var createAuthProvider = (signer) => async (nonce) => {
     subject: signer.getIssuer(),
     nonce
   });
-  return schema.getCodecForType("dxos.halo.credentials.Credential").encode(credential);
+  return Credential.encode(credential);
 };
 var TrustedKeySetAuthVerifier = class {
   // prettier-ignore
@@ -374,12 +375,12 @@ var TrustedKeySetAuthVerifier = class {
   }
   get verifier() {
     return async (nonce, auth) => {
-      const credential = schema.getCodecForType("dxos.halo.credentials.Credential").decode(auth);
+      const credential = Credential.decode(auth);
       log("authenticating...", {
         credential
       }, {
         F: __dxlog_file,
-        L: 57,
+        L: 59,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -389,7 +390,7 @@ var TrustedKeySetAuthVerifier = class {
           result
         }, {
           F: __dxlog_file,
-          L: 61,
+          L: 63,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -401,7 +402,7 @@ var TrustedKeySetAuthVerifier = class {
           credential
         }, {
           F: __dxlog_file,
-          L: 66,
+          L: 68,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -412,7 +413,7 @@ var TrustedKeySetAuthVerifier = class {
           key: credential.issuer
         }, {
           F: __dxlog_file,
-          L: 71,
+          L: 73,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -428,7 +429,7 @@ var TrustedKeySetAuthVerifier = class {
             key: credential.issuer
           }, {
             F: __dxlog_file,
-            L: 82,
+            L: 84,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -438,7 +439,7 @@ var TrustedKeySetAuthVerifier = class {
             key: credential.issuer
           }, {
             F: __dxlog_file,
-            L: 85,
+            L: 87,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -478,15 +479,15 @@ var Identity = class {
     this._signer = signer;
     this.identityKey = identityKey;
     this.deviceKey = deviceKey;
-    this._deviceStateMachine = this.space.spaceState.registerProcessor(new DeviceStateMachine({
+    this._deviceStateMachine = new DeviceStateMachine({
       identityKey: this.identityKey,
       deviceKey: this.deviceKey,
       onUpdate: () => this.stateUpdate.emit()
-    }));
-    this._profileStateMachine = this.space.spaceState.registerProcessor(new ProfileStateMachine({
+    });
+    this._profileStateMachine = new ProfileStateMachine({
       identityKey: this.identityKey,
       onUpdate: () => this.stateUpdate.emit()
-    }));
+    });
     this.authVerifier = new TrustedKeySetAuthVerifier({
       trustedKeysProvider: () => this.authorizedDeviceKeys,
       update: this.stateUpdate,
@@ -495,27 +496,27 @@ var Identity = class {
   }
   // TODO(burdon): Expose state object?
   get authorizedDeviceKeys() {
-    return this._deviceStateMachine.processor.authorizedDeviceKeys;
+    return this._deviceStateMachine.authorizedDeviceKeys;
   }
   async open() {
-    await this._deviceStateMachine.open();
-    await this._profileStateMachine.open();
+    await this.space.spaceState.addCredentialProcessor(this._deviceStateMachine);
+    await this.space.spaceState.addCredentialProcessor(this._profileStateMachine);
     await this.space.open();
   }
   async close() {
     await this.authVerifier.close();
-    await this._deviceStateMachine.close();
-    await this._profileStateMachine.close();
+    await this.space.spaceState.removeCredentialProcessor(this._profileStateMachine);
+    await this.space.spaceState.removeCredentialProcessor(this._deviceStateMachine);
     await this.space.close();
   }
   async ready() {
-    await this._deviceStateMachine.processor.deviceChainReady.wait();
+    await this._deviceStateMachine.deviceChainReady.wait();
     await this.controlPipeline.state.waitUntilReachedTargetTimeframe({
       timeout: LOAD_CONTROL_FEEDS_TIMEOUT
     });
   }
   get profileDocument() {
-    return this._profileStateMachine.processor.profile;
+    return this._profileStateMachine.profile;
   }
   /**
   * @test-only
@@ -530,7 +531,7 @@ var Identity = class {
     return this.space.genesisFeedKey;
   }
   get deviceCredentialChain() {
-    return this._deviceStateMachine.processor.deviceCredentialChain;
+    return this._deviceStateMachine.deviceCredentialChain;
   }
   getAdmissionCredentials() {
     var _a, _b;
@@ -545,8 +546,8 @@ var Identity = class {
   * Requires identity to be ready.
