@dxos/client-services 0.1.53-next.63b0547 → 0.1.53-next.e9dc2bc

package/dist/lib/browser/{chunk-RKD47ENR.mjs → chunk-3EI4PM2V.mjs}

@@ -353,6 +353,7 @@ import { verifyCredential } from "@dxos/credentials";
 import { log } from "@dxos/log";
 import { schema } from "@dxos/protocols";
 var __dxlog_file = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/authenticator.ts";
+var Credential = schema.getCodecForType("dxos.halo.credentials.Credential");
 var createAuthProvider = (signer) => async (nonce) => {
   const credential = await signer.createCredential({
     assertion: {
@@ -361,7 +362,7 @@ var createAuthProvider = (signer) => async (nonce) => {
     subject: signer.getIssuer(),
     nonce
   });
-  return schema.getCodecForType("dxos.halo.credentials.Credential").encode(credential);
+  return Credential.encode(credential);
 };
 var TrustedKeySetAuthVerifier = class {
   // prettier-ignore
@@ -374,12 +375,12 @@ var TrustedKeySetAuthVerifier = class {
   }
   get verifier() {
     return async (nonce, auth) => {
-      const credential = schema.getCodecForType("dxos.halo.credentials.Credential").decode(auth);
+      const credential = Credential.decode(auth);
       log("authenticating...", {
         credential
       }, {
         F: __dxlog_file,
-        L: 57,
+        L: 59,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -389,7 +390,7 @@ var TrustedKeySetAuthVerifier = class {
           result
         }, {
           F: __dxlog_file,
-          L: 61,
+          L: 63,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -401,7 +402,7 @@ var TrustedKeySetAuthVerifier = class {
           credential
         }, {
           F: __dxlog_file,
-          L: 66,
+          L: 68,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -412,7 +413,7 @@ var TrustedKeySetAuthVerifier = class {
           key: credential.issuer
         }, {
           F: __dxlog_file,
-          L: 71,
+          L: 73,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -428,7 +429,7 @@ var TrustedKeySetAuthVerifier = class {
             key: credential.issuer
           }, {
             F: __dxlog_file,
-            L: 82,
+            L: 84,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -438,7 +439,7 @@ var TrustedKeySetAuthVerifier = class {
             key: credential.issuer
           }, {
             F: __dxlog_file,
-            L: 85,
+            L: 87,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -478,15 +479,15 @@ var Identity = class {
     this._signer = signer;
     this.identityKey = identityKey;
     this.deviceKey = deviceKey;
-    this._deviceStateMachine = this.space.spaceState.registerProcessor(new DeviceStateMachine({
+    this._deviceStateMachine = new DeviceStateMachine({
       identityKey: this.identityKey,
       deviceKey: this.deviceKey,
       onUpdate: () => this.stateUpdate.emit()
-    }));
-    this._profileStateMachine = this.space.spaceState.registerProcessor(new ProfileStateMachine({
+    });
+    this._profileStateMachine = new ProfileStateMachine({
       identityKey: this.identityKey,
       onUpdate: () => this.stateUpdate.emit()
-    }));
+    });
     this.authVerifier = new TrustedKeySetAuthVerifier({
       trustedKeysProvider: () => this.authorizedDeviceKeys,
       update: this.stateUpdate,
@@ -495,27 +496,27 @@ var Identity = class {
   }
   // TODO(burdon): Expose state object?
