@dxos/client-services 0.1.58-main.c4d3e15 → 0.1.58-main.ca7a0bc

package/dist/lib/browser/{chunk-AZ4J4TO4.mjs → chunk-VRV74Z4M.mjs}

@@ -357,7 +357,6 @@ var createAuthProvider = (signer) => async (nonce) => {
   return Credential.encode(credential);
 };
 var TrustedKeySetAuthVerifier = class {
-  // prettier-ignore
   constructor(_params) {
     this._params = _params;
     this._ctx = new Context2();
@@ -372,7 +371,7 @@ var TrustedKeySetAuthVerifier = class {
         credential
       }, {
         F: __dxlog_file,
-        L: 59,
+        L: 56,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -382,7 +381,7 @@ var TrustedKeySetAuthVerifier = class {
           result
         }, {
           F: __dxlog_file,
-          L: 63,
+          L: 60,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -394,7 +393,7 @@ var TrustedKeySetAuthVerifier = class {
           credential
         }, {
           F: __dxlog_file,
-          L: 68,
+          L: 65,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -405,7 +404,7 @@ var TrustedKeySetAuthVerifier = class {
           key: credential.issuer
         }, {
           F: __dxlog_file,
-          L: 73,
+          L: 70,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -421,7 +420,7 @@ var TrustedKeySetAuthVerifier = class {
             key: credential.issuer
           }, {
             F: __dxlog_file,
-            L: 84,
+            L: 81,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -431,7 +430,7 @@ var TrustedKeySetAuthVerifier = class {
             key: credential.issuer
           }, {
             F: __dxlog_file,
-            L: 87,
+            L: 84,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1158,26 +1157,24 @@ var DeviceInvitationProtocol = class {
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
 import { PushStream, scheduleTask as scheduleTask2, TimeoutError, Trigger as Trigger3 } from "@dxos/async";
-import { AuthenticatingInvitationObservable, AUTHENTICATION_CODE_LENGTH, CancellableInvitationObservable, INVITATION_TIMEOUT } from "@dxos/client-protocol";
+import { AuthenticatingInvitation, AUTHENTICATION_CODE_LENGTH, CancellableInvitation, INVITATION_TIMEOUT } from "@dxos/client-protocol";
 import { Context as Context5 } from "@dxos/context";
 import { generatePasscode } from "@dxos/credentials";
-import { InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError2 } from "@dxos/errors";
 import { invariant as invariant6 } from "@dxos/invariant";
 import { PublicKey as PublicKey5 } from "@dxos/keys";
 import { log as log5 } from "@dxos/log";
 import { createTeleportProtocolFactory, StarTopology } from "@dxos/network-manager";
-import { trace as trace4 } from "@dxos/protocols";
+import { InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError2, trace as trace4 } from "@dxos/protocols";
 import { Invitation as Invitation3 } from "@dxos/protocols/proto/dxos/client/services";
 import { AuthenticationResponse as AuthenticationResponse2 } from "@dxos/protocols/proto/dxos/halo/invitations";
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-extension.ts
 import { Trigger as Trigger2 } from "@dxos/async";
 import { cancelWithContext, Context as Context4 } from "@dxos/context";
-import { InvalidInvitationExtensionRoleError } from "@dxos/errors";
 import { invariant as invariant5 } from "@dxos/invariant";
 import { PublicKey as PublicKey4 } from "@dxos/keys";
 import { log as log4 } from "@dxos/log";
-import { schema as schema2, trace as trace3 } from "@dxos/protocols";
+import { InvalidInvitationExtensionRoleError, schema as schema2, trace as trace3 } from "@dxos/protocols";
 import { Invitation as Invitation2 } from "@dxos/protocols/proto/dxos/client/services";
 import { AuthenticationResponse, Options } from "@dxos/protocols/proto/dxos/halo/invitations";
 import { RpcExtension } from "@dxos/teleport";
@@ -1211,7 +1208,7 @@ var InvitationHostExtension = class extends RpcExtension {
         options: async (options) => {
           invariant5(!this._remoteOptions, "Remote options already set.", {
             F: __dxlog_file6,
-            L: 88,
+            L: 87,
             S: this,
             A: [
               "!this._remoteOptions",
@@ -1228,7 +1225,7 @@ var InvitationHostExtension = class extends RpcExtension {
             id: traceId
           }), {
             F: __dxlog_file6,
-            L: 97,
+            L: 96,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1238,7 +1235,7 @@ var InvitationHostExtension = class extends RpcExtension {
               invitationId
             }, {
               F: __dxlog_file6,
-              L: 101,
+              L: 100,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1252,7 +1249,7 @@ var InvitationHostExtension = class extends RpcExtension {
