@dxos/client-services 0.1.58-main.d82e9a3 → 0.1.58-main.e460f33

package/dist/lib/browser/{chunk-G762UGCU.mjs → chunk-PNAXUNJ7.mjs}

@@ -1161,23 +1161,21 @@ import { PushStream, scheduleTask as scheduleTask2, TimeoutError, Trigger as Tri
 import { AuthenticatingInvitationObservable, AUTHENTICATION_CODE_LENGTH, CancellableInvitationObservable, INVITATION_TIMEOUT } from "@dxos/client-protocol";
 import { Context as Context5 } from "@dxos/context";
 import { generatePasscode } from "@dxos/credentials";
-import { InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError2 } from "@dxos/errors";
 import { invariant as invariant6 } from "@dxos/invariant";
 import { PublicKey as PublicKey5 } from "@dxos/keys";
 import { log as log5 } from "@dxos/log";
 import { createTeleportProtocolFactory, StarTopology } from "@dxos/network-manager";
-import { trace as trace4 } from "@dxos/protocols";
+import { InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError2, trace as trace4 } from "@dxos/protocols";
 import { Invitation as Invitation3 } from "@dxos/protocols/proto/dxos/client/services";
 import { AuthenticationResponse as AuthenticationResponse2 } from "@dxos/protocols/proto/dxos/halo/invitations";
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-extension.ts
 import { Trigger as Trigger2 } from "@dxos/async";
 import { cancelWithContext, Context as Context4 } from "@dxos/context";
-import { InvalidInvitationExtensionRoleError } from "@dxos/errors";
 import { invariant as invariant5 } from "@dxos/invariant";
 import { PublicKey as PublicKey4 } from "@dxos/keys";
 import { log as log4 } from "@dxos/log";
-import { schema as schema2, trace as trace3 } from "@dxos/protocols";
+import { InvalidInvitationExtensionRoleError, schema as schema2, trace as trace3 } from "@dxos/protocols";
 import { Invitation as Invitation2 } from "@dxos/protocols/proto/dxos/client/services";
 import { AuthenticationResponse, Options } from "@dxos/protocols/proto/dxos/halo/invitations";
 import { RpcExtension } from "@dxos/teleport";
@@ -1211,7 +1209,7 @@ var InvitationHostExtension = class extends RpcExtension {
         options: async (options) => {
           invariant5(!this._remoteOptions, "Remote options already set.", {
             F: __dxlog_file6,
-            L: 88,
+            L: 87,
             S: this,
             A: [
               "!this._remoteOptions",
@@ -1228,7 +1226,7 @@ var InvitationHostExtension = class extends RpcExtension {
             id: traceId
           }), {
             F: __dxlog_file6,
-            L: 97,
+            L: 96,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1238,7 +1236,7 @@ var InvitationHostExtension = class extends RpcExtension {
               invitationId
             }, {
               F: __dxlog_file6,
-              L: 101,
+              L: 100,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1252,7 +1250,7 @@ var InvitationHostExtension = class extends RpcExtension {
             guestProfile: profile
           }, {
             F: __dxlog_file6,
-            L: 110,
+            L: 109,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1265,7 +1263,7 @@ var InvitationHostExtension = class extends RpcExtension {
             id: traceId
           }), {
             F: __dxlog_file6,
-            L: 117,
+            L: 116,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1280,7 +1278,7 @@ var InvitationHostExtension = class extends RpcExtension {
             id: traceId
           }), {
             F: __dxlog_file6,
-            L: 126,
+            L: 125,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1288,14 +1286,14 @@ var InvitationHostExtension = class extends RpcExtension {
             authCode: code
           }, {
             F: __dxlog_file6,
-            L: 127,
+            L: 126,
             S: this,
             C: (f, a) => f(...a)
           });
           let status = AuthenticationResponse.Status.OK;
           invariant5(this.invitation, "Invitation is not set.", {
             F: __dxlog_file6,
-            L: 130,
+            L: 129,
             S: this,
             A: [
               "this.invitation",
@@ -1306,7 +1304,7 @@ var InvitationHostExtension = class extends RpcExtension {
             case Invitation2.AuthMethod.NONE: {
               log4("authentication not required", void 0, {
                 F: __dxlog_file6,
-                L: 133,
+                L: 132,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1331,7 +1329,7 @@ var InvitationHostExtension = class extends RpcExtension {
                 authMethod: this.invitation.authMethod
               }, {
                 F: __dxlog_file6,
-                L: 151,
+                L: 150,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1346,7 +1344,7 @@ var InvitationHostExtension = class extends RpcExtension {
             }
           }), {
             F: __dxlog_file6,
-            L: 157,