   get authorizedDeviceKeys() {
-    return this._deviceStateMachine.processor.authorizedDeviceKeys;
+    return this._deviceStateMachine.authorizedDeviceKeys;
   }
   async open() {
-    await this._deviceStateMachine.open();
-    await this._profileStateMachine.open();
+    await this.space.spaceState.addCredentialProcessor(this._deviceStateMachine);
+    await this.space.spaceState.addCredentialProcessor(this._profileStateMachine);
     await this.space.open();
   }
   async close() {
     await this.authVerifier.close();
-    await this._deviceStateMachine.close();
-    await this._profileStateMachine.close();
+    await this.space.spaceState.removeCredentialProcessor(this._profileStateMachine);
+    await this.space.spaceState.removeCredentialProcessor(this._deviceStateMachine);
     await this.space.close();
   }
   async ready() {
-    await this._deviceStateMachine.processor.deviceChainReady.wait();
+    await this._deviceStateMachine.deviceChainReady.wait();
     await this.controlPipeline.state.waitUntilReachedTargetTimeframe({
       timeout: LOAD_CONTROL_FEEDS_TIMEOUT
     });
   }
   get profileDocument() {
-    return this._profileStateMachine.processor.profile;
+    return this._profileStateMachine.profile;
   }
   /**
   * @test-only
@@ -530,7 +531,7 @@ var Identity = class {
     return this.space.genesisFeedKey;
   }
   get deviceCredentialChain() {
-    return this._deviceStateMachine.processor.deviceCredentialChain;
+    return this._deviceStateMachine.deviceCredentialChain;
   }
   getAdmissionCredentials() {
     var _a, _b;
@@ -545,8 +546,8 @@ var Identity = class {
   * Requires identity to be ready.
   */
   getIdentityCredentialSigner() {
-    invariant(this._deviceStateMachine.processor.deviceCredentialChain, "Device credential chain is not ready.");
-    return createCredentialSignerWithChain(this._signer, this._deviceStateMachine.processor.deviceCredentialChain, this.deviceKey);
+    invariant(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.");
+    return createCredentialSignerWithChain(this._signer, this._deviceStateMachine.deviceCredentialChain, this.deviceKey);
   }
   /**
   * Issues credentials as device.
@@ -563,7 +564,7 @@ var Identity = class {
       dataFeedKey
     }, {
       F: __dxlog_file2,
-      L: 156,
+      L: 151,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2082,7 +2083,7 @@ var SpaceInvitationProtocol = class {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-import { Event as Event5, scheduleTask as scheduleTask4, trackLeaks } from "@dxos/async";
+import { Event as Event5, scheduleTask as scheduleTask4, synchronized, trackLeaks } from "@dxos/async";
 import { AUTH_TIMEOUT as AUTH_TIMEOUT2 } from "@dxos/client-protocol";
 import { cancelWithContext as cancelWithContext2, Context as Context6 } from "@dxos/context";
 import { timed } from "@dxos/debug";
@@ -2117,6 +2118,9 @@ var NotarizationPlugin = class {
     this._processedCredentials = new ComplexSet(PublicKey6.hash);
     this._processCredentialsTriggers = new ComplexMap2(PublicKey6.hash);
   }
+  get hasWriter() {
+    return !!this._writer;
+  }
   async open() {
   }
   async close() {
@@ -2130,7 +2134,7 @@ var NotarizationPlugin = class {
       credentials
     }, {
       F: __dxlog_file8,
-      L: 87,
+      L: 91,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2142,7 +2146,7 @@ var NotarizationPlugin = class {
           err
         }, {
           F: __dxlog_file8,
-          L: 96,
+          L: 100,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2158,7 +2162,7 @@ var NotarizationPlugin = class {
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
           F: __dxlog_file8,
-          L: 108,
+          L: 112,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2181,7 +2185,7 @@ var NotarizationPlugin = class {
             retryIn: retryTimeout
           }, {
             F: __dxlog_file8,
-            L: 133,
+            L: 137,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2195,7 +2199,7 @@ var NotarizationPlugin = class {
           credentialId: credentials.map((credential) => credential.id)
         }, {
           F: __dxlog_file8,
-          L: 140,
+          L: 144,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2204,7 +2208,7 @@ var NotarizationPlugin = class {
         });
         log8("success", void 0, {
           F: __dxlog_file8,
-          L: 144,
+          L: 148,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2213,7 +2217,7 @@ var NotarizationPlugin = class {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
           log8.warn("error notarizing (recoverable)", err, {
             F: __dxlog_file8,
-            L: 148,
+            L: 152,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2231,7 +2235,7 @@ var NotarizationPlugin = class {
       ]);
       log8("done", void 0, {
         F: __dxlog_file8,
-        L: 159,
+        L: 163,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2242,7 +2246,7 @@ var NotarizationPlugin = class {
   /**
   * Called with credentials arriving from the control pipeline.
