@dxos/client-services 0.1.53-next.63b0547 → 0.1.53-next.e9dc2bc

package/dist/lib/node/index.cjs

@@ -420,6 +420,7 @@ var import_credentials = require("@dxos/credentials");
 var import_log = require("@dxos/log");
 var import_protocols = require("@dxos/protocols");
 var __dxlog_file = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/authenticator.ts";
+var Credential = import_protocols.schema.getCodecForType("dxos.halo.credentials.Credential");
 var createAuthProvider = (signer) => async (nonce) => {
   const credential = await signer.createCredential({
     assertion: {
@@ -428,7 +429,7 @@ var createAuthProvider = (signer) => async (nonce) => {
     subject: signer.getIssuer(),
     nonce
   });
-  return import_protocols.schema.getCodecForType("dxos.halo.credentials.Credential").encode(credential);
+  return Credential.encode(credential);
 };
 var TrustedKeySetAuthVerifier = class {
   // prettier-ignore
@@ -441,12 +442,12 @@ var TrustedKeySetAuthVerifier = class {
   }
   get verifier() {
     return async (nonce, auth) => {
-      const credential = import_protocols.schema.getCodecForType("dxos.halo.credentials.Credential").decode(auth);
+      const credential = Credential.decode(auth);
       (0, import_log.log)("authenticating...", {
         credential
       }, {
         F: __dxlog_file,
-        L: 57,
+        L: 59,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -456,7 +457,7 @@ var TrustedKeySetAuthVerifier = class {
           result
         }, {
           F: __dxlog_file,
-          L: 61,
+          L: 63,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -468,7 +469,7 @@ var TrustedKeySetAuthVerifier = class {
           credential
         }, {
           F: __dxlog_file,
-          L: 66,
+          L: 68,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -479,7 +480,7 @@ var TrustedKeySetAuthVerifier = class {
           key: credential.issuer
         }, {
           F: __dxlog_file,
-          L: 71,
+          L: 73,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -495,7 +496,7 @@ var TrustedKeySetAuthVerifier = class {
             key: credential.issuer
           }, {
             F: __dxlog_file,
-            L: 82,
+            L: 84,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -505,7 +506,7 @@ var TrustedKeySetAuthVerifier = class {
             key: credential.issuer
           }, {
             F: __dxlog_file,
-            L: 85,
+            L: 87,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -545,15 +546,15 @@ var Identity = class {
     this._signer = signer;
     this.identityKey = identityKey;
     this.deviceKey = deviceKey;
-    this._deviceStateMachine = this.space.spaceState.registerProcessor(new import_credentials2.DeviceStateMachine({
+    this._deviceStateMachine = new import_credentials2.DeviceStateMachine({
       identityKey: this.identityKey,
       deviceKey: this.deviceKey,
       onUpdate: () => this.stateUpdate.emit()
-    }));
-    this._profileStateMachine = this.space.spaceState.registerProcessor(new import_credentials2.ProfileStateMachine({
+    });
+    this._profileStateMachine = new import_credentials2.ProfileStateMachine({
       identityKey: this.identityKey,
       onUpdate: () => this.stateUpdate.emit()
-    }));
+    });
     this.authVerifier = new TrustedKeySetAuthVerifier({
       trustedKeysProvider: () => this.authorizedDeviceKeys,
       update: this.stateUpdate,
@@ -562,27 +563,27 @@ var Identity = class {
   }
   // TODO(burdon): Expose state object?