             guestProfile: profile
           }, {
             F: __dxlog_file6,
-            L: 110,
+            L: 109,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1265,7 +1262,7 @@ var InvitationHostExtension = class extends RpcExtension {
             id: traceId
           }), {
             F: __dxlog_file6,
-            L: 117,
+            L: 116,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1280,7 +1277,7 @@ var InvitationHostExtension = class extends RpcExtension {
             id: traceId
           }), {
             F: __dxlog_file6,
-            L: 126,
+            L: 125,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1288,14 +1285,14 @@ var InvitationHostExtension = class extends RpcExtension {
             authCode: code
           }, {
             F: __dxlog_file6,
-            L: 127,
+            L: 126,
             S: this,
             C: (f, a) => f(...a)
           });
           let status = AuthenticationResponse.Status.OK;
           invariant5(this.invitation, "Invitation is not set.", {
             F: __dxlog_file6,
-            L: 130,
+            L: 129,
             S: this,
             A: [
               "this.invitation",
@@ -1306,7 +1303,7 @@ var InvitationHostExtension = class extends RpcExtension {
             case Invitation2.AuthMethod.NONE: {
               log4("authentication not required", void 0, {
                 F: __dxlog_file6,
-                L: 133,
+                L: 132,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1331,7 +1328,7 @@ var InvitationHostExtension = class extends RpcExtension {
                 authMethod: this.invitation.authMethod
               }, {
                 F: __dxlog_file6,
-                L: 151,
+                L: 150,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1346,7 +1343,7 @@ var InvitationHostExtension = class extends RpcExtension {
             }
           }), {
             F: __dxlog_file6,
-            L: 157,
+            L: 156,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1360,14 +1357,14 @@ var InvitationHostExtension = class extends RpcExtension {
             id: traceId
           }), {
             F: __dxlog_file6,
-            L: 163,
+            L: 162,
             S: this,
             C: (f, a) => f(...a)
           });
           try {
             invariant5(this.invitation, "Invitation is not set.", {
               F: __dxlog_file6,
-              L: 166,
+              L: 165,
               S: this,
               A: [
                 "this.invitation",
@@ -1382,7 +1379,7 @@ var InvitationHostExtension = class extends RpcExtension {
               id: traceId
             }), {
               F: __dxlog_file6,
-              L: 174,
+              L: 173,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1439,7 +1436,7 @@ var InvitationGuestExtension = class extends RpcExtension {
         options: async (options) => {
           invariant5(!this._remoteOptions, "Remote options already set.", {
             F: __dxlog_file6,
-            L: 241,
+            L: 240,
             S: this,
             A: [
               "!this._remoteOptions",
@@ -1466,7 +1463,7 @@ var InvitationGuestExtension = class extends RpcExtension {
     try {
       log4("begin options", void 0, {
         F: __dxlog_file6,
-        L: 262,
+        L: 261,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1478,7 +1475,7 @@ var InvitationGuestExtension = class extends RpcExtension {
       }));
       log4("end options", void 0, {
         F: __dxlog_file6,
-        L: 265,
+        L: 264,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1492,7 +1489,7 @@ var InvitationGuestExtension = class extends RpcExtension {
     } catch (err) {
       log4("openError", err, {
         F: __dxlog_file6,
-        L: 275,
+        L: 274,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1502,7 +1499,7 @@ var InvitationGuestExtension = class extends RpcExtension {
   async onClose() {
     log4("onClose", void 0, {
       F: __dxlog_file6,
-      L: 281,
+      L: 280,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1525,7 +1522,7 @@ var InvitationsHandler = class {
     const authCode = options?.authCode ?? (authMethod === Invitation3.AuthMethod.SHARED_SECRET ? generatePasscode(AUTHENTICATION_CODE_LENGTH) : void 0);
     invariant6(protocol, void 0, {
       F: __dxlog_file7,
-      L: 76,
+      L: 75,
       S: this,
       A: [
         "protocol",
@@ -1554,7 +1551,7 @@ var InvitationsHandler = class {
         ...protocol.toJSON()
       }, {
         F: __dxlog_file7,
-        L: 98,