   */
   getIdentityCredentialSigner() {
-    invariant(this._deviceStateMachine.processor.deviceCredentialChain, "Device credential chain is not ready.");
-    return createCredentialSignerWithChain(this._signer, this._deviceStateMachine.processor.deviceCredentialChain, this.deviceKey);
+    invariant(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.");
+    return createCredentialSignerWithChain(this._signer, this._deviceStateMachine.deviceCredentialChain, this.deviceKey);
   }
   /**
   * Issues credentials as device.
@@ -563,7 +564,7 @@ var Identity = class {
       dataFeedKey
     }, {
       F: __dxlog_file2,
-      L: 156,
+      L: 151,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2081,8 +2082,61 @@ var SpaceInvitationProtocol = class {
   }
 };
 
+// packages/sdk/client-services/src/packlets/services/client-rpc-server.ts
+import { Stream as Stream9 } from "@dxos/codec-protobuf";
+import { raise } from "@dxos/debug";
+import { parseMethodName, RpcPeer } from "@dxos/rpc";
+var ClientRpcServer = class {
+  constructor(params) {
+    this._handlerCache = /* @__PURE__ */ new Map();
+    const { serviceRegistry, handleCall, handleStream, ...rpcOptions } = params;
+    this._handleCall = handleCall;
+    this._handleStream = handleStream;
+    this._serviceRegistry = serviceRegistry;
+    this._rpcPeer = new RpcPeer({
+      ...rpcOptions,
+      callHandler: (method, params2) => {
+        const [serviceName, methodName] = parseMethodName(method);
+        const handler = (method2, params3) => this._getServiceHandler(serviceName).call(method2, params3);
+        if (this._handleCall) {
+          return this._handleCall(methodName, params2, handler);
+        } else {
+          return handler(methodName, params2);
+        }
+      },
+      streamHandler: (method, params2) => {
+        const [serviceName, methodName] = parseMethodName(method);
+        const handler = (method2, params3) => this._getServiceHandler(serviceName).callStream(method2, params3);
+        if (this._handleStream) {
+          return Stream9.unwrapPromise(this._handleStream(methodName, params2, handler));
+        } else {
+          return handler(methodName, params2);
+        }
+      }
+    });
+  }
+  async open() {
+    await this._rpcPeer.open();
+  }
+  async close() {
+    await this._rpcPeer.close();
+  }
+  _getServiceHandler(serviceName) {
+    var _a;
+    if (!this._handlerCache.has(serviceName)) {
+      const [key, descriptor] = (_a = Object.entries(this._serviceRegistry.descriptors).find(([key2, descriptor2]) => descriptor2.name === serviceName)) != null ? _a : raise(new Error(`Service not available: ${serviceName}`));
+      const service = this._serviceRegistry.services[key];
+      if (!service) {
+        throw new Error(`Service not available: ${serviceName}`);
+      }
+      this._handlerCache.set(serviceName, descriptor.createServer(service));
+    }
+    return this._handlerCache.get(serviceName);
+  }
+};
+
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-import { Event as Event5, scheduleTask as scheduleTask4, trackLeaks } from "@dxos/async";
+import { Event as Event5, scheduleTask as scheduleTask4, synchronized, trackLeaks } from "@dxos/async";
 import { AUTH_TIMEOUT as AUTH_TIMEOUT2 } from "@dxos/client-protocol";
 import { cancelWithContext as cancelWithContext2, Context as Context6 } from "@dxos/context";
 import { timed } from "@dxos/debug";
@@ -2117,6 +2171,9 @@ var NotarizationPlugin = class {
     this._processedCredentials = new ComplexSet(PublicKey6.hash);
     this._processCredentialsTriggers = new ComplexMap2(PublicKey6.hash);
   }
+  get hasWriter() {
+    return !!this._writer;
+  }
   async open() {
   }
   async close() {
@@ -2130,7 +2187,7 @@ var NotarizationPlugin = class {
       credentials
     }, {
       F: __dxlog_file8,
-      L: 87,
+      L: 91,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2142,7 +2199,7 @@ var NotarizationPlugin = class {
           err
         }, {
           F: __dxlog_file8,
-          L: 96,