   get authorizedDeviceKeys() {
-    return this._deviceStateMachine.processor.authorizedDeviceKeys;
+    return this._deviceStateMachine.authorizedDeviceKeys;
   }
   async open() {
-    await this._deviceStateMachine.open();
-    await this._profileStateMachine.open();
+    await this.space.spaceState.addCredentialProcessor(this._deviceStateMachine);
+    await this.space.spaceState.addCredentialProcessor(this._profileStateMachine);
     await this.space.open();
   }
   async close() {
     await this.authVerifier.close();
-    await this._deviceStateMachine.close();
-    await this._profileStateMachine.close();
+    await this.space.spaceState.removeCredentialProcessor(this._profileStateMachine);
+    await this.space.spaceState.removeCredentialProcessor(this._deviceStateMachine);
     await this.space.close();
   }
   async ready() {
-    await this._deviceStateMachine.processor.deviceChainReady.wait();
+    await this._deviceStateMachine.deviceChainReady.wait();
     await this.controlPipeline.state.waitUntilReachedTargetTimeframe({
       timeout: import_client_protocol.LOAD_CONTROL_FEEDS_TIMEOUT
     });
   }
   get profileDocument() {
-    return this._profileStateMachine.processor.profile;
+    return this._profileStateMachine.profile;
   }
   /**
   * @test-only
@@ -597,7 +598,7 @@ var Identity = class {
     return this.space.genesisFeedKey;
   }
   get deviceCredentialChain() {
-    return this._deviceStateMachine.processor.deviceCredentialChain;
+    return this._deviceStateMachine.deviceCredentialChain;
   }
   getAdmissionCredentials() {
     var _a, _b;
@@ -612,8 +613,8 @@ var Identity = class {
   * Requires identity to be ready.
   */
   getIdentityCredentialSigner() {
-    (0, import_tiny_invariant.default)(this._deviceStateMachine.processor.deviceCredentialChain, "Device credential chain is not ready.");
-    return (0, import_credentials2.createCredentialSignerWithChain)(this._signer, this._deviceStateMachine.processor.deviceCredentialChain, this.deviceKey);
+    (0, import_tiny_invariant.default)(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.");
+    return (0, import_credentials2.createCredentialSignerWithChain)(this._signer, this._deviceStateMachine.deviceCredentialChain, this.deviceKey);
   }
   /**
   * Issues credentials as device.
@@ -630,7 +631,7 @@ var Identity = class {
       dataFeedKey
     }, {
       F: __dxlog_file2,
-      L: 156,
+      L: 151,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2210,6 +2211,9 @@ var NotarizationPlugin = class {
     this._processedCredentials = new import_util3.ComplexSet(import_keys7.PublicKey.hash);
     this._processCredentialsTriggers = new import_util3.ComplexMap(import_keys7.PublicKey.hash);
   }
+  get hasWriter() {
+    return !!this._writer;
+  }
   async open() {
   }
   async close() {
@@ -2223,7 +2227,7 @@ var NotarizationPlugin = class {
       credentials
     }, {
       F: __dxlog_file8,
-      L: 87,
+      L: 91,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2235,7 +2239,7 @@ var NotarizationPlugin = class {
           err
         }, {
           F: __dxlog_file8,
-          L: 96,
+          L: 100,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2251,7 +2255,7 @@ var NotarizationPlugin = class {
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
           F: __dxlog_file8,
-          L: 108,
+          L: 112,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2274,7 +2278,7 @@ var NotarizationPlugin = class {
             retryIn: retryTimeout
           }, {
             F: __dxlog_file8,
-            L: 133,
+            L: 137,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2288,7 +2292,7 @@ var NotarizationPlugin = class {
           credentialId: credentials.map((credential) => credential.id)
         }, {
           F: __dxlog_file8,
-          L: 140,
+          L: 144,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2297,7 +2301,7 @@ var NotarizationPlugin = class {
         });
         (0, import_log8.log)("success", void 0, {
           F: __dxlog_file8,
-          L: 144,
+          L: 148,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2306,7 +2310,7 @@ var NotarizationPlugin = class {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
           import_log8.log.warn("error notarizing (recoverable)", err, {
             F: __dxlog_file8,
-            L: 148,
+            L: 152,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2324,7 +2328,7 @@ var NotarizationPlugin = class {
       ]);
       (0, import_log8.log)("done", void 0, {
         F: __dxlog_file8,
-        L: 159,
+        L: 163,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2335,7 +2339,7 @@ var NotarizationPlugin = class {
   /**
   * Called with credentials arriving from the control pipeline.
   */
-  async process(credential) {
+  async processCredential(credential) {
     var _a;
     if (!credential.id) {
       return;
@@ -2377,7 +2381,7 @@ var NotarizationPlugin = class {
           peer: extension.localPeerId
         }, {
           F: __dxlog_file8,
-          L: 208,
+          L: 212,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2389,7 +2393,7 @@ var NotarizationPlugin = class {
           peer: extension.localPeerId
         }, {
           F: __dxlog_file8,
-          L: 213,
+          L: 217,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2446,6 +2450,7 @@ var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/sr
 var DataSpace = class DataSpace2 {
   constructor(params) {
     this._ctx = new import_context6.Context();
+    this._notarizationPlugin = new NotarizationPlugin();
     this._state = import_services6.SpaceState.CLOSED;
     /**
     * Error for _state === SpaceState.ERROR.