+        L: 97,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1579,7 +1576,7 @@ var InvitationsHandler = class {
             const deviceKey = admissionRequest.device?.deviceKey ?? admissionRequest.space?.deviceKey;
             invariant6(deviceKey, void 0, {
               F: __dxlog_file7,
-              L: 119,
+              L: 118,
               S: this,
               A: [
                 "deviceKey",
@@ -1602,7 +1599,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 137,
+                L: 136,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1610,7 +1607,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 138,
+                L: 137,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1626,7 +1623,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 141,
+                L: 140,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1638,7 +1635,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 143,
+                L: 142,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1648,7 +1645,7 @@ var InvitationsHandler = class {
                   ...protocol.toJSON()
                 }, {
                   F: __dxlog_file7,
-                  L: 146,
+                  L: 145,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1659,7 +1656,7 @@ var InvitationsHandler = class {
               } else {
                 log5.error("failed", err, {
                   F: __dxlog_file7,
-                  L: 149,
+                  L: 148,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1670,7 +1667,7 @@ var InvitationsHandler = class {
                 error: err
               }), {
                 F: __dxlog_file7,
-                L: 152,
+                L: 151,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1691,7 +1688,7 @@ var InvitationsHandler = class {
               ...protocol.toJSON()
             }, {
               F: __dxlog_file7,
-              L: 167,
+              L: 166,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1702,7 +1699,7 @@ var InvitationsHandler = class {
           } else {
             log5.error("failed", err, {
               F: __dxlog_file7,
-              L: 170,
+              L: 169,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1730,7 +1727,7 @@ var InvitationsHandler = class {
         state: Invitation3.State.CONNECTING
       });
     });
-    const observable = new CancellableInvitationObservable({
+    const observable = new CancellableInvitation({
       initialInvitation: invitation,
       subscriber: stream.observable,
       onCancel: async () => {
@@ -1747,7 +1744,7 @@ var InvitationsHandler = class {
     const { timeout = INVITATION_TIMEOUT } = invitation;
     invariant6(protocol, void 0, {
       F: __dxlog_file7,
-      L: 211,
+      L: 210,
       S: this,
       A: [
         "protocol",
@@ -1761,7 +1758,7 @@ var InvitationsHandler = class {
     const setState = (newData) => {
       invariant6(newData.state !== void 0, void 0, {
         F: __dxlog_file7,
-        L: 222,
+        L: 221,
         S: this,
         A: [
           "newData.state !== undefined",
@@ -1781,7 +1778,7 @@ var InvitationsHandler = class {
             ...protocol.toJSON()
           }, {
             F: __dxlog_file7,
-            L: 230,
+            L: 229,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1791,7 +1788,7 @@ var InvitationsHandler = class {
         } else {
           log5.warn("auth failed", err, {
             F: __dxlog_file7,
-            L: 233,
+            L: 232,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1805,7 +1802,7 @@ var InvitationsHandler = class {
         ...protocol.toJSON()
       }, {
         F: __dxlog_file7,
-        L: 241,
+        L: 240,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1820,7 +1817,7 @@ var InvitationsHandler = class {
               currentState
             }, {
               F: __dxlog_file7,
-              L: 251,
+              L: 250,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1835,7 +1832,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 260,
+                L: 259,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1847,7 +1844,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 268,
+                L: 267,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1858,7 +1855,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 272,
+                L: 271,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1868,7 +1865,7 @@ var InvitationsHandler = class {
                 response: introductionResponse
               }, {
                 F: __dxlog_file7,
-                L: 276,
+                L: 275,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1880,7 +1877,7 @@ var InvitationsHandler = class {