+            L: 156,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1360,14 +1358,14 @@ var InvitationHostExtension = class extends RpcExtension {
             id: traceId
           }), {
             F: __dxlog_file6,
-            L: 163,
+            L: 162,
             S: this,
             C: (f, a) => f(...a)
           });
           try {
             invariant5(this.invitation, "Invitation is not set.", {
               F: __dxlog_file6,
-              L: 166,
+              L: 165,
               S: this,
               A: [
                 "this.invitation",
@@ -1382,7 +1380,7 @@ var InvitationHostExtension = class extends RpcExtension {
               id: traceId
             }), {
               F: __dxlog_file6,
-              L: 174,
+              L: 173,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1439,7 +1437,7 @@ var InvitationGuestExtension = class extends RpcExtension {
         options: async (options) => {
           invariant5(!this._remoteOptions, "Remote options already set.", {
             F: __dxlog_file6,
-            L: 241,
+            L: 240,
             S: this,
             A: [
               "!this._remoteOptions",
@@ -1466,7 +1464,7 @@ var InvitationGuestExtension = class extends RpcExtension {
     try {
       log4("begin options", void 0, {
         F: __dxlog_file6,
-        L: 262,
+        L: 261,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1478,7 +1476,7 @@ var InvitationGuestExtension = class extends RpcExtension {
       }));
       log4("end options", void 0, {
         F: __dxlog_file6,
-        L: 265,
+        L: 264,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1492,7 +1490,7 @@ var InvitationGuestExtension = class extends RpcExtension {
     } catch (err) {
       log4("openError", err, {
         F: __dxlog_file6,
-        L: 275,
+        L: 274,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1502,7 +1500,7 @@ var InvitationGuestExtension = class extends RpcExtension {
   async onClose() {
     log4("onClose", void 0, {
       F: __dxlog_file6,
-      L: 281,
+      L: 280,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1525,7 +1523,7 @@ var InvitationsHandler = class {
     const authCode = options?.authCode ?? (authMethod === Invitation3.AuthMethod.SHARED_SECRET ? generatePasscode(AUTHENTICATION_CODE_LENGTH) : void 0);
     invariant6(protocol, void 0, {
       F: __dxlog_file7,
-      L: 76,
+      L: 75,
       S: this,
       A: [
         "protocol",
@@ -1554,7 +1552,7 @@ var InvitationsHandler = class {
         ...protocol.toJSON()
       }, {
         F: __dxlog_file7,
-        L: 98,
+        L: 97,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1579,7 +1577,7 @@ var InvitationsHandler = class {
             const deviceKey = admissionRequest.device?.deviceKey ?? admissionRequest.space?.deviceKey;
             invariant6(deviceKey, void 0, {
               F: __dxlog_file7,
-              L: 119,
+              L: 118,
               S: this,
               A: [
                 "deviceKey",
@@ -1602,7 +1600,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 137,
+                L: 136,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1610,7 +1608,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 138,
+                L: 137,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1626,7 +1624,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 141,
+                L: 140,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1638,7 +1636,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 143,
+                L: 142,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1648,7 +1646,7 @@ var InvitationsHandler = class {
                   ...protocol.toJSON()
                 }, {
                   F: __dxlog_file7,
-                  L: 146,
+                  L: 145,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1659,7 +1657,7 @@ var InvitationsHandler = class {
               } else {
                 log5.error("failed", err, {
                   F: __dxlog_file7,
-                  L: 149,
+                  L: 148,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1670,7 +1668,7 @@ var InvitationsHandler = class {
                 error: err
               }), {
                 F: __dxlog_file7,
-                L: 152,
+                L: 151,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1691,7 +1689,7 @@ var InvitationsHandler = class {
               ...protocol.toJSON()
             }, {
               F: __dxlog_file7,
-              L: 167,
+              L: 166,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1702,7 +1700,7 @@ var InvitationsHandler = class {
           } else {
             log5.error("failed", err, {
               F: __dxlog_file7,
-              L: 170,
+              L: 169,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1747,7 +1745,7 @@ var InvitationsHandler = class {
     const { timeout = INVITATION_TIMEOUT } = invitation;
     invariant6(protocol, void 0, {
       F: __dxlog_file7,