+          L: 100,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2158,7 +2215,7 @@ var NotarizationPlugin = class {
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
           F: __dxlog_file8,
-          L: 108,
+          L: 112,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2181,7 +2238,7 @@ var NotarizationPlugin = class {
             retryIn: retryTimeout
           }, {
             F: __dxlog_file8,
-            L: 133,
+            L: 137,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2195,7 +2252,7 @@ var NotarizationPlugin = class {
           credentialId: credentials.map((credential) => credential.id)
         }, {
           F: __dxlog_file8,
-          L: 140,
+          L: 144,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2204,7 +2261,7 @@ var NotarizationPlugin = class {
         });
         log8("success", void 0, {
           F: __dxlog_file8,
-          L: 144,
+          L: 148,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2213,7 +2270,7 @@ var NotarizationPlugin = class {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
           log8.warn("error notarizing (recoverable)", err, {
             F: __dxlog_file8,
-            L: 148,
+            L: 152,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2231,7 +2288,7 @@ var NotarizationPlugin = class {
       ]);
       log8("done", void 0, {
         F: __dxlog_file8,
-        L: 159,
+        L: 163,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2242,7 +2299,7 @@ var NotarizationPlugin = class {
   /**
   * Called with credentials arriving from the control pipeline.
   */
-  async process(credential) {
+  async processCredential(credential) {
     var _a;
     if (!credential.id) {
       return;
@@ -2284,7 +2341,7 @@ var NotarizationPlugin = class {
           peer: extension.localPeerId
         }, {
           F: __dxlog_file8,
-          L: 208,
+          L: 212,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2296,7 +2353,7 @@ var NotarizationPlugin = class {
           peer: extension.localPeerId
         }, {
           F: __dxlog_file8,
-          L: 213,
+          L: 217,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2353,6 +2410,7 @@ var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/sr
 var DataSpace = class DataSpace2 {
   constructor(params) {
     this._ctx = new Context6();
+    this._notarizationPlugin = new NotarizationPlugin();
     this._state = SpaceState.CLOSED;
     /**
     * Error for _state === SpaceState.ERROR.
@@ -2375,8 +2433,8 @@ var DataSpace = class DataSpace2 {
       update: this._inner.stateUpdate,
       authTimeout: AUTH_TIMEOUT2
     });
-    this._notarizationPluginConsumer = this._inner.spaceState.registerProcessor(new NotarizationPlugin());
     this._cache = params.cache;
+    this._state = params.initialState;
   }
   get key() {
     return this._inner.key;
@@ -2398,25 +2456,36 @@ var DataSpace = class DataSpace2 {
     return this._presence;
   }
   get notarizationPlugin() {
-    return this._notarizationPluginConsumer.processor;
+    return this._notarizationPlugin;
   }
   get cache() {
     return this._cache;
   }
   async open() {
-    await this.notarizationPlugin.open();
-    await this._notarizationPluginConsumer.open();
+    await this._open();
+  }
+  async _open() {
+    await this._notarizationPlugin.open();
+    await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
     await this._inner.open();
-    this._state = SpaceState.INACTIVE;
+    this._state = SpaceState.CONTROL_ONLY;
+    this.stateUpdate.emit();
+    this.metrics = {};
     this.metrics.open = new Date();
   }
   async close() {
+    await this._close();
+  }
+  async _close() {
+    var _a, _b;
+    await ((_b = (_a = this._callbacks).beforeClose) == null ? void 0 : _b.call(_a));
     this._state = SpaceState.CLOSED;
     await this._ctx.dispose();
+    this._ctx = new Context6();
     await this.authVerifier.close();
     await this._inner.close();
-    await this._notarizationPluginConsumer.close();
-    await this.notarizationPlugin.close();