                 for (let attempt = 1; attempt <= MAX_OTP_ATTEMPTS; attempt++) {
                   log5("guest waiting for authentication code...", void 0, {
                     F: __dxlog_file7,
-                    L: 285,
+                    L: 284,
                     S: this,
                     C: (f, a) => f(...a)
                   });
@@ -1892,7 +1889,7 @@ var InvitationsHandler = class {
                   });
                   log5("sending authentication request", void 0, {
                     F: __dxlog_file7,
-                    L: 289,
+                    L: 288,
                     S: this,
                     C: (f, a) => f(...a)
                   });
@@ -1913,7 +1910,7 @@ var InvitationsHandler = class {
                         attempt
                       }, {
                         F: __dxlog_file7,
-                        L: 300,
+                        L: 299,
                         S: this,
                         C: (f, a) => f(...a)
                       });
@@ -1930,7 +1927,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 311,
+                L: 310,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1942,7 +1939,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 322,
+                L: 321,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1954,7 +1951,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 324,
+                L: 323,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1964,7 +1961,7 @@ var InvitationsHandler = class {
                   ...protocol.toJSON()
                 }, {
                   F: __dxlog_file7,
-                  L: 327,
+                  L: 326,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1974,7 +1971,7 @@ var InvitationsHandler = class {
               } else {
                 log5("auth failed", err, {
                   F: __dxlog_file7,
-                  L: 330,
+                  L: 329,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1985,7 +1982,7 @@ var InvitationsHandler = class {
                 error: err
               }), {
                 F: __dxlog_file7,
-                L: 333,
+                L: 332,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2003,7 +2000,7 @@ var InvitationsHandler = class {
               ...protocol.toJSON()
             }, {
               F: __dxlog_file7,
-              L: 344,
+              L: 343,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -2013,7 +2010,7 @@ var InvitationsHandler = class {
           } else {
             log5("auth failed", err, {
               F: __dxlog_file7,
-              L: 347,
+              L: 346,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -2026,7 +2023,7 @@ var InvitationsHandler = class {
     scheduleTask2(ctx, async () => {
       invariant6(invitation.swarmKey, void 0, {
         F: __dxlog_file7,
-        L: 357,
+        L: 356,
         S: this,
         A: [
           "invitation.swarmKey",
@@ -2048,7 +2045,7 @@ var InvitationsHandler = class {
         state: Invitation3.State.CONNECTING
       });
     });
-    const observable = new AuthenticatingInvitationObservable({
+    const observable = new AuthenticatingInvitation({
       initialInvitation: invitation,
       subscriber: stream.observable,
       onCancel: async () => {
@@ -2472,9 +2469,6 @@ import { log as log8 } from "@dxos/log";
 import { STORAGE_VERSION } from "@dxos/protocols";
 import { SpaceMember } from "@dxos/protocols/proto/dxos/client/services";
 
-// packages/sdk/client-services/src/version.ts
-var DXOS_VERSION = "0.1.58-main.c4d3e15";
-
 // packages/sdk/client-services/src/packlets/services/platform.ts
 var getPlatform = () => {
   if (process.browser) {
@@ -2503,6 +2497,9 @@ var getPlatform = () => {
   }
 };
 
+// packages/sdk/client-services/src/version.ts
+var DXOS_VERSION = "0.1.58-main.ca7a0bc";
+
 // packages/sdk/client-services/src/packlets/services/diagnostics.ts
 var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/diagnostics.ts";
 var DEFAULT_TIMEOUT = 1e3;
@@ -2627,9 +2624,9 @@ import { AUTH_TIMEOUT as AUTH_TIMEOUT2 } from "@dxos/client-protocol";
 import { cancelWithContext as cancelWithContext2, Context as Context7 } from "@dxos/context";
 import { timed } from "@dxos/debug";
 import { createMappedFeedWriter } from "@dxos/echo-pipeline";
-import { CancelledError, SystemError } from "@dxos/errors";
 import { PublicKey as PublicKey7 } from "@dxos/keys";
 import { log as log10 } from "@dxos/log";
+import { CancelledError, SystemError } from "@dxos/protocols";
 import { SpaceState } from "@dxos/protocols/proto/dxos/client/services";
 import { AdmittedFeed as AdmittedFeed3 } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { Timeframe as Timeframe2 } from "@dxos/timeframe";