   */
-  async process(credential) {
+  async processCredential(credential) {
     var _a;
     if (!credential.id) {
       return;
@@ -2284,7 +2288,7 @@ var NotarizationPlugin = class {
           peer: extension.localPeerId
         }, {
           F: __dxlog_file8,
-          L: 208,
+          L: 212,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2296,7 +2300,7 @@ var NotarizationPlugin = class {
           peer: extension.localPeerId
         }, {
           F: __dxlog_file8,
-          L: 213,
+          L: 217,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2353,6 +2357,7 @@ var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/sr
 var DataSpace = class DataSpace2 {
   constructor(params) {
     this._ctx = new Context6();
+    this._notarizationPlugin = new NotarizationPlugin();
     this._state = SpaceState.CLOSED;
     /**
     * Error for _state === SpaceState.ERROR.
@@ -2375,8 +2380,8 @@ var DataSpace = class DataSpace2 {
       update: this._inner.stateUpdate,
       authTimeout: AUTH_TIMEOUT2
     });
-    this._notarizationPluginConsumer = this._inner.spaceState.registerProcessor(new NotarizationPlugin());
     this._cache = params.cache;
+    this._state = params.initialState;
   }
   get key() {
     return this._inner.key;
@@ -2398,25 +2403,36 @@ var DataSpace = class DataSpace2 {
     return this._presence;
   }
   get notarizationPlugin() {
-    return this._notarizationPluginConsumer.processor;
+    return this._notarizationPlugin;
   }
   get cache() {
     return this._cache;
   }
   async open() {
-    await this.notarizationPlugin.open();
-    await this._notarizationPluginConsumer.open();
+    await this._open();
+  }
+  async _open() {
+    await this._notarizationPlugin.open();
+    await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
     await this._inner.open();
-    this._state = SpaceState.INACTIVE;
+    this._state = SpaceState.CONTROL_ONLY;
+    this.stateUpdate.emit();
+    this.metrics = {};
     this.metrics.open = new Date();
   }
   async close() {
+    await this._close();
+  }
+  async _close() {
+    var _a, _b;
+    await ((_b = (_a = this._callbacks).beforeClose) == null ? void 0 : _b.call(_a));
     this._state = SpaceState.CLOSED;
     await this._ctx.dispose();
+    this._ctx = new Context6();
     await this.authVerifier.close();
     await this._inner.close();
-    await this._notarizationPluginConsumer.close();
-    await this.notarizationPlugin.close();
+    await this._inner.spaceState.removeCredentialProcessor(this._notarizationPlugin);
+    await this._notarizationPlugin.close();
     await this._presence.destroy();
   }
   async postMessage(channel, message) {
@@ -2437,7 +2453,7 @@ var DataSpace = class DataSpace2 {
         if (err instanceof CancelledError) {
           log9("Data pipeline initialization cancelled", err, {
             F: __dxlog_file9,
-            L: 173,
+            L: 193,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2445,7 +2461,7 @@ var DataSpace = class DataSpace2 {
         }
         log9.error("Error initializing data pipeline", err, {
           F: __dxlog_file9,
-          L: 177,
+          L: 197,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2459,7 +2475,7 @@ var DataSpace = class DataSpace2 {
   }
   async initializeDataPipeline() {
     var _a, _b, _c, _d;
-    if (this._state !== SpaceState.INACTIVE) {
+    if (this._state !== SpaceState.CONTROL_ONLY) {
       throw new SystemError("Invalid operation");
     }
     this._state = SpaceState.INITIALIZING;
@@ -2471,22 +2487,24 @@ var DataSpace = class DataSpace2 {
     await this._createWritableFeeds();
     log9("Writable feeds created", void 0, {
       F: __dxlog_file9,
-      L: 201,
+      L: 221,
       S: this,
       C: (f, a) => f(...a)
     });
     this.stateUpdate.emit();
-    this.notarizationPlugin.setWriter(createMappedFeedWriter((credential) => ({
-      credential: {
-        credential
-      }
-    }), this._inner.controlPipeline.writer));
+    if (!this.notarizationPlugin.hasWriter) {
+      this.notarizationPlugin.setWriter(createMappedFeedWriter((credential) => ({
+        credential: {
+          credential
+        }
+      }), this._inner.controlPipeline.writer));
+    }
     await this._inner.initializeDataPipeline();