@@ -2468,8 +2473,8 @@ var DataSpace = class DataSpace2 {
       update: this._inner.stateUpdate,
       authTimeout: import_client_protocol3.AUTH_TIMEOUT
     });
-    this._notarizationPluginConsumer = this._inner.spaceState.registerProcessor(new NotarizationPlugin());
     this._cache = params.cache;
+    this._state = params.initialState;
   }
   get key() {
     return this._inner.key;
@@ -2491,25 +2496,36 @@ var DataSpace = class DataSpace2 {
     return this._presence;
   }
   get notarizationPlugin() {
-    return this._notarizationPluginConsumer.processor;
+    return this._notarizationPlugin;
   }
   get cache() {
     return this._cache;
   }
   async open() {
-    await this.notarizationPlugin.open();
-    await this._notarizationPluginConsumer.open();
+    await this._open();
+  }
+  async _open() {
+    await this._notarizationPlugin.open();
+    await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
     await this._inner.open();
-    this._state = import_services6.SpaceState.INACTIVE;
+    this._state = import_services6.SpaceState.CONTROL_ONLY;
+    this.stateUpdate.emit();
+    this.metrics = {};
     this.metrics.open = new Date();
   }
   async close() {
+    await this._close();
+  }
+  async _close() {
+    var _a, _b;
+    await ((_b = (_a = this._callbacks).beforeClose) == null ? void 0 : _b.call(_a));
     this._state = import_services6.SpaceState.CLOSED;
     await this._ctx.dispose();
+    this._ctx = new import_context6.Context();
     await this.authVerifier.close();
     await this._inner.close();
-    await this._notarizationPluginConsumer.close();
-    await this.notarizationPlugin.close();
+    await this._inner.spaceState.removeCredentialProcessor(this._notarizationPlugin);
+    await this._notarizationPlugin.close();
     await this._presence.destroy();
   }
   async postMessage(channel, message) {
@@ -2530,7 +2546,7 @@ var DataSpace = class DataSpace2 {
         if (err instanceof import_errors3.CancelledError) {
           (0, import_log9.log)("Data pipeline initialization cancelled", err, {
             F: __dxlog_file9,
-            L: 173,
+            L: 193,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2538,7 +2554,7 @@ var DataSpace = class DataSpace2 {
         }
         import_log9.log.error("Error initializing data pipeline", err, {
           F: __dxlog_file9,
-          L: 177,
+          L: 197,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2552,7 +2568,7 @@ var DataSpace = class DataSpace2 {
   }
   async initializeDataPipeline() {
     var _a, _b, _c, _d;
-    if (this._state !== import_services6.SpaceState.INACTIVE) {
+    if (this._state !== import_services6.SpaceState.CONTROL_ONLY) {
       throw new import_errors3.SystemError("Invalid operation");
     }
     this._state = import_services6.SpaceState.INITIALIZING;
@@ -2564,22 +2580,24 @@ var DataSpace = class DataSpace2 {
     await this._createWritableFeeds();
     (0, import_log9.log)("Writable feeds created", void 0, {
       F: __dxlog_file9,
-      L: 201,
+      L: 221,
       S: this,
       C: (f, a) => f(...a)
     });
     this.stateUpdate.emit();
-    this.notarizationPlugin.setWriter((0, import_echo_pipeline.createMappedFeedWriter)((credential) => ({
-      credential: {
-        credential
-      }
-    }), this._inner.controlPipeline.writer));
+    if (!this.notarizationPlugin.hasWriter) {
+      this.notarizationPlugin.setWriter((0, import_echo_pipeline.createMappedFeedWriter)((credential) => ({
+        credential: {
+          credential
+        }
+      }), this._inner.controlPipeline.writer));
+    }
     await this._inner.initializeDataPipeline();
     this.metrics.dataPipelineOpen = new Date();
     await (0, import_context6.cancelWithContext)(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
     (0, import_log9.log)("waiting for data pipeline to reach target timeframe", void 0, {
       F: __dxlog_file9,
-      L: 220,
+      L: 242,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2590,7 +2608,7 @@ var DataSpace = class DataSpace2 {
     this.metrics.dataPipelineReady = new Date();
     (0, import_log9.log)("data pipeline ready", void 0, {
       F: __dxlog_file9,
-      L: 229,
+      L: 251,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2670,10 +2688,39 @@ var DataSpace = class DataSpace2 {