@@ -2938,7 +2935,7 @@ var DataSpace = class DataSpace2 {
     this._signingContext = params.signingContext;
     this._callbacks = params.callbacks ?? {};
     this.authVerifier = new TrustedKeySetAuthVerifier({
-      trustedKeysProvider: () => new ComplexSet2(PublicKey7.hash, Array.from(this._inner.spaceState.members.keys())),
+      trustedKeysProvider: () => new ComplexSet2(PublicKey7.hash, Array.from(this._inner.spaceState.members.values()).filter((member) => !member.removed).map((member) => member.key)),
       update: this._inner.stateUpdate,
       authTimeout: AUTH_TIMEOUT2
     });
@@ -2948,7 +2945,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 112,
+      L: 118,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2982,6 +2979,7 @@ var DataSpace = class DataSpace2 {
     await this._open();
   }
   async _open() {
+    await this._gossip.open();
     await this._notarizationPlugin.open();
     await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
     await this._inner.open(new Context7());
@@ -2990,7 +2988,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 158,
+      L: 165,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3008,7 +3006,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 172,
+      L: 179,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3019,6 +3017,7 @@ var DataSpace = class DataSpace2 {
     await this._inner.spaceState.removeCredentialProcessor(this._notarizationPlugin);
     await this._notarizationPlugin.close();
     await this._presence.destroy();
+    await this._gossip.close();
   }
   async postMessage(channel, message) {
     return this._gossip.postMessage(channel, message);
@@ -3038,7 +3037,7 @@ var DataSpace = class DataSpace2 {
         if (err instanceof CancelledError) {
           log10("data pipeline initialization cancelled", err, {
             F: __dxlog_file12,
-            L: 203,
+            L: 211,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3046,7 +3045,7 @@ var DataSpace = class DataSpace2 {
         }
         log10.error("Error initializing data pipeline", err, {
           F: __dxlog_file12,
-          L: 207,
+          L: 215,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -3055,7 +3054,7 @@ var DataSpace = class DataSpace2 {
           state: SpaceState[this._state]
         }, {
           F: __dxlog_file12,
-          L: 209,
+          L: 217,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -3075,7 +3074,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 225,
+      L: 233,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3086,7 +3085,7 @@ var DataSpace = class DataSpace2 {
     await cancelWithContext2(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
     log10("waiting for data pipeline to reach target timeframe", void 0, {
       F: __dxlog_file12,
-      L: 239,
+      L: 247,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3097,7 +3096,7 @@ var DataSpace = class DataSpace2 {
     this.metrics.dataPipelineReady = /* @__PURE__ */ new Date();
     log10("data pipeline ready", void 0, {
       F: __dxlog_file12,
-      L: 248,
+      L: 256,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3107,7 +3106,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 252,
+      L: 260,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3123,7 +3122,7 @@ var DataSpace = class DataSpace2 {
     await this._createWritableFeeds();
     log10("writable feeds created", void 0, {
       F: __dxlog_file12,
-      L: 268,
+      L: 276,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3228,7 +3227,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 384,
+      L: 392,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3682,10 +3681,9 @@ DataSpaceManager = _ts_decorate4([
 import { EventSubscriptions as EventSubscriptions2, UpdateScheduler, scheduleTask as scheduleTask5 } from "@dxos/async";
 import { Stream as Stream10 } from "@dxos/codec-protobuf";
 import { raise as raise2 } from "@dxos/debug";
-import { SpaceNotFoundError } from "@dxos/echo-pipeline";
-import { ApiError } from "@dxos/errors";
+import { invariant as invariant12 } from "@dxos/invariant";
 import { log as log12 } from "@dxos/log";
-import { encodeError } from "@dxos/protocols";
+import { ApiError, SpaceNotFoundError, encodeError } from "@dxos/protocols";
 import { SpaceMember as SpaceMember3, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
 var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
@@ -3748,7 +3746,7 @@ var SpacesServiceImpl = class {
             subscriptions.add(space.stateUpdate.on(ctx, () => scheduler.forceTrigger()));
             subscriptions.add(space.presence.updated.on(ctx, () => scheduler.trigger()));