     this.metrics.dataPipelineOpen = new Date();
     await cancelWithContext2(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
     log9("waiting for data pipeline to reach target timeframe", void 0, {
       F: __dxlog_file9,
-      L: 220,
+      L: 242,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2497,7 +2515,7 @@ var DataSpace = class DataSpace2 {
     this.metrics.dataPipelineReady = new Date();
     log9("data pipeline ready", void 0, {
       F: __dxlog_file9,
-      L: 229,
+      L: 251,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2577,17 +2595,46 @@ var DataSpace = class DataSpace2 {
       }
     }
   }
+  async activate() {
+    if (this._state !== SpaceState.INACTIVE) {
+      throw new SystemError("Invalid operation");
+    }
+    await this._metadataStore.setSpaceState(this.key, SpaceState.ACTIVE);
+    await this._open();
+    this.initializeDataPipelineAsync();
+  }
+  async deactivate() {
+    if (this._state === SpaceState.INACTIVE) {
+      throw new SystemError("Invalid operation");
+    }
+    await this._metadataStore.setSpaceState(this.key, SpaceState.INACTIVE);
+    await this._close();
+    this._state = SpaceState.INACTIVE;
+    this.stateUpdate.emit();
+  }
 };
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "open", null);
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "close", null);
 _ts_decorate([
   timed(1e4)
 ], DataSpace.prototype, "_createWritableFeeds", null);
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "activate", null);
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "deactivate", null);
 DataSpace = _ts_decorate([
   trackLeaks("open", "close")
 ], DataSpace);
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
 import invariant10 from "tiny-invariant";
-import { Event as Event6, synchronized, trackLeaks as trackLeaks2 } from "@dxos/async";
+import { Event as Event6, synchronized as synchronized2, trackLeaks as trackLeaks2 } from "@dxos/async";
 import { cancelWithContext as cancelWithContext3, Context as Context7 } from "@dxos/context";
 import { getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
 import { PublicKey as PublicKey8 } from "@dxos/keys";
@@ -2732,14 +2779,16 @@ var DataSpaceManager = class DataSpaceManager2 {
           C: (f, a) => f(...a)
         });
         const space = await this._constructSpace(spaceMetadata);
-        space.initializeDataPipelineAsync();
+        if (spaceMetadata.state !== SpaceState2.INACTIVE) {
+          space.initializeDataPipelineAsync();
+        }
       } catch (err) {
         log10.error("Error loading space", {
           spaceMetadata,
           err
         }, {
           F: __dxlog_file10,
-          L: 91,
+          L: 93,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2751,7 +2800,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       id: this._instanceId
     }), {
       F: __dxlog_file10,
-      L: 97,
+      L: 99,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2759,7 +2808,7 @@ var DataSpaceManager = class DataSpaceManager2 {
   async close() {
     log10("close", void 0, {
       F: __dxlog_file10,
-      L: 102,
+      L: 104,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2781,13 +2830,14 @@ var DataSpaceManager = class DataSpaceManager2 {
       key: spaceKey,
       genesisFeedKey: controlFeedKey,
       controlFeedKey,
-      dataFeedKey
+      dataFeedKey,
+      state: SpaceState2.ACTIVE
     };
     log10("creating space...", {
       spaceKey
     }, {
       F: __dxlog_file10,
-      L: 126,
+      L: 129,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2807,7 +2857,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       opts
     }, {
       F: __dxlog_file10,
-      L: 145,
+      L: 148,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2841,7 +2891,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       metadata
     }, {
       F: __dxlog_file10,
-      L: 180,
+      L: 183,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2877,7 +2927,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       onAuthFailure: () => {
         log10.warn("auth failure", void 0, {
           F: __dxlog_file10,
-          L: 211,