+    await this._inner.spaceState.removeCredentialProcessor(this._notarizationPlugin);
+    await this._notarizationPlugin.close();
     await this._presence.destroy();
   }
   async postMessage(channel, message) {
@@ -2437,7 +2506,7 @@ var DataSpace = class DataSpace2 {
         if (err instanceof CancelledError) {
           log9("Data pipeline initialization cancelled", err, {
             F: __dxlog_file9,
-            L: 173,
+            L: 193,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2445,7 +2514,7 @@ var DataSpace = class DataSpace2 {
         }
         log9.error("Error initializing data pipeline", err, {
           F: __dxlog_file9,
-          L: 177,
+          L: 197,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2459,7 +2528,7 @@ var DataSpace = class DataSpace2 {
   }
   async initializeDataPipeline() {
     var _a, _b, _c, _d;
-    if (this._state !== SpaceState.INACTIVE) {
+    if (this._state !== SpaceState.CONTROL_ONLY) {
       throw new SystemError("Invalid operation");
     }
     this._state = SpaceState.INITIALIZING;
@@ -2471,22 +2540,24 @@ var DataSpace = class DataSpace2 {
     await this._createWritableFeeds();
     log9("Writable feeds created", void 0, {
       F: __dxlog_file9,
-      L: 201,
+      L: 221,
       S: this,
       C: (f, a) => f(...a)
     });
     this.stateUpdate.emit();
-    this.notarizationPlugin.setWriter(createMappedFeedWriter((credential) => ({
-      credential: {
-        credential
-      }
-    }), this._inner.controlPipeline.writer));
+    if (!this.notarizationPlugin.hasWriter) {
+      this.notarizationPlugin.setWriter(createMappedFeedWriter((credential) => ({
+        credential: {
+          credential
+        }
+      }), this._inner.controlPipeline.writer));
+    }
     await this._inner.initializeDataPipeline();
     this.metrics.dataPipelineOpen = new Date();
     await cancelWithContext2(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
     log9("waiting for data pipeline to reach target timeframe", void 0, {
       F: __dxlog_file9,
-      L: 220,
+      L: 242,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2497,7 +2568,7 @@ var DataSpace = class DataSpace2 {
     this.metrics.dataPipelineReady = new Date();
     log9("data pipeline ready", void 0, {
       F: __dxlog_file9,
-      L: 229,
+      L: 251,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2577,17 +2648,46 @@ var DataSpace = class DataSpace2 {
       }
     }
   }
+  async activate() {
+    if (this._state !== SpaceState.INACTIVE) {
+      throw new SystemError("Invalid operation");
+    }
+    await this._metadataStore.setSpaceState(this.key, SpaceState.ACTIVE);
+    await this._open();
+    this.initializeDataPipelineAsync();
+  }
+  async deactivate() {
+    if (this._state === SpaceState.INACTIVE) {
+      throw new SystemError("Invalid operation");
+    }
+    await this._metadataStore.setSpaceState(this.key, SpaceState.INACTIVE);
+    await this._close();
+    this._state = SpaceState.INACTIVE;
+    this.stateUpdate.emit();
+  }
 };
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "open", null);
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "close", null);
 _ts_decorate([
   timed(1e4)
 ], DataSpace.prototype, "_createWritableFeeds", null);
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "activate", null);
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "deactivate", null);
 DataSpace = _ts_decorate([
   trackLeaks("open", "close")
 ], DataSpace);
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
 import invariant10 from "tiny-invariant";
-import { Event as Event6, synchronized, trackLeaks as trackLeaks2 } from "@dxos/async";
+import { Event as Event6, synchronized as synchronized2, trackLeaks as trackLeaks2 } from "@dxos/async";
 import { cancelWithContext as cancelWithContext3, Context as Context7 } from "@dxos/context";
 import { getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
 import { PublicKey as PublicKey8 } from "@dxos/keys";
@@ -2732,14 +2832,16 @@ var DataSpaceManager = class DataSpaceManager2 {