             subscriptions.add(space.dataPipeline.onNewEpoch.on(ctx, () => scheduler.trigger()));
-            space.inner.controlPipeline.state.timeframeUpdate.on(ctx, () => scheduler.trigger());
+            subscriptions.add(space.inner.controlPipeline.state.timeframeUpdate.on(ctx, () => scheduler.trigger()));
             if (space.dataPipeline.pipelineState) {
               subscriptions.add(space.dataPipeline.pipelineState.timeframeUpdate.on(ctx, () => scheduler.trigger()));
             }
@@ -3785,8 +3783,8 @@ var SpacesServiceImpl = class {
       });
     });
   }
-  queryCredentials({ spaceKey }) {
-    return new Stream10(({ ctx, next }) => {
+  queryCredentials({ spaceKey, noTail }) {
+    return new Stream10(({ ctx, next, close }) => {
       const space = this._spaceManager.spaces.get(spaceKey) ?? raise2(new SpaceNotFoundError(spaceKey));
       const processor = {
         processCredential: async (credential) => {
@@ -3794,17 +3792,62 @@ var SpacesServiceImpl = class {
         }
       };
       ctx.onDispose(() => space.spaceState.removeCredentialProcessor(processor));
-      scheduleTask5(ctx, () => space.spaceState.addCredentialProcessor(processor));
+      scheduleTask5(ctx, async () => {
+        await space.spaceState.addCredentialProcessor(processor);
+        if (noTail) {
+          close();
+        }
+      });
     });
   }
   async writeCredentials({ spaceKey, credentials }) {
     const space = this._spaceManager.spaces.get(spaceKey) ?? raise2(new SpaceNotFoundError(spaceKey));
     for (const credential of credentials ?? []) {
-      await space.controlPipeline.writer.write({
-        credential: {
-          credential
-        }
-      });
+      if (credential.proof) {
+        await space.controlPipeline.writer.write({
+          credential: {
+            credential
+          }
+        });
+      } else {
+        invariant12(!credential.id, "Id on unsigned credentials is not allowed", {
+          F: __dxlog_file14,
+          L: 168,
+          S: this,
+          A: [
+            "!credential.id",
+            "'Id on unsigned credentials is not allowed'"
+          ]
+        });
+        invariant12(this._identityManager.identity, "Identity is not available", {
+          F: __dxlog_file14,
+          L: 169,
+          S: this,
+          A: [
+            "this._identityManager.identity",
+            "'Identity is not available'"
+          ]
+        });
+        const signer = this._identityManager.identity.getIdentityCredentialSigner();
+        invariant12(credential.issuer.equals(signer.getIssuer()), void 0, {
+          F: __dxlog_file14,
+          L: 171,
+          S: this,
+          A: [
+            "credential.issuer.equals(signer.getIssuer())",
+            ""
+          ]
+        });
+        const signedCredential = await signer.createCredential({
+          subject: credential.subject.id,
+          assertion: credential.subject.assertion
+        });
+        await space.controlPipeline.writer.write({
+          credential: {
+            credential: signedCredential
+          }
+        });
+      }
     }
   }
   async createEpoch({ spaceKey }) {
@@ -3843,7 +3886,7 @@ var SpacesServiceImpl = class {
               displayName: member.assertion.profile?.displayName
             }
           },
-          presence: isMe || peers.length > 0 ? SpaceMember3.PresenceState.ONLINE : SpaceMember3.PresenceState.OFFLINE,
+          presence: member.removed ? SpaceMember3.PresenceState.REMOVED : isMe || peers.length > 0 ? SpaceMember3.PresenceState.ONLINE : SpaceMember3.PresenceState.OFFLINE,
           peerStates: peers
         };
       }),
@@ -3862,11 +3905,11 @@ import { getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credent
 import { failUndefined as failUndefined3 } from "@dxos/debug";
 import { valueEncoding, MetadataStore, SpaceManager, DataServiceSubscriptions, SnapshotStore } from "@dxos/echo-pipeline";
 import { FeedFactory, FeedStore } from "@dxos/feed-store";
-import { invariant as invariant12 } from "@dxos/invariant";
+import { invariant as invariant13 } from "@dxos/invariant";
 import { Keyring } from "@dxos/keyring";
 import { PublicKey as PublicKey9 } from "@dxos/keys";
 import { log as log13 } from "@dxos/log";
-import { STORAGE_VERSION as STORAGE_VERSION2, trace as trace7 } from "@dxos/protocols";
+import { InvalidStorageVersionError, STORAGE_VERSION as STORAGE_VERSION2, trace as trace7 } from "@dxos/protocols";
 import { Invitation as Invitation6 } from "@dxos/protocols/proto/dxos/client/services";
 import { BlobStore } from "@dxos/teleport-extension-object-sync";
 import { trace as Trace2 } from "@dxos/tracing";