+          L: 214,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2888,6 +2938,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     dataFeed && space.setDataFeed(dataFeed);
     const dataSpace = new DataSpace({
       inner: space,
+      initialState: metadata.state === SpaceState2.INACTIVE ? SpaceState2.INACTIVE : SpaceState2.CLOSED,
       metadataStore: this._metadataStore,
       gossip,
       presence,
@@ -2900,11 +2951,11 @@ var DataSpaceManager = class DataSpaceManager2 {
             space: space.key
           }, {
             F: __dxlog_file10,
-            L: 228,
+            L: 232,
             S: this,
             C: (f, a) => f(...a)
           });
-          this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
+          await this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
         },
         afterReady: async () => {
           log10("after space ready", {
@@ -2912,18 +2963,31 @@ var DataSpaceManager = class DataSpaceManager2 {
             open: this._isOpen
           }, {
             F: __dxlog_file10,
-            L: 235,
+            L: 239,
             S: this,
             C: (f, a) => f(...a)
           });
           if (this._isOpen) {
             this.updated.emit();
           }
+        },
+        beforeClose: async () => {
+          log10("before space close", {
+            space: space.key
+          }, {
+            F: __dxlog_file10,
+            L: 245,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          await this._dataServiceSubscriptions.unregisterSpace(space.key);
         }
       },
       cache: metadata.cache
     });
-    await dataSpace.open();
+    if (metadata.state !== SpaceState2.INACTIVE) {
+      await dataSpace.open();
+    }
     if (metadata.controlTimeframe) {
       dataSpace.inner.controlPipeline.state.setTargetTimeframe(metadata.controlTimeframe);
     }
@@ -2935,16 +2999,16 @@ var DataSpaceManager = class DataSpaceManager2 {
   }
 };
 _ts_decorate2([
-  synchronized
+  synchronized2
 ], DataSpaceManager.prototype, "open", null);
 _ts_decorate2([
-  synchronized
+  synchronized2
 ], DataSpaceManager.prototype, "close", null);
 _ts_decorate2([
-  synchronized
+  synchronized2
 ], DataSpaceManager.prototype, "createSpace", null);
 _ts_decorate2([
-  synchronized
+  synchronized2
 ], DataSpaceManager.prototype, "acceptSpace", null);
 DataSpaceManager = _ts_decorate2([
   trackLeaks2("open", "close")
@@ -2953,11 +3017,12 @@ DataSpaceManager = _ts_decorate2([
 // packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
 import { EventSubscriptions as EventSubscriptions2, UpdateScheduler, scheduleTask as scheduleTask5 } from "@dxos/async";
 import { Stream as Stream9 } from "@dxos/codec-protobuf";
-import { raise, todo as todo2 } from "@dxos/debug";
+import { raise } from "@dxos/debug";
 import { SpaceNotFoundError } from "@dxos/echo-pipeline";
+import { ApiError } from "@dxos/errors";
 import { log as log11 } from "@dxos/log";
 import { encodeError } from "@dxos/protocols";
-import { SpaceMember as SpaceMember2 } from "@dxos/protocols/proto/dxos/client/services";
+import { SpaceMember as SpaceMember2, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
 import { humanize } from "@dxos/util";
 var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
@@ -2975,8 +3040,22 @@ var SpacesServiceImpl = class {
     const space = await dataSpaceManager.createSpace();
     return this._serializeSpace(space);
   }
-  async updateSpace(request) {
-    todo2();
+  async updateSpace({ spaceKey, state }) {
+    var _a;
+    const dataSpaceManager = await this._getDataSpaceManager();
+    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise(new SpaceNotFoundError(spaceKey));
+    if (state) {
+      switch (state) {
+        case SpaceState3.ACTIVE:
+          await space.activate();
+          break;
+        case SpaceState3.INACTIVE:
+          await space.deactivate();
+          break;
+        default:
+          throw new ApiError("Invalid space state");
+      }
+    }
   }
   querySpaces() {
     return new Stream9(({ next, ctx }) => {
@@ -2987,7 +3066,7 @@ var SpacesServiceImpl = class {
           spaces
         }, {
           F: __dxlog_file11,
-          L: 60,
+          L: 78,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -3050,13 +3129,13 @@ var SpacesServiceImpl = class {