           C: (f, a) => f(...a)
         });
         const space = await this._constructSpace(spaceMetadata);
-        space.initializeDataPipelineAsync();
+        if (spaceMetadata.state !== SpaceState2.INACTIVE) {
+          space.initializeDataPipelineAsync();
+        }
       } catch (err) {
         log10.error("Error loading space", {
           spaceMetadata,
           err
         }, {
           F: __dxlog_file10,
-          L: 91,
+          L: 93,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2751,7 +2853,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       id: this._instanceId
     }), {
       F: __dxlog_file10,
-      L: 97,
+      L: 99,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2759,7 +2861,7 @@ var DataSpaceManager = class DataSpaceManager2 {
   async close() {
     log10("close", void 0, {
       F: __dxlog_file10,
-      L: 102,
+      L: 104,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2781,13 +2883,14 @@ var DataSpaceManager = class DataSpaceManager2 {
       key: spaceKey,
       genesisFeedKey: controlFeedKey,
       controlFeedKey,
-      dataFeedKey
+      dataFeedKey,
+      state: SpaceState2.ACTIVE
     };
     log10("creating space...", {
       spaceKey
     }, {
       F: __dxlog_file10,
-      L: 126,
+      L: 129,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2807,7 +2910,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       opts
     }, {
       F: __dxlog_file10,
-      L: 145,
+      L: 148,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2841,7 +2944,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       metadata
     }, {
       F: __dxlog_file10,
-      L: 180,
+      L: 183,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2877,7 +2980,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       onAuthFailure: () => {
         log10.warn("auth failure", void 0, {
           F: __dxlog_file10,
-          L: 211,
+          L: 214,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2888,6 +2991,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     dataFeed && space.setDataFeed(dataFeed);
     const dataSpace = new DataSpace({
       inner: space,
+      initialState: metadata.state === SpaceState2.INACTIVE ? SpaceState2.INACTIVE : SpaceState2.CLOSED,
       metadataStore: this._metadataStore,
       gossip,
       presence,
@@ -2900,11 +3004,11 @@ var DataSpaceManager = class DataSpaceManager2 {
             space: space.key
           }, {
             F: __dxlog_file10,
-            L: 228,
+            L: 232,
             S: this,
             C: (f, a) => f(...a)
           });
-          this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
+          await this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
         },
         afterReady: async () => {
           log10("after space ready", {
@@ -2912,18 +3016,31 @@ var DataSpaceManager = class DataSpaceManager2 {
             open: this._isOpen
           }, {
             F: __dxlog_file10,
-            L: 235,
+            L: 239,
             S: this,
             C: (f, a) => f(...a)
           });
           if (this._isOpen) {
             this.updated.emit();
           }
+        },
+        beforeClose: async () => {
+          log10("before space close", {
+            space: space.key
+          }, {
+            F: __dxlog_file10,
+            L: 245,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          await this._dataServiceSubscriptions.unregisterSpace(space.key);
         }
       },
       cache: metadata.cache
     });
-    await dataSpace.open();
+    if (metadata.state !== SpaceState2.INACTIVE) {
+      await dataSpace.open();
+    }
     if (metadata.controlTimeframe) {
       dataSpace.inner.controlPipeline.state.setTargetTimeframe(metadata.controlTimeframe);
     }
@@ -2935,16 +3052,16 @@ var DataSpaceManager = class DataSpaceManager2 {
   }
 };
 _ts_decorate2([
-  synchronized
+  synchronized2
 ], DataSpaceManager.prototype, "open", null);
 _ts_decorate2([