-      L: 211,
+      L: 210,
       S: this,
       A: [
         "protocol",
@@ -1761,7 +1759,7 @@ var InvitationsHandler = class {
     const setState = (newData) => {
       invariant6(newData.state !== void 0, void 0, {
         F: __dxlog_file7,
-        L: 222,
+        L: 221,
         S: this,
         A: [
           "newData.state !== undefined",
@@ -1781,7 +1779,7 @@ var InvitationsHandler = class {
             ...protocol.toJSON()
           }, {
             F: __dxlog_file7,
-            L: 230,
+            L: 229,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1791,7 +1789,7 @@ var InvitationsHandler = class {
         } else {
           log5.warn("auth failed", err, {
             F: __dxlog_file7,
-            L: 233,
+            L: 232,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1805,7 +1803,7 @@ var InvitationsHandler = class {
         ...protocol.toJSON()
       }, {
         F: __dxlog_file7,
-        L: 241,
+        L: 240,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1820,7 +1818,7 @@ var InvitationsHandler = class {
               currentState
             }, {
               F: __dxlog_file7,
-              L: 251,
+              L: 250,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1835,7 +1833,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 260,
+                L: 259,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1847,7 +1845,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 268,
+                L: 267,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1858,7 +1856,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 272,
+                L: 271,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1868,7 +1866,7 @@ var InvitationsHandler = class {
                 response: introductionResponse
               }, {
                 F: __dxlog_file7,
-                L: 276,
+                L: 275,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1880,7 +1878,7 @@ var InvitationsHandler = class {
                 for (let attempt = 1; attempt <= MAX_OTP_ATTEMPTS; attempt++) {
                   log5("guest waiting for authentication code...", void 0, {
                     F: __dxlog_file7,
-                    L: 285,
+                    L: 284,
                     S: this,
                     C: (f, a) => f(...a)
                   });
@@ -1892,7 +1890,7 @@ var InvitationsHandler = class {
                   });
                   log5("sending authentication request", void 0, {
                     F: __dxlog_file7,
-                    L: 289,
+                    L: 288,
                     S: this,
                     C: (f, a) => f(...a)
                   });
@@ -1913,7 +1911,7 @@ var InvitationsHandler = class {
                         attempt
                       }, {
                         F: __dxlog_file7,
-                        L: 300,
+                        L: 299,
                         S: this,
                         C: (f, a) => f(...a)
                       });
@@ -1930,7 +1928,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 311,
+                L: 310,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1942,7 +1940,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 322,
+                L: 321,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1954,7 +1952,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 324,
+                L: 323,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1964,7 +1962,7 @@ var InvitationsHandler = class {
                   ...protocol.toJSON()
                 }, {
                   F: __dxlog_file7,
-                  L: 327,
+                  L: 326,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1974,7 +1972,7 @@ var InvitationsHandler = class {
               } else {
                 log5("auth failed", err, {
                   F: __dxlog_file7,
-                  L: 330,
+                  L: 329,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1985,7 +1983,7 @@ var InvitationsHandler = class {
                 error: err
               }), {
                 F: __dxlog_file7,
-                L: 333,
+                L: 332,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2003,7 +2001,7 @@ var InvitationsHandler = class {
               ...protocol.toJSON()
             }, {
               F: __dxlog_file7,
-              L: 344,
+              L: 343,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -2013,7 +2011,7 @@ var InvitationsHandler = class {
           } else {
             log5("auth failed", err, {
               F: __dxlog_file7,
-              L: 347,
+              L: 346,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -2026,7 +2024,7 @@ var InvitationsHandler = class {
     scheduleTask2(ctx, async () => {
       invariant6(invitation.swarmKey, void 0, {
         F: __dxlog_file7,
-        L: 357,
+        L: 356,
         S: this,
         A: [
           "invitation.swarmKey",