     return new Stream9(({ ctx, next }) => {
       var _a;
       const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : raise(new SpaceNotFoundError(spaceKey));
-      const processor = space.spaceState.registerProcessor({
-        process: async (credential) => {
+      const processor = {
+        processCredential: async (credential) => {
           next(credential);
         }
-      });
-      ctx.onDispose(() => processor.close());
-      scheduleTask5(ctx, () => processor.open());
+      };
+      ctx.onDispose(() => space.spaceState.removeCredentialProcessor(processor));
+      scheduleTask5(ctx, () => space.spaceState.addCredentialProcessor(processor));
     });
   }
   async writeCredentials({ spaceKey, credentials }) {
@@ -3207,15 +3286,17 @@ var ServiceContext = class {
     });
   }
   async close() {
-    var _a, _b;
+    var _a;
     log12("closing...", void 0, {
       F: __dxlog_file12,
       L: 143,
       S: this,
       C: (f, a) => f(...a)
     });
-    await ((_a = this._deviceSpaceSync) == null ? void 0 : _a.close());
-    await ((_b = this.dataSpaceManager) == null ? void 0 : _b.close());
+    if (this._deviceSpaceSync && this.identityManager.identity) {
+      await this.identityManager.identity.space.spaceState.removeCredentialProcessor(this._deviceSpaceSync);
+    }
+    await ((_a = this.dataSpaceManager) == null ? void 0 : _a.close());
     await this.identityManager.close();
     await this.spaceManager.close();
     await this.feedStore.close();
@@ -3224,7 +3305,7 @@ var ServiceContext = class {
     this.dataServiceSubscriptions.clear();
     log12("closed", void 0, {
       F: __dxlog_file12,
-      L: 152,
+      L: 154,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3255,7 +3336,7 @@ var ServiceContext = class {
     var _a;
     log12("initializing spaces...", void 0, {
       F: __dxlog_file12,
-      L: 185,
+      L: 187,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3280,8 +3361,8 @@ var ServiceContext = class {
       return new SpaceInvitationProtocol(this.dataSpaceManager, signingContext, this.keyring, invitation.spaceKey);
     });
     this.initialized.wake();
-    this._deviceSpaceSync = identity.space.spaceState.registerProcessor({
-      process: async (credential) => {
+    this._deviceSpaceSync = {
+      processCredential: async (credential) => {
         const assertion = getCredentialAssertion3(credential);
         if (assertion["@type"] !== "dxos.halo.credentials.SpaceMember") {
           return;
@@ -3294,7 +3375,7 @@ var ServiceContext = class {
             details: assertion
           }, {
             F: __dxlog_file12,
-            L: 224,
+            L: 226,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3305,7 +3386,7 @@ var ServiceContext = class {
             details: assertion
           }, {
             F: __dxlog_file12,
-            L: 228,
+            L: 230,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3316,7 +3397,7 @@ var ServiceContext = class {
             details: assertion
           }, {
             F: __dxlog_file12,
-            L: 233,
+            L: 235,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3327,14 +3408,14 @@ var ServiceContext = class {
         } catch (err) {
           log12.catch(err, void 0, {
             F: __dxlog_file12,
-            L: 239,
+            L: 241,
             S: this,
             C: (f, a) => f(...a)
           });
         }
       }
-    });
-    await this._deviceSpaceSync.open();
+    };
+    await identity.space.spaceState.addCredentialProcessor(this._deviceSpaceSync);
   }
 };
 
@@ -3539,7 +3620,7 @@ var ServiceRegistry = class {
 
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 import invariant12 from "tiny-invariant";
-import { Event as Event8, synchronized as synchronized2 } from "@dxos/async";
+import { Event as Event8, synchronized as synchronized3 } from "@dxos/async";
 import { clientServiceBundle } from "@dxos/client-protocol";
 import { DocumentModel } from "@dxos/document-model";
 import { DataServiceImpl } from "@dxos/echo-pipeline";
@@ -3770,13 +3851,15 @@ var ClientServicesHost = class {
     connectionLog,
     storage,
     // TODO(wittjosiah): Turn this on by default.