-  synchronized
+  synchronized2
 ], DataSpaceManager.prototype, "close", null);
 _ts_decorate2([
-  synchronized
+  synchronized2
 ], DataSpaceManager.prototype, "createSpace", null);
 _ts_decorate2([
-  synchronized
+  synchronized2
 ], DataSpaceManager.prototype, "acceptSpace", null);
 DataSpaceManager = _ts_decorate2([
   trackLeaks2("open", "close")
@@ -2952,12 +3069,13 @@ DataSpaceManager = _ts_decorate2([
 
 // packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
 import { EventSubscriptions as EventSubscriptions2, UpdateScheduler, scheduleTask as scheduleTask5 } from "@dxos/async";
-import { Stream as Stream9 } from "@dxos/codec-protobuf";
-import { raise, todo as todo2 } from "@dxos/debug";
+import { Stream as Stream10 } from "@dxos/codec-protobuf";
+import { raise as raise2 } from "@dxos/debug";
 import { SpaceNotFoundError } from "@dxos/echo-pipeline";
+import { ApiError } from "@dxos/errors";
 import { log as log11 } from "@dxos/log";
 import { encodeError } from "@dxos/protocols";
-import { SpaceMember as SpaceMember2 } from "@dxos/protocols/proto/dxos/client/services";
+import { SpaceMember as SpaceMember2, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
 import { humanize } from "@dxos/util";
 var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
@@ -2975,11 +3093,25 @@ var SpacesServiceImpl = class {
     const space = await dataSpaceManager.createSpace();
     return this._serializeSpace(space);
   }
-  async updateSpace(request) {
-    todo2();
+  async updateSpace({ spaceKey, state }) {
+    var _a;
+    const dataSpaceManager = await this._getDataSpaceManager();
+    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
+    if (state) {
+      switch (state) {
+        case SpaceState3.ACTIVE:
+          await space.activate();
+          break;
+        case SpaceState3.INACTIVE:
+          await space.deactivate();
+          break;
+        default:
+          throw new ApiError("Invalid space state");
+      }
+    }
   }
   querySpaces() {
-    return new Stream9(({ next, ctx }) => {
+    return new Stream10(({ next, ctx }) => {
       const scheduler = new UpdateScheduler(ctx, async () => {
         const dataSpaceManager = await this._getDataSpaceManager();
         const spaces = Array.from(dataSpaceManager.spaces.values()).map((space) => this._serializeSpace(space));
@@ -2987,7 +3119,7 @@ var SpacesServiceImpl = class {
           spaces
         }, {
           F: __dxlog_file11,
-          L: 60,
+          L: 78,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -3030,15 +3162,15 @@ var SpacesServiceImpl = class {
   async postMessage({ spaceKey, channel, message }) {
     var _a;
     const dataSpaceManager = await this._getDataSpaceManager();
-    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise(new SpaceNotFoundError(spaceKey));
+    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
     await space.postMessage(getChannelId(channel), message);
   }
   subscribeMessages({ spaceKey, channel }) {
-    return new Stream9(({ ctx, next }) => {
+    return new Stream10(({ ctx, next }) => {
       scheduleTask5(ctx, async () => {
         var _a;
         const dataSpaceManager = await this._getDataSpaceManager();
-        const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise(new SpaceNotFoundError(spaceKey));
+        const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
         const handle = space.listen(getChannelId(channel), (message) => {
           next(message);
         });
@@ -3047,21 +3179,21 @@ var SpacesServiceImpl = class {
     });
   }
   queryCredentials({ spaceKey }) {
-    return new Stream9(({ ctx, next }) => {
+    return new Stream10(({ ctx, next }) => {
       var _a;
-      const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : raise(new SpaceNotFoundError(spaceKey));
-      const processor = space.spaceState.registerProcessor({
-        process: async (credential) => {
+      const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
+      const processor = {