@@ -2473,7 +2471,7 @@ import { STORAGE_VERSION } from "@dxos/protocols";
 import { SpaceMember } from "@dxos/protocols/proto/dxos/client/services";
 
 // packages/sdk/client-services/src/version.ts
-var DXOS_VERSION = "0.1.58-main.d82e9a3";
+var DXOS_VERSION = "0.1.58-main.e460f33";
 
 // packages/sdk/client-services/src/packlets/services/platform.ts
 var getPlatform = () => {
@@ -2627,9 +2625,9 @@ import { AUTH_TIMEOUT as AUTH_TIMEOUT2 } from "@dxos/client-protocol";
 import { cancelWithContext as cancelWithContext2, Context as Context7 } from "@dxos/context";
 import { timed } from "@dxos/debug";
 import { createMappedFeedWriter } from "@dxos/echo-pipeline";
-import { CancelledError, SystemError } from "@dxos/errors";
 import { PublicKey as PublicKey7 } from "@dxos/keys";
 import { log as log10 } from "@dxos/log";
+import { CancelledError, SystemError } from "@dxos/protocols";
 import { SpaceState } from "@dxos/protocols/proto/dxos/client/services";
 import { AdmittedFeed as AdmittedFeed3 } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { Timeframe as Timeframe2 } from "@dxos/timeframe";
@@ -2938,7 +2936,7 @@ var DataSpace = class DataSpace2 {
     this._signingContext = params.signingContext;
     this._callbacks = params.callbacks ?? {};
     this.authVerifier = new TrustedKeySetAuthVerifier({
-      trustedKeysProvider: () => new ComplexSet2(PublicKey7.hash, Array.from(this._inner.spaceState.members.keys())),
+      trustedKeysProvider: () => new ComplexSet2(PublicKey7.hash, Array.from(this._inner.spaceState.members.values()).filter((member) => !member.removed).map((member) => member.key)),
       update: this._inner.stateUpdate,
       authTimeout: AUTH_TIMEOUT2
     });
@@ -2948,7 +2946,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 112,
+      L: 118,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2991,7 +2989,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 159,
+      L: 165,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3009,7 +3007,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 173,
+      L: 179,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3040,7 +3038,7 @@ var DataSpace = class DataSpace2 {
         if (err instanceof CancelledError) {
           log10("data pipeline initialization cancelled", err, {
             F: __dxlog_file12,
-            L: 205,
+            L: 211,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3048,7 +3046,7 @@ var DataSpace = class DataSpace2 {
         }
         log10.error("Error initializing data pipeline", err, {
           F: __dxlog_file12,
-          L: 209,
+          L: 215,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -3057,7 +3055,7 @@ var DataSpace = class DataSpace2 {
           state: SpaceState[this._state]
         }, {
           F: __dxlog_file12,
-          L: 211,
+          L: 217,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -3077,7 +3075,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 227,
+      L: 233,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3088,7 +3086,7 @@ var DataSpace = class DataSpace2 {
     await cancelWithContext2(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
     log10("waiting for data pipeline to reach target timeframe", void 0, {
       F: __dxlog_file12,
-      L: 241,
+      L: 247,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3099,7 +3097,7 @@ var DataSpace = class DataSpace2 {
     this.metrics.dataPipelineReady = /* @__PURE__ */ new Date();
     log10("data pipeline ready", void 0, {
       F: __dxlog_file12,
-      L: 250,
+      L: 256,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3109,7 +3107,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 254,
+      L: 260,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3125,7 +3123,7 @@ var DataSpace = class DataSpace2 {
     await this._createWritableFeeds();
     log10("writable feeds created", void 0, {
       F: __dxlog_file12,
-      L: 270,
+      L: 276,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3230,7 +3228,7 @@ var DataSpace = class DataSpace2 {
       state: SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 386,
+      L: 392,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3684,10 +3682,9 @@ DataSpaceManager = _ts_decorate4([
 import { EventSubscriptions as EventSubscriptions2, UpdateScheduler, scheduleTask as scheduleTask5 } from "@dxos/async";
 import { Stream as Stream10 } from "@dxos/codec-protobuf";
 import { raise as raise2 } from "@dxos/debug";
-import { SpaceNotFoundError } from "@dxos/echo-pipeline";
-import { ApiError } from "@dxos/errors";
+import { invariant as invariant12 } from "@dxos/invariant";
 import { log as log12 } from "@dxos/log";
-import { encodeError } from "@dxos/protocols";
+import { ApiError, SpaceNotFoundError, encodeError } from "@dxos/protocols";
 import { SpaceMember as SpaceMember3, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
 var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
@@ -3787,8 +3784,8 @@ var SpacesServiceImpl = class {