@@ -3883,7 +3926,6 @@ function _ts_decorate5(decorators, target, key, desc) {
 }
 var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
 var ServiceContext = class ServiceContext2 {
-  // prettier-ignore
   constructor(storage, networkManager, signalManager, modelFactory) {
     this.storage = storage;
     this.networkManager = networkManager;
@@ -3923,7 +3965,7 @@ var ServiceContext = class ServiceContext2 {
     await this._checkStorageVersion();
     log13("opening...", void 0, {
       F: __dxlog_file15,
-      L: 135,
+      L: 129,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3931,7 +3973,7 @@ var ServiceContext = class ServiceContext2 {
       id: this._instanceId
     }), {
       F: __dxlog_file15,
-      L: 136,
+      L: 130,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3947,13 +3989,13 @@ var ServiceContext = class ServiceContext2 {
       id: this._instanceId
     }), {
       F: __dxlog_file15,
-      L: 146,
+      L: 140,
       S: this,
       C: (f, a) => f(...a)
     });
     log13("opened", void 0, {
       F: __dxlog_file15,
-      L: 147,
+      L: 141,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3961,7 +4003,7 @@ var ServiceContext = class ServiceContext2 {
   async close() {
     log13("closing...", void 0, {
       F: __dxlog_file15,
-      L: 151,
+      L: 145,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3978,7 +4020,7 @@ var ServiceContext = class ServiceContext2 {
     await this.metadataStore.close();
     log13("closed", void 0, {
       F: __dxlog_file15,
-      L: 163,
+      L: 157,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3990,9 +4032,9 @@ var ServiceContext = class ServiceContext2 {
   }
   getInvitationHandler(invitation) {
     const factory = this._handlerFactories.get(invitation.kind);
-    invariant12(factory, `Unknown invitation kind: ${invitation.kind}`, {
+    invariant13(factory, `Unknown invitation kind: ${invitation.kind}`, {
       F: __dxlog_file15,
-      L: 174,
+      L: 168,
       S: this,
       A: [
         "factory",
@@ -4009,14 +4051,14 @@ var ServiceContext = class ServiceContext2 {
   async _checkStorageVersion() {
     await this.metadataStore.load();
     if (this.metadataStore.version !== STORAGE_VERSION2) {
-      throw new Error(`Invalid storage version: current=${this.metadataStore.version}, expected=${STORAGE_VERSION2}`);
+      throw new InvalidStorageVersionError(STORAGE_VERSION2, this.metadataStore.version);
     }
   }
   // Called when identity is created.
   async _initialize(ctx) {
     log13("initializing spaces...", void 0, {
       F: __dxlog_file15,
-      L: 195,
+      L: 189,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4037,9 +4079,9 @@ var ServiceContext = class ServiceContext2 {
     this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.feedStore);
     await this.dataSpaceManager.open();
     this._handlerFactories.set(Invitation6.Kind.SPACE, (invitation) => {
-      invariant12(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
+      invariant13(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
         F: __dxlog_file15,
-        L: 218,
+        L: 212,
         S: this,
         A: [
           "this.dataSpaceManager",
@@ -4063,7 +4105,7 @@ var ServiceContext = class ServiceContext2 {
             details: assertion
           }, {
             F: __dxlog_file15,
-            L: 234,
+            L: 228,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4074,7 +4116,7 @@ var ServiceContext = class ServiceContext2 {
             details: assertion
           }, {
             F: __dxlog_file15,
-            L: 238,
+            L: 232,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4085,7 +4127,7 @@ var ServiceContext = class ServiceContext2 {
             details: assertion
           }, {
             F: __dxlog_file15,
-            L: 243,
+            L: 237,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4096,7 +4138,7 @@ var ServiceContext = class ServiceContext2 {
         } catch (err) {
           log13.catch(err, void 0, {
             F: __dxlog_file15,
-            L: 249,
+            L: 243,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4117,6 +4159,30 @@ ServiceContext = _ts_decorate5([
   Trace2.resource()
 ], ServiceContext);
 
+// packages/sdk/client-services/src/packlets/services/service-registry.ts
+var ServiceRegistry = class {
+  // prettier-ignore
+  constructor(_serviceBundle, _handlers = {}) {
+    this._serviceBundle = _serviceBundle;
+    this._handlers = _handlers;
+  }
+  get descriptors() {
+    return this._serviceBundle;
+  }
+  get services() {
+    return this._handlers;
+  }
+  setServices(services) {
+    this._handlers = services;
+  }