       }
     }
   }
+  async activate() {
+    if (this._state !== import_services6.SpaceState.INACTIVE) {
+      throw new import_errors3.SystemError("Invalid operation");
+    }
+    await this._metadataStore.setSpaceState(this.key, import_services6.SpaceState.ACTIVE);
+    await this._open();
+    this.initializeDataPipelineAsync();
+  }
+  async deactivate() {
+    if (this._state === import_services6.SpaceState.INACTIVE) {
+      throw new import_errors3.SystemError("Invalid operation");
+    }
+    await this._metadataStore.setSpaceState(this.key, import_services6.SpaceState.INACTIVE);
+    await this._close();
+    this._state = import_services6.SpaceState.INACTIVE;
+    this.stateUpdate.emit();
+  }
 };
+_ts_decorate([
+  import_async11.synchronized
+], DataSpace.prototype, "open", null);
+_ts_decorate([
+  import_async11.synchronized
+], DataSpace.prototype, "close", null);
 _ts_decorate([
   (0, import_debug3.timed)(1e4)
 ], DataSpace.prototype, "_createWritableFeeds", null);
+_ts_decorate([
+  import_async11.synchronized
+], DataSpace.prototype, "activate", null);
+_ts_decorate([
+  import_async11.synchronized
+], DataSpace.prototype, "deactivate", null);
 DataSpace = _ts_decorate([
   (0, import_async11.trackLeaks)("open", "close")
 ], DataSpace);
@@ -2813,14 +2860,16 @@ var DataSpaceManager = class DataSpaceManager2 {
           C: (f, a) => f(...a)
         });
         const space = await this._constructSpace(spaceMetadata);
-        space.initializeDataPipelineAsync();
+        if (spaceMetadata.state !== import_services7.SpaceState.INACTIVE) {
+          space.initializeDataPipelineAsync();
+        }
       } catch (err) {
         import_log10.log.error("Error loading space", {
           spaceMetadata,
           err
         }, {
           F: __dxlog_file10,
-          L: 91,
+          L: 93,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2832,7 +2881,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       id: this._instanceId
     }), {
       F: __dxlog_file10,
-      L: 97,
+      L: 99,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2840,7 +2889,7 @@ var DataSpaceManager = class DataSpaceManager2 {
   async close() {
     (0, import_log10.log)("close", void 0, {
       F: __dxlog_file10,
-      L: 102,
+      L: 104,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2862,13 +2911,14 @@ var DataSpaceManager = class DataSpaceManager2 {
       key: spaceKey,
       genesisFeedKey: controlFeedKey,
       controlFeedKey,
-      dataFeedKey
+      dataFeedKey,
+      state: import_services7.SpaceState.ACTIVE
     };
     (0, import_log10.log)("creating space...", {
       spaceKey
     }, {
       F: __dxlog_file10,
-      L: 126,
+      L: 129,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2888,7 +2938,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       opts
     }, {
       F: __dxlog_file10,
-      L: 145,
+      L: 148,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2922,7 +2972,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       metadata
     }, {
       F: __dxlog_file10,
-      L: 180,
+      L: 183,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2958,7 +3008,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       onAuthFailure: () => {
         import_log10.log.warn("auth failure", void 0, {
           F: __dxlog_file10,
-          L: 211,
+          L: 214,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2969,6 +3019,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     dataFeed && space.setDataFeed(dataFeed);
     const dataSpace = new DataSpace({
       inner: space,
+      initialState: metadata.state === import_services7.SpaceState.INACTIVE ? import_services7.SpaceState.INACTIVE : import_services7.SpaceState.CLOSED,
       metadataStore: this._metadataStore,
       gossip,
       presence,
@@ -2981,11 +3032,11 @@ var DataSpaceManager = class DataSpaceManager2 {
             space: space.key
           }, {
             F: __dxlog_file10,
-            L: 228,
+            L: 232,
             S: this,
             C: (f, a) => f(...a)
           });
-          this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
+          await this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