       });
     });
   }
-  queryCredentials({ spaceKey }) {
-    return new Stream10(({ ctx, next }) => {
+  queryCredentials({ spaceKey, noTail }) {
+    return new Stream10(({ ctx, next, close }) => {
       const space = this._spaceManager.spaces.get(spaceKey) ?? raise2(new SpaceNotFoundError(spaceKey));
       const processor = {
         processCredential: async (credential) => {
@@ -3796,17 +3793,62 @@ var SpacesServiceImpl = class {
         }
       };
       ctx.onDispose(() => space.spaceState.removeCredentialProcessor(processor));
-      scheduleTask5(ctx, () => space.spaceState.addCredentialProcessor(processor));
+      scheduleTask5(ctx, async () => {
+        await space.spaceState.addCredentialProcessor(processor);
+        if (noTail) {
+          close();
+        }
+      });
     });
   }
   async writeCredentials({ spaceKey, credentials }) {
     const space = this._spaceManager.spaces.get(spaceKey) ?? raise2(new SpaceNotFoundError(spaceKey));
     for (const credential of credentials ?? []) {
-      await space.controlPipeline.writer.write({
-        credential: {
-          credential
-        }
-      });
+      if (credential.proof) {
+        await space.controlPipeline.writer.write({
+          credential: {
+            credential
+          }
+        });
+      } else {
+        invariant12(!credential.id, "Id on unsigned credentials is not allowed", {
+          F: __dxlog_file14,
+          L: 168,
+          S: this,
+          A: [
+            "!credential.id",
+            "'Id on unsigned credentials is not allowed'"
+          ]
+        });
+        invariant12(this._identityManager.identity, "Identity is not available", {
+          F: __dxlog_file14,
+          L: 169,
+          S: this,
+          A: [
+            "this._identityManager.identity",
+            "'Identity is not available'"
+          ]
+        });
+        const signer = this._identityManager.identity.getIdentityCredentialSigner();
+        invariant12(credential.issuer.equals(signer.getIssuer()), void 0, {
+          F: __dxlog_file14,
+          L: 171,
+          S: this,
+          A: [
+            "credential.issuer.equals(signer.getIssuer())",
+            ""
+          ]
+        });
+        const signedCredential = await signer.createCredential({
+          subject: credential.subject.id,
+          assertion: credential.subject.assertion
+        });
+        await space.controlPipeline.writer.write({
+          credential: {
+            credential: signedCredential
+          }
+        });
+      }
     }
   }
   async createEpoch({ spaceKey }) {
@@ -3845,7 +3887,7 @@ var SpacesServiceImpl = class {
               displayName: member.assertion.profile?.displayName
             }
           },
-          presence: isMe || peers.length > 0 ? SpaceMember3.PresenceState.ONLINE : SpaceMember3.PresenceState.OFFLINE,
+          presence: member.removed ? SpaceMember3.PresenceState.REMOVED : isMe || peers.length > 0 ? SpaceMember3.PresenceState.ONLINE : SpaceMember3.PresenceState.OFFLINE,
           peerStates: peers
         };
       }),
@@ -3864,11 +3906,11 @@ import { getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credent
 import { failUndefined as failUndefined3 } from "@dxos/debug";
 import { valueEncoding, MetadataStore, SpaceManager, DataServiceSubscriptions, SnapshotStore } from "@dxos/echo-pipeline";
 import { FeedFactory, FeedStore } from "@dxos/feed-store";
-import { invariant as invariant12 } from "@dxos/invariant";
+import { invariant as invariant13 } from "@dxos/invariant";
 import { Keyring } from "@dxos/keyring";
 import { PublicKey as PublicKey9 } from "@dxos/keys";
 import { log as log13 } from "@dxos/log";
-import { STORAGE_VERSION as STORAGE_VERSION2, trace as trace7 } from "@dxos/protocols";
+import { InvalidStorageVersionError, STORAGE_VERSION as STORAGE_VERSION2, trace as trace7 } from "@dxos/protocols";
 import { Invitation as Invitation6 } from "@dxos/protocols/proto/dxos/client/services";
 import { BlobStore } from "@dxos/teleport-extension-object-sync";
 import { trace as Trace2 } from "@dxos/tracing";
@@ -3992,7 +4034,7 @@ var ServiceContext = class ServiceContext2 {
   }
   getInvitationHandler(invitation) {
     const factory = this._handlerFactories.get(invitation.kind);
-    invariant12(factory, `Unknown invitation kind: ${invitation.kind}`, {
+    invariant13(factory, `Unknown invitation kind: ${invitation.kind}`, {
       F: __dxlog_file15,
       L: 174,
       S: this,
@@ -4011,7 +4053,7 @@ var ServiceContext = class ServiceContext2 {
   async _checkStorageVersion() {
     await this.metadataStore.load();
     if (this.metadataStore.version !== STORAGE_VERSION2) {
-      throw new Error(`Invalid storage version: current=${this.metadataStore.version}, expected=${STORAGE_VERSION2}`);
+      throw new InvalidStorageVersionError(STORAGE_VERSION2, this.metadataStore.version);
     }
   }
   // Called when identity is created.