-    lockKey
+    lockKey,
+    callbacks
   } = {}) {
     this._statusUpdate = new Event8();
     this._opening = false;
     this._open = false;
     this._storage = storage;
     this._modelFactory = modelFactory;
+    this._callbacks = callbacks;
     if (config) {
       this.initialize({
         config,
@@ -3864,7 +3947,7 @@ var ClientServicesHost = class {
       id: traceId
     }), {
       F: __dxlog_file14,
-      L: 195,
+      L: 203,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3877,7 +3960,7 @@ var ClientServicesHost = class {
       lockKey: (_a = this._resourceLock) == null ? void 0 : _a.lockKey
     }, {
       F: __dxlog_file14,
-      L: 203,
+      L: 211,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3912,7 +3995,7 @@ var ClientServicesHost = class {
       deviceKey
     }, {
       F: __dxlog_file14,
-      L: 258,
+      L: 266,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3920,7 +4003,7 @@ var ClientServicesHost = class {
       id: traceId
     }), {
       F: __dxlog_file14,
-      L: 259,
+      L: 267,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3935,7 +4018,7 @@ var ClientServicesHost = class {
       deviceKey
     }, {
       F: __dxlog_file14,
-      L: 269,
+      L: 277,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3950,25 +4033,25 @@ var ClientServicesHost = class {
       deviceKey
     }, {
       F: __dxlog_file14,
-      L: 275,
+      L: 283,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async reset() {
-    var _a;
+    var _a, _b, _c;
     const traceId = PublicKey10.random().toHex();
     log15.trace("dxos.sdk.client-services-host.reset", trace6.begin({
       id: traceId
     }), {
       F: __dxlog_file14,
-      L: 280,
+      L: 288,
       S: this,
       C: (f, a) => f(...a)
     });
     log15("resetting...", void 0, {
       F: __dxlog_file14,
-      L: 282,
+      L: 290,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3976,7 +4059,7 @@ var ClientServicesHost = class {
     await this._storage.reset();
     log15("reset", void 0, {
       F: __dxlog_file14,
-      L: 285,
+      L: 293,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3984,17 +4067,18 @@ var ClientServicesHost = class {
       id: traceId
     }), {
       F: __dxlog_file14,
-      L: 286,
+      L: 294,
       S: this,
       C: (f, a) => f(...a)
     });
+    await ((_c = (_b = this._callbacks) == null ? void 0 : _b.onReset) == null ? void 0 : _c.call(_b));
   }
 };
 _ts_decorate4([
-  synchronized2
+  synchronized3
 ], ClientServicesHost.prototype, "open", null);
 _ts_decorate4([
-  synchronized2
+  synchronized3
 ], ClientServicesHost.prototype, "close", null);
 
 export {
@@ -4028,4 +4112,4 @@ export {
   createDefaultModelFactory,
   ClientServicesHost
 };
-//# sourceMappingURL=chunk-RKD47ENR.mjs.map
+//# sourceMappingURL=chunk-3EI4PM2V.mjs.map