         },
         afterReady: async () => {
           (0, import_log10.log)("after space ready", {
@@ -2993,18 +3044,31 @@ var DataSpaceManager = class DataSpaceManager2 {
             open: this._isOpen
           }, {
             F: __dxlog_file10,
-            L: 235,
+            L: 239,
             S: this,
             C: (f, a) => f(...a)
           });
           if (this._isOpen) {
             this.updated.emit();
           }
+        },
+        beforeClose: async () => {
+          (0, import_log10.log)("before space close", {
+            space: space.key
+          }, {
+            F: __dxlog_file10,
+            L: 245,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          await this._dataServiceSubscriptions.unregisterSpace(space.key);
         }
       },
       cache: metadata.cache
     });
-    await dataSpace.open();
+    if (metadata.state !== import_services7.SpaceState.INACTIVE) {
+      await dataSpace.open();
+    }
     if (metadata.controlTimeframe) {
       dataSpace.inner.controlPipeline.state.setTargetTimeframe(metadata.controlTimeframe);
     }
@@ -3036,6 +3100,7 @@ var import_async13 = require("@dxos/async");
 var import_codec_protobuf9 = require("@dxos/codec-protobuf");
 var import_debug5 = require("@dxos/debug");
 var import_echo_pipeline2 = require("@dxos/echo-pipeline");
+var import_errors4 = require("@dxos/errors");
 var import_log11 = require("@dxos/log");
 var import_protocols7 = require("@dxos/protocols");
 var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
@@ -3056,8 +3121,22 @@ var SpacesServiceImpl = class {
     const space = await dataSpaceManager.createSpace();
     return this._serializeSpace(space);
   }
-  async updateSpace(request) {
-    (0, import_debug5.todo)();
+  async updateSpace({ spaceKey, state }) {
+    var _a;
+    const dataSpaceManager = await this._getDataSpaceManager();
+    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
+    if (state) {
+      switch (state) {
+        case import_services8.SpaceState.ACTIVE:
+          await space.activate();
+          break;
+        case import_services8.SpaceState.INACTIVE:
+          await space.deactivate();
+          break;
+        default:
+          throw new import_errors4.ApiError("Invalid space state");
+      }
+    }
   }
   querySpaces() {
     return new import_codec_protobuf9.Stream(({ next, ctx }) => {
@@ -3068,7 +3147,7 @@ var SpacesServiceImpl = class {
           spaces
         }, {
           F: __dxlog_file11,
-          L: 60,
+          L: 78,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -3131,13 +3210,13 @@ var SpacesServiceImpl = class {
     return new import_codec_protobuf9.Stream(({ ctx, next }) => {
       var _a;
       const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
-      const processor = space.spaceState.registerProcessor({
-        process: async (credential) => {
+      const processor = {
+        processCredential: async (credential) => {
           next(credential);
         }
-      });
-      ctx.onDispose(() => processor.close());
-      (0, import_async13.scheduleTask)(ctx, () => processor.open());
+      };
+      ctx.onDispose(() => space.spaceState.removeCredentialProcessor(processor));
+      (0, import_async13.scheduleTask)(ctx, () => space.spaceState.addCredentialProcessor(processor));
     });
   }
   async writeCredentials({ spaceKey, credentials }) {
@@ -3276,15 +3355,17 @@ var ServiceContext = class {
     });
   }
   async close() {
-    var _a, _b;
+    var _a;
     (0, import_log12.log)("closing...", void 0, {
       F: __dxlog_file12,
       L: 143,
       S: this,
       C: (f, a) => f(...a)
     });
-    await ((_a = this._deviceSpaceSync) == null ? void 0 : _a.close());
-    await ((_b = this.dataSpaceManager) == null ? void 0 : _b.close());
+    if (this._deviceSpaceSync && this.identityManager.identity) {
+      await this.identityManager.identity.space.spaceState.removeCredentialProcessor(this._deviceSpaceSync);
+    }
+    await ((_a = this.dataSpaceManager) == null ? void 0 : _a.close());
     await this.identityManager.close();
     await this.spaceManager.close();
     await this.feedStore.close();
@@ -3293,7 +3374,7 @@ var ServiceContext = class {