+  addService(name, service) {
+    this._handlers[name] = service;
+  }
+  removeService(name) {
+    delete this._handlers[name];
+  }
+};
+
 // packages/sdk/client-services/src/packlets/locks/browser.ts
 import { asyncTimeout, Trigger as Trigger6 } from "@dxos/async";
 import { RESOURCE_LOCK_TIMEOUT } from "@dxos/client-protocol";
@@ -4243,7 +4309,7 @@ var isLocked = (lockPath) => {
 
 // packages/sdk/client-services/src/packlets/storage/storage.ts
 import { DX_DATA } from "@dxos/client-protocol";
-import { InvalidConfigError } from "@dxos/errors";
+import { InvalidConfigError } from "@dxos/protocols";
 import { Runtime } from "@dxos/protocols/proto/dxos/config";
 import { createStorage, StorageType } from "@dxos/random-access-storage";
 import { isNode } from "@dxos/util";
@@ -4290,37 +4356,13 @@ var toStorageType = (type) => {
   }
 };
 
-// packages/sdk/client-services/src/packlets/services/service-registry.ts
-var ServiceRegistry = class {
-  // prettier-ignore
-  constructor(_serviceBundle, _handlers = {}) {
-    this._serviceBundle = _serviceBundle;
-    this._handlers = _handlers;
-  }
-  get descriptors() {
-    return this._serviceBundle;
-  }
-  get services() {
-    return this._handlers;
-  }
-  setServices(services) {
-    this._handlers = services;
-  }
-  addService(name, service) {
-    this._handlers[name] = service;
-  }
-  removeService(name) {
-    delete this._handlers[name];
-  }
-};
-
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 import { Event as Event8, synchronized as synchronized3 } from "@dxos/async";
 import { clientServiceBundle } from "@dxos/client-protocol";
 import { Context as Context10 } from "@dxos/context";
 import { DocumentModel as DocumentModel2 } from "@dxos/document-model";
 import { DataServiceImpl } from "@dxos/echo-pipeline";
-import { invariant as invariant13 } from "@dxos/invariant";
+import { invariant as invariant14 } from "@dxos/invariant";
 import { PublicKey as PublicKey10 } from "@dxos/keys";
 import { log as log16 } from "@dxos/log";
 import { WebsocketSignalManager } from "@dxos/messaging";
@@ -4677,7 +4719,7 @@ var ClientServicesHost = class ClientServicesHost2 {
   * Can only be called once.
   */
   initialize({ config, ...options }) {
-    invariant13(!this._open, "service host is open", {
+    invariant14(!this._open, "service host is open", {
       F: __dxlog_file17,
       L: 184,
       S: this,
@@ -4693,7 +4735,7 @@ var ClientServicesHost = class ClientServicesHost2 {
       C: (f, a) => f(...a)
     });
     if (config) {
-      invariant13(!this._config, "config already set", {
+      invariant14(!this._config, "config already set", {
         F: __dxlog_file17,
         L: 188,
         S: this,
@@ -4711,7 +4753,7 @@ var ClientServicesHost = class ClientServicesHost2 {
       iceServers: this._config?.get("runtime.services.ice")
     }), signalManager = new WebsocketSignalManager(this._config?.get("runtime.services.signaling") ?? []) } = options;
     this._signalManager = signalManager;
-    invariant13(!this._networkManager, "network manager already set", {
+    invariant14(!this._networkManager, "network manager already set", {
       F: __dxlog_file17,
       L: 204,
       S: this,
@@ -4745,7 +4787,7 @@ var ClientServicesHost = class ClientServicesHost2 {
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant13(this._config, "config not set", {
+    invariant14(this._config, "config not set", {
       F: __dxlog_file17,
       L: 224,
       S: this,
@@ -4754,7 +4796,7 @@ var ClientServicesHost = class ClientServicesHost2 {
         "'config not set'"
       ]
     });
-    invariant13(this._storage, "storage not set", {
+    invariant14(this._storage, "storage not set", {
       F: __dxlog_file17,
       L: 225,
       S: this,
@@ -4763,7 +4805,7 @@ var ClientServicesHost = class ClientServicesHost2 {
         "'storage not set'"
       ]
     });
-    invariant13(this._signalManager, "signal manager not set", {
+    invariant14(this._signalManager, "signal manager not set", {
       F: __dxlog_file17,
       L: 226,
       S: this,
@@ -4772,7 +4814,7 @@ var ClientServicesHost = class ClientServicesHost2 {
         "'signal manager not set'"
       ]
     });
-    invariant13(this._networkManager, "network manager not set", {
+    invariant14(this._networkManager, "network manager not set", {
       F: __dxlog_file17,
       L: 227,
       S: this,
@@ -4954,11 +4996,11 @@ export {
   DataSpaceManager,
   SpacesServiceImpl,
   ServiceContext,
+  ServiceRegistry,
   Lock,
   isLocked,
   createStorageObjects,
-  ServiceRegistry,
   createDefaultModelFactory,
   ClientServicesHost
 };
-//# sourceMappingURL=chunk-AZ4J4TO4.mjs.map
+//# sourceMappingURL=chunk-VRV74Z4M.mjs.map