+        processCredential: async (credential) => {
           next(credential);
         }
-      });
-      ctx.onDispose(() => processor.close());
-      scheduleTask5(ctx, () => processor.open());
+      };
+      ctx.onDispose(() => space.spaceState.removeCredentialProcessor(processor));
+      scheduleTask5(ctx, () => space.spaceState.addCredentialProcessor(processor));
     });
   }
   async writeCredentials({ spaceKey, credentials }) {
     var _a;
-    const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : raise(new SpaceNotFoundError(spaceKey));
+    const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
     for (const credential of credentials != null ? credentials : []) {
       await space.controlPipeline.writer.write({
         credential: {
@@ -3073,7 +3205,7 @@ var SpacesServiceImpl = class {
   async createEpoch({ spaceKey }) {
     var _a;
     const dataSpaceManager = await this._getDataSpaceManager();
-    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise(new SpaceNotFoundError(spaceKey));
+    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
     await space.createEpoch();
   }
   _serializeSpace(space) {
@@ -3207,15 +3339,17 @@ var ServiceContext = class {
     });
   }
   async close() {
-    var _a, _b;
+    var _a;
     log12("closing...", void 0, {
       F: __dxlog_file12,
       L: 143,
       S: this,
       C: (f, a) => f(...a)
     });
-    await ((_a = this._deviceSpaceSync) == null ? void 0 : _a.close());
-    await ((_b = this.dataSpaceManager) == null ? void 0 : _b.close());
+    if (this._deviceSpaceSync && this.identityManager.identity) {
+      await this.identityManager.identity.space.spaceState.removeCredentialProcessor(this._deviceSpaceSync);
+    }
+    await ((_a = this.dataSpaceManager) == null ? void 0 : _a.close());
     await this.identityManager.close();
     await this.spaceManager.close();
     await this.feedStore.close();
@@ -3224,7 +3358,7 @@ var ServiceContext = class {
     this.dataServiceSubscriptions.clear();
     log12("closed", void 0, {
       F: __dxlog_file12,
-      L: 152,
+      L: 154,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3255,7 +3389,7 @@ var ServiceContext = class {
     var _a;
     log12("initializing spaces...", void 0, {
       F: __dxlog_file12,
-      L: 185,
+      L: 187,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3280,8 +3414,8 @@ var ServiceContext = class {
       return new SpaceInvitationProtocol(this.dataSpaceManager, signingContext, this.keyring, invitation.spaceKey);
     });
     this.initialized.wake();
-    this._deviceSpaceSync = identity.space.spaceState.registerProcessor({
-      process: async (credential) => {
+    this._deviceSpaceSync = {
+      processCredential: async (credential) => {
         const assertion = getCredentialAssertion3(credential);
         if (assertion["@type"] !== "dxos.halo.credentials.SpaceMember") {
           return;
@@ -3294,7 +3428,7 @@ var ServiceContext = class {
             details: assertion
           }, {
             F: __dxlog_file12,
-            L: 224,
+            L: 226,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3305,7 +3439,7 @@ var ServiceContext = class {
             details: assertion
           }, {
             F: __dxlog_file12,
-            L: 228,
+            L: 230,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3316,7 +3450,7 @@ var ServiceContext = class {
             details: assertion
           }, {
             F: __dxlog_file12,
-            L: 233,
+            L: 235,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3327,14 +3461,14 @@ var ServiceContext = class {
         } catch (err) {
           log12.catch(err, void 0, {
             F: __dxlog_file12,
-            L: 239,
+            L: 241,
             S: this,
             C: (f, a) => f(...a)
           });
         }
       }
-    });
-    await this._deviceSpaceSync.open();
+    };
+    await identity.space.spaceState.addCredentialProcessor(this._deviceSpaceSync);
   }
 };
 
@@ -3539,7 +3673,7 @@ var ServiceRegistry = class {
 