     this.dataServiceSubscriptions.clear();
     (0, import_log12.log)("closed", void 0, {
       F: __dxlog_file12,
-      L: 152,
+      L: 154,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3324,7 +3405,7 @@ var ServiceContext = class {
     var _a;
     (0, import_log12.log)("initializing spaces...", void 0, {
       F: __dxlog_file12,
-      L: 185,
+      L: 187,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3349,8 +3430,8 @@ var ServiceContext = class {
       return new SpaceInvitationProtocol(this.dataSpaceManager, signingContext, this.keyring, invitation.spaceKey);
     });
     this.initialized.wake();
-    this._deviceSpaceSync = identity.space.spaceState.registerProcessor({
-      process: async (credential) => {
+    this._deviceSpaceSync = {
+      processCredential: async (credential) => {
         const assertion = (0, import_credentials13.getCredentialAssertion)(credential);
         if (assertion["@type"] !== "dxos.halo.credentials.SpaceMember") {
           return;
@@ -3363,7 +3444,7 @@ var ServiceContext = class {
             details: assertion
           }, {
             F: __dxlog_file12,
-            L: 224,
+            L: 226,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3374,7 +3455,7 @@ var ServiceContext = class {
             details: assertion
           }, {
             F: __dxlog_file12,
-            L: 228,
+            L: 230,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3385,7 +3466,7 @@ var ServiceContext = class {
             details: assertion
           }, {
             F: __dxlog_file12,
-            L: 233,
+            L: 235,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3396,14 +3477,14 @@ var ServiceContext = class {
         } catch (err) {
           import_log12.log.catch(err, void 0, {
             F: __dxlog_file12,
-            L: 239,
+            L: 241,
             S: this,
             C: (f, a) => f(...a)
           });
         }
       }
-    });
-    await this._deviceSpaceSync.open();
+    };
+    await identity.space.spaceState.addCredentialProcessor(this._deviceSpaceSync);
   }
 };
 
@@ -3632,7 +3713,7 @@ var NetworkServiceImpl = class {
 
 // packages/sdk/client-services/src/packlets/storage/storage.ts
 var import_client_protocol4 = require("@dxos/client-protocol");
-var import_errors4 = require("@dxos/errors");
+var import_errors5 = require("@dxos/errors");
 var import_config = require("@dxos/protocols/proto/dxos/config");
 var import_random_access_storage = require("@dxos/random-access-storage");
 var import_util8 = require("@dxos/util");
@@ -3640,16 +3721,16 @@ var StorageDriver = import_config.Runtime.Client.Storage.StorageDriver;
 var createStorageObjects = (config) => {
   const { path = (0, import_util8.isNode)() ? import_client_protocol4.DX_DATA : "dxos/storage", storageType, keyStorage, persistent = false } = config != null ? config : {};
   if (persistent && storageType === StorageDriver.RAM) {
-    throw new import_errors4.InvalidConfigError("RAM storage cannot be used in persistent mode.");
+    throw new import_errors5.InvalidConfigError("RAM storage cannot be used in persistent mode.");
   }
   if (!persistent && storageType !== void 0 && storageType !== StorageDriver.RAM) {
-    throw new import_errors4.InvalidConfigError("Cannot use a persistent storage in not persistent mode.");
+    throw new import_errors5.InvalidConfigError("Cannot use a persistent storage in not persistent mode.");
   }
   if (persistent && keyStorage === StorageDriver.RAM) {
-    throw new import_errors4.InvalidConfigError("RAM key storage cannot be used in persistent mode.");
+    throw new import_errors5.InvalidConfigError("RAM key storage cannot be used in persistent mode.");
   }
   if (!persistent && keyStorage !== StorageDriver.RAM && keyStorage !== void 0) {
-    throw new import_errors4.InvalidConfigError("Cannot use a persistent key storage in not persistent mode.");
+    throw new import_errors5.InvalidConfigError("Cannot use a persistent key storage in not persistent mode.");
   }
   return {
     storage: (0, import_random_access_storage.createStorage)({
@@ -3766,13 +3847,15 @@ var ClientServicesHost = class {
     connectionLog,
     storage,
     // TODO(wittjosiah): Turn this on by default.