@@ -4039,7 +4081,7 @@ var ServiceContext = class ServiceContext2 {
     this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.feedStore);
     await this.dataSpaceManager.open();
     this._handlerFactories.set(Invitation6.Kind.SPACE, (invitation) => {
-      invariant12(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
+      invariant13(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
         F: __dxlog_file15,
         L: 218,
         S: this,
@@ -4245,7 +4287,7 @@ var isLocked = (lockPath) => {
 
 // packages/sdk/client-services/src/packlets/storage/storage.ts
 import { DX_DATA } from "@dxos/client-protocol";
-import { InvalidConfigError } from "@dxos/errors";
+import { InvalidConfigError } from "@dxos/protocols";
 import { Runtime } from "@dxos/protocols/proto/dxos/config";
 import { createStorage, StorageType } from "@dxos/random-access-storage";
 import { isNode } from "@dxos/util";
@@ -4322,7 +4364,7 @@ import { clientServiceBundle } from "@dxos/client-protocol";
 import { Context as Context10 } from "@dxos/context";
 import { DocumentModel as DocumentModel2 } from "@dxos/document-model";
 import { DataServiceImpl } from "@dxos/echo-pipeline";
-import { invariant as invariant13 } from "@dxos/invariant";
+import { invariant as invariant14 } from "@dxos/invariant";
 import { PublicKey as PublicKey10 } from "@dxos/keys";
 import { log as log16 } from "@dxos/log";
 import { WebsocketSignalManager } from "@dxos/messaging";
@@ -4679,7 +4721,7 @@ var ClientServicesHost = class ClientServicesHost2 {
   * Can only be called once.
   */
   initialize({ config, ...options }) {
-    invariant13(!this._open, "service host is open", {
+    invariant14(!this._open, "service host is open", {
       F: __dxlog_file17,
       L: 184,
       S: this,
@@ -4695,7 +4737,7 @@ var ClientServicesHost = class ClientServicesHost2 {
       C: (f, a) => f(...a)
     });
     if (config) {
-      invariant13(!this._config, "config already set", {
+      invariant14(!this._config, "config already set", {
         F: __dxlog_file17,
         L: 188,
         S: this,
@@ -4713,7 +4755,7 @@ var ClientServicesHost = class ClientServicesHost2 {
       iceServers: this._config?.get("runtime.services.ice")
     }), signalManager = new WebsocketSignalManager(this._config?.get("runtime.services.signaling") ?? []) } = options;
     this._signalManager = signalManager;
-    invariant13(!this._networkManager, "network manager already set", {
+    invariant14(!this._networkManager, "network manager already set", {
       F: __dxlog_file17,
       L: 204,
       S: this,
@@ -4747,7 +4789,7 @@ var ClientServicesHost = class ClientServicesHost2 {
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant13(this._config, "config not set", {
+    invariant14(this._config, "config not set", {
       F: __dxlog_file17,
       L: 224,
       S: this,
@@ -4756,7 +4798,7 @@ var ClientServicesHost = class ClientServicesHost2 {
         "'config not set'"
       ]
     });
-    invariant13(this._storage, "storage not set", {
+    invariant14(this._storage, "storage not set", {
       F: __dxlog_file17,
       L: 225,
       S: this,
@@ -4765,7 +4807,7 @@ var ClientServicesHost = class ClientServicesHost2 {
         "'storage not set'"
       ]
     });
-    invariant13(this._signalManager, "signal manager not set", {
+    invariant14(this._signalManager, "signal manager not set", {
       F: __dxlog_file17,
       L: 226,
       S: this,
@@ -4774,7 +4816,7 @@ var ClientServicesHost = class ClientServicesHost2 {
         "'signal manager not set'"
       ]
     });
-    invariant13(this._networkManager, "network manager not set", {
+    invariant14(this._networkManager, "network manager not set", {
       F: __dxlog_file17,
       L: 227,
       S: this,
@@ -4963,4 +5005,4 @@ export {
   createDefaultModelFactory,
   ClientServicesHost
 };
-//# sourceMappingURL=chunk-G762UGCU.mjs.map
+//# sourceMappingURL=chunk-PNAXUNJ7.mjs.map