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 import invariant12 from "tiny-invariant";
-import { Event as Event8, synchronized as synchronized2 } from "@dxos/async";
+import { Event as Event8, synchronized as synchronized3 } from "@dxos/async";
 import { clientServiceBundle } from "@dxos/client-protocol";
 import { DocumentModel } from "@dxos/document-model";
 import { DataServiceImpl } from "@dxos/echo-pipeline";
@@ -3554,7 +3688,7 @@ import { TextModel } from "@dxos/text-model";
 
 // packages/sdk/client-services/src/packlets/devices/devices-service.ts
 import { EventSubscriptions as EventSubscriptions3 } from "@dxos/async";
-import { Stream as Stream10 } from "@dxos/codec-protobuf";
+import { Stream as Stream11 } from "@dxos/codec-protobuf";
 import { DeviceKind } from "@dxos/protocols/proto/dxos/client/services";
 var DevicesServiceImpl = class {
   constructor(_identityManager) {
@@ -3564,7 +3698,7 @@ var DevicesServiceImpl = class {
     throw new Error("Method not implemented.");
   }
   queryDevices() {
-    return new Stream10(({ next }) => {
+    return new Stream11(({ next }) => {
       const update = () => {
         var _a;
         const deviceKeys = (_a = this._identityManager.identity) == null ? void 0 : _a.authorizedDeviceKeys;
@@ -3601,7 +3735,7 @@ var DevicesServiceImpl = class {
 
 // packages/sdk/client-services/src/packlets/logging/logging-service.ts
 import { Event as Event7 } from "@dxos/async";
-import { Stream as Stream11 } from "@dxos/codec-protobuf";
+import { Stream as Stream12 } from "@dxos/codec-protobuf";
 import { getContextFromEntry, log as log14 } from "@dxos/log";
 import { QueryLogsRequest } from "@dxos/protocols/proto/dxos/client/services";
 import { jsonify } from "@dxos/util";
@@ -3620,7 +3754,7 @@ var LoggingServiceImpl = class {
     log14.runtimeConfig.processors.splice(index, 1);
   }
   queryLogs(request) {
-    return new Stream11(({ ctx, next }) => {
+    return new Stream12(({ ctx, next }) => {
       const handler = (entry2) => {
         var _a, _b, _c, _d, _e;
         if (LOG_PROCESSING > 0) {
@@ -3676,14 +3810,14 @@ var shouldLog = (entry2, request) => {
 var LOG_PROCESSING = 0;
 
 // packages/sdk/client-services/src/packlets/network/network-service.ts
-import { Stream as Stream12 } from "@dxos/codec-protobuf";
+import { Stream as Stream13 } from "@dxos/codec-protobuf";
 var NetworkServiceImpl = class {
   constructor(networkManager, signalManager) {
     this.networkManager = networkManager;
     this.signalManager = signalManager;
   }
   queryStatus() {
-    return new Stream12(({ next }) => {
+    return new Stream13(({ next }) => {
       const update = () => {
         next({
           swarm: this.networkManager.connectionState,
@@ -3708,7 +3842,7 @@ var NetworkServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/system/system-service.ts
-import { Stream as Stream13 } from "@dxos/codec-protobuf";
+import { Stream as Stream14 } from "@dxos/codec-protobuf";
 var SystemServiceImpl = class {
   constructor({ config, statusUpdate, onUpdateStatus, getCurrentStatus, onReset }) {
     this._config = config;
@@ -3725,7 +3859,7 @@ var SystemServiceImpl = class {
     await this._onUpdateStatus(status);
   }
   queryStatus() {
-    return new Stream13(({ next }) => {
+    return new Stream14(({ next }) => {
       const update = () => {
         next({
           status: this._getCurrentStatus()
@@ -3994,10 +4128,10 @@ var ClientServicesHost = class {
   }
 };
 _ts_decorate4([
-  synchronized2
+  synchronized3
 ], ClientServicesHost.prototype, "open", null);
 _ts_decorate4([
-  synchronized2
+  synchronized3
 ], ClientServicesHost.prototype, "close", null);
 
 export {
@@ -4020,6 +4154,7 @@ export {
   InvitationsHandler,
   InvitationsServiceImpl,
   SpaceInvitationProtocol,
+  ClientRpcServer,
   DataSpace,
   DataSpaceManager,
   SpacesServiceImpl,
@@ -4031,4 +4166,4 @@ export {
   createDefaultModelFactory,
   ClientServicesHost
 };
-//# sourceMappingURL=chunk-PWZ2J6KS.mjs.map
+//# sourceMappingURL=chunk-F4BHRFH4.mjs.map