-    lockKey
+    lockKey,
+    callbacks
   } = {}) {
     this._statusUpdate = new import_async17.Event();
     this._opening = false;
     this._open = false;
     this._storage = storage;
     this._modelFactory = modelFactory;
+    this._callbacks = callbacks;
     if (config) {
       this.initialize({
         config,
@@ -3860,7 +3943,7 @@ var ClientServicesHost = class {
       id: traceId
     }), {
       F: __dxlog_file14,
-      L: 195,
+      L: 203,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3873,7 +3956,7 @@ var ClientServicesHost = class {
       lockKey: (_a = this._resourceLock) == null ? void 0 : _a.lockKey
     }, {
       F: __dxlog_file14,
-      L: 203,
+      L: 211,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3908,7 +3991,7 @@ var ClientServicesHost = class {
       deviceKey
     }, {
       F: __dxlog_file14,
-      L: 258,
+      L: 266,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3916,7 +3999,7 @@ var ClientServicesHost = class {
       id: traceId
     }), {
       F: __dxlog_file14,
-      L: 259,
+      L: 267,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3931,7 +4014,7 @@ var ClientServicesHost = class {
       deviceKey
     }, {
       F: __dxlog_file14,
-      L: 269,
+      L: 277,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3946,25 +4029,25 @@ var ClientServicesHost = class {
       deviceKey
     }, {
       F: __dxlog_file14,
-      L: 275,
+      L: 283,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async reset() {
-    var _a;
+    var _a, _b, _c;
     const traceId = import_keys11.PublicKey.random().toHex();
     import_log15.log.trace("dxos.sdk.client-services-host.reset", import_protocols9.trace.begin({
       id: traceId
     }), {
       F: __dxlog_file14,
-      L: 280,
+      L: 288,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_log15.log)("resetting...", void 0, {
       F: __dxlog_file14,
-      L: 282,
+      L: 290,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3972,7 +4055,7 @@ var ClientServicesHost = class {
     await this._storage.reset();
     (0, import_log15.log)("reset", void 0, {
       F: __dxlog_file14,
-      L: 285,
+      L: 293,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3980,10 +4063,11 @@ var ClientServicesHost = class {
       id: traceId
     }), {
       F: __dxlog_file14,
-      L: 286,
+      L: 294,
       S: this,
       C: (f, a) => f(...a)
     });
+    await ((_c = (_b = this._callbacks) == null ? void 0 : _b.onReset) == null ? void 0 : _c.call(_b));
   }
 };
 _ts_decorate4([
@@ -4236,7 +4320,7 @@ _ts_decorate5([
 // packages/sdk/client-services/src/packlets/vault/iframe-proxy-runtime.ts
 var import_async20 = require("@dxos/async");
 var import_client_protocol8 = require("@dxos/client-protocol");
-var import_errors5 = require("@dxos/errors");
+var import_errors6 = require("@dxos/errors");
 var import_log17 = require("@dxos/log");
 var import_network_manager4 = require("@dxos/network-manager");
 var import_rpc3 = require("@dxos/rpc");
@@ -4295,7 +4379,7 @@ var IFrameProxyRuntime = class {
         S: this,
         C: (f, a) => f(...a)
       });
-      throw new import_errors5.RemoteServiceConnectionError("Failed to connect to worker");
+      throw new import_errors6.RemoteServiceConnectionError("Failed to connect to worker");
     }
     await ((_a = this._shellRuntime) == null ? void 0 : _a.open());
   }
@@ -4476,7 +4560,13 @@ var WorkerRuntime = class {
     this._transportFactory = new import_network_manager5.WebRTCTransportProxyFactory();
     this._ready = new import_async22.Trigger();
     this.sessions = /* @__PURE__ */ new Set();
-    this._clientServices = new ClientServicesHost();
+    this._clientServices = new ClientServicesHost({
+      callbacks: {
+        onReset: async () => {
+          self.close();
+        }
+      }
+    });
   }
   get host() {
     return this._clientServices;